last executing test programs: 19m0.478247974s ago: executing program 32 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e7500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x131) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) 18m24.895316247s ago: executing program 33 (id=51): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e24, 0x1000, @empty, 0x80}}}, 0x84) 18m24.639109878s ago: executing program 34 (id=126): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 13m58.90504068s ago: executing program 2 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 13m54.9655671s ago: executing program 2 (id=834): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x18, 0x4, @void, @value=r0}, 0x20) 13m54.047396306s ago: executing program 2 (id=838): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r0, 0x0) r1 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 13m53.047704098s ago: executing program 2 (id=841): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', 0x0) 13m51.564793166s ago: executing program 2 (id=846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '('}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000015000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 13m50.129420753s ago: executing program 2 (id=851): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xc4) 13m47.408008659s ago: executing program 35 (id=851): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$eJzs3c9rXNUeAPDvnUnSpM17aR+Px2t4DwMuWpCmSS1W3djWhV0ULNiFiIuGJqmh0x80KdhaaAsuFBRE3Bbpxn/AvXTvTgR151qoIhUFLRm5d+6kk+ROk6admaT384GZOffcO3POd05P77n35swNoLTG0qdKxO6IxVNJxEjLuuForBzLt7v367XT6SOJev2NX5JI8rzm9ov56470KYkYjIhvjkb8q7q63PkrV89O1eoN1yP2L5y7uH/+ytV9c+emzsycmTk/eeDFg4cmXpo8OPlE4tyRvx47/vr/Pn7/nRdmv63tS+JwnOx/bzpWxLEB9aQgcyzGYjEPsTW/LyIOpYmC72WrWVcI2zpfDzammv977I+I/8RIVLOlhpGY+6inlQM6ql6NqAMllej/UFLNcUDz2H59x8EnOzwq6Z67RxoHQKvj72ucG4nB7Nho+72k5ciocW5j5xMoPy3j/rXRW+kjlp2H+GOpdfqeQDnt3LgZEf8tij/J6rYzizSNvxKVlveldZqIiIE8/eoGim4mWs+dPOZ5mEevxCPE39oO6XdxOH9N849usPyxFcvdjh+AcrpzJN+RZ3vjB/u/dOzRHP9EwfhnuGDftRG93v+1H/819/eD2TnyyopxWDpmOVH8kf0rM3788Nin7cpvHf/dv5Zk9WiOBbvh7s2I0RXxf5AN9JKl9k8K2j/d5NTh9ZXx2nc/H2u3bnn8o7e6HX/9dsSewuOfB6PSNPWQ65P7Z+dqMxON58Iyvvr67S/ald/r+NP2394m/pb2r6x8X/qdXFxnGV+euH1uoM264TXjr/w0kDSON5uf8e7UwsKlyYiB5Hi+SUv+gYfXpblN8zPS+Pc+W9z/l/37v7n8c4ZaD2DWcPHNs/fardtI+7dcTF6sr7MO7aTxT6/d/qv6f5r3yTrL+P2ty/9vt64g/og8/qHHCQwAAAAAAABKqJJdg00q40vpSmV8vDFf9t+xvVK7ML/w3OyFy+enI/Zmfw/ZX2le6R5pLCfp8mT+97DN5QMrlp+PiF0R8Vl1KFseP32hNt3r4AEAAAAAAAAAAAAAAAAAAGCT2JHP/2/ep/q3amP+P1ASnbzBHLC56f9QXln/X3WLJ6AM7P+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/wcAAACAp9KuZ+78kETEjZeHskdqIF9X7WnNgE7rL8irX+9BRYCus4+H8lq69G/6P5RO0fh/lT/zHwfsfHWAHkiKMrPBQf3hnf9O4TsBAAAAAAAAAAAAgA7Ys7v9/P91zQ0AtizT/qC8HmP+v58OgC3OT/9DeTnGB9aaxT/YboX5/wAAAAAAAAAAAADQNcPZI6mM53OBh6NSGR+P+EdE7Iz+ZHauNjMREf+MiO+r/dvS5cleVxoAAAAAAAAAAAAAAAAAAACeMvNXrp6dqtVmLrUm/lqV83QnmndB7UJZr8QjviuS7n8tQxHR80bpWKKvJSeJuJG2/Kao2KX52BzVyBI9/o8JAAAAAAAAAAAAAAAAAABKqGXucbHRz7tcIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovgf3/+9cotcxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb098BAAD///yqQiE=") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xc4) 10m24.728237909s ago: executing program 3 (id=1502): timer_create(0x7, 0x0, &(0x7f0000bbdffc)) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 10m23.478135451s ago: executing program 3 (id=1506): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 10m22.915340906s ago: executing program 3 (id=1508): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000001000)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x184) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x806071, 0x0, 0x0, 0x0, &(0x7f0000000140)) 10m21.933472338s ago: executing program 3 (id=1512): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x204) 10m21.139427026s ago: executing program 3 (id=1514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) 10m20.456714814s ago: executing program 6 (id=1518): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000240)={0x20, 0x2, &(0x7f00000000c0), 0x8000, 0x10000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 10m20.28501732s ago: executing program 3 (id=1519): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 10m16.819149212s ago: executing program 36 (id=1519): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 10m16.752939428s ago: executing program 6 (id=1526): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 10m16.140864211s ago: executing program 6 (id=1528): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) 10m15.688962471s ago: executing program 6 (id=1529): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) 10m14.353386726s ago: executing program 6 (id=1534): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 10m12.66776653s ago: executing program 6 (id=1537): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x39) io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f00000013c0)={0x77359400}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10m9.651550043s ago: executing program 37 (id=1537): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x39) io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f00000013c0)={0x77359400}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m40.620347466s ago: executing program 0 (id=2330): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000580)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@unhide}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@nocompress}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}]}, 0x5, 0xa62, &(0x7f0000000680)="$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") name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000fc0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.metadata\x00') 6m38.832200469s ago: executing program 0 (id=2337): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 6m37.915126582s ago: executing program 0 (id=2341): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000400)={0x0, 0x16, 0x2, "b5a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)={0xb6998e82a6317473, 0x15, 0x2, "a755"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m33.937477095s ago: executing program 0 (id=2354): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc) 6m33.331524092s ago: executing program 0 (id=2358): set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 6m31.024468049s ago: executing program 0 (id=2366): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f00005ae000/0x4000)=nil, 0x4000}, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f00005ae000/0x4000)=nil, 0x4000}, 0x3, 0x2}) 6m28.695685697s ago: executing program 38 (id=2366): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f00005ae000/0x4000)=nil, 0x4000}, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f00005ae000/0x4000)=nil, 0x4000}, 0x3, 0x2}) 1m24.288088312s ago: executing program 8 (id=3495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff000000000000000708400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) 1m23.739418451s ago: executing program 8 (id=3499): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20) 1m23.139447726s ago: executing program 8 (id=3503): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m22.132379428s ago: executing program 8 (id=3505): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x204008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}]}) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m21.651616973s ago: executing program 8 (id=3508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x4, &(0x7f0000006400)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES64=0x0], 0xfd, 0x5abd, &(0x7f0000006440)="$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") write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) 1m19.726061388s ago: executing program 8 (id=3515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xffd, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 1m4.219493326s ago: executing program 39 (id=3515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xffd, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 9.713236796s ago: executing program 7 (id=3736): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fstat(r0, &(0x7f00000002c0)) 8.730536641s ago: executing program 7 (id=3740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES64=0x0], 0x1, 0x54f4, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x1020000, 0x2000003}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 7.682509075s ago: executing program 9 (id=3743): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) write(r0, &(0x7f00000002c0)='G', 0x1) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 6.20110746s ago: executing program 7 (id=3745): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10001) write(r0, 0x0, 0x0) 4.896899803s ago: executing program 9 (id=3748): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4810, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0], 0x11, 0x6a0, &(0x7f0000004200)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVRQIxI7VgrhkoAQClKFqnDgbDVOY8VJg+OitAfiAhJXDvwB5RAucAIhJCSkSOUMt4qbxakSEpee0h4YNLOz9trd9UvebMPnE80+zzPPzDO/+c3LvkTWBPi/delU2vfTyaVTr9+p2mv35pbW7s3d6NWTjCdpJe1ukeJmUnyYXEx3yheqmc1wxbDt/Grx/OWPPln7uNtqZ2O86qUzPMD2bvZitZkynWSkKR/BpvHefLjxxjeqxXpmqoSd7CUO9ttoknKTHx3f6BmkHOlrDL3egcOj6L5v9ule/1PJkSQTvTe01W5n6+lHuKM93YtWn1wcAAAAcGAcfXA3uZPJ/Y4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADpPm+f9FM7V69ekUvef/j/U9Y39sn8MdbvvIJnqV+62nEQwAAAAAAAAAPFlfepDfXi7LyV67LOr/83+5bhyrX5/JO7mdhSzndO5kPitZyXJmk0z1DTR2Z35lZXm2t+ZnZVkOWfPswDXP7jLgzuPYawAAAAAAAAD4n3GhKX+aS5nc51gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCTIhnpFvV0rFefSqudZCLJWLXcavL3Xv0wu7/fAQAAAMBTcPRBHuROJnvtsqi/8x+vv/dP5J3czEoWs5KlLORK/VtA91t/a+3e3NLavbkb1fT5cb/17436HyZ3DKMeMd3fHgZv+US9RCdXs1jPOZ0383aWciWtes3KiV48g+N6v4qpuNBVlrtL0JWmrPb8l015MEzVGRldz8hME1uVjWe3z0T/0XmILc2mtf7Lz7E95PzCtlsp/tM7Jkd6c5Jnvrdzzkf3tDOPZGsmzvadfce3z0TylT/+7ofXlm5ev1asnjo4p9EejP9z46rZmom5vky8uOtMXL19ODOxVSsvrNcv5bv5QU5lOm9kOYv5ceazkoVM5zt1bb45n6vXqe0zdXFT642dohhrjsvIlpi+fLRbbhfTy/W6k1nM9/N2rmQhr9X/zmY2X8+5nMv5viP8wi6u+taAq/5Pw4M/+dWm0knyi6Y8GKq8PtuX1/577lTd1z+nlXK8u95zj+3euK79xaZSHYmfNeXBsJ6Jiay/S/Sie76XgdGBmfh1fVu5vXTz+vK1+Vtbxi1WB2/vlWze/T3dSEb2svBeVefLc9XBqlubz46q7/mBfbN137H1vtbWvt901vt2ulLHms9wnx/pbN334sC+ubrvRF/fxuetz8qy7H7eAuDAO/LqkbHOvzp/63zQ+XnnWuf1iW+Pf2P8pbGM/nX0m+2ZkVdaLxW/zwf5SXb+hg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzo9rvvXZ9fWlpY3lIpy/LukK4nUkk72TTnL3/uWyZJ/TCg3Q9YLX2xldRz2mkqewvs7sPtzvsPm4R/NMfkqST8sVQmhp4/WyuflmV5MGLeTaVsHJR4nkDl1bIst11mX29LwFNwZuXGrTO3333va4s35t9aeGvh5vlz587PnD/32tyZq4tLCzPd1/2OEngS+j6BAwAAAAAAAAAAAIfE7v44p3i0v+0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeASXTqV9P0VmZ07PVO21e3NL1dSrbyz5aZJWkmI6KT5MLqY7ZapvuGLYdlaTyx99svZxt9Vupnr51nbr7c5qM2U6yUhTDjAxaGZ5d9h4RT3OreHjbTFsL4r1viphJ3uJg/323wAAAP//H4wcFQ==") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) 3.835461801s ago: executing program 9 (id=3752): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) 3.754524168s ago: executing program 4 (id=3753): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) io_uring_setup(0x5, &(0x7f0000000040)={0x0, 0x3c1d, 0xc000, 0x3, 0x38}) 3.675161768s ago: executing program 5 (id=3754): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000000), 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3.498125165s ago: executing program 1 (id=3755): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0xe, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0x3506, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 3.221043329s ago: executing program 5 (id=3756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.171372572s ago: executing program 4 (id=3757): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000095b000/0x4000)=nil, 0x4000, 0x2000009, 0x25813, r0, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 2.937091703s ago: executing program 9 (id=3758): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000001c0), 0x1, 0x0) close(0x3) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 2.909274174s ago: executing program 1 (id=3759): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/46, 0x2e}], 0x1}, 0x7}], 0x1, 0x10000, 0x0) 2.685705041s ago: executing program 4 (id=3760): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x5214}, 0x10) 2.593412659s ago: executing program 5 (id=3761): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r0, &(0x7f0000014140)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000016c0)="a385", 0x2}], 0x1}}], 0x1, 0x20010860) 2.571290707s ago: executing program 9 (id=3762): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) accept(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.389395058s ago: executing program 1 (id=3763): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) 2.124131827s ago: executing program 5 (id=3764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [], {0x95, 0x0, 0x74}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.121434725s ago: executing program 4 (id=3765): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) 1.992642822s ago: executing program 7 (id=3766): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0xffffffff, 0x0, 0x4, 0x800008, 0x0, 0x3, 0x4000}) 1.982518028s ago: executing program 9 (id=3767): r0 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) 1.512884699s ago: executing program 5 (id=3768): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000140)=0x0) close(r0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x300}]) 1.416995156s ago: executing program 1 (id=3769): openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 726.722619ms ago: executing program 4 (id=3770): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x130c0a8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX], 0xa, 0x2c6, &(0x7f00000016c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 677.629149ms ago: executing program 1 (id=3771): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) lseek(r2, 0x0, 0x1) 605.451121ms ago: executing program 7 (id=3772): bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0x40189206, &(0x7f0000000180)) 145.557982ms ago: executing program 7 (id=3773): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_connect(0x3, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e10630715108856000000010902"], 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time\x00') 100.177756ms ago: executing program 1 (id=3774): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000000}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x2060) 23.649586ms ago: executing program 5 (id=3775): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) read$FUSE(r1, 0x0, 0x0) 0s ago: executing program 4 (id=3776): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002680)="75f60520bd942f2aef", 0x9}], 0x1}}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ures: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1157.386422][T14509] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 1157.397447][T14509] bcachefs (loop5): invalid bkey in superblock btree=lru level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 131072 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 1157.397612][T14509] size != 0, deleting [ 1157.427871][T14509] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 1157.436961][T14509] bcachefs (loop5): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version) [ 1157.436961][T14509] [ 1157.462807][T14509] syz.5.2856: attempt to access beyond end of device [ 1157.462807][T14509] loop5: rw=6145, sector=18446744073709551615, nr_sectors = 10 limit=32768 [ 1157.478650][T14509] bcachefs (loop5): superblock write error: I/O [ 1157.488569][T14509] bcachefs (loop5): bch2_write_super(): fatal error : Unable to write superblock to sufficient devices (from bch2_fs_recovery) [ 1157.502607][T14509] bcachefs (loop5): fatal error - emergency read only [ 1157.654518][T14509] bcachefs (loop5): bch2_write_super(): fatal error loop5: Superblock modified by another process (seq 43 expected 42) [ 1157.668074][T14509] bcachefs (loop5): btree node read error at btree alloc level 0/0 [ 1157.668192][T14509] u64s 11 type btree_ptr_v2 283673999966207:U64_MAX:U32_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 1157.668328][T14509] loop5 node offset 0/24 bset u64s 0: incorrect max key SPOS_MAX [ 1157.668423][T14509] loop5 btree validate error [ 1157.668498][T14509] flagging btree alloc lost data [ 1157.668583][T14509] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 1157.668687][T14509] running recovery pass check_allocations (8), currently at recovery_pass_empty (0) [ 1157.668796][T14509] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 1157.668915][T14509] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 1157.669034][T14509] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 1157.669135][T14509] ret btree_node_read_err_bad_node [ 1157.775459][T14509] bcachefs (loop5): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 1157.882974][T14509] bcachefs (loop5): check_topology... [ 1157.946807][T14509] bcachefs (loop5): bch2_write_super(): fatal error loop5: Superblock modified by another process (seq 43 expected 42) [ 1157.966059][T14509] done [ 1157.968997][T14509] bcachefs (loop5): accounting_read... [ 1157.984600][T14509] bcachefs (loop5): bch2_write_super(): fatal error loop5: Superblock modified by another process (seq 43 expected 42) [ 1158.006087][T14509] done [ 1158.009337][T14509] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 1158.040999][T14509] bcachefs (loop5): bch2_write_super(): fatal error loop5: Superblock modified by another process (seq 43 expected 42) [ 1158.055258][T14509] bcachefs (loop5): done starting filesystem [ 1158.164924][T14517] loop7: detected capacity change from 0 to 256 [ 1158.215071][T14517] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1158.227240][T14517] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1158.297605][T13088] bcachefs (loop5): shutting down [ 1158.409203][T13088] bcachefs (loop5): shutdown complete [ 1158.483818][T14517] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1158.676863][ T30] audit: type=1800 audit(1757549307.083:144): pid=14517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2859" name="file1" dev="loop7" ino=1048710 res=0 errno=0 [ 1158.698030][ T30] audit: type=1800 audit(1757549307.103:145): pid=14517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2859" name="file1" dev="loop7" ino=1048710 res=0 errno=0 [ 1161.075217][T14532] loop4: detected capacity change from 0 to 32768 [ 1161.139153][ T30] audit: type=1800 audit(1757549309.563:146): pid=14532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2851" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 1161.162439][T12831] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1161.371832][T12831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.384683][T12831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.396200][T12831] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1161.407263][T12831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.553369][T12831] usb 8-1: config 0 descriptor?? [ 1162.674795][T12831] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71 [ 1162.684607][T12831] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 1162.694017][T12831] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71 [ 1162.704424][T12831] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 1162.713260][T12831] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 1162.764342][T14540] loop8: detected capacity change from 0 to 32768 [ 1162.825862][T14540] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2871 (14540) [ 1162.860579][T14540] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1162.871341][T14540] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1162.917947][T12831] usb 8-1: USB disconnect, device number 17 [ 1163.190960][T14540] BTRFS info (device loop8): enabling ssd optimizations [ 1163.198813][T14540] BTRFS info (device loop8): enabling free space tree [ 1163.302654][T14540] BTRFS info (device loop8): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 1163.716219][ T8859] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1165.013748][T14566] loop7: detected capacity change from 0 to 32768 [ 1165.029841][T14566] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2875 (14566) [ 1165.095578][T14566] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1165.108209][T14566] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 1165.507108][T14566] BTRFS info (device loop7): setting nodatasum [ 1165.513937][T14566] BTRFS info (device loop7): enabling free space tree [ 1165.522867][T14566] BTRFS info (device loop7): use zlib compression, level 3 [ 1165.530433][T14566] BTRFS info (device loop7): max_inline set to 0 [ 1165.842621][T10894] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1165.933676][ T6499] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1166.034369][T10894] usb 6-1: Using ep0 maxpacket: 16 [ 1166.139400][T10894] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1166.152597][T10894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.161004][T10894] usb 6-1: Product: syz [ 1166.165810][T10894] usb 6-1: Manufacturer: syz [ 1166.170645][T10894] usb 6-1: SerialNumber: syz [ 1166.301342][T10894] usb 6-1: config 0 descriptor?? [ 1166.374533][T10894] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1166.572696][T10894] gp8psk: usb in 128 operation failed. [ 1166.578967][T14596] team0 (unregistering): Port device team_slave_0 removed [ 1166.634835][T10894] gp8psk: usb in 137 operation failed. [ 1166.642252][T10894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1166.687058][T10894] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1166.699740][T10894] usb 6-1: media controller created [ 1166.736635][T14596] team0 (unregistering): Port device team_slave_1 removed [ 1166.864919][T10894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1167.172857][T10894] gp8psk_fe: Frontend revision 1 attached [ 1167.178948][T10894] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1167.188026][T10894] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1167.434463][T10894] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1167.448655][T10894] gp8psk: found Genpix USB device pID = 201 (hex) [ 1167.696639][T12831] usb 6-1: USB disconnect, device number 5 [ 1168.524114][T12831] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1168.986913][T14619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1169.032630][T14619] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1169.739225][T14631] loop5: detected capacity change from 0 to 1024 [ 1169.774229][T14631] EXT4-fs: Ignoring removed nobh option [ 1169.780099][T14631] EXT4-fs: Ignoring removed bh option [ 1170.779461][T14635] loop4: detected capacity change from 0 to 32768 [ 1171.018036][T14631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.323394][T14635] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 1171.323589][T14635] allowing incompatible features above 0.0: (unknown version) [ 1171.323701][T14635] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1171.352533][T12831] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1171.360181][T14635] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 1171.360365][T14635] bcachefs (loop4): initializing new filesystem [ 1171.392340][T14635] bcachefs (loop4): going read-write [ 1171.484132][T14635] bcachefs (loop4): marking superblocks [ 1171.549231][T14635] bcachefs (loop4): initializing freespace [ 1171.584545][T14635] bcachefs (loop4): done initializing freespace [ 1171.606882][T14635] bcachefs (loop4): reading snapshots table [ 1171.615557][T14635] bcachefs (loop4): reading snapshots done [ 1171.716239][T12831] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.727912][T12831] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1171.741613][T14635] bcachefs (loop4): done starting filesystem [ 1171.874961][T12831] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1171.884790][T12831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1171.893225][T12831] usb 8-1: SerialNumber: syz [ 1172.302716][T10935] bcachefs (loop4): shutting down [ 1172.307986][T10935] bcachefs (loop4): going read-only [ 1172.416422][T10935] bcachefs (loop4): finished waiting for writes to stop [ 1172.484728][T10935] bcachefs (loop4): flushing journal and stopping allocators, journal seq 6 [ 1173.009021][T12831] usb 8-1: 0:2 : does not exist [ 1173.127282][T13088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.129955][T14661] loop9: detected capacity change from 0 to 32768 [ 1173.161359][T10935] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 1173.196265][T12831] usb 8-1: USB disconnect, device number 18 [ 1173.256275][T14661] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1173.287782][T10935] bcachefs (loop4): clean shutdown complete, journal seq 15 [ 1173.365124][T10935] bcachefs (loop4): marking filesystem clean [ 1173.708240][T10935] bcachefs (loop4): shutdown complete [ 1174.822597][T14675] loop7: detected capacity change from 0 to 32768 [ 1174.960212][T14661] XFS (loop9): Ending clean mount [ 1174.973335][T14661] XFS (loop9): Quotacheck needed: Please wait. [ 1175.153680][T14661] XFS (loop9): Quotacheck: Done. [ 1175.239483][T10891] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1176.049902][T14675] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 1176.050083][T14675] allowing incompatible features above 0.0: (unknown version) [ 1176.050189][T14675] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1176.097393][T14675] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 1176.106332][T14675] bcachefs (loop7): initializing new filesystem [ 1176.132552][T14675] bcachefs (loop7): going read-write [ 1176.169602][T14675] bcachefs (loop7): marking superblocks [ 1176.230157][T14675] bcachefs (loop7): initializing freespace [ 1176.264369][T14675] bcachefs (loop7): done initializing freespace [ 1176.288865][T14675] bcachefs (loop7): reading snapshots table [ 1176.295518][T14675] bcachefs (loop7): reading snapshots done [ 1176.459299][T14675] bcachefs (loop7): done starting filesystem [ 1176.905505][ T6499] bcachefs (loop7): shutting down [ 1176.910773][ T6499] bcachefs (loop7): going read-only [ 1176.917710][ T6499] bcachefs (loop7): finished waiting for writes to stop [ 1176.955940][ T6499] bcachefs (loop7): flushing journal and stopping allocators, journal seq 2 [ 1177.401083][ T6499] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3 [ 1177.416150][ T6499] bcachefs (loop7): clean shutdown complete, journal seq 4 [ 1177.426980][ T6499] bcachefs (loop7): marking filesystem clean [ 1177.616113][ T6499] bcachefs (loop7): shutdown complete [ 1180.022837][T14714] loop5: detected capacity change from 0 to 2048 [ 1180.180655][T14714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1180.402783][T14714] EXT4-fs (loop5): shut down requested (0) [ 1180.683233][T14720] loop4: detected capacity change from 0 to 128 [ 1180.793097][T14720] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1180.812946][T14712] loop8: detected capacity change from 0 to 32768 [ 1180.868344][T14720] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1180.916187][T13088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.173416][T14728] loop9: detected capacity change from 0 to 1024 [ 1182.223280][T14730] loop5: detected capacity change from 0 to 64 [ 1185.620357][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2934'. [ 1185.842721][T14564] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1186.046065][T14564] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1186.058082][T14564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.135234][T14564] usb 5-1: config 0 descriptor?? [ 1186.337929][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2937'. [ 1186.434679][T14564] kaweth 5-1:0.0: Firmware present in device. [ 1186.527325][T14775] netlink: 212924 bytes leftover after parsing attributes in process `syz.5.2940'. [ 1186.641796][T14564] kaweth 5-1:0.0: Statistics collection: 0 [ 1186.648508][T14564] kaweth 5-1:0.0: Multicast filter limit: 0 [ 1186.655112][T14564] kaweth 5-1:0.0: MTU: 0 [ 1186.659574][T14564] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1187.391256][T14564] kaweth 5-1:0.0: kaweth interface created at eth5 [ 1187.494277][ T24] usb 5-1: USB disconnect, device number 7 [ 1187.502763][T12831] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1187.731939][T12831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.744737][T12831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.755126][T12831] usb 8-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1187.764769][T12831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.902581][T12831] usb 8-1: config 0 descriptor?? [ 1188.565351][T12831] magicmouse 0003:05AC:0324.001A: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.7-1/input0 [ 1188.578468][T12831] magicmouse 0003:05AC:0324.001A: magicmouse input not registered [ 1188.674953][T12831] magicmouse 0003:05AC:0324.001A: probe with driver magicmouse failed with error -12 [ 1188.737648][T12831] usb 8-1: USB disconnect, device number 19 [ 1188.855372][T14794] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2946'. [ 1188.880173][T14798] netlink: 'syz.9.2949': attribute type 12 has an invalid length. [ 1188.888960][T14798] netlink: 'syz.9.2949': attribute type 29 has an invalid length. [ 1188.897240][T14798] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2949'. [ 1188.906639][T14798] netlink: 'syz.9.2949': attribute type 1 has an invalid length. [ 1189.472684][T12831] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1189.550204][T14803] loop5: detected capacity change from 0 to 2048 [ 1189.624072][T14803] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1189.651903][T14803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1189.718847][T12831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.730324][T12831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1189.743123][T12831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1189.783371][T12831] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1189.795064][T12831] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1189.803596][T12831] usb 5-1: Manufacturer: syz [ 1189.836500][T12831] usb 5-1: config 0 descriptor?? [ 1190.134130][T12831] usb 5-1: USB disconnect, device number 8 [ 1190.441076][T14818] ------------[ cut here ]------------ [ 1190.446977][T14818] WARNING: CPU: 1 PID: 14818 at fs/exec.c:119 path_noexec+0x2ac/0x310 [ 1190.456916][T14818] Modules linked in: [ 1190.461215][T14818] CPU: 1 UID: 0 PID: 14818 Comm: syz.8.2958 Tainted: G W syzkaller #0 PREEMPT(none) [ 1190.473310][T14818] Tainted: [W]=WARN [ 1190.483817][T14818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1190.495135][T14818] RIP: 0010:path_noexec+0x2ac/0x310 [ 1190.500767][T14818] Code: 49 89 ff 8b 7d d4 e8 d3 63 e1 ff 4c 89 ff e9 c8 fe ff ff 44 89 e7 e8 c3 63 e1 ff 4d 85 ed 0f 85 a3 fe ff ff e8 45 a2 3e ff 90 <0f> 0b 90 48 8b 7d c0 4c 8b 37 e8 85 58 e1 ff 48 8b 00 48 89 45 c8 [ 1190.520969][T14818] RSP: 0018:ffff888116c3fbc0 EFLAGS: 00010283 [ 1190.527751][T14818] RAX: ffffffff82b652fb RBX: ffff88810a144ce0 RCX: 0000000000080000 [ 1190.536696][T14818] RDX: ffffc9000a008000 RSI: 0000000000000057 RDI: 0000000000000058 [ 1190.545253][T14818] RBP: ffff888116c3fc00 R08: ffffea000000000f R09: 0000000000000003 [ 1190.553777][T14818] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000 [ 1190.563203][T14818] R13: 0000000000000000 R14: ffff8881005e4da0 R15: 0000000000000000 [ 1190.571436][T14818] FS: 00007fbe27df66c0(0000) GS:ffff8881aa791000(0000) knlGS:0000000000000000 [ 1190.582142][T14818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1190.591629][T14818] CR2: 0000001b2d621ff8 CR3: 000000012d5fa000 CR4: 00000000003526f0 [ 1190.600852][T14818] Call Trace: [ 1190.604436][T14818] [ 1190.607571][T14818] do_mmap+0x1570/0x1d70 [ 1190.612567][T14818] vm_mmap_pgoff+0x40d/0x770 [ 1190.617500][T14818] ksys_mmap_pgoff+0x51b/0x7c0 [ 1190.622728][T14818] __x64_sys_mmap+0x19c/0x260 [ 1190.627720][T14818] x64_sys_call+0x18a7/0x3e20 [ 1190.632898][T14818] do_syscall_64+0xd9/0x210 [ 1190.637701][T14818] ? irqentry_exit+0x16/0x60 [ 1190.642816][T14818] ? clear_bhb_loop+0x40/0x90 [ 1190.647789][T14818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.654292][T14818] RIP: 0033:0x7fbe29b8eba9 [ 1190.660180][T14818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1190.680815][T14818] RSP: 002b:00007fbe27df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1190.690575][T14818] RAX: ffffffffffffffda RBX: 00007fbe29dd5fa0 RCX: 00007fbe29b8eba9 [ 1190.699513][T14818] RDX: 0000000002000000 RSI: 0000000000003000 RDI: 0000200000000000 [ 1190.708336][T14818] RBP: 00007fbe29c11e19 R08: 0000000000000005 R09: 0000000000003000 [ 1190.716706][T14818] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 1190.725048][T14818] R13: 00007fbe29dd6038 R14: 00007fbe29dd5fa0 R15: 00007ffd53a4efe8 [ 1190.733471][T14818] [ 1190.736676][T14818] ---[ end trace 0000000000000000 ]--- [ 1190.849081][T14823] loop7: detected capacity change from 0 to 512 [ 1190.923038][T14823] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1191.029630][T14823] EXT4-fs (loop7): 1 truncate cleaned up [ 1191.044772][T14823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1191.831556][ T6499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.903302][T14834] loop9: detected capacity change from 0 to 2048 [ 1192.010652][T14834] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1192.743077][T14836] loop4: detected capacity change from 0 to 40427 [ 