last executing test programs: 1m28.120205217s ago: executing program 4 (id=901): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) capget(&(0x7f0000000000)={0x20071026}, 0x0) 1m26.744628227s ago: executing program 4 (id=908): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000203c683dbfc0000000000000400004a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) 1m26.494826736s ago: executing program 4 (id=912): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 1m26.331358937s ago: executing program 4 (id=915): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@noload}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002f40)='./bus\x00', 0x1020020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 1m25.678775343s ago: executing program 4 (id=923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000094, 0x0, 0xfffffffffffffffd}]}) 1m24.882359669s ago: executing program 0 (id=934): r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r0, 0x402, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) 1m24.800434819s ago: executing program 4 (id=926): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x1ff}]}, &(0x7f0000000140)=0x10) listen(r0, 0x1) 1m24.702129282s ago: executing program 0 (id=927): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x800) 1m24.395240816s ago: executing program 32 (id=926): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x1ff}]}, &(0x7f0000000140)=0x10) listen(r0, 0x1) 1m24.388214267s ago: executing program 0 (id=929): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0xb, 0x0, 0x0, 0x1, r1}]) 1m23.928730868s ago: executing program 0 (id=936): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m23.678755727s ago: executing program 0 (id=939): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) close(r0) 1m23.052717651s ago: executing program 0 (id=946): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x0) sigaltstack(&(0x7f0000000000)={0x0, 0x100000000}, 0x0) 1m22.652376788s ago: executing program 33 (id=946): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x0) sigaltstack(&(0x7f0000000000)={0x0, 0x100000000}, 0x0) 4.780280287s ago: executing program 2 (id=1596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbd725020000000900010073797a3200000000140002"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 4.482743345s ago: executing program 2 (id=1599): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 4.100224716s ago: executing program 2 (id=1604): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x8, 0x0, r1, 0x3e3e3e3e}) 3.717297538s ago: executing program 2 (id=1608): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 3.394466305s ago: executing program 2 (id=1612): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1530, &(0x7f0000002f80)="$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") syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[@ANYBLOB='umask=00000000000000000000011,namecase=1,errors=continue,allow_utime=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,umask=00000000000000000005676,keep_last_dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp865,dmask=00000000000000000000001,discard,uid=', @ANYRESHEX=0xee00, @ANYBLOB="969043c7ff1774ebb8582e00"], 0x80, 0x1500, &(0x7f0000000580)="$eJzs3AuYzlXXMPC99t5/xjTpbpLDsNdef+402CZJckjIIUmSJMkpITFJkpAYckoakpBzksMQksM0Jo3z+ZBz0uSRJklCcgr7u/T0vp736Xnevvd7+j7f9cz6Xde+Zq/5z1r32rPmmvt/39c1832PkXWa1a3ZhIjEvwT++iFFCBEjhBgqhLhBCBEIISrEV4i/cj2fgpR/7UHYn+vRtGvdAbuWeP65G88/d+P55248/9yN55+78fxzN55/7sbzZyw32z6nyI28cu/i9/9zM37+/zeSU3bS1xvL3tzzf5DC88/deP65G88/d+P55248/9yN5//vr8Z/c43nn7vx/BnLza71+8+8ru261j9/jDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyh3P+Ki2E+I/9te6LMcYYY4wxxhhjfx6f91p3wBhjjDHGGGOMsf/7QEihhBaByCPyihiRT8SK60ScuF7kFzeIiLhRxIubRAFxsygoConCoohIEEVFMWEECitIhKK4KCGi4hZRUtwqEkUpUVqUEU6UFUniNlFO3C7KiztEBXGnqCjuEpVEZVFFVBV3i2riHlFd1BA1xb2ilqgt6oi64j5RT9wv6osHRAPxoGgoHhKNxMOisXhENBGPiqbiMdFMPC6aiydEC9FStBKtRZv/o/yXRR/xiugr+okU0V8MEK+KgWKQGCyGiKHiNTFMvC6GizdEqhghRoo3xSjxlhgt3hZjxFgxTrwjxosJYqKYJCaLKWKqeFdME++J6eJ9MUPMFLPEbJEm5oi54gMxT8wXC8SHYqH4SCwSi8USsVSki49FhlgmMsUnYrn4VGSJFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2i8/EDrFT7BK7xR6xV+wTn4v94gtxQHwpssVX/8P8s3+X3xMECJAgQYOGPJAHYiAGYiEW4iAO8kN+iEAE4iEeCkABKAgFoTAUhgRIgGJQDBAQCAiKQ3GIQhRKQklIhEQoDaXBgYMkSIJycDuUh/JQASpARagIlaAyVIaqUBWqQTWoDtWhJtSEWlAL6kAduA/ug/uhPtSHBtAAGkJDaASNoDE0hibQBJpCU2gGzaA5NIcW0AJaQStoA22gLbSFdtAOOkAH6AgdoRN0gmRIhi7QBbpCV+gG3aA7dIce0AN6Qi/oBS/Dy/AKvAL9oJbsDwNgAAyEgTAYhsAQeA2GwevwOrwBqTACRsKb8Ca8BaPhDIyBsTAOxkE1OQEmwiQgOQWmwlSYBtNgOkyHGTATZsJsSIM5MBfmwjyYD/PhQ1gIH8FHsBgWw1JIh3TIgGWQCZmwHM5CFqyAlbAKVsMaWA3rYD2sg42wCTbCFtgC22AbfAafwU7YCbthN+yFvfA5fA5fwBeQCtmQDQfhIByCQ3AYDkMO5MAROAJH4Sgcg2NwHI7DCTgJp+AknIbTcAbOwjk4BxfgAlyEFxO+bbq31IZUIa/QUss8Mo+MkTEyVsbKOBkn88v8MiIjMl7GT1FCyIKyoCwsC8sEmSCLyWISJUqSoSwui8cIIWRJWVImykRZWpaWTjqZJJNkOVlOlpflZQV5p6wo75KVZGXZ3lWVVWU12cFVlzVkTVlT1pK1ZR1ZV9aV9WQ9WV/Wlw1kA9lQNpSN5MOysewPg+FReWUyzeQIaC5HQgvZUraSreVb8KRsK0dDO9ledpBPy7EwBjrJti5ZPiu7yInQVT4vJ8ELsrucAj3kS7Kn7CV7y5dlH9nO9ZX95AzoLwfI2TBQDpKD5RA5D2rLKxOrI9+QqXKEHCnflEvhLTlavi3HyLFynHxHjpcT5EQ5SU6WU+RU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5F3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6FaeuV/nVDSqiblTx6iZVQN2sCqpCqrAqohJUUVVMGYXKKlKhKq5KqKi6RZVUt6pEVUqVVmWUU2VVkrpNlVO3q/LqDlVB3akqqrtUJVVZVVFV1d2qmrpHVVc1VE11r6qlaqs6qq66T9VT96v66gHVQD2oGqqHVCP1sGqsHlFN1KOqqXpMNVOPq+bqCdVCtVStVGvVRj2p2qqnVDvVXnVQT6uO6hnVSXVWyepZ1UU9p7qq51U39YLqrl5UPdRLqqfqpXqrS+qy8qqv6qdSVH81QL2qBqpBarAaooaq19Qw9boart5QqWqEGqneVKPUW2q0eluNUWPVOPWOGq8mqIlqkpqspqip6l01Tb2npqv31Qw1U81Ss1WamqMG/1Zpwd/l9//tWfdv89/7B/nDf330bWq7+kztUDvVLrVb7VF71T61T+1X+9UBdUBlq2x1UB1Uh9QhdVgdVjkqRx1RR9RRdVQdU8fUcXVcnVAn1Xn1kzqtflZn1Fl1Vp1XF9QFdfG374HQoKVWWutA59F5dYzOp2P1dTpOX6/z6xt0RN+o4/VNuoC+WRfUhXRhXUQn6KK6mDYatdWkQ11cl9BRfYsuqW/VibqULq3LaKfL6iR927+c/0f9tdFtdFvdVrfT7XQH3UF31B11J91JJ+tk3UV30V11V91Nd9PddXfdQ/fQPXVP3Vv31n10H91X99UpOkUP0K/qgXqQHqyH6KH6NT1MD9PD9XCdqlP1SD1Sj9Kj9Gg9Wo/RY/Q4PU6P1+P1RD1RT9aTX/xtnHq6nq5n6Bl6lp6l03Sanqvn6nl6nl6gF+iFeqFepBfpJXqJTtfpOkNn6EydqZdrobP0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pv0Fr1FZ+nterveoXfoXXqX3qP36H16n96v9+sD+oDO1tn6oD6oD+lD+rA+rHN0jj6ij+ij+qg+po/1P66P6xP6hD6lT+nT+rQ+o8/oc/qcvqAv6Iv6or6sL1+57QtkIAMd6CBPkCeICWKC2CA2iAvigvxB/iASRIL4ID4oENwcFAwKBYWDIkFCUDQoFpgAAxtQEAbFgxJBNLglKBncGiQGpYLSQZnABWWDpOC2oFxwe1A+uCOoENwZVAzuCioFlYMqQdXg7qBacE9QPagR1AzuDWoFtYM6Qd3gvqBecH9QP3ggaBA8GDQMHgoaBQ8HjYNHgibBo0HT4LGgWfB40Dx4ImgRtAxaBa2DNn9qfe/PFHrK9TX9TIrpbwaYV81AM8gMNkPMUPOaGWZeN8PNGybVjDAjzZtmlHnLjDZvmzFmrBln3jHjzQQz0Uwyk80UM9W8a6aZ98x0876ZYWaaWWa2STNzzFzzgZln5psF5kOz0HxkFpnFZolZatLNxybDLDOZ5hOz3HxqsswKs9KsMqvNmvM3CmHWmw1mo9lkNpstZqvZZrabz8wOs9PsMrvNHrPX7DOfm/3mC3PAfGmyzVfmoPmLOWS+NofNNybHfGuOmO/MUfO9OWZ+MMfNj+aEOWlOmZ/MafOzOWPOmnPmvLlgfjEXzSVz2fgrN/dXnt5Ro8Y8mAdjMAZjMRbjMA7zY36MYATjMR4LYAEsiAWxMBbGBEzAYlgMryAkLI7FMYpRLIklMRETsTSWRocOkzAJy2E5LI/lsQJWwIpYESthJayCVfBuvBvvwXuwBtbAe/FerI21sS7WxXpYD+tjfWyADbAhNsRG2AgbY2Nsgk2wKTbFZtgMm2NzbIEtsBW2wjbYBttiW2yH7bADdsCO2BE7YSdMxmTsgl2wK3bFbtgNu2N37IE9sCf2xN7YG/tgH+yLfTEFU3AADsCBOBAH42AcikNxGA7D4TgcUzEVR+JIHIWjcDSOxjE4FsfhOzgeJ+BEnISTcQpOxak4DafhdJyOM3AGzsJZmIZpOBfn4jychwtwAS7EhbgIF+ESXILpmI4ZmIGZmInLcTlmYRauxJW4GlfjWlyL63E9bsSNuBk341bcittxO+7AHbgLd+Ee3IP7cB/ux/14AA9gNmbjQTyIh/AQHsbDmIM5eASP4FE8isfwGB7H43gCT+ApPIWn8TSewTN4Ds/hBfwFL+IlvIweY6wUsfY6G2evt/ntDTbG5rN/Gxe2RWyCLWqLWWML2kL/JUZrbaItZUvbMtbZsjbJ3va7uJKtbKvYqvZuW83eY6v/Lq5n77f17QO2gX3Q1rX3/Rbn/TVuaB+yjezjtrF9wjaxLW1T29o2s4/b5vYJ28K2tK1sa9vRPmM72c422T5ru9jnfhdn2GV2vd1gN9pNdr/9wp6z5+1R+729YH+xfW0/O9S+ZofZ1+1w+4ZNtSN+F4+z79jxdoKdaCfZyXbK7+JZdrZNs3PsXPuBnWfn/y5Otx/bhTbTLrKL7RK79Nf4Sk+Z9hO73H5qs+wKu9KusqvtGrvWrvvPXlfZLXar3Wb32c/tDrvT7rK77R6799f4yjkO2C9ttv3KHrHf2UP2a3vYHrM59ttf4yvnO2Z/sMftj/aEPWlP2Z/safuzPWPP/nr+K2f/yV6yl623goAkKdIUUB7KSzGUj2LpOoqj6yk/3UARupHi6SYqQDdTQSpEhakIJVBRKkaGkCwRhVScSlCUbqGSdCslUikqTWXIUVlKotuoHN1O5ekOqkB3UkW6iypRZapCVeluqkb3UHWqQTXpXqpFtakO1aX7qB7dT/XpAWpAD1JDeoga0cPUmB6hJvQoNaXHqBk9Ts3pCWpBLakVtaY29CS1paeoHbWnDvQ0daRnqBN1pmR6lrrQc9SVnqdu9AJ1pxepB71EPakX9aaXqQ+9Qn2pH6VQfxpAr9JAGkSDaQgNpddoGL1Ow+kNSqURNJLepFH0Fo2mt2kMjaVx9A6Npwk0kSbRZJpCU+ldOpveufCVm4MZNJNm0WxKozk0lz6geTSfFtCHtJA+okW0mJbQUkqnjymDllEmfULL6VPKohW0klbRalpDa2kdracNtJE20WbaQltpG22nz2gH7aRdtJv20F7aR5/TfvqCDtCXlE1f0UH6Cx2ir+kwfUM59C0doe/oKH1Px+gHOk4/0gk6SafoJzpNP9MZOkvn6DxdoF/oIl2iy+RJhBDKUIU6DMI8Yd4wJswXxobXhXHh9WH+8IYwEt4Yxoc3hQXCm8OCYaGwcFgkTAiLhsVCE2JoQwrDsHhYIoyGt4Qlw1vDxLBUWDosE7qwbJgU3haWC28Py4d3hBXCO8OK4V1hpbBy+PiDVcO7w2rhPWH1sEZYM7w3rBXWDuuEdcP7wnrh/WH98IGwQfhgWD58KGwUPhw2Dh8Jm4SPhk3Dx8Jm4eNh8/CJsEXYMmwVtg7bhE+GbcOnwnZh+7BD+HTYMXwm7BR2DpPDZ8Mu4XN/eD0l7B8OCF8NXw29f0AtiS6Npkc/jmZEl0Uzo59El0c/jWZFV0RXRldFV0fXRNdG10XXRzdEN0Y3RTdHt0S3RrdFva+bVzhw0imnXeDyuLwuxuVzse46F+eud/ndDS7ibnTx7iZXwN3sCrpCrrAr4hJcUVfMGYfOOnKhK+5KuKi7xZV0t7pEV8qVdmWcc2Vdkmvt2rg2rq17yrVz7V0H97R72j3jnnGdXWf3rOvinnNd3fOum3vBdXcvuhfdS66n6+V6u5ddH/eK6+v6uRSX4ga4AW6gG+gGu8FuqBvqhrlhbrgb7lJdqhvpRrpRbpQb7Ua7MW6MG+fGufFuvJvoJrrJbrKb6qa6aW6am+6muxluhpvlZrk0l+bmurlunpvnFrgFbmHiQrfILXJL3BKX7tJdhstwmS7TLXfLXZbLcivdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXDZLtsddAfdIXfIHXbfuBz3rTvivnNH3ffumPvBHXc/uhPupDvlfnKn3c/ujDvrzrnz7oL7xV10l9xl593UyLuRaZH3ItMj70dmRGZGZkVmR9IicyJzIx9E5kXmRxZEPowsjHwUWRRZHFkSWRpJj3wcyYgsi2RGPoksj3wayYqsiKyMrIqsjqyJeF90R+iL+xI+6m/xJf2tPtGX8qV9Ge98WZ/kb/Pl/O2+vL/DV/B3+or+Ll/JV/ZV/BO+hW/pW/nWvo1/0rf1T/l2vr3v4J/2Hf0zvpPv7JP9s76Lf8539c/7bv4F392/6Hv4l3xP38v39i/7Pv4V39f38ym+vx/gX/UD/SA/2A/xQ/1rfph/3Q/3b/hUP8KP9G/6Uf4tP9q/7cf4sX6cf8eP9xP8RD/JT/ZT/FT/rp/m3/PT/ft+hp/pZ/nZPs3P8XP9B36en+8X+A/9Qv+RX+QX+yV+qU/3H/sMv8xn+k/8cv+pz/Ir/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/kdfqff5Xf7PX6v3+c/9/v9F/6A/9Jn+6/8Qf8Xf8h/7Q/7b3yO/9Yf8d/5o/57f8z/4I/7H/0Jf9Kf8j/50/5nf8af9ef8eX/B/+Iv+kv+Mv/NGmOMMcbY/xb1B9f7/4PPyd/WFQOEENfvLJLz9zU3F/zrfpBM6BgRQjzbr8ej/7Fq1UpJSfnr5Rr/mRS5mp/nb+IVooN4RiSL9qLcP+xvkOx1gf55fZGlRBC9U4jYq5V/FSv+vv7t/6T+k0+Py6gYnov/b+ovFiKxxNWcfOJqfLV++X9Sv1DbP+g/39dThWj3Nzlx4mp8tX6SeEo8J5L/y1cyxhhjjDHGGGN/NUhW6fZHr59LLBYiQV/NySuuxn/0+pwxxhhjjDHGGGPX3gu9end+Mjm5fTfe/Aub6v9/tMEb3vxpm2v9m4kxxhhjjDH2Z7t603+tO2GMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKv/xf/Tuxan5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi71v5XAAAA//8V2TSa") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) 2.900418714s ago: executing program 5 (id=1617): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=0x0, @ANYBLOB="1200a4de5afa76e8e40d368d5d01b253ed66d75eed04f03551e170436446"], 0x1, 0x244, &(0x7f0000000580)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)='./mnt\x00') 2.846881094s ago: executing program 2 (id=1618): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x7780) syz_usb_disconnect(r0) 2.357071854s ago: executing program 5 (id=1624): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.198199746s ago: executing program 1 (id=1625): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000300)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@utf8}, {@dmode={'dmode', 0x3d, 0x5}}, {@longad}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@uid}, {@dmode={'dmode', 0x3d, 0x4}}, {@nostrict}, {@gid_forget}, {@undelete}, {@gid_forget}, {@uid}]}, 0x3, 0xc80, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r0, 0x6, 0x3) getdents64(r0, 0x0, 0x22) 1.759588s ago: executing program 1 (id=1627): setresuid(0xee01, 0xee01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) 1.672388386s ago: executing program 5 (id=1629): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x8e9}, {0xa, 0x0, 0xfffffffe, @local}, r1}}, 0x48) close(r0) 1.504808095s ago: executing program 1 (id=1631): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000500)={{0xa, 0xe, 0x2, 0x3}, 'syz0\x00', 0x2f}) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.435694716s ago: executing program 6 (id=1633): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000040)={0x8, 0x4}) 1.286006028s ago: executing program 5 (id=1634): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x102}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0x117e) 1.182945754s ago: executing program 1 (id=1636): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x6, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20) 1.135140964s ago: executing program 6 (id=1637): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.030289557s ago: executing program 5 (id=1639): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 1.017005503s ago: executing program 1 (id=1640): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 942.266091ms ago: executing program 6 (id=1641): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) tee(r2, r1, 0x2000200000000, 0x3) 768.971503ms ago: executing program 1 (id=1643): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000b40)="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", 0xaf0}, {0x0}], 0x2) 695.328147ms ago: executing program 3 (id=1644): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x4, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 536.889258ms ago: executing program 3 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) 492.402408ms ago: executing program 6 (id=1646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010000, 0x0, 0x5}]}) 390.811416ms ago: executing program 3 (id=1647): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000400)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580"], 0x1, 0x9e15, &(0x7f000000a040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x10000, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 193.091996ms ago: executing program 3 (id=1648): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b16f8ff00000000b7080000683200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000f0000b705000008000000850000007600000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 125.068798ms ago: executing program 6 (id=1649): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x10, 0x0) 73.71185ms ago: executing program 3 (id=1650): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 1.275093ms ago: executing program 3 (id=1651): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x25dfdbfc, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x200000000000}, 0x8002, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1, 0x8000000}, 0x3, 0x3}, 0x1}}}}}}}, 0x0) 0s ago: executing program 6 (id=1652): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): nect, device number 9 [ 161.679218][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.786736][ T29] cp210x 1-1:0.0: device disconnected [ 162.101724][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.120145][ T8024] sctp: [Deprecated]: syz.1.813 (pid 8024) Use of int in max_burst socket option. [ 162.120145][ T8024] Use struct sctp_assoc_value instead [ 162.414171][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.609874][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 163.042193][ T8030] loop3: detected capacity change from 0 to 40427 [ 163.068847][ T8030] F2FS-fs (loop3): build fault injection rate: 771 [ 163.094089][ T8030] F2FS-fs (loop3): invalid crc value [ 163.109675][ T8032] loop0: detected capacity change from 0 to 32768 [ 163.133849][ T8032] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.816 (8032) [ 163.169001][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.222272][ T8032] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 163.274427][ T8032] BTRFS info (device loop0): using blake2b checksum algorithm [ 163.421389][ T8032] BTRFS info (device loop0): enabling ssd optimizations [ 163.432657][ T8030] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 163.450070][ T8032] BTRFS info (device loop0): turning on async discard [ 163.470150][ T8032] BTRFS info (device loop0): enabling free space tree [ 163.493537][ T8030] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.563109][ T5854] syz-executor: attempt to access beyond end of device [ 163.563109][ T5854] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.630342][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 163.630371][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.630385][ T5854] Call Trace: [ 163.630394][ T5854] [ 163.630403][ T5854] dump_stack_lvl+0xe8/0x150 [ 163.630444][ T5854] f2fs_stop_checkpoint+0x3c7/0x590 [ 163.630486][ T5854] f2fs_write_end_io+0x12e5/0x17a0 [ 163.630556][ T5854] __submit_merged_bio+0x256/0x6a0 [ 163.630599][ T5854] __submit_merged_write_cond+0x3c9/0x4e0 [ 163.630642][ T5854] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 163.630705][ T5854] f2fs_write_data_pages+0x287e/0x34f0 [ 163.630729][ T5854] ? unwind_next_frame+0xa6/0x2550 [ 163.630795][ T5854] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 163.630817][ T5854] ? is_bpf_text_address+0x26/0x2b0 [ 163.630861][ T5854] ? arch_stack_walk+0xfb/0x150 [ 163.630921][ T5854] ? add_lock_to_list+0xc7/0x100 [ 163.630947][ T5854] ? lockdep_unlock+0x5d/0xd0 [ 163.630974][ T5854] ? __lock_acquire+0x146e/0x2cf0 [ 163.631038][ T5854] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.631079][ T5854] ? do_raw_spin_unlock+0xf5/0x210 [ 163.631107][ T5854] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 163.631132][ T5854] do_writepages+0x32e/0x550 [ 163.631173][ T5854] ? do_raw_spin_unlock+0xf5/0x210 [ 163.631205][ T5854] filemap_fdatawrite+0x1e9/0x2f0 [ 163.631237][ T5854] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 163.631321][ T5854] ? do_raw_spin_unlock+0xf5/0x210 [ 163.631354][ T5854] f2fs_sync_dirty_inodes+0x30e/0x830 [ 163.631398][ T5854] f2fs_write_checkpoint+0x9df/0x26a0 [ 163.631465][ T5854] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 163.631550][ T5854] ? kfree+0x1c5/0x640 [ 163.631579][ T5854] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 163.631618][ T5854] kill_f2fs_super+0x314/0x730 [ 163.631650][ T5854] ? __pfx_kill_f2fs_super+0x10/0x10 [ 163.631691][ T5854] ? lockdep_hardirqs_on+0x7a/0x110 [ 163.631737][ T5854] deactivate_locked_super+0xbc/0x130 [ 163.631773][ T5854] cleanup_mnt+0x437/0x4d0 [ 163.631794][ T5854] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.631835][ T5854] task_work_run+0x1d9/0x270 [ 163.631864][ T5854] ? __pfx_task_work_run+0x10/0x10 [ 163.631899][ T5854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.631922][ T5854] exit_to_user_mode_loop+0xed/0x480 [ 163.631948][ T5854] ? rcu_is_watching+0x15/0xb0 [ 163.631970][ T5854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.631991][ T5854] do_syscall_64+0x33e/0xf80 [ 163.632017][ T5854] ? trace_irq_disable+0x3b/0x140 [ 163.632041][ T5854] ? clear_bhb_loop+0x40/0x90 [ 163.632067][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.632087][ T5854] RIP: 0033:0x7f6b6d99da57 [ 163.632108][ T5854] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 163.632124][ T5854] RSP: 002b:00007ffdd6ac9f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 163.632145][ T5854] RAX: 0000000000000000 RBX: 00007f6b6da32048 RCX: 00007f6b6d99da57 [ 163.632159][ T5854] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd6aca050 [ 163.632171][ T5854] RBP: 00007ffdd6aca050 R08: 00007ffdd6acb050 R09: 00000000ffffffff [ 163.632185][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd6acb0e0 [ 163.632197][ T5854] R13: 00007f6b6da32048 R14: 0000000000027eaf R15: 00007ffdd6acb120 [ 163.632233][ T5854] [ 164.033172][ T5854] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 164.079712][ T8085] Attempt to restore checkpoint with obsolete wellknown handles [ 164.182778][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.435218][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 164.555842][ T5846] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 164.673597][ T8100] loop2: detected capacity change from 0 to 128 [ 164.710796][ T8100] EXT4-fs: Ignoring removed nobh option [ 164.809039][ T8100] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.920734][ T8100] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.926710][ T8114] loop1: detected capacity change from 0 to 1024 [ 164.985931][ T8114] EXT4-fs: inline encryption not supported [ 165.004864][ T8100] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 165.067879][ T8114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 165.136004][ T8114] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.157019][ T8119] loop3: detected capacity change from 0 to 1764 [ 165.177862][ T5852] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.187827][ T8120] netlink: 48 bytes leftover after parsing attributes in process `syz.0.848'. [ 165.205114][ T8114] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.845: Freeing blocks not in datazone - block = 0, count = 16 [ 165.225874][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.306234][ T8120] ip6gre1: entered allmulticast mode [ 165.386412][ T5841] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 165.433305][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.455609][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.631390][ T29] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 165.646930][ T8129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.851'. [ 165.813830][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 165.834464][ T29] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 165.864677][ T29] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 165.898109][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.923632][ T29] usb 3-1: Product: syz [ 165.938134][ T29] usb 3-1: Manufacturer: syz [ 165.955613][ T29] usb 3-1: SerialNumber: syz [ 165.982290][ T29] usb 3-1: config 0 descriptor?? [ 166.006892][ T29] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 166.070099][ T29] usb 3-1: Detected FT232R [ 166.107275][ T8139] ref_ctr_offset mismatch. inode: 0x3e8 offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 166.182489][ T8122] loop4: detected capacity change from 0 to 32768 [ 166.214860][ T29] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 166.264483][ T8122] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.274829][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.374455][ T8153] loop0: detected capacity change from 0 to 4096 [ 166.461423][ T29] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.544958][ T8122] XFS (loop4): Ending clean mount [ 166.660783][ T29] usb 3-1: USB disconnect, device number 9 [ 166.715572][ T5848] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.752824][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 166.811499][ T29] ftdi_sio 3-1:0.0: device disconnected [ 167.089599][ T8163] loop0: detected capacity change from 0 to 4096 [ 167.130621][ T8163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.187592][ T8163] EXT4-fs (loop0): shut down requested (1) [ 167.313551][ T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.343925][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.864817][ T8186] loop3: detected capacity change from 0 to 1024 [ 168.292529][ T8200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.748805][ T5895] kernel write not supported for file /sg0 (pid: 5895 comm: kworker/0:3) [ 169.380239][ T8215] loop3: detected capacity change from 0 to 32768 [ 169.421908][ T8215] btrfs: Deprecated parameter 'usebackuproot' [ 169.435173][ T8215] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 169.462653][ T8215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.888 (8215) [ 169.502221][ T5895] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.534715][ T8215] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.556104][ T8215] BTRFS info (device loop3): using crc32c checksum algorithm [ 169.672997][ T5895] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.722930][ T5895] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 169.764818][ T8215] BTRFS info (device loop3): rebuilding free space tree [ 169.794276][ T5895] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.826553][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.870185][ T5895] usb 1-1: Product: syz [ 169.890145][ T5895] usb 1-1: Manufacturer: syz [ 169.909478][ T5895] usb 1-1: SerialNumber: syz [ 169.973571][ T8215] BTRFS info (device loop3): enabling ssd optimizations [ 169.980586][ T8215] BTRFS info (device loop3): disabling tree log [ 169.993368][ T8215] BTRFS info (device loop3): turning on flush-on-commit [ 170.002311][ T8215] BTRFS info (device loop3): enabling free space tree [ 170.009158][ T8215] BTRFS info (device loop3): force clearing of disk cache [ 170.016396][ T8215] BTRFS info (device loop3): trying to use backup root at mount time [ 170.027658][ T8215] BTRFS info (device loop3): force zlib compression, level 3 [ 170.102148][ T30] audit: type=1800 audit(1774911615.092:50): pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.888" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 170.148972][ T8234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.165042][ T8234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.205898][ T5895] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 170.234494][ T8260] loop2: detected capacity change from 0 to 1024 [ 170.275680][ T5895] usb 1-1: USB disconnect, device number 10 [ 170.364906][ T8260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.545684][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.668226][ T5854] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.721117][ T5895] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 170.891112][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 170.902751][ T5895] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 170.927250][ T5895] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 170.967785][ T5895] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.007367][ T5895] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.042155][ T5895] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 171.078604][ T5895] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.101071][ T5895] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.121236][ T5895] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.141145][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.245334][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 171.267823][ T8274] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.384777][ T5895] usb 1-1: usb_control_msg returned -71 [ 171.410130][ T8267] loop2: detected capacity change from 0 to 32768 [ 171.421585][ T5895] usbtmc 1-1:16.0: can't read capabilities [ 171.431954][ T5895] usbtmc 1-1:16.0: Failed to submit iin_urb [ 171.451363][ T5895] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -90 [ 171.494241][ T8267] JBD2: Ignoring recovery information on journal [ 171.534216][ T5895] usb 1-1: USB disconnect, device number 11 [ 171.639931][ T8267] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 171.919163][ T5852] ocfs2: Unmounting device (7,2) on (node local) [ 172.163145][ T8297] loop4: detected capacity change from 0 to 512 [ 172.267158][ T8297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.361116][ T8297] ext4 filesystem being mounted at /198/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.379365][ T8308] loop3: detected capacity change from 0 to 8 [ 172.932314][ T8315] netlink: 'syz.2.922': attribute type 2 has an invalid length. [ 172.953804][ T5848] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 173.033747][ T5848] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 173.058564][ T5848] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 173.082438][ T5848] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 173.096315][ T5848] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 173.108112][ T5848] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 173.120969][ T5848] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 173.147700][ T5848] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 173.173823][ T5848] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 173.185128][ T5848] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 173.373311][ T7478] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.817415][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.084628][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.186265][ T8336] loop2: detected capacity change from 0 to 1024 [ 174.244202][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.334239][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.345864][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.363151][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.376301][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.389266][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.436093][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.543263][ T8344] loop0: detected capacity change from 0 to 512 [ 174.555467][ T8344] EXT4-fs: Ignoring removed nobh option [ 174.573807][ T8344] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 174.624217][ T8344] EXT4-fs (loop0): 1 truncate cleaned up [ 174.662734][ T8344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.718094][ T5846] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 175.192972][ T8352] tap0: tun_chr_ioctl cmd 2147767521 [ 175.252051][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.626213][ T13] bridge_slave_1: left allmulticast mode [ 175.642255][ T13] bridge_slave_1: left promiscuous mode [ 175.661306][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.697875][ T13] bridge_slave_0: left allmulticast mode [ 175.711247][ T13] bridge_slave_0: left promiscuous mode [ 175.734107][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.947407][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.970830][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.981123][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.993188][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.000909][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.252888][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.275305][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.296502][ T13] bond0 (unregistering): Released all slaves [ 176.309805][ T8378] loop3: detected capacity change from 0 to 32768 [ 176.369972][ T8378] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.400530][ T8339] chnl_net:caif_netlink_parms(): no params data found [ 176.420819][ T8378] XFS (loop3): Ending clean mount [ 176.435636][ T8378] XFS (loop3): Quotacheck needed: Please wait. [ 176.492924][ T5162] Bluetooth: hci2: command tx timeout [ 176.619716][ T8378] XFS (loop3): Quotacheck: Done. [ 176.730685][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.752811][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.760222][ T8339] bridge_slave_0: entered allmulticast mode [ 176.768209][ T8339] bridge_slave_0: entered promiscuous mode [ 176.787066][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.794634][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.802283][ T8339] bridge_slave_1: entered allmulticast mode [ 176.818358][ T8339] bridge_slave_1: entered promiscuous mode [ 176.876645][ T5854] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 177.101351][ T8406] netlink: 44 bytes leftover after parsing attributes in process `syz.2.957'. [ 177.358940][ T8339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.456692][ T8339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.699031][ T8426] netlink: 9 bytes leftover after parsing attributes in process `syz.2.961'. [ 177.747695][ T8426] netlink: 9 bytes leftover after parsing attributes in process `syz.2.961'. [ 177.935450][ T8339] team0: Port device team_slave_0 added [ 177.954782][ T8339] team0: Port device team_slave_1 added [ 178.057513][ T8436] loop2: detected capacity change from 0 to 512 [ 178.091625][ T5162] Bluetooth: hci1: command tx timeout [ 178.130901][ T13] hsr_slave_0: left promiscuous mode [ 178.143176][ T30] audit: type=1800 audit(1774911623.132:51): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.963" name="file2" dev="loop2" ino=1048623 res=0 errno=0 [ 178.164401][ T13] hsr_slave_1: left promiscuous mode [ 178.180800][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.201895][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.202285][ T8436] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216) [ 178.218140][ T8436] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 178.226796][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.230587][ T8436] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 178.236883][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.245789][ T8436] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 178.256861][ T8436] FAT-fs (loop2): error, corrupted file size (i_pos 51, 8960) [ 178.297334][ T13] veth1_macvtap: left promiscuous mode [ 178.304429][ T13] veth0_macvtap: left promiscuous mode [ 178.344511][ T8419] loop1: detected capacity change from 0 to 32768 [ 