last executing test programs: 1m4.966816932s ago: executing program 2 (id=264): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32874000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 1m4.848601185s ago: executing program 2 (id=265): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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") openat(0xffffffffffffff9c, 0x0, 0xc4842, 0x1ff) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x9f) 1m2.614840244s ago: executing program 2 (id=280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmmsg$unix(r1, &(0x7f0000002740)=[{{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x10}}], 0x48, 0x800}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040880}}, {{0x0, 0x0, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x4000800}}], 0x3, 0x800) 1m2.036522707s ago: executing program 2 (id=282): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 1m1.85835284s ago: executing program 2 (id=284): mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) clock_adjtime(0x0, 0x0) 1m1.42060615s ago: executing program 2 (id=289): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m1.087844337s ago: executing program 32 (id=289): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 27.886381757s ago: executing program 4 (id=515): r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x5, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d64b3e5a7c94742"}, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000000c0)={0x4, {"dfa42cb98dc632375aa7ab3380423074", "5fa48dff6911db23b8612e1b1d5cc3ec", "2b6e34ea1bb045c2ed2afeeecc2aebca"}, 0xd, 0x7}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x2, {"1d38ca818d18d32c1e000934ef1eba25", "4b90069fc4dba9355533372a6af62fa2", "7e040f6294498be8f202e6713bf6920d"}, 0x8, 0x3}) 27.659317232s ago: executing program 4 (id=517): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) 27.500653266s ago: executing program 4 (id=518): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 26.586172816s ago: executing program 4 (id=520): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000940)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x2) 26.064817437s ago: executing program 4 (id=525): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x7fe, 0x8}) lseek(r0, 0x1ff, 0x4) 23.794565277s ago: executing program 4 (id=541): socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/93, 0x5d}], 0x1, 0x2000004, 0x0) 23.631892181s ago: executing program 33 (id=541): socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/93, 0x5d}], 0x1, 0x2000004, 0x0) 6.36162315s ago: executing program 5 (id=670): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @empty}}, 0x40005, 0x1, 0xfff7, 0x0, 0x14, 0x2}, 0x9c) 5.91657313s ago: executing program 5 (id=673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.510592379s ago: executing program 5 (id=677): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x5, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0x3, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000004c0)={r1}, &(0x7f00000005c0)=0x8) 5.231043255s ago: executing program 5 (id=678): membarrier(0x10, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x7d, &(0x7f0000000080)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x3, 0x6}, &(0x7f0000000840)=0x20) 4.671246708s ago: executing program 1 (id=680): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000", 0x2b}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 4.670264968s ago: executing program 3 (id=681): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf1b, &(0x7f0000001e80)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) 4.227082097s ago: executing program 5 (id=682): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x78e, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902"], 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 3.352393936s ago: executing program 1 (id=684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 3.100485322s ago: executing program 3 (id=686): unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20) 2.911171336s ago: executing program 1 (id=688): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000019400)={[{@mb_optimize_scan}, {@noblock_validity}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@commit={'commit', 0x3d, 0x5}}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x2c}}], 0x2c}, 0x42, 0x4fc, &(0x7f0000000e40)="$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") syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x2000004, &(0x7f00000001c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f180d10ec70d5636861727365743d63703836352c636f649ab513f4b1f1761563726f6d616e2c00"], 0x41, 0x30d, &(0x7f00000022c0)="$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") symlink(0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 2.518529645s ago: executing program 3 (id=689): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2.313954879s ago: executing program 3 (id=691): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x84, 0x2, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x1, 0x3, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0xbd7, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6ca, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7fff, 0x6, 0x500, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x8, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0xfffff256, 0x6, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x8, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0xfffffffd, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x400007, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000003, 0xb9, 0xce4, 0x10001ff, 0x2, 0x1000, 0x5, 0x3, 0x2, 0x0, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x80000002, 0x5, 0x0, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.126622043s ago: executing program 3 (id=693): r0 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d4806edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0xc100) 2.057879575s ago: executing program 6 (id=694): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0xa, 0x4, 0x8fb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.822528s ago: executing program 6 (id=696): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000005c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x80, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x64, 0x1000, 0x0, 0x1, 0xa, @local, @multicast1, {[@ssrr={0x89, 0xf, 0x18, [@multicast2, @empty, @multicast2]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0x7, "2016e44527"}, {0x5, 0x9, "cda155f8446838"}, {0x2, 0xb, "1adbfd38959d4c8d63"}, {0x5, 0xd, "86d299388651838be571c4"}]}]}}}}}}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x7, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x2e}, @loopback}, 0xc) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2002, 0x0) 1.570455905s ago: executing program 6 (id=698): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/207, 0xcf}], 0x2}, 0x7fffffff}], 0x1, 0x2022, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 1.36627229s ago: executing program 1 (id=700): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x1000) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 1.3508513s ago: executing program 6 (id=701): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0), 0x0, 0x48e, &(0x7f0000000d00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0x100, 0x1) 1.170576724s ago: executing program 0 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000001080)='./file0\x00', 0x200) 1.139327905s ago: executing program 1 (id=703): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x8840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@sb={'sb', 0x3d, 0x8000000000000000}}, {@jqfmt_vfsv1}, {@dioread_nolock}, {@nogrpid}, {@noload}]}, 0x1, 0x25c, &(0x7f0000000a40)="$eJzs3TFoG1cYB/DvTpJd26K47VIotIVSSmsw7lbo4i4tGIoxpRTagkspXVrsgmvTze6UJUMyJ8FTFhOyxckYvJgsCQmZnMSDswQSkyEmQzIoyGcHJ5YjEck6k/v94NCd9N5975D+74TgdAEU1mBEjEZEKSKGIqISEcneBh9ny+DO5mLf6mRErfbDw2S7Xbad2e03EBELEfFVRKykSfxVjphb/mXj8dp3nx2frXx6dvnnvq4e5I7NjfXvt86MH7sw9uXctZv3x5MYjeoLx9V5SYPnyknEu4dR7IhIynmPgFZM/Hf+Vj3370XEJ9v5r0Qa2Zt3YqZnpRJfnD6o78kH1z/o5liBzqvVKvVz4EINKJw0IqqRpMMRka2n6fBw9h3+dqk//Xt65t+hP6dnp/7Ie6YCOqUasf7tpd6LAy/l/14pyz/w5qrn/8eJpTv19a1S3qMBuqme/6Hf5j8P+YfCkX8oLvmH4pJ/KK5X5T9t1vnGW4c3MOC19bTYzvkfikv+objayX/lkMYEdIfzPxSX/ENx7c0/AFAstd59lwTv/rzXwpXDLTQDjqwcpx4AAAAAAAAAAAAAAAAAAOAAi32rk7tLt2peORWx+U1ElBvVL+3chyC710D/o6Te7Lkk69aWXz9qcwdtOpfz1ddv3823/tUP860/PxWx8H9EjJTL+z9/SfP7YDTxTpPXK7+3WaBNX/+Ub/2nS/nWH1uLuFyff0YazT9pvL/92Hj+qXbgf5D/edLmDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiaZwEAAP//wMpeJw==") r1 = open(&(0x7f0000000000)='./file1\x00', 0x14b142, 0x80) ftruncate(r1, 0x2007ffb) write$FUSE_IOCTL(r1, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x3, 0x4, 0x1, 0x5}}, 0x20) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) 954.564149ms ago: executing program 0 (id=704): bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 954.404729ms ago: executing program 0 (id=705): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @remote, 0xc00003}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 893.20936ms ago: executing program 0 (id=706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x0) 874.119941ms ago: executing program 5 (id=707): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') 676.824945ms ago: executing program 0 (id=708): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x30) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, &(0x7f00000044c0)={0x2020}, 0x2020) 614.509506ms ago: executing program 6 (id=709): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x216}], 0x1}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 587.031897ms ago: executing program 0 (id=710): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 240.279225ms ago: executing program 6 (id=711): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x800480, &(0x7f0000000240), 0x1, 0x786, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x104001, 0x0, 0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000000f) 158.411876ms ago: executing program 1 (id=712): syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x800852, &(0x7f0000000180)={[{@nossd_spread}, {@autodefrag}, {@clear_cache}, {@discard_sync}, {@compress_force}, {@space_cache_v1}, {@clear_cache}, {@nodatacow}]}, 0xf8, 0x50f9, &(0x7f0000005140)="$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") open(&(0x7f0000000080)='./file1\x00', 0x80242, 0x0) utime(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) 0s ago: executing program 3 (id=713): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000c00)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x57c, &(0x7f0000000380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0x0, 0x0) kernel console output (not intermixed with test programs): 619d30d) [ 96.632900][ T25] audit: type=1800 audit(1783953597.414:6): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.246" name="file1" dev="loop0" ino=1048613 res=0 errno=0 [ 96.671737][ T13] usb 4-1: string descriptor 0 read error: -22 [ 96.699297][ T13] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 96.766603][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.890054][ T13] usb 4-1: selecting invalid altsetting 1 [ 96.902180][ T13] usb 4-1: unit 6 not found! [ 97.136703][ T4995] loop2: detected capacity change from 0 to 512 [ 97.236119][ T4999] loop1: detected capacity change from 0 to 2048 [ 97.293233][ T4999] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 97.311578][ T4999] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 97.377068][ T4966] loop4: detected capacity change from 0 to 32768 [ 97.427662][ T4999] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,mblk_io_submit,usrquota,mblk_io_submit,minixdf,barrier=0x0000000000000002,nombcache,bsddf,. Quota mode: writeback. [ 97.450982][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.461301][ T2303] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.537789][ T4966] XFS (loop4): Mounting V5 Filesystem [ 97.664712][ T4966] XFS (loop4): Ending clean mount [ 97.816428][ T13] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 97.851571][ T2303] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.870631][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.888266][ T4190] XFS (loop4): Unmounting Filesystem [ 97.916070][ T2303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.021603][ T2303] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.041054][ T2303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.053833][ T4234] usb 4-1: USB disconnect, device number 3 [ 98.108682][ T2303] usb 1-1: SerialNumber: syz [ 98.433830][ T2303] usb 1-1: 0:2 : does not exist [ 98.474896][ T2303] usb 1-1: USB disconnect, device number 2 [ 98.692873][ T5021] loop3: detected capacity change from 0 to 512 [ 98.739544][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.760930][ T5021] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.799321][ T5021] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.860766][ T5021] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.917044][ T5021] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.262: bg 0: block 425: padding at end of block bitmap is not set [ 98.989127][ T5021] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 99.014005][ T5021] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.262: attempt to clear invalid blocks 983260 len 1 [ 99.062360][ T5021] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.262: Invalid inode table block 0 in block_group 0 [ 99.127612][ T5021] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 99.156845][ T5021] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 99.201798][ T5021] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.262: Invalid inode table block 0 in block_group 0 [ 99.232191][ T5021] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 99.242142][ T2303] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.265860][ T5021] EXT4-fs error (device loop3): ext4_truncate:4286: inode #11: comm syz.3.262: mark_inode_dirty error [ 99.289389][ T5021] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 99.397796][ T5021] EXT4-fs (loop3): 1 truncate cleaned up [ 99.417237][ T5021] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,quota,user_xattr,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 99.531470][ T2303] usb 2-1: Using ep0 maxpacket: 32 [ 99.638412][ T5021] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.262: Invalid inode bitmap blk 0 in block_group 0 [ 99.671422][ T2303] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 99.679642][ T2303] usb 2-1: config 0 has no interface number 0 [ 99.707546][ T2303] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 99.750693][ T5032] device syzkaller1 entered promiscuous mode [ 99.758953][ T2303] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 99.961931][ T2303] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 99.975191][ T2303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.022997][ T2303] usb 2-1: Product: syz [ 100.027198][ T2303] usb 2-1: Manufacturer: syz [ 100.067244][ T2303] usb 2-1: SerialNumber: syz [ 100.116152][ T2303] usb 2-1: config 0 descriptor?? [ 100.133096][ T5036] loop0: detected capacity change from 0 to 4096 [ 100.161704][ T5024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.169201][ T5024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.184105][ T5042] loop3: detected capacity change from 0 to 128 [ 100.235116][ T5042] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 100.280197][ T5042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.336608][ T5028] loop2: detected capacity change from 0 to 32768 [ 100.383256][ T5036] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 100.461939][ T5028] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.265 (5028) [ 100.517558][ T5024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.558762][ T5024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.621359][ T5028] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 100.630113][ T5028] BTRFS info (device loop2): using free space tree [ 100.726429][ T5028] BTRFS info (device loop2): has skinny extents [ 101.113735][ T4192] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 101.122614][ T5028] BTRFS info (device loop2): enabling ssd optimizations [ 101.315064][ T2303] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 101.354963][ T2303] asix: probe of 2-1:0.188 failed with error -71 [ 101.422384][ T2303] usb 2-1: USB disconnect, device number 4 [ 101.678417][ T5047] loop4: detected capacity change from 0 to 32768 [ 101.836589][ T25] audit: type=1800 audit(1783953602.604:7): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.274" name="file2" dev="loop4" ino=5 res=0 errno=0 [ 102.173103][ T5091] loop0: Can't mount, would change RO state [ 102.579230][ T5095] loop1: detected capacity change from 0 to 32768 [ 102.631141][ T5095] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 102.639762][ T5095] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 102.652927][ T5101] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 102.682694][ T5095] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 102.698865][ T4381] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 102.707160][ T4381] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.848248][ T4381] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 141ms [ 102.882809][ T4381] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.890350][ T5095] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 103.129695][ T5095] gfs2: fsid=syz:syz.0: found 1 quota changes [ 103.279692][ T5095] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 103.279692][ T5095] inode = 11 2339 [ 103.279692][ T5095] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 410 [ 103.298685][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.305048][ T5095] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 103.322364][ T5095] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 103.336489][ T5095] CPU: 1 PID: 5095 Comm: syz.1.286 Not tainted syzkaller #0 [ 103.343786][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.353875][ T5095] Call Trace: [ 103.357165][ T5095] [ 103.360100][ T5095] dump_stack_lvl+0x188/0x250 [ 103.364803][ T5095] ? show_regs_print_info+0x20/0x20 [ 103.370015][ T5095] ? load_image+0x410/0x410 [ 103.374534][ T5095] ? do_raw_spin_unlock+0x11d/0x230 [ 103.379751][ T5095] gfs2_assert_warn_i+0x187/0x2c0 [ 103.384808][ T5095] gfs2_quota_cleanup+0x48c/0x670 [ 103.389860][ T5095] gfs2_make_fs_ro+0x440/0x620 [ 103.394642][ T5095] ? __might_sleep+0xf0/0xf0 [ 103.399251][ T5095] ? gfs2_dinode_out+0xb00/0xb00 [ 103.404203][ T5095] ? _raw_spin_unlock+0x24/0x40 [ 103.409070][ T5095] ? gfs2_glock_nq+0xcaa/0x1510 [ 103.413945][ T5095] gfs2_withdraw+0x660/0x14e0 [ 103.418637][ T5095] ? gfs2_meta_new+0x160/0x160 [ 103.423421][ T5095] ? gfs2_lm+0x240/0x240 [ 103.427670][ T5095] ? gfs2_freeze_lock+0x52/0xc0 [ 103.432531][ T5095] ? gfs2_consist_inode_i+0xc0/0xe0 [ 103.437739][ T5095] gfs2_inode_refresh+0xb2d/0x11a0 [ 103.442882][ T5095] ? gfs2_inode_metasync+0xf0/0xf0 [ 103.448010][ T5095] inode_go_lock+0x127/0x450 [ 103.452600][ T5095] do_promote+0x75b/0xb20 [ 103.456934][ T5095] finish_xmote+0x4c2/0xaf0 [ 103.461437][ T5095] do_xmote+0x752/0x10a0 [ 103.465677][ T5095] gfs2_glock_nq+0xc6b/0x1510 [ 103.470480][ T5095] do_sync+0x49c/0xba0 [ 103.474549][ T5095] ? slot_put+0x1e0/0x1e0 [ 103.478877][ T5095] ? __lock_acquire+0x7b50/0x7b50 [ 103.483905][ T5095] ? do_raw_spin_lock+0x128/0x2f0 [ 103.488989][ T5095] ? do_sync+0x494/0xba0 [ 103.493235][ T5095] ? do_raw_spin_unlock+0x11d/0x230 [ 103.498438][ T5095] gfs2_quota_sync+0x355/0x780 [ 103.503207][ T5095] gfs2_sync_fs+0x48/0xb0 [ 103.507534][ T5095] sync_filesystem+0xe6/0x220 [ 103.512207][ T5095] gfs2_reconfigure+0x11a/0xd80 [ 103.517055][ T5095] ? shrink_dcache_sb+0x385/0x3d0 [ 103.522072][ T5095] ? gfs2_get_tree+0x1e0/0x1e0 [ 103.526826][ T5095] ? dentry_lru_isolate+0x2e0/0x2e0 [ 103.532021][ T5095] ? hook_sb_remount+0x19/0xc0 [ 103.536780][ T5095] reconfigure_super+0x224/0x8d0 [ 103.541981][ T5095] path_mount+0xc5a/0xfe0 [ 103.546306][ T5095] ? user_path_at_empty+0x13e/0x190 [ 103.551493][ T5095] __se_sys_mount+0x2e3/0x3d0 [ 103.556165][ T5095] ? __x64_sys_mount+0xc0/0xc0 [ 103.560924][ T5095] ? lockdep_hardirqs_on+0x94/0x140 [ 103.566115][ T5095] ? __x64_sys_mount+0x1c/0xc0 [ 103.570867][ T5095] do_syscall_64+0x4c/0xa0 [ 103.575272][ T5095] ? clear_bhb_loop+0x30/0x80 [ 103.579943][ T5095] ? clear_bhb_loop+0x30/0x80 [ 103.584723][ T5095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.590617][ T5095] RIP: 0033:0x7f9626e7ae59 [ 103.595022][ T5095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.614620][ T5095] RSP: 002b:00007f96250d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.623205][ T5095] RAX: ffffffffffffffda RBX: 00007f9627102fa0 RCX: 00007f9626e7ae59 [ 103.631169][ T5095] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 103.639218][ T5095] RBP: 00007f9626f10e6f R08: 0000000000000000 R09: 0000000000000000 [ 103.647180][ T5095] R10: 0000000002b90026 R11: 0000000000000246 R12: 0000000000000000 [ 103.655136][ T5095] R13: 00007f9627103038 R14: 00007f9627102fa0 R15: 00007fffbeff05f8 [ 103.663105][ T5095] [ 103.666143][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.672904][ T5095] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 103.681732][ T5095] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 103.691179][ T5095] gfs2: fsid=syz:syz.0: File system withdrawn [ 103.697394][ T5095] CPU: 1 PID: 5095 Comm: syz.1.286 Not tainted syzkaller #0 [ 103.704692][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.714760][ T5095] Call Trace: [ 103.718045][ T5095] [ 103.720986][ T5095] dump_stack_lvl+0x188/0x250 [ 103.725686][ T5095] ? show_regs_print_info+0x20/0x20 [ 103.730912][ T5095] ? load_image+0x410/0x410 [ 103.735444][ T5095] ? lockref_put_or_lock+0x6e/0xb0 [ 103.740591][ T5095] gfs2_withdraw+0xb9a/0x14e0 [ 103.745292][ T5095] ? gfs2_meta_new+0x160/0x160 [ 103.750074][ T5095] ? gfs2_lm+0x240/0x240 [ 103.754338][ T5095] ? gfs2_consist_inode_i+0xc0/0xe0 [ 103.759562][ T5095] gfs2_inode_refresh+0xb2d/0x11a0 [ 103.764703][ T5095] ? gfs2_inode_metasync+0xf0/0xf0 [ 103.769842][ T5095] inode_go_lock+0x127/0x450 [ 103.774452][ T5095] do_promote+0x75b/0xb20 [ 103.778805][ T5095] finish_xmote+0x4c2/0xaf0 [ 103.783327][ T5095] do_xmote+0x752/0x10a0 [ 103.787590][ T5095] gfs2_glock_nq+0xc6b/0x1510 [ 103.792334][ T5095] do_sync+0x49c/0xba0 [ 103.796429][ T5095] ? slot_put+0x1e0/0x1e0 [ 103.800771][ T5095] ? __lock_acquire+0x7b50/0x7b50 [ 103.805813][ T5095] ? do_raw_spin_lock+0x128/0x2f0 [ 103.810853][ T5095] ? do_sync+0x494/0xba0 [ 103.815108][ T5095] ? do_raw_spin_unlock+0x11d/0x230 [ 103.820335][ T5095] gfs2_quota_sync+0x355/0x780 [ 103.825130][ T5095] gfs2_sync_fs+0x48/0xb0 [ 103.829483][ T5095] sync_filesystem+0xe6/0x220 [ 103.834182][ T5095] gfs2_reconfigure+0x11a/0xd80 [ 103.839055][ T5095] ? shrink_dcache_sb+0x385/0x3d0 [ 103.844098][ T5095] ? gfs2_get_tree+0x1e0/0x1e0 [ 103.848967][ T5095] ? dentry_lru_isolate+0x2e0/0x2e0 [ 103.854190][ T5095] ? hook_sb_remount+0x19/0xc0 [ 103.858971][ T5095] reconfigure_super+0x224/0x8d0 [ 103.863940][ T5095] path_mount+0xc5a/0xfe0 [ 103.868291][ T5095] ? user_path_at_empty+0x13e/0x190 [ 103.873496][ T5095] __se_sys_mount+0x2e3/0x3d0 [ 103.878188][ T5095] ? __x64_sys_mount+0xc0/0xc0 [ 103.882962][ T5095] ? lockdep_hardirqs_on+0x94/0x140 [ 103.888178][ T5095] ? __x64_sys_mount+0x1c/0xc0 [ 103.892963][ T5095] do_syscall_64+0x4c/0xa0 [ 103.897391][ T5095] ? clear_bhb_loop+0x30/0x80 [ 103.902073][ T5095] ? clear_bhb_loop+0x30/0x80 [ 103.906764][ T5095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.912670][ T5095] RIP: 0033:0x7f9626e7ae59 [ 103.917095][ T5095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.936721][ T5095] RSP: 002b:00007f96250d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.945153][ T5095] RAX: ffffffffffffffda RBX: 00007f9627102fa0 RCX: 00007f9626e7ae59 [ 103.953137][ T5095] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 103.961118][ T5095] RBP: 00007f9626f10e6f R08: 0000000000000000 R09: 0000000000000000 [ 103.969103][ T5095] R10: 0000000002b90026 R11: 0000000000000246 R12: 0000000000000000 [ 103.977125][ T5095] R13: 00007f9627103038 R14: 00007f9627102fa0 R15: 00007fffbeff05f8 [ 103.985125][ T5095] [ 103.988202][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.995603][ T5095] gfs2: unable to remount read-write [ 104.401337][ T1110] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.416844][ T5100] loop0: detected capacity change from 0 to 40427 [ 104.532674][ T5123] mmap: syz.3.296 (5123) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 104.572179][ T5100] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 104.621320][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 104.659886][ T5100] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 104.729856][ T5100] F2FS-fs (loop0): invalid crc value [ 104.751714][ T5126] loop1: detected capacity change from 0 to 512 [ 104.764507][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.772455][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.789380][ T5100] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.809114][ T5112] device bridge_slave_0 entered promiscuous mode [ 104.861571][ T1110] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.872093][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.879179][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.887727][ T5126] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 104.918285][ T5126] System zones: 0-2, 18-18, 34-35 [ 104.991479][ T1110] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.002910][ T5100] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 105.006933][ T5126] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.009961][ T5100] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.031275][ T1110] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.043538][ T5138] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.060759][ T1110] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 105.073339][ T5126] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.081670][ T5112] device bridge_slave_1 entered promiscuous mode [ 105.125976][ T1110] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 105.220558][ T1110] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 105.235615][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.277673][ T1110] usb 5-1: config 1 interface 1 has no altsetting 0 [ 105.303065][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.437314][ T5142] device syzkaller1 entered promiscuous mode [ 105.481327][ T5112] team0: Port device team_slave_0 added [ 105.557874][ T1110] usb 5-1: string descriptor 0 read error: -22 [ 105.584859][ T1110] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 105.612850][ T5112] team0: Port device team_slave_1 added [ 105.634066][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.670241][ T5146] loop1: detected capacity change from 0 to 256 [ 105.721719][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.728703][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.754582][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.901285][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.958693][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.038102][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.064063][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.071842][ T4381] Bluetooth: hci0: command 0x0409 tx timeout [ 106.105580][ T5156] loop1: detected capacity change from 0 to 1024 [ 106.170204][ T5156] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 106.180681][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.203620][ T5156] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 106.212568][ T5156] EXT4-fs (loop1): inline encryption not supported [ 106.227341][ T5156] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 106.245933][ T5156] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.268324][ T5112] device hsr_slave_0 entered promiscuous mode [ 106.276571][ T5112] device hsr_slave_1 entered promiscuous mode [ 106.306954][ T5156] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nomblk_io_submit,noblock_validity,nomblk_io_submit,inlinecrypt,grpquota,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 106.330769][ T5156] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.345123][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.383714][ T5112] Cannot create hsr debugfs directory [ 106.669722][ T5166] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.728471][ T5164] loop3: detected capacity change from 0 to 4096 [ 106.881628][ T5164] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 106.962257][ T5112] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.022807][ T5112] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.043036][ T5112] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.086529][ T5112] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.172682][ T4189] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 107.429236][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.505088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.534361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.598829][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.640450][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.658008][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.680948][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.688718][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.714048][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.750759][ T21] usb 5-1: USB disconnect, device number 6 [ 107.784368][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.871475][ T4381] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.890004][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.922384][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.929538][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.950906][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.005008][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.047279][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.071179][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.103983][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.119778][ T5172] loop1: detected capacity change from 0 to 40427 [ 108.127063][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 108.141785][ T4381] usb 4-1: Using ep0 maxpacket: 8 [ 108.148111][ T5185] device syzkaller1 entered promiscuous mode [ 108.169316][ T5172] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 108.181477][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.196739][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.212548][ T5172] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 108.239112][ T5112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.264069][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.270020][ T5172] F2FS-fs (loop1): invalid crc value [ 108.281825][ T4381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.313128][ T4381] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.353316][ T4381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.368495][ T5172] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.386536][ T4381] usb 4-1: config 0 descriptor?? [ 108.430911][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.457453][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.480817][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.502745][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.512246][ T5172] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.519316][ T5172] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.528753][ T5178] loop0: detected capacity change from 0 to 40427 [ 108.535213][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.600964][ T5178] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 108.637237][ T5178] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 108.673844][ T4381] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 108.686816][ T5178] F2FS-fs (loop0): invalid crc value [ 108.778279][ T5178] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 108.815247][ T4430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.973814][ T4198] usb 4-1: USB disconnect, device number 4 [ 108.981980][ C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 109.007495][ T4430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.067461][ T5178] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 109.088219][ T5178] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.157849][ T5201] loop4: detected capacity change from 0 to 4096 [ 109.188032][ T4430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.270954][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.298992][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.350483][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.366317][ T4192] attempt to access beyond end of device [ 109.366317][ T4192] loop0: rw=2049, want=45104, limit=40427 [ 109.384868][ T4430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.399549][ T5201] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 109.576406][ T5207] loop1: detected capacity change from 0 to 64 [ 109.594459][ T4190] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 109.725237][ T5209] Bluetooth: hci1: unsupported parameter 65535 [ 109.770830][ T5209] Bluetooth: hci1: invalid length 0, exp 2 for type 5 [ 110.140580][ T5216] loop0: detected capacity change from 0 to 1024 [ 110.208098][ T4194] Bluetooth: hci0: command 0x040f tx timeout [ 110.218452][ T5216] EXT4-fs (loop0): Ignoring removed bh option [ 110.262905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.329684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.346573][ T5216] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 110.461885][ T5112] device veth0_vlan entered promiscuous mode [ 110.496010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.509605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.525662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.535909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.564464][ T5112] device veth1_vlan entered promiscuous mode [ 110.676215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.690755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.704142][ T5112] device veth0_macvtap entered promiscuous mode [ 110.744557][ T5112] device veth1_macvtap entered promiscuous mode [ 110.791779][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.808887][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.819753][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.830730][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.843873][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.856387][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.867692][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.879598][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.901464][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.912027][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.923563][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.935062][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.946045][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.956703][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.968175][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.981328][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.998041][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.010338][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.027282][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.037460][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.056371][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.069914][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.089682][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.106119][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.115889][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.127262][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.142562][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.156853][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.171932][ T5112] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.180678][ T5112] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.195418][ T5112] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.216402][ T5112] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.403703][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.420130][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.483101][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.554775][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.577573][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.596176][ T4430] device hsr_slave_0 left promiscuous mode [ 111.610528][ T4430] device hsr_slave_1 left promiscuous mode [ 111.625408][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.636142][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.654656][ T4430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.665135][ T4430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.675222][ T4430] device bridge_slave_1 left promiscuous mode [ 111.685685][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.705566][ T4430] device bridge_slave_0 left promiscuous mode [ 111.713145][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.763105][ T4430] device veth1_macvtap left promiscuous mode [ 111.769968][ T4430] device veth0_macvtap left promiscuous mode [ 111.776140][ T4430] device veth1_vlan left promiscuous mode [ 111.782373][ T4430] device veth0_vlan left promiscuous mode [ 111.916566][ T4430] team0 (unregistering): Port device team_slave_1 removed [ 111.928511][ T4430] team0 (unregistering): Port device team_slave_0 removed [ 111.942432][ T4430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.958138][ T4430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.000896][ T4430] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 112.025884][ T4430] bond0 (unregistering): Released all slaves [ 112.086664][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.216013][ T5268] loop0: detected capacity change from 0 to 512 [ 112.292321][ T4194] Bluetooth: hci0: command 0x0419 tx timeout [ 112.382283][ T5268] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.333: bad orphan inode 15 [ 112.461397][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 112.526098][ T5268] ext4_test_bit(bit=14, block=5) = 0 [ 112.564797][ T5268] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 112.861495][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.941464][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.964992][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.066452][ T5278] loop3: detected capacity change from 0 to 32768 [ 113.213802][ T25] audit: type=1800 audit(1783953613.994:8): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.325" name="file2" dev="loop3" ino=5 res=0 errno=0 [ 113.231561][ T7] usb 5-1: string descriptor 0 read error: -22 [ 113.241449][ T7] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 113.286963][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.353540][ T5307] loop5: detected capacity change from 0 to 2048 [ 113.363784][ T7] usb 5-1: selecting invalid altsetting 1 [ 113.369915][ T7] usb 5-1: unit 6 not found! [ 113.469897][ T5307] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 113.490659][ T5307] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 113.535508][ T5307] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,mblk_io_submit,usrquota,mblk_io_submit,minixdf,barrier=0x0000000000000002,nombcache,bsddf,. Quota mode: writeback. [ 113.558828][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.730751][ T5316] loop3: detected capacity change from 0 to 256 [ 113.805534][ T5318] loop1: detected capacity change from 0 to 1024 [ 113.870174][ T5300] loop0: detected capacity change from 0 to 40427 [ 113.937085][ T5300] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 113.937381][ T5322] loop5: detected capacity change from 0 to 128 [ 113.979617][ T5318] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 113.981189][ T5300] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 114.008631][ T5325] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 114.028863][ T5300] F2FS-fs (loop0): invalid crc value [ 114.033430][ T5325] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 114.050827][ T5318] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 114.076482][ T5300] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 114.088939][ T5322] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 114.184280][ T4739] hfsplus: b-tree write err: -5, ino 25 [ 114.211014][ T4739] hfsplus: b-tree write err: -5, ino 4 [ 114.233004][ T7] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 114.250614][ T5300] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 114.256407][ T4739] hfsplus: b-tree write err: -5, ino 2 [ 114.261155][ T5300] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 114.276740][ T5322] FAT-fs (loop5): error, corrupted directory (invalid i_start) [ 114.279833][ T4739] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 114.292088][ T5322] FAT-fs (loop5): Filesystem has been set read-only [ 114.346058][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.363466][ T4739] hfsplus: b-tree write err: -5, ino 27 [ 114.414122][ T5112] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 114.448892][ T5274] usb 5-1: USB disconnect, device number 7 [ 114.621570][ T4192] attempt to access beyond end of device [ 114.621570][ T4192] loop0: rw=2049, want=45104, limit=40427 [ 115.097785][ T5361] loop4: detected capacity change from 0 to 256 [ 115.116050][ T5361] exfat: Deprecated parameter 'namecase' [ 115.222013][ T5361] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 115.357050][ T25] audit: type=1800 audit(1783953616.134:9): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.346" name="file1" dev="loop4" ino=1048620 res=0 errno=0 [ 115.441163][ T5371] loop0: detected capacity change from 0 to 1024 [ 115.564219][ T5371] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 115.583287][ T5371] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 115.655116][ T5371] EXT4-fs (loop0): inline encryption not supported [ 115.664626][ T5377] loop4: detected capacity change from 0 to 1024 [ 115.692607][ T5371] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 115.721621][ T5377] EXT4-fs (loop4): Ignoring removed bh option [ 115.734750][ T5345] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 115.759371][ T5371] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.776259][ T5345] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.822169][ T5377] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 115.927223][ T5371] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nomblk_io_submit,noblock_validity,nomblk_io_submit,inlinecrypt,grpquota,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 115.952263][ T5345] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.022020][ T5371] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.120494][ T5397] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 116.239438][ T5345] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 116.240042][ T5397] FAT-fs (loop1): error, corrupted directory (invalid i_start) [ 116.268275][ T5345] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.308366][ T5397] FAT-fs (loop1): Filesystem has been set read-only [ 116.500902][ T4188] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 116.611410][ T5413] device syzkaller1 entered promiscuous mode [ 117.090717][ T5417] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 117.120146][ T5437] netlink: 72 bytes leftover after parsing attributes in process `syz.3.362'. [ 117.173215][ T5417] REISERFS (device loop5): using ordered data mode [ 117.179780][ T5417] reiserfs: using flush barriers [ 117.198458][ T5417] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.242056][ T5417] REISERFS (device loop5): checking transaction log (loop5) [ 117.374652][ T5443] set_capacity_and_notify: 4 callbacks suppressed [ 117.374666][ T5443] loop4: detected capacity change from 0 to 1024 [ 117.455129][ T5443] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 117.499342][ T5443] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 117.532883][ T5443] EXT4-fs (loop4): inline encryption not supported [ 117.550721][ T5443] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 117.558823][ T5417] REISERFS (device loop5): Using tea hash to sort names [ 117.572752][ T5417] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 117.589145][ T5443] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.650395][ T5443] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nomblk_io_submit,noblock_validity,nomblk_io_submit,inlinecrypt,grpquota,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 117.672698][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.698791][ T5443] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.959030][ T5458] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.502294][ T5439] loop3: detected capacity change from 0 to 40427 [ 118.538917][ T5439] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 118.587635][ T5439] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 118.627355][ T5439] F2FS-fs (loop3): invalid crc value [ 118.656141][ T5439] F2FS-fs (loop3): Found nat_bits in checkpoint [ 118.768319][ T5458] syz.1.367 (5458) used greatest stack depth: 20720 bytes left [ 118.779658][ T5439] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 118.791295][ T5439] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 118.948823][ T5491] loop1: detected capacity change from 0 to 256 [ 119.178077][ T5498] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.196551][ T5498] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 119.445031][ T5508] loop5: detected capacity change from 0 to 64 [ 119.536912][ T5512] device syzkaller1 entered promiscuous mode [ 119.888426][ T5523] loop3: detected