1192.758999][T14836] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1192.767353][T14836] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1192.816259][T14836] F2FS-fs (loop4): invalid crc value [ 1193.190544][T14836] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1193.211542][T14836] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1193.221652][T14836] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1195.292952][T14564] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1195.449205][T14865] loop7: detected capacity change from 0 to 32768 [ 1195.533894][T14865] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1195.558916][T14564] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1195.569613][T14564] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1195.717353][T14564] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1195.729188][T14564] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1195.739126][T14564] usb 10-1: Product: syz [ 1195.743992][T14564] usb 10-1: Manufacturer: syz [ 1195.748907][T14564] usb 10-1: SerialNumber: syz [ 1195.946239][T14564] usb 10-1: config 0 descriptor?? [ 1196.000860][T14564] usb 10-1: selecting invalid altsetting 0 [ 1196.456065][T14564] usb 10-1: USB disconnect, device number 10 [ 1196.731770][ T6499] (syz-executor,6499,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72 [ 1197.588972][T14873] loop8: detected capacity change from 0 to 65536 [ 1197.693524][T14873] XFS (loop8): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1197.953849][T14878] loop4: detected capacity change from 0 to 32768 [ 1197.978844][ T6499] ocfs2: Unmounting device (7,7) on (node local) [ 1197.989216][T14873] XFS (loop8): Ending clean mount [ 1198.014359][ T30] audit: type=1800 audit(1757549346.443:147): pid=14873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2978" name="file1" dev="loop8" ino=70 res=0 errno=0 [ 1198.207694][ T8859] XFS (loop8): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1201.600329][T14904] loop4: detected capacity change from 0 to 256 [ 1202.622285][T14914] input: syz0 as /devices/virtual/input/input33 [ 1203.786928][T14930] overlayfs: failed to clone upperpath [ 1205.292382][T14564] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1205.551204][T14564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.566810][T14564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.579610][T14564] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1205.595604][T14564] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1205.606195][T14564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.670209][T14564] usb 5-1: config 0 descriptor?? [ 1206.393237][T14564] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1206.705921][T14962] loop9: detected capacity change from 0 to 40427 [ 1206.727417][T14962] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1206.737202][T14962] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1206.755009][T14962] F2FS-fs (loop9): invalid crc value [ 1207.096762][T14962] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1207.148926][T14962] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1207.156710][T14962] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1207.332699][T14564] usb 5-1: USB disconnect, device number 9 [ 1208.604321][T14683] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1209.870274][T15000] loop7: detected capacity change from 0 to 1024 [ 1210.627807][T14682] hfsplus: b-tree write err: -5, ino 4 [ 1211.704138][T15013] loop7: detected capacity change from 0 to 4096 [ 1212.555944][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.559121][T15036] loop4: detected capacity change from 0 to 256 [ 1212.563287][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.582610][T15036] exfat: Deprecated parameter 'utf8' [ 1212.638594][T15036] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1214.198022][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3048'. [ 1214.616744][T15061] input: syz1 as /devices/virtual/input/input34 [ 1215.337009][T15074] loop4: detected capacity change from 0 to 128 [ 1215.390397][T15074] EXT4-fs: Mount option(s) incompatible with ext2 [ 1216.221649][T15071] loop9: detected capacity change from 0 to 32768 [ 1216.321422][T15071] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1216.729236][T15071] XFS (loop9): Ending clean mount [ 1216.753045][T15071] XFS (loop9): Quotacheck needed: Please wait. [ 1216.809751][T15071] XFS (loop9): Quotacheck: Done. [ 1217.071634][T15091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3061'. [ 1217.084453][T15091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3061'. [ 1217.163441][T10891] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1217.981940][T15104] netlink: 'syz.7.3067': attribute type 2 has an invalid length. [ 1221.412558][T10894] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1221.643413][T10894] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1221.653443][T10894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.726420][T10894] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1221.737270][T10894] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1221.746283][T10894] usb 10-1: Manufacturer: syz [ 1221.794769][T10894] usb 10-1: config 0 descriptor?? [ 1222.075017][T15169] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3092'. [ 1222.112161][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3094'. [ 1222.146110][T15172] vxlan1: entered promiscuous mode [ 1222.166642][ T14] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1222.245370][ T14] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1222.262625][ T14] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1222.282987][T10894] rc_core: IR keymap rc-hauppauge not found [ 1222.289121][T10894] Registered IR keymap rc-empty [ 1222.296771][T10894] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1222.313746][T10894] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input35 [ 1222.344563][ T14] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1222.466171][ C0] igorplugusb 10-1:0.0: Error: urb status = -32 [ 1222.492780][T10894] usb 10-1: USB disconnect, device number 11 [ 1222.630768][T15179] loop8: detected capacity change from 0 to 256 [ 1222.655616][T15179] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1222.667332][T15179] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1222.749056][T15179] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1222.848927][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1222.855591][T15179] exFAT-fs (loop8): Filesystem has been set read-only [ 1222.862928][T15179] exFAT-fs (loop8): error, failed to bmap (inode : ffff88812e12aaf0 iblock : 8, err : -5) [ 1222.873386][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1222.883458][T15179] exFAT-fs (loop8): error, failed to bmap (inode : ffff88812e12aaf0 iblock : 8, err : -5) [ 1222.894492][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1222.900679][T15179] exFAT-fs (loop8): error, failed to bmap (inode : ffff88812e12aaf0 iblock : 9, err : -5) [ 1222.910989][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1222.918809][T15179] exFAT-fs (loop8): error, failed to bmap (inode : ffff88812e12aaf0 iblock : 10, err : -5) [ 1222.929784][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1222.936131][T15179] exFAT-fs (loop8): error, failed to bmap (inode : ffff88812e12aaf0 iblock : 11, err : -5) [ 1222.947755][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1222.955021][T15179] exFAT-fs (loop8): error, failed to bmap (inode : ffff88812e12aaf0 iblock : 12, err : -5) [ 1222.965579][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1222.971775][T15179] exFAT-fs (loop8): error, failed to bmap (inode : ffff88812e12aaf0 iblock : 13, err : -5) [ 1222.982623][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1222.988812][T15179] exFAT-fs (loop8): error, failed to bmap (inode : ffff88812e12aaf0 iblock : 14, err : -5) [ 1222.999298][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.005746][T15179] exFAT-fs (loop8): error, failed to bmap (inode : ffff88812e12aaf0 iblock : 15, err : -5) [ 1223.017536][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.024245][T15179] exFAT-fs (loop8): error, failed to bmap (inode : ffff88812e12aaf0 iblock : 16, err : -5) [ 1223.034840][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.042633][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.049520][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.055957][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.062306][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.068595][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.075341][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.081573][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.087901][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.094342][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.100569][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.107281][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.130395][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.137925][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.145964][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.153407][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.160152][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.166530][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.173045][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.179388][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.185930][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.192635][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.203585][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.209873][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.216219][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.223944][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.230719][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.237189][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.243570][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.251096][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.258149][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.264490][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.270786][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.277095][T15179] exFAT-fs (loop8): error, broken FAT chain. [ 1223.298065][ T30] audit: type=1800 audit(1757549371.713:148): pid=15179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3097" name="file1" dev="loop8" ino=1048714 res=0 errno=0 [ 1223.342265][T12831] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1223.530388][T12831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.541834][T12831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.573771][T12831] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1223.584299][T12831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.822768][T12831] usb 8-1: config 0 descriptor?? [ 1224.308707][T12831] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 1224.316928][T12831] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 1224.368103][T12831] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.001C/input/input36 [ 1224.464428][T12831] cm6533_jd 0003:0D8C:0022.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 1224.542245][T15204] loop9: detected capacity change from 0 to 1024 [ 1224.555940][T12831] usb 8-1: USB disconnect, device number 20 [ 1224.658498][T15206] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3107'. [ 1224.673554][T15204] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.689045][T15204] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1224.754471][T15204] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 4: comm syz.9.3106: lblock 4 mapped to illegal pblock 4 (length 1) [ 1224.783622][T15204] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 1224.796673][T15204] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1224.796673][T15204] [ 1224.868855][T15204] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 4: comm syz.9.3106: lblock 4 mapped to illegal pblock 4 (length 1) [ 1224.930491][T15210] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 4: comm syz.9.3106: lblock 4 mapped to illegal pblock 4 (length 1) [ 1224.980030][T15210] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 4: comm syz.9.3106: lblock 4 mapped to illegal pblock 4 (length 1) [ 1225.037611][T15210] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 4: comm syz.9.3106: lblock 4 mapped to illegal pblock 4 (length 1) [ 1225.153275][T15210] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 4: comm syz.9.3106: lblock 4 mapped to illegal pblock 4 (length 1) [ 1225.159049][T15212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3108'. [ 1225.180826][T15212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3108'. [ 1225.184043][T15209] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1225.220589][T15210] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #15: block 4: comm syz.9.3106: lblock 4 mapped to illegal pblock 4 (length 1) [ 1225.535329][ T9614] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 4) [ 1225.623535][ T9614] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 1225.636830][ T9614] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1225.636830][ T9614] [ 1225.760775][T10891] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1225.879638][T15218] loop7: detected capacity change from 0 to 2048 [ 1226.055599][T15223] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1226.157810][T10894] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1226.224537][T15223] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1226.236241][T15223] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1226.284682][T15223] Remounting filesystem read-only [ 1226.452781][T10894] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 1226.461764][T10894] usb 5-1: config 0 has no interface number 0 [ 1226.468628][T10894] usb 5-1: config 0 interface 128 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.480447][T10894] usb 5-1: config 0 interface 128 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.492443][T10894] usb 5-1: config 0 interface 128 has no altsetting 0 [ 1226.501316][T10894] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1226.512325][T10894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.616687][T10894] usb 5-1: config 0 descriptor?? [ 1226.763447][ T6499] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 1227.085142][T10894] uclogic 0003:256C:006D.001D: interface is invalid, ignoring [ 1227.102471][T15230] loop8: detected capacity change from 0 to 1024 [ 1227.322719][T14564] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1227.436650][T12831] usb 5-1: USB disconnect, device number 10 [ 1227.532389][T14564] usb 10-1: Using ep0 maxpacket: 16 [ 1227.573171][T14564] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1227.584797][T14564] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1227.595429][T14564] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1227.669421][T14564] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1227.681032][T14564] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.690569][T14564] usb 10-1: Product: syz [ 1227.695258][T14564] usb 10-1: Manufacturer: syz [ 1227.700249][T14564] usb 10-1: SerialNumber: syz [ 1227.814870][ T4231] hfsplus: b-tree write err: -5, ino 3 [ 1228.053890][T15237] loop7: detected capacity change from 0 to 4096 [ 1228.104326][T15237] ntfs3(loop7): ino=3, Correct links count -> 2. [ 1228.281779][T14564] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 1228.733979][T10894] IPVS: starting estimator thread 0... [ 1228.823728][T15244] IPVS: using max 192 ests per chain, 9600 per kthread [ 1229.114611][T14564] usb 10-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1229.263030][T15248] overlayfs: failed to clone upperpath [ 1229.272649][T14564] usb 10-1: USB disconnect, device number 12 [ 1230.319912][T15264] Bluetooth: MGMT ver 1.23 [ 1231.313077][T15283] sctp: [Deprecated]: syz.8.3138 (pid 15283) Use of int in max_burst socket option. [ 1231.313077][T15283] Use struct sctp_assoc_value instead [ 1231.532551][T15289] loop9: detected capacity change from 0 to 128 [ 1231.648045][T15289] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1231.779930][T15289] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1232.351911][T10891] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1234.000959][T15319] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 1235.518923][T15341] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1235.673647][T15344] loop8: detected capacity change from 0 to 512 [ 1236.064633][T15344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1236.079102][T15344] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1236.511478][ T8859] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.980306][T15366] loop9: detected capacity change from 0 to 32768 [ 1238.993179][T15366] btrfs: Deprecated parameter 'usebackuproot' [ 1238.999549][T15366] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1239.026707][T15366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3171 (15366) [ 1239.053769][T15366] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1239.064661][T15366] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1239.074161][T15366] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 1239.096977][T15366] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 1239.247459][T15366] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 1239.293319][T15366] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 1239.327058][T15366] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 1239.350873][T15366] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 1239.366230][T15366] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 1239.518585][T15366] BTRFS info (device loop9): rebuilding free space tree [ 1239.595436][T15366] BTRFS info (device loop9): setting nodatasum [ 1239.602882][T15366] BTRFS info (device loop9): enabling ssd optimizations [ 1239.612536][T15366] BTRFS info (device loop9): disabling tree log [ 1239.615824][T15397] loop7: detected capacity change from 0 to 512 [ 1239.619056][T15366] BTRFS info (device loop9): enabling free space tree [ 1239.635508][T15366] BTRFS info (device loop9): force clearing of disk cache [ 1239.643136][T15366] BTRFS info (device loop9): doing ref verification [ 1239.649943][T15366] BTRFS info (device loop9): trying to use backup root at mount time [ 1239.904531][T15397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1239.919061][T15397] ext4 filesystem being mounted at /666/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1240.036147][T10891] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1240.451415][ T6499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1241.830244][T15425] netlink: 'syz.5.3192': attribute type 4 has an invalid length. [ 1241.878390][T15425] netlink: 'syz.5.3192': attribute type 4 has an invalid length. [ 1241.984783][T15427] loop9: detected capacity change from 0 to 128 [ 1244.488970][T15451] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 1246.862596][T15467] loop9: detected capacity change from 0 to 40427 [ 1246.882303][T15467] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1246.890328][T15467] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1246.913684][T15467] F2FS-fs (loop9): invalid crc value [ 1247.306889][T15467] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1247.407145][T15467] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1247.418198][T15467] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1249.057091][T15497] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1249.145740][T15499] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1252.520131][T15532] 9pnet: p9_errstr2errno: server reported unknown error @í¬ [ 1254.526316][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3243'. [ 1254.623774][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3243'. [ 1255.389117][T15553] overlayfs: statfs failed on './file0' [ 1256.901891][T15559] loop9: detected capacity change from 0 to 32768 [ 1256.926985][T15559] XFS: noikeep mount option is deprecated. [ 1257.019814][T15559] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1257.200114][T15574] loop7: detected capacity change from 0 to 4096 [ 1257.584461][T15559] XFS (loop9): Ending clean mount [ 1257.610114][T15559] XFS (loop9): Quotacheck needed: Please wait. [ 1257.640711][T15580] loop4: detected capacity change from 0 to 1024 [ 1257.791560][T15559] XFS (loop9): Quotacheck: Done. [ 1257.996490][T15580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1258.629126][T10891] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1258.688002][T10935] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.423754][T15601] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1260.430792][T15601] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1260.440710][T15601] vhci_hcd vhci_hcd.0: Device attached [ 1260.495624][T15604] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1260.502495][T15604] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1260.511065][T15604] vhci_hcd vhci_hcd.0: Device attached [ 1260.556151][T15601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1260.618418][T15604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1260.731334][T14564] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1260.751021][T15607] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1260.797738][T15604] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(15) [ 1260.804667][T15604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1260.815242][T15604] vhci_hcd vhci_hcd.0: Device attached [ 1261.074445][T15605] vhci_hcd: connection closed [ 1261.075233][T15602] vhci_hcd: connection reset by peer [ 1261.086898][T15608] vhci_hcd: connection closed [ 1261.103412][ T9620] vhci_hcd: stop threads [ 1261.115204][ T9620] vhci_hcd: release socket [ 1261.119837][ T9620] vhci_hcd: disconnect device [ 1261.147191][ T9620] vhci_hcd: stop threads [ 1261.151782][ T9620] vhci_hcd: release socket [ 1261.158002][ T9620] vhci_hcd: disconnect device [ 1261.285327][ T9620] vhci_hcd: stop threads [ 1261.289865][ T9620] vhci_hcd: release socket [ 1261.295534][ T9620] vhci_hcd: disconnect device [ 1261.914234][T15611] loop9: detected capacity change from 0 to 32768 [ 1262.050714][ T30] audit: type=1800 audit(1757549410.473:149): pid=15611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3254" name="bus" dev="loop9" ino=7 res=0 errno=0 [ 1262.121206][T15611] ------------[ cut here ]------------ [ 1262.127326][T15611] WARNING: CPU: 0 PID: 15611 at fs/jfs/jfs_dmap.c:2875 dbSplit+0x360/0xe40 [ 1262.138826][T15611] Modules linked in: [ 1262.144192][T15611] CPU: 0 UID: 0 PID: 15611 Comm: syz.9.3254 Tainted: G W syzkaller #0 PREEMPT(none) [ 1262.158763][T15611] Tainted: [W]=WARN [ 1262.163687][T15611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1262.174222][T15611] RIP: 0010:dbSplit+0x360/0xe40 [ 1262.179451][T15611] Code: 78 ff ff ff e9 b1 04 00 00 8b 7d d0 e8 49 75 52 fe 8b 55 c8 44 8b b5 68 ff ff ff 44 39 f2 0f 82 49 ff ff ff e8 c1 b3 af fd 90 <0f> 0b 90 48 8b b5 78 ff ff ff e9 81 04 00 00 45 84 ff 8b 7d ac 0f [ 1262.201881][T15611] RSP: 0018:ffff888075a1abc0 EFLAGS: 00010283 [ 1262.208625][T15611] RAX: ffffffff8445417f RBX: 0000000000002057 RCX: 0000000000080000 [ 1262.217211][T15611] RDX: ffffc90008ce5000 RSI: 0000000000003f75 RDI: 0000000000003f76 [ 1262.225854][T15611] RBP: ffff888075a1ac98 R08: ffffea000000000f R09: 0000000000000001 [ 1262.236680][T15611] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000005 [ 1262.245854][T15611] R13: ffff888051a92c20 R14: 0000000000000155 R15: 0000000000000000 [ 1262.254368][T15611] FS: 00007fc96fbfb6c0(0000) GS:ffff8881aa691000(0000) knlGS:0000000000000000 [ 1262.266706][T15611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1262.274559][T15611] CR2: 000055556063b608 CR3: 00000000a4cf0000 CR4: 00000000003526f0 [ 1262.284545][T15611] Call Trace: [ 1262.288012][T15611] [ 1262.291212][T15611] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1262.298015][T15611] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1262.304281][T15611] dbAllocBits+0x474/0xc40 [ 1262.309043][T15611] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1262.315880][T15611] dbAllocDmap+0x6c/0x1e0 [ 1262.320560][T15611] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1262.326927][T15611] dbAllocNext+0x658/0x740 [ 1262.332147][T15611] dbAlloc+0x782/0x2220 [ 1262.338859][T15611] ? filter_irq_stacks+0x13f/0x190 [ 1262.345220][T15611] ? kmsan_get_metadata+0xfb/0x160 [ 1262.350773][T15611] extAlloc+0x8e1/0x17e0 [ 1262.355615][T15611] jfs_get_block+0x610/0xe30 [ 1262.363824][T15611] __block_write_begin_int+0xa73/0x3030 [ 1262.370002][T15611] ? __pfx_jfs_get_block+0x10/0x10 [ 1262.376773][T15611] block_write_begin+0x10c/0x2c0 [ 1262.382397][T15611] ? __pfx_jfs_get_block+0x10/0x10 [ 1262.389274][T15611] jfs_write_begin+0x58/0xf0 [ 1262.394852][T15611] ? __pfx_jfs_write_begin+0x10/0x10 [ 1262.400530][T15611] generic_perform_write+0x362/0x1050 [ 1262.406607][T15611] __generic_file_write_iter+0x369/0x460 [ 1262.412945][T15611] generic_file_write_iter+0x131/0x980 [ 1262.418805][T15611] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1262.425206][T15611] ? kmsan_get_metadata+0xfb/0x160 [ 1262.430748][T15611] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1262.437238][T15611] ? iter_file_splice_write+0x311/0x2170 [ 1262.445860][T15611] ? kmsan_get_metadata+0xfb/0x160 [ 1262.451674][T15611] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1262.458803][T15611] ? kmsan_get_metadata+0xfb/0x160 [ 1262.467371][T15611] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1262.475006][T15611] ? kmsan_get_metadata+0xfb/0x160 [ 1262.480453][T15611] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1262.488814][T15611] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1262.495873][T15611] iter_file_splice_write+0x12b2/0x2170 [ 1262.501884][T15611] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1262.508345][T15611] direct_splice_actor+0x317/0x7d0 [ 1262.514009][T15611] splice_direct_to_actor+0x99f/0x1550 [ 1262.519789][T15611] ? __pfx_direct_splice_actor+0x10/0x10 [ 1262.526036][T15611] ? splice_folio_into_pipe+0x970/0xa00 [ 1262.532131][T15611] do_splice_direct+0x1e0/0x350 [ 1262.537374][T15611] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1262.546125][T15611] do_sendfile+0x9eb/0x1110 [ 1262.550985][T15611] __se_sys_sendfile64+0x1e3/0x280 [ 1262.557500][T15611] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1262.563931][T15611] __x64_sys_sendfile64+0xbd/0x120 [ 1262.572423][T15611] x64_sys_call+0x36b8/0x3e20 [ 1262.577478][T15611] do_syscall_64+0xd9/0x210 [ 1262.583348][T15611] ? irqentry_exit+0x16/0x60 [ 1262.588297][T15611] ? clear_bhb_loop+0x40/0x90 [ 1262.594890][T15611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.601357][T15611] RIP: 0033:0x7fc96ed8eba9 [ 1262.606767][T15611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1262.627062][T15611] RSP: 002b:00007fc96fbfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1262.636397][T15611] RAX: ffffffffffffffda RBX: 00007fc96efd5fa0 RCX: 00007fc96ed8eba9 [ 1262.647077][T15611] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1262.656475][T15611] RBP: 00007fc96ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1262.665220][T15611] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000000 [ 1262.676592][T15611] R13: 00007fc96efd6038 R14: 00007fc96efd5fa0 R15: 00007fff5515b5a8 [ 1262.686038][T15611] [ 1262.689257][T15611] ---[ end trace 0000000000000000 ]--- [ 1263.281614][T15628] macvlan3: entered promiscuous mode [ 1263.286205][T15629] binder: 15626:15629 ioctl c0306201 200000000080 returned -14 [ 1263.295429][T15628] team_slave_0: entered promiscuous mode [ 1263.301630][T15628] team_slave_1: entered promiscuous mode [ 1263.309347][T15628] team0: entered promiscuous mode [ 1263.321403][T15628] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1263.339740][T15629] binder: 15626:15629 ioctl c0306201 200000000180 returned -22 [ 1263.340717][T15628] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 1263.381928][ T9614] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 1264.317708][T15630] loop4: detected capacity change from 0 to 32768 [ 1264.452850][T15630] JBD2: Ignoring recovery information on journal [ 1264.626015][T15630] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1265.089142][T10935] ocfs2: Unmounting device (7,4) on (node local) [ 1265.864880][T14564] vhci_hcd: vhci_device speed not set [ 1267.628491][T15655] loop7: detected capacity change from 0 to 1024 [ 1267.691458][T15655] EXT4-fs: Ignoring removed bh option [ 1267.813156][T15655] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1267.997912][T15655] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #2: comm syz.7.3282: missing EA_INODE flag [ 1268.072750][T15655] EXT4-fs (loop7): Remounting filesystem read-only [ 1268.079919][T15655] EXT4-fs warning (device loop7): ext4_xattr_block_set:2190: inode #19: comm syz.7.3282: dec ref error=-30 [ 1268.491129][ T6499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.478572][T15674] loop9: detected capacity change from 0 to 32768 [ 1269.665587][T15674] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 1269.665783][T15674] allowing incompatible features above 0.0: (unknown version) [ 1269.665893][T15674] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1269.714564][T15674] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 1269.723221][T15674] bcachefs (loop9): initializing new filesystem [ 1269.745921][T15674] bcachefs (loop9): going read-write [ 1269.784919][T15674] bcachefs (loop9): marking superblocks [ 1269.847527][T15674] bcachefs (loop9): initializing freespace [ 1269.878077][T15674] bcachefs (loop9): done initializing freespace [ 1269.900913][T15674] bcachefs (loop9): reading snapshots table [ 1269.907393][T15674] bcachefs (loop9): reading snapshots done [ 1269.999915][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3294'. [ 1270.058296][T15674] bcachefs (loop9): done starting filesystem [ 1270.090245][T15695] hsr_slave_0: left promiscuous mode [ 1270.147806][T15695] hsr_slave_1: left promiscuous mode [ 1270.684859][T15701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1270.732860][T15700] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1270.901470][T10891] bcachefs (loop9): shutting down [ 1270.907312][T10891] bcachefs (loop9): going read-only [ 1270.913134][T10891] bcachefs (loop9): finished waiting for writes to stop [ 1270.966467][T10891] bcachefs (loop9): flushing journal and stopping allocators, journal seq 3 [ 1271.152938][T10891] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 3 [ 1271.171103][T15707] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3299'. [ 1271.214234][T10891] bcachefs (loop9): clean shutdown complete, journal seq 4 [ 1271.240883][T10891] bcachefs (loop9): marking filesystem clean [ 1271.255358][T15709] netlink: 'syz.8.3300': attribute type 12 has an invalid length. [ 1271.264926][T15709] netlink: 'syz.8.3300': attribute type 29 has an invalid length. [ 1271.275724][T15709] netlink: 'syz.8.3300': attribute type 1 has an invalid length. [ 1271.285159][T15709] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3300'. [ 1271.296451][T15709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.417447][T10891] bcachefs (loop9): shutdown complete [ 1271.810827][T15716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1272.655645][T14564] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1272.864886][T14564] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.877009][T14564] usb 9-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1272.888201][T14564] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.928722][T14564] usb 9-1: config 0 descriptor?? [ 1273.394704][T14564] hid-rmi 0003:17EF:6085.001E: hidraw0: USB HID vff.fe Device [HID 17ef:6085] on usb-dummy_hcd.8-1/input0 [ 1273.581221][T14564] usb 9-1: USB disconnect, device number 13 [ 1274.004541][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.012435][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.349133][T15739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3311'. [ 1276.505232][T15759] tls_set_device_offload_rx: netdev not found [ 1278.003099][T14564] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1278.176624][T14564] usb 8-1: Using ep0 maxpacket: 32 [ 1278.203459][T14564] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.216810][T14564] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.227958][T14564] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1278.239396][T14564] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.343565][T14564] usb 8-1: config 0 descriptor?? [ 1278.395368][T14564] hub 8-1:0.0: USB hub found [ 1278.594999][T14564] hub 8-1:0.0: 1 port detected [ 1279.182252][T15779] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1279.240833][T14564] hub 8-1:0.0: activate --> -90 [ 1279.688467][T14564] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 1279.697474][T14564] usb 8-1-port1: connect-debounce failed [ 1279.714463][T10894] usb 8-1: USB disconnect, device number 21 [ 1279.991553][T15783] netlink: 'syz.8.3328': attribute type 10 has an invalid length. [ 1280.003254][T15783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.030063][T15783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.038058][T15783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.047167][T15782] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1280.047265][T15783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.047774][T15783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.063804][T15782] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1280.090102][T15783] bridge0: entered promiscuous mode [ 1280.105824][T15783] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1280.149069][ T9632] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 1280.191923][T15782] overlayfs: overlapping lowerdir path [ 1280.964513][T15793] input: syz1 as /devices/virtual/input/input38 [ 1281.600129][T15802] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1281.615637][T15802] bond0: (slave lo): Error: Device can not be enslaved while up [ 1283.385513][T15817] loop9: detected capacity change from 0 to 32768 [ 1283.399398][T15817] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3344 (15817) [ 1283.421364][T15817] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1283.435769][T15817] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1283.657064][T15817] BTRFS info (device loop9): rebuilding free space tree [ 1283.703355][T15817] BTRFS info (device loop9): disabling free space tree [ 1283.710800][T15817] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1283.721795][T15817] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1283.754621][T15817] BTRFS info (device loop9): enabling ssd optimizations [ 1283.761871][T15817] BTRFS info (device loop9): force clearing of disk cache [ 1283.772739][T15817] BTRFS info (device loop9): enabling auto defrag [ 1283.779438][T15817] BTRFS info (device loop9): doing ref verification [ 1284.019541][T10891] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1285.050676][T15860] input: syz1 as /devices/virtual/input/input39 [ 1285.416416][T15863] loop8: detected capacity change from 0 to 2048 [ 1285.529302][T15863] NILFS (loop8): invalid segment: Magic number mismatch [ 1285.537363][T15863] NILFS (loop8): trying rollback from an earlier position [ 1285.608636][T15863] NILFS (loop8): recovery complete [ 1285.641659][T15867] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1286.214400][T15876] syzkaller1: entered promiscuous mode [ 1286.221566][T15876] syzkaller1: entered allmulticast mode [ 1286.313797][T10894] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1286.538022][T10894] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 1286.547509][T10894] usb 10-1: config 1 has no interface number 0 [ 1286.555392][T10894] usb 10-1: config 1 interface 105 has no altsetting 0 [ 1286.600570][T10894] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1286.612666][T10894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.621577][T10894] usb 10-1: Product: syz [ 1286.627086][T10894] usb 10-1: Manufacturer: syz [ 1286.634138][T10894] usb 10-1: SerialNumber: syz [ 1286.635391][T15882] netlink: 'syz.8.3363': attribute type 1 has an invalid length. [ 1286.833938][T15882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1286.929372][T15884] bond1: (slave geneve2): making interface the new active one [ 1286.952884][T15884] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1287.095909][ T49] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 1288.025406][T10894] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1288.061606][T10894] aqc111 10-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 1288.164226][T10894] usb 10-1: USB disconnect, device number 13 [ 1288.175422][T10894] aqc111 10-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1288.350928][T10894] aqc111 10-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1288.361385][T10894] aqc111 10-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1288.366883][T15905] loop4: detected capacity change from 0 to 64 [ 1288.374072][T10894] aqc111 10-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1288.421090][T15907] 9pnet_fd: Insufficient options for proto=fd [ 1288.558730][T15905] Trying to free block not in datazone [ 1291.346133][T15938] overlayfs: failed to clone upperpath [ 1291.925170][T15946] netlink: 'syz.7.3390': attribute type 39 has an invalid length. [ 1292.291085][T15954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1292.298924][T15954] IPv6: NLM_F_CREATE should be set when creating new route [ 1292.359347][T15956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1293.779767][T15964] loop7: detected capacity change from 0 to 32768 [ 1293.841269][T15964] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1294.032509][T10894] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1294.186493][T10894] usb 9-1: device descriptor read/64, error -71 [ 1294.206448][T15982] loop9: detected capacity change from 0 to 512 [ 1294.217968][T15982] EXT4-fs: Ignoring removed orlov option [ 1294.226830][T15982] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1294.269564][T15982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1294.288916][T15982] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.3400: corrupted in-inode xattr: e_value size too large [ 1294.306801][T15982] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3400: couldn't read orphan inode 15 (err -117) [ 1294.324410][T15982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1294.345516][T15964] XFS (loop7): Ending clean mount [ 1294.359297][T15964] XFS (loop7): Quotacheck needed: Please wait. [ 1294.383656][T15982] EXT4-fs warning (device loop9): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 1294.452334][T10894] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1294.521168][T15964] XFS (loop7): Quotacheck: Done. [ 1294.576450][T10891] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.724420][T10894] usb 9-1: device descriptor read/64, error -71 [ 1294.752984][ T6499] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1294.834719][T10894] usb usb9-port1: attempt power cycle [ 1295.222429][T10894] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1295.295110][T10894] usb 9-1: device descriptor read/8, error -71 [ 1295.996033][T10894] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1296.264331][T10894] usb 9-1: device descriptor read/8, error -71 [ 1296.422849][T10894] usb usb9-port1: unable to enumerate USB device [ 1296.624237][T15996] loop9: detected capacity change from 0 to 32768 [ 1296.845027][T15996] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 1296.846821][T15996] allowing incompatible features above 0.0: (unknown version) [ 1296.846928][T15996] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1296.892229][T15996] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 1296.900693][T15996] bcachefs (loop9): initializing new filesystem [ 1296.923682][T15996] bcachefs (loop9): going read-write [ 1296.954134][T15996] bcachefs (loop9): marking superblocks [ 1297.014723][T15996] bcachefs (loop9): initializing freespace [ 1297.045005][T15996] bcachefs (loop9): done initializing freespace [ 1297.068738][T15996] bcachefs (loop9): reading snapshots table [ 1297.076816][T15996] bcachefs (loop9): reading snapshots done [ 1297.185068][T15996] bcachefs (loop9): done starting filesystem [ 1297.441300][T10891] bcachefs (loop9): shutting down [ 1297.447023][T10891] bcachefs (loop9): going read-only [ 1297.454468][T10891] bcachefs (loop9): finished waiting for writes to stop [ 1297.570821][T10891] bcachefs (loop9): flushing journal and stopping allocators, journal seq 3 [ 1298.756593][T16014] loop7: detected capacity change from 0 to 40427 [ 1298.785125][T16014] F2FS-fs (loop7): invalid crc value [ 1298.890477][T10891] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 4 [ 1298.966634][T10891] bcachefs (loop9): clean shutdown complete, journal seq 5 [ 1299.026311][T10891] bcachefs (loop9): marking filesystem clean [ 1299.149710][T16014] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1299.161015][T16014] F2FS-fs (loop7): Start checkpoint disabled! [ 1299.194678][T16014] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1299.267998][T16014] syz.7.3405: attempt to access beyond end of device [ 1299.267998][T16014] loop7: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 1299.299048][ T30] audit: type=1800 audit(1757549447.673:150): pid=16014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3405" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 1299.371064][T10891] bcachefs (loop9): shutdown complete [ 1299.448243][ T9632] kworker/u8:19: attempt to access beyond end of device [ 1299.448243][ T9632] loop7: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 1299.464457][ T9632] CPU: 0 UID: 0 PID: 9632 Comm: kworker/u8:19 Tainted: G W syzkaller #0 PREEMPT(none) [ 1299.464677][ T9632] Tainted: [W]=WARN [ 1299.464739][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1299.464872][ T9632] Workqueue: writeback wb_workfn (flush-7:7) [ 1299.465136][ T9632] Call Trace: [ 1299.465197][ T9632] [ 1299.465262][ T9632] __dump_stack+0x26/0x30 [ 1299.465458][ T9632] dump_stack_lvl+0x1df/0x270 [ 1299.465680][ T9632] dump_stack+0x1e/0x25 [ 1299.465868][ T9632] f2fs_handle_critical_error+0xa6f/0xc20 [ 1299.466145][ T9632] f2fs_stop_checkpoint+0x65/0x80 [ 1299.466383][ T9632] f2fs_write_end_io+0x101c/0x1bc0 [ 1299.466601][ T9632] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1299.466777][ T9632] bio_endio+0xeb4/0x1010 [ 1299.466964][ T9632] submit_bio_noacct+0x213/0x2750 [ 1299.467220][ T9632] submit_bio+0x57c/0x630 [ 1299.467421][ T9632] f2fs_submit_write_bio+0x92/0x250 [ 1299.467659][ T9632] __submit_merged_bio+0x16f/0x6a0 [ 1299.467876][ T9632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1299.468089][ T9632] __submit_merged_write_cond+0x458/0x9a0 [ 1299.468338][ T9632] f2fs_write_data_pages+0x4bb2/0x5480 [ 1299.468651][ T9632] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1299.468826][ T9632] ? kmsan_get_metadata+0xfb/0x160 [ 1299.469012][ T9632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1299.469219][ T9632] ? min_vruntime_cb_rotate+0x256/0x560 [ 1299.469424][ T9632] ? __rb_insert_augmented+0xd12/0x11b0 [ 1299.469661][ T9632] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 1299.469847][ T9632] ? kmsan_get_metadata+0xfb/0x160 [ 1299.470038][ T9632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1299.470233][ T9632] ? kmsan_get_metadata+0xfb/0x160 [ 1299.470423][ T9632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1299.470626][ T9632] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1299.470864][ T9632] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1299.471099][ T9632] do_writepages+0x3f2/0x860 [ 1299.471265][ T9632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1299.471471][ T9632] ? queue_io+0x751/0x790 [ 1299.471631][ T9632] ? kmsan_get_metadata+0xfb/0x160 [ 1299.471853][ T9632] __writeback_single_inode+0x101/0x1190 [ 1299.472042][ T9632] ? kmsan_get_metadata+0xfb/0x160 [ 1299.472270][ T9632] writeback_sb_inodes+0xac1/0x1cb0 [ 1299.472541][ T9632] ? kmsan_get_metadata+0xfb/0x160 [ 1299.472788][ T9632] wb_writeback+0x4ce/0xc00 [ 1299.472977][ T9632] ? queue_io+0x451/0x790 [ 1299.473149][ T9632] wb_workfn+0x397/0x1910 [ 1299.473381][ T9632] ? kmsan_get_metadata+0xfb/0x160 [ 1299.473597][ T9632] ? __pfx_wb_workfn+0x10/0x10 [ 1299.473815][ T9632] process_scheduled_works+0xb8e/0x1d80 [ 1299.474114][ T9632] worker_thread+0xedf/0x1590 [ 1299.474372][ T9632] kthread+0xd59/0xf00 [ 1299.474528][ T9632] ? __pfx_worker_thread+0x10/0x10 [ 1299.474771][ T9632] ? __pfx_kthread+0x10/0x10 [ 1299.474942][ T9632] ret_from_fork+0x1e3/0x310 [ 1299.475104][ T9632] ? __pfx_kthread+0x10/0x10 [ 1299.475272][ T9632] ret_from_fork_asm+0x1a/0x30 [ 1299.475510][ T9632] [ 1299.783502][ T9632] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1300.462605][T10894] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1300.683752][T10894] usb 9-1: Using ep0 maxpacket: 8 [ 1300.905106][T10894] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1300.948617][T10894] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1300.956851][T10894] usb 9-1: can't read configurations, error -71 [ 1302.817577][T16044] loop4: detected capacity change from 0 to 40427 [ 1302.829735][T16044] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1302.839658][T16044] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1302.850992][T16044] F2FS-fs (loop4): invalid crc value [ 1303.226058][T16044] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1303.253573][T16044] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1303.260893][T16044] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1305.533419][T16058] loop8: detected capacity change from 0 to 32768 [ 1305.724188][ T30] audit: type=1800 audit(1757549454.143:151): pid=16058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3428" name="bus" dev="loop8" ino=7 res=0 errno=0 [ 1307.162965][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3435'. [ 1308.305723][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3441'. [ 1310.511327][T16103] syz.8.3447 (16103): drop_caches: 2 [ 1311.149661][T16119] loop8: detected capacity change from 0 to 128 [ 1311.769072][ T30] audit: type=1326 audit(1757549460.173:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16112 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86c78eba9 code=0x7fc00000 [ 1312.198640][T16127] loop7: detected capacity change from 0 to 4096 [ 1312.985732][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3464'. [ 1313.302583][T12831] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1313.532287][T12831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.544823][T12831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.555464][T12831] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1313.565832][T12831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.713741][T12831] usb 5-1: config 0 descriptor?? [ 1314.199468][T12831] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1314.209878][T12831] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1314.218430][T12831] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1314.225688][T12831] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 1314.232889][T12831] pyra 0003:1E7D:2CF6.001F: item fetching failed at offset 6/7 [ 1314.363598][T16164] netlink: 'syz.5.3472': attribute type 16 has an invalid length. [ 1314.372245][T16164] netlink: 'syz.5.3472': attribute type 17 has an invalid length. [ 1314.511248][T12831] pyra 0003:1E7D:2CF6.001F: parse failed [ 1314.517751][T12831] pyra 0003:1E7D:2CF6.001F: probe with driver pyra failed with error -22 [ 1314.600860][T12831] usb 5-1: USB disconnect, device number 11 [ 1314.862140][T16164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.870859][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.162758][T16164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1315.198084][T16164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1316.006681][ T9616] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.140338][ T9632] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.204454][ T9632] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.279786][ T9632] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.764307][T16178] loop4: detected capacity change from 0 to 32768 [ 1316.776744][T16178] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3476 (16178) [ 1316.801464][T16178] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1316.815931][T16178] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 1316.987142][T16200] netlink: 752 bytes leftover after parsing attributes in process `syz.7.3477'. [ 1317.046384][T16178] BTRFS info (device loop4): rebuilding free space tree [ 1317.087523][T16178] BTRFS info (device loop4): disabling free space tree [ 1317.095277][T16178] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1317.105594][T16178] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1317.138969][T16178] BTRFS info (device loop4): enabling ssd optimizations [ 1317.146398][T16178] BTRFS info (device loop4): force clearing of disk cache [ 1317.153987][T16178] BTRFS info (device loop4): enabling auto defrag [ 1317.160763][T16178] BTRFS info (device loop4): doing ref verification [ 1317.224459][ T30] audit: type=1800 audit(1757549465.633:153): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3476" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1317.360754][ T30] audit: type=1804 audit(1757549465.683:154): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3476" name="/newroot/325/bus/file1" dev="loop4" ino=260 res=1 errno=0 [ 1317.499986][T10935] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1319.653168][T12831] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1319.870453][T12831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.882851][T12831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.894207][T12831] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1319.904149][T12831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.024254][T12831] usb 8-1: config 0 descriptor?? [ 1320.442918][T14564] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1320.575017][T12831] cm6533_jd 0003:0D8C:0022.0020: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 1320.653636][T14564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1320.665402][T14564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1320.675776][T14564] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1320.686175][T14564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.934049][T14564] usb 5-1: config 0 descriptor?? [ 1321.445409][T10894] usb 8-1: USB disconnect, device number 22 [ 1321.474594][T16260] netlink: 'syz.8.3503': attribute type 10 has an invalid length. [ 1321.507598][T16260] dummy0: entered promiscuous mode [ 1321.518012][T16260] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1321.565611][ T9624] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 1321.644788][T14564] isku 0003:1E7D:319C.