178.572293][ T5162] Bluetooth: hci2: command tx timeout [ 178.781757][ T8446] sctp: [Deprecated]: syz.2.968 (pid 8446) Use of int in maxseg socket option. [ 178.781757][ T8446] Use struct sctp_assoc_value instead [ 178.965781][ T13] team0 (unregistering): Port device team_slave_1 removed [ 179.098081][ T8438] loop3: detected capacity change from 0 to 32768 [ 179.141239][ T8438] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 179.171991][ T8438] JBD2: Ignoring recovery information on journal [ 179.260733][ T8438] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 179.470663][ T5854] ocfs2: Unmounting device (7,3) on (node local) [ 179.733097][ T13] team0 (unregistering): Port device team_slave_0 removed [ 179.936972][ T8449] loop2: detected capacity change from 0 to 131072 [ 179.956211][ T8449] F2FS-fs (loop2): Test dummy encryption mode enabled [ 179.973104][ T8449] F2FS-fs (loop2): invalid crc value [ 180.015899][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.029723][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.096323][ T8449] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 180.120694][ T8449] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 180.130626][ T8339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.190415][ T5162] Bluetooth: hci1: command tx timeout [ 180.256186][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.293584][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.392907][ T8339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.652637][ T5162] Bluetooth: hci2: command tx timeout [ 180.736582][ T8339] hsr_slave_0: entered promiscuous mode [ 180.785651][ T8339] hsr_slave_1: entered promiscuous mode [ 180.809644][ T8339] debugfs: 'hsr0' already exists in 'hsr' [ 180.837396][ T8339] Cannot create hsr debugfs directory [ 180.953213][ T8380] chnl_net:caif_netlink_parms(): no params data found [ 181.487304][ T8487] loop3: detected capacity change from 0 to 256 [ 181.496720][ T8487] exfat: Deprecated parameter 'namecase' [ 181.508815][ T8487] exfat: Deprecated parameter 'utf8' [ 181.529978][ T8487] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 181.574416][ T8380] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.607948][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.638568][ T8380] bridge_slave_0: entered allmulticast mode [ 181.667045][ T8380] bridge_slave_0: entered promiscuous mode [ 181.706185][ T8490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.979'. [ 181.749624][ T8380] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.763869][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.779316][ T8380] bridge_slave_1: entered allmulticast mode [ 181.798972][ T8380] bridge_slave_1: entered promiscuous mode [ 182.136099][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.209936][ T8380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.251108][ T5162] Bluetooth: hci1: command tx timeout [ 182.271542][ T8380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.456750][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.516911][ T8380] team0: Port device team_slave_0 added [ 182.560777][ T8496] loop3: detected capacity change from 0 to 32768 [ 182.560796][ T8380] team0: Port device team_slave_1 added [ 182.605739][ T8496] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 182.700574][ T8496] XFS (loop3): Ending clean mount [ 182.731270][ T5162] Bluetooth: hci2: command tx timeout [ 182.782874][ T8500] loop2: detected capacity change from 0 to 40427 [ 182.791659][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.802115][ T8500] F2FS-fs (loop2): build fault injection rate: 174 [ 182.808730][ T8500] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 182.822264][ T8500] F2FS-fs (loop2): invalid crc value [ 182.994152][ T5854] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 183.014951][ T8500] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 183.046572][ T8500] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 183.194923][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.254801][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.282574][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.321661][ T8380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.332790][ T8506] loop1: detected capacity change from 0 to 32768 [ 183.365928][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.378212][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.411729][ T8380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.423832][ T8506] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 183.439446][ T5852] syz-executor: attempt to access beyond end of device [ 183.439446][ T5852] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.496194][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 183.496216][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.496225][ T5852] Call Trace: [ 183.496231][ T5852] [ 183.496238][ T5852] dump_stack_lvl+0xe8/0x150 [ 183.496268][ T5852] f2fs_stop_checkpoint+0x3c7/0x590 [ 183.496299][ T5852] f2fs_write_end_io+0x12e5/0x17a0 [ 183.496335][ T5852] __submit_merged_bio+0x256/0x6a0 [ 183.496368][ T5852] __submit_merged_write_cond+0x3c9/0x4e0 [ 183.496401][ T5852] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 183.496448][ T5852] f2fs_write_data_pages+0x287e/0x34f0 [ 183.496466][ T5852] ? unwind_next_frame+0xa6/0x2550 [ 183.496513][ T5852] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.496529][ T5852] ? is_bpf_text_address+0x26/0x2b0 [ 183.496563][ T5852] ? arch_stack_walk+0xfb/0x150 [ 183.496616][ T5852] ? add_lock_to_list+0xc7/0x100 [ 183.496640][ T5852] ? lockdep_unlock+0x5d/0xd0 [ 183.496663][ T5852] ? __lock_acquire+0x146e/0x2cf0 [ 183.496718][ T5852] ? do_raw_spin_lock+0x12b/0x2f0 [ 183.496754][ T5852] ? do_raw_spin_unlock+0xf5/0x210 [ 183.496778][ T5852] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.496801][ T5852] do_writepages+0x32e/0x550 [ 183.496837][ T5852] ? do_raw_spin_unlock+0xf5/0x210 [ 183.496865][ T5852] filemap_fdatawrite+0x1e9/0x2f0 [ 183.496895][ T5852] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 183.496969][ T5852] ? do_raw_spin_unlock+0xf5/0x210 [ 183.496998][ T5852] f2fs_sync_dirty_inodes+0x30e/0x830 [ 183.497037][ T5852] f2fs_write_checkpoint+0x9df/0x26a0 [ 183.497058][ T5852] ? __lock_acquire+0x6b5/0x2cf0 [ 183.497120][ T5852] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 183.497206][ T5852] kill_f2fs_super+0x314/0x730 [ 183.497235][ T5852] ? __pfx_kill_f2fs_super+0x10/0x10 [ 183.497271][ T5852] ? lockdep_hardirqs_on+0x7a/0x110 [ 183.497312][ T5852] deactivate_locked_super+0xbc/0x130 [ 183.497345][ T5852] cleanup_mnt+0x437/0x4d0 [ 183.497365][ T5852] ? _raw_spin_unlock_irq+0x23/0x50 [ 183.497392][ T5852] task_work_run+0x1d9/0x270 [ 183.497420][ T5852] ? __pfx_task_work_run+0x10/0x10 [ 183.497452][ T5852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.497474][ T5852] exit_to_user_mode_loop+0xed/0x480 [ 183.497500][ T5852] ? rcu_is_watching+0x15/0xb0 [ 183.497521][ T5852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.497542][ T5852] do_syscall_64+0x33e/0xf80 [ 183.497566][ T5852] ? trace_irq_disable+0x3b/0x140 [ 183.497596][ T5852] ? clear_bhb_loop+0x40/0x90 [ 183.497621][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.497640][ T5852] RIP: 0033:0x7f187859da57 [ 183.497658][ T5852] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 183.497674][ T5852] RSP: 002b:00007ffc6c65acb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 183.497695][ T5852] RAX: 0000000000000000 RBX: 00007f1878632048 RCX: 00007f187859da57 [ 183.497707][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6c65ad70 [ 183.497719][ T5852] RBP: 00007ffc6c65ad70 R08: 00007ffc6c65bd70 R09: 00000000ffffffff [ 183.497732][ T5852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6c65be00 [ 183.497743][ T5852] R13: 00007f1878632048 R14: 000000000002cc0f R15: 00007ffc6c65be40 [ 183.497778][ T5852] [ 183.835282][ T5852] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 183.859486][ T8339] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 183.993631][ T8506] XFS (loop1): Ending clean mount [ 184.083904][ T8339] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.124387][ T8506] XFS (loop1): Quotacheck needed: Please wait. [ 184.166302][ T8540] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.986'. [ 184.192896][ T8380] hsr_slave_0: entered promiscuous mode [ 184.204597][ T8380] hsr_slave_1: entered promiscuous mode [ 184.213724][ T8380] debugfs: 'hsr0' already exists in 'hsr' [ 184.220508][ T8380] Cannot create hsr debugfs directory [ 184.226917][ T8339] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 184.291499][ T8506] XFS (loop1): Quotacheck: Done. [ 184.308051][ T8339] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 184.332231][ T5162] Bluetooth: hci1: command tx timeout [ 184.422423][ T5841] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 184.703560][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.989'. [ 184.744215][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.989'. [ 184.826678][ T13] bridge_slave_1: left allmulticast mode [ 184.851058][ T13] bridge_slave_1: left promiscuous mode [ 184.873174][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.896016][ T13] bridge_slave_0: left allmulticast mode [ 184.914065][ T13] bridge_slave_0: left promiscuous mode [ 184.926064][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.305449][ T8569] loop2: detected capacity change from 0 to 512 [ 185.350737][ T8569] EXT4-fs (loop2): 1 truncate cleaned up [ 185.373408][ T8569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.447294][ T8569] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.994: bg 0: block 465: padding at end of block bitmap is not set [ 185.470903][ T8569] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 185.483852][ T8569] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.483852][ T8569] [ 185.496420][ T8569] EXT4-fs (loop2): Total free blocks count 0 [ 185.502534][ T8569] EXT4-fs (loop2): Free/Dirty block details [ 185.508480][ T8569] EXT4-fs (loop2): free_blocks=0 [ 185.513702][ T8569] EXT4-fs (loop2): dirty_blocks=66 [ 185.520148][ T8569] EXT4-fs (loop2): Block reservation details [ 185.526233][ T8569] EXT4-fs (loop2): i_reserved_data_blocks=66 [ 185.599374][ T60] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 185.618973][ T5852] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 185.641418][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.651774][ T8577] netlink: 'syz.1.996': attribute type 21 has an invalid length. [ 185.664148][ T8577] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.996'. [ 185.688338][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.716960][ T13] bond0 (unregistering): Released all slaves [ 186.442869][ T13] hsr_slave_0: left promiscuous mode [ 186.463942][ T13] hsr_slave_1: left promiscuous mode [ 186.479220][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.496588][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.516774][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.532131][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.551404][ T8579] loop2: detected capacity change from 0 to 32768 [ 186.569385][ T8579] btrfs: Deprecated parameter 'usebackuproot' [ 186.589614][ T8579] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 186.599512][ T13] veth1_macvtap: left promiscuous mode [ 186.610260][ T13] veth0_macvtap: left promiscuous mode [ 186.615999][ T13] veth1_vlan: left promiscuous mode [ 186.622065][ T13] veth0_vlan: left promiscuous mode [ 186.628824][ T8579] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.997 (8579) [ 186.669542][ T8579] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.692625][ T8586] loop1: detected capacity change from 0 to 32768 [ 186.700310][ T8579] BTRFS info (device loop2): using crc32c checksum algorithm [ 186.759166][ T8586] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 186.905767][ T60] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 186.941708][ T8586] XFS (loop1): Ending clean mount [ 187.010511][ T8579] BTRFS error (device loop2): failed to load root extent [ 187.053900][ T8579] BTRFS warning (device loop2): try to load backup roots slot 1 [ 187.088812][ T433] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 187.114460][ T8579] BTRFS warning (device loop2): couldn't read tree root [ 187.124545][ T8579] BTRFS warning (device loop2): try to load backup roots slot 2 [ 187.134360][ T433] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 187.152944][ T8579] BTRFS warning (device loop2): couldn't read tree root [ 187.159968][ T8579] BTRFS warning (device loop2): try to load backup roots slot 3 [ 187.206411][ T5841] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 187.219692][ T8579] BTRFS info (device loop2): rebuilding free space tree [ 187.408875][ T8579] BTRFS info (device loop2): checking UUID tree [ 187.445656][ T8579] BTRFS info (device loop2): enabling ssd optimizations [ 187.459528][ T8579] BTRFS info (device loop2): turning on async discard [ 187.477075][ T8579] BTRFS info (device loop2): enabling free space tree [ 187.484950][ T8579] BTRFS info (device loop2): force clearing of disk cache [ 187.494050][ T8579] BTRFS info (device loop2): enabling auto defrag [ 187.500564][ T8579] BTRFS info (device loop2): trying to use backup root at mount time [ 187.509139][ T8579] BTRFS info (device loop2): use zstd compression, level 3 [ 187.692235][ T13] team0 (unregistering): Port device team_slave_1 removed [ 187.754546][ T13] team0 (unregistering): Port device team_slave_0 removed [ 187.772298][ T5852] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.833362][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 187.844889][ T8634] netlink: 'syz.1.1006': attribute type 30 has an invalid length. [ 187.866575][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 188.129842][ T8636] loop2: detected capacity change from 0 to 128 [ 188.230752][ T8636] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.306959][ T8636] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.443955][ T8380] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 188.481994][ T8339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.500692][ T8380] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 188.551717][ T8380] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 188.610920][ T8380] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 188.708760][ T8339] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.754581][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.761810][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.818453][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.825685][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.985924][ T5852] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.035671][ T8642] loop1: detected capacity change from 0 to 40427 [ 189.053124][ T8642] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 189.073522][ T8642] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 189.097638][ T8642] F2FS-fs (loop1): invalid crc value [ 189.106124][ T8380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.189867][ T8380] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.239866][ T658] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.247099][ T658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.331030][ T658] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.338285][ T658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.383305][ T8642] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 189.499921][ T8642] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 189.535001][ T8642] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 189.740430][ T8339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.911078][ T809] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 190.118347][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 190.143654][ T809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.163289][ T809] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 190.184936][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.204011][ T8380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.211307][ T809] usb 4-1: Product: syz [ 190.215686][ T809] usb 4-1: Manufacturer: syz [ 190.227294][ T809] usb 4-1: SerialNumber: syz [ 190.557927][ T809] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.593443][ T809] usb 4-1: MIDIStreaming interface descriptor not found [ 190.806996][ T809] usb 4-1: USB disconnect, device number 8 [ 190.829921][ T8339] veth0_vlan: entered promiscuous mode [ 190.947809][ T8339] veth1_vlan: entered promiscuous mode [ 190.956668][ T6847] udevd[6847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.077310][ T8339] veth0_macvtap: entered promiscuous mode [ 191.107013][ T8339] veth1_macvtap: entered promiscuous mode [ 191.193603][ T8339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.277506][ T8339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.310466][ T8380] veth0_vlan: entered promiscuous mode [ 191.326214][ T433] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.351776][ T8380] veth1_vlan: entered promiscuous mode [ 191.358743][ T433] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.394513][ T433] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.412142][ T433] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.642546][ T8380] veth0_macvtap: entered promiscuous mode [ 191.668729][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.683390][ T8380] veth1_macvtap: entered promiscuous mode [ 191.712861][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.809522][ T8727] program syz.2.1018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.877617][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.896094][ T8380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.912542][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.946601][ T8380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.000320][ T658] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.036688][ T658] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.083653][ T658] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.110193][ T658] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.384471][ T8740] loop5: detected capacity change from 0 to 512 [ 192.425066][ T8740] EXT4-fs (loop5): Test dummy encryption mode enabled [ 192.445024][ T433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.454806][ T8740] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.490838][ T8716] loop1: detected capacity change from 0 to 32768 [ 192.500419][ T433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.519965][ T8740] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.928: bad orphan inode 131083 [ 192.549904][ T8716] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.563557][ T8740] loop5: lost filesystem error report for type 5 error -117 [ 192.577513][ T8740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.684747][ T433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.739922][ T433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.813064][ T1175] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 192.836917][ T8716] XFS (loop1): Ending clean mount [ 192.844697][ T8339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.930669][ T8760] loop2: detected capacity change from 0 to 16 [ 193.035056][ T8762] loop3: detected capacity change from 0 to 2048 [ 193.041742][ T8760] erofs (device loop2): mounted with root inode @ nid 36. [ 193.110023][ T8769] loop5: detected capacity change from 0 to 128 [ 193.128083][ T8760] erofs (device loop2): invalid de[0].nameoff 0 @ nid 46 [ 193.173652][ T8772] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.240608][ T8769] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.287205][ T8769] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.356023][ T5841] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.856970][ T8788] program syz.6.1030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.054850][ T8339] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.093114][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 194.102668][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.109086][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.172860][ T8798] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1032'. [ 194.210133][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1032'. [ 194.284075][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1036'. [ 194.946271][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 195.089715][ T8837] loop1: detected capacity change from 0 to 128 [ 195.330113][ T8807] loop5: detected capacity change from 0 to 32768 [ 195.764936][ T8833] loop2: detected capacity change from 0 to 32768 [ 195.778448][ T8833] xfs: Deprecated parameter 'attr2' [ 195.808549][ T8833] XFS: attr2 mount option is deprecated. [ 195.849987][ T8833] XFS (loop2): Invalid device [./file0], error=-13 [ 196.933833][ T8875] loop3: detected capacity change from 0 to 512 [ 197.043948][ T8875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 197.096655][ T8875] System zones: 1-12 [ 197.124538][ T8875] EXT4-fs error (device loop3): ext4_iget_extra_inode:5043: inode #15: comm syz.3.1061: corrupted in-inode xattr: e_value size too large [ 197.148841][ T8875] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.149360][ T8875] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1061: couldn't read orphan inode 15 (err -117) [ 197.158651][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 197.158676][ C1] EXT4-fs (loop3): initial error at time 1774911642: ext4_iget_extra_inode:5043: inode 15 [ 197.158714][ C1] EXT4-fs (loop3): last error at time 1774911642: ext4_iget_extra_inode:5043: inode 15 [ 197.719912][ T8885] loop5: detected capacity change from 0 to 32768 [ 197.774285][ T8885] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 197.782688][ T8885] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 197.821123][ T8885] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 197.832846][ T810] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 197.843528][ T8875] loop3: lost filesystem error report for type 5 error -117 [ 197.849051][ T8875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.896130][ T810] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 198.021071][ T8875] EXT4-fs (loop3): shut down requested (2) [ 198.110855][ T8892] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 198.169298][ T8893] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 198.232477][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.264149][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.287561][ T810] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 391ms [ 198.308931][ T810] gfs2: fsid=syz:syz.0: jid=0: Done [ 198.325332][ T8885] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 198.341895][ T8892] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 198.507868][ T8893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.540517][ T8893] team0: Port device bond0 added [ 198.554181][ T8902] netem: change failed [ 198.692268][ T8885] gfs2: fsid=syz:syz.0: found 2 quota changes [ 198.878774][ T8914] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1072'. [ 199.350288][ T30] audit: type=1326 audit(1774911644.332:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.2.1079" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f187859c819 code=0x0 [ 199.668230][ T8936] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 199.696217][ T8936] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 200.297967][ T8956] loop5: detected capacity change from 0 to 512 [ 200.332631][ T8956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.371555][ T8956] EXT4-fs (loop5): Online defrag not supported for non-extent files [ 200.432956][ T8339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.971103][ T5843] Bluetooth: hci1: command tx timeout [ 201.080082][ T8982] netlink: 79 bytes leftover after parsing attributes in process `syz.2.1101'. [ 201.259553][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 201.290104][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 201.300346][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 201.479619][ T8986] loop2: detected capacity change from 0 to 8192 [ 201.540542][ T8986] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.554317][ T8994] loop3: detected capacity change from 0 to 512 [ 201.907723][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1108'. [ 201.945239][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1108'. [ 202.173500][ T8987] loop5: detected capacity change from 0 to 40427 [ 202.190648][ T9012] netem: change failed [ 202.196701][ T9014] loop1: detected capacity change from 0 to 128 [ 202.218072][ T8987] F2FS-fs (loop5): build fault injection rate: 174 [ 202.239947][ T9014] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.242097][ T8987] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 202.286304][ T9014] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 202.317208][ T8987] F2FS-fs (loop5): invalid crc value [ 202.413864][ T5975] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 202.581273][ T5975] usb 3-1: Using ep0 maxpacket: 32 [ 202.611441][ T5975] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 202.620886][ T8987] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 202.634122][ T5975] usb 3-1: config 0 has no interface number 0 [ 202.648848][ T5975] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.668227][ T5975] usb 3-1: config 0 interface 89 has no altsetting 0 [ 202.685208][ T5975] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 202.701074][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.715254][ T5975] usb 3-1: Product: syz [ 202.730242][ T5975] usb 3-1: Manufacturer: syz [ 202.745810][ T5975] usb 3-1: SerialNumber: syz [ 202.758305][ T8987] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 202.779644][ T5975] usb 3-1: config 0 descriptor?? [ 202.835127][ T5975] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 202.867444][ T5975] em28xx 3-1:0.89: Video interface 89 found: [ 202.875586][ T30] audit: type=1800 audit(1774911903.849:53): pid=8987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1103" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 202.925259][ T8987] syz.5.1103: attempt to access beyond end of device [ 202.925259][ T8987] loop5: rw=34817, sector=45096, nr_sectors = 8 limit=40427 [ 203.101730][ T8339] syz-executor: attempt to access beyond end of device [ 203.101730][ T8339] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 203.157126][ T8339] CPU: 1 UID: 0 PID: 8339 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 203.157160][ T8339] Tainted: [L]=SOFTLOCKUP [ 203.157167][ T8339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.157180][ T8339] Call Trace: [ 203.157188][ T8339] [ 203.157196][ T8339] dump_stack_lvl+0xe8/0x150 [ 203.157234][ T8339] f2fs_stop_checkpoint+0x3c7/0x590 [ 203.157274][ T8339] f2fs_write_end_io+0x12e5/0x17a0 [ 203.157324][ T8339] __submit_merged_bio+0x256/0x6a0 [ 203.157364][ T8339] __submit_merged_write_cond+0x3c9/0x4e0 [ 203.157405][ T8339] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 203.157465][ T8339] f2fs_write_data_pages+0x287e/0x34f0 [ 203.157487][ T8339] ? unwind_next_frame+0xa6/0x2550 [ 203.157549][ T8339] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 203.157569][ T8339] ? is_bpf_text_address+0x26/0x2b0 [ 203.157611][ T8339] ? arch_stack_walk+0xfb/0x150 [ 203.157667][ T8339] ? add_lock_to_list+0xc7/0x100 [ 203.157697][ T8339] ? lockdep_unlock+0x5d/0xd0 [ 203.157723][ T8339] ? __lock_acquire+0x146e/0x2cf0 [ 203.157785][ T8339] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.157824][ T8339] ? do_raw_spin_unlock+0xf5/0x210 [ 203.157850][ T8339] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 203.157874][ T8339] do_writepages+0x32e/0x550 [ 203.157912][ T8339] ? do_raw_spin_unlock+0xf5/0x210 [ 203.157944][ T8339] filemap_fdatawrite+0x1e9/0x2f0 [ 203.157974][ T8339] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 203.158046][ T8339] ? preempt_schedule_common+0x82/0xd0 [ 203.158074][ T8339] ? preempt_schedule_thunk+0x16/0x30 [ 203.158108][ T8339] f2fs_sync_dirty_inodes+0x30e/0x830 [ 203.158149][ T8339] f2fs_write_checkpoint+0x9df/0x26a0 [ 203.158173][ T8339] ? __lock_acquire+0x6b5/0x2cf0 [ 203.158243][ T8339] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 203.158371][ T8339] kill_f2fs_super+0x314/0x730 [ 203.158406][ T8339] ? __pfx_kill_f2fs_super+0x10/0x10 [ 203.158449][ T8339] ? lockdep_hardirqs_on+0x7a/0x110 [ 203.158497][ T8339] deactivate_locked_super+0xbc/0x130 [ 203.158536][ T8339] cleanup_mnt+0x437/0x4d0 [ 203.158559][ T8339] ? _raw_spin_unlock_irq+0x23/0x50 [ 203.158591][ T8339] task_work_run+0x1d9/0x270 [ 203.158623][ T8339] ? __pfx_task_work_run+0x10/0x10 [ 203.158663][ T8339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.158696][ T8339] exit_to_user_mode_loop+0xed/0x480 [ 203.158725][ T8339] ? rcu_is_watching+0x15/0xb0 [ 203.158751][ T8339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.158776][ T8339] do_syscall_64+0x33e/0xf80 [ 203.158804][ T8339] ? trace_irq_disable+0x3b/0x140 [ 203.158833][ T8339] ? clear_bhb_loop+0x40/0x90 [ 203.158861][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.158884][ T8339] RIP: 0033:0x7f22aed9da57 [ 203.158905][ T8339] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 203.158925][ T8339] RSP: 002b:00007fff3232f048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 203.158948][ T8339] RAX: 0000000000000000 RBX: 00007f22aee32048 RCX: 00007f22aed9da57 [ 203.158963][ T8339] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3232f100 [ 203.158977][ T8339] RBP: 00007fff3232f100 R08: 00007fff32330100 R09: 00000000ffffffff [ 203.158992][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff32330190 [ 203.159006][ T8339] R13: 00007f22aee32048 R14: 00000000000318ed R15: 00007fff323301d0 [ 203.159046][ T8339] [ 203.507757][ T9038] loop3: detected capacity change from 0 to 4096 [ 203.515541][ T8339] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 203.533051][ T9038] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 203.542924][ T9038] NILFS (loop3): mounting unchecked fs [ 203.565623][ T5975] em28xx 3-1:0.89: unknown em28xx chip ID (64) [ 203.611175][ T9038] NILFS (loop3): recovery complete [ 203.670871][ T9040] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.830840][ T9043] loop1: detected capacity change from 0 to 512 [ 203.889143][ T9043] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.927330][ T5975] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 203.941726][ T9043] EXT4-fs error (device loop1): __ext4_iget:5396: inode #11: block 2: comm syz.1.1126: invalid block [ 203.984219][ T9043] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.989613][ T5975] em28xx 3-1:0.89: board has no eeprom [ 204.001074][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 204.011383][ C1] EXT4-fs (loop1): initial error at time 1774911904: __ext4_iget:5396: inode 11: block 2 [ 204.021266][ C1] EXT4-fs (loop1): last error at time 1774911904: __ext4_iget:5396: inode 11: block 2 [ 204.037216][ T9043] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1126: couldn't read orphan inode 11 (err -117) [ 204.049310][ T9043] loop1: lost filesystem error report for type 5 error -117 [ 204.080508][ T9043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.135395][ T5975] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 204.173802][ T5975] em28xx 3-1:0.89: analog set to bulk mode. [ 204.194215][ T9] em28xx 3-1:0.89: Registering V4L2 extension [ 204.242686][ T5975] usb 3-1: USB disconnect, device number 10 [ 204.302273][ T5975] em28xx 3-1:0.89: Disconnecting em28xx [ 204.314371][ T9056] loop5: detected capacity change from 0 to 164 [ 204.451880][ T9] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 204.468196][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.499332][ T9] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 204.540263][ T9] em28xx 3-1:0.89: No AC97 audio processor [ 204.602088][ T9062] netlink: 'syz.2.1132': attribute type 83 has an invalid length. [ 204.735823][ T9] usb 3-1: Decoder not found [ 204.756363][ T9] em28xx 3-1:0.89: failed to create media graph [ 204.793869][ T9] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 204.884384][ T9] em28xx 3-1:0.89: Registering snapshot button... [ 204.980673][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input17 [ 205.130327][ T9] em28xx 3-1:0.89: Remote control support is not available for this card. [ 205.197591][ T5975] em28xx 3-1:0.89: Closing input extension [ 205.227082][ T5975] em28xx 3-1:0.89: Deregistering snapshot button [ 205.290839][ T9078] loop2: detected capacity change from 0 to 2048 [ 205.405615][ T9078] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 205.464186][ T9078] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 205.516252][ T9078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.853723][ T5975] em28xx 3-1:0.89: Freeing device [ 206.078904][ T9068] loop3: detected capacity change from 0 to 32768 [ 206.464565][ T9083] loop1: detected capacity change from 0 to 32768 [ 206.492153][ T9083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1140 (9083) [ 206.574121][ T9083] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.626508][ T9083] BTRFS info (device loop1): using sha256 checksum algorithm [ 206.773942][ T9109] loop6: detected capacity change from 0 to 8192 [ 206.805611][ T9083] BTRFS info (device loop1): enabling ssd optimizations [ 206.857813][ T9083] BTRFS info (device loop1): turning on async discard [ 206.870621][ T9090] loop5: detected capacity change from 0 to 40427 [ 206.894733][ T9090] F2FS-fs: inline encryption not supported [ 206.903214][ T9083] BTRFS info (device loop1): enabling free space tree [ 206.929006][ T9090] F2FS-fs (loop5): Image doesn't support compression [ 206.951438][ T9090] F2FS-fs (loop5): build fault injection rate: 690 [ 206.981106][ T9090] F2FS-fs (loop5): invalid crc value [ 207.032002][ T5922] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 207.101977][ T5841] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.213594][ T5922] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 207.264711][ T5922] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 207.319112][ T5922] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 207.339791][ T9090] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 207.379163][ T5922] usb 3-1: config 220 has no interface number 2 [ 207.412341][ T5922] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 207.473680][ T5922] usb 3-1: config 220 interface 0 has no altsetting 0 [ 207.501180][ T5922] usb 3-1: config 220 interface 76 has no altsetting 0 [ 207.543401][ T9090] F2FS-fs (loop5): Start checkpoint disabled! [ 207.553730][ T5922] usb 3-1: config 220 interface 1 has no altsetting 0 [ 207.615749][ T5922] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 207.659371][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.686830][ T9090] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 207.689532][ T5922] usb 3-1: Product: syz [ 207.719164][ T5922] usb 3-1: Manufacturer: syz [ 207.738265][ T9090] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 207.746128][ T5922] usb 3-1: SerialNumber: syz [ 208.000573][ T9151] loop1: detected capacity change from 0 to 1024 [ 208.023591][ T5922] usb 3-1: selecting invalid altsetting 0 [ 208.037427][ T5922] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 208.084659][ T9151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.101658][ T9151] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.105343][ T5922] uvcvideo 3-1:220.0: No valid video chain found. [ 208.152144][ T9151] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 208.179523][ T5922] usb 3-1: selecting invalid altsetting 0 [ 208.188654][ T5922] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 208.199814][ T5922] usb 3-1: USB disconnect, device number 11 [ 208.216058][ T9151] System zones: 0-1, 3-36 [ 208.256004][ T9151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.373411][ T9161] loop3: detected capacity change from 0 to 1024 [ 208.411251][ T9161] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 208.589318][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.598639][ T9161] EXT4-fs error (device loop3): ext4_map_blocks:789: inode #3: block 2: comm syz.3.1162: lblock 2 mapped to illegal pblock 2 (length 1) [ 208.745901][ T9161] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 208.751014][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 208.766627][ C1] EXT4-fs (loop3): initial error at time 1774911909: ext4_map_blocks:789: inode 3: block 2 [ 208.776690][ C1] EXT4-fs (loop3): last error at time 1774911909: ext4_map_blocks:789: inode 3: block 2 [ 208.811268][ T9161] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 208.830787][ T9167] loop1: detected capacity change from 0 to 512 [ 208.865088][ T9161] EXT4-fs error (device loop3): ext4_map_blocks:789: inode #3: block 48: comm syz.3.1162: lblock 0 mapped to illegal pblock 48 (length 1) [ 208.903618][ T9167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 208.921357][ T9161] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 208.925344][ T9167] System zones: [ 208.946921][ T9161] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 208.993987][ T9167] 1-12 [ 209.019628][ T9167] EXT4-fs error (device loop1): ext4_iget_extra_inode:5043: inode #15: comm syz.1.1163: corrupted in-inode xattr: e_value size too large [ 209.091315][ T9161] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.1162: Failed to acquire dquot type 0 [ 209.107531][ T9167] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.111021][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 209.126627][ C1] EXT4-fs (loop1): initial error at time 1774911910: ext4_iget_extra_inode:5043: inode 15 [ 209.136585][ C1] EXT4-fs (loop1): last error at time 1774911910: ext4_iget_extra_inode:5043: inode 15 [ 209.137710][ T9161] loop3: lost filesystem error report for type 5 error -117 [ 209.153346][ T9161] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6294: Corrupt filesystem [ 209.178017][ T9167] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1163: couldn't read orphan inode 15 (err -117) [ 209.253304][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1166'. [ 209.280353][ T9167] loop1: lost filesystem error report for type 5 error -117 [ 209.288185][ T9167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.313354][ T9161] loop3: lost filesystem error report for type 5 error -117 [ 209.315108][ T9161] EXT4-fs error (device loop3): ext4_evict_inode:265: inode #11: comm syz.3.1162: mark_inode_dirty error [ 209.353593][ T9161] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 209.369996][ T9161] EXT4-fs warning (device loop3): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 209.437445][ T9161] EXT4-fs (loop3): 1 orphan inode deleted [ 209.464718][ T433] EXT4-fs error (device loop3): ext4_map_blocks:789: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.493063][ T9167] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 209.505839][ T9161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.529972][ T433] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 209.543189][ T433] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 209.626705][ T433] EXT4-fs error (device loop3): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 0 [ 209.728149][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.859185][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.889946][ T9194] loop5: detected capacity change from 0 to 256 [ 209.909027][ T5854] EXT4-fs error (device loop3): __ext4_get_inode_loc:4800: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 209.953442][ T9194] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 209.970383][ T5854] loop3: lost filesystem error report for type 5 error -117 [ 210.004843][ T5854] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6294: Corrupt filesystem [ 210.054609][ T5854] loop3: lost filesystem error report for type 5 error -117 [ 210.056299][ T5854] EXT4-fs error (device loop3): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 210.112700][ T5854] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 210.301639][ T9204] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1173'. [ 210.633534][ T9219] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1178'. [ 210.883225][ T29] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 210.894954][ T9222] loop1: detected capacity change from 0 to 4096 [ 211.054064][ T29] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 211.106329][ T29] usb 4-1: config 0 has no interface number 0 [ 211.129363][ T29] usb 4-1: config 0 interface 41 has no altsetting 0 [ 211.159900][ T29] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 211.190472][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.224421][ T29] usb 4-1: Product: syz [ 211.228710][ T29] usb 4-1: Manufacturer: syz [ 211.245791][ T29] usb 4-1: SerialNumber: syz [ 211.329927][ T29] usb 4-1: config 0 descriptor?? [ 211.364976][ T9240] loop5: detected capacity change from 0 to 512 [ 211.397370][ T9240] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 211.478238][ T9240] EXT4-fs (loop5): 1 truncate cleaned up [ 211.570009][ T9240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.637115][ T30] audit: type=1800 audit(1774912168.624:54): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1184" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 211.740159][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'. [ 211.779580][ T8339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.918053][ T9261] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1191'. [ 211.995726][ T9266] loop1: detected capacity change from 0 to 64 [ 212.169194][ T29] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 212.217211][ T29] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 212.261815][ T29] usb 4-1: USB disconnect, device number 9 [ 212.322275][ T9272] tap0: tun_chr_ioctl cmd 1074025675 [ 212.344236][ T9272] tap0: persist disabled [ 212.586812][ T9284] loop6: detected capacity change from 0 to 64 [ 212.744594][ T9284] syz.6.1198: attempt to access beyond end of device [ 212.744594][ T9284] loop6: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 212.965603][ T9264] loop5: detected capacity change from 0 to 32768 [ 213.111508][ T9264] dmapctl: invalid leafidx 30293 (expected 341) [ 213.153092][ T9304] tap0: tun_chr_ioctl cmd 1074025677 [ 213.176052][ T9264] ERROR: (device loop5): dbAdjCtl: Corrupt dmapctl page [ 213.176052][ T9264] [ 213.187111][ T9304] tap0: linktype set to 6 [ 213.233505][ T9264] ERROR: (device loop5): dbDiscardAG: -EIO [ 213.233505][ T9264] [ 214.077998][ T9299] loop2: detected capacity change from 0 to 32768 [ 214.165026][ T9299] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.409438][ T9299] XFS (loop2): Ending clean mount [ 214.674591][ T5852] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.939015][ T9359] loop5: detected capacity change from 0 to 4096 [ 215.029007][ T9359] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 215.234973][ T9359] ntfs3(loop5): Failed to load $Extend (-22). [ 215.274833][ T9359] ntfs3(loop5): Failed to initialize $Extend. [ 215.298083][ T9345] loop6: detected capacity change from 0 to 32768 [ 215.334641][ T9345] JBD2: Ignoring recovery information on journal [ 215.410430][ T9345] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 215.689786][ T8380] ocfs2: Unmounting device (7,6) on (node local) [ 216.452379][ T9415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.629103][ T9418] loop2: detected capacity change from 0 to 4096 [ 216.658546][ T9424] loop1: detected capacity change from 0 to 256 [ 216.705396][ T9418] NILFS (loop2): invalid segment: Checksum error in segment payload [ 216.750538][ T9418] NILFS (loop2): trying rollback from an earlier position [ 216.759796][ T9424] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72b37889, utbl_chksum : 0xe619d30d) [ 216.810182][ T9418] NILFS (loop2): recovery complete [ 216.853903][ T9429] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.569405][ T9443] loop6: detected capacity change from 0 to 8192 [ 217.902877][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 217.992574][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 218.045152][ T9472] can0: slcan on ttyS3. [ 218.081409][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 218.099034][ T24] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 218.126350][ T24] usb 3-1: config 0 has no interface number 0 [ 218.152654][ T24] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.181078][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 218.191013][ T24] usb 3-1: config 0 interface 85 has no altsetting 0 [ 218.217974][ T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 218.240716][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 218.271974][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 218.283759][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.300860][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 218.311967][ T24] usb 3-1: Product: syz [ 218.319746][ T24] usb 3-1: Manufacturer: syz [ 218.324815][ T29] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 218.335377][ T24] usb 3-1: SerialNumber: syz [ 218.343621][ T9472] can0 (unregistered): slcan off ttyS3. [ 218.345445][ T29] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 218.362955][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 218.363834][ T24] usb 3-1: config 0 descriptor?? [ 218.385135][ T29] usb 6-1: SerialNumber: syz [ 218.399846][ T29] usb 6-1: config 0 descriptor?? [ 218.422394][ T9462] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 218.670761][ T29] usb 6-1: USB disconnect, device number 2 [ 218.848746][ T9497] loop1: detected capacity change from 0 to 256 [ 218.929844][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1268'. [ 218.961466][ T9497] FAT-fs (loop1): Directory bread(block 64) failed [ 218.964845][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1268'. [ 218.994615][ T9497] FAT-fs (loop1): Directory bread(block 65) failed [ 219.020636][ T24] appletouch 3-1:0.85: Geyser mode initialized. [ 219.029352][ T9497] FAT-fs (loop1): Directory bread(block 66) failed [ 219.055263][ T24] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input18 [ 219.073663][ T9497] FAT-fs (loop1): Directory bread(block 67) failed [ 219.086402][ T9497] FAT-fs (loop1): Directory bread(block 68) failed [ 219.103253][ T9497] FAT-fs (loop1): Directory bread(block 69) failed [ 219.129700][ T9497] FAT-fs (loop1): Directory bread(block 70) failed [ 219.162497][ T9497] FAT-fs (loop1): Directory bread(block 71) failed [ 219.176645][ T9497] FAT-fs (loop1): Directory bread(block 72) failed [ 219.206335][ T30] audit: type=1326 audit(1774912176.194:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.6.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4ff9c819 code=0x7ffc0000 [ 219.207808][ T9497] FAT-fs (loop1): Directory bread(block 73) failed [ 219.309704][ T24] usb 3-1: USB disconnect, device number 12 [ 219.309710][ T30] audit: type=1326 audit(1774912176.194:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.6.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4ff9c819 code=0x7ffc0000 [ 219.309805][ T30] audit: type=1326 audit(1774912176.224:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.6.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d4ff9c819 code=0x7ffc0000 [ 219.480020][ T24] appletouch 3-1:0.85: input: appletouch disconnected [ 219.530802][ T9497] syz.1.1267: attempt to access beyond end of device [ 219.530802][ T9497] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 219.732917][ T30] audit: type=1326 audit(1774912176.724:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.6.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4ff9c819 code=0x7ffc0000 [ 219.813069][ T30] audit: type=1326 audit(1774912176.724:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.6.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4ff9c819 code=0x7ffc0000 [ 220.007207][ T9526] loop5: detected capacity change from 0 to 512 [ 220.017551][ T30] audit: type=1326 audit(1774912176.994:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.6.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f8d4ff9c819 code=0x7ffc0000 [ 220.047471][ T9526] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 220.098787][ T9526] EXT4-fs (loop5): 1 truncate cleaned up [ 220.112753][ T30] audit: type=1326 audit(1774912176.994:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.6.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4ff9c819 code=0x7ffc0000 [ 220.140516][ T9526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.171386][ T30] audit: type=1326 audit(1774912176.994:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9504 comm="syz.6.