capacity change from 0 to 1024 [ 119.912852][ T5526] loop5: detected capacity change from 0 to 2048 [ 119.969299][ T5526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.016665][ T5523] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.203443][ T5516] loop1: detected capacity change from 0 to 40427 [ 120.265023][ T5516] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 120.290245][ T5516] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 120.352148][ T5542] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.354195][ T5516] F2FS-fs (loop1): invalid crc value [ 120.507882][ T5548] Invalid argument reading file caps for ./file0 [ 120.529738][ T5516] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 120.838867][ T5516] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 120.861421][ T5516] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.988128][ T5565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.399'. [ 121.016101][ T4188] attempt to access beyond end of device [ 121.016101][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 121.312892][ T5541] loop3: detected capacity change from 0 to 40427 [ 121.362969][ T5541] F2FS-fs (loop3): Invalid Fs Meta Ino: node(2305) meta(2) root(3) [ 121.370912][ T5541] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.383071][ T5559] loop0: detected capacity change from 0 to 32768 [ 121.416818][ T5541] F2FS-fs (loop3): invalid crc value [ 121.518321][ T5559] XFS (loop0): Mounting V5 Filesystem [ 121.522172][ T5575] loop1: detected capacity change from 0 to 128 [ 121.523842][ T5541] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.644603][ T25] audit: type=1804 audit(1783953622.424:10): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.400" name="/newroot/83/bus/bus" dev="loop1" ino=1048628 res=1 errno=0 [ 121.692638][ T5541] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 121.698785][ T5559] XFS (loop0): Ending clean mount [ 121.699703][ T5541] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.722441][ T5559] XFS (loop0): Quotacheck needed: Please wait. [ 121.795579][ T5559] XFS (loop0): Quotacheck: Done. [ 121.821105][ T5559] bridge0: port 3(syz_tun) entered blocking state [ 121.829806][ T5559] bridge0: port 3(syz_tun) entered disabled state [ 121.837552][ T5559] device syz_tun entered promiscuous mode [ 121.846149][ T5559] bridge0: port 3(syz_tun) entered blocking state [ 121.852683][ T5559] bridge0: port 3(syz_tun) entered forwarding state [ 121.869372][ T4189] attempt to access beyond end of device [ 121.869372][ T4189] loop3: rw=2049, want=45112, limit=40427 [ 121.919618][ T4192] XFS (loop0): Unmounting Filesystem [ 121.991960][ T5575] attempt to access beyond end of device [ 121.991960][ T5575] loop1: rw=2049, want=129, limit=128 [ 122.010131][ T5575] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 122.177975][ T5585] hfs: keylen 1794 too large [ 122.185939][ T5585] hfs: keylen 1794 too large [ 122.254685][ T5588] hfs: keylen 1794 too large [ 122.388210][ T5590] set_capacity_and_notify: 1 callbacks suppressed [ 122.388225][ T5590] loop3: detected capacity change from 0 to 2048 [ 122.438457][ T5590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.492034][ T5596] device syzkaller1 entered promiscuous mode [ 122.707918][ T5610] loop1: detected capacity change from 0 to 256 [ 122.772777][ T5610] exfat: Deprecated parameter 'namecase' [ 122.807071][ T5610] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 122.904102][ T25] audit: type=1800 audit(1783953623.684:11): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.414" name="file1" dev="loop1" ino=1048629 res=0 errno=0 [ 123.074700][ T5624] loop1: detected capacity change from 0 to 64 [ 123.094944][ T5626] loop3: detected capacity change from 0 to 128 [ 123.173746][ T25] audit: type=1804 audit(1783953623.954:12): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.419" name="/newroot/76/bus/bus" dev="loop3" ino=1048630 res=1 errno=0 [ 123.244147][ T5624] hfs: keylen 1794 too large [ 123.253697][ T5631] loop4: detected capacity change from 0 to 512 [ 123.273840][ T5624] hfs: keylen 1794 too large [ 123.300373][ T5632] hfs: keylen 1794 too large [ 123.359895][ T5631] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 123.373262][ T5626] attempt to access beyond end of device [ 123.373262][ T5626] loop3: rw=2049, want=129, limit=128 [ 123.388660][ T5626] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 123.399733][ T5631] ext4 filesystem being mounted at /77/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.479543][ T5617] loop5: detected capacity change from 0 to 40427 [ 123.515069][ T5639] loop1: detected capacity change from 0 to 512 [ 123.540112][ T5617] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 123.549106][ T5617] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 123.562153][ T5639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.583953][ T5617] F2FS-fs (loop5): invalid crc value [ 123.642851][ T5639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8016c018, mo2=0002] [ 123.668662][ T5617] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 123.684079][ T5639] EXT4-fs (loop1): 1 truncate cleaned up [ 123.690622][ T5639] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,grpquota,debug_want_extra_isize=0x000000000000006c,mb_optimize_scan=0x0000000000000001,debug,data=journal,noblock_validity,,errors=continue. Quota mode: writeback. [ 123.782564][ T5651] device syzkaller1 entered promiscuous mode [ 123.793364][ T5652] loop0: detected capacity change from 0 to 512 [ 123.840378][ T5648] loop4: detected capacity change from 0 to 2048 [ 123.906704][ T5652] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.941075][ T5617] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 123.986390][ T5617] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 124.008065][ T5648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.038445][ T5112] attempt to access beyond end of device [ 124.038445][ T5112] loop5: rw=2049, want=45104, limit=40427 [ 124.072638][ T5656] loop3: detected capacity change from 0 to 256 [ 124.111856][ T5656] exfat: Deprecated parameter 'namecase' [ 124.175526][ T5656] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 124.288877][ T25] audit: type=1800 audit(1783953625.064:13): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.432" name="file1" dev="loop3" ino=1048631 res=0 errno=0 [ 124.707280][ T5683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.444'. [ 124.763591][ T5685] netlink: 72 bytes leftover after parsing attributes in process `syz.5.433'. [ 124.822566][ T5682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.912278][ T5692] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 124.919430][ T5692] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.098647][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.450'. [ 125.356198][ T5710] input: syz0 as /devices/virtual/input/input9 [ 125.465989][ T5709] SQUASHFS error: zlib decompression failed, data probably corrupt [ 125.501292][ T5709] SQUASHFS error: Failed to read block 0x9b: -5 [ 125.507584][ T5709] SQUASHFS error: Unable to read metadata cache entry [99] [ 125.554273][ T5709] SQUASHFS error: Unable to read inode 0x127 [ 125.662774][ T5718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.679833][ T5716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.897730][ T5726] netlink: 256 bytes leftover after parsing attributes in process `syz.1.459'. [ 125.948840][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 125.979692][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 126.041721][ T4194] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 126.164124][ T5728] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.180868][ T5728] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.365628][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.521749][ T4194] usb 6-1: unable to get BOS descriptor or descriptor too short [ 126.631501][ T4194] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.656089][ T4194] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 126.682271][ T4194] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 126.705623][ T4194] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 126.733380][ T4194] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.760771][ T4194] usb 6-1: config 1 interface 1 has no altsetting 0 [ 127.036981][ T5758] hugetlbfs: syz.3.467 (5758): Using mlock ulimits for SHM_HUGETLB is deprecated [ 127.081618][ T4194] usb 6-1: string descriptor 0 read error: -22 [ 127.087885][ T4194] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 127.133309][ T5762] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,max_dir_size_kb=0x0000000000000004,norecovery,,errors=continue. Quota mode: none. [ 127.149649][ T4194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.239881][ T4194] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 127.268744][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.298132][ T5762] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.321437][ T1110] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.364741][ T5762] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 127.400230][ T5762] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.400230][ T5762] [ 127.442057][ T5762] EXT4-fs (loop4): Total free blocks count 0 [ 127.448085][ T5762] EXT4-fs (loop4): Free/Dirty block details [ 127.496679][ T5762] EXT4-fs (loop4): free_blocks=2415919104 [ 127.516630][ T5762] EXT4-fs (loop4): dirty_blocks=48 [ 127.522951][ T5762] EXT4-fs (loop4): Block reservation details [ 127.545896][ T5762] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 127.628083][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 127.851373][ T4234] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.859206][ T5774] set_capacity_and_notify: 6 callbacks suppressed [ 127.859218][ T5774] loop4: detected capacity change from 0 to 32768 [ 127.891435][ T5774] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.472 (5774) [ 127.914215][ T5774] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 127.923119][ T5774] BTRFS info (device loop4): using free space tree [ 127.929652][ T5774] BTRFS info (device loop4): has skinny extents [ 127.952503][ T1110] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 127.983017][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.001567][ T1110] usb 1-1: Product: syz [ 128.006080][ T1110] usb 1-1: Manufacturer: syz [ 128.008888][ T5786] loop3: detected capacity change from 0 to 1024 [ 128.010685][ T1110] usb 1-1: SerialNumber: syz [ 128.071110][ T5786] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.082068][ T5774] BTRFS info (device loop4): enabling ssd optimizations [ 128.089104][ T1110] usb 1-1: config 0 descriptor?? [ 128.091576][ T5786] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.120085][ T5786] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.473: lblock 3 mapped to illegal pblock 3 (length 3) [ 128.143221][ T5786] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 128.166320][ T5786] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.166320][ T5786] [ 128.181680][ T4234] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 128.195209][ T5786] EXT4-fs error (device loop3): ext4_ext_remove_space:2944: inode #15: comm syz.3.473: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 128.292106][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.293896][ T4430] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 128.311390][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.331155][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.398863][ T4430] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 128.416633][ T4430] EXT4-fs (loop3): This should not happen!! Data will be lost [ 128.416633][ T4430] [ 128.433373][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.443299][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.460633][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.562188][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 128.571793][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.591529][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.621509][ T1110] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 128.629308][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.646164][ T1110] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.677349][ T1110] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 128.688196][ T1110] usb 1-1: media controller created [ 128.721439][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.730357][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.744522][ T1110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.775615][ T5809] xt_hashlimit: size too large, truncated to 1048576 [ 128.784431][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.834783][ T5805] team0: Port device team_slave_0 removed [ 128.865443][ T4792] usb 6-1: USB disconnect, device number 2 [ 128.881766][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.902853][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.924909][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.021502][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.030425][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.071443][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.151624][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.167374][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.186406][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.311538][ T4234] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.320471][ T4234] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.356311][ T4234] usb 2-1: config 0 interface 0 has no altsetting 0 [ 129.372700][ T1110] zl10353_read_register: readreg error (reg=127, ret==0) [ 129.380496][ T5754] dtv5100: wlen = 3, aborting. [ 129.400654][ T1110] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 129.420814][ T1110] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 129.470517][ T1110] usb 1-1: USB disconnect, device number 3 [ 129.539828][ T1110] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 129.552007][ T4234] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 129.561064][ T4234] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 129.591290][ T4234] usb 2-1: Product: syz [ 129.595489][ T4234] usb 2-1: Manufacturer: syz [ 129.600087][ T4234] usb 2-1: SerialNumber: syz [ 129.656354][ T4234] usb 2-1: config 0 descriptor?? [ 129.678913][ T5833] loop5: detected capacity change from 0 to 32768 [ 129.721474][ T4234] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 129.817246][ T5833] XFS (loop5): Mounting V5 Filesystem [ 129.949135][ T5833] XFS (loop5): Ending clean mount [ 129.995918][ T5833] XFS (loop5): Quotacheck needed: Please wait. [ 130.095837][ T5833] XFS (loop5): Quotacheck: Done. [ 130.142317][ T5833] bridge0: port 3(syz_tun) entered blocking state [ 130.159803][ T5833] bridge0: port 3(syz_tun) entered disabled state [ 130.178827][ T5833] device syz_tun entered promiscuous mode [ 130.186028][ T5833] bridge0: port 3(syz_tun) entered blocking state [ 130.192555][ T5833] bridge0: port 3(syz_tun) entered forwarding state [ 130.195105][ T4198] usb 2-1: USB disconnect, device number 5 [ 130.205154][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 130.235811][ T5112] XFS (loop5): Unmounting Filesystem [ 130.276977][ T4198] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 