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 1322.030440][T10894] usb 5-1: USB disconnect, device number 12 [ 1322.077394][T16267] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1323.391288][T16277] loop8: detected capacity change from 0 to 32768 [ 1323.621550][T16277] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 1323.621756][T16277] allowing incompatible features above 0.0: (unknown version) [ 1323.621865][T16277] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1323.672062][T16277] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 1323.682575][T16277] bcachefs (loop8): initializing new filesystem [ 1323.706922][T16277] bcachefs (loop8): going read-write [ 1323.741302][T16277] bcachefs (loop8): marking superblocks [ 1323.805462][T16277] bcachefs (loop8): initializing freespace [ 1323.838317][T16277] bcachefs (loop8): done initializing freespace [ 1323.860638][T16277] bcachefs (loop8): reading snapshots table [ 1323.867309][T16277] bcachefs (loop8): reading snapshots done [ 1324.031631][T16277] bcachefs (loop8): done starting filesystem [ 1324.263808][ T8859] bcachefs (loop8): shutting down [ 1324.269416][ T8859] bcachefs (loop8): going read-only [ 1324.274980][ T8859] bcachefs (loop8): finished waiting for writes to stop [ 1324.315590][ T8859] bcachefs (loop8): flushing journal and stopping allocators, journal seq 3 [ 1324.599170][ T8859] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3 [ 1324.657493][ T8859] bcachefs (loop8): clean shutdown complete, journal seq 4 [ 1324.689156][ T8859] bcachefs (loop8): marking filesystem clean [ 1324.790085][ T8859] bcachefs (loop8): shutdown complete [ 1327.745898][T16321] loop4: detected capacity change from 0 to 32768 [ 1327.952329][T16321] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1328.345682][T10935] ocfs2: Unmounting device (7,4) on (node local) [ 1328.755444][T16330] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1328.771597][T16330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.782195][T16330] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1329.897909][T16331] loop9: detected capacity change from 0 to 40427 [ 1329.941000][T16331] F2FS-fs (loop9): build fault injection rate: 14 [ 1329.950066][T16331] F2FS-fs (loop9): build fault injection type: 0x3bfe8c [ 1329.983872][T16331] F2FS-fs (loop9): invalid crc value [ 1330.223380][ C1] F2FS-fs (loop9): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 1330.280450][ C1] F2FS-fs (loop9): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 1330.619312][T16331] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1330.628687][T16331] F2FS-fs (loop9): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 1330.799554][T16331] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1333.131256][T16305] Set syz1 is full, maxelem 65536 reached [ 1335.444414][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.452515][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1337.055915][T12831] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1337.258720][T12831] usb 10-1: Using ep0 maxpacket: 32 [ 1337.332956][T12831] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1337.342903][T12831] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.351556][T12831] usb 10-1: Product: syz [ 1337.356159][T12831] usb 10-1: Manufacturer: syz [ 1337.361095][T12831] usb 10-1: SerialNumber: syz [ 1337.486647][T12831] usb 10-1: config 0 descriptor?? [ 1337.946574][T12831] airspy 10-1:0.0: Board ID: 00 [ 1337.952159][T12831] airspy 10-1:0.0: Firmware version: [ 1339.858715][T16375] loop7: detected capacity change from 0 to 40427 [ 1339.870250][T12831] airspy 10-1:0.0: usb_control_msg() failed -71 request 0f [ 1339.883074][T12831] airspy 10-1:0.0: Registered as swradio24 [ 1339.889232][T12831] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1339.906602][T12831] usb 10-1: USB disconnect, device number 14 [ 1340.410358][T16375] F2FS-fs (loop7): build fault injection rate: 14 [ 1340.422500][T16375] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 1340.522185][T16375] F2FS-fs (loop7): invalid crc value [ 1340.549076][ C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 1340.577641][ C0] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 1340.887117][T16375] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1340.896610][T16375] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 1340.923447][T16375] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1340.971415][T16375] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 1341.309590][T16375] F2FS-fs (loop7): inject inconsistent footer in sanity_check_node_footer of f2fs_get_inode_folio+0x40/0x50 [ 1341.322766][T16375] F2FS-fs (loop7): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 1343.580975][ T6499] syz-executor: attempt to access beyond end of device [ 1343.580975][ T6499] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1343.598295][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(none) [ 1343.598506][ T6499] Tainted: [W]=WARN [ 1343.598571][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1343.598670][ T6499] Call Trace: [ 1343.598735][ T6499] [ 1343.598798][ T6499] __dump_stack+0x26/0x30 [ 1343.599012][ T6499] dump_stack_lvl+0x1df/0x270 [ 1343.599224][ T6499] dump_stack+0x1e/0x25 [ 1343.599410][ T6499] f2fs_handle_critical_error+0xa6f/0xc20 [ 1343.599692][ T6499] f2fs_stop_checkpoint+0x65/0x80 [ 1343.599940][ T6499] f2fs_write_end_io+0x101c/0x1bc0 [ 1343.600165][ T6499] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1343.600334][ T6499] bio_endio+0xeb4/0x1010 [ 1343.600532][ T6499] submit_bio_noacct+0x213/0x2750 [ 1343.600798][ T6499] submit_bio+0x57c/0x630 [ 1343.601009][ T6499] f2fs_submit_write_bio+0x92/0x250 [ 1343.601237][ T6499] __submit_merged_bio+0x16f/0x6a0 [ 1343.601460][ T6499] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1343.601675][ T6499] __submit_merged_write_cond+0x458/0x9a0 [ 1343.601938][ T6499] f2fs_write_data_pages+0x4bb2/0x5480 [ 1343.602197][ T6499] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1343.602442][ T6499] ? kmsan_get_metadata+0xfb/0x160 [ 1343.602633][ T6499] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1343.602844][ T6499] ? free_unref_folios+0x29ad/0x2a20 [ 1343.603012][ T6499] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1343.603257][ T6499] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1343.603445][ T6499] ? kmsan_get_metadata+0xfb/0x160 [ 1343.603633][ T6499] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1343.603831][ T6499] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1343.604080][ T6499] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1343.604318][ T6499] do_writepages+0x3f2/0x860 [ 1343.604497][ T6499] ? _raw_spin_unlock+0x30/0x50 [ 1343.604692][ T6499] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1343.604963][ T6499] filemap_fdatawrite+0x207/0x260 [ 1343.605259][ T6499] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1343.605484][ T6499] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1343.605830][ T6499] kill_f2fs_super+0x2ff/0x970 [ 1343.606043][ T6499] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1343.606227][ T6499] deactivate_locked_super+0xc8/0x3c0 [ 1343.606436][ T6499] deactivate_super+0x12f/0x140 [ 1343.606618][ T6499] cleanup_mnt+0x6fb/0x780 [ 1343.606836][ T6499] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1343.607043][ T6499] ? __pfx___cleanup_mnt+0x10/0x10 [ 1343.607265][ T6499] __cleanup_mnt+0x22/0x30 [ 1343.607480][ T6499] task_work_run+0x206/0x2b0 [ 1343.607682][ T6499] exit_to_user_mode_loop+0x2a6/0x330 [ 1343.607882][ T6499] do_syscall_64+0x1e3/0x210 [ 1343.608045][ T6499] ? irqentry_exit+0x16/0x60 [ 1343.608252][ T6499] ? clear_bhb_loop+0x40/0x90 [ 1343.608430][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.608609][ T6499] RIP: 0033:0x7f6a7d18fed7 [ 1343.608765][ T6499] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1343.608913][ T6499] RSP: 002b:00007fff068185c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1343.609080][ T6499] RAX: 0000000000000000 RBX: 00007f6a7d211c05 RCX: 00007f6a7d18fed7 [ 1343.609195][ T6499] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff06818680 [ 1343.609302][ T6499] RBP: 00007fff06818680 R08: 0000000000000000 R09: 0000000000000000 [ 1343.609408][ T6499] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff06819710 [ 1343.609520][ T6499] R13: 00007f6a7d211c05 R14: 00000000001480b9 R15: 00007fff06819750 [ 1343.609676][ T6499] [ 1343.961490][ T6499] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1344.443444][T16389] loop4: detected capacity change from 0 to 32768 [ 1344.453037][T16389] BTRFS warning: excessive commit interval 1024, use with care [ 1344.466976][T16389] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3551 (16389) [ 1344.560067][T16389] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1344.572159][T16389] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 1344.926902][T16405] overlayfs: failed to clone lowerpath [ 1344.950893][T16405] overlayfs: failed to clone lowerpath [ 1345.057890][ T9781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1345.070079][ T9781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1345.095686][ T9781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1345.140779][ T9781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1345.161561][T16389] BTRFS info (device loop4): rebuilding free space tree [ 1345.176645][ T9781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1345.221493][T16389] BTRFS info (device loop4): disabling free space tree [ 1345.229044][T16389] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1345.239801][T16389] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1345.304262][T16389] BTRFS info (device loop4): enabling ssd optimizations [ 1345.312993][T16389] BTRFS info (device loop4): force clearing of disk cache [ 1345.320348][T16389] BTRFS info (device loop4): doing ref verification [ 1345.476781][ T9632] netdevsim netdevsim8  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.521168][T10935] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1345.688606][ T9632] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.856552][T12831] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1345.877083][ T9632] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.057244][T16415] netlink: 'syz.5.3555': attribute type 6 has an invalid length. [ 1346.174504][ T9632] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.785086][T12831] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1346.795425][T12831] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1346.805649][T12831] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1346.806492][ T9632] bridge_slave_1: left allmulticast mode [ 1346.827463][ T9632] bridge_slave_1: left promiscuous mode [ 1346.834701][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.886189][T12831] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1346.895928][T12831] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1346.904537][T12831] usb 10-1: Product: syz [ 1346.909018][T12831] usb 10-1: Manufacturer: syz [ 1346.914328][T12831] usb 10-1: SerialNumber: syz [ 1347.033260][ T9632] bridge_slave_0: left allmulticast mode [ 1347.039178][ T9632] bridge_slave_0: left promiscuous mode [ 1347.046480][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.204517][T12831] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1347.393731][ T9781] Bluetooth: hci5: command tx timeout [ 1347.414644][T12831] usb 10-1: USB disconnect, device number 15 [ 1347.439636][T12831] usblp0: removed [ 1347.794820][ T9632] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1347.863285][ T9632] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1347.968341][ T9632] bond0 (unregistering): left promiscuous mode [ 1347.974897][ T9632] bond_slave_0: left promiscuous mode [ 1347.982141][ T9632] bond_slave_1: left promiscuous mode [ 1347.989685][ T9632] dummy0: left promiscuous mode [ 1348.167662][ T9632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.214130][ T9632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.253505][ T9632] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 1348.285465][ T9632] team0: left promiscuous mode [ 1348.307597][ T9632] team_slave_0: left promiscuous mode [ 1348.313396][ T9632] team_slave_1: left promiscuous mode [ 1348.354604][ T9632] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1348.388350][ T9632] bond0 (unregistering): Released all slaves [ 1348.416439][ T9632] bond1 (unregistering): Released all slaves [ 1348.538721][T16433] loop7: detected capacity change from 0 to 8 [ 1348.713200][T16433] cramfs: wrong magic [ 1349.447924][T16404] chnl_net:caif_netlink_parms(): no params data found [ 1349.492530][ T9781] Bluetooth: hci5: command tx timeout [ 1349.913803][ T24] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1349.996372][ T9632] hsr_slave_0: left promiscuous mode [ 1350.022846][ T9632] hsr_slave_1: left promiscuous mode [ 1350.031272][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.040589][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.097586][ T9632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1350.105557][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.113597][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1350.150595][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.162378][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.172657][ T24] usb 8-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1350.182248][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.208633][ T9632] veth1_macvtap: left promiscuous mode [ 1350.214795][ T9632] veth0_macvtap: left promiscuous mode [ 1350.220782][ T9632] veth1_vlan: left promiscuous mode [ 1350.227514][ T9632] veth0_vlan: left promiscuous mode [ 1350.266846][ T24] usb 8-1: config 0 descriptor?? [ 1350.743178][ T24] bigben 0003:146B:0902.0022: unexpected rdesc, please submit for review [ 1350.817504][ T24] bigben 0003:146B:0902.0022: ignoring exceeding usage max [ 1350.958564][ T24] bigben 0003:146B:0902.0022: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.7-1/input0 [ 1350.970669][ T24] bigben 0003:146B:0902.0022: missing HID_OUTPUT_REPORT 0 [ 1350.978253][ T24] bigben 0003:146B:0902.0022: no output report found [ 1351.067611][ T24] usb 8-1: USB disconnect, device number 23 [ 1351.344961][ T9632] team0 (unregistering): Port device team_slave_1 removed [ 1351.416493][ T9632] team0 (unregistering): Port device team_slave_0 removed [ 1351.436719][ T9614] smc: removing ib device syz! [ 1351.623339][ T49] Bluetooth: hci5: command tx timeout [ 1353.449506][T16467] loop9: detected capacity change from 0 to 1024 [ 1353.633759][ T49] Bluetooth: hci5: command tx timeout [ 1353.685974][T16467] EXT4-fs: Ignoring removed nobh option [ 1354.024883][T16467] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1354.806759][T16467] EXT4-fs warning (device loop9): ext4_rename_delete:3731: inode #12: comm syz.9.3572: Deleting old file: nlink 2, error=-2 [ 1355.850229][T10891] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.125246][T16404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.139541][T16404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.148912][T16404] bridge_slave_0: entered allmulticast mode [ 1356.159289][T16404] bridge_slave_0: entered promiscuous mode [ 1356.325602][T16404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.333482][T16404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.343847][T16404] bridge_slave_1: entered allmulticast mode [ 1356.354111][T16404] bridge_slave_1: entered promiscuous mode [ 1356.999055][T16404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.120930][T16404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.158708][T16500] netlink: 'syz.4.3582': attribute type 2 has an invalid length. [ 1357.168894][T16500] netlink: 'syz.4.3582': attribute type 1 has an invalid length. [ 1357.176954][T16500] netlink: 'syz.4.3582': attribute type 8 has an invalid length. [ 1357.186233][T16500] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3582'. [ 1357.659901][T16404] team0: Port device team_slave_0 added [ 1357.745407][ T30] audit: type=1326 