last executing test programs: 6m8.820428135s ago: executing program 32 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x20, r1, 0x1, 0x70bd28, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c081}, 0x0) 3m50.330063896s ago: executing program 33 (id=1740): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) 3m49.273568923s ago: executing program 34 (id=1745): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0xcba, 0x8, 0x7, 0x0, 0x55a}) 3m34.052275295s ago: executing program 2 (id=1839): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0xd) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) 3m33.809747092s ago: executing program 2 (id=1840): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x1c, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21c6295e}}}}]}, 0x78}}, 0x0) 3m32.988398063s ago: executing program 2 (id=1846): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000280)={0x0, 0xe, 0x8}) 3m32.737011009s ago: executing program 2 (id=1848): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4040, &(0x7f00000001c0)={[{@jqfmt_vfsv1}]}, 0xfd, 0x57b, &(0x7f0000001140)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0xa00008, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) 3m31.969275306s ago: executing program 2 (id=1851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x2c}}, 0x80) 3m29.947812583s ago: executing program 2 (id=1874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}}, 0x40810) 3m29.205725945s ago: executing program 35 (id=1874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}}, 0x40810) 2m27.665958067s ago: executing program 9 (id=2290): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x400c0) 2m26.428275426s ago: executing program 9 (id=2300): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) cachestat(r0, &(0x7f00000001c0)={0x800, 0x100}, 0x0, 0xee) 2m26.1638633s ago: executing program 9 (id=2305): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x120, 0x20}, {0xffffffff80000001, 0x1be, 0xff, 0x0, 0x0, 0x4000, 0x0, 0x5}, {0x800, 0x0, 0xfffffffffffffff1}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}}, 0xe4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 2m25.877925669s ago: executing program 9 (id=2309): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x800449, &(0x7f0000000000)=ANY=[], 0x2, 0x19d, &(0x7f00000007c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x799f4f8729a3733e) 2m25.283422534s ago: executing program 9 (id=2315): memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) io_setup(0xea, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0}]) 2m24.239846297s ago: executing program 9 (id=2320): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000812, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"/396, @ANYBLOB="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", @ANYBLOB="b0790a07e1e471aed209036fa5f5ca6bc1ad170371c5e2bd52cf99296e6cdd0882cc4c075a7c4b8ca0d78022160660db09219ebb75dc37499a8272c148662b3afc124ff55a705238d347a5a54bc22fc6e8539f02d1a14d4df87689f2e34e7449a843df2a4e9fbe059f2102bb7efa83db5ef26895be033858456061b9ac965c95f1928de05eb811731601", @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103441, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5) 2m23.751182649s ago: executing program 36 (id=2320): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000812, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"/396, @ANYBLOB="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", @ANYBLOB="b0790a07e1e471aed209036fa5f5ca6bc1ad170371c5e2bd52cf99296e6cdd0882cc4c075a7c4b8ca0d78022160660db09219ebb75dc37499a8272c148662b3afc124ff55a705238d347a5a54bc22fc6e8539f02d1a14d4df87689f2e34e7449a843df2a4e9fbe059f2102bb7efa83db5ef26895be033858456061b9ac965c95f1928de05eb811731601", @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103441, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129a42, 0x5) 2m13.901105365s ago: executing program 7 (id=2375): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) 2m12.808487707s ago: executing program 7 (id=2379): syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009780)='./bus\x00', 0x1, &(0x7f0000000240)={[{@gquota}, {@nolargeio}, {@prjquota}]}, 0x1, 0x98cd, &(0x7f00000097c0)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 2m10.381346294s ago: executing program 7 (id=2389): syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x43, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x190008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') 2m9.190649443s ago: executing program 7 (id=2393): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x800449, &(0x7f0000000000)=ANY=[], 0x2, 0x19d, &(0x7f00000007c0)="$eJzs0c9qE1EUx/HvuXOTTApVouKiBRuwOE6otJPuXAVXETLgwo1g0JCOTXGqJBPElha6EUGqfQJBF6JLFXQlouC6uBBc+GfTnTSLrsSFjEznKr5D7wdmfpwDd+Zwbi/pJyXg995alwb7HA7xEUEDU5L3lMrztal/mNzKg3Om3jT5zOREsrJ6vRPH0aB6tkrlv0bZnKxA3hpjkLzguKIsNJDPe2vdjlwNSRssq4WQSovafZw2ff8BE3qcY1dwSL1Nziv64rXg8OzQZTZZWT2ztNxZjBajG/X6PP/E0dwrxL8nikes44eUQsr+OoU2d7b1GDOC+D31zZHaiGKbrW3n9MmZEcrfJUV4540ofdW9qrrIKdzL2fBNjgqPcUKmW5QVmmtLcTTXRC6olxLoT/pnQeFuOI7bvRkv3L2k5FfxaUN2XQl2KHgB9VrAfLYajvCelIe3mpP5wDvfmZI32V/+7lVvZO/npprkBE+K3O4Mh4OgCB/EC6lnTwXG9z+nQqazC+atOWOCL4JlWZZlWZZlWZZ1YPwJAAD//03kWy0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x799f4f8729a3733e) 2m8.656131426s ago: executing program 7 (id=2397): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = open(&(0x7f0000000240)='.\x00', 0x12000, 0x95) flock(r0, 0x6) close(0x3) 2m6.723398403s ago: executing program 7 (id=2406): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x115, 0x0, &(0x7f0000001300)="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", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200c2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2m5.805180042s ago: executing program 37 (id=2406): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x115, 0x0, &(0x7f0000001300)="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", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200c2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m26.329106805s ago: executing program 6 (id=2638): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1m25.648623126s ago: executing program 6 (id=2643): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0x91e}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x4, 0x0, 0x0, 0x0, 0xce03b2}, 0x9c) 1m25.308666056s ago: executing program 6 (id=2649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="0000001ff54e0000100000000000", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m24.318852824s ago: executing program 6 (id=2655): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000014, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024", @ANYBLOB="97b61e88553572fd2efdef5bcdc603f5cf17a49bf1d8457078ace3df30c7c941b1103b86953f4b1b43816a58622af5d511ff04c37a8893dc5ea494888e218c88326783f69ee710da511f74fe812d33a93825fb7eb8eca7196d483f5689286f28bf447eca9c6676aad40948ce1a2154e82ce6ecb85f76965d75d05e46", @ANYRESDEC], 0x1, 0x2e1, &(0x7f0000000600)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) 1m23.419986642s ago: executing program 6 (id=2662): syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905073e"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x2020000, 0x0, 0x0, &(0x7f0000000300), &(0x7f00000003c0), &(0x7f0000000400)="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") 1m22.483644139s ago: executing program 6 (id=2669): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x1}, {0x1, 0x6}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc43c223e63755adf}, 0x20004000) 1m21.715791665s ago: executing program 38 (id=2669): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x1}, {0x1, 0x6}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc43c223e63755adf}, 0x20004000) 5.617091117s ago: executing program 1 (id=3251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x24, r1, 0x1, 0x70bd26, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}, 0x1, 0x0, 0x0, 0x24d41b6036a153c7}, 0x4) 5.149644512s ago: executing program 4 (id=3256): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "86352346"}, @local=@item_4={0x3, 0x2, 0x8, "b1cece77"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) 5.128887998s ago: executing program 1 (id=3257): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c4}}, 0x400c800) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 5.062021943s ago: executing program 0 (id=3258): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000280)={{r1}, 0x1, &(0x7f0000000140)=[0x8000000000000001], 0x0, 0xb}) 4.742497108s ago: executing program 1 (id=3261): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x6, 0xedcb, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) 4.400089432s ago: executing program 1 (id=3264): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mknod(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x40, 0x1000) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./file0\x00') 4.334931537s ago: executing program 3 (id=3265): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0cc}, 0x4000) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.033774251s ago: executing program 3 (id=3267): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f0000000080), 0x4) 3.631388053s ago: executing program 3 (id=3271): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 3.470828081s ago: executing program 3 (id=3272): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) 2.925270998s ago: executing program 8 (id=3276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000011c0)) 2.901593557s ago: executing program 0 (id=3277): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) 2.732806651s ago: executing program 4 (id=3279): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000fc0)={{@any, 0x2}, @host, 0x0, 0x0, 0x20005e, 0x8, 0xd6, 0x4000, 0x2}) 2.581559785s ago: executing program 8 (id=3280): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, 0xffffffffffffffff, 0x2e, 0x0, @void}, 0x10) 2.412987175s ago: executing program 3 (id=3281): r0 = epoll_create(0x4) epoll_pwait2(r0, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) 2.293663182s ago: executing program 4 (id=3283): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x3c, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) 2.175090794s ago: executing program 8 (id=3284): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f0000003300)={{0x1, 0x0, 0xee01, 0x0, 0x0, 0x20}, 0x0, 0x0, 0x80000001, 0xffffffff, 0x5fc9, 0x1, 0x5, 0x6, 0xf, 0x7f}) 2.138712517s ago: executing program 5 (id=3285): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500030000000500", @ANYRES8=r0], 0x7c}}, 0x0) 2.061890216s ago: executing program 1 (id=3286): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000), &(0x7f0000000300), &(0x7f00000004c0)) 2.011026529s ago: executing program 4 (id=3287): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x8) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.010693508s ago: executing program 3 (id=3288): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x5, 0x0, 0x0, 0x0}], 0x1}) 1.69766763s ago: executing program 5 (id=3289): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0xfffbff7d, 0x9, 0x2, "0c41920887e8d2b7921105000000000000006b", 0x4, 0x203}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x5) 1.638914588s ago: executing program 4 (id=3290): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f0000000140)={[{@time_offset={'time_offset', 0x3d, 0x6}}, {@keep_last_dots}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0xd}}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@zero_size_dir}, {@time_offset={'time_offset', 0x3d, 0xd2}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}]}, 0x1, 0x1547, &(0x7f0000004880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) 1.590255021s ago: executing program 8 (id=3291): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x58031, 0xffffffffffffffff, 0xc707f000) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 1.536428122s ago: executing program 0 (id=3292): setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x58, 0x40044}}], 0x1, 0x44) 1.198630489s ago: executing program 5 (id=3293): unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r1, r0, 0x7}, 0x10) 1.192470615s ago: executing program 0 (id=3294): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@random="e904a200", @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0xdffd, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0xfc, 0x1, 0x9}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 1.001933977s ago: executing program 8 (id=3295): r0 = io_uring_setup(0x1557, &(0x7f0000000200)={0x0, 0x6525, 0x40000, 0x1, 0x19e}) mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1000000, 0x4052, r0, 0x8000000) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 899.69069ms ago: executing program 0 (id=3296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYBLOB="480200000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a31000000001c020380f80000803e00034000000002"], 0x248}, 0x1, 0x0, 0x0, 0x4040851}, 0x8000) 889.23025ms ago: executing program 4 (id=3297): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x10012, &(0x7f0000000980)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYRES16=0x0, @ANYRES32], 0x4, 0x337, &(0x7f0000000140)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f00000000000000000700000030000280"], 0x44}, 0x1, 0x0, 0x0, 0x4040c40}, 0x0) 835.077053ms ago: executing program 5 (id=3298): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 450.571435ms ago: executing program 0 (id=3299): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r0, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) 337.98596ms ago: executing program 5 (id=3300): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x36, 0x107, 0xfffffffe, 0x1000, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 224.429244ms ago: executing program 1 (id=3301): r0 = semget(0x1, 0x4, 0x69c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f00000000c0)=[{0x0, 0x400, 0x800}, {0x1, 0xb7ba, 0x1000}, {0x1, 0x2, 0x1800}], 0x3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 95.529842ms ago: executing program 8 (id=3302): mount(0x0, 0x0, &(0x7f00000001c0)='btrfs\x00', 0x30, &(0x7f0000000200)='$\'.