last executing test programs: 7m48.515042105s ago: executing program 32 (id=153): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) 7m39.213845543s ago: executing program 33 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 6m44.265751034s ago: executing program 34 (id=606): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98cd88f00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3a) 6m17.352041771s ago: executing program 35 (id=671): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x3, 0x6a4, &(0x7f0000001b40)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 6m6.983635943s ago: executing program 36 (id=721): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 4m59.66027051s ago: executing program 37 (id=1147): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x6, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c800302140006001e008900", 0x19, 0x1, &(0x7f0000000080)={0xc9, 0x7, r1, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) 3m50.475500328s ago: executing program 38 (id=1593): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x10, 0x9}}]}}]}, 0x3c}}, 0x0) 3m40.307903323s ago: executing program 39 (id=1650): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x8}, 0x8) 3m29.660140126s ago: executing program 40 (id=1704): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 3m16.623504855s ago: executing program 9 (id=1763): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0500"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3m16.516627704s ago: executing program 9 (id=1764): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0xfcf61a42d195cc7c}, 0x0) 3m16.168849854s ago: executing program 9 (id=1765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a802000018014000300040010000700e7000000090004000400050004"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 3m15.634922587s ago: executing program 9 (id=1767): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@gid}, {@errors_remount}, {@discard_size={'discard', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@noquota}, {}, {@errors_continue}, {@errors_remount}, {@uid}]}, 0x24, 0x6220, &(0x7f0000006840)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0/file0\x00') mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) 3m14.219042958s ago: executing program 9 (id=1773): openat$dsp(0xffffff9c, &(0x7f0000000000), 0x201, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3m13.442188208s ago: executing program 9 (id=1777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x1b}, {0xc, 0x2, {{}, [@TCA_NETEM_LOSS={0x44, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4e}]}]}}}]}, 0x90}}, 0x0) 3m13.022857024s ago: executing program 41 (id=1777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x1b}, {0xc, 0x2, {{}, [@TCA_NETEM_LOSS={0x44, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4e}]}]}}}]}, 0x90}}, 0x0) 2m57.572688337s ago: executing program 2 (id=1906): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x40, 0xa6}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m57.267439613s ago: executing program 2 (id=1910): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@nouid32}, {@jqfmt_vfsold}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m56.908065652s ago: executing program 2 (id=1913): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r0, 0x400, 0x1) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x2000c12, &(0x7f0000000300)={[{@check_strict}, {@overriderock}, {@session={'session', 0x3d, 0x12}}]}, 0x3, 0x9f5, &(0x7f0000000900)="$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") fchown(r0, 0x0, 0xffffffffffffffff) 2m56.575703944s ago: executing program 2 (id=1915): r0 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2m56.34260859s ago: executing program 2 (id=1919): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000a80)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 2m55.763266061s ago: executing program 2 (id=1922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x58, r1, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x6}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x32, @val={0x8c, 0x18, {0x77, "245271fd63c1", @long="778789bfa5ce70db359d885eaa2e95a6"}}}}]}, 0x58}}, 0x8000) 2m53.970627412s ago: executing program 1 (id=1933): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") timerfd_gettime(r0, &(0x7f0000000700)) 2m53.537109793s ago: executing program 1 (id=1935): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) 2m51.700876312s ago: executing program 1 (id=1943): syz_mount_image$minix(&(0x7f0000000300), &(0x7f00000002c0)='./bus\x00', 0x804040, &(0x7f0000000200)=ANY=[], 0xff, 0x21f, &(0x7f0000002700)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x81c08) r0 = open(&(0x7f0000000000)='./file2\x00', 0x6840, 0x120) fstat(r0, &(0x7f0000001d40)) 2m51.441365681s ago: executing program 1 (id=1945): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@noinit_itable}, {@usrquota}, {@jqfmt_vfsv0}, {@abort}, {@nodelalloc}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x189000, 0x82) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 2m50.655702322s ago: executing program 1 (id=1954): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0x4) 2m50.18889423s ago: executing program 1 (id=1958): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 2m49.705453145s ago: executing program 42 (id=1958): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 2m40.672350917s ago: executing program 43 (id=1922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x58, r1, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x6}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x32, @val={0x8c, 0x18, {0x77, "245271fd63c1", @long="778789bfa5ce70db359d885eaa2e95a6"}}}}]}, 0x58}}, 0x8000) 2m14.344623718s ago: executing program 5 (id=2229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000006c0)) 2m13.999899652s ago: executing program 5 (id=2233): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 2m13.867309241s ago: executing program 5 (id=2246): socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4a033be17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) 2m13.762632769s ago: executing program 5 (id=2238): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000080)={[{@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0xefe}}, {@abort}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x648}}, {@noblock_validity}]}, 0x1, 0x5de, &(0x7f0000000780)="$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") mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x4, &(0x7f00000019c0)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=2']) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) 2m13.367916103s ago: executing program 5 (id=2244): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0) 2m12.884974377s ago: executing program 5 (id=2250): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000007c0), 0xba, 0x2482) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x591) 2m12.306239205s ago: executing program 44 (id=2250): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000007c0), 0xba, 0x2482) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x591) 1m48.094166747s ago: executing program 8 (id=2479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffeb2, 0x2}]}}}]}, 0x9c}}, 0x0) 1m47.784721178s ago: executing program 8 (id=2484): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200400, &(0x7f0000000100)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@codepage={'codepage', 0x3d, 'koi8-ru'}}, {@umask={'umask', 0x3d, 0xdb40}}, {@uid}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='track_foreign_dirty\x00', r0}, 0x18) open(&(0x7f0000000040)='./bus\x00', 0x64342, 0x0) 1m47.594653503s ago: executing program 8 (id=2487): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}}, 0x0) 1m47.356988996s ago: executing program 8 (id=2488): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@norecovery}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') mount$cgroup(0x0, &(0x7f0000000940)='./file2\x00', 0x0, 0x400, 0x0) 1m46.822605416s ago: executing program 8 (id=2493): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141442, 