130.318026][ T5870] netlink: 256 bytes leftover after parsing attributes in process `syz.4.486'. [ 130.788506][ T5888] loop5: detected capacity change from 0 to 2048 [ 130.856816][ T5888] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,max_dir_size_kb=0x0000000000000004,norecovery,,errors=continue. Quota mode: none. [ 131.058308][ T5888] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.095757][ T5897] loop4: detected capacity change from 0 to 8192 [ 131.143762][ T5897] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 131.169623][ T5888] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 131.171546][ T5897] REISERFS (device loop4): using ordered data mode [ 131.193592][ T5897] reiserfs: using flush barriers [ 131.221402][ T5897] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.321569][ T4194] Bluetooth: hci0: command 0x1407 tx timeout [ 131.328692][ T5888] EXT4-fs (loop5): This should not happen!! Data will be lost [ 131.328692][ T5888] [ 131.341784][ T5897] REISERFS (device loop4): checking transaction log (loop4) [ 131.348705][ T5888] EXT4-fs (loop5): Total free blocks count 0 [ 131.372814][ T5888] EXT4-fs (loop5): Free/Dirty block details [ 131.391346][ T5888] EXT4-fs (loop5): free_blocks=2415919104 [ 131.406909][ T5888] EXT4-fs (loop5): dirty_blocks=48 [ 131.431812][ T5888] EXT4-fs (loop5): Block reservation details [ 131.447520][ T5888] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 131.645556][ T5897] REISERFS (device loop4): Using tea hash to sort names [ 131.657995][ T5897] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 131.998114][ T5900] loop1: detected capacity change from 0 to 32768 [ 132.092540][ T5900] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.488 (5900) [ 132.157790][ T5900] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 132.191564][ T5900] BTRFS info (device loop1): using free space tree [ 132.208575][ T5900] BTRFS info (device loop1): has skinny extents [ 132.331407][ T4198] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 132.461716][ T5900] BTRFS info (device loop1): enabling ssd optimizations [ 132.515716][ T5950] loop4: detected capacity change from 0 to 512 [ 132.557121][ T5950] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.601357][ T4198] usb 6-1: Using ep0 maxpacket: 16 [ 132.619383][ T5950] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.494: bad orphan inode 131083 [ 132.654885][ T5950] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 132.766713][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773634][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.961574][ T4198] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 132.985874][ T4198] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.014397][ T4198] usb 6-1: Product: syz [ 133.018607][ T4198] usb 6-1: Manufacturer: syz [ 133.080884][ T4198] usb 6-1: SerialNumber: syz [ 133.690513][ T5960] loop1: detected capacity change from 0 to 32768 [ 133.846405][ T5964] loop4: detected capacity change from 0 to 32768 [ 133.898949][ T5964] [ 133.898949][ T5964] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.898949][ T5964] [ 133.922172][ T5960] XFS (loop1): Mounting V5 Filesystem [ 134.039824][ T5964] ERROR: (device loop4): diWrite: ixpxd invalid [ 134.039824][ T5964] [ 134.052411][ T5964] ERROR: (device loop4): txCommit: [ 134.052411][ T5964] [ 134.105225][ T5960] XFS (loop1): Ending clean mount [ 134.131570][ T5960] XFS (loop1): Quotacheck needed: Please wait. [ 134.152212][ T1183] ERROR: (device loop4): diWrite: ixpxd invalid [ 134.152212][ T1183] [ 134.161054][ T1183] ERROR: (device loop4): txCommit: [ 134.161054][ T1183] [ 134.185578][ T1183] jfs_write_inode: jfs_commit_inode failed! [ 134.207927][ T4190] [ 134.207927][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.207927][ T4190] [ 134.249618][ T4190] [ 134.249618][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.249618][ T4190] [ 134.251491][ T4198] snd-usb-audio: probe of 6-1:1.0 failed with error -71 [ 134.307731][ T5960] XFS (loop1): Quotacheck: Done. [ 134.319310][ T4198] usb 6-1: USB disconnect, device number 3 [ 134.409672][ T5960] bridge0: port 3(syz_tun) entered blocking state [ 134.425872][ T5960] bridge0: port 3(syz_tun) entered disabled state [ 134.492840][ T5960] device syz_tun entered promiscuous mode [ 134.498959][ T5960] bridge0: port 3(syz_tun) entered blocking state [ 134.505493][ T5960] bridge0: port 3(syz_tun) entered forwarding state [ 134.642748][ T4188] XFS (loop1): Unmounting Filesystem [ 134.864609][ T6010] loop5: detected capacity change from 0 to 1024 [ 134.960999][ T5991] loop3: detected capacity change from 0 to 40427 [ 135.048848][ T5991] F2FS-fs (loop3): invalid crc value [ 135.109521][ T5991] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 135.273805][ T5991] F2FS-fs (loop3): Start checkpoint disabled! [ 135.308664][ T5991] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 135.531596][ T4430] attempt to access beyond end of device [ 135.531596][ T4430] loop3: rw=2049, want=45112, limit=40427 [ 135.611945][ T6027] loop5: detected capacity change from 0 to 4096 [ 135.688271][ T6027] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.948918][ T6027] syz.5.506 (6027) used greatest stack depth: 20704 bytes left [ 136.031102][ T6039] loop0: detected capacity change from 0 to 32768 [ 136.089055][ T6039] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 136.097373][ T6039] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 136.136106][ T6039] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 136.147266][ T4377] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 136.158757][ T4377] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 136.197412][ T4377] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 38ms [ 136.217431][ T4377] gfs2: fsid=syz:syz.0: jid=0: Done [ 136.234123][ T6039] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 136.392466][ T6039] gfs2: fsid=syz:syz.0: found 1 quota changes [ 136.505124][ T6055] loop5: detected capacity change from 0 to 512 [ 136.565278][ T6039] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 136.565278][ T6039] inode = 11 2339 [ 136.565278][ T6039] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 410 [ 136.584208][ T6039] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 136.599152][ T6039] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 136.614623][ T6039] CPU: 1 PID: 6039 Comm: syz.0.511 Not tainted syzkaller #0 [ 136.621936][ T6039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.632006][ T6039] Call Trace: [ 136.635302][ T6039] [ 136.638249][ T6039] dump_stack_lvl+0x188/0x250 [ 136.642947][ T6039] ? show_regs_print_info+0x20/0x20 [ 136.648165][ T6039] ? load_image+0x410/0x410 [ 136.652702][ T6039] ? do_raw_spin_unlock+0x11d/0x230 [ 136.657918][ T6039] gfs2_assert_warn_i+0x187/0x2c0 [ 136.663214][ T6039] gfs2_quota_cleanup+0x48c/0x670 [ 136.668263][ T6039] gfs2_make_fs_ro+0x440/0x620 [ 136.673050][ T6039] ? __might_sleep+0xf0/0xf0 [ 136.677658][ T6039] ? gfs2_dinode_out+0xb00/0xb00 [ 136.682609][ T6039] ? _raw_spin_unlock+0x24/0x40 [ 136.687487][ T6039] ? gfs2_glock_nq+0xcaa/0x1510 [ 136.692380][ T6039] gfs2_withdraw+0x660/0x14e0 [ 136.697077][ T6039] ? gfs2_meta_new+0x160/0x160 [ 136.701860][ T6039] ? gfs2_lm+0x240/0x240 [ 136.706304][ T6039] ? gfs2_freeze_lock+0x52/0xc0 [ 136.711188][ T6039] ? gfs2_consist_inode_i+0xc0/0xe0 [ 136.716417][ T6039] gfs2_inode_refresh+0xb2d/0x11a0 [ 136.721560][ T6039] ? gfs2_inode_metasync+0xf0/0xf0 [ 136.726703][ T6039] inode_go_lock+0x127/0x450 [ 136.731341][ T6039] do_promote+0x75b/0xb20 [ 136.735709][ T6039] finish_xmote+0x4c2/0xaf0 [ 136.740243][ T6039] do_xmote+0x752/0x10a0 [ 136.744513][ T6039] gfs2_glock_nq+0xc6b/0x1510 [ 136.744778][ T6048] loop3: detected capacity change from 0 to 32768 [ 136.749204][ T6039] do_sync+0x49c/0xba0 [ 136.759716][ T6039] ? slot_put+0x1e0/0x1e0 [ 136.764070][ T6039] ? __lock_acquire+0x7b50/0x7b50 [ 136.769120][ T6039] ? do_raw_spin_lock+0x128/0x2f0 [ 136.774168][ T6039] ? do_sync+0x494/0xba0 [ 136.778432][ T6039] ? do_raw_spin_unlock+0x11d/0x230 [ 136.783737][ T6039] gfs2_quota_sync+0x355/0x780 [ 136.788530][ T6039] gfs2_sync_fs+0x48/0xb0 [ 136.792881][ T6039] sync_filesystem+0xe6/0x220 [ 136.797582][ T6039] gfs2_reconfigure+0x11a/0xd80 [ 136.802450][ T6039] ? shrink_dcache_sb+0x385/0x3d0 [ 136.807496][ T6039] ? gfs2_get_tree+0x1e0/0x1e0 [ 136.812328][ T6039] ? dentry_lru_isolate+0x2e0/0x2e0 [ 136.817569][ T6039] ? hook_sb_remount+0x19/0xc0 [ 136.822359][ T6039] reconfigure_super+0x224/0x8d0 [ 136.827345][ T6039] path_mount+0xc5a/0xfe0 [ 136.831784][ T6039] ? user_path_at_empty+0x13e/0x190 [ 136.837004][ T6039] __se_sys_mount+0x2e3/0x3d0 [ 136.841705][ T6039] ? __x64_sys_mount+0xc0/0xc0 [ 136.846580][ T6039] ? lockdep_hardirqs_on+0x94/0x140 [ 136.851792][ T6039] ? __x64_sys_mount+0x1c/0xc0 [ 136.856573][ T6039] do_syscall_64+0x4c/0xa0 [ 136.861008][ T6039] ? clear_bhb_loop+0x30/0x80 [ 136.865701][ T6039] ? clear_bhb_loop+0x30/0x80 [ 136.870397][ T6039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.876309][ T6039] RIP: 0033:0x7f1b0b7c2e59 [ 136.880745][ T6039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.900363][ T6039] RSP: 002b:00007f1b09a1b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.908802][ T6039] RAX: ffffffffffffffda RBX: 00007f1b0ba4afa0 RCX: 00007f1b0b7c2e59 [ 136.916787][ T6039] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 136.924799][ T6039] RBP: 00007f1b0b858e6f R08: 0000000000000000 R09: 0000000000000000 [ 136.932780][ T6039] R10: 0000000002b90026 R11: 0000000000000246 R12: 0000000000000000 [ 136.940760][ T6039] R13: 00007f1b0ba4b038 R14: 00007f1b0ba4afa0 R15: 00007ffd173df3a8 [ 136.948761][ T6039] [ 136.952592][ T6039] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 136.963623][ T6039] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 136.970354][ T6039] gfs2: fsid=syz:syz.0: File system withdrawn [ 136.976507][ T6039] CPU: 1 PID: 6039 Comm: syz.0.511 Not tainted syzkaller #0 [ 136.983794][ T6039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.993870][ T6039] Call Trace: [ 136.997161][ T6039] [ 137.000096][ T6039] dump_stack_lvl+0x188/0x250 [ 137.004785][ T6039] ? show_regs_print_info+0x20/0x20 [ 137.009987][ T6039] ? load_image+0x410/0x410 [ 137.014501][ T6039] ? lockref_put_or_lock+0x6e/0xb0 [ 137.019631][ T6039] gfs2_withdraw+0xb9a/0x14e0 [ 137.024324][ T6039] ? gfs2_meta_new+0x160/0x160 [ 137.029096][ T6039] ? gfs2_lm+0x240/0x240 [ 137.033355][ T6039] ? gfs2_consist_inode_i+0xc0/0xe0 [ 137.038568][ T6039] gfs2_inode_refresh+0xb2d/0x11a0 [ 137.043699][ T6039] ? gfs2_inode_metasync+0xf0/0xf0 [ 137.045516][ T6055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 137.048839][ T6039] inode_go_lock+0x127/0x450 [ 137.048870][ T6039] do_promote+0x75b/0xb20 [ 137.065114][ T6055] System zones: [ 137.065645][ T6039] finish_xmote+0x4c2/0xaf0 [ 137.066103][ T6055] 1-12 [ 137.069209][ T6039] do_xmote+0x752/0x10a0 [ 137.069240][ T6039] gfs2_glock_nq+0xc6b/0x1510 [ 137.069272][ T6039] do_sync+0x49c/0xba0 [ 137.069304][ T6039] ? slot_put+0x1e0/0x1e0 [ 137.089331][ T6048] XFS (loop3): Mounting V5 Filesystem [ 137.089735][ T6039] ? __lock_acquire+0x7b50/0x7b50 [ 137.104497][ T6039] ? do_raw_spin_lock+0x128/0x2f0 [ 137.106545][ T6055] [ 137.109531][ T6039] ? do_sync+0x494/0xba0 [ 137.109558][ T6039] ? do_raw_spin_unlock+0x11d/0x230 [ 137.121310][ T6039] gfs2_quota_sync+0x355/0x780 [ 137.126106][ T6039] gfs2_sync_fs+0x48/0xb0 [ 137.130459][ T6039] sync_filesystem+0xe6/0x220 [ 137.135190][ T6039] gfs2_reconfigure+0x11a/0xd80 [ 137.140061][ T6039] ? shrink_dcache_sb+0x385/0x3d0 [ 137.145107][ T6039] ? gfs2_get_tree+0x1e0/0x1e0 [ 137.149905][ T6039] ? dentry_lru_isolate+0x2e0/0x2e0 [ 137.152750][ T6055] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.516: Directory hole found for htree index block 0 [ 137.167427][ T6039] ? hook_sb_remount+0x19/0xc0 [ 137.167464][ T6039] reconfigure_super+0x224/0x8d0 [ 137.167491][ T6039] path_mount+0xc5a/0xfe0 [ 137.167513][ T6039] ? user_path_at_empty+0x13e/0x190 [ 137.186738][ T6039] __se_sys_mount+0x2e3/0x3d0 [ 137.191445][ T6039] ? __x64_sys_mount+0xc0/0xc0 [ 137.196235][ T6039] ? lockdep_hardirqs_on+0x94/0x140 [ 137.201456][ T6039] ? __x64_sys_mount+0x1c/0xc0 [ 137.206071][ T6048] XFS (loop3): Ending clean mount [ 137.206241][ T6039] do_syscall_64+0x4c/0xa0 [ 137.215652][ T6039] ? clear_bhb_loop+0x30/0x80 [ 137.217298][ T6048] XFS (loop3): Quotacheck needed: Please wait. [ 137.220344][ T6039] ? clear_bhb_loop+0x30/0x80 [ 137.220374][ T6039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.237149][ T6039] RIP: 0033:0x7f1b0b7c2e59 [ 137.241583][ T6039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.252056][ T6055] EXT4-fs (loop5): Remounting filesystem read-only [ 137.261198][ T6039] RSP: 002b:00007f1b09a1b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.261231][ T6039] RAX: ffffffffffffffda RBX: 00007f1b0ba4afa0 RCX: 00007f1b0b7c2e59 [ 137.261243][ T6039] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 137.261255][ T6039] RBP: 00007f1b0b858e6f R08: 0000000000000000 R09: 0000000000000000 [ 137.261265][ T6039] R10: 0000000002b90026 R11: 0000000000000246 R12: 0000000000000000 [ 137.261275][ T6039] R13: 00007f1b0ba4b038 R14: 00007f1b0ba4afa0 R15: 00007ffd173df3a8 [ 137.261301][ T6039] [ 137.319276][ T6039] gfs2: unable to remount read-write [ 137.335478][ T6048] XFS (loop3): Quotacheck: Done. [ 137.340377][ T6055] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 137.348889][ T6055] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.516: Directory hole found for htree index block 0 [ 137.391724][ T6055] EXT4-fs (loop5): Remounting filesystem read-only [ 137.403742][ T6059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.414760][ T6055] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 137.426023][ T6059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.457178][ T6055] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 137.471599][ T6048] bridge0: port 3(syz_tun) entered blocking state [ 137.499679][ T6048] bridge0: port 3(syz_tun) entered disabled state [ 137.522310][ T6048] device syz_tun entered promiscuous mode [ 137.558926][ T6048] bridge0: port 3(syz_tun) entered blocking state [ 137.565471][ T6048] bridge0: port 3(syz_tun) entered forwarding state [ 137.616641][ T6074] loop4: detected capacity change from 0 to 1024 [ 137.637856][ T6055] EXT4-fs (loop5): shut down requested (2) [ 137.664629][ T4189] XFS (loop3): Unmounting Filesystem [ 137.692455][ T6074] EXT4-fs (loop4): Ignoring removed bh option [ 137.721455][ T6074] EXT4-fs (loop4): Ignoring removed bh option [ 137.730297][ T6076] loop0: detected capacity change from 0 to 256 [ 137.748014][ T6074] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,bh,min_batch_time=0x0000000000000008,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 137.800925][ T6076] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.197010][ T4190] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /104/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 138.248854][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.526'. [ 138.278779][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 138.293049][ T4190] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /104/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 138.333245][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 138.360242][ T4190] EXT4-fs error (device