\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x40, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x700, 0x0, 0xfffffff9}}) 0s ago: executing program 5 (id=3303): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa4}}, 0x0) close(0x4) kernel console output (not intermixed with test programs): t/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff05cf5e68e code=0x7ffc0000 [ 436.109655][ T30] audit: type=1326 audit(1782918943.795:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.1.2552" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff05cf9dc87 code=0x7ffc0000 [ 436.177264][T13849] loop0: detected capacity change from 0 to 512 [ 436.199764][ T30] audit: type=1326 audit(1782918943.805:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.1.2552" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff05cf5e68e code=0x7ffc0000 [ 436.235152][T13849] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 436.256328][ T5846] usb 9-1: device descriptor read/64, error -71 [ 436.315073][ T30] audit: type=1326 audit(1782918943.805:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.1.2552" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff05cf9daeb code=0x7ffc0000 [ 436.368877][T13826] loop3: detected capacity change from 0 to 32768 [ 436.396297][ T5743] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 436.413543][ T30] audit: type=1326 audit(1782918943.805:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.1.2552" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff05cf9daeb code=0x7ffc0000 [ 436.421458][T13826] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2549 (13826) [ 436.439313][T13853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2559'. [ 436.525828][ T5846] usb 9-1: reset high-speed USB device number 6 using dummy_hcd [ 436.547362][ T30] audit: type=1326 audit(1782918943.805:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.1.2552" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff05cf5e68e code=0x7ffc0000 [ 436.573991][ T5743] usb 7-1: Using ep0 maxpacket: 16 [ 436.609445][ T5743] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.628572][ T5743] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.653333][ T30] audit: type=1326 audit(1782918943.815:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13832 comm="syz.1.2552" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff05cf9daeb code=0x7ffc0000 [ 436.656842][T13826] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 436.691588][ T5743] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 436.741905][ T5743] usb 7-1: config 0 interface 0 has no altsetting 0 [ 436.762349][ T5743] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 436.767640][T13826] BTRFS info (device loop3): using crc32c checksum algorithm [ 436.795160][ T5743] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.847754][ T5743] usb 7-1: config 0 descriptor?? [ 436.949555][T13873] loop0: detected capacity change from 0 to 64 [ 436.952586][ T5846] usb 9-1: [UEAGLE-ATM] interface 1 not found [ 436.991543][ T5846] ueagle-atm 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 437.031544][T13826] BTRFS info (device loop3): enabling ssd optimizations [ 437.072847][ T5846] usb 9-1: USB disconnect, device number 6 [ 437.088263][T13826] BTRFS info (device loop3): turning on async discard [ 437.129331][T13826] BTRFS info (device loop3): enabling free space tree [ 437.302598][ T5743] hid (null): unknown global tag 0xd [ 437.447721][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 437.508287][ T5743] usb 7-1: USB disconnect, device number 8 [ 437.620478][ T5622] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 437.843687][T13893] loop5: detected capacity change from 0 to 256 [ 438.593130][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 439.137680][T13900] loop3: detected capacity change from 0 to 131072 [ 439.152424][T13900] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 439.161689][T13900] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 439.174178][T13900] F2FS-fs (loop3): invalid crc value [ 439.309840][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.316562][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.372349][T13900] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 439.395487][T13900] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 439.402588][T13900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 439.533816][T13928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2578'. [ 439.786084][T13936] loop8: detected capacity change from 0 to 128 [ 439.844640][T13936] EXT4-fs (loop8): Test dummy encryption mode enabled [ 439.900949][T13936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 439.957716][T13936] System zones: 1-3, 19-19, 35-36 [ 440.031629][T13936] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 440.102038][T13936] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.328965][T13945] loop0: detected capacity change from 0 to 16 [ 440.353329][T13907] loop5: detected capacity change from 0 to 32768 [ 440.379271][T13945] erofs (device loop0): mounted with root inode @ nid 36. [ 440.405115][T13907] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2571 (13907) [ 440.520368][T13907] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 440.582237][T13907] BTRFS info (device loop5): using sha256 checksum algorithm [ 440.598394][T10827] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.869651][T13907] BTRFS info (device loop5): enabling ssd optimizations [ 440.916026][T13907] BTRFS info (device loop5): turning on sync discard [ 440.935131][T13907] BTRFS info (device loop5): enabling free space tree [ 440.963447][T13967] loop8: detected capacity change from 0 to 512 [ 440.986471][T13907] BTRFS info (device loop5): use zlib compression, level 3 [ 441.011992][T13967] EXT4-fs: Ignoring removed bh option [ 441.051526][T13967] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.2585: corrupted in-inode xattr: e_value size too large [ 441.170404][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 441.170424][ T30] audit: type=1800 audit(1782918949.485:104): pid=13907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2571" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 441.213829][T13967] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 441.214862][T13930] loop1: detected capacity change from 0 to 32768 [ 441.224138][T13967] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2585: couldn't read orphan inode 15 (err -117) [ 441.224174][T13967] loop8: lost filesystem error report for type 5 error -117 [ 441.225305][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 441.257022][ C0] EXT4-fs (loop8): initial error at time 1782918949: ext4_iget_extra_inode:5180: inode 15 [ 441.267039][ C0] EXT4-fs (loop8): last error at time 1782918949: ext4_orphan_get:1404 [ 441.281160][T13967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.457025][T13934] loop6: detected capacity change from 0 to 32768 [ 441.504029][T13930] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 441.561396][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.588318][T13934] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2580 (13934) [ 441.653149][T13934] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 441.734463][T13934] BTRFS info (device loop6): using crc32c checksum algorithm [ 441.750945][ T5623] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 442.049470][T13934] BTRFS info (device loop6): enabling ssd optimizations [ 442.100048][T13934] BTRFS info (device loop6): turning on async discard [ 442.153935][T13934] BTRFS info (device loop6): enabling free space tree [ 442.390195][ T5620] ocfs2: Unmounting device (7,1) on (node local) [ 442.503179][T14005] loop8: detected capacity change from 0 to 256 [ 442.825830][T13244] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 443.225588][T14019] loop6: detected capacity change from 0 to 256 [ 443.246879][T14019] exfat: Deprecated parameter 'utf8' [ 443.280012][T14019] exfat: Deprecated parameter 'namecase' [ 443.320449][T14019] exfat: Deprecated parameter 'namecase' [ 443.353177][T14019] exfat: Deprecated parameter 'utf8' [ 443.439445][T14019] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 443.484744][T14019] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 443.829395][T14038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2602'. [ 444.827164][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 445.512709][T14057] loop8: detected capacity change from 0 to 32768 [ 445.553355][T14057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2609 (14057) [ 445.597908][T14077] loop0: detected capacity change from 0 to 1024 [ 445.647134][T14077] EXT4-fs: Ignoring removed oldalloc option [ 445.684533][T14057] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 445.702502][T14077] EXT4-fs: Ignoring removed oldalloc option [ 445.735146][T14077] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 445.750168][T14057] BTRFS info (device loop8): using sha256 checksum algorithm [ 445.800583][T14077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.931154][T14057] BTRFS info (device loop8): enabling ssd optimizations [ 445.939306][T14057] BTRFS info (device loop8): turning on async discard [ 445.947033][T14057] BTRFS info (device loop8): enabling free space tree [ 445.964560][T14077] EXT4-fs (loop0): shut down requested (1) [ 446.117567][T14062] loop3: detected capacity change from 0 to 40427 [ 446.181176][T14062] F2FS-fs (loop3): invalid crc value [ 446.209073][T12859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.291780][T10827] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 446.646350][T14062] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 446.745674][T14062] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 447.017457][T14062] syz.3.2611: attempt to access beyond end of device [ 447.017457][T14062] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 447.035024][T14072] loop6: detected capacity change from 0 to 32768 [ 447.109870][T14062] CPU: 0 UID: 0 PID: 14062 Comm: syz.3.2611 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.109914][T14062] Tainted: [L]=SOFTLOCKUP [ 447.109924][T14062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 447.109939][T14062] Call Trace: [ 447.109950][T14062] [ 447.109960][T14062] dump_stack_lvl+0xe8/0x150 [ 447.109998][T14062] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 447.110049][T14062] f2fs_write_end_io+0x124b/0x1710 [ 447.110108][T14062] __submit_merged_bio+0x258/0x6a0 [ 447.110133][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.110164][T14062] ? rcu_is_watching+0x15/0xb0 [ 447.110204][T14062] __submit_merged_write_cond+0x3c9/0x4e0 [ 447.110265][T14062] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 447.110326][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.110368][T14062] f2fs_write_data_pages+0x2a27/0x36f0 [ 447.110400][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.110472][T14062] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 447.110501][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.110549][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.110580][T14062] ? rcu_is_watching+0x15/0xb0 [ 447.110655][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.110689][T14062] ? __pfx___schedule+0x10/0x10 [ 447.110736][T14062] ? irqentry_exit+0x218/0x8f0 [ 447.110766][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.110799][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.110836][T14062] ? irqentry_exit+0x218/0x8f0 [ 447.110863][T14062] ? trace_irq_disable+0x3b/0x140 [ 447.110914][T14062] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 447.110958][T14062] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 447.110991][T14062] do_writepages+0x338/0x560 [ 447.111021][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.111055][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.111090][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.111120][T14062] ? do_raw_spin_unlock+0xf5/0x210 [ 447.111164][T14062] filemap_fdatawrite+0x1e9/0x2f0 [ 447.111198][T14062] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 447.111273][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.111305][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.111341][T14062] ? do_raw_spin_unlock+0xf5/0x210 [ 447.111383][T14062] f2fs_sync_dirty_inodes+0x30e/0x830 [ 447.111436][T14062] f2fs_write_checkpoint+0xa3d/0x2710 [ 447.111510][T14062] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 447.111589][T14062] ? __pfx_down_write+0x10/0x10 [ 447.111625][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.111655][T14062] ? trace_sched_exit_tp+0x3a/0x130 [ 447.111696][T14062] ? rcu_is_watching+0x15/0xb0 [ 447.111727][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.111764][T14062] f2fs_issue_checkpoint+0x424/0x6f0 [ 447.111819][T14062] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 447.111865][T14062] ? __pfx___schedule+0x10/0x10 [ 447.111957][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.111988][T14062] ? f2fs_sync_fs+0x1f2/0x3c0 [ 447.112033][T14062] f2fs_do_sync_file+0xcd3/0x1960 [ 447.112061][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.112090][T14062] ? __lock_acquire+0x683/0x2cf0 [ 447.112127][T14062] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 447.112201][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.112231][T14062] ? down_write+0x16d/0x200 [ 447.112265][T14062] ? __pfx_down_write+0x10/0x10 [ 447.112302][T14062] ? sb_start_write+0x114/0x1c0 [ 447.112336][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.112365][T14062] ? mnt_want_write_file+0x164/0x200 [ 447.112403][T14062] __f2fs_ioctl+0x3aea/0xbca0 [ 447.112435][T14062] ? __pfx_stack_trace_save+0x10/0x10 [ 447.112474][T14062] ? kasan_save_track+0x4f/0x80 [ 447.112503][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.112534][T14062] ? stack_depot_save_flags+0x33/0x800 [ 447.112561][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.112591][T14062] ? __lock_acquire+0x683/0x2cf0 [ 447.112622][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.112652][T14062] ? kasan_save_track+0x4f/0x80 [ 447.112676][T14062] ? kasan_save_track+0x3e/0x80 [ 447.112698][T14062] ? kasan_save_free_info+0x40/0x50 [ 447.112731][T14062] ? __kasan_slab_free+0x5c/0x80 [ 447.112756][T14062] ? kfree+0x1c5/0x640 [ 447.112788][T14062] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 447.112830][T14062] ? security_file_ioctl+0xc3/0x2a0 [ 447.112861][T14062] ? __se_sys_ioctl+0x47/0x170 [ 447.112894][T14062] ? do_syscall_64+0x174/0x580 [ 447.112923][T14062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.112978][T14062] ? __pfx___f2fs_ioctl+0x10/0x10 [ 447.113006][T14062] ? file_ioctl+0x253/0x7d0 [ 447.113041][T14062] ? __pfx_file_ioctl+0x10/0x10 [ 447.113089][T14062] ? kasan_quarantine_put+0xbb/0x1f0 [ 447.113128][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.113164][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.113198][T14062] ? tomoyo_path_number_perm+0x219/0x5f0 [ 447.113235][T14062] ? tomoyo_path_number_perm+0x219/0x5f0 [ 447.113273][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.113302][T14062] ? do_vfs_ioctl+0x116f/0x1530 [ 447.113340][T14062] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 447.113390][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.113420][T14062] ? hook_file_ioctl+0x1f0/0x5f0 [ 447.113483][T14062] ? __fget_files+0x2a/0x420 [ 447.113513][T14062] ? __fget_files+0x2a/0x420 [ 447.113537][T14062] ? __fget_files+0x3a2/0x420 [ 447.113561][T14062] ? __fget_files+0x2a/0x420 [ 447.113590][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.113620][T14062] ? f2fs_ioctl+0x135/0x250 [ 447.113649][T14062] ? __pfx_f2fs_ioctl+0x10/0x10 [ 447.113678][T14062] __se_sys_ioctl+0xfc/0x170 [ 447.113712][T14062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.113740][T14062] do_syscall_64+0x174/0x580 [ 447.113770][T14062] ? trace_irq_disable+0x3b/0x140 [ 447.113825][T14062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.113851][T14062] RIP: 0033:0x7f676e19de59 [ 447.113875][T14062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.113895][T14062] RSP: 002b:00007f676f089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.113922][T14062] RAX: ffffffffffffffda RBX: 00007f676e425fa0 RCX: 00007f676e19de59 [ 447.113941][T14062] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000004 [ 447.113957][T14062] RBP: 00007f676e233e6f R08: 0000000000000000 R09: 0000000000000000 [ 447.113974][T14062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.113990][T14062] R13: 00007f676e426038 R14: 00007f676e425fa0 R15: 00007ffdb2369758 [ 447.114032][T14062] [ 447.744237][T14062] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 447.751923][T14062] CPU: 1 UID: 0 PID: 14062 Comm: syz.3.2611 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.751959][T14062] Tainted: [L]=SOFTLOCKUP [ 447.751969][T14062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 447.751983][T14062] Call Trace: [ 447.751993][T14062] [ 447.752005][T14062] dump_stack_lvl+0xe8/0x150 [ 447.752041][T14062] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 447.752093][T14062] f2fs_write_end_io+0x124b/0x1710 [ 447.752144][T14062] __submit_merged_bio+0x258/0x6a0 [ 447.752166][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.752193][T14062] ? rcu_is_watching+0x15/0xb0 [ 447.752227][T14062] __submit_merged_write_cond+0x3c9/0x4e0 [ 447.752275][T14062] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 447.752327][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.752362][T14062] f2fs_write_data_pages+0x2a27/0x36f0 [ 447.752389][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.752454][T14062] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 447.752479][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.752520][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.752546][T14062] ? rcu_is_watching+0x15/0xb0 [ 447.752610][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.752637][T14062] ? __pfx___schedule+0x10/0x10 [ 447.752677][T14062] ? irqentry_exit+0x218/0x8f0 [ 447.752702][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.752730][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.752755][T14062] ? irqentry_exit+0x218/0x8f0 [ 447.752779][T14062] ? trace_irq_disable+0x3b/0x140 [ 447.752824][T14062] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 447.752859][T14062] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 447.752888][T14062] do_writepages+0x338/0x560 [ 447.752914][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.752948][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.752978][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.753004][T14062] ? do_raw_spin_unlock+0xf5/0x210 [ 447.753042][T14062] filemap_fdatawrite+0x1e9/0x2f0 [ 447.753071][T14062] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 447.753136][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.753164][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.753195][T14062] ? do_raw_spin_unlock+0xf5/0x210 [ 447.753236][T14062] f2fs_sync_dirty_inodes+0x30e/0x830 [ 447.753282][T14062] f2fs_write_checkpoint+0xa3d/0x2710 [ 447.753347][T14062] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 447.753417][T14062] ? __pfx_down_write+0x10/0x10 [ 447.753446][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.753472][T14062] ? trace_sched_exit_tp+0x3a/0x130 [ 447.753507][T14062] ? rcu_is_watching+0x15/0xb0 [ 447.753534][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.753565][T14062] f2fs_issue_checkpoint+0x424/0x6f0 [ 447.753606][T14062] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 447.753644][T14062] ? __pfx___schedule+0x10/0x10 [ 447.753722][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.753748][T14062] ? f2fs_sync_fs+0x1f2/0x3c0 [ 447.753786][T14062] f2fs_do_sync_file+0xcd3/0x1960 [ 447.753811][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.753836][T14062] ? __lock_acquire+0x683/0x2cf0 [ 447.753867][T14062] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 447.753937][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.753963][T14062] ? down_write+0x16d/0x200 [ 447.753992][T14062] ? __pfx_down_write+0x10/0x10 [ 447.754022][T14062] ? sb_start_write+0x114/0x1c0 [ 447.754051][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.754077][T14062] ? mnt_want_write_file+0x164/0x200 [ 447.754108][T14062] __f2fs_ioctl+0x3aea/0xbca0 [ 447.754134][T14062] ? __pfx_stack_trace_save+0x10/0x10 [ 447.754168][T14062] ? kasan_save_track+0x4f/0x80 [ 447.754193][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.754218][T14062] ? stack_depot_save_flags+0x33/0x800 [ 447.754241][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.754267][T14062] ? __lock_acquire+0x683/0x2cf0 [ 447.754294][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.754319][T14062] ? kasan_save_track+0x4f/0x80 [ 447.754339][T14062] ? kasan_save_track+0x3e/0x80 [ 447.754359][T14062] ? kasan_save_free_info+0x40/0x50 [ 447.754387][T14062] ? __kasan_slab_free+0x5c/0x80 [ 447.754408][T14062] ? kfree+0x1c5/0x640 [ 447.754438][T14062] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 447.754467][T14062] ? security_file_ioctl+0xc3/0x2a0 [ 447.754493][T14062] ? __se_sys_ioctl+0x47/0x170 [ 447.754520][T14062] ? do_syscall_64+0x174/0x580 [ 447.754545][T14062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.754591][T14062] ? __pfx___f2fs_ioctl+0x10/0x10 [ 447.754614][T14062] ? file_ioctl+0x253/0x7d0 [ 447.754646][T14062] ? __pfx_file_ioctl+0x10/0x10 [ 447.754690][T14062] ? kasan_quarantine_put+0xbb/0x1f0 [ 447.754724][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.754756][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.754786][T14062] ? tomoyo_path_number_perm+0x219/0x5f0 [ 447.754818][T14062] ? tomoyo_path_number_perm+0x219/0x5f0 [ 447.754851][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.754876][T14062] ? do_vfs_ioctl+0x116f/0x1530 [ 447.754909][T14062] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 447.754958][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.754984][T14062] ? hook_file_ioctl+0x1f0/0x5f0 [ 447.755038][T14062] ? __fget_files+0x2a/0x420 [ 447.755064][T14062] ? __fget_files+0x2a/0x420 [ 447.755084][T14062] ? __fget_files+0x3a2/0x420 [ 447.755106][T14062] ? __fget_files+0x2a/0x420 [ 447.755130][T14062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 447.755156][T14062] ? f2fs_ioctl+0x135/0x250 [ 447.755181][T14062] ? __pfx_f2fs_ioctl+0x10/0x10 [ 447.755208][T14062] __se_sys_ioctl+0xfc/0x170 [ 447.755238][T14062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.755267][T14062] do_syscall_64+0x174/0x580 [ 447.755293][T14062] ? trace_irq_disable+0x3b/0x140 [ 447.755336][T14062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.755358][T14062] RIP: 0033:0x7f676e19de59 [ 447.755379][T14062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.755398][T14062] RSP: 002b:00007f676f089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.755422][T14062] RAX: ffffffffffffffda RBX: 00007f676e425fa0 RCX: 00007f676e19de59 [ 447.755438][T14062] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000004 [ 447.755452][T14062] RBP: 00007f676e233e6f R08: 0000000000000000 R09: 0000000000000000 [ 447.755466][T14062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.755479][T14062] R13: 00007f676e426038 R14: 00007f676e425fa0 R15: 00007ffdb2369758 [ 447.755516][T14062] [ 448.446559][T14062] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 448.492304][T14072] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 448.526543][T14072] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop6": -EINTR [ 448.526994][T14072] XFS (loop6): log mount failed [ 448.816539][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 448.864358][T14132] loop5: detected capacity change from 0 to 1024 [ 449.084975][ T30] audit: type=1800 audit(1782918957.385:105): pid=14132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2624" name="file1" dev="loop5" ino=26 res=0 errno=0 [ 449.403466][T14149] loop0: detected capacity change from 0 to 256 [ 449.452648][T14149] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 450.014592][T14162] loop0: detected capacity change from 0 to 512 [ 450.247767][T14162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 450.267881][T14164] wlan0 speed is unknown, defaulting to 1000 [ 450.276041][T14162] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.537486][T12859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 451.077884][T14201] loop5: detected capacity change from 0 to 4096 [ 451.173928][T14201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.814767][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.826032][T14223] loop8: detected capacity change from 0 to 64 [ 452.294575][T14231] loop6: detected capacity change from 0 to 128 [ 452.406024][T14231] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 452.495560][T14231] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 452.994188][T13244] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 453.084558][T13244] FAT-fs (loop6): Filesystem has been set read-only [ 453.124696][T13244] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 453.443181][T14258] loop3: detected capacity change from 0 to 64 [ 453.826704][ T5355] kernel write not supported for file bpf-prog (pid: 5355 comm: kworker/1:3) [ 453.841589][T14261] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 453.879778][T14235] loop8: detected capacity change from 0 to 32768 [ 453.958152][T14235] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 454.107151][ T5627] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 454.295379][ T5627] usb 4-1: Using ep0 maxpacket: 16 [ 454.326354][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.359756][ T1114] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.372639][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.430786][ T5627] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 454.489946][ T5627] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 454.519306][T10827] ocfs2: Unmounting device (7,8) on (node local) [ 454.528453][ T5627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.570504][ T5627] usb 4-1: config 0 descriptor?? [ 454.860926][ T1114] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.025139][ T5627] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max [ 455.083620][ T5627] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max [ 455.181247][ T5627] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 455.215869][T14295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2676'. [ 455.257650][ T5627] microsoft 0003:045E:07DA.001F: no inputs found [ 455.290889][ T5627] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway [ 455.364007][ T1114] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.401263][ T5627] usb 4-1: USB disconnect, device number 27 [ 455.424884][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 455.438855][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 455.450351][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 455.460722][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 455.468263][T14303] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2674'. [ 455.497424][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.083835][T14321] sctp: [Deprecated]: syz.1.2682 (pid 14321) Use of int in maxseg socket option. [ 456.083835][T14321] Use struct sctp_assoc_value instead [ 456.118093][ T1114] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.397283][T14329] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2685'. [ 456.415081][T14324] loop3: detected capacity change from 0 to 4096 [ 456.677513][T14335] loop0: detected capacity change from 0 to 2048 [ 456.726711][T14335] EXT4-fs: Ignoring removed nobh option [ 456.790326][T14344] loop5: detected capacity change from 0 to 64 [ 456.835896][T14335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.993574][T14335] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.161401][ T30] audit: type=1800 audit(1782918965.475:106): pid=14335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2687" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 457.314293][T14335] fs-verity (loop0, inode 13): Error -22 reading file data [ 457.314809][ T1114] bridge_slave_1: left allmulticast mode [ 457.370507][T14335] fs-verity (loop0, inode 13): Error -22 building Merkle tree [ 457.390519][ T1114] bridge_slave_1: left promiscuous mode [ 457.420463][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.495445][ T1114] bridge_slave_0: left allmulticast mode [ 457.528951][ T1114] bridge_slave_0: left promiscuous mode [ 457.561312][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.612437][T12859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.626512][ T5632] Bluetooth: hci1: command tx timeout [ 457.768559][T14371] loop1: detected capacity change from 0 to 2048 [ 457.846523][T14371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.953983][T14381] loop5: detected capacity change from 0 to 512 [ 458.054525][T14381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 458.148512][T14381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.275077][T14381] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.512952][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.810471][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.010559][T14405] loop8: detected capacity change from 0 to 512 [ 459.026064][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.037414][T14405] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 459.070914][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.089623][T14405] EXT4-fs (loop8): 1 truncate cleaned up [ 459.110452][ T1114] bond0 (unregistering): Released all slaves [ 459.111482][T14405] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.173671][ T30] audit: type=1800 audit(1782918967.485:107): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2709" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 459.216939][T14401] loop0: detected capacity change from 0 to 4096 [ 459.224595][T14401] ntfs3: Unknown parameter '' [ 459.421525][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.432706][T14299] wlan0 speed is unknown, defaulting to 1000 [ 459.687395][T14417] loop0: detected capacity change from 0 to 256 [ 459.695445][ T5627] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 459.705955][ T5632] Bluetooth: hci1: command tx timeout [ 459.741236][T14417] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 459.913023][ T5627] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 459.941817][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.012485][ T5627] usb 6-1: Product: syz [ 460.030995][ T5627] usb 6-1: Manufacturer: syz [ 460.045347][ T5627] usb 6-1: SerialNumber: syz [ 460.321387][T14399] loop1: detected capacity change from 0 to 32768 [ 460.387826][T14399] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 460.468000][ T5627] rtl8150 6-1:1.0: couldn't reset the device [ 460.484180][ T5627] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 460.533348][ T5627] usb 6-1: USB disconnect, device number 22 [ 460.564659][T14399] XFS (loop1): Ending clean mount [ 460.589200][ T1114] hsr_slave_0: left promiscuous mode [ 460.632882][ T1114] hsr_slave_1: left promiscuous mode [ 460.649113][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.687652][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.732767][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.774406][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.868947][ T1114] veth1_macvtap: left promiscuous mode [ 460.895463][ T1114] veth0_macvtap: left promiscuous mode [ 460.924211][ T1114] veth1_vlan: left promiscuous mode [ 460.943487][ T1114] veth0_vlan: left promiscuous mode [ 461.069056][ T5620] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 461.786095][ T5632] Bluetooth: hci1: command tx timeout [ 461.992765][T14469] loop8: detected capacity change from 0 to 1024 [ 462.103660][T14469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 462.131511][T14469] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.201300][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 462.246375][T14469] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.2727: lblock 0 mapped to illegal pblock 0 (length 1) [ 462.291701][T14469] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 462.310483][T14469] EXT4-fs (loop8): This should not happen!! Data will be lost [ 462.310483][T14469] [ 462.338046][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 462.543117][T10827] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 462.571419][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 462.814466][T14483] input: syz0 as /devices/virtual/input/input29 [ 463.370096][T14497] loop0: detected capacity change from 0 to 128 [ 463.868989][ T5632] Bluetooth: hci1: command tx timeout [ 463.885126][T14509] input: syz1 as /devices/virtual/input/input30 [ 463.946727][T14512] netlink: 'syz.0.2739': attribute type 32 has an invalid length. [ 463.997286][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2739'. [ 464.255742][T14512] bond1: option coupled_control: invalid value (10) [ 464.298200][T14512] bond1 (unregistering): Released all slaves [ 464.477325][T14502] loop1: detected capacity change from 0 to 32768 [ 464.544869][T14502] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 464.565422][ T5627] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 464.678993][T14502] XFS (loop1): Ending clean mount [ 464.786705][ T5627] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 464.841279][ T5627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.966150][ T5627] usb 4-1: config 0 descriptor?? [ 464.984390][ T5620] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 464.994977][ T5627] cp210x 4-1:0.0: cp210x converter detected [ 465.107832][T14554] program syz.8.2751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.416547][ T5627] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 465.519824][ T5627] usb 4-1: cp210x converter now attached to ttyUSB0 [ 465.705702][ T5627] usb 4-1: USB disconnect, device number 28 [ 465.713042][T14299] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.738733][ T5627] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 465.767009][T14299] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.782851][ T5627] cp210x 4-1:0.0: device disconnected [ 465.812980][T14299] bridge_slave_0: entered allmulticast mode [ 465.860078][T14299] bridge_slave_0: entered promiscuous mode [ 465.922412][T14299] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.957596][T14299] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.998002][T14299] bridge_slave_1: entered allmulticast mode [ 466.039790][T14299] bridge_slave_1: entered promiscuous mode [ 466.312859][T14299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.372319][T14299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.631604][T14299] team0: Port device team_slave_0 added [ 466.664475][T14299] team0: Port device team_slave_1 added [ 466.833472][T14299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.870104][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.952913][T14562] loop8: detected capacity change from 0 to 32768 [ 466.972454][T14299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.018849][T14299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.029943][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.084126][T14299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.090627][T14562] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 467.136910][T14611] loop5: detected capacity change from 0 to 256 [ 467.246984][ T5773] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 467.260624][T14562] XFS (loop8): Ending clean mount [ 467.489015][ T5773] usb 2-1: Using ep0 maxpacket: 16 [ 467.499343][T14299] hsr_slave_0: entered promiscuous mode [ 467.543777][T14299] hsr_slave_1: entered promiscuous mode [ 467.554173][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.582752][T14299] debugfs: 'hsr0' already exists in 'hsr' [ 467.598938][ T5773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.629336][T14299] Cannot create hsr debugfs directory [ 467.652120][ T5773] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 467.660425][T10827] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 467.738581][ T5773] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 467.772109][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.857998][ T5773] usb 2-1: config 0 descriptor?? [ 468.344786][ T5773] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 468.401210][ T5773] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 468.504640][ T5773] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 468.590028][ T5773] microsoft 0003:045E:07DA.0020: no inputs found [ 468.655746][ T5773] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 468.668565][T14612] loop3: detected capacity change from 0 to 32768 [ 468.715801][T14612] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2766 (14612) [ 468.735908][ T5773] usb 2-1: USB disconnect, device number 16 [ 468.830444][T14612] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 468.896870][T14612] BTRFS info (device loop3): using sha256 checksum algorithm [ 469.051345][T14639] fido_id[14639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 469.179031][T14612] BTRFS info (device loop3): rebuilding free space tree [ 469.314932][T14612] BTRFS info (device loop3): enabling ssd optimizations [ 469.365687][T14612] BTRFS info (device loop3): using spread ssd allocation scheme [ 469.384106][T14612] BTRFS info (device loop3): turning on async discard [ 469.414660][T14612] BTRFS info (device loop3): enabling free space tree [ 469.453819][T14612] BTRFS info (device loop3): force clearing of disk cache [ 469.687150][T14627] loop5: detected capacity change from 0 to 40427 [ 469.724969][T14627] F2FS-fs (loop5): invalid crc value [ 470.079535][T14627] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 470.190614][T14627] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 470.443322][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2779'. [ 470.473886][ T5623] syz-executor: attempt to access beyond end of device [ 470.473886][ T5623] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 470.507159][ T5623] CPU: 1 UID: 0 PID: 5623 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 470.507199][ T5623] Tainted: [L]=SOFTLOCKUP [ 470.507209][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.507223][ T5623] Call Trace: [ 470.507234][ T5623] [ 470.507245][ T5623] dump_stack_lvl+0xe8/0x150 [ 470.507281][ T5623] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 470.507328][ T5623] f2fs_write_end_io+0x124b/0x1710 [ 470.507390][ T5623] __submit_merged_bio+0x258/0x6a0 [ 470.507415][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.507444][ T5623] ? rcu_is_watching+0x15/0xb0 [ 470.507481][ T5623] __submit_merged_write_cond+0x3c9/0x4e0 [ 470.507533][ T5623] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 470.507590][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.507628][ T5623] f2fs_write_data_pages+0x2a27/0x36f0 [ 470.507657][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.507685][ T5623] ? __lock_acquire+0x683/0x2cf0 [ 470.507750][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 470.507778][ T5623] ? is_bpf_text_address+0x26/0x2b0 [ 470.507819][ T5623] ? arch_stack_walk+0xfb/0x150 [ 470.507886][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.507915][ T5623] ? add_lock_to_list+0xc7/0x100 [ 470.507948][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.507975][ T5623] ? __lock_acquire+0x13e8/0x2cf0 [ 470.508029][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.508054][ T5623] ? do_raw_spin_lock+0x12b/0x2f0 [ 470.508107][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.508134][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.508158][ T5623] ? do_raw_spin_unlock+0xf5/0x210 [ 470.508188][ T5623] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 470.508214][ T5623] do_writepages+0x338/0x560 [ 470.508239][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.508265][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.508294][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.508317][ T5623] ? do_raw_spin_unlock+0xf5/0x210 [ 470.508359][ T5623] filemap_fdatawrite+0x1e9/0x2f0 [ 470.508387][ T5623] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 470.508448][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.508477][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.508507][ T5623] ? do_raw_spin_unlock+0xf5/0x210 [ 470.508544][ T5623] f2fs_sync_dirty_inodes+0x30e/0x830 [ 470.508589][ T5623] f2fs_write_checkpoint+0xa3d/0x2710 [ 470.508620][ T5623] ? __lock_acquire+0x683/0x2cf0 [ 470.508677][ T5623] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 470.508703][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.508784][ T5623] kill_f2fs_super+0x2f6/0x700 [ 470.508820][ T5623] ? __pfx_kill_f2fs_super+0x10/0x10 [ 470.508864][ T5623] ? call_rcu+0x64b/0x8b0 [ 470.508893][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.508920][ T5623] ? lockdep_hardirqs_on+0x7a/0x110 [ 470.508948][ T5623] ? srso_alias_return_thunk+0x5/0xfbef5 [ 470.508992][ T5623] deactivate_locked_super+0xbc/0x130 [ 470.509022][ T5623] cleanup_mnt+0x3d3/0x460 [ 470.509058][ T5623] task_work_run+0x1d9/0x270 [ 470.509094][ T5623] ? __pfx_task_work_run+0x10/0x10 [ 470.509138][ T5623] exit_to_user_mode_loop+0x1fa/0x730 [ 470.509164][ T5623] ? rcu_is_watching+0x15/0xb0 [ 470.509196][ T5623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.509225][ T5623] do_syscall_64+0x353/0x580 [ 470.509253][ T5623] ? trace_irq_disable+0x3b/0x140 [ 470.509299][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.509325][ T5623] RIP: 0033:0x7fd19e19f097 [ 470.509357][ T5623] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 470.509378][ T5623] RSP: 002b:00007fff75076a58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 470.509404][ T5623] RAX: 0000000000000000 RBX: 00007fd19e2332ca RCX: 00007fd19e19f097 [ 470.509421][ T5623] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff75076b10 [ 470.509438][ T5623] RBP: 00007fff75076b10 R08: 00007fff75077b10 R09: 00000000ffffffff [ 470.509456][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff75077ba0 [ 470.509472][ T5623] R13: 00007fd19e2332ca R14: 0000000000072d53 R15: 00007fff75077be0 [ 470.509511][ T5623] [ 470.514487][ T5623] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 470.783513][ T1161] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 471.102386][ T5622] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 471.722639][T14702] loop0: detected capacity change from 0 to 4096 [ 471.841431][T14702] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 471.984089][T14702] ntfs3(loop0): ino=1a, mi_enum_attr [ 472.021296][T14702] ntfs3(loop0): ino=1a, mi_enum_attr [ 472.051540][T14702] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 472.262936][ T30] audit: type=1800 audit(1782918980.565:108): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2786" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 472.285404][T14701] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex [ 472.620575][T14299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 472.693443][T14299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.722956][T14732] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 472.753962][T14299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 472.809713][T14299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.854333][T14299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.913144][T14299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.970404][T14743] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2799'. [ 472.982848][T14741] xt_hashlimit: size too large, truncated to 1048576 [ 473.000840][T14737] macvlan2: entered promiscuous mode [ 473.032836][T14737] bridge0: entered promiscuous mode [ 473.073646][T14299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 473.110664][T14299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.118414][ T5743] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 473.296214][ T5743] usb 2-1: Using ep0 maxpacket: 8 [ 473.327092][ T5743] usb 2-1: unable to get BOS descriptor or descriptor too short [ 473.355368][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 473.404135][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 473.436734][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 473.461757][T14299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.494798][ T5743] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 473.531443][T14714] loop8: detected capacity change from 0 to 32768 [ 473.551787][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 473.601772][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 473.619068][T14714] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 473.620534][T14299] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.644749][ T5743] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 473.669179][ T5743] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 473.678785][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.686992][ T5743] usb 2-1: Product: syz [ 473.696153][ T5743] usb 2-1: Manufacturer: syz [ 473.700784][ T5743] usb 2-1: SerialNumber: syz [ 473.704611][T11743] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.712564][T11743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.718629][ T5743] usb 2-1: config 0 descriptor?? [ 473.734418][T14736] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 473.757565][T11743] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.764821][T11743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.788718][ T5743] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 473.818825][T14714] XFS (loop8): Ending clean mount [ 474.165443][T10827] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 474.323147][T14772] loop0: detected capacity change from 0 to 2048 [ 474.417728][T14772] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.492421][T14757] loop5: detected capacity change from 0 to 32768 [ 474.871771][ T5743] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 475.014748][ T5743] usb 2-1: USB disconnect, device number 17 [ 476.026764][T14792] loop3: detected capacity change from 0 to 4096 [ 476.121262][T14792] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 476.130915][T14790] loop1: detected capacity change from 0 to 131072 [ 476.183530][T14790] F2FS-fs (loop1): invalid crc value [ 476.267331][T14790] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 476.289554][T14790] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 476.342578][T14792] ntfs3(loop3): ino=19, mi_enum_attr [ 476.364766][T14790] F2FS-fs (loop1): Corrupted max_depth of 3: 769 [ 476.373622][T14792] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 476.374923][T14792] ntfs3(loop3): ino=1a, mi_enum_attr [ 476.375048][T14792] ntfs3(loop3): ino=1a, mi_enum_attr [ 476.375069][T14792] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 476.430617][ T30] audit: type=1800 audit(1782918984.745:109): pid=14792 uid=0 auid=4 ses=1 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2808" name="bus" dev="loop3" ino=24 res=0 errno=0 [ 476.470977][T12827] udevd[12827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.503022][ T5773] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 476.685383][ T5773] usb 9-1: Using ep0 maxpacket: 32 [ 476.724919][ T5773] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 476.781800][ T5773] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.822866][ T5773] usb 9-1: config 0 descriptor?? [ 476.994072][T14823] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2816'. [ 477.073714][ T5773] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 477.113598][ T5773] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 477.190064][ T5773] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 477.248705][ T5773] usb 9-1: media controller created [ 477.292764][T14299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.391967][ T5773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.512911][T14836] loop3: detected capacity change from 0 to 64 [ 477.536109][ T5773] az6027: usb out operation failed. (-71) [ 477.550764][ T5773] az6027: usb out operation failed. (-71) [ 477.583512][ T5773] stb0899_attach: Driver disabled by Kconfig [ 477.623071][ T5773] az6027: no front-end attached [ 477.623071][ T5773] [ 477.651465][ T5773] az6027: usb out operation failed. (-71) [ 477.691108][ T5773] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 477.750709][ T5773] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input31 [ 477.843816][ T5773] dvb-usb: schedule remote query interval to 400 msecs. [ 477.899511][ T5773] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 477.915043][T14843] loop5: detected capacity change from 0 to 256 [ 477.967203][ T5773] usb 9-1: USB disconnect, device number 7 [ 477.982994][T14843] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 478.240491][ T5773] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 478.460540][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'. [ 478.669611][T14865] loop8: detected capacity change from 0 to 512 [ 478.704788][T14863] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2829'. [ 478.913967][T14865] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.8.2830: corrupted xattr block 95: invalid header [ 478.989280][T14865] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 478.995279][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 479.010919][ C1] EXT4-fs (loop8): initial error at time 1782918987: ext4_expand_extra_isize_ea:2810: inode 11 [ 479.021370][ C1] EXT4-fs (loop8): last error at time 1782918987: ext4_expand_extra_isize_ea:2810: inode 11 [ 479.059071][T14865] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2830: bg 0: block 7: invalid block bitmap [ 479.099599][T14865] loop8: lost filesystem error report for type 5 error -117 [ 479.101819][T14865] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 479.119687][T14299] veth0_vlan: entered promiscuous mode [ 479.159330][T14865] loop8: lost filesystem error report for type 5 error -117 [ 479.160563][T14865] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #11: comm syz.8.2830: corrupted xattr block 95: invalid header [ 479.199718][T14865] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 479.200607][T14299] veth1_vlan: entered promiscuous mode [ 479.226196][T14865] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 479.241850][T14865] EXT4-fs (loop8): 1 orphan inode deleted [ 479.263346][T14865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.492128][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.570427][T14299] veth0_macvtap: entered promiscuous mode [ 479.631157][T14299] veth1_macvtap: entered promiscuous mode [ 479.755024][T14299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.868657][T14299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.902226][T14857] loop0: detected capacity change from 0 to 32768 [ 479.997456][T11743] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.008751][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.026913][ T5903] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 480.048172][T14857] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 480.131594][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.213204][ T5903] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 480.240481][ T1114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.262462][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.276686][ T5903] usb 6-1: Product: syz [ 480.280897][ T5903] usb 6-1: Manufacturer: syz [ 480.297492][ T5903] usb 6-1: SerialNumber: syz [ 480.320908][ T5903] usb 6-1: config 0 descriptor?? [ 480.641756][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.718240][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.787629][T12859] ocfs2: Unmounting device (7,0) on (node local) [ 480.923700][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.936399][T14918] IPv6: NLM_F_REPLACE set, but no existing node found! [ 480.957911][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.070512][ T5903] usb 6-1: USB disconnect, device number 23 [ 482.868760][T14977] loop4: detected capacity change from 0 to 4096 [ 483.438377][T14951] loop8: detected capacity change from 0 to 40427 [ 483.445556][ T5627] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 483.492382][T14951] F2FS-fs (loop8): build fault injection rate: 174 [ 483.523192][T14951] F2FS-fs (loop8): build fault injection type: 0x3bfe8c [ 483.572880][T14951] F2FS-fs (loop8): invalid crc value [ 483.637335][T15000] loop0: detected capacity change from 0 to 2048 [ 483.648645][ T5627] usb 4-1: Using ep0 maxpacket: 32 [ 483.669087][ T5627] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 483.685338][T15000] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 483.714343][ T5627] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 483.757301][ T5627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.776055][ T5627] usb 4-1: Product: syz [ 483.784641][ T5627] usb 4-1: Manufacturer: syz [ 483.798711][T15005] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 483.815186][ T5627] usb 4-1: SerialNumber: syz [ 483.857283][ T5627] usb 4-1: config 0 descriptor?? [ 483.875057][T15000] NILFS error (device loop0): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 483.921116][ T5627] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 483.954435][ T5627] dvb-usb: bulk message failed: -22 (2/0) [ 483.998336][T15008] program syz.4.2878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.009499][T15000] Remounting filesystem read-only [ 484.015875][ T5627] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 484.034908][T14951] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 484.063060][ T5627] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 484.091337][ T5627] usb 4-1: media controller created [ 484.104356][T14951] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 484.134933][T14993] cxusb: i2c wr: len=78 is too big! [ 484.134933][T14993] [ 484.195046][ T5627] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.220320][T14985] loop5: detected capacity change from 0 to 40427 [ 484.274167][T14985] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 484.309266][T14985] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 484.320276][ T5627] usb 4-1: selecting invalid altsetting 7 [ 484.339282][ T5627] cxusb: set interface failed [ 484.359530][T14985] F2FS-fs (loop5): invalid crc value [ 484.370772][ T5627] dvb-usb: bulk message failed: -22 (1/0) [ 484.518197][T10827] syz-executor: attempt to access beyond end of device [ 484.518197][T10827] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 484.572316][ T5627] DVB: Unable to find symbol lgdt330x_attach() [ 484.609428][ T5627] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 484.656461][T10827] CPU: 0 UID: 0 PID: 10827 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 484.656507][T10827] Tainted: [L]=SOFTLOCKUP [ 484.656516][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.656532][T10827] Call Trace: [ 484.656541][T10827] [ 484.656553][T10827] dump_stack_lvl+0xe8/0x150 [ 484.656589][T10827] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 484.656638][T10827] f2fs_write_end_io+0x124b/0x1710 [ 484.656694][T10827] __submit_merged_bio+0x258/0x6a0 [ 484.656719][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.656749][T10827] ? rcu_is_watching+0x15/0xb0 [ 484.656787][T10827] __submit_merged_write_cond+0x3c9/0x4e0 [ 484.656840][T10827] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 484.656899][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.656939][T10827] f2fs_write_data_pages+0x2a27/0x36f0 [ 484.656969][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.656997][T10827] ? __lock_acquire+0x683/0x2cf0 [ 484.657065][T10827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 484.657093][T10827] ? is_bpf_text_address+0x26/0x2b0 [ 484.657137][T10827] ? arch_stack_walk+0xfb/0x150 [ 484.657204][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.657233][T10827] ? add_lock_to_list+0xc7/0x100 [ 484.657268][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.657297][T10827] ? __lock_acquire+0x13e8/0x2cf0 [ 484.657357][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.657386][T10827] ? do_raw_spin_lock+0x12b/0x2f0 [ 484.657428][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.657462][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.657491][T10827] ? do_raw_spin_unlock+0xf5/0x210 [ 484.657535][T10827] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 484.657567][T10827] do_writepages+0x338/0x560 [ 484.657597][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.657629][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.657662][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.657691][T10827] ? do_raw_spin_unlock+0xf5/0x210 [ 484.657735][T10827] filemap_fdatawrite+0x1e9/0x2f0 [ 484.657768][T10827] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 484.657840][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.657872][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.657907][T10827] ? do_raw_spin_unlock+0xf5/0x210 [ 484.657949][T10827] f2fs_sync_dirty_inodes+0x30e/0x830 [ 484.658000][T10827] f2fs_write_checkpoint+0xa3d/0x2710 [ 484.658031][T10827] ? __lock_acquire+0x683/0x2cf0 [ 484.658099][T10827] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 484.658130][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.658225][T10827] kill_f2fs_super+0x2f6/0x700 [ 484.658264][T10827] ? __pfx_kill_f2fs_super+0x10/0x10 [ 484.658311][T10827] ? call_rcu+0x64b/0x8b0 [ 484.658341][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.658370][T10827] ? lockdep_hardirqs_on+0x7a/0x110 [ 484.658399][T10827] ? srso_alias_return_thunk+0x5/0xfbef5 [ 484.658444][T10827] deactivate_locked_super+0xbc/0x130 [ 484.658476][T10827] cleanup_mnt+0x3d3/0x460 [ 484.658520][T10827] task_work_run+0x1d9/0x270 [ 484.658552][T10827] ? __pfx_task_work_run+0x10/0x10 [ 484.658594][T10827] exit_to_user_mode_loop+0x1fa/0x730 [ 484.658619][T10827] ? rcu_is_watching+0x15/0xb0 [ 484.658652][T10827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.658680][T10827] do_syscall_64+0x353/0x580 [ 484.658709][T10827] ? trace_irq_disable+0x3b/0x140 [ 484.658755][T10827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.658781][T10827] RIP: 0033:0x7f873319f097 [ 484.658804][T10827] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 484.658826][T10827] RSP: 002b:00007ffd261e6de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 484.658852][T10827] RAX: 0000000000000000 RBX: 00007f87332332ca RCX: 00007f873319f097 [ 484.658870][T10827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd261e6ea0 [ 484.658887][T10827] RBP: 00007ffd261e6ea0 R08: 00007ffd261e7ea0 R09: 00000000ffffffff [ 484.658905][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd261e7f30 [ 484.658922][T10827] R13: 00007f87332332ca R14: 0000000000076381 R15: 00007ffd261e7f70 [ 484.658961][T10827] [ 484.664743][T10827] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 485.009242][T15025] loop0: detected capacity change from 0 to 4096 [ 485.110341][T14985] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 485.224531][ T5627] rc_core: IR keymap rc-dvico-portable not found [ 485.247225][T14985] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 485.250215][ T5627] Registered IR keymap rc-empty [ 485.278142][T14985] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 485.284819][ T5627] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 485.391191][ T5627] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input32 [ 485.472439][ T5627] dvb-usb: schedule remote query interval to 100 msecs. [ 485.507359][ T5627] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 485.570923][ T5627] usb 4-1: USB disconnect, device number 29 [ 485.609165][ T5903] dvb-usb: bulk message failed: -22 (1/0) [ 485.987296][ T5627] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 486.434854][T15061] loop4: detected capacity change from 0 to 1024 [ 486.529733][T15065] loop1: detected capacity change from 0 to 512 [ 486.628292][T15065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.727440][T15065] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.860524][T15065] EXT4-fs (loop1): resizing filesystem from 128 to 2 blocks [ 486.875530][T15065] EXT4-fs warning (device loop1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 487.019751][ T5627] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 487.094340][T15082] loop3: detected capacity change from 0 to 256 [ 487.102439][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.228464][ T5627] usb 9-1: Using ep0 maxpacket: 8 [ 487.262943][ T5627] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 487.303733][ T5627] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 487.349325][ T5627] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.402360][ T5627] usb 9-1: Product: syz [ 487.421623][ T5627] usb 9-1: Manufacturer: syz [ 487.458260][ T5627] usb 9-1: SerialNumber: syz [ 487.508889][ T5627] usb 9-1: config 0 descriptor?? [ 487.546334][ T5627] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 487.586570][ T5627] usb 9-1: setting power ON [ 487.601495][ T5627] dvb-usb: bulk message failed: -22 (2/0) [ 487.643497][ T5627] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.644977][T15095] program syz.3.2902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.708328][ T5627] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 487.751808][ T5627] usb 9-1: media controller created [ 487.762780][T15075] dvb-usb: bulk message failed: -22 (3/0) [ 487.792305][T15075] dvb-usb: bulk message failed: -22 (4/0) [ 487.827969][T15098] loop0: detected capacity change from 0 to 1024 [ 487.849405][T15075] dvb-usb: bulk message failed: -22 (5/0) [ 487.870375][T15098] EXT4-fs: Ignoring removed orlov option [ 487.896778][ T5627] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.954118][T15098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.004992][ T5627] usb 9-1: selecting invalid altsetting 6 [ 488.012394][T15100] loop1: detected capacity change from 0 to 4096 [ 488.015138][ T5627] usb 9-1: digital interface selection failed (-22) [ 488.029351][ T5627] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 488.040950][ T5627] usb 9-1: setting power OFF [ 488.046968][ T5627] dvb-usb: bulk message failed: -22 (2/0) [ 488.066716][ T5627] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 488.091559][ T5627] (NULL device *): no alternate interface [ 488.119236][T15100] EXT4-fs: inline encryption not supported [ 488.190295][T15100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 488.196537][T15110] sg_write: data in/out 286804/136 bytes for SCSI command 0x0-- guessing data in; [ 488.196537][T15110] program syz.5.2892 not setting count and/or reply_len properly [ 488.277296][T15100] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 488.318346][T15100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.408193][ T5627] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 488.500115][ T5627] usb 9-1: USB disconnect, device number 8 [ 488.570603][T12859] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.701845][T15120] tipc: Started in network mode [ 488.709730][T15120] tipc: Node identity ac14140f, cluster identity 4711 [ 488.711457][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.719314][T15120] tipc: New replicast peer: 255.255.255.255 [ 488.779549][T15120] tipc: Enabled bearer , priority 10 [ 489.157181][T15134] loop8: detected capacity change from 0 to 8 [ 489.199472][T15134] squashfs: Unknown parameter '' [ 489.505470][ T804] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 489.515191][T15139] loop0: detected capacity change from 0 to 4096 [ 489.542997][ T30] audit: type=1326 audit(1782919253.853:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.5.2917" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd19e19de59 code=0x0 [ 489.615113][T15139] ntfs3(loop0): Failed to load $Extend (-22). [ 489.639621][T15139] ntfs3(loop0): Failed to initialize $Extend. [ 489.726512][ T804] usb 9-1: Using ep0 maxpacket: 32 [ 489.748184][ T804] usb 9-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 489.775707][ T5627] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 489.781647][ T804] usb 9-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 489.832465][ T804] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.886836][ T804] usb 9-1: config 0 descriptor?? [ 489.897001][ T5743] tipc: Node number set to 2886997007 [ 489.934659][ T804] rndis_host 9-1:0.0: missing cdc header ether descriptor [ 489.945836][ T5627] usb 2-1: Using ep0 maxpacket: 16 [ 489.972724][ T5627] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 490.038193][ T5627] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 490.081430][ T5627] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 490.109340][ T5627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.148939][ T5627] usb 2-1: Product: syz [ 490.154657][ T10] usb 9-1: USB disconnect, device number 9 [ 490.178702][ T5627] usb 2-1: Manufacturer: syz [ 490.201032][ T5627] usb 2-1: SerialNumber: syz [ 490.228992][ T5627] usb 2-1: config 0 descriptor?? [ 490.264472][ T5627] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 490.303565][T15127] loop3: detected capacity change from 0 to 32768 [ 490.311806][ T5627] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 490.337879][T15166] overlayfs: workdir and upperdir must reside under the same mount [ 490.380205][T15127] non-latin1 character 0xffff found in JFS file name [ 490.444531][T15127] mount with iocharset=utf8 to access [ 490.609000][ T5903] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 490.624299][T15172] loop4: detected capacity change from 0 to 64 [ 490.712947][T15174] loop3: detected capacity change from 0 to 512 [ 490.743114][T15174] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 490.792722][ T5903] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 490.830403][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.851603][T15174] EXT4-fs (loop3): 1 truncate cleaned up [ 490.880333][ T5627] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 490.902437][ T5903] usb 1-1: Product: syz [ 490.914325][T15174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.942189][ T5903] usb 1-1: Manufacturer: syz [ 490.962786][T15179] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 490.974687][ T5903] usb 1-1: SerialNumber: syz [ 491.000730][T15179] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 491.018604][ T5903] usb 1-1: config 0 descriptor?? [ 491.081960][ T5627] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 491.129574][ T5627] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 491.165565][ T5627] em28xx 2-1:0.0: No AC97 audio processor [ 491.228583][T15182] loop8: detected capacity change from 0 to 4096 [ 491.267501][ T5627] usb 2-1: USB disconnect, device number 18 [ 491.310792][ T5627] em28xx 2-1:0.0: Disconnecting em28xx [ 491.324966][T15182] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 491.358625][T15174] EXT4-fs error (device loop3): ext4_xattr_block_find:1881: inode #15: comm syz.3.2926: corrupted xattr block 33: invalid header [ 491.464948][T15174] EXT4-fs (loop3): Remounting filesystem read-only [ 491.486586][T15182] ntfs3(loop8): ino=19, mi_enum_attr [ 491.516964][T15182] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 491.524968][ T5627] em28xx 2-1:0.0: Freeing device [ 491.541027][ T5903] usb 1-1: USB disconnect, device number 7 [ 491.577570][T15182] ntfs3(loop8): ino=1a, mi_enum_attr [ 491.623285][T15182] ntfs3(loop8): ino=1a, mi_enum_attr [ 491.666592][T15182] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 491.723080][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.305641][ T30] audit: type=1326 audit(1782919256.623:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.3.2937" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676e19de59 code=0x7ffc0000 [ 492.414908][ T30] audit: type=1326 audit(1782919256.623:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.3.2937" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676e19de59 code=0x7ffc0000 [ 492.570659][ T30] audit: type=1326 audit(1782919256.623:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.3.2937" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f676e19de59 code=0x7ffc0000 [ 492.695999][ T30] audit: type=1326 audit(1782919256.623:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.3.2937" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676e19de59 code=0x7ffc0000 [ 492.833819][ T30] audit: type=1326 audit(1782919256.623:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.3.2937" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f676e19de59 code=0x7ffc0000 [ 492.938296][ T30] audit: type=1326 audit(1782919256.623:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.3.2937" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676e19de59 code=0x7ffc0000 [ 493.029491][ T30] audit: type=1326 audit(1782919256.623:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.3.2937" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f676e19de59 code=0x7ffc0000 [ 493.120326][ T30] audit: type=1326 audit(1782919256.703:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.3.2937" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676e19de59 code=0x7ffc0000 [ 493.251284][ T30] audit: type=1326 audit(1782919256.713:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.3.2937" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676e19de59 code=0x7ffc0000 [ 493.514179][T15195] loop5: detected capacity change from 0 to 32768 [ 493.595607][T15195] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 493.840991][T15195] XFS (loop5): Ending clean mount [ 493.869445][T15195] XFS (loop5): Quotacheck needed: Please wait. [ 494.232236][T15195] XFS (loop5): Quotacheck: Done. [ 494.408582][ T5623] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 494.440543][T15282] loop0: detected capacity change from 0 to 256 [ 494.510859][T15282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2958'. [ 494.976522][T15285] loop8: detected capacity change from 0 to 8192 [ 495.046444][T15285] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 495.332501][T15293] loop4: detected capacity change from 0 to 4096 [ 495.448397][T15297] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.582977][T15293] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 495.697827][T15271] loop1: detected capacity change from 0 to 32768 [ 495.800321][T15271] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 495.898619][T15311] loop0: detected capacity change from 0 to 256 [ 495.958081][T15271] XFS (loop1): Ending clean mount [ 496.150882][T15271] XFS (loop1): Quotacheck needed: Please wait. [ 496.591770][T15332] loop3: detected capacity change from 0 to 1024 [ 496.611143][T15271] XFS (loop1): Quotacheck: Done. [ 496.617891][T15332] EXT4-fs: Ignoring removed orlov option [ 496.743502][T15332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.824420][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.215075][ T5620] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 497.548186][T15365] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2982'. [ 497.562989][T15357] loop5: detected capacity change from 0 to 4096 [ 497.648310][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'. [ 498.585880][T15348] loop0: detected capacity change from 0 to 32768 [ 498.624433][T15348] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2975 (15348) [ 498.715328][T15348] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 498.719620][T15383] loop4: detected capacity change from 0 to 8192 [ 498.761811][T15348] BTRFS info (device loop0): using sha256 checksum algorithm [ 499.047127][T15348] BTRFS info (device loop0): enabling ssd optimizations [ 499.090025][T15348] BTRFS info (device loop0): turning on async discard [ 499.135837][T15348] BTRFS info (device loop0): enabling free space tree [ 499.366017][T15424] loop4: detected capacity change from 0 to 512 [ 499.420145][T12859] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 499.439962][T15424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.500485][T15424] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2996: iget: bad i_size value: 38620345925642 [ 499.552653][T15424] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 499.555038][T15424] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2996: couldn't read orphan inode 15 (err -117) [ 499.564446][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 499.564473][ C1] EXT4-fs (loop4): initial error at time 1782919263: ext4_orphan_get:1399: inode 15 [ 499.564545][ C1] EXT4-fs (loop4): last error at time 1782919263: ext4_orphan_get:1399: inode 15 [ 499.603000][T15424] loop4: lost filesystem error report for type 5 error -117 [ 499.683214][T15424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.060332][T15424] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 500.191915][T15437] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 500.465888][T14299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.752231][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.177390][ T804] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 501.219696][T15423] loop3: detected capacity change from 0 to 40427 [ 501.263768][T15423] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 501.293078][T15423] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 501.317806][T15423] F2FS-fs (loop3): invalid crc value [ 501.357642][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 501.380175][ T804] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 501.419819][T15440] loop0: detected capacity change from 0 to 32768 [ 501.435127][ T804] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 501.457602][T15440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3000 (15440) [ 501.491284][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.543644][ T804] usb 2-1: Product: syz [ 501.550875][T15440] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 501.580921][ T804] usb 2-1: Manufacturer: syz [ 501.603284][T15440] BTRFS info (device loop0): using sha256 checksum algorithm [ 501.604027][ T804] usb 2-1: SerialNumber: syz [ 501.648678][T15481] loop8: detected capacity change from 0 to 256 [ 501.668025][ T804] usb 2-1: config 0 descriptor?? [ 501.741321][ T804] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 501.761427][ T804] usb 2-1: setting power ON [ 501.773042][ T804] dvb-usb: bulk message failed: -22 (2/0) [ 501.791744][ T804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 501.824009][ T804] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 501.855685][T15423] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 501.867513][ T804] usb 2-1: media controller created [ 501.883693][T15440] BTRFS info (device loop0): setting nodatasum [ 501.913227][T15440] BTRFS info (device loop0): enabling ssd optimizations [ 501.950977][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.963764][T15465] dvb-usb: bulk message failed: -22 (3/0) [ 501.968428][T15423] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 501.972807][T15440] BTRFS info (device loop0): turning on async discard [ 502.006085][T15465] dvb-usb: bulk message failed: -22 (4/0) [ 502.013709][T15423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 502.022879][T15465] dvb-usb: bulk message failed: -22 (5/0) [ 502.030397][T15440] BTRFS info (device loop0): enabling free space tree [ 502.134484][ T804] usb 2-1: selecting invalid altsetting 6 [ 502.195408][ T804] usb 2-1: digital interface selection failed (-22) [ 502.238564][ T804] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 502.281782][ T804] usb 2-1: setting power OFF [ 502.318042][ T804] dvb-usb: bulk message failed: -22 (2/0) [ 502.346824][ T804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 502.388145][ T804] (NULL device *): no alternate interface [ 502.565692][ T804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 502.728924][ T804] usb 2-1: USB disconnect, device number 19 [ 502.969826][T12859] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 503.184158][T15531] loop1: detected capacity change from 0 to 1024 [ 503.237750][T15531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.368544][T15531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.506200][T15531] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.859899][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 504.068478][T15549] loop8: detected capacity change from 0 to 4096 [ 504.219544][T15549] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.357951][T15549] EXT4-fs (loop8): shut down requested (1) [ 504.532467][T15563] tipc: Started in network mode [ 504.562833][T15563] tipc: Node identity ac14140f, cluster identity 4711 [ 504.604102][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.635639][T15563] tipc: New replicast peer: 255.255.255.255 [ 504.701729][T15563] tipc: Enabled bearer , priority 10 [ 504.712988][T15566] loop1: detected capacity change from 0 to 512 [ 504.780479][T15568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3025'. [ 504.798263][T15566] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 504.837552][T15568] tipc: Disabling bearer [ 504.876044][T15566] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 504.921222][T15566] System zones: 1-12 [ 504.992114][T15540] loop4: detected capacity change from 0 to 32768 [ 505.001756][T15566] EXT4-fs (loop1): 1 truncate cleaned up [ 505.063480][T15566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.186001][T15540] JBD2: Ignoring recovery information on journal [ 505.272560][T15540] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 505.306125][T15540] JBD2: bad block at offset 32 [ 505.329569][T15540] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 505.461137][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.886885][T14299] ocfs2: Unmounting device (7,4) on (node local) [ 506.038848][T15610] program syz.0.3053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.531658][T15624] loop8: detected capacity change from 0 to 256 [ 506.611408][T15624] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 506.970756][ T30] audit: type=1326 audit(1782919271.273:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15638 comm="syz.8.3061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873319de59 code=0x7ffc0000 [ 507.085118][ T30] audit: type=1326 audit(1782919271.333:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15638 comm="syz.8.3061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873319de59 code=0x7ffc0000 [ 507.188138][ T30] audit: type=1326 audit(1782919271.333:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15638 comm="syz.8.3061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873319de59 code=0x7ffc0000 [ 507.276044][ T30] audit: type=1326 audit(1782919271.333:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15638 comm="syz.8.3061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f873319de59 code=0x7ffc0000 [ 507.320933][T15612] loop3: detected capacity change from 0 to 32768 [ 507.364229][T15612] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3054 (15612) [ 507.398853][ T30] audit: type=1326 audit(1782919271.333:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15638 comm="syz.8.3061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873319de59 code=0x7ffc0000 [ 507.479424][T15612] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 507.513107][ T30] audit: type=1326 audit(1782919271.333:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15638 comm="syz.8.3061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873319de59 code=0x7ffc0000 [ 507.539601][T15612] BTRFS info (device loop3): using blake2b checksum algorithm [ 507.577843][T15620] loop0: detected capacity change from 0 to 32768 [ 507.590409][ T30] audit: type=1326 audit(1782919271.333:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15638 comm="syz.8.3061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873319de59 code=0x7ffc0000 [ 507.690521][T15620] JBD2: Ignoring recovery information on journal [ 507.812290][T15667] loop4: detected capacity change from 0 to 2048 [ 507.825975][ T30] audit: type=1326 audit(1782919271.333:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15638 comm="syz.8.3061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873319de59 code=0x7ffc0000 [ 507.872711][ T30] audit: type=1326 audit(1782919271.333:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15638 comm="syz.8.3061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f873319de59 code=0x7ffc0000 [ 507.901187][ T30] audit: type=1326 audit(1782919271.333:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15638 comm="syz.8.3061" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873319de59 code=0x7ffc0000 [ 507.945149][T15620] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 507.992763][T15612] BTRFS info (device loop3): enabling ssd optimizations [ 508.005613][T15667] loop4: p3 p4 < > [ 508.013089][T15667] loop4: p3 start 11362048 is beyond EOD, truncated [ 508.037984][T15612] BTRFS info (device loop3): turning on async discard [ 508.073456][T15612] BTRFS info (device loop3): enabling free space tree [ 508.413466][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3069'. [ 508.458411][ T5622] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 508.501430][T12859] ocfs2: Unmounting device (7,0) on (node local) [ 508.672872][T15690] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 508.808944][ T5899] udevd[5899]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 509.686294][T15710] xt_hashlimit: size too large, truncated to 1048576 [ 510.240558][T15695] loop4: detected capacity change from 0 to 32768 [ 510.297615][T15695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3074 (15695) [ 510.371509][T15695] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 510.399826][T15696] loop3: detected capacity change from 0 to 32768 [ 510.416509][T15695] BTRFS info (device loop4): using crc32c checksum algorithm [ 510.484545][T15696] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 510.643541][T15695] BTRFS info (device loop4): enabling ssd optimizations [ 510.712172][T15695] BTRFS info (device loop4): turning on async discard [ 510.751414][T15695] BTRFS info (device loop4): enabling free space tree [ 510.797201][T15696] XFS (loop3): Ending clean mount [ 510.854314][T15696] XFS (loop3): Quotacheck needed: Please wait. [ 511.090113][T15696] XFS (loop3): Quotacheck: Done. [ 511.605390][ T804] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 511.768961][ T804] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.797851][ T804] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.821354][ T804] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 511.840617][ T804] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 511.859598][ T804] usb 9-1: SerialNumber: syz [ 512.094684][ T804] usb 9-1: 0:2 : does not exist [ 512.262531][ T804] usb 9-1: USB disconnect, device number 10 [ 512.415479][ T5622] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 512.521859][ T5741] udevd[5741]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.673512][T14299] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 512.953505][T15795] loop5: detected capacity change from 0 to 1024 [ 513.632478][T15813] [U]  [ 513.652581][T15813] [U] K{ [ 513.670639][T15813] [U] T 1ŠFFˊ`GJǘGO/MC [ 513.722790][T15813] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 513.807693][T15813] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 513.877390][T15813] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 514.050771][T15813] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 514.177943][T15813] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 514.260476][T15813] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 514.303894][T15813] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 514.477860][T15838] EXT4-fs error (device loop1): __ext4_iget:5533: inode #11: block 1: comm syz.1.3109: invalid block [ 514.554925][T15813] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 514.564641][T15813] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 514.579213][T15838] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 514.580105][T15838] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3109: couldn't read orphan inode 11 (err -117) [ 514.589533][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 514.589557][ C1] EXT4-fs (loop1): initial error at time 1782919278: __ext4_iget:5533: inode 11: block 1 [ 514.589606][ C1] EXT4-fs (loop1): last error at time 1782919278: __ext4_iget:5533: inode 11: block 1 [ 514.639145][T15838] loop1: lost filesystem error report for type 5 error -117 [ 514.639363][T15813] [U] 22Ʃ۩X?0;3U [ 514.667540][T15838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.750512][T15813] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 514.868046][T15838] EXT4-fs error (device loop1): __ext4_add_entry:2412: inode #2: comm syz.1.3109: Directory hole found for htree leaf block 0 [ 514.888793][T15813] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 514.942033][T15813] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 514.960740][T15851] loop4: detected capacity change from 0 to 256 [ 514.967451][T15813] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 514.982534][T15813] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 515.025030][T15813] [U] EC [ 515.046344][T15813] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 515.091345][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.196337][T15812] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 515.425567][T15857] loop4: detected capacity change from 0 to 128 [ 515.537827][ T5632] Bluetooth: hci1: link tx timeout [ 515.546755][ T5632] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 515.596061][T15825] loop8: detected capacity change from 0 to 32768 [ 515.658346][T15825] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 515.809760][T15825] XFS (loop8): Ending clean mount [ 516.053520][T10827] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 516.885726][T15894] loop5: detected capacity change from 0 to 512 [ 517.035604][T15894] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 517.064129][T15894] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.3126: corrupted in-inode xattr: e_value size too large [ 517.149118][T15894] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 517.150136][T15894] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3126: couldn't read orphan inode 15 (err -117) [ 517.159430][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 517.159455][ C1] EXT4-fs (loop5): initial error at time 1782919281: ext4_iget_extra_inode:5180: inode 15 [ 517.159495][ C1] EXT4-fs (loop5): last error at time 1782919281: ext4_iget_extra_inode:5180: inode 15 [ 517.207216][ T5773] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 517.217961][T15894] loop5: lost filesystem error report for type 5 error -117 [ 517.240945][T15894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.337946][T15899] loop3: detected capacity change from 0 to 4096 [ 517.395313][T15873] loop0: detected capacity change from 0 to 32768 [ 517.395446][ T5773] usb 2-1: Using ep0 maxpacket: 16 [ 517.443741][ T5773] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.444861][T15899] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 517.462021][T15873] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 517.538853][T15899] ntfs3(loop3): Failed to load $Extend (-22). [ 517.544363][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.550279][ T5773] usb 2-1: config 0 interface 0 has no altsetting 0 [ 517.577816][ T5773] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 517.586999][T15899] ntfs3(loop3): Failed to initialize $Extend. [ 517.606311][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.626137][T15881] Bluetooth: hci1: command 0x0406 tx timeout [ 517.628361][ T5773] usb 2-1: config 0 descriptor?? [ 517.741100][T15873] XFS (loop0): Ending clean mount [ 518.033507][T12859] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 518.130690][ T5773] hid_parser_main: 1 callbacks suppressed [ 518.130720][ T5773] nzxt-smart2 0003:1E71:2009.0021: unknown main item tag 0x0 [ 518.168650][ T5773] nzxt-smart2 0003:1E71:2009.0021: unknown main item tag 0x0 [ 518.186571][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 518.221694][ T5773] nzxt-smart2 0003:1E71:2009.0021: unknown main item tag 0x0 [ 518.274615][ T5773] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 518.455911][T15933] loop4: detected capacity change from 0 to 256 [ 518.549473][T15936] loop8: detected capacity change from 0 to 1024 [ 518.604484][T15936] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 518.685736][ T43] usb 2-1: USB disconnect, device number 20 [ 518.718747][T15936] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #3: block 1: comm syz.8.3136: lblock 1 mapped to illegal pblock 1 (length 1) [ 518.718992][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 518.796539][T15936] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 518.815365][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 518.831010][ C0] EXT4-fs (loop8): initial error at time 1782919283: ext4_map_blocks:833: inode 3: block 1 [ 518.841081][ C0] EXT4-fs (loop8): last error at time 1782919283: ext4_map_blocks:833: inode 3: block 1 [ 518.850623][T15936] __quota_error: 10 callbacks suppressed [ 518.850640][T15936] Quota error (device loop8): write_blk: dquota write failed [ 518.871350][T15934] fido_id[15934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 518.908944][T15943] loop0: detected capacity change from 0 to 512 [ 518.957366][T15936] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 518.990838][T15936] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.3136: Failed to acquire dquot type 0 [ 519.051522][T15936] loop8: lost filesystem error report for type 5 error -117 [ 519.056043][T15936] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.3136: Freeing blocks not in datazone - block = 0, count = 4096 [ 519.193806][T15936] loop8: lost filesystem error report for type 5 error -117 [ 519.214769][T15936] EXT4-fs error (device loop8): ext4_read_inode_bitmap:141: comm syz.8.3136: Invalid inode bitmap blk 0 in block_group 0 [ 519.237009][ T49] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 519.328515][ T49] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 519.335219][ T49] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 519.345343][T15936] loop8: lost filesystem error report for type 5 error -117 [ 519.383766][ T49] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 519.415178][T15936] EXT4-fs error (device loop8) in ext4_free_inode:363: Corrupt filesystem [ 519.477122][T15936] loop8: lost filesystem error report for type 5 error -117 [ 519.492903][T15936] EXT4-fs (loop8): 1 orphan inode deleted [ 519.520478][ T49] loop8: lost filesystem error report for type 5 error -117 [ 519.603657][T15936] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.739950][T15969] Bluetooth: MGMT ver 1.23 [ 519.792913][T15936] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 520.006799][T15976] netlink: 'syz.3.3149': attribute type 12 has an invalid length. [ 520.011665][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.468181][T15985] loop3: detected capacity change from 0 to 4096 [ 520.502514][T15985] EXT4-fs: inline encryption not supported [ 520.540123][T15985] EXT4-fs (loop3): Test dummy encryption mode enabled [ 520.600991][T15985] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 520.650895][T15985] System zones: 0-5 [ 520.700243][T15985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.726726][T15966] loop5: detected capacity change from 0 to 32768 [ 520.798654][ T5625] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 520.811780][T15966] JBD2: Ignoring recovery information on journal [ 520.890899][T15985] EXT4-fs (loop3): shut down requested (2) [ 520.927495][T15966] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 520.942698][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7 [ 521.208230][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.294356][T15966] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bad signature GROUP01 [ 521.322962][T15966] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 521.358974][T15966] OCFS2: File system is now read-only. [ 521.409748][T15966] (syz.5.3146,15966,0):ocfs2_search_chain:1935 ERROR: status = -30 [ 521.453937][T15966] (syz.5.3146,15966,0):ocfs2_search_chain:2058 ERROR: status = -30 [ 521.504067][T15966] (syz.5.3146,15966,0):ocfs2_claim_suballoc_bits:2145 ERROR: status = -30 [ 521.514172][T15988] loop0: detected capacity change from 0 to 32768 [ 521.547536][T15966] (syz.5.3146,15966,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30 [ 521.578173][T15966] (syz.5.3146,15966,0):ocfs2_claim_new_inode:2439 ERROR: status = -30 [ 521.602388][T15966] (syz.5.3146,15966,0):ocfs2_claim_new_inode:2454 ERROR: status = -30 [ 521.626414][T15988] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 521.644181][T15966] (syz.5.3146,15966,0):ocfs2_mknod_locked:642 ERROR: status = -30 [ 521.682146][T15966] (syz.5.3146,15966,1):ocfs2_mknod:389 ERROR: status = -30 [ 521.729219][T15988] JBD2: Ignoring recovery information on journal [ 521.744277][T15966] (syz.5.3146,15966,0):ocfs2_mknod:506 ERROR: status = -30 [ 521.752700][T15966] (syz.5.3146,15966,0):ocfs2_create:679 ERROR: status = -30 [ 521.785505][ T5632] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 521.963832][T15988] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 522.132334][ T5623] ocfs2: Unmounting device (7,5) on (node local) [ 522.423929][T12859] ocfs2: Unmounting device (7,0) on (node local) [ 523.050453][T16062] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3179'. [ 523.240111][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3171'. [ 523.444681][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8 [ 523.468201][T16071] loop3: detected capacity change from 0 to 4096 [ 523.538408][T16071] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 524.217478][T16104] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3191'. [ 524.824824][T16127] loop5: detected capacity change from 0 to 6 [ 524.834558][T16121] loop4: detected capacity change from 0 to 4096 [ 524.841240][ T5632] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 524.841345][ T5632] Bluetooth: hci0: Injecting HCI hardware error event [ 524.847300][ T5632] Bluetooth: hci0: hardware error 0x00 [ 524.904360][T16127] Dev loop5: unable to read RDB block 6 [ 524.928738][T16127] loop5: AHDI p1 p2 [ 524.932829][T16127] loop5: partition table partially beyond EOD, truncated [ 524.941205][T16127] loop5: p1 start 1702059890 is beyond EOD, truncated [ 525.103778][T16134] qnx4: block size(16384) > page size(4096) not supported by filesystem [ 525.505032][T16145] loop8: detected capacity change from 0 to 512 [ 525.556107][ T5773] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 525.583266][T16145] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3205: inode has both inline data and extents flags [ 525.609686][T16145] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 525.610172][T16145] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3205: couldn't read orphan inode 15 (err -117) [ 525.619628][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 525.619656][ C1] EXT4-fs (loop8): initial error at time 1782919289: ext4_orphan_get:1399: inode 15 [ 525.619697][ C1] EXT4-fs (loop8): last error at time 1782919289: ext4_orphan_get:1399: inode 15 [ 525.624332][T16149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3206'. [ 525.689857][T16145] loop8: lost filesystem error report for type 5 error -117 [ 525.693245][T16145] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.797039][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 525.804678][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.813525][ T5773] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.870411][ T5773] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.943864][ T5773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 525.976641][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 525.993483][ T5773] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 526.036725][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.080422][ T5773] usb 4-1: config 0 descriptor?? [ 526.169628][ T43] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 526.209487][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.254684][ T43] usb 2-1: config 0 has no interface number 0 [ 526.301535][ T43] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 526.338031][ T43] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 526.382144][ T43] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.440515][ T43] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 526.463560][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.492510][ T43] usb 2-1: Product: syz [ 526.510454][ T43] usb 2-1: Manufacturer: syz [ 526.524976][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 526.543207][ T43] usb 2-1: SerialNumber: syz [ 526.622769][ T43] usb 2-1: config 0 descriptor?? [ 526.715922][T16175] loop0: detected capacity change from 0 to 128 [ 526.748387][ T5773] usb 4-1: string descriptor 0 read error: -71 [ 526.762889][T16175] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 526.783855][ T5773] uclogic 0003:5543:006E.0022: failed retrieving string descriptor #200: -71 [ 526.841084][ T5773] uclogic 0003:5543:006E.0022: failed retrieving pen parameters: -71 [ 526.890412][T16175] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 526.890641][ T5773] uclogic 0003:5543:006E.0022: failed probing pen v2 parameters: -71 [ 526.923964][ T5632] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 