0x38) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) write$UHID_INPUT(r0, &(0x7f0000001a40)={0x8, {"715b1a6a9fca300288d0d6f164694e9be52056879d4f7f9e17a2f387a1e887ad9fea8a741f3a85292a8ca98e1512418fbd5b5beafe58966442a9c6d52bdef586966362501755a16514ded809c856f4e58261695dbfb4d87cd5d13b78c6cf696afecb55cca3e7607479bc2ceded20d446347481aa05e3083992814f23f6ba955daa8c5988fcc3e1f4a1657a94b74a6161fb233fa5146129889ae615315f974fd1e2c6db572e40a4ec1325c81eff25243f2fbe74fc9cc389297c04d98213ca54c33fe33622c7ebe8f6e9712c07be77c43bddb575411faf61123d450d3c608e581d9d1fd5562abd932bbdf7e7d6329df9831959a3c38906aefc04f438f74482b6e4ec9501b6b43d08d910bda4fc230cfbdc06b2447775f53c6aa87b73a284167aee5e05fc8d867afd4b6b8c3ec81a23be5df245d8e21aa8a630de4b680f34fee2af9de02aeaf31aa7d15edbee78a2a7a621305217678c619a19d41e927e798df495ff28a6485e978bb29cf5f82e31ee8e142134e0845f5c1eaa9664c7dbbfcfcd9dc0567fd447f25de86bea1c28e8a9973e3d5f00e74d022f2b9a97ff08f404af3911f7f086643bfd9004c2500b1684e73c885374cb382bcb37fc82a31c79991b2547fbbba3c005b4d88825488599a8cf0cdaebb4d137232516c9f897d72d034a5b69d03be18c0a0958495e3c0f9b7b31f7684236be8772de10aef1446909f13fb49b4516d00f889efe72769585f4e1ffaa5fc9c0dbfa7b05efbaa14a3e240cf7603c6a487f4355f92bc22c262f496e2f30eef1b95cf28235c0273f295a136f122539ceccb412f7c08a019efb4c270a417db7deb6973a6d0370df72d12456b2d2187c4abdb632bc6323eaaa10f6e8c829d9b556b04498de35a355907c9a17b99b2effaca8ffbfe486493740f3dded005e8bf91b417e2cde579f9232c04807dd2f2da29faf183dee67430972a0c85ee9e9319a7b55b03b3db7d2623f3b16da80eee507de1f18b298a045f32970903d4ee04f99c8a6c086c93f465ad8493f3f2e0579993374b1941818c67c448c4e218e64467ea9755042b593a33f5f909ba7eb4c14be439964ff2c5ff2367710438f2d306e721042b39499b21b034cf9a95048a43e8d96eb88c7e372ee61e7a909b6e947d416b2ac672fa3683771cf6986bda28ccd50c448e31985adf2b836349d8e1ac3ea17dd9256bac1f3c47f39953fceddef2e12b9956ad44347142d836ef531528fd9cbc0c132ac6e270c9f5e4d950d62b788dfb1e337be9629a02f945897bdd5168d73d78ec3a7651465949f5027dcd0affb6b24063499d4afb57b80aa62efaefe607fb9073c79d7083c629bf11a56527fe85a41c3d347c7ef54c85a6e6d046994101ae7627e74d14337a9bb042f5f0aeca0a6199dedb3e4b1aa30760131e8d76d43d9991ac1b3c443b25d7c4c8153d1c7763e6f2fda8c402d97668f6aa61f8e28d568320ed190ca635c74d9948adcaa53776a2db303b848723b414bd192511f557f2a466822acecfa3ce6f9bfd60c0144b1a55294387238fbb196addf0502ee9af4108682d056f8965ce4fca03d8ecdcf5f302eaea2de59bf663b15bf8a20ce874ff7d3958fe6da3301b678c2930129b3cb4413400388a59ae939c58d96043d93a57a980e0f4ef35751e059ef6c06cffa4f5c3f8ba1ba67f0160390ec77311e4e67d921bb40a29d448f274da50115c2c67baa3d6f39f9ddfaf3e67392d9e3802c353f0b855c927d6a45e445f58526a09793bcc2e72163fb1b7a779d99f230bd95e597cacb0b8343dcf1be080f18040fe288b157b01b074d25fe44ab6b3c0362f1931f6b174412a8d6a2a645270e7430b3884ac16930105786e469d1d8bcf9ed4010ee3accf78ecc138a8b11c15798eeb29ef4fc3bc5b376807348e1647148c35a1aa3d7ed05dc3a11274887f04f035837a9ea81fcb5eaccd4f43f2f6bbf3c426f72e1423c9175c2b234be0fd3c40c15e5e35c5c7359c894e95f82797c48fdca7ef07a6fa6f0dd0bb9a24c4a38900be369c27b285c67e60f8814f67d86caba122def954662ae2c6f4f99cfbb55214c61216e8c8f84e9b172129642d754a49c923c6c6f1ba820e99a513308a03c9a080be7224244f2bc1d99d93ddcb25a3d2e0a6b4b868f877760b019c8c475c3e0b90109c21c309e7bc0ffc48753aeb70e7884c8eac52b2fb8576ae917199bfeea255da4b54667320798db03440fabaebb1e8e181506bf93ac67ba128a14c9dcc45d9f07ddfea21e7da2bf4215bc73e82e9a7187cd5fa7c17f7710f2cdf59bb22ce786328af52f17349c42ca7bce681619246b8b467b7b4c60125ea5687e1cd9bf36a67023759a8baeccb60e84c7102f284436584d0508486d96af8ea8358f7ac1f9a21c1229eda8a1a273b999a74f39d38e1b6aec92d120f2c4ca0b2852844b5529eb40db91749f221568850f23f089dd704434b6fe736ab7eb67ebd52943000770e0a57c6ff7c1420a225fdeca0cddcf4083a3f5f9fb37490dfdf2c8aae282558c8a4af6ec41f7788d6340053ff69311489323c403becde20ae84c6a8968717e8923c13723be082aab3edd7cf0fd1b2a1f64692911d9e49c4d7d20f8c9364c454fdb51ff376abbae26df57ab7d458772a919879ea7caada2c17fb0cc9d0f377860d8b58fd81952f50d732adc73e470c1f5778a49d7f3d507e5ab5cb798420f3a56d9d3ad76b75e5d41921a7ae04099968867c816f6d44c4a41cefbe31623d6899a00c28454bdc0ea17f284dcb39a0221989e3c2bbcc5556e8f870bbf98be4b57be438797f7b595f35527911371cc324cd4c76d4ea68cfdd1eed120ec16e89e4ec4c5ac28039de8b3aa451e1e55631d599612e94630ad3d67ba79e03c4ff023e8ddfd10c09517df736a01af5488a87f551c7e8e41dd0d0d10c58f3053cbdef2c4fd72e51c2d9724360687ab6d0395023626bbfcab24737a50bb27d78ebfe11b5e40a71b2141254074b3dca3cf45456ea1860704b0d5da04710667bf6454c81b33b5b429d2764afd13338d60b928140c05e0b7f41c6fb1961961edfa959b911216ca2357d8171b3673b454b5017bbf34dabdf5fd0d7fb602399ec434f40bc04566d6e418713cc7e849b7deb3ef014b8ec7a62f686b37b1c3a8b60340d0bbf09a6965013c68317d7a2e07bcd3bcaa7cd2cbf34d64534e1ff9cb4ba32d9a5cde63e2da7dfdfcc86886a0ee01fa0d95b78a12085d6dfb62d622049286d628a8950b55dc71058b6dec200049738824a8200023be3f93e740f2a8d241e57deeb642ff28140eed1424db3cf2fafdd8a7d9fc80a7a54da30029ef65df2e7900059ab1141985376e7f9f46e712b4536ed4e0629d284f56eef0906d21536427333d8a7d6d7e74591031a526eea16a627c5d9f399ec4628a26d9812b68b501716b602564504ab8f16e76a19c608ac550fa52fb80af1e81b48abf13c9996cf47f34d8e943b7d48de31c0d5d794af157c16209d3c0632c2801ab17f05de2c2fb9b9b8c0a257c18a832ac743c9341042af1e56619154fc4f7b20c8de3edbb1636f0a098ed6f6858c27905b00798fd8bedda5eaeeb12ff19943dad0a7f069a9e01dfc9730568784a07c0a6b01623b11a1e6f86cab4d95bf256cd28b00c17b5df66dd4c393471f0f18c68aeae404f5f3fb66bbfd62f1511b35caddad004408fe3b182edf81ad50ac3a639121236968c6be1ba7f7bee6409a91f4c7caf077c2a94c6d8d547cc680a1d7e6cd57c326e7a2f642ab76491565c5f4271cbf64ed2be12d770e927cba3cfa0fb89452285a69fe205bc9943eee4466ca8f9998997e2c1a1fe782c9e2241c51dc008bb8f6fe9a49edefae6f43d3e0cd207439745dfd4c347058a4ec3c3fbd56f3108b9a034600f78dc5c889621a6b78e2f7256034d53ae7877de459b6895d5849eb4a8099a62a4bd50d5b4d48cf82fae64985e1e22435fe5d505000000ed5d8ee03a6d1675b7b75d47b8e20a44c05812b36cc2e31947a02c48262c5a875e562dbd4a1a8d045a37afabb28079d3904f53d466e5abab09b8e5e0a56dbae4c4cd9bc6640b47cc6616b2e7cf19c6e9591d32ab0cf87880c81d63948a508ad0cbd50e348d399daf51efb2b96ef9d56a8ba89d04bf5e7d4f7353f71d1a6cb78da6644574664d08e848cf97bab16d6acf70f072a02578ab02b3209fe8a06dad5c741cb5eb483f809c4c35307595f00d00bf6a1474aef94cfe913d08c612387172aabc802c17753c6ccd752eaa81e7eefd61c037f958e23bcb9c1510ea47bcaefa72f070809de9f79faede74c87231411b17b357382974bcd334cf983c85ad9e1844cdbd9181a5bb976c35b6a638ae8dd20119858f8c525d735779b2f8e244ed2fc0d900445fe1fe775b4bcb1d2e8d4577d6234ddfcad7fe7abf716d9f4b4a6ee83be812cdda17ec43a895a5c03e5359cce3de61d9736f8a4d66051891b1431f2e61a324f252bd0e9b32e23bd31a5405642bbd2cdc5d3e45b56530568f05a72d475a7d3505b26d9fcdaeb30a62ddf09bcd9e59c1f34e375149782b8019a7a9883fd93397acb338af428f1e015a671b5c11651d3c0168f747fdc6e1fb084bdcbd760adce881492b2bbb76c0a1327e76c9c7ce0afff2f80ec30f2be04d9f93a9b291cc01bcc03f7b67e16a7f1bcc838aab9240df99691a2781da614fdcecf5115382e1357460f4b8e3a577d3ae922379eadc2416d40028c785905bb43a41f5fb7189a8704b8e492c86bd82d0560f81796693e74f08739b632e5226d3c3a963caf5db455ac20288d472611e7dc243531fd66718e94daa2bf93a30a38e6a497a50f2472a72bf9c4689e54105c44cd074bb87e087735791b436d6553c5f2b61ff75dc64ba597b77f7ea42a0ec14dc08107e7bbe97ae519beb5e18a8859493afd097d4609a3a2025fe9603b85f2b1350336d92e15d0bdea3a42bb8775ff2b38bab72ec27e77452c93a05a798ec789a6a012047481ea8e1a8dfc77a9f0f6ddebb9f3503702b147f663f01f70cdfc29afe0cfd7823823fa2e139ea7d1a010a67bb3a31e620aff5cbe1a99ac3cd0f91c472dd021213edf5a9225941b575e27f99c0cb94eb9598a443ec7665335305895ebc28e3f8d34adf6aa37084f823d293ba9dcb2f73d88457d0a55c9202dd309a9b36daa4e50c8f9c93ec7644a7a730b6b947f0f2381a34d67bce50e790a7655a34a2f70723f360af014befa4fd3dbbb8bc2f1461eb48b987b8b772b3ad31a1077c59ef45e4b2870739454ef56402115ab427527e67b6a6a97b2bb3d7a2c13d2a55d1032a64b83efc13939589e46abd78bcc493529cf38581fe3160b2c6eb5a9ac6cee0b05618e51450af077fba0dc943089f112e67a2c654ad94157e95295219d0bbab3a02a2c9ec08ce9d904a703760dc41a7943d5230391c2e19aff36c390365cfd796434c3decf733d8f09789af0b990f4f9b791cf0d677f34d85fc2b3583b21737955cbaa098963bfa39755f335329f265db75c5d406a0a91ed76563a3ed5f3d2877c2b4b81dc1eaccde6d642c0d8791482e27c64103fc87a55ae91e7adf49ddc1dace5c3108d6a496d678ec5ba09b2a9e6990cb63ac3e4b787661800d11c73da87bf5d297c1fb531aa105d30464b0e023e4212a0d4a0ac119c1568280d49d084729e680a0f453a725ed08454fa874cf22f5718e2afd995a1d7a9ae92e0a49307f1b322367dc12b3673708024a85fcc643bd00", 0x1000}}, 0xff6c) 1m42.360629123s ago: executing program 8 (id=2535): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m42.019475391s ago: executing program 45 (id=2535): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.896999154s ago: executing program 6 (id=3803): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000a00)={0x60, 0xc, 0x7, "ba6ea27cc605e9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.859482491s ago: executing program 7 (id=3805): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000002340)=0x6, 0x4) 3.648921676s ago: executing program 7 (id=3807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ad}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 3.543756607s ago: executing program 7 (id=3810): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x34, r0, 0xb97534d5fe9704cf, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 3.471498745s ago: executing program 7 (id=3811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="08006b00feffffff1400238008001c000300000006001b"], 0x38}}, 0x0) 3.292855625s ago: executing program 7 (id=3813): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfd, 0x985a, &(0x7f0000009740)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 2.364534216s ago: executing program 7 (id=3823): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, &(0x7f0000001040)={0x60, 0x30, 0xa, {0xa, 0x0, "f67a605574e6c8fe"}}, 0x0, 0x0, 0x0}, 0x0) 2.202913909s ago: executing program 6 (id=3825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401"], 0x1c}}, 0x10) 1.948759373s ago: executing program 6 (id=3828): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 