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4ff9c819 code=0x7ffc0000 [ 220.340362][ T9526] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz.5.1277: path /39/file2: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=2, rec_len=8, size=1024 fake=1 [ 220.428278][ T9535] loop3: detected capacity change from 0 to 4096 [ 220.445851][ T9526] EXT4-fs (loop5): Remounting filesystem read-only [ 220.460153][ T9535] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 220.506356][ T9540] binder: 9539:9540 unknown command 0 [ 220.521169][ T9540] binder: 9539:9540 ioctl c0306201 2000000001c0 returned -22 [ 220.565916][ T9543] loop6: detected capacity change from 0 to 128 [ 220.601841][ T9535] ntfs3(loop3): ino=b, mi_enum_attr [ 220.631235][ T8339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.640250][ T9535] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 220.677889][ T9535] ntfs3(loop3): Failed to load $Extend (-22). [ 220.717569][ T9535] ntfs3(loop3): Failed to initialize $Extend. [ 221.197339][ T9566] loop2: detected capacity change from 0 to 512 [ 221.240435][ T9566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 221.266850][ T9566] ext4 filesystem being mounted at /257/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.390763][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 221.405510][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 221.564779][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.586703][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.605595][ T9] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 221.621056][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.639404][ T9] usb 4-1: Product: syz [ 221.646861][ T9] usb 4-1: Manufacturer: syz [ 221.661037][ T9] usb 4-1: SerialNumber: syz [ 221.673824][ T9] usb 4-1: config 0 descriptor?? [ 221.702015][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 221.769822][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.790467][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 221.820776][ T9] usb 4-1: media controller created [ 221.892252][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.065767][ T9] DVB: Unable to find symbol tda10046_attach() [ 222.081052][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 222.095236][ T9577] loop2: detected capacity change from 0 to 32768 [ 222.105593][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 222.137016][ T9577] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 222.249145][ T9577] XFS (loop2): Ending clean mount [ 222.388959][ T5852] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 222.664911][ T9] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 222.717515][ T9] usb 4-1: USB disconnect, device number 10 [ 223.189527][ T9608] loop2: detected capacity change from 0 to 32768 [ 223.242557][ T9608] JBD2: Ignoring recovery information on journal [ 223.273906][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 223.282991][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 223.387896][ T9608] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 223.500900][ T9623] mkiss: ax0: crc mode is auto. [ 223.742382][ T5852] ocfs2: Unmounting device (7,2) on (node local) [ 223.859294][ T9630] loop3: detected capacity change from 0 to 256 [ 223.892711][ T9630] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 224.142283][ T9633] netem: incorrect ge model size [ 224.171857][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 224.173387][ T9633] netem: change failed [ 224.634115][ T9645] netlink: 'syz.6.1321': attribute type 12 has an invalid length. [ 224.653087][ T9645] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.1321'. [ 225.247663][ T9662] loop3: detected capacity change from 0 to 2048 [ 225.383277][ T9662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.423063][ T30] audit: type=1800 audit(1774912182.404:63): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1330" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 225.524564][ T9671] loop6: detected capacity change from 0 to 1024 [ 225.549083][ T9671] EXT4-fs: Ignoring removed bh option [ 225.605996][ T9671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.629428][ T9651] loop2: detected capacity change from 0 to 32768 [ 225.659983][ T9649] loop5: detected capacity change from 0 to 40427 [ 225.680854][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.726370][ T9651] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 225.744087][ T9649] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 225.771590][ T9649] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 225.820848][ T9651] JBD2: Ignoring recovery information on journal [ 225.834086][ T9649] F2FS-fs (loop5): Image doesn't support compression [ 225.923325][ T9649] F2FS-fs (loop5): build fault injection type: 0x216 [ 226.009793][ T9649] F2FS-fs (loop5): invalid crc value [ 226.080818][ T9651] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 226.141717][ T8380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.171487][ T9680] loop1: detected capacity change from 0 to 32768 [ 226.218122][ T9680] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 226.226389][ T9680] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 226.340449][ T9680] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 226.352314][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 226.364988][ T9651] (syz.2.1324,9651,1):ocfs2_check_dir_entry:314 ERROR: directory entry (#65: offset=512) too close to end or out-of-bounds [ 226.365859][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 226.449594][ T9649] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 226.571866][ T5852] ocfs2: Unmounting device (7,2) on (node local) [ 226.631287][ T9649] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 226.648720][ T9649] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 226.764117][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 398ms [ 226.794267][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 226.808703][ T9680] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 227.289061][ T9698] loop3: detected capacity change from 0 to 128 [ 227.302271][ T9692] loop6: detected capacity change from 0 to 32768 [ 227.344169][ T9680] gfs2: fsid=syz:syz.0: found 2 quota changes [ 227.368348][ T9692] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 227.454424][ T9698] FAT-fs (loop3): FAT read failed (blocknr 128) [ 227.522414][ T9692] XFS (loop6): Ending clean mount [ 227.777885][ T8380] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 227.802034][ T9710] loop5: detected capacity change from 0 to 4096 [ 228.424910][ T30] audit: type=1326 audit(1774912185.414:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187859c819 code=0x7ffc0000 [ 228.493553][ T30] audit: type=1326 audit(1774912185.414:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187859c819 code=0x7ffc0000 [ 228.539154][ T9725] IPv6: NLM_F_CREATE should be specified when creating new route [ 228.595440][ T30] audit: type=1326 audit(1774912185.414:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f187859c819 code=0x7ffc0000 [ 228.685555][ T30] audit: type=1326 audit(1774912185.414:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187859c819 code=0x7ffc0000 [ 228.718533][ T9727] loop6: detected capacity change from 0 to 1024 [ 228.750376][ T30] audit: type=1326 audit(1774912185.414:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187859c819 code=0x7ffc0000 [ 228.787663][ T9727] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 228.800314][ T9731] loop5: detected capacity change from 0 to 512 [ 228.849371][ T9731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.855386][ T30] audit: type=1326 audit(1774912185.434:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187859c819 code=0x7ffc0000 [ 228.904499][ T30] audit: type=1326 audit(1774912185.434:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f187859c819 code=0x7ffc0000 [ 228.932960][ T9731] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.947839][ T30] audit: type=1326 audit(1774912185.434:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f187859c819 code=0x7ffc0000 [ 228.972173][ T9727] EXT4-fs error (device loop6): ext4_map_blocks:789: inode #3: block 2: comm syz.6.1344: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.995512][ T9727] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.999719][ T9727] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 229.008857][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 229.008881][ C1] EXT4-fs (loop6): initial error at time 1774912185: ext4_map_blocks:789: inode 3: block 2 [ 229.008957][ C1] EXT4-fs (loop6): last error at time 1774912185: ext4_map_blocks:789: inode 3: block 2 [ 229.119736][ T9727] EXT4-fs error (device loop6): ext4_map_blocks:789: inode #3: block 48: comm syz.6.1344: lblock 0 mapped to illegal pblock 48 (length 1) [ 229.162756][ T9727] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 229.163932][ T9727] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.1344: Failed to acquire dquot type 0 [ 229.184145][ T8339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.196845][ T9727] loop6: lost filesystem error report for type 5 error -117 [ 229.208498][ T9727] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6294: Corrupt filesystem [ 229.308907][ T9727] loop6: lost filesystem error report for type 5 error -117 [ 229.309300][ T9727] EXT4-fs error (device loop6): ext4_evict_inode:265: inode #11: comm syz.6.1344: mark_inode_dirty error [ 229.389481][ T9727] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 229.389738][ T9727] EXT4-fs warning (device loop6): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 229.426341][ T9727] EXT4-fs (loop6): 1 orphan inode deleted [ 229.435183][ T9727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.448502][ T60] EXT4-fs error (device loop6): ext4_map_blocks:789: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.493367][ T60] EXT4-fs error (device loop6): ext4_release_dquot:7062: comm kworker/u8:4: Failed to release dquot type 0 [ 229.644386][ T8380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.674102][ T8380] EXT4-fs error (device loop6): __ext4_get_inode_loc:4800: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 229.711074][ T8380] loop6: lost filesystem error report for type 5 error -117 [ 229.714763][ T8380] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6294: Corrupt filesystem [ 229.753083][ T8380] loop6: lost filesystem error report for type 5 error -117 [ 229.754768][ T8380] EXT4-fs error (device loop6): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 229.827876][ T8380] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 229.868171][ T9753] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1360'. [ 230.155440][ T9758] EXT4-fs: inline encryption not supported [ 230.207562][ T9758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.230020][ T9758] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.352557][ T8380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 230.389279][ T29] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 230.561035][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 230.584707][ T29] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 230.601093][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.630495][ T29] usb 3-1: Product: syz [ 230.639069][ T29] usb 3-1: Manufacturer: syz [ 230.653667][ T29] usb 3-1: SerialNumber: syz [ 230.671945][ T29] usb 3-1: config 0 descriptor?? [ 230.682474][ T29] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 230.691615][ T9744] set_capacity_and_notify: 1 callbacks suppressed [ 230.691630][ T9744] loop3: detected capacity change from 0 to 65536 [ 230.777014][ T9744] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 230.921629][ T5976] usb 3-1: USB disconnect, device number 13 [ 230.936263][ T9744] XFS (loop3): Ending clean mount [ 230.960392][ T9744] XFS (loop3): Quotacheck needed: Please wait. [ 231.027228][ T9744] XFS (loop3): Quotacheck: Done. [ 231.069853][ T5854] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 231.117067][ T9785] loop6: detected capacity change from 0 to 1024 [ 231.202608][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 231.376663][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 231.389005][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.410159][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.430410][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 231.456619][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 231.486031][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.526038][ T24] usb 6-1: config 0 descriptor?? [ 231.999691][ T24] hid (null): unknown global tag 0x7d [ 232.022244][ T24] hid (null): unknown global tag 0xed [ 232.046598][ T24] hid (null): global environment stack underflow [ 232.105767][ T9804] loop6: detected capacity change from 0 to 32768 [ 232.118286][ T9804] (syz.6.1374,9804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.133478][ T9804] (syz.6.1374,9804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.159099][ T9804] (syz.6.1374,9804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 232.180405][ T9804] (syz.6.1374,9804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 232.196470][ T9804] JBD2: Ignoring recovery information on journal [ 232.252668][ T9804] (syz.6.1374,9804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 232.266485][ T9804] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 232.275572][ T24] usb 6-1: USB disconnect, device number 3 [ 232.281676][ T9804] (syz.6.1374,9804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 232.312184][ T9804] (syz.6.1374,9804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 232.452342][ T9804] (syz.6.1374,9804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 232.480317][ T9804] (syz.6.1374,9804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 232.494938][ T9804] (syz.6.1374,9804,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 232.507646][ T9804] (syz.6.1374,9804,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 232.516386][ T9804] (syz.6.1374,9804,0):ocfs2_quota_read:201 ERROR: status = -5 [ 232.524812][ T9804] __quota_error: 3 callbacks suppressed [ 232.524837][ T9804] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 5 [ 232.539607][ T9804] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 232.549904][ T9804] (syz.6.1374,9804,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 232.557882][ T9804] (syz.6.1374,9804,0):ocfs2_mknod:318 ERROR: status = -5 [ 232.565074][ T9804] (syz.6.1374,9804,0):ocfs2_mknod:506 ERROR: status = -5 [ 232.572262][ T9804] (syz.6.1374,9804,0):ocfs2_create:679 ERROR: status = -5 [ 232.626648][ T9804] syz.6.1374 (9804) used greatest stack depth: 18040 bytes left [ 232.834817][ T8380] ocfs2: Unmounting device (7,6) on (node local) [ 233.347906][ T9836] loop2: detected capacity change from 0 to 128 [ 233.363165][ T9836] EXT4-fs: Ignoring removed nobh option [ 233.395392][ T9837] loop6: detected capacity change from 0 to 512 [ 233.416909][ T9837] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.419129][ T9836] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.485300][ T9836] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.490067][ T9837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.511461][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 233.537858][ T9837] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.1378: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 233.573964][ T9836] fscrypt (loop2, inode 12): Unsupported log2_data_unit_size in encryption policy: 232 [ 233.607394][ T9837] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 12: comm syz.6.1378: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 233.629969][ T9837] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 13: comm syz.6.1378: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 233.665377][ T9844] EXT4-fs error (device loop6): ext4_map_blocks:789: inode #2: block 18: comm syz.6.1378: lblock 23 mapped to illegal pblock 18 (length 1) [ 233.695862][ T5976] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 233.703667][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 233.712843][ T5852] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.723791][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 