last executing test programs: 2m38.641657652s ago: executing program 5 (id=54): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000200)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x1200) 2m38.325668855s ago: executing program 5 (id=58): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000839000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) 2m36.250859114s ago: executing program 5 (id=69): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYBLOB='\t'], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m34.424617435s ago: executing program 5 (id=87): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@abort}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m33.653039402s ago: executing program 5 (id=94): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 2m32.658108508s ago: executing program 5 (id=100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r1, 0x2}, 0x8) 2m31.937785563s ago: executing program 32 (id=100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r1, 0x2}, 0x8) 2m19.439923088s ago: executing program 4 (id=173): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc3009bb66682c7eb993", 0xa, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 2m19.09974661s ago: executing program 4 (id=175): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="280000001400190100000000000000022865d1519e"], 0x28}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) 2m18.740576562s ago: executing program 4 (id=178): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m17.725029356s ago: executing program 4 (id=183): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000000), 0x1008000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 2m15.129174802s ago: executing program 4 (id=195): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000005c0)={&(0x7f0000000180)={{@host, 0x7}, {@any, 0x2}, 0x400, "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"}, 0x418, 0x100}) 2m12.771032157s ago: executing program 4 (id=204): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x1c4, 0x65, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x198, 0x2, [@TCA_BPF_ACT={0x194, 0x1, [@m_xt={0xac, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x79, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xb0, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x5d, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2ad"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x34, 0x1b, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m12.074050498s ago: executing program 33 (id=204): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x1c4, 0x65, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x198, 0x2, [@TCA_BPF_ACT={0x194, 0x1, [@m_xt={0xac, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x79, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xb0, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x5d, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2ad"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x34, 0x1b, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 23.272149648s ago: executing program 3 (id=1215): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001880)=""/4093, 0xffd}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f0000000800)=""/154, 0x9a}], 0x5}, 0xfffffffe}], 0x3, 0x2030, 0x0) 23.00687243s ago: executing program 3 (id=1218): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="330520000ae0160006007e752f555f000100007eab0800002d00000000997bea54fefe7117599e7dae76", 0xfdef, 0x801, &(0x7f00000005c0)={0x11, 0x3, r1, 0x1, 0x5f, 0x6, @local}, 0x14) 22.81213514s ago: executing program 3 (id=1219): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0016"], 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) 22.604592627s ago: executing program 3 (id=1222): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[]) 21.212048024s ago: executing program 3 (id=1232): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x80000003) splice(r1, 0x0, r0, 0x0, 0x4004ffe0, 0x0) 20.388686189s ago: executing program 3 (id=1240): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 19.787514489s ago: executing program 34 (id=1240): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 8.320280643s ago: executing program 6 (id=1313): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540), 0x149040, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) 6.869537065s ago: executing program 6 (id=1325): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000140)='./bus\x00') 6.264285731s ago: executing program 2 (id=1331): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 6.014761744s ago: executing program 2 (id=1333): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 5.597722766s ago: executing program 2 (id=1335): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="40274000000005edaeffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.126602328s ago: executing program 6 (id=1339): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="00000000000010051a409ed86813", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.620057037s ago: executing program 6 (id=1343): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000000000009"]) 3.780598696s ago: executing program 6 (id=1345): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f0000903000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x0) 3.234699755s ago: executing program 2 (id=1351): syz_usb_connect(0x3, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12011001ee3fb140b40a1100fbca0102030109022400010295107609044f0d02f31d6309090501b0"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x104a00) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) 2.383758712s ago: executing program 7 (id=1358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000100)={0x3c, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x877}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x810) 2.173493406s ago: executing program 7 (id=1360): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[], 0x6, 0x2c1, &(0x7f0000001880)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x40000029) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x10) 1.906909252s ago: executing program 1 (id=1361): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x10507e, 0xa6) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 1.743563747s ago: executing program 7 (id=1363): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) 1.453753227s ago: executing program 2 (id=1364): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="20c9925d4e1aab1392bab9d35adecf0c12ad6138f42dedfd10207532ff4481b0d9ab4b837a632a2793bb74de151447ba6951c50bbc3fc0e834b3ceec993b8cd2042a2be730b357cd7270f0874664b0012ea5b0ca487349023ca32a46da2712b0598c6e50d604cc3424bfc29046ca904b507ee47b5ecbf3d4fdb092656860ee5c02dca714f8b14b4e2ebbdbad09b9eff3ee6137981614f883ddf57ce2db9cd39b80518dd1121879a471b0fa056a828a1b39"], 0x4, 0x5d9, &(0x7f00000010c0)="$eJzs3U9rHOcdB/DvrNZrrQuOktiJ2wYqUvqHitqS1m2TgqlaTNEhlIBfgajlWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWWdhV/Pvaz8zx6Zn7zm9/OjHZXAgV4aS3PpfkwRZbn3tsqxzvbne7OdufuoJ/kbJJG9T/NsvvPZOpBMpt+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umWpTnLpBcZ79I3jFcMjLINeHwSfBI+f7z/HuPupY4zNYbT6i+IZz8VMci7JdH0fGJy4jRPM8FhMzAUIAAAAx+iV3exmK+fHnQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJvXf/y/q1hj0Z1MM/v5/q/5a6v6p9nDcCQAAAAAAAADAC/CD3exmK+cH48dF9TP/t6vBherxO/k4m1nNRi5nKyvppZeNLCSZGQnU2lrp9TYWDrHl4r5bLp7M8QIAAAAAAADAt9Rfsrz3838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgERTLVX1TtwqA/k0YzyXSSVrneveQfg/5p9nDcCQAAAMAJeGU3u9nK+cH4cVG953+jet8/nY+znl7W0ks3q7lZfRbQf9ff2NnudHe2O3fL9nTc3/77SGlUEdP/7GH/PV+q1mjn1p1mvc0f82G6uZlGtWXp0iCf/fO6X+ZU/KZ2yMxu1ssiKb5ffxoyGWaqipzJraxVNZqvcyur8erBlTjis/PknhbSGH7yc+EYan6uXpY1n57omi+OnH1vHFyJ5EfX/rt+u7t+5/atzbnJOaSv6clKdEYq8eZLVYn5qhIXh+Pl/D43MpfZvJ+NrOVPWUkvq5nN9aq3Up/P5ePMwZVa+sro/edl0qqfl/5d9Gg5vV1tez5r+UM+zM2s5pdZzNW8k4X8qvp3deQZvniIq75xtKv+hz+tO68lRbu/nBBlXV8dqevoPXemmhv9yl6VXnvx98bm9+rOVFI0hzlNgicrsTBSidcPrsRfH5ePm931Oxu3Vz465P5+Ui/L7xJnn/td4iTr1KrP3v4rla+eHeXc6/vOLVRzF4ZzjafmLg7nnnelturXcE9HWqzm3tx3rlPNXRqZaw/nLg9fbwEw8c797Fyr/a/239uftR+0b7ffm/7d2XfOvtXKmUdnft2cn/px463ib/ksf957/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx9m598emel213d0NHR0Rl2xn1n4iRc6d396MrmJ5/+fO3uygerH6yud+Z/sfhuZ2Hx3atXbq11V+f7j+NOk2Oyd9GPOxMAAAAAAAAAAACO4iR+nXTcxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpsTyX5sMUWZi/PF+Od7Y73bIN+ntrNpI0y+X/kqkHyWz6LTMj4Ypn7efaF5838+X9G3uxGoP1pw7a7nDu1S1LdZJLLzDeo28crxgeYRn0+iA4jNv/AwAA///YHBzc") symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getresuid(0x0, 0x0, 0x0) stat(&(0x7f0000003e40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.309293393s ago: executing program 7 (id=1365): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xffffdffd}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@rthdr_2292={{0x18, 0x29, 0x39, {0xc, 0x0, 0x0, 0x1}}}], 0x18}, 0xc4) 1.284006471s ago: executing program 1 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a8020000180140003002a000200a80005000200000000007e8e"], 0x40}}, 0x0) 1.029983497s ago: executing program 0 (id=1368): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000180)={'syz1\x00', {0x10, 0x0, 0xfffb}, 0x9, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x3, 0x5, 0x100000, 0x5, 0x4, 0x2000008, 0x3, 0x20009, 0x1f, 0xc795, 0x6, 0x7fff, 0x10001, 0x4, 0x4, 0x1, 0x6, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x10000003, 0x0, 0x0, 0x4, 0xd, 0x2, 0x0, 0x1, 0x0, 0xfffffffc, 0x400, 0x5, 0x9, 0x5, 0x2, 0x6, 0x0, 0x8, 0x7, 0x4, 0x1, 0xe8, 0x5, 0x7, 0x4, 0x2, 0x2f03132e, 0x0, 0x3, 0x9, 0x8003, 0x0, 0x0, 0x0, 0xdf, 0x287d], [0x101, 0x31, 0x6, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x3, 0x8, 0x9, 0x7f, 0x75, 0x8, 0x7fff, 0x2, 0x7f, 0x5, 0x73, 0x8, 0xffffffff, 0x1, 0x7ff, 0x4, 0x2004d, 0x1, 0x9, 0x9, 0x0, 0x2, 0x8, 0xf, 0xd, 0x2, 0x20002a, 0x8, 0x7, 0x8, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x5, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x7, 0x10000, 0x6, 0x5, 0x0, 0x3, 0x4, 0x8, 0x0, 0x2, 0x0, 0x6], [0x0, 0x2, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x3ea7, 0x6, 0xffff7ff8, 0x5, 0x1, 0x700, 0xffffffff, 0xfffffffa, 0xd, 0x7ff, 0x6, 0x80000, 0x7fffffff, 0x9, 0x48, 0x9, 0x6, 0x1, 0x9, 0x3, 0x709, 0x9, 0x9, 0x2, 0x7, 0xff, 0x7fffffff, 0x5, 0x6, 0x43cd, 0x3, 0xd, 0x8000, 0x4, 0x1ef, 0x7, 0x5, 0x8, 0x10001, 0x4, 0xffff89a3, 0x1000, 0x19, 0x9, 0xa59, 0x3ff, 0x1, 0x3, 0xfffffff5, 0x9, 0x81, 0x10000, 0x1d, 0x3, 0x4, 0x1, 0x1], [0x7, 0x8, 0x213, 0x789c, 0x40, 0x6, 0x1000, 0x8000, 0x2, 0x3, 0x2, 0x5, 0x7fffffff, 0xd, 0x6, 0x7, 0x8, 0xd, 0x7fffffff, 0x2, 0xffff, 0x0, 0x6, 0x7, 0x0, 0xda43, 0x2, 0x5, 0x14ac3b3b, 0x2, 0xb, 0x0, 0x4, 0x1, 0x1, 0x40001000, 0x81, 0x7ffffffe, 0xb6, 0x3, 0xffff, 0x10, 0x6, 0x3, 0x6, 0x800, 0xffffff11, 0x40, 0xfffffffb, 0x4, 0x0, 0xfffffff3, 0x7, 0x800, 0x0, 0x4, 0x5, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0xffffffff]}, 0x45c) rename(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0) 979.775774ms ago: executing program 7 (id=1369): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x40, 0x1}) syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x0, 0x10000, 0x1000000, 0x55, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f00000002c0), &(0x7f0000000080)) syz_ublk_add_dev(r0, r4, r2, r3, &(0x7f0000000540)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3b4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)) 902.383252ms ago: executing program 1 (id=1370): getpid() r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 706.409257ms ago: executing program 0 (id=1371): r0 = syz_open_dev$media(&(0x7f0000000100), 0x1, 0x40580) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 704.692783ms ago: executing program 2 (id=1372): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x1efc1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x10000006, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) 636.712114ms ago: executing program 1 (id=1373): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000001a40)) 635.833498ms ago: executing program 7 (id=1374): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_matches\x00') read$FUSE(r0, &(0x7f0000005400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xffe4) lchown(&(0x7f0000000040)='./file1\x00', r1, r2) 549.515322ms ago: executing program 6 (id=1375): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES64=r0], 0x0) 406.505636ms ago: executing program 0 (id=1376): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @empty, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r1, 0x3}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0xffffffff, {"de6fd38e2feae310fc2c0fc9171a249e"}, 0x7, 0x80, 0x5}}}, 0x90) 323.733192ms ago: executing program 1 (id=1377): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000600)=0x20000, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 234.520078ms ago: executing program 0 (id=1378): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101003) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0x1d, @scatter={0x0, 0x91ff, 0x0}, &(0x7f0000000080)="a791b6000000", 0x0, 0x1fc, 0x20, 0xfffffeff, 0x0}) 176.816376ms ago: executing program 0 (id=1379): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000ffffffff000000000088e277163da628185b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 56.188442ms ago: executing program 0 (id=1380): r0 = syz_io_uring_setup(0x259a, &(0x7f0000000000)={0x0, 0xa550, 0x800, 0x1, 0x153}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000001b00)=@IORING_OP_FSYNC={0x3, 0xb, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x42be, 0xafb2, 0x8, 0x0, 0x0) 0s ago: executing program 1 (id=1381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_RATE={0x14, 0xe, {0x2}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x8c}}, 0x8c0) kernel console output (not intermixed with test programs): 168.230404][ T5922] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 168.292396][ T5922] Buffer I/O error on dev nbd1, logical block 1, async page read [ 168.384297][ T5922] ldm_validate_partition_table(): Disk read failed. [ 168.431583][ T7586] program syz.6.514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.447888][ T5922] Dev nbd1: unable to read RDB block 0 [ 168.480371][ T5922] nbd1: unable to read partition table [ 168.570111][ T5922] ldm_validate_partition_table(): Disk read failed. [ 168.632163][ T5922] Dev nbd1: unable to read RDB block 0 [ 168.683651][ T5922] nbd1: unable to read partition table [ 168.745870][ T6611] ocfs2: Unmounting device (7,7) on (node local) [ 168.826703][ T5922] block nbd1: NBD_DISCONNECT [ 168.834769][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.519'. [ 168.861244][ T5922] block nbd1: Send disconnect failed -32 [ 169.000262][ T7596] ipvlan2: entered allmulticast mode [ 169.819466][ T7620] qnx4: block size(16384) > page size(4096) not supported by filesystem [ 169.846422][ T5639] udevd[5639]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 169.863855][ T7623] loop6: detected capacity change from 0 to 1024 [ 169.868641][ T7628] loop1: detected capacity change from 0 to 512 [ 169.899602][ T7623] EXT4-fs: Ignoring removed bh option [ 169.958197][ T7623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.030754][ T7623] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.527: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 170.073650][ T7628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.132201][ T7628] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.175818][ T7623] EXT4-fs (loop6): Remounting filesystem read-only [ 170.379849][ T6151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.414853][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.154758][ T7627] loop0: detected capacity change from 0 to 32768 [ 171.186567][ T7627] BTRFS warning: excessive commit interval 3581, use with care [ 171.241124][ T7627] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.528 (7627) [ 171.323491][ T7627] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.380686][ T7627] BTRFS info (device loop0): using crc32c checksum algorithm [ 171.550466][ T7627] BTRFS info (device loop0): enabling ssd optimizations [ 171.590306][ T7627] BTRFS info (device loop0): turning on flush-on-commit [ 171.599290][ T7627] BTRFS info (device loop0): enabling free space tree [ 171.616411][ T7627] BTRFS info (device loop0): force zlib compression, level 3 [ 171.649812][ T7627] BTRFS info (device loop0): max_inline set to 4096 [ 171.826331][ T7627] BTRFS critical (device loop0 state E): emergency shutdown [ 172.109384][ T5631] BTRFS info (device loop0 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.344494][ T7662] loop1: detected capacity change from 0 to 32768 [ 172.416875][ T7662] (syz.1.539,7662,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.494562][ T7662] (syz.1.539,7662,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.662963][ T7662] JBD2: Ignoring recovery information on journal [ 172.895852][ T7662] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 173.299808][ T7731] pimreg1: tun_chr_ioctl cmd 1074025677 [ 173.313459][ T7731] pimreg1: linktype set to 1 [ 173.646082][ T5632] ocfs2: Unmounting device (7,1) on (node local) [ 173.664488][ T7716] loop0: detected capacity change from 0 to 32768 [ 173.806536][ T7716] ialloc: diAlloc returned -5! [ 174.381299][ T7746] loop2: detected capacity change from 0 to 4096 [ 174.530657][ T7746] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 174.566035][ T7729] loop6: detected capacity change from 0 to 40427 [ 174.599105][ T7729] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 174.629636][ T7729] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 174.651131][ T988] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 174.679493][ T7729] F2FS-fs (loop6): invalid crc value [ 174.879048][ T988] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 174.920117][ T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.986068][ T988] usb 2-1: config 0 descriptor?? [ 175.024091][ T988] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 175.051760][ T7729] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 175.134224][ T7729] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 175.154987][ T7729] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 175.715794][ T7766] loop2: detected capacity change from 0 to 128 [ 175.788847][ T7766] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 175.824518][ T7766] hpfs: filesystem error: improperly stopped [ 175.840606][ T7766] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 175.863294][ T7766] hpfs: You really don't want any checks? You are crazy... [ 175.892482][ T988] usb 2-1: USB disconnect, device number 3 [ 175.907816][ T7766] hpfs: hpfs_map_sector(): read error [ 175.945423][ T7766] hpfs: code page support is disabled [ 175.976111][ T7766] hpfs: hpfs_map_4sectors(): unaligned read [ 176.001338][ T7766] hpfs: hpfs_map_4sectors(): unaligned read [ 176.029508][ T7766] hpfs: filesystem error: unable to find root dir [ 176.545417][ T7783] bridge0: entered allmulticast mode [ 176.797621][ T7770] loop7: detected capacity change from 0 to 32768 [ 176.838950][ T7791] ipvlan0: entered allmulticast mode [ 176.868762][ T7791] veth0_vlan: entered allmulticast mode [ 176.884377][ T7770] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 176.918649][ T7791] team0: Device ipvlan0 failed to register rx_handler [ 177.140824][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.588'. [ 177.158236][ T7802] program syz.1.