1.863720589s ago: executing program 6 (id=3830): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x44}}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) 1.755597793s ago: executing program 6 (id=3833): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="200ece000000ebe0018f17d918a78d4f91ad09eeb1486880bad56a45b43ca3198d3089066cf94d717979db1404c1e11414cca5294fe1c778526ee2c4507808300869771930eeb1467211"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.067436462s ago: executing program 0 (id=3846): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x7}], 0x1, 0x10002, 0x0) 932.94327ms ago: executing program 0 (id=3849): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 926.651528ms ago: executing program 0 (id=3850): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)={0x78, r2, 0x5, 0x0, 0x0, {0x4, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x7}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) 851.062205ms ago: executing program 4 (id=3852): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/86, 0x56, 0xbbf9) 830.400826ms ago: executing program 0 (id=3853): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 701.902636ms ago: executing program 0 (id=3854): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010000000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000005000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000a0000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e561a3", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 671.19468ms ago: executing program 0 (id=3855): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)={0x20, 0xd, 0x1, "f8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write$P9_RRENAME(r1, 0x0, 0x0) 622.627224ms ago: executing program 3 (id=3856): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000000c0)={[{@resuid}]}, 0x1, 0x409, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) write$FUSE_ATTR(r0, &(0x7f0000000300)={0x78, 0xffffffffffffffda, 0x0, {0x2, 0xbed, 0x0, {0x3, 0x5, 0x6, 0xb4, 0x5ffff, 0x9, 0x7, 0x800f0, 0x3ff, 0x1000, 0x80, 0x0, 0x0, 0x4, 0xffffffff}}}, 0x78) 621.927189ms ago: executing program 4 (id=3857): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x2, 0x4, 0x48}) 526.418583ms ago: executing program 4 (id=3858): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x20, r1, 0x1, 0x270bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x40800) 525.775071ms ago: executing program 3 (id=3859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0xffffffffffffffff) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) 449.013098ms ago: executing program 3 (id=3860): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000340)='./file0\x00', 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="64697363617264000700000089bd47000000000000000000000000000000c0d7aecf05950ab7d689bb41012918d521428edf23582764292a5b70f182e5da325cc6a1e7be51ebcd00000000000000ef8a09f93326a37c6203a569725bb3f8902936d727b377c38328a16800639c2da42fb5a373d31b0e189df7a5b8963b40b15df6afce99b212e36055b1e7ae4e3f31a13f423dd3c5dda59616e2e5967e29ef83303852c5dce92983e47ebdf0912e954f7a6653c738238b9adced9d82bd3c76b7142615e9de9266c45e1b5ca13a313a5b641184d5561897edb989149ce9068e926ba693a1ebfa9c04e2b5823fb77aa6f8012b9859ce5735cf52e24655212cc25d8d0335ace4d7363ac260f11545c1f914b769b6277086817ccac98dcd5eb337a8c26663fbe2b8c21dd0c4a26645b7f23352d585431996f0fcf149fe3e92d378aa2809fc81a2e30143eb1b039ed9a93e55ef6ef04da90d39dc"], 0x1, 0xee2, &(0x7f0000001e80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) setreuid(0x0, 0xee01) fchmod(r0, 0x20049549e2a2d659) 265.76622ms ago: executing program 4 (id=3861): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) shutdown(r0, 0x1) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24008800) 245.749923ms ago: executing program 3 (id=3862): unshare(0x22020600) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) setuid(0xee00) fchdir(r0) 119.440767ms ago: executing program 4 (id=3863): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents64(r0, &(0x7f00000000c0)=""/44, 0x2c) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 107.791823ms ago: executing program 3 (id=3864): munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 20.222973ms ago: executing program 3 (id=3865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x3d, 0x1, 0x0, 0x0, @adapter={0x8, 0x1, 0x3, 0xce8b, 0x7}}]}) 883.003µs ago: executing program 4 (id=3866): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000002000000ff"], 0x78) 0s ago: executing program 6 (id=3867): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000600)={'syz', 0x3}, &(0x7f00000001c0)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffc) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0406619, &(0x7f0000000580)={@desc={0x1, 0x0, @desc2}, 0x10, r1, '\x00', @d}) kernel console output (not intermixed with test programs): .199308][ T5885] usb 1-1: SerialNumber: syz [ 475.255222][T14541] loop6: detected capacity change from 0 to 8 [ 475.397411][ T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.503606][ T5919] usb 4-1: USB disconnect, device number 14 [ 475.581189][ T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.842857][ T5885] usb 1-1: 0:2 : does not exist [ 475.849809][ T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.899969][ T5885] usb 1-1: USB disconnect, device number 2 [ 476.105284][ T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.147801][T14554] erspan0: entered promiscuous mode [ 476.171723][T14554] erspan0: left promiscuous mode [ 476.227707][ T8523] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.466302][ T49] bridge_slave_1: left allmulticast mode [ 476.472002][ T49] bridge_slave_1: left promiscuous mode [ 476.483972][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.496973][ T49] bridge_slave_0: left allmulticast mode [ 476.503895][ T49] bridge_slave_0: left promiscuous mode [ 476.509888][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.755792][T14562] [U]  [ 477.229920][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 477.251343][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 477.262756][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 477.285932][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 477.293832][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 477.500946][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.513135][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.525631][ T49] bond0 (unregistering): Released all slaves [ 477.581816][T14569] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 478.213498][T14603] loop6: detected capacity change from 0 to 2048 [ 478.220165][ T49] hsr_slave_0: left promiscuous mode [ 478.226565][ T49] hsr_slave_1: left promiscuous mode [ 478.236395][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.247376][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.260329][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.268647][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.294886][T14603] Alternate GPT is invalid, using primary GPT. [ 478.308178][T14603] loop6: p1 p2 p3 [ 478.333549][ T49] veth1_macvtap: left promiscuous mode [ 478.348125][ T49] veth0_macvtap: left promiscuous mode [ 478.359528][ T49] veth1_vlan: left promiscuous mode [ 478.376649][ T49] veth0_vlan: left promiscuous mode [ 478.413902][T14587] loop3: detected capacity change from 0 to 32768 [ 478.465637][T14587] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 478.613532][T14587] XFS (loop3): Ending clean mount [ 478.647454][T14587] XFS (loop3): Quotacheck needed: Please wait. [ 478.710279][T14587] XFS (loop3): Quotacheck: Done. [ 478.880080][T12993] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 479.304727][ T5154] Bluetooth: hci4: command tx timeout [ 479.481842][T14631] loop6: detected capacity change from 0 to 32768 [ 479.502742][T14631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2566 (14631) [ 479.543390][T14631] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 479.554001][T14631] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 479.563046][T14631] BTRFS info (device loop6): using free-space-tree [ 479.599740][ T49] team0 (unregistering): Port device team_slave_1 removed [ 479.664216][ T49] team0 (unregistering): Port device team_slave_0 removed [ 479.793195][T12162] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 480.031698][T14651] loop7: detected capacity change from 0 to 2048 [ 480.063344][T14633] Falling back ldisc for ptm0. [ 480.107673][T14651] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.257834][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.599244][T14665] loop3: detected capacity change from 0 to 2048 [ 480.674721][T14659] loop6: detected capacity change from 0 to 32768 [ 480.679289][T14665] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 480.689765][T14665] System zones: 0-7 [ 480.695976][T14665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.790720][T12993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.829230][T14659] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 