526.964478][ T5773] uclogic 0003:5543:006E.0022: failed probing parameters: -71 [ 526.981752][ T5773] uclogic 0003:5543:006E.0022: probe with driver uclogic failed with error -71 [ 527.010062][ T5773] usb 4-1: USB disconnect, device number 30 [ 527.275596][ T43] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 527.322594][ T43] usb 2-1: USB disconnect, device number 21 [ 527.335634][T16183] loop8: detected capacity change from 0 to 4096 [ 527.444074][T16193] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 527.516544][T16183] NILFS (loop8): unable to set label with more than 80 bytes [ 527.689165][T16199] loop3: detected capacity change from 0 to 512 [ 527.722235][T16196] loop0: detected capacity change from 0 to 2048 [ 527.776007][T16199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.804042][T16196] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 527.888604][T16196] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 527.937948][T16196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.986380][ T9] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 528.054784][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.143719][T16211] 9p: Unknown uid 00000000004294967295 [ 528.167671][ T9] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 528.201090][ T9] usb 6-1: config 0 has no interface number 0 [ 528.241218][ T9] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 528.292907][ T9] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 528.367155][ T9] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 528.415511][ T9] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 528.459697][ T9] usb 6-1: Manufacturer: syz [ 528.481695][ T9] usb 6-1: SerialNumber: syz [ 528.512904][ T9] usb 6-1: config 0 descriptor?? [ 528.718955][T16180] loop4: detected capacity change from 0 to 40427 [ 528.758583][T16180] F2FS-fs (loop4): build fault injection rate: 174 [ 528.777747][T16180] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 528.821647][T16180] F2FS-fs (loop4): invalid crc value [ 529.050441][T16223] loop8: detected capacity change from 0 to 8192 [ 529.147790][T16223] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 529.157207][ T9] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 529.216957][T16223] FAT-fs (loop8): Filesystem has been set read-only [ 529.235679][ T9] usb 6-1: USB disconnect, device number 24 [ 529.286652][T16180] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 529.332640][T16241] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 529.485515][T16180] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 529.712121][T16257] sg_read: process 532 (syz.8.3241) changed security contexts after opening file descriptor, this is not allowed. [ 529.737771][ T30] audit: type=1326 audit(1782919294.053:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16256 comm="syz.3.3242" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f676e19de59 code=0x0 [ 530.255687][ T5903] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 530.351770][T16270] loop8: detected capacity change from 0 to 256 [ 530.382758][T16238] loop1: detected capacity change from 0 to 32768 [ 530.384060][T16270] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 530.457270][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 530.489383][ T5903] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 530.521052][ T5903] usb 6-1: config 0 has no interface number 0 [ 530.537297][ T5903] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 530.554995][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.588197][ T5903] usb 6-1: Product: syz [ 530.605780][ T5903] usb 6-1: Manufacturer: syz [ 530.627871][ T5903] usb 6-1: SerialNumber: syz [ 530.682910][ T5903] usb 6-1: config 0 descriptor?? [ 530.728186][ T5903] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 530.970261][ T5903] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 531.052178][ T5903] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 531.429285][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 531.437990][ T5903] usb 6-1: USB disconnect, device number 25 [ 531.498321][ T5903] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 531.513581][T16301] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3260'. [ 531.530230][T16302] loop3: detected capacity change from 0 to 8 [ 531.569846][ T5903] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 531.616983][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 531.627036][ T5903] quatech2 6-1:0.51: device disconnected [ 531.760401][T16305] loop8: detected capacity change from 0 to 512 [ 531.774298][T16305] EXT4-fs: Ignoring removed i_version option [ 531.806153][T16305] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 531.823666][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 531.834735][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 531.850176][ T43] usb 5-1: config 0 has no interface number 0 [ 531.863667][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.922579][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.935504][ T43] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 531.946810][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.958225][T16305] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 531.981850][ T43] usb 5-1: config 0 descriptor?? [ 531.995268][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 532.001735][ C1] EXT4-fs (loop8): initial error at time 1782919296: ext4_mb_generate_buddy:1317 [ 532.010965][ C1] EXT4-fs (loop8): last error at time 1782919296: ext4_mb_generate_buddy:1317 [ 532.040309][T16305] Quota error (device loop8): write_blk: dquota write failed [ 532.050011][T16305] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 532.060316][T16305] Quota error (device loop8): write_blk: dquota write failed [ 532.095519][T16305] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 532.110726][T16305] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.3262: Failed to acquire dquot type 1 [ 532.136364][T16305] loop8: lost filesystem error report for type 5 error -28 [ 532.144060][T16305] EXT4-fs (loop8): 1 truncate cleaned up [ 532.192508][T16305] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.243504][T16305] Quota error (device loop8): write_blk: dquota write failed [ 532.290366][T16305] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 532.301679][T16319] vivid-000: disconnect [ 532.319225][T16318] vivid-000: reconnect [ 532.324533][T16305] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.3262: Failed to acquire dquot type 1 [ 532.519213][T10827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.666237][T16303] loop0: detected capacity change from 0 to 32768 [ 532.668883][ T43] uclogic 0003:28BD:0094.0023: pen parameters not found [ 532.714181][ T43] uclogic 0003:28BD:0094.0023: interface is invalid, ignoring [ 532.714730][T16303] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3258 (16303) [ 532.862118][T16303] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 532.900774][T16303] BTRFS info (device loop0): using sha256 checksum algorithm [ 532.913677][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3270'. [ 532.980850][ T43] usb 5-1: USB disconnect, device number 13 [ 533.015447][T16331] netlink: 'syz.5.3270': attribute type 30 has an invalid length. [ 533.081288][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3270'. [ 533.114104][T16303] BTRFS info (device loop0): enabling ssd optimizations [ 533.142480][T16303] BTRFS info (device loop0): turning on async discard [ 533.165340][T16303] BTRFS info (device loop0): enabling free space tree [ 533.265201][T16317] loop1: detected capacity change from 0 to 32768 [ 533.362756][T16317] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 533.544649][T12859] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 533.979844][T16367] (syz.1.3264,16367,0):ocfs2_double_lock:1193 ERROR: status = -2 [ 534.074633][T16367] (syz.1.3264,16367,1):ocfs2_rename:1302 ERROR: status = -2 [ 534.149947][T16367] (syz.1.3264,16367,1):ocfs2_rename:1700 ERROR: status = -2 [ 534.631393][T16389] netlink: 'syz.5.3285': attribute type 3 has an invalid length. [ 534.664633][ T5620] ocfs2: Unmounting device (7,1) on (node local) [ 534.856442][ T5903] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 535.016214][T16406] loop4: detected capacity change from 0 to 256 [ 535.061634][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 535.100093][ T5903] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 535.144945][T16406] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 535.151701][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.236437][ T5903] usb 4-1: config 0 descriptor?? [ 535.513392][ T5903] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 535.561744][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 535.613601][ T5903] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 535.660644][ T5903] usb 4-1: media controller created [ 535.710917][T16423] netlink: 'syz.0.3296': attribute type 3 has an invalid length. [ 535.756842][T16423] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3296'. [ 535.757186][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 535.778746][T16422] loop1: detected capacity change from 0 to 2048 [ 535.791258][T16423] netlink: 'syz.0.3296': attribute type 3 has an invalid length. [ 535.822629][T16423] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3296'. [ 535.869930][T16422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.884995][ T5903] az6027: usb out operation failed. (-71) [ 535.909710][ T5903] az6027: usb out operation failed. (-71) [ 535.923459][ T5903] stb0899_attach: Driver disabled by Kconfig [ 535.945824][ T5903] az6027: no front-end attached [ 535.945824][ T5903] [ 535.965799][ T5903] az6027: usb out operation failed. (-71) [ 535.972121][ T5903] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 536.003141][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 536.078258][ T5903] dvb-usb: schedule remote query interval to 400 msecs. [ 536.134700][ T5903] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 536.164229][T16438] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3300'. [ 536.219721][ T5903] usb 4-1: USB disconnect, device number 31 [ 536.347746][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.448745][T15154] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 536.460878][T15154] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 536.469288][T15154] CPU: 1 UID: 0 PID: 15154 Comm: syz.4.2919 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.480253][T15154] Tainted: [L]=SOFTLOCKUP [ 536.484578][T15154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.494632][T15154] RIP: 0010:klist_remove+0x156/0x340 [ 536.499920][T15154] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 bd bd 88 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 9e bd 88 f6 49 8b 44 24 58 48 89 44 24 08 [ 536.519519][T15154] RSP: 0018:ffffc9000d4cf640 EFLAGS: 00010212 [ 536.525580][T15154] RAX: 000000000000000b RBX: ffff88801d363e00 RCX: 0000000000000000 [ 536.533536][T15154] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 536.541490][T15154] RBP: ffffc9000d4cf740 R08: ffffffff90194823 R09: 1ffffffff2032904 [ 536.549453][T15154] R10: dffffc0000000000 R11: fffffbfff2032905 R12: 0000000000000000 [ 536.557409][T15154] R13: 1ffff1100f38028c R14: ffff888079c01460 R15: dffffc0000000000 [ 536.565369][T15154] FS: 0000000000000000(0000) GS:ffff888125320000(0000) knlGS:0000000000000000 [ 536.574305][T15154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.580874][T15154] CR2: 00007f01cc43e020 CR3: 000000002855f000 CR4: 0000000000350ef0 [ 536.588831][T15154] Call Trace: [ 536.592100][T15154] [ 536.595016][T15154] ? __pfx_klist_remove+0x10/0x10 [ 536.600037][T15154] ? kobject_move+0x5e2/0x720 [ 536.604711][T15154] ? __pfx_kobject_move+0x10/0x10 [ 536.609729][T15154] ? do_raw_spin_unlock+0xf5/0x210 [ 536.614876][T15154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.620508][T15154] ? get_device_parent+0x366/0x3a0 [ 536.625622][T15154] device_move+0x18e/0x720 [ 536.630037][T15154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.635663][T15154] hci_conn_del_sysfs+0xb8/0x1a0 [ 536.640592][T15154] hci_conn_del+0xc3d/0x1200 [ 536.645185][T15154] hci_conn_hash_flush+0x189/0x260 [ 536.650287][T15154] hci_dev_close_sync+0x7fc/0x10a0 [ 536.655406][T15154] ? __pfx___mutex_lock+0x10/0x10 [ 536.660427][T15154] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 536.665969][T15154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.671591][T15154] ? up_write+0x19f/0x4a0 [ 536.675913][T15154] ? rcu_is_watching+0x15/0xb0 [ 536.680671][T15154] hci_unregister_dev+0x232/0x5b0 [ 536.685691][T15154] vhci_release+0x16d/0x1c0 [ 536.690187][T15154] ? __pfx_vhci_release+0x10/0x10 [ 536.695199][T15154] __fput+0x418/0xa50 [ 536.699178][T15154] task_work_run+0x1d9/0x270 [ 536.703795][T15154] ? __pfx_task_work_run+0x10/0x10 [ 536.708929][T15154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.714585][T15154] ? kmem_cache_free+0x182/0x650 [ 536.719539][T15154] ? put_net+0x191/0x260 [ 536.723834][T15154] do_exit+0x73a/0x2360 [ 536.728002][T15154] ? __pfx_do_exit+0x10/0x10 [ 536.732631][T15154] ? do_raw_spin_lock+0x12b/0x2f0 [ 536.737663][T15154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.743296][T15154] ? srso_alias_return_thunk+0x5/0xfbef5 [ 536.748940][T15154] do_group_exit+0x22d/0x2f0 [ 536.753527][T15154] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.758722][T15154] get_signal+0x121b/0x12c0 [ 536.763243][T15154] arch_do_signal_or_restart+0xbb/0x860 [ 536.768794][T15154] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 536.773997][T15154] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 536.780161][T15154] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 536.785894][T15154] exit_to_user_mode_loop+0x104/0x730 [ 536.791264][T15154] ? rcu_is_watching+0x15/0xb0 [ 536.796111][T15154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.802177][T15154] do_syscall_64+0x353/0x580 [ 536.806764][T15154] ? trace_irq_disable+0x3b/0x140 [ 536.811797][T15154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.817771][T15154] RIP: 0033:0x7f504e75e68e [ 536.822182][T15154] Code: Unable to access opcode bytes at 0x7f504e75e664. [ 536.829183][T15154] RSP: 002b:00007f504f71ef58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 536.837590][T15154] RAX: fffffffffffffdfc RBX: 00007f504f71f6c0 RCX: 00007f504e75e68e [ 536.845554][T15154] RDX: 00007f504f71efb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.853511][T15154] RBP: 00007f504e833e6f R08: 0000000000000000 R09: 0000000000000000 [ 536.861503][T15154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.869463][T15154] R13: 00007f504ea26038 R14: 00007f504ea25fa0 R15: 00007ffecb6db368 [ 536.877610][T15154] [ 536.880615][T15154] Modules linked in: [ 536.888752][T15154] ---[ end trace 0000000000000000 ]--- [ 536.955604][T15154] RIP: 0010:klist_remove+0x156/0x340 [ 536.961142][T15154] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 bd bd 88 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 9e bd 88 f6 49 8b 44 24 58 48 89 44 24 08 [ 537.039219][T15154] RSP: 0018:ffffc9000d4cf640 EFLAGS: 00010212 [ 537.069722][T15154] RAX: 000000000000000b RBX: ffff88801d363e00 RCX: 0000000000000000 [ 537.087686][T15154] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 537.098764][T15154] RBP: ffffc9000d4cf740 R08: ffffffff90194823 R09: 1ffffffff2032904 [ 537.109158][T15154] R10: dffffc0000000000 R11: fffffbfff2032905 R12: 0000000000000000 [ 537.117521][T15154] R13: 1ffff1100f38028c R14: ffff888079c01460 R15: dffffc0000000000 [ 537.127515][T15154] FS: 0000000000000000(0000) GS:ffff888125320000(0000) knlGS:0000000000000000 [ 537.136801][T15154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.143819][T15154] CR2: 00007f1c55fe2368 CR3: 000000002945e000 CR4: 0000000000350ef0 [ 537.153466][T15154] Kernel panic - not syncing: Fatal exception [ 537.159760][T15154] Kernel Offset: disabled [ 537.164098][T15154] Rebooting in 86400 seconds..