233.752839][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.785407][ T9] usb 4-1: config 0 descriptor?? [ 233.811551][ T8380] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 233.847911][ T8380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.881062][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 233.888223][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.912868][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.949103][ T5976] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 233.997289][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 234.006371][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.040799][ T5976] usb 6-1: config 0 descriptor?? [ 234.047603][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.083561][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 234.111140][ T9] usb 4-1: media controller created [ 234.205452][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.294695][ T9] az6027: usb out operation failed. (-71) [ 234.312260][ T9] az6027: usb out operation failed. (-71) [ 234.327428][ T9] stb0899_attach: Driver disabled by Kconfig [ 234.352345][ T9] az6027: no front-end attached [ 234.352345][ T9] [ 234.375402][ T9] az6027: usb out operation failed. (-71) [ 234.384815][ T9859] loop2: detected capacity change from 0 to 512 [ 234.395436][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 234.409666][ T9859] EXT4-fs error (device loop2): ext4_iget_extra_inode:5043: inode #15: comm syz.2.1396: corrupted in-inode xattr: e_value out of bounds [ 234.426026][ T9859] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.431017][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 234.446667][ C1] EXT4-fs (loop2): initial error at time 1774912191: ext4_iget_extra_inode:5043: inode 15 [ 234.456647][ C1] EXT4-fs (loop2): last error at time 1774912191: ext4_iget_extra_inode:5043: inode 15 [ 234.467300][ T9859] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1396: couldn't read orphan inode 15 (err -117) [ 234.480169][ T9857] loop6: detected capacity change from 0 to 2048 [ 234.504304][ T9859] loop2: lost filesystem error report for type 5 error -117 [ 234.510172][ T9859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.534814][ T9857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.550328][ T5976] kye 0003:0458:5016.0004: control desc unexpectedly large [ 234.559386][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 234.627457][ T30] audit: type=1800 audit(1774912191.614:73): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1395" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 234.676198][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 234.688973][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.726096][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 234.781896][ T8380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.799496][ T5976] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0004/input/input20 [ 234.849328][ T9] usb 4-1: USB disconnect, device number 11 [ 234.928495][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 235.183370][ T5976] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0004/input/input21 [ 235.627388][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 235.637643][ T5976] kye 0003:0458:5016.0004: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 235.700502][ T9882] loop6: detected capacity change from 0 to 4096 [ 235.742543][ T9882] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 235.783359][ T9882] ntfs3(loop6): ino=3, mi_enum_attr [ 235.909684][ T9882] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 235.918310][ T24] usb 6-1: USB disconnect, device number 4 [ 235.943661][ T9882] ntfs3(loop6): ino=1a, mi_enum_attr [ 235.976273][ T9882] ntfs3(loop6): ino=1a, mi_enum_attr [ 235.995106][ T9882] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 236.470612][ T30] audit: type=1326 audit(1774912193.454:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz.2.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187859c819 code=0x7fc00000 [ 236.529117][ T9897] netlink: 'syz.1.1411': attribute type 10 has an invalid length. [ 236.655798][ T9900] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1413'. [ 236.715843][ T9902] loop1: detected capacity change from 0 to 1024 [ 236.979204][ T9912] loop2: detected capacity change from 0 to 128 [ 237.018998][ T9912] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 237.093186][ T9912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.640879][ T9935] C: renamed from team_slave_0 (while UP) [ 237.677170][ T9935] netlink: 'syz.3.1430': attribute type 3 has an invalid length. [ 237.696007][ T9935] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1430'. [ 237.732154][ T9935] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 237.933973][ T9946] loop6: detected capacity change from 0 to 64 [ 238.047292][ T9951] loop3: detected capacity change from 0 to 512 [ 238.353517][ T9958] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1441'. [ 238.473592][ T9963] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 238.669713][ T9968] macvlan0: entered promiscuous mode [ 238.689789][ T9968] netlink: 'syz.3.1446': attribute type 2 has an invalid length. [ 239.174828][ T9986] loop2: detected capacity change from 0 to 2048 [ 239.253928][ T9986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.268046][ T9971] loop5: detected capacity change from 0 to 32768 [ 239.281792][ T5976] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 239.319333][ T9971] JBD2: Ignoring recovery information on journal [ 239.419892][ T9971] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 239.493172][ T5976] usb 7-1: config 0 interface 0 has no altsetting 0 [ 239.532852][ T5976] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 239.563528][ T5976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.600063][ T5976] usb 7-1: config 0 descriptor?? [ 239.844925][ T8339] ocfs2: Unmounting device (7,5) on (node local) [ 239.875630][ T9993] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 239.958547][ T9982] loop3: detected capacity change from 0 to 32768 [ 239.997236][ T9982] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 240.069961][ T5976] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 240.106803][ T9982] XFS (loop3): Ending clean mount [ 240.123575][ T5976] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 240.160250][ T5976] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 240.223984][ T5976] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 240.293064][ T5976] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 240.309227][ T30] audit: type=1800 audit(1774912197.274:75): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1453" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 240.339353][ T5976] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 240.376508][ T5976] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 240.413198][ T5976] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 240.436405][ T5854] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 240.445312][ T5976] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 240.466287][ T5976] hid_mf 0003:0079:1846.0005: unknown main item tag 0x0 [ 240.497170][ T5976] hid_mf 0003:0079:1846.0005: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.6-1/input0 [ 240.540203][ T5976] hid_mf 0003:0079:1846.0005: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 240.620653][ T5976] usb 7-1: USB disconnect, device number 2 [ 240.632280][T10016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1463'. [ 240.848885][T10014] fido_id[10014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 241.504246][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 241.598171][T10039] netlink: 'syz.6.1472': attribute type 25 has an invalid length. [ 241.606986][T10039] netlink: 'syz.6.1472': attribute type 28 has an invalid length. [ 241.693000][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 241.702861][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.722957][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 241.736899][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 241.757446][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 241.781416][T10044] loop5: detected capacity change from 0 to 1024 [ 241.789450][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.799865][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.818607][T10044] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 241.834050][ T24] usb 4-1: SerialNumber: syz [ 241.859726][T10027] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 241.881574][T10027] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 241.896986][ T24] hub 4-1:1.0: bad descriptor, ignoring hub [ 241.905218][ T24] hub 4-1:1.0: probe with driver hub failed with error -5 [ 241.924280][T10044] EXT4-fs error (device loop5): ext4_map_blocks:789: inode #3: block 2: comm syz.5.1473: lblock 2 mapped to illegal pblock 2 (length 1) [ 241.970571][T10044] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 241.972211][T10044] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 241.981333][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 241.981353][ C1] EXT4-fs (loop5): initial error at time 1774912198: ext4_map_blocks:789: inode 3: block 2 [ 241.981392][ C1] EXT4-fs (loop5): last error at time 1774912198: ext4_map_blocks:789: inode 3: block 2 [ 242.021856][T10044] EXT4-fs error (device loop5): ext4_map_blocks:789: inode #3: block 48: comm syz.5.1473: lblock 0 mapped to illegal pblock 48 (length 1) [ 242.036284][T10044] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 242.038678][T10044] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 242.057179][T10044] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.1473: Failed to acquire dquot type 0 [ 242.071005][T10044] loop5: lost filesystem error report for type 5 error -117 [ 242.073554][T10044] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6294: Corrupt filesystem [ 242.103210][T10027] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.120433][T10027] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.128157][T10044] loop5: lost filesystem error report for type 5 error -117 [ 242.140434][T10044] EXT4-fs error (device loop5): ext4_evict_inode:265: inode #11: comm syz.5.1473: mark_inode_dirty error [ 242.163493][T10044] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.164141][T10044] EXT4-fs warning (device loop5): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 242.232794][T10044] EXT4-fs (loop5): 1 orphan inode deleted [ 242.252254][ T153] EXT4-fs error (device loop5): ext4_map_blocks:789: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 242.281884][T10044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.301194][ T153] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 242.302635][ T153] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 242.341389][ T153] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 0 [ 242.415713][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1476'. [ 242.526471][ T8339] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.536038][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 242.545937][ T8339] EXT4-fs error (device loop5): __ext4_get_inode_loc:4800: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 242.545992][ T8339] loop5: lost filesystem error report for type 5 error -117 [ 242.546282][ T8339] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6294: Corrupt filesystem [ 242.546304][ T8339] loop5: lost filesystem error report for type 5 error -117 [ 242.546615][ T8339] EXT4-fs error (device loop5): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 242.621402][ T8339] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 242.887817][ T24] usb 4-1: USB disconnect, device number 12 [ 242.944708][T10066] loop6: detected capacity change from 0 to 512 [ 243.360937][T10076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.756178][T10095] loop6: detected capacity change from 0 to 256 [ 243.923076][T10095] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 244.155679][T10111] loop2: detected capacity change from 0 to 64 [ 245.124280][T10127] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1508'. [ 245.194338][T10125] loop2: detected capacity change from 0 to 4096 [ 245.342851][ T48] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.404874][T10130] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.430279][ T48] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.504677][ T48] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.575063][ T48] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.383334][T10114] loop3: detected capacity change from 0 to 262144 [ 246.409675][T10114] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1502 (10114) [ 246.480634][T10114] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 246.492472][T10114] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 246.720790][T10114] BTRFS info (device loop3): deleted orphan free space tree entries [ 246.731249][T10114] BTRFS info (device loop3): checking UUID tree [ 246.742780][T10114] BTRFS info (device loop3): enabling ssd optimizations [ 246.749815][T10114] BTRFS info (device loop3): enabling free space tree [ 247.014999][ T5854] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 247.371418][ T5162] Bluetooth: hci4: command 0x0406 tx timeout [ 247.520895][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 247.742718][T10200] loop5: detected capacity change from 0 to 1024 [ 248.209036][T10216] vcan0: tx address claim with dest, not broadcast [ 248.241736][ T29] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 248.366727][T10218] loop3: detected capacity change from 0 to 2048 [ 248.419459][ T29] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 248.437817][T10218] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 248.454771][ T29] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 248.488895][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 248.510052][T10218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.525373][ T29] usb 7-1: config 1 has no interface number 0 [ 248.549096][ T29] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 248.574919][ T29] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 248.621201][ T29] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 248.650471][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.705491][ T29] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 248.844875][ T5976] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 248.920152][ T29] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 248.953097][ T29] snd_usb_pod 7-1:1.1: invalid control EP [ 248.974269][ T29] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 248.999027][ T29] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 249.020311][ T5976] usb 4-1: Using ep0 maxpacket: 32 [ 249.025139][ T29] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 249.045442][ T5976] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 249.078290][ T5976] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 249.113342][ T5976] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 249.138370][ T5976] usb 4-1: config 1 has no interface number 0 [ 249.156244][ T5976] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.177723][ T29] usb 7-1: USB disconnect, device number 3 [ 249.192484][ T5976] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 249.234777][ T5976] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 249.269494][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.320547][ T5976] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 249.527884][ T5976] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 249.933835][ T5976] usb 4-1: USB disconnect, device number 13 [ 249.974365][ T5976] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 250.693197][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 250.861776][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 250.874583][T10278] netlink: 'syz.6.1565': attribute type 10 has an invalid length. [ 250.889190][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.904097][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1565'. [ 