480.892865][T14623] netem: incorrect ge model size [ 480.900634][T14623] netem: change failed [ 481.132135][T14581] chnl_net:caif_netlink_parms(): no params data found [ 481.140263][T12162] ocfs2: Unmounting device (7,6) on (node local) [ 481.385827][ T5154] Bluetooth: hci4: command tx timeout [ 481.683621][T14581] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.715366][T14581] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.744076][T14581] bridge_slave_0: entered allmulticast mode [ 481.755979][T14581] bridge_slave_0: entered promiscuous mode [ 481.774498][T14581] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.792039][T14581] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.804686][T14581] bridge_slave_1: entered allmulticast mode [ 481.819599][T14581] bridge_slave_1: entered promiscuous mode [ 481.957430][T14581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.970676][T14581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.074249][T14581] team0: Port device team_slave_0 added [ 482.099606][T14581] team0: Port device team_slave_1 added [ 482.221696][T14581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.268471][T14581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.311116][T14689] loop7: detected capacity change from 0 to 40427 [ 482.379384][T14581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.390263][T14689] F2FS-fs (loop7): build fault injection rate: 690 [ 482.396980][T14689] F2FS-fs (loop7): Image doesn't support compression [ 482.403736][T14689] F2FS-fs (loop7): Image doesn't support compression [ 482.406964][T14581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.432113][T14689] F2FS-fs (loop7): invalid crc value [ 482.438441][T14581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.494732][T14581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.607201][T14706] loop6: detected capacity change from 0 to 32768 [ 482.614404][T14704] loop3: detected capacity change from 0 to 32768 [ 482.645435][T14689] F2FS-fs (loop7): Start checkpoint disabled! [ 482.658818][T14581] hsr_slave_0: entered promiscuous mode [ 482.669988][T14689] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 482.672394][T14704] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 482.698874][T14581] hsr_slave_1: entered promiscuous mode [ 482.708948][T14581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.712309][T14689] syz.7.2580: attempt to access beyond end of device [ 482.712309][T14689] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 482.738436][T14581] Cannot create hsr debugfs directory [ 482.752341][T14704] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 482.797478][T14689] F2FS-fs (loop7): access invalid blkaddr:4043309056 [ 482.825113][T14689] CPU: 0 UID: 0 PID: 14689 Comm: syz.7.2580 Not tainted 6.15.0-next-20250529-syzkaller #0 PREEMPT(full) [ 482.825159][T14689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.825173][T14689] Call Trace: [ 482.825182][T14689] [ 482.825191][T14689] dump_stack_lvl+0x189/0x250 [ 482.825220][T14689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.825240][T14689] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 482.825268][T14689] ? stack_depot_save_flags+0x429/0x900 [ 482.825301][T14689] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 482.825342][T14689] f2fs_map_blocks+0xd93/0x4510 [ 482.825430][T14689] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 482.825457][T14689] ? xa_load+0x60/0x210 [ 482.825490][T14689] ? xa_load+0x1ea/0x210 [ 482.825514][T14689] f2fs_mpage_readpages+0xd16/0x1a30 [ 482.825533][T14689] ? __pfx_css_rstat_updated+0x10/0x10 [ 482.825577][T14689] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 482.825628][T14689] ? f2fs_readahead+0x177/0x330 [ 482.825658][T14689] read_pages+0x177/0x580 [ 482.825689][T14689] ? __pfx_read_pages+0x10/0x10 [ 482.825720][T14689] ? filemap_add_folio+0x1af/0x270 [ 482.825748][T14689] page_cache_ra_unbounded+0x6b0/0x7b0 [ 482.825792][T14689] f2fs_readdir+0x49b/0xa60 [ 482.825844][T14689] ? __pfx_f2fs_readdir+0x10/0x10 [ 482.825881][T14689] ? end_current_label_crit_section+0x152/0x180 [ 482.825909][T14689] ? iterate_dir+0x49f/0x770 [ 482.825926][T14689] ? down_read_killable+0x1d1/0x350 [ 482.825952][T14689] iterate_dir+0x5ac/0x770 [ 482.825977][T14689] __se_sys_getdents+0xe4/0x250 [ 482.825999][T14689] ? __pfx___se_sys_getdents+0x10/0x10 [ 482.826016][T14689] ? __pfx_filldir+0x10/0x10 [ 482.826038][T14689] ? rcu_is_watching+0x15/0xb0 [ 482.826061][T14689] ? do_syscall_64+0xbe/0x3b0 [ 482.826095][T14689] do_syscall_64+0xfa/0x3b0 [ 482.826122][T14689] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.826148][T14689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.826167][T14689] ? clear_bhb_loop+0x60/0xb0 [ 482.826191][T14689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.826210][T14689] RIP: 0033:0x7f687498e969 [ 482.826228][T14689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.826244][T14689] RSP: 002b:00007f68758b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 482.826265][T14689] RAX: ffffffffffffffda RBX: 00007f6874bb5fa0 RCX: 00007f687498e969 [ 482.826280][T14689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 482.826292][T14689] RBP: 00007f6874a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 482.826304][T14689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.826316][T14689] R13: 0000000000000000 R14: 00007f6874bb5fa0 R15: 00007ffd072c1648 [ 482.826347][T14689] [ 482.827857][T14689] syz.7.2580: attempt to access beyond end of device [ 482.827857][T14689] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 483.135092][T14689] syz.7.2580: attempt to access beyond end of device [ 483.135092][T14689] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 483.164901][T12993] ocfs2: Unmounting device (7,3) on (node local) [ 483.215661][ T9114] kworker/u8:10: attempt to access beyond end of device [ 483.215661][ T9114] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 483.239084][T14708] loop0: detected capacity change from 0 to 40427 [ 483.252433][ T9114] CPU: 1 UID: 0 PID: 9114 Comm: kworker/u8:10 Not tainted 6.15.0-next-20250529-syzkaller #0 PREEMPT(full) [ 483.252460][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 483.252474][ T9114] Workqueue: writeback wb_workfn (flush-7:7) [ 483.252510][ T9114] Call Trace: [ 483.252518][ T9114] [ 483.252528][ T9114] dump_stack_lvl+0x189/0x250 [ 483.252553][ T9114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.252570][ T9114] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 483.252599][ T9114] ? __pfx_queue_work_on+0x10/0x10 [ 483.252621][ T9114] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 483.252648][ T9114] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 483.252677][ T9114] ? f2fs_hw_is_readonly+0x39b/0x470 [ 483.252710][ T9114] f2fs_handle_critical_error+0x37c/0x540 [ 483.252744][ T9114] f2fs_write_end_io+0x495/0x810 [ 483.252785][ T9114] ? blkg_put+0x22/0x240 [ 483.252821][ T9114] __submit_merged_bio+0x27a/0x6a0 [ 483.252856][ T9114] __submit_merged_write_cond+0x255/0x530 [ 483.252891][ T9114] f2fs_write_data_pages+0x261d/0x3000 [ 483.252956][ T9114] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 483.253001][ T9114] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 483.253060][ T9114] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 483.253100][ T9114] ? trace_f2fs_writepages+0x7f/0x200 [ 483.253130][ T9114] ? f2fs_write_node_pages+0x478/0x6e0 [ 483.253161][ T9114] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 483.253203][ T9114] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 483.253234][ T9114] do_writepages+0x32e/0x550 [ 483.253261][ T9114] ? reacquire_held_locks+0x127/0x1d0 [ 483.253280][ T9114] ? writeback_sb_inodes+0x372/0x1000 [ 483.253310][ T9114] __writeback_single_inode+0x145/0xff0 [ 483.253331][ T9114] ? do_raw_spin_unlock+0x122/0x240 [ 483.253360][ T9114] writeback_sb_inodes+0x6b5/0x1000 [ 483.253409][ T9114] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 483.253472][ T9114] ? rcu_is_watching+0x15/0xb0 [ 483.253503][ T9114] wb_writeback+0x43b/0xaf0 [ 483.253529][ T9114] ? queue_io+0x371/0x590 [ 483.253553][ T9114] ? __pfx_wb_writeback+0x10/0x10 [ 483.253582][ T9114] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.253614][ T9114] wb_workfn+0x409/0xef0 [ 483.253659][ T9114] ? __pfx_wb_workfn+0x10/0x10 [ 483.253693][ T9114] ? __lock_acquire+0xab9/0xd20 [ 483.253733][ T9114] ? process_scheduled_works+0x9ef/0x17b0 [ 483.253776][ T9114] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.253802][ T9114] ? process_scheduled_works+0x9ef/0x17b0 [ 483.253832][ T9114] ? process_scheduled_works+0x9ef/0x17b0 [ 483.253865][ T9114] process_scheduled_works+0xade/0x17b0 [ 483.253928][ T9114] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.253978][ T9114] worker_thread+0x8a0/0xda0 [ 483.254026][ T9114] kthread+0x711/0x8a0 [ 483.254054][ T9114] ? __pfx_worker_thread+0x10/0x10 [ 483.254073][ T9114] ? __pfx_kthread+0x10/0x10 [ 483.254100][ T9114] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.254126][ T9114] ? lockdep_hardirqs_on+0x9c/0x150 [ 483.254153][ T9114] ? __pfx_kthread+0x10/0x10 [ 483.254180][ T9114] ret_from_fork+0x3fc/0x770 [ 483.254212][ T9114] ? __pfx_ret_from_fork+0x10/0x10 [ 483.254248][ T9114] ? __switch_to_asm+0x39/0x70 [ 483.254269][ T9114] ? __switch_to_asm+0x33/0x70 [ 483.254288][ T9114] ? __pfx_kthread+0x10/0x10 [ 483.254319][ T9114] ret_from_fork_asm+0x1a/0x30 [ 483.254358][ T9114] [ 483.572428][ T5154] Bluetooth: hci4: command tx timeout [ 483.580312][T14708] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 483.588190][ T9114] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 483.605768][T14708] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 483.700166][T14708] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 483.821399][T14708] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 483.830005][T14708] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 484.001435][T14581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 484.037048][T14581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 484.067903][T14581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 484.129861][T14581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 484.188781][T14717] loop3: detected capacity change from 0 to 32768 [ 484.220225][T14717] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2590 (14717) [ 484.261503][T14717] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 484.291605][T14727] loop6: detected capacity change from 0 to 47 [ 484.294750][T14717] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 484.337783][T14727] MINIX-fs: deleted inode referenced: 9 [ 484.344343][T14727] MINIX-fs: deleted inode referenced: 9 [ 484.348766][T14581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.371093][T14581] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.386508][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.393645][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.440129][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.447495][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.484144][T14717] BTRFS info (device loop3): rebuilding free space tree [ 484.571165][T14717] BTRFS info (device loop3): disabling free space tree [ 484.584261][T14717] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 484.627783][T14581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.640247][T14717] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 484.874635][T12389] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 484.952897][T12993] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 484.972250][T14581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.094809][T12389] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 485.107324][T12389] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.195904][T12389] usb 7-1: config 0 descriptor?? [ 485.216353][T12389] cp210x 7-1:0.0: cp210x converter detected [ 485.627435][ T5154] Bluetooth: hci4: command tx timeout [ 485.736420][T14581] veth0_vlan: entered promiscuous mode [ 485.767719][T14777] loop7: detected capacity change from 0 to 1024 [ 485.784126][T14581] veth1_vlan: entered promiscuous mode [ 485.812798][T12389] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 485.840155][T12389] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 485.852002][ T30] audit: type=1800 audit(2000000383.510:160): pid=14777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2604" name="file2" dev="loop7" ino=21 res=0 errno=0 [ 485.870798][T14764] loop0: detected capacity change from 0 to 32768 [ 485.879325][T12389] usb 7-1: cp210x converter now attached to ttyUSB0 [ 485.879663][T14581] veth0_macvtap: entered promiscuous mode [ 485.899993][T12389] usb 7-1: USB disconnect, device number 9 [ 485.931927][T14581] veth1_macvtap: entered promiscuous mode [ 485.940077][T12389] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 485.970785][ T30] audit: type=1326 audit(2000000383.630:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824738e969 code=0x7ffc0000 [ 485.984896][T14764] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 485.997670][T14581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.002742][T12389] cp210x 7-1:0.0: device disconnected [ 486.016808][T14581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.042281][ T30] audit: type=1326 audit(2000000383.680:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f824738e969 code=0x7ffc0000 [ 486.074935][ T30] audit: type=1326 audit(2000000383.680:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824738e969 code=0x7ffc0000 [ 486.098569][ T30] audit: type=1326 audit(2000000383.690:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824738e969 code=0x7ffc0000 [ 486.103337][T14581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.129365][ T30] audit: type=1326 audit(2000000383.690:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f824738e969 code=0x7ffc0000 [ 486.152836][ T30] audit: type=1326 audit(2000000383.690:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824738e969 code=0x7ffc0000 [ 486.175835][ T30] audit: type=1326 audit(2000000383.690:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8247385927 code=0x7ffc0000 [ 486.200803][ T30] audit: type=1326 audit(2000000383.690:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f824732ab39 code=0x7ffc0000 [ 486.223258][T14581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.235095][T14581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.248427][ T30] audit: type=1326 audit(2000000383.690:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14783 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8247385927 code=0x7ffc0000 [ 486.270781][T14581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.303754][T14792] loop7: detected capacity change from 0 to 1764 [ 486.306906][T14764] XFS (loop0): Ending clean mount [ 486.430435][T14764] XFS (loop0): User initiated shutdown received. [ 486.482027][T14764] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:472). Shutting down filesystem. [ 486.526202][T14764] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 486.554892][ T9114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.573938][ T9114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.648335][T13812] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 486.670842][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.690562][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.359626][T14797] loop6: detected capacity change from 0 to 32768 [ 487.377295][T14797] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2609 (14797) [ 487.422587][T14797] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 487.454486][T14797] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm [ 487.459977][T14801] loop3: detected capacity change from 0 to 32768 [ 487.590079][T14801] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 487.641328][T14797] BTRFS info (device loop6): rebuilding free space tree [ 487.685310][T14797] BTRFS info (device loop6): disabling free space tree [ 487.692830][T14797] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 487.702890][T14797] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 487.720660][T14801] XFS (loop3): Ending clean mount [ 487.754323][T14801] XFS (loop3): Quotacheck needed: Please wait. [ 487.819896][T14801] XFS (loop3): Quotacheck: Done. [ 487.848636][T14850] loop4: detected capacity change from 0 to 512 [ 487.855748][T14801] XFS (loop3): User initiated shutdown received. [ 487.862135][T14801] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476). Shutting down filesystem. [ 487.909513][T14850] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 487.915479][T14801] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 487.959487][T14850] EXT4-fs (loop4): 1 truncate cleaned up [ 487.982643][T14850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.002914][T12993] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 488.037009][T14850] EXT4-fs warning (device loop4): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 488.048534][T12162] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 488.146877][T14581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.396690][T14865] (syz.0.2631,14865,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 489.176572][T14895] loop6: detected capacity change from 0 to 4096 [ 489.253300][T14895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.561115][T12162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.579400][T14884] loop0: detected capacity change from 0 to 32768 [ 489.600923][T14884] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2636 (14884) [ 489.616723][T14911] Bluetooth: MGMT ver 1.23 [ 489.666909][T14884] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 489.698467][T14884] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 489.806227][T14884] BTRFS info (device loop0): rebuilding free space