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.284342][ T5772] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 177.344507][ T6611] ocfs2: Unmounting device (7,7) on (node local) [ 177.486965][ T5772] usb 7-1: config 0 has no interfaces? [ 177.513058][ T5772] usb 7-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 177.553001][ T5772] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.589879][ T5772] usb 7-1: config 0 descriptor?? [ 177.842557][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.873783][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.904103][ T5862] usb 7-1: USB disconnect, device number 3 [ 178.031251][ T5772] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 178.213249][ T5772] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.248153][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 178.269955][ T5772] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.301160][ T5772] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 178.320558][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.345906][ T5772] usb 4-1: config 0 descriptor?? [ 178.351336][ T5862] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 178.414739][ T7830] loop2: detected capacity change from 0 to 512 [ 178.470212][ T7830] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 178.506506][ T7830] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.601: corrupted in-inode xattr: e_value size too large [ 178.525398][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 178.526923][ T7830] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.546407][ T5862] usb 7-1: config index 0 descriptor too short (expected 72, got 36) [ 178.563828][ T5862] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 178.579228][ T7830] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.601: couldn't read orphan inode 15 (err -117) [ 178.591101][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 178.591124][ C0] EXT4-fs (loop2): initial error at time 1781481210: ext4_iget_extra_inode:5128: inode 15 [ 178.591162][ C0] EXT4-fs (loop2): last error at time 1781481210: ext4_iget_extra_inode:5128: inode 15 [ 178.621359][ T7830] loop2: lost filesystem error report for type 5 error -117 [ 178.634048][ T5862] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 178.634166][ T7838] loop1: detected capacity change from 0 to 256 [ 178.645114][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.669197][ T7830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.713389][ T988] usb 4-1: USB disconnect, device number 6 [ 178.724093][ T5862] usb 7-1: Product: syz [ 178.748333][ T5862] usb 7-1: Manufacturer: syz [ 178.769183][ T5862] usb 7-1: SerialNumber: syz [ 178.949598][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.975045][ T7846] loop7: detected capacity change from 0 to 24 [ 179.231433][ T5862] usb 7-1: USB disconnect, device number 4 [ 179.428036][ T7857] loop7: detected capacity change from 0 to 256 [ 179.450357][ T7860] loop3: detected capacity change from 0 to 64 [ 179.614452][ T7863] loop2: detected capacity change from 0 to 1024 [ 179.640971][ T7860] syz.3.614: attempt to access beyond end of device [ 179.640971][ T7860] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 179.694351][ T7860] buffer_io_error: 138 callbacks suppressed [ 179.694370][ T7860] Buffer I/O error on dev loop3, logical block 512, async page read [ 179.704974][ T7863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.710847][ T7860] syz.3.614: attempt to access beyond end of device [ 179.710847][ T7860] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 179.735078][ T7860] Buffer I/O error on dev loop3, logical block 56576, async page read [ 179.756775][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.618'. [ 179.784006][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.618'. [ 179.991121][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 180.065319][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.182076][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 180.231490][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 180.265319][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.343532][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 180.377472][ T10] pvrusb2: ********** [ 180.398364][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 180.410117][ T10] pvrusb2: Important functionality might not be entirely working. [ 180.457795][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 180.497656][ T10] pvrusb2: ********** [ 180.504664][ T7888] netlink: 64 bytes leftover after parsing attributes in process `syz.2.628'. [ 180.542868][ T2360] pvrusb2: Invalid write control endpoint [ 180.561117][ T7892] loop3: detected capacity change from 0 to 256 [ 180.576395][ T7892] exfat: Deprecated parameter 'utf8' [ 180.616732][ T7896] loop1: detected capacity change from 0 to 512 [ 180.619856][ T7892] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 180.804456][ T7869] pvrusb2: Invalid write control endpoint [ 180.869357][ T7899] loop2: detected capacity change from 0 to 512 [ 180.870705][ T5862] usb 1-1: USB disconnect, device number 6 [ 180.943699][ T2360] pvrusb2: Invalid write control endpoint [ 180.950750][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 180.955435][ T7899] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 180.990613][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 181.028890][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 181.049819][ T7899] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.631: invalid indirect mapped block 1025 (level 0) [ 181.070634][ T2360] pvrusb2: Device being rendered inoperable [ 181.089004][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 181.100110][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 181.137925][ T2360] pvrusb2: Attached sub-driver cx25840 [ 181.144331][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 181.156281][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 181.167885][ T7899] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 181.171250][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 181.186922][ C0] EXT4-fs (loop2): initial error at time 1781481212: ext4_free_branches:1023: inode 11 [ 181.195404][ T7899] EXT4-fs (loop2): 1 truncate cleaned up [ 181.196620][ C0] EXT4-fs (loop2): last error at time 1781481212: ext4_free_branches:1023: inode 11 [ 181.217974][ T7907] netlink: 56 bytes leftover after parsing attributes in process `syz.1.634'. [ 181.280126][ T7899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.517077][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.554905][ T7912] loop1: detected capacity change from 0 to 4096 [ 181.634520][ T7914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.638'. [ 181.670499][ T7912] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 181.753140][ T7916] minix: block size(59136) > page size(4096) not supported by filesystem [ 181.988867][ T7921] netlink: 844 bytes leftover after parsing attributes in process `syz.1.640'. [ 182.085040][ T7894] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 182.115404][ T7894] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 182.167847][ T7894] F2FS-fs (loop7): invalid crc value [ 182.226146][ T7929] program syz.2.642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.463155][ T7894] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 182.522375][ T31] audit: type=1326 audit(1781481214.121:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7939 comm="syz.0.647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1897d9ce59 code=0x0 [ 182.578586][ T7894] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 182.604114][ T7894] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 182.639709][ T31] audit: type=1800 audit(1781481214.241:11): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.626" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 182.827153][ T6611] syz-executor: attempt to access beyond end of device [ 182.827153][ T6611] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 182.886535][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 182.886564][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 182.886579][ T6611] Call Trace: [ 182.886589][ T6611] [ 182.886599][ T6611] dump_stack_lvl+0xe8/0x150 [ 182.886632][ T6611] f2fs_stop_checkpoint+0x3c2/0x580 [ 182.886669][ T6611] f2fs_write_end_io+0x124b/0x1710 [ 182.886729][ T6611] __submit_merged_bio+0x258/0x6a0 [ 182.886768][ T6611] __submit_merged_write_cond+0x3c9/0x4e0 [ 182.886809][ T6611] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 182.886855][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.886898][ T6611] f2fs_write_data_pages+0x2a27/0x36f0 [ 182.886975][ T6611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.887027][ T6611] ? ktime_get+0x1f5/0x220 [ 182.887097][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.887127][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.887157][ T6611] ? __bfs+0x153/0x290 [ 182.887181][ T6611] ? __pfx_hlock_conflict+0x10/0x10 [ 182.887220][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.887269][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.887298][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.887327][ T6611] ? __lock_acquire+0x13e8/0x2cd0 [ 182.887383][ T6611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.887421][ T6611] do_writepages+0x338/0x560 [ 182.887450][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.887484][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.887520][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.887550][ T6611] ? do_raw_spin_unlock+0xf5/0x210 [ 182.887592][ T6611] filemap_fdatawrite+0x1e9/0x2f0 [ 182.887625][ T6611] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 182.887694][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.887727][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.887762][ T6611] ? do_raw_spin_unlock+0xf5/0x210 [ 182.887804][ T6611] f2fs_sync_dirty_inodes+0x30e/0x830 [ 182.887861][ T6611] f2fs_write_checkpoint+0xa50/0x2810 [ 182.887898][ T6611] ? __lock_acquire+0x683/0x2cd0 [ 182.887960][ T6611] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 182.887997][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.888069][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.888116][ T6611] kill_f2fs_super+0x2f6/0x700 [ 182.888161][ T6611] ? __pfx_kill_f2fs_super+0x10/0x10 [ 182.888212][ T6611] ? call_rcu+0x64b/0x8b0 [ 182.888241][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.888278][ T6611] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.888320][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.888365][ T6611] deactivate_locked_super+0xbc/0x130 [ 182.888403][ T6611] cleanup_mnt+0x3d3/0x460 [ 182.888446][ T6611] task_work_run+0x1d9/0x270 [ 182.888487][ T6611] ? __pfx_task_work_run+0x10/0x10 [ 182.888535][ T6611] exit_to_user_mode_loop+0x193/0x6b0 [ 182.888559][ T6611] ? rcu_is_watching+0x15/0xb0 [ 182.888592][ T6611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.888620][ T6611] do_syscall_64+0x353/0x580 [ 182.888645][ T6611] ? trace_irq_disable+0x3b/0x140 [ 182.888694][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.888721][ T6611] RIP: 0033:0x7f3c1f39e097 [ 182.888744][ T6611] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 182.888765][ T6611] RSP: 002b:00007ffdf54dbfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 182.888791][ T6611] RAX: 0000000000000000 RBX: 00007f3c1f4321ca RCX: 00007f3c1f39e097 [ 182.888808][ T6611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf54dc0a0 [ 182.888824][ T6611] RBP: 00007ffdf54dc0a0 R08: 00007ffdf54dd0a0 R09: 00000000ffffffff [ 182.888842][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf54dd130 [ 182.888858][ T6611] R13: 00007f3c1f4321ca R14: 000000000002c988 R15: 00007ffdf54dd170 [ 182.888897][ T6611] [ 183.262394][ T6611] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 183.270520][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 183.270548][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.270563][ T6611] Call Trace: [ 183.270571][ T6611] [ 183.270581][ T6611] dump_stack_lvl+0xe8/0x150 [ 183.270617][ T6611] f2fs_stop_checkpoint+0x3c2/0x580 [ 183.270653][ T6611] f2fs_write_end_io+0x124b/0x1710 [ 183.270709][ T6611] __submit_merged_bio+0x258/0x6a0 [ 183.270750][ T6611] __submit_merged_write_cond+0x3c9/0x4e0 [ 183.270791][ T6611] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 183.270836][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.270875][ T6611] f2fs_write_data_pages+0x2a27/0x36f0 [ 183.270947][ T6611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.270998][ T6611] ? ktime_get+0x1f5/0x220 [ 183.271071][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.271104][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.271133][ T6611] ? __bfs+0x153/0x290 [ 183.271158][ T6611] ? __pfx_hlock_conflict+0x10/0x10 [ 183.271196][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.271238][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.271274][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.271303][ T6611] ? __lock_acquire+0x13e8/0x2cd0 [ 183.271361][ T6611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.271399][ T6611] do_writepages+0x338/0x560 [ 183.271428][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.271460][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.271495][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.271523][ T6611] ? do_raw_spin_unlock+0xf5/0x210 [ 183.271566][ T6611] filemap_fdatawrite+0x1e9/0x2f0 [ 183.271599][ T6611] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 183.271669][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.271701][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.271736][ T6611] ? do_raw_spin_unlock+0xf5/0x210 [ 183.271778][ T6611] f2fs_sync_dirty_inodes+0x30e/0x830 [ 183.271834][ T6611] f2fs_write_checkpoint+0xa50/0x2810 [ 183.271871][ T6611] ? __lock_acquire+0x683/0x2cd0 [ 183.271933][ T6611] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 183.271970][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.272042][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.272089][ T6611] kill_f2fs_super+0x2f6/0x700 [ 183.272133][ T6611] ? __pfx_kill_f2fs_super+0x10/0x10 [ 183.272184][ T6611] ? call_rcu+0x64b/0x8b0 [ 183.272213][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.272243][ T6611] ? lockdep_hardirqs_on+0x7a/0x110 [ 183.272291][ T6611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.272337][ T6611] deactivate_locked_super+0xbc/0x130 [ 183.272374][ T6611] cleanup_mnt+0x3d3/0x460 [ 183.272421][ T6611] task_work_run+0x1d9/0x270 [ 183.272461][ T6611] ? __pfx_task_work_run+0x10/0x10 [ 183.272509][ T6611] exit_to_user_mode_loop+0x193/0x6b0 [ 183.272533][ T6611] ? rcu_is_watching+0x15/0xb0 [ 183.272565][ T6611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.272593][ T6611] do_syscall_64+0x353/0x580 [ 183.272617][ T6611] ? trace_irq_disable+0x3b/0x140 [ 183.272662][ T6611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.272688][ T6611] RIP: 0033:0x7f3c1f39e097 [ 183.272711][ T6611] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 183.272732][ T6611] RSP: 002b:00007ffdf54dbfe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 183.272757][ T6611] RAX: 0000000000000000 RBX: 00007f3c1f4321ca RCX: 00007f3c1f39e097 [ 183.272775][ T6611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf54dc0a0 [ 183.272791][ T6611] RBP: 00007ffdf54dc0a0 R08: 00007ffdf54dd0a0 R09: 00000000ffffffff [ 183.272808][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf54dd130 [ 183.272824][ T6611] R13: 00007f3c1f4321ca R14: 000000000002c988 R15: 00007ffdf54dd170 [ 183.272863][ T6611] [ 183.651910][ T6611] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 184.215138][ T7969] set_capacity_and_notify: 3 callbacks suppressed [ 184.215160][ T7969] loop2: detected capacity change from 0 to 512 [ 184.273167][ T7971] loop1: detected capacity change from 0 to 512 [ 184.309439][ T7969] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.656: corrupted xattr block 95: invalid header [ 184.377981][ T7971] EXT4-fs (loop1): Test dummy encryption mode enabled [ 184.390200][ T7969] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.391041][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 184.406696][ C0] EXT4-fs (loop2): initial error at time 1781481216: ext4_expand_extra_isize_ea:2810: inode 11 [ 184.417122][ C0] EXT4-fs (loop2): last error at time 1781481216: ext4_expand_extra_isize_ea:2810: inode 11 [ 184.417821][ T7969] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.656: bg 0: block 7: invalid block bitmap [ 184.482846][ T7969] loop2: lost filesystem error report for type 5 error -117 [ 184.491389][ T7969] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 184.497190][ T7971] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.512222][ T7969] loop2: lost filesystem error report for type 5 error -117 [ 184.555079][ T7969] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.656: corrupted xattr block 95: invalid header [ 184.595510][ T7969] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.625360][ T7969] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 184.673990][ T7969] EXT4-fs (loop2): 1 orphan inode deleted [ 184.698160][ T7971] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 184.735597][ T7969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.764735][ T7971] EXT4-fs error (device loop1): __ext4_add_entry:2412: inode #2: comm syz.1.657: Directory hole found for htree leaf block 0 [ 184.813248][ T7971] EXT4-fs (loop1): Remounting filesystem read-only [ 184.911100][ T5862] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 185.010991][ T5632] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 185.039412][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.108548][ T5862] usb 7-1: Using ep0 maxpacket: 16 [ 185.121355][ T5862] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.143869][ T5862] usb 7-1: config 0 interface 0 has no altsetting 0 [ 185.145600][ T7985] loop7: detected capacity change from 0 to 128 [ 185.158128][ T5862] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 185.183112][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.223520][ T7985] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 185.247021][ T7987] tun0: tun_chr_ioctl cmd 1074025673 [ 185.257682][ T5862] usb 7-1: config 0 descriptor?? [ 185.276904][ T7985] hpfs: filesystem error: improperly stopped [ 185.287874][ T7985] hpfs: You really don't want any checks? You are crazy... [ 185.314324][ T7985] hpfs: hpfs_map_sector(): read error [ 185.328789][ T7985] hpfs: code page support is disabled [ 185.340133][ T7985] hpfs: hpfs_map_4sectors(): unaligned read [ 185.348777][ T7985] hpfs: hpfs_map_4sectors(): unaligned read [ 185.357444][ T7985] hpfs: filesystem error: unable to find root dir [ 185.376359][ T7985] hpfs: hpfs_map_4sectors(): unaligned read [ 185.433444][ T7985] hpfs: hpfs_map_sector(): read error [ 185.447871][ T7985] hpfs: hpfs_map_sector(): read error [ 185.496930][ T7991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.664'. [ 185.802434][ T7999] loop1: detected capacity change from 0 to 1024 [ 185.856789][ T8001] loop0: detected capacity change from 0 to 2048 [ 185.925492][ T988] usb 7-1: USB disconnect, device number 5 [ 185.940684][ T8001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.983599][ T8001] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.025357][ T8001] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.669: bg 0: block 345: padding at end of block bitmap is not set [ 186.049537][ T8001] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 1 with error 28 [ 186.066436][ T8001] EXT4-fs (loop0): This should not happen!! Data will be lost [ 186.066436][ T8001] [ 186.076837][ T8001] EXT4-fs (loop0): Total free blocks count 0 [ 186.083042][ T8001] EXT4-fs (loop0): Free/Dirty block details [ 186.089175][ T8001] EXT4-fs (loop0): free_blocks=0 [ 186.096254][ T8001] EXT4-fs (loop0): dirty_blocks=16 [ 186.101853][ T8001] EXT4-fs (loop0): Block reservation details [ 186.109181][ T8001] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 186.256830][ T5631] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 186.277803][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.714530][ T8025] loop6: detected capacity change from 0 to 512 [ 186.794749][ T8025] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.679: bad orphan inode 15 [ 186.843903][ T8025] loop6: lost filesystem error report for type 5 error -117 [ 186.844352][ T8025] ext4_test_bit(bit=14, block=18) = 1 [ 186.851776][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 186.851798][ C0] EXT4-fs (loop6): initial error at time 1781481218: ext4_orphan_get:1423 [ 186.851826][ C0] EXT4-fs (loop6): last error at time 1781481218: ext4_orphan_get:1423 [ 186.885800][ T8025] is_bad_inode(inode)=0 [ 186.889989][ T8025] NEXT_ORPHAN(inode)=1023 [ 186.895480][ T8025] max_ino=32 [ 186.898709][ T8025] i_nlink=0 [ 186.912392][ T8025] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2972: inode #15: comm syz.6.679: corrupted xattr block 19: bad e_name length [ 186.999399][ T8025] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.999925][ T8025] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 187.083189][ T8025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 187.134473][ T8025] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.174655][ T8043] loop2: detected capacity change from 0 to 512 [ 187.206878][ T8043] EXT4-fs: Ignoring removed nobh option [ 187.236297][ T8025] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 3: comm syz.6.679: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=4096, size=4096 fake=0 [ 187.266503][ T8043] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.316407][ T8043] EXT4-fs (loop2): 1 truncate cleaned up [ 187.333229][ T8043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.377314][ T31] audit: type=1804 audit(1781481218.981:12): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.686" name="/newroot/138/file2/file2" dev="loop2" ino=16 res=1 errno=0 [ 187.470810][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.487263][ T6151] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 187.596044][ T8051] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 187.596044][ T8051] The task syz.0.689 (8051) triggered the difference, watch for misbehavior. [ 188.000582][ T8066] loop2: detected capacity change from 0 to 512 [ 188.011293][ T5644] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.034283][ T8066] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.077534][ T8066] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 188.091903][ T8066] System zones: 1-12 [ 188.116916][ T8066] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.695: bad orphan inode 16 [ 188.155060][ T8066] loop2: lost filesystem error report for type 5 error -117 [ 188.155614][ T8066] ext4_test_bit(bit=15, block=4) = 0 [ 188.163027][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 188.163050][ C0] EXT4-fs (loop2): initial error at time 1781481219: ext4_orphan_get:1423 [ 188.163078][ C0] EXT4-fs (loop2): last error at time 1781481219: ext4_orphan_get:1423 [ 188.201234][ T5644] usb 2-1: Using ep0 maxpacket: 8 [ 188.207296][ T8066] EXT4-fs (loop2): 1 orphan inode deleted [ 188.215023][ T5644] usb 2-1: config 0 has no interfaces? [ 188.220827][ T5644] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.242298][ T8066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.254841][ T5644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.276973][ T5644] usb 2-1: config 0 descriptor?? [ 188.369589][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.570126][ T5773] usb 2-1: USB disconnect, device number 4 [ 188.695853][ T1006] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.730053][ T1006] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.766359][ T1006] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.799976][ T1006] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.161439][ T8100] Bluetooth: MGMT ver 1.23 [ 189.386509][ T8108] loop3: detected capacity change from 0 to 128 [ 189.423693][ T8108] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 189.472608][ T8108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.677549][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 190.022386][ T8124] overlay: filesystem on ./bus not supported as upperdir [ 190.304479][ T8129] loop7: detected capacity change from 0 to 512 [ 190.333021][ T8129] EXT4-fs: Ignoring removed i_version option [ 190.357258][ T8129] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 190.368356][ T8131] nr0: tun_chr_ioctl cmd 1074025677 [ 190.399461][ T8131] nr0: linktype set to 805 [ 190.419310][ T8129] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 190.461027][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 190.467478][ C0] EXT4-fs (loop7): initial error at time 1781481222: ext4_mb_generate_buddy:1317 [ 190.476656][ C0] EXT4-fs (loop7): last error at time 1781481222: ext4_mb_generate_buddy:1317 [ 190.514906][ T8129] EXT4-fs (loop7): 1 truncate cleaned up [ 190.593540][ T8129] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.695064][ T8129] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.7.726: path /63/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 190.825221][ T8121] loop6: detected capacity change from 0 to 40427 [ 190.860775][ T8121] F2FS-fs (loop6): Image doesn't support compression [ 190.894392][ T8121] F2FS-fs (loop6): build fault injection rate: 690 [ 190.897877][ T8148] overlayfs: workdir and upperdir must reside under the same mount [ 190.906406][ T8121] F2FS-fs (loop6): build fault injection type: 0x4 [ 190.934282][ T6611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.966487][ T8121] F2FS-fs (loop6): invalid crc value [ 191.347708][ T8121] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 191.446782][ T8121] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 191.492647][ T8163] loop2: detected capacity change from 0 to 2048 [ 191.573884][ T8163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.719433][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.330566][ T8196] loop7: detected capacity change from 0 to 256 [ 192.781190][ T5772] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 192.891148][ T5644] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 192.923826][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 192.951094][ T5772] usb 2-1: Using ep0 maxpacket: 16 [ 192.980840][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.022909][ T5772] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 193.050477][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.076860][ T5644] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 193.125484][ T5772] usb 2-1: config 0 descriptor?? [ 193.142698][ T5644] usb 1-1: config 0 has no interface number 0 [ 193.174195][ T5644] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.237090][ T5644] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 193.268750][ T5644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.278909][ T5644] usb 1-1: Product: syz [ 193.293360][ T5644] usb 1-1: Manufacturer: syz [ 193.308084][ T5644] usb 1-1: SerialNumber: syz [ 193.330254][ T5644] usb 1-1: config 0 descriptor?? [ 193.463586][ T5644] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 193.494470][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.577210][ T5773] usb 1-1: USB disconnect, device number 7 [ 193.607430][ T5772] mcp2221 0003:04D8:00DD.0009: item fetching failed at offset 1/5 [ 193.619807][ T5773] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 193.635480][ T5772] mcp2221 0003:04D8:00DD.0009: can't parse reports [ 193.648632][ T5772] mcp2221 0003:04D8:00DD.0009: probe with driver mcp2221 failed with error -22 [ 193.769501][ T8228] netlink: 72 bytes leftover after parsing attributes in process `syz.2.766'. [ 193.780489][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'. [ 193.789492][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 193.990186][ T8234] loop2: detected capacity change from 0 to 2048 [ 194.013045][ T8234] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 194.029649][ T8234] NILFS (loop2): mounting unchecked fs [ 194.032853][ T988] usb 2-1: USB disconnect, device number 5 [ 194.054373][ T5639] udevd[5639]: incorrect nilfs2 checksum on /dev/loop2 [ 194.092985][ T8234] NILFS (loop2): recovery complete [ 194.126191][ T8237] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.769733][ T8260] netlink: 20 bytes leftover after parsing attributes in process `syz.7.780'. [ 194.972767][ T8266] tun0: tun_chr_ioctl cmd 1074812117 [ 195.147725][ T8275] loop7: detected capacity change from 0 to 256 [ 195.171298][ T5637] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 195.178529][ T5643] Bluetooth: hci6: command 0x1003 tx timeout [ 195.242996][ T8275] FAT-fs (loop7): Directory bread(block 64) failed [ 195.324618][ T8275] FAT-fs (loop7): Directory bread(block 65) failed [ 195.369462][ T8275] FAT-fs (loop7): Directory bread(block 66) failed [ 195.421084][ T8275] FAT-fs (loop7): Directory bread(block 67) failed [ 195.436555][ T8275] FAT-fs (loop7): Directory bread(block 68) failed [ 195.470955][ T8275] FAT-fs (loop7): Directory bread(block 69) failed [ 195.512608][ T8275] FAT-fs (loop7): Directory bread(block 70) failed [ 195.546295][ T8275] FAT-fs (loop7): Directory bread(block 71) failed [ 195.573452][ T8275] FAT-fs (loop7): Directory bread(block 72) failed [ 195.601583][ T8275] FAT-fs (loop7): Directory bread(block 73) failed [ 195.619549][ T8281] loop1: detected capacity change from 0 to 512 [ 195.627171][ T8250] loop3: detected capacity change from 0 to 32768 [ 195.659564][ T8281] EXT4-fs warning (device loop1): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 195.729037][ T8250] XFS (loop3): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 195.866741][ T31] audit: type=1800 audit(1781481227.471:13): pid=8275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.787" name=CC7766D4 dev="loop7" ino=1048641 res=0 errno=0 [ 195.893822][ T8250] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.530545][ T8307] loop0: detected capacity change from 0 to 256 [ 196.570768][ T8310] ªªªªªª: renamed from vlan0 (while UP) [ 196.609003][ T8307] FAT-fs (loop0): Directory bread(block 64) failed [ 196.634314][ T8307] FAT-fs (loop0): Directory bread(block 65) failed [ 196.676636][ T8307] FAT-fs (loop0): Directory bread(block 66) failed [ 196.682674][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.802'. [ 196.716085][ T8307] FAT-fs (loop0): Directory bread(block 67) failed [ 196.734209][ T8307] FAT-fs (loop0): Directory bread(block 68) failed [ 196.763939][ T8307] FAT-fs (loop0): Directory bread(block 69) failed [ 196.801718][ T8307] FAT-fs (loop0): Directory bread(block 70) failed [ 196.832411][ T8307] FAT-fs (loop0): Directory bread(block 71) failed [ 196.857035][ T8307] FAT-fs (loop0): Directory bread(block 72) failed [ 196.896094][ T8307] FAT-fs (loop0): Directory bread(block 73) failed [ 197.454285][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 197.487388][ T8303] loop1: detected capacity change from 0 to 32768 [ 197.509985][ T8303] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.797 (8303) [ 197.593493][ T8303] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.624752][ T8303] BTRFS info (device loop1): using crc32c checksum algorithm [ 197.736705][ T8303] BTRFS info (device loop1): enabling ssd optimizations [ 197.750400][ T8303] BTRFS info (device loop1): turning on flush-on-commit [ 197.775005][ T8303] BTRFS info (device loop1): enabling free space tree [ 197.809198][ T8303] BTRFS info (device loop1): enabling auto defrag [ 197.842562][ T8303] BTRFS info (device loop1): use lzo compression, level 1 [ 197.882667][ T8303] BTRFS info (device loop1): max_inline set to 4096 [ 197.976058][ T8303] BTRFS critical (device loop1 state E): emergency shutdown [ 198.138011][ T5632] BTRFS info (device loop1 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.316847][ T8364] netlink: 104 bytes leftover after parsing attributes in process `syz.2.818'. [ 198.349209][ T8361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.552770][ T8370] loop2: detected capacity change from 0 to 128 [ 199.095049][ T8373] loop3: detected capacity change from 0 to 32768 [ 199.145752][ T8373] [ 199.145752][ T8373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.145752][ T8373] [ 199.195924][ T8373] [ 199.195924][ T8373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.195924][ T8373] [ 199.206726][ T8373] [ 199.206726][ T8373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.206726][ T8373] [ 199.218225][ T8373] [ 199.218225][ T8373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.218225][ T8373] [ 199.228844][ T8373] [ 199.228844][ T8373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.228844][ T8373] [ 199.240421][ T8373] [ 199.240421][ T8373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.240421][ T8373] [ 199.306157][ T117] [ 199.306157][ T117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.306157][ T117] [ 199.384904][ T5633] [ 199.384904][ T5633] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.384904][ T5633] [ 199.433051][ T5633] [ 199.433051][ T5633] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.433051][ T5633] [ 199.469687][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 199.695270][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.828'. [ 199.927623][ T8393] veth0: entered promiscuous mode [ 199.961491][ T8391] veth0: left promiscuous mode [ 200.006928][ T8397] netlink: 36 bytes leftover after parsing attributes in process `syz.7.832'. [ 