audit(1757549506.153:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16502 comm="syz.5.3584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa185b8eba9 code=0x0 [ 1357.754539][T16404] team0: Port device team_slave_1 added [ 1358.160425][T16404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.167941][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.196657][T16404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1358.222322][ T24] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1358.278263][T16404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.287882][T16404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.315369][T16404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1358.435190][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1358.474892][ T24] usb 10-1: config 0 has an invalid interface number: 20 but max is 0 [ 1358.483846][ T24] usb 10-1: config 0 has no interface number 0 [ 1358.607061][ T24] usb 10-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65 [ 1358.617573][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.626521][ T24] usb 10-1: Product: syz [ 1358.631025][ T24] usb 10-1: Manufacturer: syz [ 1358.636120][ T24] usb 10-1: SerialNumber: syz [ 1358.785335][ T24] usb 10-1: config 0 descriptor?? [ 1358.830581][T16404] hsr_slave_0: entered promiscuous mode [ 1358.841654][T16404] hsr_slave_1: entered promiscuous mode [ 1359.310983][ T24] kaweth 10-1:0.20: Firmware present in device. [ 1359.504176][ T24] kaweth 10-1:0.20: Statistics collection: 0 [ 1359.510520][ T24] kaweth 10-1:0.20: Multicast filter limit: 0 [ 1359.518885][ T24] kaweth 10-1:0.20: MTU: 0 [ 1359.524021][ T24] kaweth 10-1:0.20: Read MAC address 00:00:00:00:00:00 [ 1360.115917][ T24] kaweth 10-1:0.20: Error setting receive filter [ 1360.123746][ T24] kaweth 10-1:0.20: probe with driver kaweth failed with error -5 [ 1360.208579][ T24] usb 10-1: USB disconnect, device number 16 [ 1361.901754][T16404] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1361.994749][T16404] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1362.111197][T16404] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1362.210756][T16404] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1362.307771][T16536] loop7: detected capacity change from 0 to 128 [ 1362.350867][T16540] loop4: detected capacity change from 0 to 256 [ 1362.395246][T16536] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1362.398437][T16540] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1362.536088][T16540] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1362.721367][T16536] FAT-fs (loop7): FAT read failed (blocknr 128) [ 1362.923514][T16545] loop9: detected capacity change from 0 to 64 [ 1362.974630][T16545] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing [ 1363.880099][T16404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1364.126472][T16404] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.246610][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.254551][ T9632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.378520][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.386344][ T9632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.257599][T16567] sctp: [Deprecated]: syz.9.3610 (pid 16567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1365.257599][T16567] Use struct sctp_sack_info instead [ 1367.158792][T16404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.859846][T16404] veth0_vlan: entered promiscuous mode [ 1368.003813][T16404] veth1_vlan: entered promiscuous mode [ 1368.420788][T16404] veth0_macvtap: entered promiscuous mode [ 1368.514445][T16404] veth1_macvtap: entered promiscuous mode [ 1368.845575][T16404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.976798][T16404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.994037][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3630'. [ 1369.010598][T16612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.059085][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3630'. [ 1369.123050][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.181099][ T24] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1369.193765][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.244544][T14683] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.254291][T16615] loop9: detected capacity change from 0 to 1024 [ 1369.309933][T14683] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.372871][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1369.408200][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1369.420336][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1369.443234][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1369.453361][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.461612][ T24] usb 8-1: Product: syz [ 1369.466256][ T24] usb 8-1: Manufacturer: syz [ 1369.472596][ T24] usb 8-1: SerialNumber: syz [ 1369.485867][ T24] usb 8-1: config 0 descriptor?? [ 1369.531781][ T24] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1369.541726][ T24] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1369.843877][T14683] hfsplus: b-tree write err: -5, ino 4 [ 1370.121476][ T24] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1370.163726][ T24] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1370.378919][ T24] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 1370.386648][ T24] em28xx 8-1:0.0: No AC97 audio processor [ 1370.473314][ T24] usb 8-1: USB disconnect, device number 24 [ 1370.481422][ T24] em28xx 8-1:0.0: Disconnecting em28xx [ 1370.563658][ T24] em28xx 8-1:0.0: Freeing device [ 1370.957504][T16632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3637'. [ 1374.764260][T16690] netlink: 31 bytes leftover after parsing attributes in process `syz.5.3659'. [ 1375.293535][T16623] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1375.492437][T16623] usb 10-1: Using ep0 maxpacket: 32 [ 1375.549697][T16623] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.563149][T16623] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1375.573770][T16623] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1375.583417][T16623] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.699104][T16623] usb 10-1: config 0 descriptor?? [ 1375.747635][T16623] hub 10-1:0.0: USB hub found [ 1375.975743][T16623] hub 10-1:0.0: 1 port detected [ 1376.463896][T16623] usb 10-1: USB disconnect, device number 17 [ 1377.859217][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.867450][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.234488][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.243103][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.731455][ T30] audit: type=1326 audit(1757549527.143:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa185b8eba9 code=0x7ffc0000 [ 1378.755051][ T30] audit: type=1326 audit(1757549527.143:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa185b8eba9 code=0x7ffc0000 [ 1378.858266][ T30] audit: type=1326 audit(1757549527.223:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa185b8eba9 code=0x7ffc0000 [ 1378.883589][ T30] audit: type=1326 audit(1757549527.223:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa185b8eba9 code=0x7ffc0000 [ 1378.907768][ T30] audit: type=1326 audit(1757549527.223:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa185b8eba9 code=0x7ffc0000 [ 1378.936053][ T30] audit: type=1326 audit(1757549527.283:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa185b8eba9 code=0x7ffc0000 [ 1378.962170][ T30] audit: type=1326 audit(1757549527.283:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa185b8eba9 code=0x7ffc0000 [ 1378.986766][ T30] audit: type=1326 audit(1757549527.283:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa185b8eba9 code=0x7ffc0000 [ 1379.010187][ T30] audit: type=1326 audit(1757549527.283:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa185b8eba9 code=0x7ffc0000 [ 1379.033154][ T30] audit: type=1326 audit(1757549527.313:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16731 comm="syz.5.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa185b8eba9 code=0x7ffc0000 [ 1379.078108][T16738] loop9: detected capacity change from 0 to 512 [ 1379.119919][T16738] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1379.229843][T16738] EXT4-fs (loop9): 1 truncate cleaned up [ 1379.238779][T16738] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.385146][T16738] EXT4-fs error (device loop9): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.9.3677: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1379.444204][T16738] EXT4-fs error (device loop9) in ext4_delete_entry:2739: Corrupt filesystem [ 1379.501745][T16738] EXT4-fs warning (device loop9): ext4_rename_delete:3731: inode #2: comm syz.9.3677: Deleting old file: nlink 5, error=-117 [ 1379.938936][T10891] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.163254][T10894] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1380.333020][T10894] usb 5-1: Using ep0 maxpacket: 32 [ 1380.366656][T14564] libceph: connect (1)[c::]:6789 error -22 [ 1380.373735][T14564] libceph: mon0 (1)[c::]:6789 connect error [ 1380.395594][T10894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.408893][T10894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.420002][T10894] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1380.429832][T10894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.462574][T14564] libceph: connect (1)[c::]:6789 error -22 [ 1380.468991][T14564] libceph: mon0 (1)[c::]:6789 connect error [ 1380.485180][T10894] usb 5-1: config 0 descriptor?? [ 1380.694684][T14564] libceph: connect (1)[c::]:6789 error -22 [ 1380.701457][T14564] libceph: mon0 (1)[c::]:6789 connect error [ 1380.745341][T14564] libceph: connect (1)[c::]:6789 error -22 [ 1380.752419][T14564] libceph: mon0 (1)[c::]:6789 connect error [ 1381.039690][T10894] savu 0003:1E7D:2D5A.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1381.095821][T16758] ceph: No mds server is up or the cluster is laggy [ 1381.102113][T16753] ceph: No mds server is up or the cluster is laggy [ 1381.303114][T10894] usb 5-1: USB disconnect, device number 13 [ 1382.738100][T16783] overlayfs: failed to clone upperpath [ 1387.942679][T16623] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1388.064818][T16832] loop4: detected capacity change from 0 to 40427 [ 1388.111373][T16832] F2FS-fs (loop4): build fault injection rate: 14 [ 1388.118280][T16832] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 1388.169073][T16832] F2FS-fs (loop4): invalid crc value [ 1388.219444][T16623] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1388.229366][T16623] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.237777][T16623] usb 8-1: Product: syz [ 1388.242379][T16623] usb 8-1: Manufacturer: syz [ 1388.247351][T16623] usb 8-1: SerialNumber: syz [ 1388.259308][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 1388.284810][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 1388.620233][T16832] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1388.629764][T16832] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 1388.648469][T16832] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1388.688306][T16832] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 1388.733632][T16832] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of __f2fs_tmpfile+0x81/0x7a0 [ 1388.880902][T10935] syz-executor: attempt to access beyond end of device [ 1388.880902][T10935] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1388.898036][T10935] CPU: 1 UID: 0 PID: 10935 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(none) [ 1388.898246][T10935] Tainted: [W]=WARN [ 1388.898307][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1388.898409][T10935] Call Trace: [ 1388.898470][T10935] [ 1388.898533][T10935] __dump_stack+0x26/0x30 [ 1388.898743][T10935] dump_stack_lvl+0x1df/0x270 [ 1388.898949][T10935] dump_stack+0x1e/0x25 [ 1388.899134][T10935] f2fs_handle_critical_error+0xa6f/0xc20 [ 1388.899411][T10935] f2fs_stop_checkpoint+0x65/0x80 [ 1388.899654][T10935] f2fs_write_end_io+0x101c/0x1bc0 [ 1388.899871][T10935] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1388.900035][T10935] bio_endio+0xeb4/0x1010 [ 1388.900226][T10935] submit_bio_noacct+0x213/0x2750 [ 1388.900484][T10935] submit_bio+0x57c/0x630 [ 1388.900692][T10935] f2fs_submit_write_bio+0x92/0x250 [ 1388.900915][T10935] __submit_merged_bio+0x16f/0x6a0 [ 1388.901129][T10935] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1388.901339][T10935] __submit_merged_write_cond+0x458/0x9a0 [ 1388.901586][T10935] f2fs_write_data_pages+0x4bb2/0x5480 [ 1388.901913][T10935] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1388.902108][T10935] ? __lru_add_drain_all+0x931/0x940 [ 1388.902323][T10935] ? filter_irq_stacks+0x49/0x190 [ 1388.902475][T10935] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1388.902680][T10935] ? stack_depot_save_flags+0x35/0x7b0 [ 1388.902847][T10935] ? kmsan_get_metadata+0xfb/0x160 [ 1388.903045][T10935] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1388.903230][T10935] ? kmsan_get_metadata+0xfb/0x160 [ 1388.903419][T10935] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1388.903619][T10935] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1388.903855][T10935] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1388.904090][T10935] do_writepages+0x3f2/0x860 [ 1388.904267][T10935] ? _raw_spin_unlock+0x30/0x50 [ 1388.904449][T10935] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1388.904714][T10935] filemap_fdatawrite+0x207/0x260 [ 1388.904996][T10935] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1388.905227][T10935] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1388.905550][T10935] kill_f2fs_super+0x2ff/0x970 [ 1388.905757][T10935] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1388.905930][T10935] deactivate_locked_super+0xc8/0x3c0 [ 1388.906121][T10935] deactivate_super+0x12f/0x140 [ 1388.906300][T10935] cleanup_mnt+0x6fb/0x780 [ 1388.906509][T10935] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1388.906717][T10935] ? __pfx___cleanup_mnt+0x10/0x10 [ 1388.906941][T10935] __cleanup_mnt+0x22/0x30 [ 1388.907153][T10935] task_work_run+0x206/0x2b0 [ 1388.907354][T10935] exit_to_user_mode_loop+0x2a6/0x330 [ 1388.907554][T10935] do_syscall_64+0x1e3/0x210 [ 1388.907719][T10935] ? irqentry_exit+0x16/0x60 [ 1388.907927][T10935] ? clear_bhb_loop+0x40/0x90 [ 1388.908106][T10935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.908283][T10935] RIP: 0033:0x7fa86c78fed7 [ 1388.908405][T10935] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1388.908549][T10935] RSP: 002b:00007ffcf5cff818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1388.908713][T10935] RAX: 0000000000000000 RBX: 00007fa86c811c05 RCX: 00007fa86c78fed7 [ 1388.908826][T10935] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf5cff8d0 [ 1388.908934][T10935] RBP: 00007ffcf5cff8d0 R08: 0000000000000000 R09: 0000000000000000 [ 1388.909040][T10935] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf5d00960 [ 1388.909151][T10935] R13: 00007fa86c811c05 R14: 00000000001531d6 R15: 00007ffcf5d009a0 [ 1388.909305][T10935] [ 1389.263455][T10935] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1390.342481][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3724'. [ 1390.412831][T14683] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1390.432285][ T9614] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1390.451784][ T9614] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1390.497221][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3724'. [ 1390.526774][ T9614] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1390.652865][T16623] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1390.665547][T16623] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1390.677243][T16623] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1390.776037][T16623] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1390.906363][T16623] usb 8-1: USB disconnect, device number 25 [ 1393.268408][T10894] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1393.276575][T10894] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1393.284742][T10894] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1393.292618][T10894] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1393.300473][T10894] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1393.310453][T10894] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1393.319128][T10894] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1393.327195][T10894] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1393.335191][T10894] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1393.343091][T10894] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1393.352245][T10894] hid-generic 0000:0000:0000.0024: reserved main item tag 0xd [ 1393.725657][T10894] hid-generic 0000:0000:0000.0024: hidraw0: HID v8.00 Device [syz0] on