tree [ 489.894436][T14884] BTRFS info (device loop0): disabling free space tree [ 489.932859][T14884] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 489.974748][T14884] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 490.496493][T13812] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 490.832368][T14955] loop6: detected capacity change from 0 to 512 [ 490.866492][T14938] loop7: detected capacity change from 0 to 32768 [ 490.888522][T14953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.889810][T14958] loop4: detected capacity change from 0 to 2048 [ 490.913197][T14955] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 490.922515][T14953] bond0: (slave rose0): Enslaving as an active interface with an up link [ 490.954929][T14938] (syz.7.2655,14938,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 490.990881][T14938] (syz.7.2655,14938,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 491.031292][T14955] EXT4-fs (loop6): invalid journal inode [ 491.042295][T14958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.077393][T14955] EXT4-fs (loop6): can't get journal size [ 491.089024][T14958] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.168923][T14938] JBD2: Ignoring recovery information on journal [ 491.176291][T14955] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 491.200986][T14955] System zones: 1-12, 13-13 [ 491.212731][T14955] EXT4-fs (loop6): 1 truncate cleaned up [ 491.217282][T14958] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2665: bg 0: block 440: padding at end of block bitmap is not set [ 491.221464][T14955] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.254896][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 491.286640][T14958] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -117 [ 491.293320][T14955] EXT4-fs (loop6): shut down requested (2) [ 491.311720][T14938] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 491.411184][T14581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.442528][T12162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.534732][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 491.534750][ T30] audit: type=1800 audit(2000000389.190:179): pid=14975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2655" name="file1" dev="loop7" ino=16979 res=0 errno=0 [ 491.667349][T13101] ocfs2: Unmounting device (7,7) on (node local) [ 492.406568][T14988] loop4: detected capacity change from 0 to 32768 [ 492.432229][T14988] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2677 (14988) [ 492.472233][T14988] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 492.486899][T14988] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 492.503767][T14988] BTRFS info (device loop4): using free-space-tree [ 492.563647][T15017] loop6: detected capacity change from 0 to 128 [ 492.786001][T14581] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 492.943479][T15029] can0: slcan on ttyS3. [ 493.087983][T15029] can0 (unregistered): slcan off ttyS3. [ 493.171830][T15035] loop0: detected capacity change from 0 to 1024 [ 493.224654][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 493.305943][T15035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.318371][T15035] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.375248][T15039] loop6: detected capacity change from 0 to 4096 [ 493.384945][T15039] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 493.440028][T15039] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 493.452807][T13812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.643296][T15054] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 493.670388][T15054] usb usb1: Process 15054 (syz.0.2697) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 493.809613][T15062] mkiss: ax0: crc mode is auto. [ 494.121180][T15079] tap0: tun_chr_ioctl cmd 1074025680 [ 494.127512][T15082] loop7: detected capacity change from 0 to 1024 [ 494.180037][T15080] use of bytesused == 0 is deprecated and will be removed in the future, [ 494.197712][T15080] use the actual size instead. [ 494.341606][T15088] bridge_slave_0: left allmulticast mode [ 494.359803][T15088] bridge_slave_0: left promiscuous mode [ 494.404990][T15088] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.458150][T15088] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 494.483023][T15095] loop7: detected capacity change from 0 to 1024 [ 494.499010][T15095] EXT4-fs: inline encryption not supported [ 494.521330][T15095] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 494.564175][T15095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.643535][T15095] EXT4-fs error (device loop7): __ext4_new_inode:1073: comm syz.7.2716: reserved inode found cleared - inode=1 [ 494.835664][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.928898][T15093] loop6: detected capacity change from 0 to 32768 [ 494.937912][T15093] btrfs: Deprecated parameter 'usebackuproot' [ 494.944032][T15093] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 495.002243][T15093] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2713 (15093) [ 495.024924][ T5885] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 495.065628][T15093] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 495.104665][T15093] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 495.113510][T15093] BTRFS info (device loop6): using free-space-tree [ 495.202787][ T9114] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 495.228744][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 495.238254][T15093] BTRFS error (device loop6): failed to load root extent [ 495.246799][T15093] BTRFS warning (device loop6): try to load backup roots slot 1 [ 495.247062][ T5885] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.262535][ T9114] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 495.284670][T15093] BTRFS warning (device loop6): couldn't read tree root [ 495.297894][T15093] BTRFS warning (device loop6): try to load backup roots slot 2 [ 495.324358][ T49] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 495.335472][ T5885] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.356004][T15093] BTRFS warning (device loop6): couldn't read tree root [ 495.374620][T15093] BTRFS warning (device loop6): try to load backup roots slot 3 [ 495.385005][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 495.392025][ T5885] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 495.430648][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.447041][T15093] BTRFS info (device loop6): rebuilding free space tree [ 495.462918][ T5885] usb 4-1: config 0 descriptor?? [ 495.510442][T15093] BTRFS info (device loop6): checking UUID tree [ 495.647311][T12162] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 495.910417][ T5885] hid-steam 0003:28DE:1205.000E: item fetching failed at offset 0/5 [ 495.955570][ T5885] hid-steam 0003:28DE:1205.000E: steam_probe:parse of hid interface failed [ 495.974723][ T5885] hid-steam 0003:28DE:1205.000E: probe with driver hid-steam failed with error -22 [ 496.145947][ T5885] usb 4-1: USB disconnect, device number 15 [ 496.473921][T15140] loop7: detected capacity change from 0 to 32768 [ 496.489138][T15140] (syz.7.2728,15140,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 496.503827][T15140] (syz.7.2728,15140,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 496.537678][T15140] JBD2: Ignoring recovery information on journal [ 496.628791][T15140] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 496.727878][T15142] loop6: detected capacity change from 0 to 32768 [ 496.750773][T15158] loop0: detected capacity change from 0 to 512 [ 496.760437][T15142] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 496.837922][T15158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.855834][T15158] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.920669][T13101] ocfs2: Unmounting device (7,7) on (node local) [ 497.018205][T13812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.046612][T15142] XFS (loop6): Ending clean mount [ 497.087102][T15142] XFS (loop6): Quotacheck needed: Please wait. [ 497.202275][T15142] XFS (loop6): Quotacheck: Done. [ 497.232753][T15179] loop4: detected capacity change from 0 to 512 [ 497.256357][T15179] EXT4-fs: Ignoring removed bh option [ 497.276735][T15179] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 497.309630][T15179] EXT4-fs (loop4): invalid journal inode [ 497.328931][T12162] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 497.341415][T15179] EXT4-fs (loop4): can't get journal size [ 497.379542][T15179] EXT4-fs (loop4): 1 truncate cleaned up [ 497.409385][T15191] loop7: detected capacity change from 0 to 4096 [ 497.434891][T15179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.488171][T15191] NILFS (loop7): invalid segment: Checksum error in segment payload [ 497.541888][T15191] NILFS (loop7): trying rollback from an earlier position [ 497.559664][T14581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.655349][T15191] NILFS (loop7): recovery