200.035096][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.7.832'. [ 200.064492][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.832'. [ 200.480428][ T8410] tun0: tun_chr_ioctl cmd 1074025677 [ 200.502186][ T8410] tun0: linktype set to 823 [ 200.884326][ T8423] loop2: detected capacity change from 0 to 512 [ 201.128012][ T8423] EXT4-fs (loop2): 1 orphan inode deleted [ 201.141403][ T5811] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 201.157135][ T8423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.194949][ T5811] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 201.220114][ T8423] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.353068][ T8423] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 201.404689][ T8433] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 201.509047][ T8433] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 201.562106][ T8438] netlink: 'syz.7.849': attribute type 1 has an invalid length. [ 201.581369][ T8438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.740703][ T8443] vxcan0: tx address claim with different name [ 201.772006][ T8414] loop1: detected capacity change from 0 to 32768 [ 201.804268][ T8414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.840 (8414) [ 201.809816][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.920493][ T8414] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.957767][ T8414] BTRFS info (device loop1): using sha256 checksum algorithm [ 202.224898][ T8414] BTRFS info (device loop1): enabling ssd optimizations [ 202.267953][ T8414] BTRFS info (device loop1): turning on async discard [ 202.281110][ T8414] BTRFS info (device loop1): enabling free space tree [ 202.311419][ T5772] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 202.330887][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 202.413052][ T24] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 202.431702][ T8473] loop3: detected capacity change from 0 to 256 [ 202.483186][ T5632] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.515940][ T5772] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.564899][ T5772] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.631068][ T5772] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.637928][ T8474] fido_id[8474]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.688464][ T5772] usb 7-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 202.718925][ T5772] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.780855][ T5772] usb 7-1: config 0 descriptor?? [ 202.979080][ T8478] loop3: detected capacity change from 0 to 512 [ 203.021682][ T8482] loop2: detected capacity change from 0 to 256 [ 203.105531][ T8478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.244538][ T5772] hid (null): report_id 0 is invalid [ 203.273573][ T5772] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 203.281245][ T5772] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 203.288665][ T5772] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 203.318924][ T5772] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 203.342717][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.376660][ T5772] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 203.432191][ T5772] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 203.474871][ T5772] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 203.512407][ T5772] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 203.565386][ T5772] magicmouse 0003:05AC:0324.000B: unknown main item tag 0x0 [ 203.595725][ T8483] mmap: syz.7.856 (8483) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 203.619416][ T5772] magicmouse 0003:05AC:0324.000B: report_id 0 is invalid [ 203.660832][ T5772] magicmouse 0003:05AC:0324.000B: item 0 0 1 8 parsing failed [ 203.691845][ T5772] magicmouse 0003:05AC:0324.000B: magicmouse hid parse failed [ 203.723424][ T5772] magicmouse 0003:05AC:0324.000B: probe with driver magicmouse failed with error -22 [ 203.798892][ T5772] usb 7-1: USB disconnect, device number 6 [ 203.983807][ T8500] loop2: detected capacity change from 0 to 2048 [ 204.135895][ T8500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.244753][ T8504] netlink: 20 bytes leftover after parsing attributes in process `syz.6.871'. [ 204.261704][ T8500] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.527882][ T5803] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set [ 204.600334][ T5803] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 204.628243][ T5803] EXT4-fs (loop2): This should not happen!! Data will be lost [ 204.628243][ T5803] [ 204.654023][ T5803] EXT4-fs (loop2): Total free blocks count 0 [ 204.669432][ T5803] EXT4-fs (loop2): Free/Dirty block details [ 204.676386][ T5803] EXT4-fs (loop2): free_blocks=0 [ 204.690238][ T5803] EXT4-fs (loop2): dirty_blocks=16 [ 204.709763][ T5803] EXT4-fs (loop2): Block reservation details [ 204.738951][ T5803] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 204.776061][ T5634] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 204.851657][ T5634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.032485][ T8519] loop1: detected capacity change from 0 to 512 [ 205.134817][ T8519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.415950][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.797673][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.7.885'. [ 206.191878][ T5772] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 206.371650][ T5772] usb 1-1: Using ep0 maxpacket: 16 [ 206.387605][ T8557] loop7: detected capacity change from 0 to 64 [ 206.392062][ T5772] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.436506][ T5772] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 206.479215][ T5772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.552770][ T5772] usb 1-1: config 0 descriptor?? [ 206.609442][ T8535] loop2: detected capacity change from 0 to 32768 [ 206.678733][ T8535] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 206.777153][ T8535] XFS (loop2): Ending clean mount [ 206.791380][ T5773] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 206.852169][ T8541] loop3: detected capacity change from 0 to 32768 [ 206.955456][ T8541] JBD2: Ignoring recovery information on journal [ 207.002840][ T5773] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.004650][ T5634] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.015757][ T5773] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.033471][ T5773] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 207.042998][ T5773] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.067113][ T5772] hid-led 0003:0FC5:B080.000C: reserved main item tag 0xd [ 207.079304][ T5773] usb 7-1: config 0 descriptor?? [ 207.227922][ T8541] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 207.350124][ T8578] netlink: 790 bytes leftover after parsing attributes in process `syz.2.897'. [ 207.393436][ T8560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.422472][ T5772] hid-led 0003:0FC5:B080.000C: probe with driver hid-led failed with error -71 [ 207.433956][ T8560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.475375][ T5772] usb 1-1: USB disconnect, device number 8 [ 207.707633][ T31] audit: type=1326 audit(1781481239.311:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.899" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17559ce59 code=0x7ffc0000 [ 207.736960][ T5773] hid (null): unknown global tag 0xc [ 207.762270][ T5633] ocfs2: Unmounting device (7,3) on (node local) [ 207.766801][ T5773] hid (null): bogus close delimiter [ 207.789822][ T31] audit: type=1326 audit(1781481239.311:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.899" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17559ce59 code=0x7ffc0000 [ 207.825917][ T5773] hid (null): invalid report_count 32155 [ 207.849285][ T8583] loop2: detected capacity change from 0 to 2048 [ 207.850367][ T5773] hid (null): unknown global tag 0xd [ 207.885217][ T31] audit: type=1326 audit(1781481239.351:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.899" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17559ce59 code=0x7ffc0000 [ 207.911371][ T5773] hid_parser_main: 84 callbacks suppressed [ 207.911394][ T5773] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 207.942554][ T5773] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 207.959734][ T5773] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 207.989530][ T31] audit: type=1326 audit(1781481239.351:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.899" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17559ce59 code=0x7ffc0000 [ 208.019250][ T8583] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.020120][ T5773] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 208.048695][ T8572] loop1: detected capacity change from 0 to 32768 [ 208.084042][ T5773] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 208.100773][ T8572] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.896 (8572) [ 208.123703][ T5773] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 208.132569][ T31] audit: type=1326 audit(1781481239.361:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.899" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff17559ce59 code=0x7ffc0000 [ 208.174872][ T5773] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 208.201987][ T5773] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 208.217189][ T5773] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 208.224580][ T31] audit: type=1326 audit(1781481239.361:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.899" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff17559cbc2 code=0x7ffc0000 [ 208.256621][ T5773] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 208.278112][ T5773] asus 0003:0B05:1ABE.000D: unknown global tag 0xc [ 208.290736][ T5773] asus 0003:0B05:1ABE.000D: item 0 2 1 12 parsing failed [ 208.298135][ T8572] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.310632][ T5773] asus 0003:0B05:1ABE.000D: Asus hid parse failed: -22 [ 208.324312][ T8572] BTRFS info (device loop1): using sha256 checksum algorithm [ 208.339969][ T31] audit: type=1326 audit(1781481239.391:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.899" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff17555d68e code=0x7ffc0000 [ 208.386929][ T5773] asus 0003:0B05:1ABE.000D: probe with driver asus failed with error -22 [ 208.457127][ T5773] usb 7-1: USB disconnect, device number 7 [ 208.467746][ T31] audit: type=1326 audit(1781481239.451:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.899" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff17559cc87 code=0x7ffc0000 [ 208.571116][ T31] audit: type=1326 audit(1781481239.451:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.899" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff17555d68e code=0x7ffc0000 [ 208.640130][ T8572] BTRFS info (device loop1): enabling ssd optimizations [ 208.691602][ T31] audit: type=1326 audit(1781481239.451:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.2.899" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff17559caeb code=0x7ffc0000 [ 208.693300][ T8572] BTRFS info (device loop1): turning on async discard [ 208.751229][ T8572] BTRFS info (device loop1): enabling free space tree [ 208.990357][ T5632] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 209.394322][ T8631] loop7: detected capacity change from 0 to 256 [ 210.442293][ T8616] loop2: detected capacity change from 0 to 32768 [ 210.500419][ T8616] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 210.712148][ T8616] XFS (loop2): Ending clean mount [ 210.845878][ T8616] XFS (loop2): Quotacheck needed: Please wait. [ 210.940422][ T5653] Bluetooth: hci0: command 0x0406 tx timeout [ 210.940495][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 210.950923][ T5653] Bluetooth: hci1: command 0x0406 tx timeout [ 210.957768][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 211.092430][ T8616] XFS (loop2): Quotacheck: Done. [ 211.220696][ T5634] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.471149][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.7.934'. [ 211.701716][ T8693] loop1: detected capacity change from 0 to 64 [ 211.744229][ T8693] hfs: can't find a HFS filesystem on dev loop1 [ 211.804566][ T8695] loop7: detected capacity change from 0 to 16 [ 211.836139][ T8695] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 212.144281][ T5881] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 212.145984][ T8705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.944'. [ 212.318454][ T5881] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.345699][ T5881] usb 1-1: config 0 has no interface number 0 [ 212.369549][ T5881] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 212.405896][ T5881] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 212.435676][ T5881] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 212.507543][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.514601][ T8715] batman_adv: batadv0: Adding interface: macvtap1 [ 212.539616][ T8715] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.569895][ T5881] usb 1-1: config 0 descriptor?? [ 212.579694][ T8697] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 212.616855][ T5881] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 212.645566][ T8715] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 212.824205][ T8719] tap0: tun_chr_ioctl cmd 1074025672 [ 212.840472][ T8719] tap0: ignored: set checksum disabled [ 212.858186][ T5881] usb 1-1: USB disconnect, device number 9 [ 213.157767][ T8730] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.956'. [ 213.595330][ T8741] ALSA: mixer_oss: invalid OSS volume '' [ 213.625395][ T8741] ALSA: mixer_oss: invalid OSS volume '`' [ 213.650094][ T8741] ALSA: mixer_oss: invalid OSS volume '' [ 214.091197][ T5773] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 214.212690][ T8764] netlink: 'syz.7.971': attribute type 12 has an invalid length. [ 214.266085][ T5773] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 214.294550][ T8764] netlink: 132 bytes leftover after parsing attributes in process `syz.7.971'. [ 214.332707][ T5773] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 214.367289][ T5773] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 214.401617][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.420084][ T8768] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 214.421052][ T5773] usb 3-1: Product: syz [ 214.456333][ T5773] usb 3-1: Manufacturer: syz [ 214.476166][ T5773] usb 3-1: SerialNumber: syz [ 214.504345][ T5773] usb 3-1: config 0 descriptor?? [ 214.529842][ T8753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.541419][ T8753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.691433][ T8779] program syz.1.978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.802591][ T8753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.809889][ T8753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 215.262028][ T5773] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 215.362561][ T8800] loop1: detected capacity change from 0 to 2048 [ 215.400547][ T8800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.421812][ T8800] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.461301][ T5773] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 215.489284][ T5773] usb 3-1: USB disconnect, device number 3 [ 215.508755][ T8800] EXT4-fs (loop1): shut down requested (1) [ 215.688450][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.998511][ T8783] loop0: detected capacity change from 0 to 40427 [ 216.033453][ T8783] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 216.068535][ T8783] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 216.128534][ T8783] F2FS-fs (loop0): Image doesn't support compression [ 216.164819][ T8783] F2FS-fs (loop0): build fault injection rate: 690 [ 216.197665][ T8783] F2FS-fs (loop0): build fault injection type: 0x35f7 [ 216.237551][ T8783] F2FS-fs (loop0): invalid crc value [ 216.599771][ T8783] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 216.652318][ T8783] F2FS-fs (loop0): Start checkpoint disabled! [ 216.746329][ T8840] loop1: detected capacity change from 0 to 8 [ 216.757608][ T8783] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 216.800628][ T8783] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 216.839927][ T8783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 216.985551][ T8783] F2FS-fs (loop0): access invalid blkaddr:4043309056 [ 217.009294][ T8783] CPU: 1 UID: 0 PID: 8783 Comm: syz.0.980 Not tainted syzkaller #0 PREEMPT(full) [ 217.009325][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 217.009339][ T8783] Call Trace: [ 217.009348][ T8783] [ 217.009357][ T8783] dump_stack_lvl+0xe8/0x150 [ 217.009388][ T8783] __f2fs_is_valid_blkaddr+0xe04/0x1470 [ 217.009431][ T8783] f2fs_map_blocks+0xe02/0x45c0 [ 217.009509][ T8783] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 217.009537][ T8783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.009567][ T8783] ? xa_load+0x60/0x210 [ 217.009595][ T8783] ? xa_load+0x60/0x210 [ 217.009619][ T8783] ? xa_load+0x1db/0x210 [ 217.009646][ T8783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.009671][ T8783] ? readahead_folio+0x2da/0x430 [ 217.009708][ T8783] f2fs_mpage_readpages+0x1848/0x2b80 [ 217.009754][ T8783] ? xas_create+0x1941/0x1bd0 [ 217.009799][ T8783] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 217.009835][ T8783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.009863][ T8783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.009887][ T8783] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 217.009941][ T8783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.009965][ T8783] ? f2fs_readahead+0x226/0x4d0 [ 217.009994][ T8783] ? blk_start_plug+0x6e/0x1b0 [ 217.010024][ T8783] read_pages+0x193/0x5a0 [ 217.010059][ T8783] ? __pfx_read_pages+0x10/0x10 [ 217.010099][ T8783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.010136][ T8783] page_cache_ra_unbounded+0x786/0xa00 [ 217.010207][ T8783] page_cache_ra_order+0xb5a/0xf50 [ 217.010260][ T8783] f2fs_readdir+0x4c0/0xad0 [ 217.010313][ T8783] ? __pfx_f2fs_readdir+0x10/0x10 [ 217.010350][ T8783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.010386][ T8783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.010410][ T8783] ? down_read_killable+0x1bb/0x340 [ 217.010435][ T8783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.010465][ T8783] iterate_dir+0x2e2/0x4d0 [ 217.010507][ T8783] __se_sys_getdents64+0xf1/0x280 [ 217.010532][ T8783] ? __pfx___se_sys_getdents64+0x10/0x10 [ 217.010553][ T8783] ? __pfx_filldir64+0x10/0x10 [ 217.010579][ T8783] ? rcu_is_watching+0x15/0xb0 [ 217.010611][ T8783] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.010652][ T8783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.010681][ T8783] do_syscall_64+0x174/0x580 [ 217.010705][ T8783] ? trace_irq_disable+0x3b/0x140 [ 217.010751][ T8783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.010782][ T8783] RIP: 0033:0x7f1897d9ce59 [ 217.010806][ T8783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.010827][ T8783] RSP: 002b:00007f1898cb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 217.010853][ T8783] RAX: ffffffffffffffda RBX: 00007f1898015fa0 RCX: 00007f1897d9ce59 [ 217.010873][ T8783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 217.010888][ T8783] RBP: 00007f1897e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 217.010904][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.010920][ T8783] R13: 00007f1898016038 R14: 00007f1898015fa0 R15: 00007fff219eaf28 [ 217.010960][ T8783] [ 217.015046][ T8849] Set syz1 is full, maxelem 1 reached [ 217.041757][ T8783] syz.0.980: attempt to access beyond end of device [ 217.041757][ T8783] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 217.358349][ T8783] syz.0.980: attempt to access beyond end of device [ 217.358349][ T8783] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 217.416317][ T8857] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1009'. [ 217.474790][ T5803] kworker/u8:8: attempt to access beyond end of device [ 217.474790][ T5803] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 217.525924][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 217.525957][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 217.525973][ T5803] Workqueue: writeback wb_workfn (flush-7:0) [ 217.526023][ T5803] Call Trace: [ 217.526033][ T5803] [ 217.526043][ T5803] dump_stack_lvl+0xe8/0x150 [ 217.526074][ T5803] f2fs_stop_checkpoint+0x3c2/0x580 [ 217.526112][ T5803] f2fs_write_end_io+0x124b/0x1710 [ 217.526172][ T5803] __submit_merged_bio+0x258/0x6a0 [ 217.526212][ T5803] __submit_merged_write_cond+0x3c9/0x4e0 [ 217.526253][ T5803] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 217.526306][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.526347][ T5803] f2fs_write_data_pages+0x2a27/0x36f0 [ 217.526382][ T5803] ? f2fs_build_free_nids+0xd3/0x1890 [ 217.526452][ T5803] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 217.526504][ T5803] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 217.526576][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.526615][ T5803] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 217.526669][ T5803] ? __lock_acquire+0x683/0x2cd0 [ 217.526717][ T5803] ? set_shrinker_bit+0x7c/0x350 [ 217.526742][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.526776][ T5803] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 217.526814][ T5803] do_writepages+0x338/0x560 [ 217.526848][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.526878][ T5803] ? reacquire_held_locks+0x104/0x190 [ 217.526910][ T5803] ? writeback_sb_inodes+0x450/0x1b00 [ 217.526947][ T5803] __writeback_single_inode+0x12e/0xf90 [ 217.526992][ T5803] writeback_sb_inodes+0x9de/0x1b00 [ 217.527019][ T5803] ? __lock_acquire+0x683/0x2cd0 [ 217.527074][ T5803] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 217.527151][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.527180][ T5803] ? rcu_is_watching+0x15/0xb0 [ 217.527211][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.527240][ T5803] ? queue_io+0x2d3/0x470 [ 217.527274][ T5803] wb_writeback+0x41c/0xad0 [ 217.527311][ T5803] ? queue_io+0x271/0x470 [ 217.527347][ T5803] ? __pfx_wb_writeback+0x10/0x10 [ 217.527373][ T5803] ? do_raw_spin_lock+0x12b/0x2f0 [ 217.527429][ T5803] wb_workfn+0x3f8/0xf10 [ 217.527465][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.527495][ T5803] ? look_up_lock_class+0x57/0x110 [ 217.527540][ T5803] ? __pfx_wb_workfn+0x10/0x10 [ 217.527584][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.527614][ T5803] ? do_raw_spin_lock+0x12b/0x2f0 [ 217.527649][ T5803] ? lock_acquire+0x106/0x350 [ 217.527678][ T5803] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 217.527718][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.527752][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.527791][ T5803] ? rcu_is_watching+0x15/0xb0 [ 217.527821][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.527854][ T5803] ? process_scheduled_works+0xa20/0x14e0 [ 217.527880][ T5803] process_scheduled_works+0xa8e/0x14e0 [ 217.527940][ T5803] ? __pfx_process_scheduled_works+0x10/0x10 [ 217.527989][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.528019][ T5803] ? assign_work+0x3cf/0x5d0 [ 217.528067][ T5803] worker_thread+0xa47/0xfb0 [ 217.528127][ T5803] kthread+0x389/0x470 [ 217.528161][ T5803] ? __pfx_worker_thread+0x10/0x10 [ 217.528186][ T5803] ? __pfx_kthread+0x10/0x10 [ 217.528221][ T5803] ret_from_fork+0x514/0xb70 [ 217.528252][ T5803] ? __pfx_ret_from_fork+0x10/0x10 [ 217.528282][ T5803] ? srso_alias_return_thunk+0x5/0xfbef5 [ 217.528313][ T5803] ? __switch_to+0xc89/0x1420 [ 217.528354][ T5803] ? __pfx_kthread+0x10/0x10 [ 217.528389][ T5803] ret_from_fork_asm+0x1a/0x30 [ 217.528440][ T5803] [ 217.879692][ T5803] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 218.281256][ T5881] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 218.370662][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 218.441058][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 218.459459][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.485165][ T5881] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.504424][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.559974][ T5881] usb 3-1: config 0 descriptor?? [ 218.593031][ T8875] loop7: detected capacity change from 0 to 256 [ 218.619740][ T8875] exfat: Deprecated parameter 'utf8' [ 218.649543][ T8877] netlink: 'syz.1.1022': attribute type 2 has an invalid length. [ 218.705472][ T8875] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 218.808706][ T5881] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 219.046290][ T24] usb 3-1: USB disconnect, device number 4 [ 219.209513][ T8896] loop1: detected capacity change from 0 to 512 [ 219.245271][ T8898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1030'. [ 219.266368][ T8896] EXT4-fs (loop1): 1 truncate cleaned up [ 219.290564][ T8896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.354504][ T8894] loop7: detected capacity change from 0 to 4096 [ 219.491266][ T8904] dummy0: entered allmulticast mode [ 219.504481][ T8905] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.524045][ T8903] dummy0: left allmulticast mode [ 219.546132][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 219.546151][ T31] audit: type=1800 audit(1781481251.151:44): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1028" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 220.230206][ T8923] loop2: detected capacity change from 0 to 256 [ 220.230230][ T8919] loop7: detected capacity change from 0 to 32768 [ 220.243998][ T8919] btrfs: Deprecated parameter 'usebackuproot' [ 220.250073][ T8919] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 220.266094][ T8917] loop6: detected capacity change from 0 to 256 [ 220.275883][ T8919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1035 (8919) [ 220.306482][ T8896] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1029: bg 0: block 465: padding at end of block bitmap is not set [ 220.336292][ T8919] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.346451][ T8919] BTRFS info (device loop7): using crc32c checksum algorithm [ 220.381730][ T8896] EXT4-fs (loop1): Remounting filesystem read-only [ 220.403119][ T8917] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 220.494509][ T68] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 220.531340][ T8919] BTRFS error (device loop7): failed to load root extent [ 220.538483][ T8919] BTRFS warning (device loop7): try to load backup roots slot 1 [ 220.547540][ T5811] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 220.664696][ T8919] BTRFS warning (device loop7): couldn't read tree root [ 220.675053][ T8919] BTRFS warning (device loop7): try to load backup roots slot 2 [ 220.683105][ T5803] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 220.726798][ T8919] BTRFS warning (device loop7): couldn't read tree root [ 220.737436][ T8919] BTRFS warning (device loop7): try to load backup roots slot 3 [ 220.765072][ T8919] BTRFS info (device loop7): rebuilding free space tree [ 220.805351][ T8919] BTRFS info (device loop7): checking UUID tree [ 220.815520][ T8919] BTRFS info (device loop7): enabling ssd optimizations [ 220.822580][ T8919] BTRFS info (device loop7): turning on async discard [ 220.829717][ T8919] BTRFS info (device loop7): enabling free space tree [ 220.838739][ T8919] BTRFS info (device loop7): force clearing of disk cache [ 220.845913][ T8919] BTRFS info (device loop7): enabling auto defrag [ 220.852431][ T8919] BTRFS info (device loop7): trying to use backup root at mount time [ 220.860503][ T8919] BTRFS info (device loop7): use zlib compression, level 3 [ 221.184993][ T5772] kernel write not supported for file /ocfs2_control (pid: 5772 comm: kworker/1:5) [ 221.207691][ T6611] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.268925][ T8921] loop0: detected capacity change from 0 to 32768 [ 221.274555][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.308804][ T8921] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1040 (8921) [ 221.403810][ T8921] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 221.432318][ T5644] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 221.460275][ T8921] BTRFS info (device loop0): using blake2b checksum algorithm [ 221.635531][ T5644] usb 3-1: Using ep0 maxpacket: 8 [ 221.658706][ T5644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.689158][ T5644] usb 3-1: config 0 has no interfaces? [ 221.706342][ T5644] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 221.740212][ T5644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.772440][ T5644] usb 3-1: Product: syz [ 221.808620][ T5644] usb 3-1: Manufacturer: syz [ 221.817629][ T8921] BTRFS info (device loop0): enabling ssd optimizations [ 221.827948][ T5644] usb 3-1: SerialNumber: syz [ 221.836279][ T8921] BTRFS info (device loop0): turning on async discard [ 221.863704][ T5644] usb 3-1: config 0 descriptor?? [ 221.870047][ T8921] BTRFS info (device loop0): enabling free space tree [ 221.895237][ T8978] loop1: detected capacity change from 0 to 512 [ 221.951738][ T8978] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.981450][ T8921] BTRFS critical (device loop0 state E): emergency shutdown [ 222.019295][ T8978] EXT4-fs (loop1): 1 truncate cleaned up [ 222.146135][ T8978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.146236][ T24] usb 3-1: USB disconnect, device number 5 [ 222.268345][ T5631] BTRFS info (device loop0 state E): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 222.328309][ T5632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.877348][ T8994] netlink: 'syz.3.1059': attribute type 4 has an invalid length. [ 223.448540][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 223.880461][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'. [ 223.906763][ T8995] loop1: detected capacity change from 0 to 32768 [ 223.939490][ T8995] JBD2: Ignoring recovery information on journal [ 224.094918][ T9029] loop6: detected capacity change from 0 to 164 [ 224.143100][ T8995] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 224.177536][ T9032] loop2: detected capacity change from 0 to 64 [ 224.257107][ T9029] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 224.370532][ T9029] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 224.485261][ T9029] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 224.653828][ T5881] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 224.690713][ T5632] ocfs2: Unmounting device (7,1) on (node local) [ 224.768127][ T9041] loop2: detected capacity change from 0 to 8 [ 224.822832][ T9041] SQUASHFS error: Unable to read directory block [629:fe] [ 224.852749][ T5881] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.892608][ T5881] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 224.926423][ T5881] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.994410][ T5881] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 225.038162][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 225.074905][ T5881] usb 8-1: Product: syz [ 225.092931][ T5881] usb 8-1: Manufacturer: syz [ 225.106344][ T5881] usb 8-1: SerialNumber: syz [ 225.176230][ T9020] loop0: detected capacity change from 0 to 40427 [ 225.196868][ T9020] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 225.214021][ T9020] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 225.250077][ T9020] F2FS-fs (loop0): invalid crc value [ 225.410875][ T988] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 225.423150][ T5881] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 225.557370][ T9020] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 225.593966][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 225.606715][ T988] usb 3-1: Using ep0 maxpacket: 16 [ 225.620157][ T988] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 225.642707][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.642876][ T9020] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 225.674758][ T9020] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 225.678513][ T988] usb 3-1: Product: syz [ 225.720562][ T988] usb 3-1: Manufacturer: syz [ 225.731829][ T5881] usb 8-1: USB disconnect, device number 4 [ 225.744364][ T988] usb 3-1: SerialNumber: syz [ 225.767219][ T5881] usblp0: removed [ 225.781608][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 225.803993][ T988] usb 3-1: config 0 descriptor?? [ 225.818990][ T10] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 225.857280][ T10] usb 2-1: config 0 has no interface number 0 [ 225.876766][ T10] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.890961][ T10] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.900908][ T10] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 225.911272][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.927294][ T10] usb 2-1: config 0 descriptor?? [ 226.024313][ T5631] syz-executor: attempt to access beyond end of device [ 226.024313][ T5631] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.047792][ T5631] CPU: 1 UID: 0 PID: 5631 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 226.047824][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.047840][ T5631] Call Trace: [ 226.047848][ T5631] [ 226.047858][ T5631] dump_stack_lvl+0xe8/0x150 [ 226.047892][ T5631] f2fs_stop_checkpoint+0x3c2/0x580 [ 226.047931][ T5631] f2fs_write_end_io+0x124b/0x1710 [ 226.047992][ T5631] __submit_merged_bio+0x258/0x6a0 [ 226.048032][ T5631] __submit_merged_write_cond+0x3c9/0x4e0 [ 226.048075][ T5631] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 226.048125][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.048167][ T5631] f2fs_write_data_pages+0x2a27/0x36f0 [ 226.048244][ T5631] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.048305][ T5631] ? __pfx___css_rstat_updated+0x10/0x10 [ 226.048378][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.048405][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.048433][ T5631] ? __bfs+0x153/0x290 [ 226.048457][ T5631] ? __pfx_hlock_conflict+0x10/0x10 [ 226.048494][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.048535][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.048562][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.048591][ T5631] ? __lock_acquire+0x13e8/0x2cd0 [ 226.048648][ T5631] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.048689][ T5631] do_writepages+0x338/0x560 [ 226.048718][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.048749][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.048783][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.048812][ T5631] ? do_raw_spin_unlock+0xf5/0x210 [ 226.048851][ T5631] filemap_fdatawrite+0x1e9/0x2f0 [ 226.048883][ T5631] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 226.048951][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.048983][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.049016][ T5631] ? do_raw_spin_unlock+0xf5/0x210 [ 226.049056][ T5631] f2fs_sync_dirty_inodes+0x30e/0x830 [ 226.049111][ T5631] f2fs_write_checkpoint+0xa50/0x2810 [ 226.049147][ T5631] ? __lock_acquire+0x683/0x2cd0 [ 226.049207][ T5631] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 226.049243][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.049321][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.049369][ T5631] kill_f2fs_super+0x2f6/0x700 [ 226.049412][ T5631] ? __pfx_kill_f2fs_super+0x10/0x10 [ 226.049461][ T5631] ? call_rcu+0x64b/0x8b0 [ 226.049491][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.049520][ T5631] ? lockdep_hardirqs_on+0x7a/0x110 [ 226.049560][ T5631] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.049605][ T5631] deactivate_locked_super+0xbc/0x130 [ 226.049642][ T5631] cleanup_mnt+0x3d3/0x460 [ 226.049684][ T5631] task_work_run+0x1d9/0x270 [ 226.049723][ T5631] ? __pfx_task_work_run+0x10/0x10 [ 226.049771][ T5631] exit_to_user_mode_loop+0x193/0x6b0 [ 226.049796][ T5631] ? rcu_is_watching+0x15/0xb0 [ 226.049827][ T5631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.049854][ T5631] do_syscall_64+0x353/0x580 [ 226.049877][ T5631] ? trace_irq_disable+0x3b/0x140 [ 226.049921][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.049948][ T5631] RIP: 0033:0x7f1897d9e097 [ 226.049970][ T5631] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 226.049990][ T5631] RSP: 002b:00007fff219ea198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 226.050014][ T5631] RAX: 0000000000000000 RBX: 00007f1897e321ca RCX: 00007f1897d9e097 [ 226.050031][ T5631] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff219ea250 [ 226.050046][ T5631] RBP: 00007fff219ea250 R08: 00007fff219eb250 R09: 00000000ffffffff [ 226.050064][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff219eb2e0 [ 226.050081][ T5631] R13: 00007f1897e321ca R14: 000000000003724f R15: 00007fff219eb320 [ 226.050119][ T5631] [ 226.050244][ T5631] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 226.169041][ T9060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.457920][ T988] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 226.481735][ T988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.493988][ T9060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.504433][ T988] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 226.525338][ T988] usb 3-1: media controller created [ 226.594521][ T988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.646101][ T5637] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 226.658694][ T988] zl10353_read_register: readreg error (reg=127, ret==0) [ 226.676291][ T988] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 226.692786][ T988] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 226.722950][ T988] usb 3-1: USB disconnect, device number 6 [ 226.783759][ T10] hid (null): report_id 0 is invalid [ 226.886132][ T988] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 227.009916][ T10] usb 2-1: USB disconnect, device number 6 [ 227.369617][ T9078] loop2: detected capacity change from 0 to 128 [ 227.383920][ T9077] loop0: detected capacity change from 0 to 1024 [ 227.470617][ T9078] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.568880][ T9078] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 227.670951][ T31] audit: type=1800 audit(1781481259.271:45): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1093" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 227.794741][ T5634] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.900776][ T9082] loop7: detected capacity change from 0 to 2048 [ 227.977212][ T9082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.214362][ T9130] loop3: detected capacity change from 0 to 256 [ 229.476525][ T9137] loop0: detected capacity change from 0 to 256 [ 230.232879][ T9155] loop2: detected capacity change from 0 to 256 [ 230.266121][ T9155] exfat: Deprecated parameter 'namecase' [ 230.298962][ T9155] exfat: Deprecated parameter 'namecase' [ 230.417691][ T9155] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 231.163205][ T9181] loop6: detected capacity change from 0 to 4096 [ 231.311244][ T988] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 231.429610][ T9194] loop1: detected capacity change from 0 to 256 [ 231.491106][ T988] usb 3-1: Using ep0 maxpacket: 8 [ 231.517817][ T988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.563474][ T988] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.605788][ T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.658686][ T988] usb 3-1: config 0 descriptor?? [ 231.721382][ T5820] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 231.829141][ T9206] loop1: detected capacity change from 0 to 256 [ 231.922152][ T5820] usb 8-1: Using ep0 maxpacket: 32 [ 231.935480][ T988] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 231.963445][ T5820] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 231.993449][ T5820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.008077][ T9206] FAT-fs (loop1): Directory bread(block 64) failed [ 232.031803][ T9206] FAT-fs (loop1): Directory bread(block 65) failed [ 232.047567][ T5820] usb 8-1: config 0 descriptor?? [ 232.057345][ T9206] FAT-fs (loop1): Directory bread(block 66) failed [ 232.077885][ T5820] gspca_main: sq930x-2.14.0 probing 041e:403c [ 232.096591][ T9206] FAT-fs (loop1): Directory bread(block 67) failed [ 232.120101][ T9206] FAT-fs (loop1): Directory bread(block 68) failed [ 232.152662][ T988] usb 3-1: USB disconnect, device number 7 [ 232.172592][ T9206] FAT-fs (loop1): Directory bread(block 69) failed [ 232.219038][ T9206] FAT-fs (loop1): Directory bread(block 70) failed [ 232.255379][ T9206] FAT-fs (loop1): Directory bread(block 71) failed [ 232.294000][ T9206] FAT-fs (loop1): Directory bread(block 72) failed [ 232.312408][ T9206] FAT-fs (loop1): Directory bread(block 73) failed [ 232.493900][ T9214] loop0: detected capacity change from 0 to 512 [ 232.516761][ T9214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.526385][ T9197] loop3: detected capacity change from 0 to 32768 [ 232.560139][ T9213] sctp: [Deprecated]: syz.6.1152 (pid 9213) Use of int in max_burst socket option. [ 232.560139][ T9213] Use struct sctp_assoc_value instead [ 232.593493][ T9214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.626662][ T9214] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.640865][ T9197] JBD2: Ignoring recovery information on journal [ 232.721108][ T5820] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 232.755918][ T5820] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 232.833827][ T9197] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 232.841216][ T5820] usb 8-1: USB disconnect, device number 5 [ 232.998032][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.102053][ T9228] loop6: detected capacity change from 0 to 8 [ 233.149685][ T9228] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 233.174524][ T9228] cramfs: empty filesystem [ 233.228324][ T9230] loop0: detected capacity change from 0 to 512 [ 233.249211][ T5651] udevd[5651]: incorrect cramfs checksum on /dev/loop6 [ 233.310556][ T9230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.373597][ T5639] udevd[5639]: incorrect cramfs checksum on /dev/loop6 [ 233.415596][ T9230] EXT4-fs (loop0): shut down requested (1) [ 233.518423][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.803908][ T9221] loop1: detected capacity change from 0 to 32768 [ 233.823482][ T9221] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1154 (9221) [ 234.517947][ T9240] loop6: detected capacity change from 0 to 131072 [ 234.618049][ T9240] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 234.635782][ T9240] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 234.637988][ T9221] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.718898][ T9221] BTRFS info (device loop1): using crc32c checksum algorithm [ 234.727315][ T9240] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:7, node_footer[nid:7,ino:117440519,ofs:0,cpver:1219692001,blkaddr:4611] [ 234.832364][ T5633] ocfs2: Unmounting device (7,3) on (node local) [ 234.872340][ T9221] BTRFS info (device loop1): enabling ssd optimizations [ 234.947633][ T9221] BTRFS info (device loop1): turning on flush-on-commit [ 234.982443][ T9221] BTRFS info (device loop1): enabling free space tree [ 234.989287][ T9221] BTRFS info (device loop1): force zlib compression, level 3 [ 235.001066][ T9221] BTRFS info (device loop1): max_inline set to 4096 [ 235.206568][ T5632] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.555465][ T9272] loop7: detected capacity change from 0 to 1024 [ 235.588511][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 235.690654][ T9272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.043034][ T9285] loop2: detected capacity change from 0 to 4096 [ 236.137048][ T6611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.177017][ T9293] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.536169][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 236.773832][ T9282] loop1: detected capacity change from 0 to 32768 [ 237.165312][ T9314] loop3: detected capacity change from 0 to 128 [ 237.187991][ T9314] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.218854][ T9313] EXT4-fs (loop0): 1 truncate cleaned up [ 237.238951][ T9314] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.242124][ T9313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.332363][ T9314] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 237.341813][ T9314] FAT-fs (loop3): Filesystem has been set read-only [ 237.353921][ T31] audit: type=1800 audit(1781481268.941:46): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1186" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 237.384977][ T5633] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.555463][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.595471][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 237.996732][ T9336] set_capacity_and_notify: 1 callbacks suppressed [ 237.996753][ T9336] loop2: detected capacity change from 0 to 128 [ 238.110243][ T9336] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 238.133530][ T9336] FAT-fs (loop2): Filesystem has been set read-only [ 238.201830][ T9341] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 238.271598][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 238.438403][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 238.468897][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.507150][ T9352] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1202'. [ 238.519070][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.556531][ T24] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 238.580510][ T9356] netlink: 'syz.2.1204': attribute type 21 has an invalid length. [ 238.620515][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.667886][ T24] usb 2-1: config 0 descriptor?? [ 239.075238][ T9373] loop2: detected capacity change from 0 to 1024 [ 239.124650][ T9373] 9pnet_fd: p9_fd_create_unix (9373): problem connecting socket: ./file0: -13 [ 239.133738][ T24] corsair 0003:1B1C:1B02.000F: invalid report_size 32288 [ 239.153962][ T24] corsair 0003:1B1C:1B02.000F: item 0 2 1 7 parsing failed [ 239.180208][ T24] corsair 0003:1B1C:1B02.000F: parse failed [ 239.219385][ T24] corsair 0003:1B1C:1B02.000F: probe with driver corsair failed with error -22 [ 239.315772][ T9379] loop0: detected capacity change from 0 to 2048 [ 239.348061][ T24] usb 2-1: USB disconnect, device number 7 [ 239.348206][ T9379] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 239.938281][ T9393] loop3: detected capacity change from 0 to 2048 [ 239.944009][ T9395] loop6: detected capacity change from 0 to 2048 [ 239.977781][ T9399] loop2: detected capacity change from 0 to 256 [ 239.986665][ T9399] exfat: Deprecated parameter 'utf8' [ 240.025559][ T9399] exfat: Deprecated parameter 'utf8' [ 240.057168][ T9393] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 240.075601][ T9399] exfat: Deprecated parameter 'namecase' [ 240.107939][ T9399] exfat: Deprecated parameter 'utf8' [ 240.152737][ T9400] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.211581][ T9393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.296487][ T9399] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 240.459271][ T9400] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 240.540610][ T9400] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 240.686232][ T9400] Remounting filesystem read-only [ 240.857180][ T6151] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 241.029517][ T9398] loop7: detected capacity change from 0 to 131072 [ 241.041783][ T9398] F2FS-fs (loop7): Invalid log sectorsize (67108873) [ 241.049036][ T9398] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 241.063442][ T9398] F2FS-fs (loop7): invalid crc value [ 241.175979][ T5633] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 241.200081][ T9398] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 241.220573][ T9398] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 241.228014][ T9398] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 241.234382][ T5633] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 241.273714][ T9398] F2FS-fs (loop7): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix [ 241.495328][ T5637] Bluetooth: hci3: failed to read key size for handle 0 [ 241.504262][ T5637] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 241.634812][ T9426] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1237'. [ 241.672209][ T9426] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1237'. [ 242.245318][ T136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.274648][ T136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.526758][ T9420] loop0: detected capacity change from 0 to 32768 [ 242.579794][ T136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.591730][ T136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.633851][ T9420] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.739440][ T9441] loop1: detected capacity change from 0 to 512 [ 242.787134][ T9441] EXT4-fs: Mount option(s) incompatible with ext2 [ 242.857770][ T136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.892090][ T136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.898688][ T9420] XFS (loop0): Ending clean mount [ 243.149178][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1245'. [ 243.209346][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.238251][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.272237][ T5631] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 243.334207][ T4941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.345485][ T4941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.353865][ T4941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.366141][ T4941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.373890][ T4941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.203666][ T9462] loop1: detected capacity change from 0 to 2048 [ 244.306524][ T9462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.382626][ T9450] loop2: detected capacity change from 0 to 131072 [ 244.403740][ T9450] F2FS-fs (loop2): Test dummy encryption mode enabled [ 244.420943][ T9450] F2FS-fs (loop2): invalid crc value [ 244.517778][ T9450] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 244.531641][ T9450] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 244.551171][ T5773] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 244.716696][ T9442] loop6: detected capacity change from 0 to 32768 [ 244.764955][ T5773] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 244.789088][ T5773] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 244.854871][ T136] bridge_slave_1: left promiscuous mode [ 244.855711][ T9442] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 244.865460][ T5773] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 244.878729][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.887110][ T5773] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.895585][ T5773] usb 8-1: Product: syz [ 244.902015][ T5773] usb 8-1: Manufacturer: syz [ 244.906754][ T5773] usb 8-1: SerialNumber: syz [ 244.916706][ T5773] usb 8-1: config 0 descriptor?? [ 244.923762][ T9465] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 244.942968][ T136] bridge_slave_0: left allmulticast mode [ 244.951073][ T136] bridge_slave_0: left promiscuous mode [ 244.963031][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.986447][ T9465] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 245.241713][ T9442] XFS (loop6): Ending clean mount [ 245.242356][ T9465] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 245.293006][ T9465] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 245.411319][ T5637] Bluetooth: hci2: command tx timeout [ 245.571396][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 245.629047][ T6151] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 245.835965][ T9491] loop1: detected capacity change from 0 to 4096 [ 245.974460][ T5773] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 245.996401][ T9492] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.024702][ T5773] usb 8-1: USB disconnect, device number 6 [ 246.361910][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.372345][ T31] audit: type=1326 audit(1781481277.971:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.6.1257" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531e79ce59 code=0x7ffc0000 [ 246.447322][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.469988][ T31] audit: type=1326 audit(1781481277.971:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.6.1257" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531e79ce59 code=0x7ffc0000 [ 246.524757][ T31] audit: type=1326 audit(1781481277.971:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.6.1257" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f531e79ce59 code=0x7ffc0000 [ 246.553541][ T31] audit: type=1326 audit(1781481277.971:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.6.1257" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531e79ce59 code=0x7ffc0000 [ 246.567641][ T136] bond0 (unregistering): Released all slaves [ 246.581234][ T31] audit: type=1326 audit(1781481277.971:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.6.1257" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531e79ce59 code=0x7ffc0000 [ 246.660643][ T31] audit: type=1326 audit(1781481277.971:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.6.1257" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f531e79ce59 code=0x7ffc0000 [ 246.787722][ T31] audit: type=1326 audit(1781481277.971:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.6.1257" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531e79ce59 code=0x7ffc0000 [ 246.917782][ T9506] loop7: detected capacity change from 0 to 1024 [ 246.925870][ T9506] EXT4-fs: Ignoring removed bh option [ 246.955202][ T9500] bond1: option xmit_hash_policy: invalid value (177) [ 247.095227][ T9500] bond1 (unregistering): Released all slaves [ 247.178002][ T9506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 247.273057][ T9506] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.406943][ T136] tipc: Left network mode [ 247.417959][ T9506] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.1263: lblock 3 mapped to illegal pblock 3 (length 3) [ 247.491944][ T5655] Bluetooth: hci2: command tx timeout [ 247.570052][ T9506] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 247.679720][ T9512] loop6: detected capacity change from 0 to 8192 [ 247.689496][ T9506] EXT4-fs (loop7): This should not happen!! Data will be lost [ 247.689496][ T9506] [ 247.743922][ T9519] EXT4-fs error (device loop7): ext4_ext_remove_space:2969: inode #15: comm syz.7.1263: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 248.000330][ T9519] EXT4-fs error (device loop7) in ext4_setattr:6120: Corrupt filesystem [ 248.081727][ T9513] loop0: detected capacity change from 0 to 131072 [ 248.106192][ T9513] F2FS-fs (loop0): invalid crc value [ 248.228301][ T6611] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 248.266640][ T9513] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 248.283259][ T9513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 248.301535][ T6611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 248.377638][ T9533] loop1: detected capacity change from 0 to 256 [ 248.969148][ T9539] syz_tun: entered allmulticast mode [ 249.082280][ T9551] loop1: detected capacity change from 0 to 256 [ 249.140082][ T9551] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 249.220735][ T9537] syz_tun: left allmulticast mode [ 249.245865][ T31] audit: type=1800 audit(1781481280.841:54): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1274" name="bus" dev="loop1" ino=1048692 res=0 errno=0 [ 249.416257][ T136] hsr_slave_0: left promiscuous mode [ 249.436473][ T136] hsr_slave_1: left promiscuous mode [ 249.483794][ T9561] input: syz1 as /devices/virtual/input/input9 [ 249.525371][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.564033][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.571280][ T5655] Bluetooth: hci2: command tx timeout [ 249.700809][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.742384][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.869725][ T136] veth1_macvtap: left promiscuous mode [ 249.879528][ T136] veth0_macvtap: left promiscuous mode [ 249.899699][ T136] veth1_vlan: left promiscuous mode [ 249.923258][ T136] veth0_vlan: left promiscuous mode [ 250.186337][ T9573] loop0: detected capacity change from 0 to 2048 [ 250.286798][ T9576] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.465866][ T9577] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 250.521915][ T9577] Remounting filesystem read-only [ 250.555079][ T9577] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 250.630014][ T9577] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 250.668167][ T31] audit: type=1800 audit(1781481282.271:55): pid=9577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1280" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 250.746361][ T9581] netlink: 480 bytes leftover after parsing attributes in process `syz.7.1283'. [ 250.766872][ T9581] netlink: 480 bytes leftover after parsing attributes in process `syz.7.1283'. [ 250.817165][ T5631] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 251.116731][ T136] team0 (unregistering): Port device team_slave_1 removed [ 251.156217][ T136] team0 (unregistering): Port device team_slave_0 removed [ 251.295456][ T9591] loop1: detected capacity change from 0 to 2048 [ 251.392129][ T9591] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.651150][ T5655] Bluetooth: hci2: command tx timeout [ 251.765102][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9 [ 252.535091][ T136] IPVS: stop unused estimator thread 0... [ 252.859133][ T9629] loop0: detected capacity change from 0 to 4096 [ 253.020807][ T9641] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.069233][ T9642] loop1: detected capacity change from 0 to 164 [ 253.199950][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.200064][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.205068][ T9448] bridge_slave_0: entered allmulticast mode [ 253.210290][ T9448] bridge_slave_0: entered promiscuous mode [ 253.234835][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.234947][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.235100][ T9448] bridge_slave_1: entered allmulticast mode [ 253.249689][ T9448] bridge_slave_1: entered promiscuous mode [ 253.464008][ T9448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.483801][ T9448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.698085][ T31] audit: type=1326 audit(1781481285.301:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9660 comm="syz.7.1307" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f39ce59 code=0x7ffc0000 [ 253.788784][ T9661] macvlan2: entered promiscuous mode [ 253.810273][ T9661] bridge0: entered promiscuous mode [ 253.829037][ T31] audit: type=1326 audit(1781481285.301:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9660 comm="syz.7.1307" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f39ce59 code=0x7ffc0000 [ 253.919957][ T31] audit: type=1326 audit(1781481285.301:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9660 comm="syz.7.1307" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f39ce59 code=0x7ffc0000 [ 253.983986][ T9448] team0: Port device team_slave_0 added [ 254.005991][ T9448] team0: Port device team_slave_1 added [ 254.026032][ T31] audit: type=1326 audit(1781481285.311:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9660 comm="syz.7.1307" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f3c1f39ce59 code=0x7ffc0000 [ 254.123014][ T31] audit: type=1326 audit(1781481285.311:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9660 comm="syz.7.1307" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f39ce59 code=0x7ffc0000 [ 254.212852][ T5644] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 254.253963][ T31] audit: type=1326 audit(1781481285.311:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9660 comm="syz.7.1307" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f39ce59 code=0x7ffc0000 [ 254.254507][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.318958][ T31] audit: type=1326 audit(1781481285.301:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9660 comm="syz.7.1307" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f39ce59 code=0x7ffc0000 [ 254.326778][ T9680] loop2: detected capacity change from 0 to 256 [ 254.380814][ T9675] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.386810][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.392787][ T9675] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 254.421782][ T5644] usb 1-1: Using ep0 maxpacket: 8 [ 254.427853][ T31] audit: type=1326 audit(1781481285.311:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9660 comm="syz.7.1307" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f39ce59 code=0x7ffc0000 [ 254.464674][ T5644] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.473457][ T9685] loop1: detected capacity change from 0 to 256 [ 254.479743][ T5644] usb 1-1: config 0 has no interface number 0 [ 254.479796][ T5644] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.493149][ T9448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.513042][ T9680] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 254.532061][ T31] audit: type=1326 audit(1781481285.311:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9660 comm="syz.7.1307" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3c1f39ce59 code=0x7ffc0000 [ 254.575435][ T5644] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.605943][ T5644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.616817][ T9675] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.639265][ T9675] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 254.659852][ T5644] usb 1-1: config 0 descriptor?? [ 254.676242][ T9675] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.691688][ T31] audit: type=1326 audit(1781481285.311:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9660 comm="syz.7.1307" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1f39ce59 code=0x7ffc0000 [ 254.697697][ T5644] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 254.756419][ T9675] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 254.811859][ T9675] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 254.817934][ T9675] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 254.877153][ T9675] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 254.916613][ T9675] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 254.926671][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.939235][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.955247][ T9675] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 254.961029][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.003265][ T9675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.020590][ T9675] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 255.034765][ T5644] usb 1-1: USB disconnect, device number 10 [ 255.052725][ T9448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.105989][ T5286] 8021q: adding VLAN 0 to HW filter on device eth12 [ 255.142738][ T9675] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 255.374690][ T9448] hsr_slave_0: entered promiscuous mode [ 255.402086][ T9448] hsr_slave_1: entered promiscuous mode [ 255.423209][ T9448] debugfs: 'hsr0' already exists in 'hsr' [ 255.442177][ T9448] Cannot create hsr debugfs directory [ 255.466583][ T9701] netlink: 'syz.1.1322': attribute type 1 has an invalid length. [ 255.482991][ T9701] netlink: 'syz.1.1322': attribute type 2 has an invalid length. [ 255.501170][ T9701] netlink: 'syz.1.1322': attribute type 3 has an invalid length. [ 255.520116][ T9701] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1322'. [ 255.793407][ T9711] program syz.0.1327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.451211][ T5655] Bluetooth: hci1: command 0x0406 tx timeout [ 256.611393][ T5655] Bluetooth: hci0: command 0x0406 tx timeout [ 256.691408][ T5655] Bluetooth: hci3: command 0x0406 tx timeout [ 256.851974][ T5655] Bluetooth: hci4: command 0x0406 tx timeout [ 256.932352][ T5655] Bluetooth: hci5: command 0x0c1a tx timeout [ 257.011636][ T5655] Bluetooth: hci2: command 0x0c1a tx timeout [ 257.057169][ T9740] program syz.1.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.178685][ T9448] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 257.221156][ T988] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 257.244695][ T9448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.278268][ T9448] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 257.346937][ T9448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.382420][ T9718] loop0: detected capacity change from 0 to 32768 [ 257.390242][ T9448] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 257.413763][ T988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.430120][ T988] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 257.469133][ T9718] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 257.476903][ T9448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.481070][ T988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.505646][ T988] usb 3-1: config 0 descriptor?? [ 257.578895][ T9448] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 257.632714][ T9448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.685737][ T5286] 8021q: adding VLAN 0 to HW filter on device eth10 [ 257.716039][ T9718] XFS (loop0): Ending clean mount [ 257.842179][ T9772] loop1: detected capacity change from 0 to 8 [ 257.968492][ T5631] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 258.133392][ T988] ath6kl: mismatched byte count 0 vs. expected 12 [ 258.183370][ T988] ath6kl: Failed to init ath6kl core: -22 [ 258.201320][ T9775] loop6: detected capacity change from 0 to 4096 [ 258.217684][ T9448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.228138][ T988] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 258.301598][ T9448] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.329718][ T9779] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.386412][ T5773] usb 3-1: USB disconnect, device number 8 [ 258.398456][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.405638][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.460190][ T9778] loop0: detected capacity change from 0 to 2048 [ 258.497940][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.505213][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.516239][ T9778] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.544822][ T5655] Bluetooth: hci1: command 0x0406 tx timeout [ 258.694158][ T5655] Bluetooth: hci0: command 0x0406 tx timeout [ 258.739407][ T9448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.756223][ T9448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.773655][ T5655] Bluetooth: hci3: command 0x0406 tx timeout [ 258.932357][ T5655] Bluetooth: hci4: command 0x0406 tx timeout [ 259.011610][ T5655] Bluetooth: hci5: command 0x0c1a tx timeout [ 259.091811][ T5655] Bluetooth: hci2: command 0x0c1a tx timeout [ 259.476934][ T9811] loop7: detected capacity change from 0 to 256 [ 259.531339][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 259.726943][ T10] usb 3-1: config 2 has an invalid interface number: 79 but max is 0 [ 259.755891][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 259.796942][ T10] usb 3-1: config 2 has no interface number 0 [ 259.824925][ T10] usb 3-1: config 2 interface 79 altsetting 13 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.846676][ T10] usb 3-1: config 2 interface 79 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.873211][ T10] usb 3-1: config 2 interface 79 has no altsetting 0 [ 259.902505][ T10] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 259.942782][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.986801][ T10] usb 3-1: Product: syz [ 259.998865][ T10] usb 3-1: Manufacturer: syz [ 260.015578][ T10] usb 3-1: SerialNumber: syz [ 260.212569][ T9829] block nbd2: server does not support multiple connections per device. [ 260.244457][ T9829] block nbd2: shutting down sockets [ 260.289709][ T9810] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 260.293501][ T5286] 8021q: adding VLAN 0 to HW filter on device eth11 [ 260.307629][ T10] usb 3-1: USB disconnect, device number 9 [ 260.354570][ T9833] loop7: detected capacity change from 0 to 256 [ 260.629837][ T9840] loop1: detected capacity change from 0 to 256 [ 260.690076][ T9840] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 260.788517][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 260.788538][ T31] audit: type=1800 audit(1781481292.391:77): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1361" name="bus" dev="loop1" ino=1048697 res=0 errno=0 [ 260.912180][ T9448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.091624][ T5655] Bluetooth: hci5: command 0x0c1a tx timeout [ 261.152052][ T9851] loop2: detected capacity change from 0 to 1024 [ 261.172642][ T5655] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.277559][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 262.003590][ T9879] loop7: detected capacity change from 0 to 4096 [ 262.079213][ T9448] veth0_vlan: entered promiscuous mode [ 262.113895][ T9879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.179348][ T9448] veth1_vlan: entered promiscuous mode [ 262.253833][ T988] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 262.357484][ T9879] [ 262.359852][ T9879] ====================================================== [ 262.366862][ T9879] WARNING: possible circular locking dependency detected [ 262.373874][ T9879] syzkaller #0 Not tainted [ 262.378283][ T9879] ------------------------------------------------------ [ 262.385307][ T9879] syz.7.1374/9879 is trying to acquire lock: [ 262.391275][ T9879] ffff888054d02ce0 (&dquot->dq_lock){+.+.