250.931692][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.974417][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.003542][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.056956][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.076477][T10281] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 251.089022][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.351622][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 251.368099][ T29] usbtmc 6-1:16.0: can't read capabilities [ 251.549990][T10293] loop6: detected capacity change from 0 to 8 [ 251.611544][ T5933] usb 6-1: USB disconnect, device number 5 [ 252.231322][T10310] netlink: 'syz.6.1575': attribute type 83 has an invalid length. [ 252.885926][T10334] loop2: detected capacity change from 0 to 256 [ 252.914902][T10336] loop6: detected capacity change from 0 to 128 [ 253.003494][T10336] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.032481][T10336] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.214424][T10336] fscrypt (loop6, inode 12): Mutually exclusive encryption flags (0x1b) [ 253.369395][ T8380] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.380796][T10316] loop1: detected capacity change from 0 to 32768 [ 253.592722][T10348] loop6: detected capacity change from 0 to 1024 [ 253.614665][T10348] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 253.614665][T10348] [ 253.824732][T10350] loop3: detected capacity change from 0 to 4096 [ 253.959002][T10350] ntfs3(loop3): Failed to initialize $Secure (-22). [ 254.059543][T10360] overlayfs: invalid origin (0000) [ 254.083805][T10350] pim6reg9: entered allmulticast mode [ 254.338195][T10366] loop1: detected capacity change from 0 to 2048 [ 254.395582][T10366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.431317][T10370] loop6: detected capacity change from 0 to 512 [ 254.475662][T10370] EXT4-fs (loop6): Test dummy encryption mode enabled [ 254.487425][ T30] audit: type=1800 audit(1774912211.444:76): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1602" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 254.542652][T10370] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 254.601709][T10370] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 254.643087][T10370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.758411][T10370] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 254.857394][ T29] IPVS: starting estimator thread 0... [ 254.923156][ T8380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.981745][T10383] IPVS: using max 27 ests per chain, 64800 per kthread [ 255.153608][T10389] tipc: Started in network mode [ 255.160772][T10388] loop2: detected capacity change from 0 to 256 [ 255.184391][T10389] tipc: Node identity ac14140f, cluster identity 4711 [ 255.204612][T10388] exfat: Deprecated parameter 'utf8' [ 255.240427][T10389] tipc: New replicast peer: 255.255.255.255 [ 255.277978][T10388] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 255.308110][T10393] loop1: detected capacity change from 0 to 256 [ 255.334749][T10389] tipc: Enabled bearer , priority 10 [ 255.387358][T10393] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 255.414530][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1615'. [ 255.543881][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.550586][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.598870][T10398] loop5: detected capacity change from 0 to 512 [ 255.610487][T10398] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 255.685476][T10402] netlink: 'syz.6.1616': attribute type 5 has an invalid length. [ 255.819239][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 255.891263][ T5933] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 256.038329][ T153] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 256.103588][ T5933] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.129081][ T5933] usb 3-1: config 0 has no interface number 0 [ 256.156858][ T5933] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 256.171742][ T153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 256.215928][ T5933] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 256.263747][ T5933] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 256.302691][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.360011][ T5933] usb 3-1: config 0 descriptor?? [ 256.395992][T10401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 256.426878][ T29] tipc: Node number set to 2886997007 [ 256.439748][T10417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.480163][ T5933] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 256.838642][ T5902] usb 3-1: USB disconnect, device number 14 [ 256.844929][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 256.997726][T10435] input: syz0 as /devices/virtual/input/input24 [ 257.016440][T10435] input: failed to attach handler leds to device input24, error: -6 [ 257.516198][T10456] Bluetooth: MGMT ver 1.23 [ 257.777153][ T30] audit: type=1800 audit(1774912214.764:77): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1641" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 257.915519][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'. [ 258.012399][T10471] set_capacity_and_notify: 3 callbacks suppressed [ 258.012419][T10471] loop3: detected capacity change from 0 to 128 [ 258.039299][T10471] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 258.053038][T10471] hpfs: filesystem error: improperly stopped [ 258.059167][T10471] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 258.068034][T10471] hpfs: You really don't want any checks? You are crazy... [ 258.075873][T10473] kvm: kvm [10472]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x5 [ 258.090216][T10471] hpfs: hpfs_map_sector(): read error [ 258.097780][T10471] hpfs: code page support is disabled [ 258.106095][T10471] hpfs: hpfs_map_4sectors(): unaligned read [ 258.113608][T10471] hpfs: hpfs_map_4sectors(): unaligned read [ 258.119815][T10471] hpfs: filesystem error: unable to find root dir [ 258.136966][T10471] hpfs: hpfs_map_4sectors(): unaligned read [ 258.145593][T10471] hpfs: hpfs_map_sector(): read error [ 258.152976][T10471] hpfs: hpfs_map_sector(): read error [ 258.468822][T10482] ------------[ cut here ]------------ [ 258.475508][T10482] 1 [ 258.475537][T10482] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#1: syz.3.1651/10482 [ 258.487314][T10482] Modules linked in: [ 258.492898][T10482] CPU: 1 UID: 0 PID: 10482 Comm: syz.3.1651 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.503942][T10482] Tainted: [L]=SOFTLOCKUP [ 258.508303][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.518465][T10482] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 258.523501][T10482] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 da ad b7 f7 66 90 e8 d3 ad b7 f7 31 ff 48 89 de ba 02 00 00 00 e8 d4 b5 69 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 258.543208][T10482] RSP: 0018:ffffc9000daaf1c0 EFLAGS: 00010286 [ 258.549362][T10482] RAX: 728aebfe3e7ec100 RBX: ffff8880369d8500 RCX: 0000000080000401 [ 258.557422][T10482] RDX: 0000000000000002 RSI: ffffffff8df46468 RDI: ffffffff8c288660 [ 258.565481][T10482] RBP: ffffc9000daaf4c0 R08: ffffffff90128ff7 R09: 1ffffffff20251fe [ 258.573660][T10482] R10: dffffc0000000000 R11: fffffbfff20251ff R12: dffffc0000000000 [ 258.581713][T10482] R13: 0000000000000000 R14: ffff8880369d8500 R15: dffffc0000000000 [ 258.589746][T10482] FS: 00007f6b6e7c76c0(0000) GS:ffff88812553f000(0000) knlGS:0000000000000000 [ 258.598772][T10482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.605584][T10482] CR2: 0000200000000100 CR3: 000000007be34000 CR4: 00000000003526f0 [ 258.613704][T10482] Call Trace: [ 258.617026][T10482] [ 258.619997][T10482] ip_push_pending_frames+0x8b/0x110 [ 258.625456][T10482] __icmp_send+0x118d/0x1590 [ 258.630130][T10482] ? __icmp_send+0x22b/0x1590 [ 258.634924][T10482] ? __pfx___icmp_send+0x10/0x10 [ 258.639940][T10482] ? ip_route_input_noref+0xad/0x270 [ 258.645343][T10482] ? __pfx_ip_route_input_noref+0x10/0x10 [ 258.651159][T10482] ? tcp_v4_early_demux+0x2e4/0x9a0 [ 258.656411][T10482] ip_options_compile+0x80/0xb0 [ 258.661514][T10482] ip_rcv_finish_core+0xaa2/0x1c00 [ 258.666691][T10482] ip_rcv_finish+0x14c/0x2a0 [ 258.671384][T10482] NF_HOOK+0x336/0x3c0 [ 258.675526][T10482] ? __pfx_ip_rcv_finish+0x10/0x10 [ 258.680697][T10482] ? NF_HOOK+0x9e/0x3c0 [ 258.684948][T10482] ? __pfx_NF_HOOK+0x10/0x10 [ 258.689600][T10482] ? __pfx_ip_rcv_finish+0x10/0x10 [ 258.694796][T10482] ? netif_receive_skb+0x102/0xbf0 [ 258.699959][T10482] ? __pfx_ip_rcv+0x10/0x10 [ 258.704555][T10482] netif_receive_skb+0x45b/0xbf0 [ 258.709575][T10482] ? __pfx_netif_receive_skb+0x10/0x10 [ 258.715135][T10482] ? tun_rx_batched+0x185/0x790 [ 258.720046][T10482] tun_rx_batched+0x1de/0x790 [ 258.724826][T10482] ? __build_skb+0x62/0x440 [ 258.729385][T10482] ? __pfx_tun_rx_batched+0x10/0x10 [ 258.734722][T10482] ? tun_get_user+0x2757/0x4300 [ 258.739631][T10482] ? tun_get_user+0x2757/0x4300 [ 258.744585][T10482] ? tun_get_user+0x2364/0x4300 [ 258.749498][T10482] ? tun_get_user+0x2364/0x4300 [ 258.754466][T10482] ? __local_bh_enable_ip+0xd0/0x130 [ 258.759819][T10482] tun_get_user+0x2b8c/0x4300 [ 258.764596][T10482] ? tun_get_user+0x2757/0x4300 [ 258.769559][T10482] ? aa_file_perm+0x50e/0x15e0 [ 258.774422][T10482] ? __pfx_tun_get_user+0x10/0x10 [ 258.779513][T10482] ? __lock_acquire+0x6b5/0x2cf0 [ 258.784569][T10482] ? ref_tracker_alloc+0x35c/0x4c0 [ 258.789736][T10482] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 258.795315][T10482] ? tun_get+0x1c/0x2f0 [ 258.799558][T10482] ? tun_get+0x1c/0x2f0 [ 258.803819][T10482] ? tun_get+0x1c/0x2f0 [ 258.808016][T10482] ? tun_get+0x1c/0x2f0 [ 258.812278][T10482] tun_chr_write_iter+0x113/0x200 [ 258.817365][T10482] vfs_write+0x61d/0xb90 [ 258.821716][T10482] ? __pfx_vfs_write+0x10/0x10 [ 258.826552][T10482] ? __fget_files+0x2a/0x420 [ 258.831250][T10482] ksys_write+0x150/0x270 [ 258.835624][T10482] ? __pfx_ksys_write+0x10/0x10 [ 258.840534][T10482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.846672][T10482] do_syscall_64+0x15f/0xf80 [ 258.851362][T10482] ? trace_irq_disable+0x3b/0x140 [ 258.856447][T10482] ? clear_bhb_loop+0x40/0x90 [ 258.861207][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.867153][T10482] RIP: 0033:0x7f6b6d95d04e [ 258.871646][T10482] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 258.891326][T10482] RSP: 002b:00007f6b6e7c6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.899787][T10482] RAX: ffffffffffffffda RBX: 00007f6b6e7c76c0 RCX: 00007f6b6d95d04e [ 258.907857][T10482] RDX: 000000000000005a RSI: 00002000000002c0 RDI: 00000000000000c8 [ 258.915910][T10482] RBP: 00007f6b6da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 258.923971][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.932018][T10482] R13: 00007f6b6dc16038 R14: 00007f6b6dc15fa0 R15: 00007ffdd6acad28 [ 258.940068][T10482] [ 258.943198][T10482] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 258.950522][T10482] CPU: 1 UID: 0 PID: 10482 Comm: syz.3.1651 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.961527][T10482] Tainted: [L]=SOFTLOCKUP [ 258.965888][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 258.975977][T10482] Call Trace: [ 258.979318][T10482] [ 258.982286][T10482] vpanic+0x56c/0xa60 [ 258.986330][T10482] ? __pfx__printk+0x10/0x10 [ 258.990966][T10482] ? __pfx_vpanic+0x10/0x10 [ 258.995522][T10482] ? is_bpf_text_address+0x292/0x2b0 [ 259.000862][T10482] ? is_bpf_text_address+0x26/0x2b0 [ 259.006119][T10482] panic+0xc5/0xd0 [ 259.009894][T10482] ? __pfx_panic+0x10/0x10 [ 259.014370][T10482] __warn+0x315/0x4c0 [ 259.018393][T10482] ? ip_rt_bug+0x2d/0x140 [ 259.022756][T10482] ? ip_rt_bug+0x2d/0x140 [ 259.027157][T10482] __report_bug+0x29a/0x540 [ 259.031691][T10482] ? NF_HOOK+0x336/0x3c0 [ 259.035967][T10482] ? netif_receive_skb+0x45b/0xbf0 [ 259.041113][T10482] ? tun_rx_batched+0x1de/0x790 [ 259.046006][T10482] ? ip_rt_bug+0x2d/0x140 [ 259.050390][T10482] ? __pfx___report_bug+0x10/0x10 [ 259.055455][T10482] ? ip_rt_bug+0x2d/0x140 [ 259.059814][T10482] report_bug+0x16a/0x220 [ 259.064171][T10482] ? ip_rt_bug+0x2d/0x140 [ 259.068525][T10482] ? ip_rt_bug+0x2f/0x140 [ 259.072884][T10482] handle_bug+0x9c/0x200 [ 259.077160][T10482] exc_invalid_op+0x1a/0x50 [ 259.081698][T10482] asm_exc_invalid_op+0x1a/0x20 [ 259.086565][T10482] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 259.091558][T10482] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 da ad b7 f7 66 90 e8 d3 ad b7 f7 31 ff 48 89 de ba 02 00 00 00 e8 d4 b5 69 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 259.111280][T10482] RSP: 0018:ffffc9000daaf1c0 EFLAGS: 00010286 [ 259.117376][T10482] RAX: 728aebfe3e7ec100 RBX: ffff8880369d8500 RCX: 0000000080000401 [ 259.125363][T10482] RDX: 0000000000000002 RSI: ffffffff8df46468 RDI: ffffffff8c288660 [ 259.133358][T10482] RBP: ffffc9000daaf4c0 R08: ffffffff90128ff7 R09: 1ffffffff20251fe [ 259.141352][T10482] R10: dffffc0000000000 R11: fffffbfff20251ff R12: dffffc0000000000 [ 259.149346][T10482] R13: 0000000000000000 R14: ffff8880369d8500 R15: dffffc0000000000 [ 259.157446][T10482] ip_push_pending_frames+0x8b/0x110 [ 259.162762][T10482] __icmp_send+0x118d/0x1590 [ 259.167382][T10482] ? __icmp_send+0x22b/0x1590 [ 259.172100][T10482] ? __pfx___icmp_send+0x10/0x10 [ 259.177091][T10482] ? ip_route_input_noref+0xad/0x270 [ 259.182408][T10482] ? __pfx_ip_route_input_noref+0x10/0x10 [ 259.188186][T10482] ? tcp_v4_early_demux+0x2e4/0x9a0 [ 259.193421][T10482] ip_options_compile+0x80/0xb0 [ 259.198300][T10482] ip_rcv_finish_core+0xaa2/0x1c00 [ 259.203639][T10482] ip_rcv_finish+0x14c/0x2a0 [ 259.208270][T10482] NF_HOOK+0x336/0x3c0 [ 259.212389][T10482] ? __pfx_ip_rcv_finish+0x10/0x10 [ 259.217526][T10482] ? NF_HOOK+0x9e/0x3c0 [ 259.221717][T10482] ? __pfx_NF_HOOK+0x10/0x10 [ 259.226346][T10482] ? __pfx_ip_rcv_finish+0x10/0x10 [ 259.231525][T10482] ? netif_receive_skb+0x102/0xbf0 [ 259.236665][T10482] ? __pfx_ip_rcv+0x10/0x10 [ 259.241200][T10482] netif_receive_skb+0x45b/0xbf0 [ 259.246187][T10482] ? __pfx_netif_receive_skb+0x10/0x10 [ 259.251686][T10482] ? tun_rx_batched+0x185/0x790 [ 259.256571][T10482] tun_rx_batched+0x1de/0x790 [ 259.261284][T10482] ? __build_skb+0x62/0x440 [ 259.265814][T10482] ? __pfx_tun_rx_batched+0x10/0x10 [ 259.271043][T10482] ? tun_get_user+0x2757/0x4300 [ 259.275942][T10482] ? tun_get_user+0x2757/0x4300 [ 259.280836][T10482] ? tun_get_user+0x2364/0x4300 [ 259.285731][T10482] ? tun_get_user+0x2364/0x4300 [ 259.290623][T10482] ? __local_bh_enable_ip+0xd0/0x130 [ 259.295972][T10482] tun_get_user+0x2b8c/0x4300 [ 259.300684][T10482] ? tun_get_user+0x2757/0x4300 [ 259.305595][T10482] ? aa_file_perm+0x50e/0x15e0 [ 259.310403][T10482] ? __pfx_tun_get_user+0x10/0x10 [ 259.315459][T10482] ? __lock_acquire+0x6b5/0x2cf0 [ 259.320472][T10482] ? ref_tracker_alloc+0x35c/0x4c0 [ 259.325613][T10482] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 259.331187][T10482] ? tun_get+0x1c/0x2f0 [ 259.335371][T10482] ? tun_get+0x1c/0x2f0 [ 259.339589][T10482] ? tun_get+0x1c/0x2f0 [ 259.343774][T10482] ? tun_get+0x1c/0x2f0 [ 259.347954][T10482] tun_chr_write_iter+0x113/0x200 [ 259.353037][T10482] vfs_write+0x61d/0xb90 [ 259.357338][T10482] ? __pfx_vfs_write+0x10/0x10 [ 259.362140][T10482] ? __fget_files+0x2a/0x420 [ 259.366857][T10482] ksys_write+0x150/0x270 [ 259.371211][T10482] ? __pfx_ksys_write+0x10/0x10 [ 259.376105][T10482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.382200][T10482] do_syscall_64+0x15f/0xf80 [ 259.386830][T10482] ? trace_irq_disable+0x3b/0x140 [ 259.391878][T10482] ? clear_bhb_loop+0x40/0x90 [ 259.396581][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.402494][T10482] RIP: 0033:0x7f6b6d95d04e [ 259.406936][T10482] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 259.426566][T10482] RSP: 002b:00007f6b6e7c6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.435016][T10482] RAX: ffffffffffffffda RBX: 00007f6b6e7c76c0 RCX: 00007f6b6d95d04e [ 259.443013][T10482] RDX: 000000000000005a RSI: 00002000000002c0 RDI: 00000000000000c8 [ 259.451009][T10482] RBP: 00007f6b6da32c91 R08: 0000000000000000 R09: 0000000000000000 [ 259.459004][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.467008][T10482] R13: 00007f6b6dc16038 R14: 00007f6b6dc15fa0 R15: 00007ffdd6acad28 [ 259.475035][T10482] [ 259.479006][T10482] Kernel Offset: disabled [ 259.483348][T10482] Rebooting in 86400 seconds..