complete [ 497.668001][T15196] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.035829][T15210] o2cb: This node has not been configured. [ 498.054756][T15210] o2cb: Cluster check failed. Fix errors before retrying. [ 498.088531][T15210] (syz.3.2755,15210,0):user_dlm_register:674 ERROR: status = -22 [ 498.134062][T15210] (syz.3.2755,15210,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 498.264367][T15212] loop7: detected capacity change from 0 to 32768 [ 498.272884][T15212] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2753 (15212) [ 498.297813][T15212] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 498.308155][T15212] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 498.319561][T15212] BTRFS info (device loop7): disk space caching is enabled [ 498.326878][T15212] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 498.468174][T15212] BTRFS info (device loop7): rebuilding free space tree [ 498.484465][T15212] BTRFS info (device loop7): disabling free space tree [ 498.491678][T15212] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 498.501417][T15212] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 498.591609][T13101] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 498.615966][T15232] loop0: detected capacity change from 0 to 512 [ 498.659227][T15232] EXT4-fs: Ignoring removed nomblk_io_submit option [ 498.716519][T15232] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 498.771020][T15232] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 498.781854][T15232] EXT4-fs (loop0): 1 truncate cleaned up [ 498.798125][T15232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.819636][T15232] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 4: comm syz.0.2757: lblock 0 mapped to illegal pblock 4 (length 1) [ 498.843628][T15232] EXT4-fs (loop0): Remounting filesystem read-only [ 498.970753][T13812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.216359][T15248] ip6erspan0: tun_chr_ioctl cmd 2147767511 [ 499.547543][T15265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2770'. [ 499.757046][T15278] loop4: detected capacity change from 0 to 2048 [ 499.768509][T15278] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 499.802524][T15278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.859825][T15278] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.886475][ T5885] IPVS: starting estimator thread 0... [ 499.907978][T15286] netlink: 'syz.7.2779': attribute type 2 has an invalid length. [ 499.964027][T15286] netlink: 16142 bytes leftover after parsing attributes in process `syz.7.2779'. [ 499.990711][T14581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.005714][T15287] IPVS: using max 30 ests per chain, 72000 per kthread [ 500.194656][T12356] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 500.352788][T15308] loop7: detected capacity change from 0 to 128 [ 500.360685][T12356] usb 7-1: Using ep0 maxpacket: 32 [ 500.362525][T15309] loop4: detected capacity change from 0 to 128 [ 500.380124][T12356] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 500.394605][T12356] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 500.397559][T15309] FAT-fs (loop4): Directory bread(block 524322) failed [ 500.422884][T15309] FAT-fs (loop4): Directory bread(block 524323) failed [ 500.424821][T12356] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.446479][T15309] FAT-fs (loop4): Directory bread(block 524324) failed [ 500.453670][T15308] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 500.473249][T12356] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 500.482854][T15309] FAT-fs (loop4): Directory bread(block 524325) failed [ 500.483322][T12356] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 500.499732][T15309] FAT-fs (loop4): Directory bread(block 524326) failed [ 500.510355][T15309] FAT-fs (loop4): Directory bread(block 524327) failed [ 500.518914][T15309] FAT-fs (loop4): Directory bread(block 524328) failed [ 500.530256][T15309] FAT-fs (loop4): Directory bread(block 524329) failed [ 500.534796][T12356] usb 7-1: Product: syz [ 500.546232][T12356] usb 7-1: Manufacturer: syz [ 500.553436][T15308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.565547][T12356] usb 7-1: SerialNumber: syz [ 500.589952][T12356] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input16 [ 500.822825][T15323] loop0: detected capacity change from 0 to 2048 [ 500.836273][T15323] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 500.848275][T12392] usb 7-1: USB disconnect, device number 10 [ 500.848346][ C0] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 500.898558][T12392] appletouch 7-1:1.0: input: appletouch disconnected [ 500.908339][T15323] UDF-fs: unknown compression code (0) [ 500.990827][T15325] : renamed from bond0 (while UP) [ 501.014713][ T1210] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 501.178230][ T1210] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 501.194732][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.212989][ T1210] usb 5-1: Product: syz [ 501.223160][ T1210] usb 5-1: Manufacturer: syz [ 501.233267][ T1210] usb 5-1: SerialNumber: syz [ 501.249890][ T1210] usb 5-1: config 0 descriptor?? [ 501.393551][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.673623][ T1210] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 501.694863][ T1210] usb 5-1: Firmware version (0.0) predates our first public release. [ 501.703002][ T1210] usb 5-1: Please update to version 0.2 or newer [ 501.758463][T15356] loop7: detected capacity change from 0 to 128 [ 501.798965][T15356] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 501.851554][T15356] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 501.937075][ T1210] usb 5-1: USB disconnect, device number 8 [ 502.952175][T15395] loop6: detected capacity change from 0 to 64 [ 503.164125][T15402] wireguard: wg2: Could not create IPv4 socket [ 503.225191][T15405] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2834'. [ 503.243009][T15378] loop4: detected capacity change from 0 to 40427 [ 503.261724][T15378] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 503.269899][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2835'. [ 503.289662][T15378] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 503.342813][T15378] F2FS-fs (loop4): invalid crc value [ 503.458845][T15420] netlink: 'syz.6.2839': attribute type 44 has an invalid length. [ 503.570807][T15378] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 503.601071][T15378] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 503.729960][T14581] syz-executor: attempt to access beyond end of device [ 503.729960][T14581] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 503.746590][T15433] loop7: detected capacity change from 0 to 512 [ 503.770029][T14581] CPU: 0 UID: 0 PID: 14581 Comm: syz-executor Not tainted 6.15.0-next-20250529-syzkaller #0 PREEMPT(full) [ 503.770058][T14581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 503.770071][T14581] Call Trace: [ 503.770079][T14581] [ 503.770089][T14581] dump_stack_lvl+0x189/0x250 [ 503.770117][T14581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.770134][T14581] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 503.770162][T14581] ? __pfx_queue_work_on+0x10/0x10 [ 503.770184][T14581] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 503.770210][T14581] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 503.770239][T14581] ? f2fs_hw_is_readonly+0x39b/0x470 [ 503.770271][T14581] f2fs_handle_critical_error+0x37c/0x540 [ 503.770305][T14581] f2fs_write_end_io+0x495/0x810 [ 503.770333][T14581] ? blkg_put+0x22/0x240 [ 503.770369][T14581] __submit_merged_bio+0x27a/0x6a0 [ 503.770402][T14581] __submit_merged_write_cond+0x255/0x530 [ 503.770436][T14581] f2fs_write_data_pages+0x261d/0x3000 [ 503.770463][T14581] ? __lock_acquire+0xab9/0xd20 [ 503.770526][T14581] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 503.770599][T14581] ? __mod_zone_page_state+0xd7/0x140 [ 503.770630][T14581] ? folios_put_refs+0x560/0x640 [ 503.770668][T14581] ? __pfx_folios_put_refs+0x10/0x10 [ 503.770694][T14581] ? rcu_is_watching+0x15/0xb0 [ 503.770723][T14581] ? __lock_acquire+0xab9/0xd20 [ 503.770767][T14581] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 503.770798][T14581] do_writepages+0x32e/0x550 [ 503.770830][T14581] ? do_raw_spin_unlock+0x122/0x240 [ 503.770859][T14581] filemap_fdatawrite+0x191/0x230 [ 503.770881][T14581] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 503.770959][T14581] ? do_raw_spin_unlock+0x122/0x240 [ 503.770987][T14581] f2fs_sync_dirty_inodes+0x31f/0x830 [ 503.771034][T14581] f2fs_write_checkpoint+0x94a/0x1de0 [ 503.771079][T14581] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 503.771160][T14581] ? kill_f2fs_super+0x298/0x6c0 [ 503.771185][T14581] kill_f2fs_super+0x2c3/0x6c0 [ 503.771210][T14581] ? __pfx_kill_f2fs_super+0x10/0x10 [ 503.771227][T14581] ? radix_tree_delete_item+0x2b6/0x400 [ 503.771263][T14581] ? shrinker_free+0x2ce/0x3e0 [ 