}-{4:4}, at: dqget+0x69d/0xbd0 [ 262.399668][ T9879] [ 262.399668][ T9879] but task is already holding lock: [ 262.407154][ T9879] ffff888054e9a620 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x891/0x1d70 [ 262.416146][ T9879] [ 262.416146][ T9879] which lock already depends on the new lock. [ 262.416146][ T9879] [ 262.426536][ T9879] [ 262.426536][ T9879] the existing dependency chain (in reverse order) is: [ 262.435534][ T9879] [ 262.435534][ T9879] -> #12 (&ei->xattr_sem){++++}-{4:4}: [ 262.443179][ T9879] down_read+0x47/0x2e0 [ 262.447851][ T9879] ext4_readpage_inline+0x36/0x6a0 [ 262.453653][ T9879] ext4_read_folio+0x15e/0x520 [ 262.458925][ T9879] filemap_read_folio+0x12c/0x3a0 [ 262.464470][ T9879] filemap_get_pages+0xc86/0x1ec0 [ 262.470016][ T9879] filemap_read+0x426/0x11e0 [ 262.475126][ T9879] __kernel_read+0x4ca/0x960 [ 262.480240][ T9879] integrity_kernel_read+0x89/0xd0 [ 262.485881][ T9879] ima_calc_file_hash+0x451/0x890 [ 262.491424][ T9879] ima_collect_measurement+0x51b/0xa00 [ 262.497398][ T9879] process_measurement+0x1272/0x1c10 [ 262.503197][ T9879] ima_file_check+0xe1/0x130 [ 262.508298][ T9879] security_file_post_open+0xb3/0x260 [ 262.514192][ T9879] path_openat+0x2e80/0x3890 [ 262.519310][ T9879] do_file_open+0x23e/0x4a0 [ 262.524332][ T9879] do_sys_openat2+0x113/0x200 [ 262.529526][ T9879] __x64_sys_openat+0x138/0x170 [ 262.534891][ T9879] do_syscall_64+0x174/0x580 [ 262.539989][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.546392][ T9879] [ 262.546392][ T9879] -> #11 (mapping.invalidate_lock#2){++++}-{4:4}: [ 262.554999][ T9879] down_read+0x47/0x2e0 [ 262.559668][ T9879] filemap_fault+0x6c8/0x1360 [ 262.564866][ T9879] __do_fault+0x138/0x2a0 [ 262.569718][ T9879] do_pte_missing+0x6e1/0x3540 [ 262.574998][ T9879] handle_mm_fault+0x1b38/0x3080 [ 262.580452][ T9879] do_user_addr_fault+0xa4d/0x1340 [ 262.586072][ T9879] exc_page_fault+0x6a/0xc0 [ 262.591099][ T9879] asm_exc_page_fault+0x26/0x30 [ 262.596458][ T9879] [ 262.596458][ T9879] -> #10 (vm_lock){++++}-{0:0}: [ 262.603493][ T9879] __vma_start_exclude_readers+0x283/0x930 [ 262.609821][ T9879] __vma_start_write+0xdc/0x290 [ 262.615196][ T9879] mprotect_fixup+0x761/0xb10 [ 262.620405][ T9879] setup_arg_pages+0x658/0xbd0 [ 262.625689][ T9879] load_elf_binary+0xc7e/0x2950 [ 262.631053][ T9879] bprm_execve+0x9c7/0x1630 [ 262.636077][ T9879] kernel_execve+0x8c0/0x9b0 [ 262.641184][ T9879] try_to_run_init_process+0x13/0x60 [ 262.646976][ T9879] kernel_init+0xad/0x1d0 [ 262.651822][ T9879] ret_from_fork+0x514/0xb70 [ 262.656922][ T9879] ret_from_fork_asm+0x1a/0x30 [ 262.662202][ T9879] [ 262.662202][ T9879] -> #9 (&mm->mmap_lock){++++}-{4:4}: [ 262.669759][ T9879] __might_fault+0xcb/0x130 [ 262.674780][ T9879] _copy_from_user+0x28/0xb0 [ 262.679886][ T9879] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 262.686388][ T9879] ip_generic_getfrag+0x149/0x2d0 [ 262.691923][ T9879] __ip6_append_data+0x3aef/0x4080 [ 262.697556][ T9879] ip6_append_data+0x108/0x270 [ 262.702839][ T9879] rawv6_sendmsg+0x1298/0x18c0 [ 262.708108][ T9879] ____sys_sendmsg+0x853/0xa20 [ 262.713396][ T9879] ___sys_sendmsg+0x2a5/0x360 [ 262.718602][ T9879] __x64_sys_sendmsg+0x1bd/0x2a0 [ 262.724062][ T9879] do_syscall_64+0x174/0x580 [ 262.729160][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.735562][ T9879] [ 262.735562][ T9879] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 262.743292][ T9879] lock_sock_nested+0x41/0x100 [ 262.748574][ T9879] inet_shutdown+0x6a/0x390 [ 262.753586][ T9879] nbd_mark_nsock_dead+0x2cb/0x550 [ 262.759220][ T9879] sock_shutdown+0x15e/0x260 [ 262.764331][ T9879] nbd_clear_sock+0x24/0x170 [ 262.769443][ T9879] nbd_config_put+0x35b/0x660 [ 262.774639][ T9879] nbd_genl_connect+0x18f7/0x1c10 [ 262.780182][ T9879] genl_family_rcv_msg_doit+0x233/0x340 [ 262.786240][ T9879] genl_rcv_msg+0x614/0x7a0 [ 262.791269][ T9879] netlink_rcv_skb+0x226/0x4a0 [ 262.796561][ T9879] genl_rcv+0x28/0x40 [ 262.801053][ T9879] netlink_unicast+0x7bb/0x940 [ 262.806331][ T9879] netlink_sendmsg+0x813/0xb40 [ 262.811613][ T9879] ____sys_sendmsg+0x9b9/0xa20 [ 262.816903][ T9879] ___sys_sendmsg+0x2a5/0x360 [ 262.822104][ T9879] __x64_sys_sendmsg+0x1bd/0x2a0 [ 262.827566][ T9879] do_syscall_64+0x174/0x580 [ 262.832665][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.839068][ T9879] [ 262.839068][ T9879] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 262.846712][ T9879] __mutex_lock+0x19d/0x1590 [ 262.852159][ T9879] nbd_queue_rq+0x373/0x1150 [ 262.857270][ T9879] blk_mq_dispatch_rq_list+0x499/0x1990 [ 262.863791][ T9879] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 262.870637][ T9879] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 262.877137][ T9879] blk_mq_run_hw_queue+0x348/0x4f0 [ 262.882762][ T9879] blk_mq_dispatch_list+0xd11/0xe10 [ 262.888477][ T9879] blk_mq_flush_plug_list+0x45f/0x540 [ 262.894362][ T9879] __blk_flush_plug+0x3ed/0x4d0 [ 262.899727][ T9879] __submit_bio+0x465/0x560 [ 262.904746][ T9879] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 262.910890][ T9879] block_read_full_folio+0x599/0x830 [ 262.916685][ T9879] filemap_read_folio+0x12c/0x3a0 [ 262.922231][ T9879] do_read_cache_folio+0x354/0x590 [ 262.927869][ T9879] read_part_sector+0xb6/0x2b0 [ 262.933146][ T9879] adfspart_check_ICS+0xb1/0x960 [ 262.938598][ T9879] bdev_disk_changed+0x82b/0x1780 [ 262.944135][ T9879] blkdev_get_whole+0x372/0x510 [ 262.949501][ T9879] bdev_open+0x324/0xd70 [ 262.954255][ T9879] blkdev_open+0x461/0x600 [ 262.959193][ T9879] do_dentry_open+0x816/0x1380 [ 262.964470][ T9879] vfs_open+0x3b/0x340 [ 262.969051][ T9879] path_openat+0x2e3b/0x3890 [ 262.974160][ T9879] do_file_open+0x23e/0x4a0 [ 262.979182][ T9879] do_sys_openat2+0x113/0x200 [ 262.984370][ T9879] __x64_sys_openat+0x138/0x170 [ 262.989732][ T9879] do_syscall_64+0x174/0x580 [ 262.994916][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.001318][ T9879] [ 263.001318][ T9879] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 263.008529][ T9879] __mutex_lock+0x19d/0x1590 [ 263.013630][ T9879] nbd_queue_rq+0xc1/0x1150 [ 263.018655][ T9879] blk_mq_dispatch_rq_list+0x499/0x1990 [ 263.024717][ T9879] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 263.031571][ T9879] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 263.038068][ T9879] blk_mq_run_hw_queue+0x348/0x4f0 [ 263.043690][ T9879] blk_mq_dispatch_list+0xd11/0xe10 [ 263.049403][ T9879] blk_mq_flush_plug_list+0x45f/0x540 [ 263.055290][ T9879] __blk_flush_plug+0x3ed/0x4d0 [ 263.060658][ T9879] __submit_bio+0x465/0x560 [ 263.065678][ T9879] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 263.071824][ T9879] block_read_full_folio+0x599/0x830 [ 263.077621][ T9879] filemap_read_folio+0x12c/0x3a0 [ 263.083165][ T9879] do_read_cache_folio+0x354/0x590 [ 263.088796][ T9879] read_part_sector+0xb6/0x2b0 [ 263.094070][ T9879] adfspart_check_ICS+0xb1/0x960 [ 263.099520][ T9879] bdev_disk_changed+0x82b/0x1780 [ 263.105055][ T9879] blkdev_get_whole+0x372/0x510 [ 263.110419][ T9879] bdev_open+0x324/0xd70 [ 263.115173][ T9879] blkdev_open+0x461/0x600 [ 263.120106][ T9879] do_dentry_open+0x816/0x1380 [ 263.125381][ T9879] vfs_open+0x3b/0x340 [ 263.129961][ T9879] path_openat+0x2e3b/0x3890 [ 263.135075][ T9879] do_file_open+0x23e/0x4a0 [ 263.140099][ T9879] do_sys_openat2+0x113/0x200 [ 263.145287][ T9879] __x64_sys_openat+0x138/0x170 [ 263.150656][ T9879] do_syscall_64+0x174/0x580 [ 263.155755][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.162157][ T9879] [ 263.162157][ T9879] -> #5 (set->srcu){.+.+}-{0:0}: [ 263.169280][ T9879] __synchronize_srcu+0xc9/0x2f0 [ 263.174728][ T9879] elevator_switch+0x1e8/0x7b0 [ 263.180004][ T9879] elevator_change+0x2fa/0x480 [ 263.185280][ T9879] elevator_set_default+0x375/0x440 [ 263.190998][ T9879] blk_register_queue+0x3f3/0x4e0 [ 263.196539][ T9879] __add_disk+0x6cb/0xe30 [ 263.201385][ T9879] add_disk_fwnode+0xfb/0x4b0 [ 263.206581][ T9879] nbd_dev_add+0x733/0xb60 [ 263.211516][ T9879] nbd_init+0x15f/0x1e0 [ 263.216186][ T9879] do_one_initcall+0x250/0x870 [ 263.221461][ T9879] do_initcall_level+0x10a/0x1a0 [ 263.226909][ T9879] do_initcalls+0x59/0xa0 [ 263.231746][ T9879] kernel_init_freeable+0x29d/0x3e0 [ 263.237455][ T9879] kernel_init+0x1d/0x1d0 [ 263.242298][ T9879] ret_from_fork+0x514/0xb70 [ 263.247402][ T9879] ret_from_fork_asm+0x1a/0x30 [ 263.252679][ T9879] [ 263.252679][ T9879] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 263.260495][ T9879] __mutex_lock+0x19d/0x1590 [ 263.265597][ T9879] elevator_change+0x1af/0x480 [ 263.270880][ T9879] elevator_set_none+0xb5/0x140 [ 263.276246][ T9879] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 263.282577][ T9879] nbd_start_device+0x189/0xb30 [ 263.287952][ T9879] nbd_genl_connect+0x1597/0x1c10 [ 263.293497][ T9879] genl_family_rcv_msg_doit+0x233/0x340 [ 263.299556][ T9879] genl_rcv_msg+0x614/0x7a0 [ 263.304568][ T9879] netlink_rcv_skb+0x226/0x4a0 [ 263.309851][ T9879] genl_rcv+0x28/0x40 [ 263.314342][ T9879] netlink_unicast+0x7bb/0x940 [ 263.319621][ T9879] netlink_sendmsg+0x813/0xb40 [ 263.324903][ T9879] ____sys_sendmsg+0x9b9/0xa20 [ 263.330195][ T9879] ___sys_sendmsg+0x2a5/0x360 [ 263.335394][ T9879] __x64_sys_sendmsg+0x1bd/0x2a0 [ 263.340854][ T9879] do_syscall_64+0x174/0x580 [ 263.345953][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.352383][ T9879] [ 263.352383][ T9879] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 263.360995][ T9879] blk_alloc_queue+0x544/0x690 [ 263.366277][ T9879] __blk_mq_alloc_disk+0x194/0x390 [ 263.371909][ T9879] nbd_dev_add+0x494/0xb60 [ 263.376846][ T9879] nbd_init+0x15f/0x1e0 [ 263.381514][ T9879] do_one_initcall+0x250/0x870 [ 263.386788][ T9879] do_initcall_level+0x10a/0x1a0 [ 263.392233][ T9879] do_initcalls+0x59/0xa0 [ 263.397068][ T9879] kernel_init_freeable+0x29d/0x3e0 [ 263.402771][ T9879] kernel_init+0x1d/0x1d0 [ 263.407615][ T9879] ret_from_fork+0x514/0xb70 [ 263.412714][ T9879] ret_from_fork_asm+0x1a/0x30 [ 263.417993][ T9879] [ 263.417993][ T9879] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 263.425213][ T9879] fs_reclaim_acquire+0x71/0x100 [ 263.430677][ T9879] __kmalloc_noprof+0x9d/0x750 [ 263.435963][ T9879] find_tree_dqentry+0x5c/0x1090 [ 263.441425][ T9879] qtree_read_dquot+0x5ac/0x8a0 [ 263.446796][ T9879] ocfs2_acquire_dquot+0x2d4/0xb70 [ 263.452430][ T9879] dqget+0x725/0xbd0 [ 263.456836][ T9879] __dquot_initialize+0x3c8/0xd40 [ 263.462374][ T9879] ocfs2_get_init_inode+0x147/0x1c0 [ 263.468087][ T9879] ocfs2_mknod+0xa60/0x2240 [ 263.473107][ T9879] ocfs2_create+0x195/0x460 [ 263.478124][ T9879] path_openat+0x17ba/0x3890 [ 263.483233][ T9879] do_file_open+0x23e/0x4a0 [ 263.488255][ T9879] do_sys_openat2+0x113/0x200 [ 263.493448][ T9879] __x64_sys_openat+0x138/0x170 [ 263.498812][ T9879] do_syscall_64+0x174/0x580 [ 263.503911][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.510315][ T9879] [ 263.510315][ T9879] -> #1 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}: [ 263.520825][ T9879] down_write+0x96/0x200 [ 263.525586][ T9879] ocfs2_lock_global_qf+0x206/0x400 [ 263.531312][ T9879] ocfs2_acquire_dquot+0x28c/0xb70 [ 263.536948][ T9879] dqget+0x725/0xbd0 [ 263.541366][ T9879] __dquot_initialize+0x3c8/0xd40 [ 263.546909][ T9879] ocfs2_get_init_inode+0x147/0x1c0 [ 263.552619][ T9879] ocfs2_mknod+0xa60/0x2240 [ 263.557637][ T9879] ocfs2_create+0x195/0x460 [ 263.562658][ T9879] path_openat+0x17ba/0x3890 [ 263.567941][ T9879] do_file_open+0x23e/0x4a0 [ 263.572960][ T9879] do_sys_openat2+0x113/0x200 [ 263.578148][ T9879] __x64_sys_openat+0x138/0x170 [ 263.583510][ T9879] do_syscall_64+0x174/0x580 [ 263.588608][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.595009][ T9879] [ 263.595009][ T9879] -> #0 (&dquot->dq_lock){+.+.}-{4:4}: [ 263.602654][ T9879] __lock_acquire+0x1520/0x2cd0 [ 263.608012][ T9879] lock_acquire+0x106/0x350 [ 263.613023][ T9879] __mutex_lock+0x19d/0x1590 [ 263.618124][ T9879] dqget+0x69d/0xbd0 [ 263.622530][ T9879] dquot_transfer+0x2ac/0x660 [ 263.627723][ T9879] ext4_setattr+0x8a3/0x1d70 [ 263.632832][ T9879] notify_change+0xbba/0xea0 [ 263.637929][ T9879] chown_common+0x41c/0x630 [ 263.642941][ T9879] do_fchownat+0x14c/0x250 [ 263.647869][ T9879] __x64_sys_lchown+0x85/0xa0 [ 263.653055][ T9879] do_syscall_64+0x174/0x580 [ 263.658153][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.664559][ T9879] [ 263.664559][ T9879] other info that might help us debug this: [ 263.664559][ T9879] [ 263.674767][ T9879] Chain exists of: [ 263.674767][ T9879] &dquot->dq_lock --> mapping.invalidate_lock#2 --> &ei->xattr_sem [ 263.674767][ T9879] [ 263.688600][ T9879] Possible unsafe locking scenario: [ 263.688600][ T9879] [ 263.696031][ T9879] CPU0 CPU1 [ 263.701376][ T9879] ---- ---- [ 263.706719][ T9879] rlock(&ei->xattr_sem); [ 263.711124][ T9879] lock(mapping.invalidate_lock#2); [ 263.718928][ T9879] lock(&ei->xattr_sem); [ 263.725765][ T9879] lock(&dquot->dq_lock); [ 263.730187][ T9879] [ 263.730187][ T9879] *** DEADLOCK *** [ 263.730187][ T9879] [ 263.738314][ T9879] 3 locks held by syz.7.1374/9879: [ 263.743411][ T9879] #0: ffff88803594a410 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 263.752584][ T9879] #1: ffff888054e9a8d8 (&sb->s_type->i_mutex_key#11){++++}-{4:4}, at: chown_common+0x313/0x630 [ 263.763045][ T9879] #2: ffff888054e9a620 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x891/0x1d70 [ 263.772452][ T9879] [ 263.772452][ T9879] stack backtrace: [ 263.778321][ T9879] CPU: 1 UID: 0 PID: 9879 Comm: syz.7.1374 Not tainted syzkaller #0 PREEMPT(full) [ 263.778347][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 263.778361][ T9879] Call Trace: [ 263.778370][ T9879] [ 263.778380][ T9879] dump_stack_lvl+0xe8/0x150 [ 263.778407][ T9879] print_circular_bug+0x2e1/0x300 [ 263.778440][ T9879] check_noncircular+0x12e/0x150 [ 263.778474][ T9879] __lock_acquire+0x1520/0x2cd0 [ 263.778498][ T9879] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.778536][ T9879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.778565][ T9879] ? stack_depot_save_flags+0x3ec/0x800 [ 263.778591][ T9879] ? dqget+0x3ae/0xbd0 [ 263.778617][ T9879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.778643][ T9879] ? kasan_save_track+0x4f/0x80 [ 263.778674][ T9879] ? kasan_save_track+0x3e/0x80 [ 263.778708][ T9879] ? __kasan_slab_alloc+0x6c/0x80 [ 263.778740][ T9879] ? kmem_cache_alloc_noprof+0x2b8/0x650 [ 263.778770][ T9879] ? dqget+0x3ae/0xbd0 [ 263.778793][ T9879] ? dquot_transfer+0x2ac/0x660 [ 263.778823][ T9879] ? dqget+0x69d/0xbd0 [ 263.778846][ T9879] lock_acquire+0x106/0x350 [ 263.778868][ T9879] ? dqget+0x69d/0xbd0 [ 263.778896][ T9879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.778927][ T9879] __mutex_lock+0x19d/0x1590 [ 263.778949][ T9879] ? dqget+0x69d/0xbd0 [ 263.778979][ T9879] ? dqget+0x69d/0xbd0 [ 263.779005][ T9879] ? __pfx___mutex_lock+0x10/0x10 [ 263.779027][ T9879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.779053][ T9879] ? from_kuid+0x1c6/0x660 [ 263.779086][ T9879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.779115][ T9879] ? percpu_counter_add_batch+0xec/0x1d0 [ 263.779156][ T9879] dqget+0x69d/0xbd0 [ 263.779186][ T9879] dquot_transfer+0x2ac/0x660 [ 263.779217][ T9879] ? __pfx_dquot_transfer+0x10/0x10 [ 263.779248][ T9879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.779275][ T9879] ? down_read+0x270/0x2e0 [ 263.779307][ T9879] ext4_setattr+0x8a3/0x1d70 [ 263.779333][ T9879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.779360][ T9879] ? evm_inode_setattr+0x1c1/0x7c0 [ 263.779389][ T9879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.779416][ T9879] ? __pfx_ext4_setattr+0x10/0x10 [ 263.779441][ T9879] notify_change+0xbba/0xea0 [ 263.779469][ T9879] chown_common+0x41c/0x630 [ 263.779498][ T9879] ? __pfx_chown_common+0x10/0x10 [ 263.779521][ T9879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.779553][ T9879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.779579][ T9879] ? mnt_get_write_access+0x213/0x280 [ 263.779616][ T9879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 263.779644][ T9879] do_fchownat+0x14c/0x250 [ 263.779669][ T9879] ? __pfx_do_fchownat+0x10/0x10 [ 263.779696][ T9879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.779720][ T9879] __x64_sys_lchown+0x85/0xa0 [ 263.779745][ T9879] do_syscall_64+0x174/0x580 [ 263.779765][ T9879] ? trace_irq_disable+0x3b/0x140 [ 263.779802][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.779825][ T9879] RIP: 0033:0x7f3c1f39ce59 [ 263.779845][ T9879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.779864][ T9879] RSP: 002b:00007f3c201af028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 263.779885][ T9879] RAX: ffffffffffffffda RBX: 00007f3c1f615fa0 RCX: 00007f3c1f39ce59 [ 263.779902][ T9879] RDX: 0000000069747369 RSI: 0000000074617473 RDI: 0000200000000040 [ 263.779917][ T9879] RBP: 00007f3c1f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 263.779931][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.779944][ T9879] R13: 00007f3c1f616038 R14: 00007f3c1f615fa0 R15: 00007ffdf54dcd78 [ 263.779971][ T9879] [ 264.139513][ T9448] veth0_macvtap: entered promiscuous mode [ 264.148189][ T9448] veth1_macvtap: entered promiscuous mode [ 264.163142][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.172644][ T988] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.173086][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.182757][ T988] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.299928][ T9896] netlink: 'syz.1.1381': attribute type 14 has an invalid length. [ 264.304943][ T6611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.350295][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.361602][ T1006] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.375915][ T1006] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.400279][ T1006] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.410159][ T988] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 264.420767][ T988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 264.440905][ T9448] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 264.468018][ T988] usb 7-1: SerialNumber: syz [ 264.546115][ T5811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.551842][ T9448] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 264.554895][ T5811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.601851][ T5811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.610202][ T5811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.722149][ T988] usb 7-1: 0:2 : does not exist [ 264.743748][ T988] usb 7-1: USB disconnect, device number 8