syz0 [ 1394.557135][T16891] overlayfs: failed to clone upperpath [ 1395.072354][T16896] loop9: detected capacity change from 0 to 1024 [ 1395.163055][T16896] EXT4-fs: inline encryption not supported [ 1395.170117][T16896] EXT4-fs: Ignoring removed bh option [ 1395.458811][T16896] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.678766][T16896] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3739: bg 0: block 32: padding at end of block bitmap is not set [ 1395.778054][T16896] EXT4-fs (loop9): Remounting filesystem read-only [ 1396.311873][T10891] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.868871][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1396.875724][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.033542][T16906] loop7: detected capacity change from 0 to 40427 [ 1397.051010][T16906] F2FS-fs (loop7): invalid crc value [ 1397.418786][T16906] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1397.435738][T16906] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1397.569231][T16906] syz.7.3740: attempt to access beyond end of device [ 1397.569231][T16906] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1397.684640][ T6499] syz-executor: attempt to access beyond end of device [ 1397.684640][ T6499] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1397.699638][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(none) [ 1397.699846][ T6499] Tainted: [W]=WARN [ 1397.699907][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1397.700009][ T6499] Call Trace: [ 1397.700070][ T6499] [ 1397.700132][ T6499] __dump_stack+0x26/0x30 [ 1397.700347][ T6499] dump_stack_lvl+0x1df/0x270 [ 1397.700559][ T6499] dump_stack+0x1e/0x25 [ 1397.700744][ T6499] f2fs_handle_critical_error+0xa6f/0xc20 [ 1397.701027][ T6499] f2fs_stop_checkpoint+0x65/0x80 [ 1397.701272][ T6499] f2fs_write_end_io+0x101c/0x1bc0 [ 1397.701502][ T6499] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1397.701666][ T6499] bio_endio+0xeb4/0x1010 [ 1397.701851][ T6499] submit_bio_noacct+0x213/0x2750 [ 1397.702112][ T6499] submit_bio+0x57c/0x630 [ 1397.702329][ T6499] f2fs_submit_write_bio+0x92/0x250 [ 1397.702566][ T6499] __submit_merged_bio+0x16f/0x6a0 [ 1397.702788][ T6499] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1397.703000][ T6499] __submit_merged_write_cond+0x458/0x9a0 [ 1397.703282][ T6499] f2fs_write_data_pages+0x4bb2/0x5480 [ 1397.703623][ T6499] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1397.703833][ T6499] ? __lru_add_drain_all+0x931/0x940 [ 1397.704058][ T6499] ? filter_irq_stacks+0x49/0x190 [ 1397.704228][ T6499] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1397.704440][ T6499] ? stack_depot_save_flags+0x35/0x7b0 [ 1397.704611][ T6499] ? kmsan_get_metadata+0xfb/0x160 [ 1397.704816][ T6499] ? kmsan_get_metadata+0xfb/0x160 [ 1397.705005][ T6499] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1397.705204][ T6499] ? kmsan_get_metadata+0xfb/0x160 [ 1397.705401][ T6499] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1397.705599][ T6499] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1397.705843][ T6499] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1397.706082][ T6499] do_writepages+0x3f2/0x860 [ 1397.706270][ T6499] ? _raw_spin_unlock+0x30/0x50 [ 1397.706474][ T6499] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 1397.706739][ T6499] filemap_fdatawrite+0x207/0x260 [ 1397.707026][ T6499] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 1397.707256][ T6499] f2fs_write_checkpoint+0xfe2/0x2b00 [ 1397.707590][ T6499] kill_f2fs_super+0x2ff/0x970 [ 1397.707809][ T6499] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1397.707991][ T6499] deactivate_locked_super+0xc8/0x3c0 [ 1397.708195][ T6499] deactivate_super+0x12f/0x140 [ 1397.708387][ T6499] cleanup_mnt+0x6fb/0x780 [ 1397.708597][ T6499] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1397.708812][ T6499] ? __pfx___cleanup_mnt+0x10/0x10 [ 1397.709030][ T6499] __cleanup_mnt+0x22/0x30 [ 1397.709255][ T6499] task_work_run+0x206/0x2b0 [ 1397.709457][ T6499] exit_to_user_mode_loop+0x2a6/0x330 [ 1397.709656][ T6499] do_syscall_64+0x1e3/0x210 [ 1397.709817][ T6499] ? irqentry_exit+0x16/0x60 [ 1397.710023][ T6499] ? clear_bhb_loop+0x40/0x90 [ 1397.710206][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.710407][ T6499] RIP: 0033:0x7f6a7d18fed7 [ 1397.710531][ T6499] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1397.710677][ T6499] RSP: 002b:00007fff068185c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1397.710838][ T6499] RAX: 0000000000000000 RBX: 00007f6a7d211c05 RCX: 00007f6a7d18fed7 [ 1397.710951][ T6499] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff06818680 [ 1397.711057][ T6499] RBP: 00007fff06818680 R08: 0000000000000000 R09: 0000000000000000 [ 1397.711163][ T6499] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff06819710 [ 1397.711282][ T6499] R13: 00007f6a7d211c05 R14: 0000000000155468 R15: 00007fff06819750 [ 1397.711435][ T6499] [ 1398.075091][ T6499] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1398.094072][T16913] loop9: detected capacity change from 0 to 128 [ 1398.154365][T16913] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1398.297755][T16901] netlink: zone id is out of range [ 1398.303295][T16901] netlink: zone id is out of range [ 1398.308675][T16901] netlink: zone id is out of range [ 1398.314088][T16901] netlink: zone id is out of range [ 1398.319372][T16901] netlink: zone id is out of range [ 1398.323343][ T6499] syz-executor: attempt to access beyond end of device [ 1398.323343][ T6499] loop7: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 1398.326441][T16901] netlink: zone id is out of range [ 1398.345237][T16901] netlink: zone id is out of range [ 1398.350718][T16901] netlink: zone id is out of range [ 1398.356174][T16901] netlink: zone id is out of range [ 1398.361486][T16901] netlink: zone id is out of range [ 1398.380021][ T6499] syz-executor: attempt to access beyond end of device [ 1398.380021][ T6499] loop7: rw=2051, sector=45112, nr_sectors = 57288 limit=40427 [ 1398.396175][ T6499] F2FS-fs (loop7): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 1398.404828][ T6499] F2FS-fs (loop7): Issue discard(5639, 5639, 7161) failed, ret: -5 [ 1398.405224][T16913] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1398.513280][T16913] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1399.446150][T16923] loop9: detected capacity change from 0 to 1024 [ 1399.641531][T16925] netlink: 'syz.4.3749': attribute type 39 has an invalid length. [ 1399.661753][T16923] hfsplus: request for non-existent node 1280 in B*Tree [ 1399.669095][T16923] hfsplus: request for non-existent node 1280 in B*Tree [ 1399.681193][T16925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.760582][T16925] bridge_slave_0 (unregistering): left allmulticast mode [ 1399.768052][T16925] bridge_slave_0 (unregistering): left promiscuous mode [ 1399.775704][T16925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.962330][T16929] syz_tun: entered allmulticast mode [ 1400.002177][T16928] syz_tun: left allmulticast mode [ 1400.103359][T16931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3751'. [ 1400.140361][T14683] hfsplus: b-tree write err: -5, ino 8 [ 1402.460187][T16971] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.684991][T16971] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.891168][T16971] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.119285][T16971] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.505709][ T9624] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.612632][T14683] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.633436][T16983] loop4: detected capacity change from 0 to 256 [ 1403.717342][ T9614] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.807160][ T9614] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.216678][ C0] ===================================================== [ 1404.224143][ C0] BUG: KMSAN: uninit-value in can_receive+0x12c/0x4a0 [ 1404.231274][ C0] can_receive+0x12c/0x4a0 [ 1404.235969][ C0] can_rcv+0x1ff/0x3b0 [ 1404.240211][ C0] __netif_receive_skb+0x474/0xac0 [ 1404.245691][ C0] process_backlog+0x485/0xa00 [ 1404.250638][ C0] __napi_poll+0xda/0x8a0 [ 1404.255298][ C0] net_rx_action+0xa59/0x1ac0 [ 1404.260154][ C0] handle_softirqs+0x166/0x6e0 [ 1404.265223][ C0] __irq_exit_rcu+0x66/0x180 [ 1404.270000][ C0] irq_exit_rcu+0x12/0x20 [ 1404.274694][ C0] sysvec_apic_timer_interrupt+0x84/0x90 [ 1404.280665][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1404.286959][ C0] _raw_spin_unlock_irqrestore+0x33/0x60 [ 1404.292971][ C0] hrtimer_start_range_ns+0x149a/0x1900 [ 1404.298745][ C0] j1939_tp_schedule_txtimer+0xc7/0x110 [ 1404.304615][ C0] j1939_sk_sendmsg+0x1bb4/0x2760 [ 1404.309876][ C0] __sock_sendmsg+0x330/0x3d0 [ 1404.314844][ C0] ____sys_sendmsg+0x893/0xd80 [ 1404.319929][ C0] ___sys_sendmsg+0x271/0x3b0 [ 1404.324932][ C0] __sys_sendmmsg+0x2d9/0x7c0 [ 1404.329836][ C0] __x64_sys_sendmmsg+0xc6/0x150 [ 1404.335119][ C0] x64_sys_call+0x21de/0x3e20 [ 1404.340117][ C0] do_syscall_64+0xd9/0x210 [ 1404.345079][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.351184][ C0] [ 1404.353714][ C0] Uninit was created at: [ 1404.358229][ C0] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1404.365091][ C0] kmalloc_reserve+0x22f/0x4b0 [ 1404.370067][ C0] pskb_expand_head+0x1fc/0x1610 [ 1404.375352][ C0] do_xdp_generic+0xa79/0x1690 [ 1404.380363][ C0] __netif_receive_skb_core+0x2524/0x6df0 [ 1404.386730][ C0] __netif_receive_skb+0xcc/0xac0 [ 1404.392129][ C0] process_backlog+0x485/0xa00 [ 1404.397098][ C0] __napi_poll+0xda/0x8a0 [ 1404.401670][ C0] net_rx_action+0xa59/0x1ac0 [ 1404.406741][ C0] handle_softirqs+0x166/0x6e0 [ 1404.411692][ C0] __irq_exit_rcu+0x66/0x180 [ 1404.416581][ C0] irq_exit_rcu+0x12/0x20 [ 1404.421260][ C0] sysvec_apic_timer_interrupt+0x84/0x90 [ 1404.427240][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1404.432372][T12831] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1404.433514][ C0] [ 1404.443655][ C0] CPU: 0 UID: 0 PID: 16993 Comm: syz.4.3776 Tainted: G W syzkaller #0 PREEMPT(none) [ 1404.454932][ C0] Tainted: [W]=WARN [ 1404.458940][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1404.469273][ C0] ===================================================== [ 1404.476713][ C0] Disabling lock debugging due to kernel taint [ 1404.483096][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1404.489668][ C0] CPU: 0 UID: 0 PID: 16993 Comm: syz.4.3776 Tainted: G B W syzkaller #0 PREEMPT(none) [ 1404.500952][ C0] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1404.506187][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1404.516410][ C0] Call Trace: [ 1404.519816][ C0] [ 1404.522771][ C0] __dump_stack+0x26/0x30 [ 1404.527384][ C0] dump_stack_lvl+0x53/0x270 [ 1404.532306][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1404.538360][ C0] dump_stack+0x1e/0x25 [ 1404.542766][ C0] vpanic+0x361/0xc50 [ 1404.546988][ C0] panic+0x15d/0x160 [ 1404.551166][ C0] kmsan_report+0x31c/0x320 [ 1404.555904][ C0] ? __msan_warning+0x1b/0x30 [ 1404.560873][ C0] ? can_receive+0x12c/0x4a0 [ 1404.565666][ C0] ? can_rcv+0x1ff/0x3b0 [ 1404.570196][ C0] ? __netif_receive_skb+0x474/0xac0 [ 1404.575951][ C0] ? process_backlog+0x485/0xa00 [ 1404.581122][ C0] ? __napi_poll+0xda/0x8a0 [ 1404.585999][ C0] ? net_rx_action+0xa59/0x1ac0 [ 1404.591057][ C0] ? handle_softirqs+0x166/0x6e0 [ 1404.596252][ C0] ? __irq_exit_rcu+0x66/0x180 [ 1404.601247][ C0] ? irq_exit_rcu+0x12/0x20 [ 1404.606377][ C0] ? sysvec_apic_timer_interrupt+0x84/0x90 [ 1404.612527][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1404.619100][ C0] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 1404.625179][ C0] ? hrtimer_start_range_ns+0x149a/0x1900 [ 1404.631146][ C0] ? j1939_tp_schedule_txtimer+0xc7/0x110 [ 1404.637130][ C0] ? j1939_sk_sendmsg+0x1bb4/0x2760 [ 1404.642689][ C0] ? __sock_sendmsg+0x330/0x3d0 [ 1404.647756][ C0] ? ____sys_sendmsg+0x893/0xd80 [ 1404.653116][ C0] ? ___sys_sendmsg+0x271/0x3b0 [ 1404.658309][ C0] ? __sys_sendmmsg+0x2d9/0x7c0 [ 1404.663406][ C0] ? __x64_sys_sendmmsg+0xc6/0x150 [ 1404.669111][ C0] ? x64_sys_call+0x21de/0x3e20 [ 1404.674133][ C0] ? do_syscall_64+0xd9/0x210 [ 1404.679368][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.685688][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1404.691027][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1404.697161][ C0] ? __netif_receive_skb_core+0x6670/0x6df0 [ 1404.703415][ C0] ? rb_insert_color+0x77/0x1020 [ 1404.708610][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1404.715619][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1404.720966][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1404.727106][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1404.732378][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1404.739074][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1404.744441][ C0] __msan_warning+0x1b/0x30 [ 1404.749290][ C0] can_receive+0x12c/0x4a0 [ 1404.753932][ C0] can_rcv+0x1ff/0x3b0 [ 1404.758190][ C0] ? __pfx_can_rcv+0x10/0x10 [ 1404.762964][ C0] __netif_receive_skb+0x474/0xac0 [ 1404.768266][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1404.773716][ C0] process_backlog+0x485/0xa00 [ 1404.778754][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1404.784161][ C0] __napi_poll+0xda/0x8a0 [ 1404.788796][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1404.794143][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1404.800205][ C0] net_rx_action+0xa59/0x1ac0 [ 1404.805064][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1404.810309][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1404.816776][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1404.823223][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1404.828606][ C0] handle_softirqs+0x166/0x6e0 [ 1404.833769][ C0] __irq_exit_rcu+0x66/0x180 [ 1404.838666][ C0] irq_exit_rcu+0x12/0x20 [ 1404.843125][ C0] sysvec_apic_timer_interrupt+0x84/0x90 [ 1404.849091][ C0] [ 1404.852124][ C0] [ 1404.855525][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1404.861815][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x33/0x60 [ 1404.868543][ C0] Code: 56 53 48 89 f3 49 89 fe e8 3a a4 b5 f1 4c 89 f7 e8 42 97 b5 f1 c6 00 00 41 c6 06 00 f7 c3 00 02 00 00 74 01 fb be 04 00 00 00 <48> c7 c7 28 30 58 95 e8 51 99 b5 f1 65 ff 0d 42 1d 76 04 74 0a 5b [ 1404.888316][ C0] RSP: 0018:ffff8881192b3768 EFLAGS: 00000206 [ 1404.894605][ C0] RAX: ffff88823fd11440 RBX: 0000000000000292 RCX: 0000000000b3edef [ 1404.902751][ C0] RDX: ffff88823fc63440 RSI: 0000000000000004 RDI: ffff88813fc91440 [ 1404.910914][ C0] RBP: ffff8881192b3778 R08: ffffea000000000f R09: 0000000000000000 [ 1404.919053][ C0] R10: ffff88805048fac0 R11: ffffffff81899a50 R12: ffff888050c8fae8 [ 1404.927152][ C0] R13: 0000000000000010 R14: ffff88813fc91440 R15: ffff8881065fcce0 [ 1404.935416][ C0] ? __pfx_lapic_next_event+0x10/0x10 [ 1404.941265][ C0] ? _raw_spin_unlock_irqrestore+0x1e/0x60 [ 1404.947604][ C0] hrtimer_start_range_ns+0x149a/0x1900 [ 1404.953634][ C0] j1939_tp_schedule_txtimer+0xc7/0x110 [ 1404.959355][ C0] j1939_sk_sendmsg+0x1bb4/0x2760 [ 1404.964657][ C0] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1404.970247][ C0] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 1404.975763][ C0] __sock_sendmsg+0x330/0x3d0 [ 1404.980904][ C0] ____sys_sendmsg+0x893/0xd80 [ 1404.985876][ C0] ___sys_sendmsg+0x271/0x3b0 [ 1404.990745][ C0] ? __rcu_read_unlock+0x6d/0xd0 [ 1404.995897][ C0] ? __fget_files+0x3b4/0x4a0 [ 1405.000817][ C0] ? __fget_files+0x3b9/0x4a0 [ 1405.005741][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1405.011234][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1405.017419][ C0] __sys_sendmmsg+0x2d9/0x7c0 [ 1405.022362][ C0] ? do_futex+0x3a1/0x480 [ 1405.026951][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1405.033619][ C0] __x64_sys_sendmmsg+0xc6/0x150 [ 1405.038830][ C0] x64_sys_call+0x21de/0x3e20 [ 1405.043816][ C0] do_syscall_64+0xd9/0x210 [ 1405.048516][ C0] ? irqentry_exit+0x16/0x60 [ 1405.053427][ C0] ? clear_bhb_loop+0x40/0x90 [ 1405.058300][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.064318][ C0] RIP: 0033:0x7fa86c78eba9 [ 1405.068859][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1405.088683][ C0] RSP: 002b:00007fa86d6a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1405.097244][ C0] RAX: ffffffffffffffda RBX: 00007fa86c9d5fa0 RCX: 00007fa86c78eba9 [ 1405.105429][ C0] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1405.113507][ C0] RBP: 00007fa86c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1405.121664][ C0] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1405.129719][ C0] R13: 00007fa86c9d6038 R14: 00007fa86c9d5fa0 R15: 00007ffcf5d00588 [ 1405.137823][ C0] [ 1405.141237][ C0] Kernel Offset: disabled [ 1405.145662][ C0] Rebooting in 86400 seconds..