loop4): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 138.411524][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 138.431657][ T4190] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 138.443886][ T6085] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 138.465858][ T6085] REISERFS (device loop0): using ordered data mode [ 138.473166][ T6085] reiserfs: using flush barriers [ 138.486202][ T6085] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.500675][ T4190] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /104/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 138.511706][ T6085] REISERFS (device loop0): checking transaction log (loop0) [ 138.556717][ T6092] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.527: bg 0: block 5: invalid block bitmap [ 138.664497][ T6092] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 138.721017][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 138.740438][ T6092] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.527: invalid indirect mapped block 3 (level 2) [ 138.764968][ T6085] REISERFS (device loop0): Using tea hash to sort names [ 138.779118][ T6085] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 138.788382][ T4190] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /104/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 138.816652][ T6092] EXT4-fs (loop3): 2 truncates cleaned up [ 138.822656][ T6092] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.856194][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 138.863555][ T6092] EXT4-fs (loop3): shut down requested (2) [ 138.870745][ T6092] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 138.896427][ T4190] EXT4-fs error (device loop4): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 138.921973][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 138.928711][ T4190] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 138.952549][ T4190] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /104/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 139.000264][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 139.011003][ T4190] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /104/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 139.039146][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 139.046202][ T4190] EXT4-fs error (device loop4): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 139.096544][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 139.121425][ T4190] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 139.145394][ T4190] EXT4-fs error (device loop4): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /104/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 139.172518][ T4190] EXT4-fs (loop4): Remounting filesystem read-only [ 139.191447][ T4190] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 139.233385][ T4190] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 139.295324][ T4190] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 139.325971][ T4190] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 139.358784][ T6107] set_capacity_and_notify: 2 callbacks suppressed [ 139.358800][ T6107] loop5: detected capacity change from 0 to 1024 [ 139.404908][ T4190] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 139.462531][ T4190] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 139.515343][ T4190] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 139.879007][ T6111] loop3: detected capacity change from 0 to 32768 [ 139.988312][ T6124] netlink: 'syz.0.537': attribute type 10 has an invalid length. [ 140.010612][ T6111] XFS (loop3): Mounting V5 Filesystem [ 140.011378][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 140.056464][ T6124] team0: Port device dummy0 added [ 140.091833][ T4295] bridge0: port 3(syz_tun) entered disabled state [ 140.166499][ T4295] device syz_tun left promiscuous mode [ 140.180085][ T6111] XFS (loop3): Ending clean mount [ 140.193926][ T4295] bridge0: port 3(syz_tun) entered disabled state [ 140.208968][ T6111] XFS (loop3): Quotacheck needed: Please wait. [ 140.232847][ T6128] netlink: 'syz.0.537': attribute type 10 has an invalid length. [ 140.269321][ T6111] XFS (loop3): Quotacheck: Done. [ 140.277075][ T6128] team0: Port device dummy0 removed [ 140.285725][ T6128] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 140.318248][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.351608][ T7] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 140.425342][ T4189] XFS (loop3): Unmounting Filesystem [ 140.439552][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.454105][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.481913][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.504748][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.545331][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.601713][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.610719][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.641483][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.679093][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.751462][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.766085][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.816846][ T6140] chnl_net:caif_netlink_parms(): no params data found [ 140.822678][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.882937][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.890889][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.899099][ T6140] device bridge_slave_0 entered promiscuous mode [ 140.908540][ T6140] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.915819][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.924007][ T6140] device bridge_slave_1 entered promiscuous mode [ 140.951669][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.970232][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.976000][ T6140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.005454][ T6149] loop3: detected capacity change from 0 to 128 [ 141.024451][ T6140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.033977][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 141.093803][ T6140] team0: Port device team_slave_0 added [ 141.103137][ T6140] team0: Port device team_slave_1 added [ 141.123356][ T6149] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.137756][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.149377][ T6149] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.164083][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.189175][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 141.200783][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.217283][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.262593][ T6140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.275249][ T6140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.289538][ T6140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.315667][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.331835][ T1190] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.342732][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.349228][ T6153] loop1: detected capacity change from 0 to 2048 [ 141.358830][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.373158][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 141.380282][ T6140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.417796][ T6153] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.471797][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.501087][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.547443][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 141.560507][ T6140] device hsr_slave_0 entered promiscuous mode [ 141.576146][ T6140] device hsr_slave_1 entered promiscuous mode [ 141.583622][ T6140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.591794][ T6140] Cannot create hsr debugfs directory [ 141.651586][ T7] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.681436][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.707045][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 141.892346][ T7] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 141.914298][ T7] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 141.931555][ T7] usb 6-1: Product: syz [ 141.950604][ T7] usb 6-1: Manufacturer: syz [ 141.958299][ T7] usb 6-1: SerialNumber: syz [ 141.972183][ T7] usb 6-1: config 0 descriptor?? [ 142.011902][ T6140] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 142.041672][ T7] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 142.049712][ T6140] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 142.076076][ T6140] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 142.138549][ T6140] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 142.279444][ T6140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.310241][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.319744][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.353388][ T6140] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.369444][ T144] device hsr_slave_0 left promiscuous mode [ 142.377057][ T144] device hsr_slave_1 left promiscuous mode [ 142.384055][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.392110][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.406317][ T4234] usb 6-1: USB disconnect, device number 4 [ 142.418963][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.426455][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 142.447003][ T4234] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 142.477585][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.488671][ T144] device bridge_slave_1 left promiscuous mode [ 142.495239][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.505459][ T144] device bridge_slave_0 left promiscuous mode [ 142.515410][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.531723][ T144] device veth1_macvtap left promiscuous mode [ 142.537788][ T144] device veth0_macvtap left promiscuous mode [ 142.544291][ T144] device veth1_vlan left promiscuous mode [ 142.550094][ T144] device veth0_vlan left promiscuous mode [ 142.724182][ T144] team0 (unregistering): Port device team_slave_1 removed [ 142.737641][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.751015][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.761407][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 142.815508][ T144] bond0 (unregistering): Released all slaves [ 142.869241][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.879378][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.888156][ T4739] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.895280][ T4739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.903657][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.922597][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.937535][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.946411][ T4739] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.953526][ T4739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.000457][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.025615][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.035311][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.047231][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.057167][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.077546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.099188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.132388][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.161888][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.186831][ T6140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.202827][ T6140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.222694][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.231808][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.351083][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.369338][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.393217][ T6140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.723198][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.737644][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.791394][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.799705][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.832333][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.840193][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.883372][ T6140] device veth0_vlan entered promiscuous mode [ 143.920280][ T6140] device veth1_vlan entered promiscuous mode [ 143.966943][ T6140] device veth0_macvtap entered promiscuous mode [ 143.990494][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.004586][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.024022][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.048414][ T6140] device veth1_macvtap entered promiscuous mode [ 144.090444][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.126215][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.147350][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.186138][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.201737][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.221301][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.231150][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.271697][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.291744][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.305765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.316643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.329807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.366045][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.377018][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.387643][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.398971][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.409549][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.432411][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.442922][ T6140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.453654][ T6140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.464902][ T6140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.478378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.495372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.509458][ T6140] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.518401][ T6140] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.533748][ T6140] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.545310][ T6140] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.665565][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.688897][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.704961][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.745709][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.765880][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.784688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.844093][ T1110] Bluetooth: hci4: command 0x041b tx timeout [ 144.892984][ T6246] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 144.944610][ T6246] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 145.119916][ T6253] loop6: detected capacity change from 0 to 8192 [ 145.158988][ T6253] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 145.198938][ T6253] REISERFS (device loop6): using ordered data mode [ 145.227550][ T6253] reiserfs: using flush barriers [ 145.233795][ T6253] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 145.251737][ T6253] REISERFS (device loop6): checking transaction log (loop6) [ 145.345307][ T6253] REISERFS (device loop6): Using tea hash to sort names [ 145.371874][ T6253] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 145.687111][ T6270] loop3: detected capacity change from 0 to 1024 [ 145.692349][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.555'. [ 145.731884][ T6273] netlink: 48 bytes leftover after parsing attributes in process `syz.1.555'. [ 145.818239][ T6270] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 146.132970][ T6293] loop5: detected capacity change from 0 to 2048 [ 146.320988][ T6293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.650017][ T6314] netlink: 'syz.5.570': attribute type 1 has an invalid length. [ 146.708061][ T6314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.716131][ T6314] IPv6: NLM_F_CREATE should be set when creating new route [ 146.781738][ T4377] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.921391][ T4194] Bluetooth: hci4: command 0x040f tx timeout [ 147.032121][ T4377] usb 4-1: Using ep0 maxpacket: 32 [ 147.047783][ T6285] loop0: detected capacity change from 0 to 32768 [ 147.148735][ T6285] JBD2: Ignoring recovery information on journal [ 147.151824][ T4377] usb 4-1: config 0 has no interfaces? [ 147.307948][ T6301] loop6: detected capacity change from 0 to 32768 [ 147.321796][ T4377] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 147.342222][ T4377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.350995][ T4377] usb 4-1: Product: syz [ 147.355943][ T6285] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 147.358079][ T4377] usb 4-1: Manufacturer: syz [ 147.372796][ T4377] usb 4-1: SerialNumber: syz [ 147.401821][ T4377] usb 4-1: config 0 descriptor?? [ 147.419550][ T6301] XFS (loop6): Mounting V5 Filesystem [ 147.438991][ T6332] loop5: detected capacity change from 0 to 512 [ 147.573449][ T6301] XFS (loop6): Ending clean mount [ 147.603312][ T6332] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.628814][ T6332] ext4 filesystem being mounted at /proc/129/cgroup supports timestamps until 2038-01-19 (0x7fffffff) [ 147.657689][ T6301] XFS (loop6): Quotacheck needed: Please wait. [ 147.664689][ T25] audit: type=1800 audit(1783953648.434:14): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.558" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 147.672105][ T6346] netlink: 'syz.1.574': attribute type 4 has an invalid length. [ 147.836233][ T6301] XFS (loop6): Quotacheck: Done. [ 147.861310][ T5274] usb 4-1: USB disconnect, device number 5 [ 147.900310][ T4192] ocfs2: Unmounting device (7,0) on (node local) [ 147.911671][ T6301] bridge0: port 3(syz_tun) entered blocking state [ 147.918204][ T6301] bridge0: port 3(syz_tun) entered disabled state [ 148.016081][ T6301] device syz_tun entered promiscuous mode [ 148.091885][ T6301] bridge0: port 3(syz_tun) entered blocking state [ 148.098407][ T6301] bridge0: port 3(syz_tun) entered forwarding state [ 148.289425][ T6140] XFS (loop6): Unmounting Filesystem [ 148.416961][ T6365] loop1: detected capacity change from 0 to 128 [ 148.495167][ T25] audit: type=1800 audit(1783953649.264:15): pid=6365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.582" name="file2" dev="loop1" ino=1048638 res=0 errno=0 [ 148.520741][ T6365] attempt to access beyond end of device [ 148.520741][ T6365] loop1: rw=2049, want=234, limit=128 [ 148.533586][ T4198] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 148.927122][ T4198] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.943066][ T4198] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.001712][ T4377] Bluetooth: hci4: command 0x0419 tx timeout [ 149.090912][ T6394] loop6: detected capacity change from 0 to 512 [ 149.100972][ T4198] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 149.112669][ T4198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.125287][ T4198] usb 6-1: SerialNumber: syz [ 149.172367][ T4198] usb 6-1: bad CDC descriptors [ 149.178165][ T4198] usb-storage 6-1:1.0: USB Mass Storage device detected [ 149.191561][ T6394] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.211207][ T6394] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 149.250024][ T6394] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 149.272176][ T4198] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 149.306747][ T6394] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e02c, mo2=0006] [ 149.316316][ T6394] System zones: 0-2, 18-18, 34-35 [ 149.338254][ T6394] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 149.385972][ T4198] usb 6-1: USB disconnect, device number 5 [ 149.568690][ T6394] fscrypt (loop6, inode 12): Error -61 getting encryption context [ 149.603483][ T6394] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.589: bg 0: block 353: padding at end of block bitmap is not set [ 149.641778][ T6394] EXT4-fs (loop6): Remounting filesystem read-only [ 149.849800][ T6418] loop1: detected capacity change from 0 to 512 [ 149.964519][ T6418] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.011678][ T6418] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 150.075697][ T6428] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 150.088953][ T6428] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.286376][ T6436] loop5: detected capacity change from 0 to 256 [ 150.334057][ T6436] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.367710][ T6436] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 150.429425][ T6436] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 150.493335][ T6442] loop1: detected capacity change from 0 to 512 [ 150.595692][ T6442] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 150.621668][ T6442] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.858695][ T6453] all (unregistering): Released all slaves [ 151.049268][ T6463] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 151.184517][ T6467] netlink: 28 bytes leftover after parsing attributes in process `syz.6.608'. [ 151.266896][ T6469] loop1: detected capacity change from 0 to 512 [ 151.306704][ T6469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.380941][ T6469] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.609: bad orphan inode 131083 [ 151.397496][ T6469] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 151.820005][ T6492] loop3: detected capacity change from 0 to 512 [ 151.925728][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.958854][ T6492] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.975649][ T6492] Quota error (device loop3): v2_read_file_info: Block with free entry too big (9 >= 6). [ 151.983166][ T6494] loop6: detected capacity change from 0 to 4096 [ 151.990822][ T6492] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.015985][ T6492] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 152.078651][ T6492] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.619: bad orphan inode 14 [ 152.137220][ T6492] ext4_test_bit(bit=13, block=18) = 1 [ 152.161862][ T6492] is_bad_inode(inode)=0 [ 152.233533][ T6492] NEXT_ORPHAN(inode)=0 [ 152.290618][ T6492] max_ino=32 [ 152.316911][ T6492] i_nlink=1 [ 152.340454][ T6492] EXT4-fs (loop3): 1 truncate cleaned up [ 152.380918][ T6492] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.433602][ T6514] loop5: detected capacity change from 0 to 8 [ 152.460207][ T6494] EXT4-fs (loop6): Test dummy encryption mode enabled [ 152.467905][ T6494] EXT4-fs (loop6): Ignoring removed orlov option [ 152.485132][ T6494] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 152.550319][ T6514] SQUASHFS error: lzo decompression failed, data probably corrupt [ 152.632765][ T6514] SQUASHFS error: Failed to read block 0x91: -5 [ 152.639057][ T6514] SQUASHFS error: Unable to read metadata cache entry [8f] [ 152.664549][ T6514] SQUASHFS error: Unable to read inode 0x11f [ 152.854049][ T6524] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 152.882080][ T6524] bridge0: port 3(syz_tun) entered disabled state [ 152.889524][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.897536][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.945558][ T6494] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 153.471366][ T5274] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 153.530254][ T6514] loop5: detected capacity change from 0 to 32768 [ 153.696336][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.889140][ T5274] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.921376][ T5274] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 153.958672][ T6552] loop5: detected capacity change from 0 to 512 [ 154.041568][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 154.078186][ T6552] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.638: iget: bad i_size value: 38620345925642 [ 154.121597][ T5274] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 154.130840][ T5274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.141627][ T6552] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.638: couldn't read orphan inode 15 (err -117) [ 154.153840][ T5274] usb 2-1: Product: syz [ 154.158010][ T5274] usb 2-1: Manufacturer: syz [ 154.163070][ T5274] usb 2-1: SerialNumber: syz [ 154.175044][ T6552] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.186424][ T13] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 154.194752][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.209377][ T5274] snd-ua101 2-1:1.1: invalid num_altsetting [ 154.217923][ T5274] snd-ua101 2-1:1.0: invalid format type [ 154.223735][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.260744][ T6552] EXT4-fs (loop5): shut down requested (2) [ 154.271296][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.302080][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.325523][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.341327][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.412716][ T4383] usb 2-1: USB disconnect, device number 6 [ 154.531938][ T6559] capability: warning: `syz.3.641' uses deprecated v2 capabilities in a way that may be insecure [ 154.638500][ T13] usb 1-1: usb_control_msg returned -32 [ 154.650094][ T13] usbtmc 1-1:16.0: can't read capabilities [ 154.719987][ T6563] loop3: detected capacity change from 0 to 1024 [ 154.775265][ T6565] loop5: detected capacity change from 0 to 1024 [ 154.890761][ T6565] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.914503][ T6563] hfsplus: catalog searching failed [ 155.023751][ T6570] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 155.056071][ T144] hfsplus: b-tree write err: -5, ino 3 [ 155.075214][ T13] usb 1-1: USB disconnect, device number 4 [ 155.094186][ T4189] hfsplus: node 4:3 still has 1 user(s)! [ 155.110240][ T6572] sock: sock_set_timeout: `syz.1.645' (pid 6572) tries to set negative timeout [ 155.494374][ T6590] device syzkaller1 entered promiscuous mode [ 155.672454][ T4194] kernel read not supported for file /dsp (pid: 4194 comm: kworker/1:4) [ 155.863868][ T6608] netlink: 'syz.6.659': attribute type 2 has an invalid length. [ 156.111455][ T4198] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.491440][ T4198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.508787][ T6631] loop6: detected capacity change from 0 to 256 [ 156.525396][ T4198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.602356][ T4198] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.667153][ T4198] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.742165][ T4198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.761664][ T6631] FAT-fs (loop6): Directory bread(block 64) failed [ 156.768382][ T6631] FAT-fs (loop6): Directory bread(block 65) failed [ 156.798372][ T4198] usb 4-1: config 0 descriptor?? [ 156.828292][ T6631] FAT-fs (loop6): Directory bread(block 66) failed [ 156.851357][ T6631] FAT-fs (loop6): Directory bread(block 67) failed [ 156.878411][ T6631] FAT-fs (loop6): Directory bread(block 68) failed [ 156.909299][ T6631] FAT-fs (loop6): Directory bread(block 69) failed [ 156.949807][ T6631] FAT-fs (loop6): Directory bread(block 70) failed [ 156.987571][ T6631] FAT-fs (loop6): Directory bread(block 71) failed [ 157.014709][ T6631] FAT-fs (loop6): Directory bread(block 72) failed [ 157.055149][ T6631] FAT-fs (loop6): Directory bread(block 73) failed [ 157.160106][ T6615] loop1: detected capacity change from 0 to 32768 [ 157.305332][ T4198] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 157.361876][ T4198] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 157.611512][ T4198] usb 4-1: USB disconnect, device number 6 [ 157.947105][ T6639] fido_id[6639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 158.004206][ T6636] loop0: detected capacity change from 0 to 131072 [ 158.101656][ T6636] F2FS-fs (loop0): invalid crc value [ 158.115844][ T6615] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.671 (6615) [ 158.192848][ T6636] F2FS-fs (loop0): Found nat_bits in checkpoint [ 158.306732][ T6636] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 158.332314][ T6615] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 158.402253][ T6615] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 158.454945][ T6615] BTRFS info (device loop1): use zstd compression, level 3 [ 158.531612][ T6615] BTRFS info (device loop1): using free space tree [ 158.613275][ T6615] BTRFS info (device loop1): has skinny extents [ 158.716726][ T6676] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.882059][ T6615] BTRFS info (device loop1): enabling ssd optimizations [ 159.310479][ T6696] BTRFS warning (device loop1): failed to trim 1 device(s), last error -512 [ 159.657976][ T6695] loop6: detected capacity change from 0 to 32768 [ 159.826771][ T6695] XFS (loop6): Mounting V5 Filesystem [ 159.897514][ T6702] loop3: detected capacity change from 0 to 4096 [ 159.948985][ T6721] loop5: detected capacity change from 0 to 2048 [ 160.248216][ T6721] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.279055][ T6695] XFS (loop6): Ending clean mount [ 160.287856][ T6721] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.394902][ T6734] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.473694][ T6140] XFS (loop6): Unmounting Filesystem [ 160.524116][ T6724] loop1: detected capacity change from 0 to 8192 [ 160.720474][ T6702] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 160.749203][ T6732] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 160.751312][ T6718] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 160.838531][ T6702] Remounting filesystem read-only [ 160.966354][ T6739] device syzkaller1 entered promiscuous mode [ 161.020920][ T4189] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 161.191612][ T6718] usb 6-1: config 0 has no interfaces? [ 161.305844][ T6748] loop1: detected capacity change from 0 to 512 [ 161.351516][ T6718] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 161.376139][ T6718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.425717][ T6749] loop0: detected capacity change from 0 to 2048 [ 161.441391][ T6718] usb 6-1: Product: syz [ 161.468778][ T6718] usb 6-1: Manufacturer: syz [ 161.474582][ T6748] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 161.503947][ T6718] usb 6-1: SerialNumber: syz [ 161.518490][ T6748] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 161.535712][ T6718] usb 6-1: config 0 descriptor?? [ 161.583065][ T6749] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 161.655302][ T6748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 161.690585][ T6749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.723417][ T6748] EXT4-fs (loop1): orphan cleanup on readonly fs [ 161.732389][ T6748] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.688: bg 0: block 361: padding at end of block bitmap is not set [ 161.801119][ T6748] EXT4-fs (loop1): Remounting filesystem read-only [ 161.828563][ T6748] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 161.889124][ T6748] EXT4-fs (loop1): Remounting filesystem read-only [ 161.925381][ T6748] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.688: attempt to clear invalid blocks 33619980 len 1 [ 161.988850][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.692'. [ 161.999374][ T6748] EXT4-fs (loop1): Remounting filesystem read-only [ 162.036787][ T6748] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.688: invalid indirect mapped block 1811939328 (level 0) [ 162.081421][ T6748] EXT4-fs (loop1): Remounting filesystem read-only [ 162.097350][ T6748] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.688: invalid indirect mapped block 2185560079 (level 1) [ 162.137975][ T6721] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28 [ 162.158528][ T6748] EXT4-fs (loop1): Remounting filesystem read-only [ 162.161347][ T6721] EXT4-fs (loop5): This should not happen!! Data will be lost [ 162.161347][ T6721] [ 162.182018][ T6748] EXT4-fs (loop1): 1 truncate cleaned up [ 162.204560][ T6748] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 162.248352][ T6721] EXT4-fs (loop5): Total free blocks count 0 [ 162.292018][ T6721] EXT4-fs (loop5): Free/Dirty block details [ 162.301427][ T1110] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.356432][ T6721] EXT4-fs (loop5): free_blocks=0 [ 162.403926][ T6782] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 162.421328][ T6748] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.688: dx entry: limit 0 != root limit 125 [ 162.437710][ T6721] EXT4-fs (loop5): dirty_blocks=688 [ 162.453425][ T6721] EXT4-fs (loop5): Block reservation details [ 162.459454][ T6721] EXT4-fs (loop5): i_reserved_data_blocks=43 [ 162.477794][ T6748] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.688: Corrupt directory, running e2fsck is recommended [ 162.512886][ T6785] loop0: detected capacity change from 0 to 512 [ 162.544201][ T6785] EXT4-fs (loop0): Ignoring removed oldalloc option [ 162.551389][ T1110] usb 4-1: Using ep0 maxpacket: 16 [ 162.597892][ T6785] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.623648][ T4383] usb 6-1: USB disconnect, device number 6 [ 162.654385][ T6785] EXT4-fs (loop0): 1 truncate cleaned up [ 162.660575][ T6785] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none. [ 162.671718][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 234, changing to 11 [ 162.687552][ T6785] syz.0.697 (pid 6785) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 162.833535][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17410, setting to 1024 [ 162.847395][ T6799] loop6: detected capacity change from 0 to 512 [ 162.858905][ T6801] Invalid argument reading file caps for ./file0 [ 162.897304][ T1110] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.953458][ T6799] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 162.963030][ T1110] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 163.030696][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.045840][ T6799] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.701: bg 0: block 104: invalid block bitmap [ 163.054703][ T6808] loop1: detected capacity change from 0 to 128 [ 163.078178][ T6799] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 163.141797][ T6808] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.199724][ T1110] usb 4-1: config 0 descriptor?? [ 163.225844][ T6808] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.244950][ T6799] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.701: invalid indirect mapped block 1 (level 1) [ 163.288001][ T6772] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 163.296317][ T6799] EXT4-fs (loop6): 1 truncate cleaned up [ 163.308158][ T6799] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.315571][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 554 with error 28 [ 163.336347][ T6808] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,sb=0x8000000000000000,jqfmt=vfsv1,dioread_nolock,nogrpid,noload,,errors=continue. Quota mode: none. [ 163.337385][ T1110] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 163.362114][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 163.362114][ T9] [ 163.379167][ T6808] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.591838][ T1110] usb 4-1: USB disconnect, device number 7 [ 163.611277][ C0] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 163.633362][ T3545] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 163.809143][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.6.709'. [ 163.873642][ T6837] loop5: detected capacity change from 0 to 2048 [ 164.026317][ T6837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.119133][ T6844] loop6: detected capacity change from 0 to 2048 [ 164.207271][ T6835] [ 164.209739][ T6835] ====================================================== [ 164.216787][ T6835] WARNING: possible circular locking dependency detected [ 164.223906][ T6835] syzkaller #0 Not tainted [ 164.228329][ T6835] ------------------------------------------------------ [ 164.235343][ T6835] syz.0.710/6835 is trying to acquire lock: [ 164.241235][ T6835] ffff888071ce5028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 164.252425][ T6835] [ 164.252425][ T6835] but task is already holding lock: [ 164.259790][ T6835] ffffffff8d6d3c28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 164.269469][ T6835] [ 164.269469][ T6835] which lock already depends on the new lock. [ 164.269469][ T6835] [ 164.279875][ T6835] [ 164.279875][ T6835] the existing dependency chain (in reverse order) is: [ 164.288888][ T6835] [ 164.288888][ T6835] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 164.296970][ T6835] __mutex_lock_common+0x1e5/0x2400 [ 164.302694][ T6835] mutex_lock_nested+0x17/0x20 [ 164.307970][ T6835] rfkill_register+0x2f/0x970 [ 164.313157][ T6835] hci_register_dev+0x459/0x980 [ 164.318532][ T6835] vhci_create_device+0x32e/0x5c0 [ 164.324081][ T6835] vhci_write+0x389/0x440 [ 164.328938][ T6835] vfs_write+0x748/0xd70 [ 164.333688][ T6835] ksys_write+0x153/0x260 [ 164.338525][ T6835] do_syscall_64+0x4c/0xa0 [ 164.343453][ T6835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.349854][ T6835] [ 164.349854][ T6835] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 164.357658][ T6835] __mutex_lock_common+0x1e5/0x2400 [ 164.363369][ T6835] mutex_lock_nested+0x17/0x20 [ 164.368635][ T6835] vhci_send_frame+0x88/0x100 [ 164.373816][ T6835] hci_send_frame+0x1a9/0x2e0 [ 164.379005][ T6835] hci_tx_work+0x9b5/0x16d0 [ 164.384018][ T6835] process_one_work+0x867/0xff0 [ 164.389375][ T6835] worker_thread+0xad7/0x12a0 [ 164.394557][ T6835] kthread+0x42e/0x520 [ 164.399132][ T6835] ret_from_fork+0x1f/0x30 [ 164.404053][ T6835] [ 164.404053][ T6835] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 164.413281][ T6835] __flush_work+0x116/0x210 [ 164.418291][ T6835] hci_dev_do_close+0x201/0x1020 [ 164.423742][ T6835] hci_unregister_dev+0x2eb/0x590 [ 164.429270][ T6835] vhci_release+0x73/0xc0 [ 164.434102][ T6835] __fput+0x212/0x8c0 [ 164.438591][ T6835] task_work_run+0x125/0x1a0 [ 164.443688][ T6835] do_exit+0x635/0x2110 [ 164.448349][ T6835] do_group_exit+0x12c/0x2f0 [ 164.453454][ T6835] __x64_sys_exit_group+0x3b/0x40 [ 164.458983][ T6835] do_syscall_64+0x4c/0xa0 [ 164.463902][ T6835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.470306][ T6835] [ 164.470306][ T6835] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 164.477934][ T6835] __mutex_lock_common+0x1e5/0x2400 [ 164.483648][ T6835] mutex_lock_nested+0x17/0x20 [ 164.488918][ T6835] bg_scan_update+0x44/0x3b0 [ 164.494011][ T6835] process_one_work+0x867/0xff0 [ 164.499376][ T6835] worker_thread+0xad7/0x12a0 [ 164.504556][ T6835] kthread+0x42e/0x520 [ 164.509137][ T6835] ret_from_fork+0x1f/0x30 [ 164.514057][ T6835] [ 164.514057][ T6835] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 164.523854][ T6835] __lock_acquire+0x2c66/0x7b50 [ 164.529213][ T6835] lock_acquire+0x19e/0x400 [ 164.534310][ T6835] __flush_work+0x116/0x210 [ 164.539316][ T6835] __cancel_work_timer+0x3f4/0x560 [ 164.544928][ T6835] hci_request_cancel_all+0xcc/0x300 [ 164.550717][ T6835] hci_dev_do_close+0x4e/0x1020 [ 164.556070][ T6835] hci_rfkill_set_block+0x101/0x180 [ 164.561772][ T6835] rfkill_set_block+0x1c1/0x3c0 [ 164.567214][ T6835] rfkill_fop_write+0x453/0x560 [ 164.572573][ T6835] vfs_write+0x304/0xd70 [ 164.577318][ T6835] ksys_write+0x153/0x260 [ 164.582157][ T6835] do_syscall_64+0x4c/0xa0 [ 164.587076][ T6835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.593476][ T6835] [ 164.593476][ T6835] other info that might help us debug this: [ 164.593476][ T6835] [ 164.603686][ T6835] Chain exists of: [ 164.603686][ T6835] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 164.603686][ T6835] [ 164.619391][ T6835] Possible unsafe locking scenario: [ 164.619391][ T6835] [ 164.626819][ T6835] CPU0 CPU1 [ 164.632162][ T6835] ---- ---- [ 164.637511][ T6835] lock(rfkill_global_mutex); [ 164.642255][ T6835] lock(&data->open_mutex); [ 164.649345][ T6835] lock(rfkill_global_mutex); [ 164.656607][ T6835] lock((work_completion)(&hdev->bg_scan_update)); [ 164.663177][ T6835] [ 164.663177][ T6835] *** DEADLOCK *** [ 164.663177][ T6835] [ 164.671301][ T6835] 1 lock held by syz.0.710/6835: [ 164.676220][ T6835] #0: ffffffff8d6d3c28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 164.686297][ T6835] [ 164.686297][ T6835] stack backtrace: [ 164.692165][ T6835] CPU: 0 PID: 6835 Comm: syz.0.710 Not tainted syzkaller #0 [ 164.699436][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.709479][ T6835] Call Trace: [ 164.712752][ T6835] [ 164.715673][ T6835] dump_stack_lvl+0x188/0x250 [ 164.720342][ T6835] ? load_image+0x410/0x410 [ 164.724833][ T6835] ? show_regs_print_info+0x20/0x20 [ 164.730024][ T6835] ? print_circular_bug+0x12b/0x1a0 [ 164.735217][ T6835] check_noncircular+0x296/0x330 [ 164.740142][ T6835] ? look_up_lock_class+0x71/0x110 [ 164.745265][ T6835] ? add_chain_block+0x9b0/0x9b0 [ 164.750186][ T6835] ? lockdep_lock+0xf1/0x1f0 [ 164.754776][ T6835] ? __lock_acquire+0x1305/0x7b50 [ 164.759796][ T6835] ? mark_lock+0x94/0x320 [ 164.764194][ T6835] ? _find_first_zero_bit+0xd1/0xf0 [ 164.769380][ T6835] __lock_acquire+0x2c66/0x7b50 [ 164.774227][ T6835] ? verify_lock_unused+0x140/0x140 [ 164.779417][ T6835] ? verify_lock_unused+0x140/0x140 [ 164.784607][ T6835] lock_acquire+0x19e/0x400 [ 164.789102][ T6835] ? __flush_work+0xfa/0x210 [ 164.793681][ T6835] ? __lock_acquire+0x7b50/0x7b50 [ 164.798691][ T6835] ? read_lock_is_recursive+0x10/0x10 [ 164.804062][ T6835] ? start_flush_work+0x784/0x830 [ 164.809073][ T6835] ? __lock_acquire+0x13dc/0x7b50 [ 164.814086][ T6835] __flush_work+0x116/0x210 [ 164.818607][ T6835] ? __flush_work+0xfa/0x210 [ 164.823185][ T6835] ? flush_work+0x20/0x20 [ 164.827616][ T6835] ? try_to_grab_pending+0xfb/0x820 [ 164.832800][ T6835] ? mark_lock+0x94/0x320 [ 164.837114][ T6835] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 164.843085][ T6835] ? lock_chain_count+0x20/0x20 [ 164.847933][ T6835] ? mark_lock+0x94/0x320 [ 164.852253][ T6835] ? __cancel_work_timer+0x36a/0x560 [ 164.857525][ T6835] __cancel_work_timer+0x3f4/0x560 [ 164.862648][ T6835] ? cancel_work_sync+0x20/0x20 [ 164.867488][ T6835] ? __cancel_work+0x1f9/0x2e0 [ 164.872234][ T6835] ? lockdep_hardirqs_on+0x94/0x140 [ 164.877419][ T6835] ? __cancel_work+0x27b/0x2e0 [ 164.882168][ T6835] ? cancel_work+0x20/0x20 [ 164.886570][ T6835] hci_request_cancel_all+0xcc/0x300 [ 164.891841][ T6835] hci_dev_do_close+0x4e/0x1020 [ 164.896678][ T6835] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 164.902567][ T6835] ? _raw_spin_unlock+0x40/0x40 [ 164.907406][ T6835] hci_rfkill_set_block+0x101/0x180 [ 164.912595][ T6835] ? rcu_lock_release+0x20/0x20 [ 164.917435][ T6835] rfkill_set_block+0x1c1/0x3c0 [ 164.922280][ T6835] rfkill_fop_write+0x453/0x560 [ 164.927117][ T6835] ? rfkill_fop_read+0x560/0x560 [ 164.932039][ T6835] ? common_file_perm+0xf0/0x1c0 [ 164.936962][ T6835] ? fsnotify_perm+0x5d/0x560 [ 164.941625][ T6835] ? security_file_permission+0x75/0xa0 [ 164.947243][ T6835] ? rfkill_fop_read+0x560/0x560 [ 164.952167][ T6835] vfs_write+0x304/0xd70 [ 164.956403][ T6835] ? file_end_write+0x250/0x250 [ 164.961239][ T6835] ? __fget_files+0x402/0x470 [ 164.965902][ T6835] ? __fdget_pos+0x1e2/0x370 [ 164.970478][ T6835] ? ksys_write+0x70/0x260 [ 164.974877][ T6835] ksys_write+0x153/0x260 [ 164.979200][ T6835] ? __ia32_sys_read+0x80/0x80 [ 164.983977][ T6835] ? lockdep_hardirqs_on+0x94/0x140 [ 164.989163][ T6835] do_syscall_64+0x4c/0xa0 [ 164.993574][ T6835] ? clear_bhb_loop+0x30/0x80 [ 164.998241][ T6835] ? clear_bhb_loop+0x30/0x80 [ 165.002932][ T6835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.008835][ T6835] RIP: 0033:0x7f1b0b7c2e59 [ 165.013236][ T6835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.032830][ T6835] RSP: 002b:00007f1b099fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.041232][ T6835] RAX: ffffffffffffffda RBX: 00007f1b0ba4b090 RCX: 00007f1b0b7c2e59 [ 165.049194][ T6835] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 165.057148][ T6835] RBP: 00007f1b0b858e6f R08: 0000000000000000 R09: 0000000000000000 [ 165.065104][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.073059][ T6835] R13: 00007f1b0ba4b128 R14: 00007f1b0ba4b090 R15: 00007ffd173df3a8 [ 165.081029][ T6835] [ 165.127913][ T6851] loop3: detected capacity change from 0 to 1024 [ 165.158553][ T6851] EXT4-fs (loop3): Ignoring removed oldalloc option [ 165.185805][ T6844] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.197948][ T6851] EXT4-fs (loop3): Ignoring removed oldalloc option [ 165.211277][ T6851] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.294542][ T6851] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,min_batch_time=0x0000000000000003,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 165.316145][ T6847] loop1: detected capacity change from 0 to 32768 [ 165.363140][ T6847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.712 (6847) [ 165.398185][ T6847] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 165.431944][ T6847] BTRFS info (device loop1): enabling auto defrag [ 165.446080][ T6847] BTRFS info (device loop1): force clearing of disk cache [ 165.453447][ T6847] BTRFS info (device loop1): turning on sync discard [ 165.488402][ T6847] BTRFS info (device loop1): force zlib compression, level 3 [ 165.524420][ T6847] BTRFS info (device loop1): enabling disk space caching [ 165.546503][ T6847] BTRFS info (device loop1): setting nodatacow [ 165.573666][ T6847] BTRFS info (device loop1): disk space caching is enabled [ 165.608695][ T6847] BTRFS info (device loop1): has skinny extents [ 165.745263][ T6847] BTRFS info (device loop1): enabling ssd optimizations [ 165.754893][ T6847] BTRFS info (device loop1): clearing free space tree [ 165.761886][ T6847] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 165.774430][ T6847] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)