503.771292][T14581] deactivate_locked_super+0xb9/0x130 [ 503.771325][T14581] cleanup_mnt+0x425/0x4c0 [ 503.771354][T14581] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.771385][T14581] task_work_run+0x1d4/0x260 [ 503.771414][T14581] ? __pfx_task_work_run+0x10/0x10 [ 503.771437][T14581] ? __x64_sys_umount+0x122/0x160 [ 503.771463][T14581] ? exit_to_user_mode_loop+0x40/0x110 [ 503.771496][T14581] exit_to_user_mode_loop+0xec/0x110 [ 503.771525][T14581] do_syscall_64+0x2bd/0x3b0 [ 503.771553][T14581] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.771580][T14581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.771599][T14581] ? clear_bhb_loop+0x60/0xb0 [ 503.771624][T14581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.771642][T14581] RIP: 0033:0x7f1643d8fc97 [ 503.771660][T14581] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 503.771678][T14581] RSP: 002b:00007ffe0fa3da68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 503.771699][T14581] RAX: 0000000000000000 RBX: 00007f1643e1089d RCX: 00007f1643d8fc97 [ 503.771713][T14581] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0fa3db20 [ 503.771726][T14581] RBP: 00007ffe0fa3db20 R08: 0000000000000000 R09: 0000000000000000 [ 503.771739][T14581] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0fa3ebb0 [ 503.771752][T14581] R13: 00007f1643e1089d R14: 000000000007af3a R15: 00007ffe0fa3ebf0 [ 503.771785][T14581] [ 503.771792][T14581] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 504.056273][T15433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.056396][T15433] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.338447][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.564867][T15429] loop6: detected capacity change from 0 to 32768 [ 504.613534][T15429] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 504.693832][T15429] XFS (loop6): Ending clean mount [ 504.720638][T15429] XFS (loop6): Quotacheck needed: Please wait. [ 504.850342][T15429] XFS (loop6): Quotacheck: Done. [ 504.850557][T15445] loop0: detected capacity change from 0 to 32768 [ 504.879540][T15445] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 504.937682][T15445] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 504.980499][T12162] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 505.234261][T15445] overlayfs: upper fs does not support tmpfile. [ 505.291093][T15445] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 505.331196][T15445] overlayfs: failed to set xattr on upper [ 505.340585][T15445] overlayfs: ...falling back to redirect_dir=nofollow. [ 505.360699][T15445] overlayfs: ...falling back to index=off. [ 505.383340][T15445] overlayfs: ...falling back to uuid=null. [ 505.390702][T15445] overlayfs: upper fs missing required features. [ 505.468209][T13812] ocfs2: Unmounting device (7,0) on (node local) [ 505.892195][T15497] loop4: detected capacity change from 0 to 1024 [ 505.941931][T15497] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 506.011869][T15497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.283349][T14581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.891492][T15494] loop0: detected capacity change from 0 to 131072 [ 506.911445][T15494] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 506.921366][T15494] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 506.971515][T15494] F2FS-fs (loop0): invalid crc value [ 507.108233][T15494] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 507.115426][T15494] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 507.155968][T15492] loop7: detected capacity change from 0 to 40427 [ 507.184622][T15492] F2FS-fs (loop7): build fault injection rate: 771 [ 507.243135][T15492] F2FS-fs (loop7): invalid crc value [ 507.416447][T15492] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 507.466898][T15492] F2FS-fs (loop7): Stopped filesystem due to reason: 0 [ 509.283375][T15586] loop0: detected capacity change from 0 to 2048 [ 509.290912][T15586] EXT4-fs: Ignoring removed mblk_io_submit option [ 509.323188][T15586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.374926][ T5885] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 509.377859][T15586] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2906: bg 0: block 234: padding at end of block bitmap is not set [ 509.408043][T15591] loop7: detected capacity change from 0 to 512 [ 509.420050][T15591] EXT4-fs (loop7): Test dummy encryption mode enabled [ 509.428518][T15591] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 509.429226][T15586] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 16 with error 117 [ 509.455773][T15586] EXT4-fs (loop0): This should not happen!! Data will be lost [ 509.455773][T15586] [ 509.471317][T15591] EXT4-fs (loop7): 1 truncate cleaned up [ 509.482389][T15591] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.527474][T15591] EXT4-fs (loop7): Online defrag not supported for encrypted files [ 509.530973][T13812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.558053][ T5885] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 509.593712][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.605796][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.618745][ T5885] usb 5-1: Product: syz [ 509.622937][ T5885] usb 5-1: Manufacturer: syz [ 509.645392][ T5885] usb 5-1: SerialNumber: syz [ 509.702375][ T5885] usb 5-1: config 0 descriptor?? [ 509.717034][ T5885] ch341 5-1:0.0: ch341-uart converter detected [ 509.847198][T15600] loop0: detected capacity change from 0 to 1024 [ 509.921212][ T5885] usb 5-1: failed to receive control message: -121 [ 509.947425][ T5885] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 510.920203][T15625] loop7: detected capacity change from 0 to 32768 [ 510.939536][T15625] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 510.997400][T15625] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 511.175982][T13101] ocfs2: Unmounting device (7,7) on (node local) [ 511.186682][T15636] input: syz0 as /devices/virtual/input/input17 [ 511.545587][T15645] kvm: user requested TSC rate below hardware speed [ 511.939744][T15660] loop7: detected capacity change from 0 to 512 [ 512.052972][T15660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.083930][T15660] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 512.184475][T12392] usb 5-1: USB disconnect, device number 9 [ 512.215896][T12392] ch341 5-1:0.0: device disconnected [ 512.602291][T15655] loop6: detected capacity change from 0 to 131072 [ 512.640607][T15655] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 150994945) [ 512.649756][T15655] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 512.670268][T15655] F2FS-fs (loop6): invalid crc value [ 512.773303][T15655] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 512.782510][T15655] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 512.890701][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.945651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 512.955691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 513.225140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 513.404416][T15694] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 513.979274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 514.762586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 515.271400][T15717] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 515.271400][T15717] The task syz.7.2953 (15717) triggered the difference, watch for misbehavior. [ 515.404875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 515.414105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 515.459685][T15725] (syz.6.2957,15725,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 515.816117][T15732] loop6: detected capacity change from 0 to 512 [ 515.824873][T15732] EXT4-fs: Ignoring removed bh option [ 515.830976][T15732] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 515.854706][T15732] EXT4-fs (loop6): invalid journal inode [ 515.862508][T15732] EXT4-fs (loop6): can't get journal size [ 515.882799][T15732] EXT4-fs (loop6): 1 truncate cleaned up [ 515.892167][T15732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.956408][T12162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.856850][ T5919] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 517.024657][ T5919] usb 7-1: Using ep0 maxpacket: 16 [ 517.054886][ T5919] usb 7-1: config 0 has no interfaces? [ 517.061725][ T5919] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 517.074668][ T5919] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 517.092920][ T5919] usb 7-1: Manufacturer: syz [ 517.125597][ T5919] usb 7-1: config 0 descriptor?? [ 517.356078][ T5919] usb 7-1: USB disconnect, device number 11 [ 517.694525][T15787] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2984'. [ 517.791316][T15789] netlink: 'syz.3.2985': attribute type 19 has an invalid length. [ 518.052648][T15779] loop4: detected capacity change from 0 to 32768 [ 518.106895][T15807] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2991'. [ 518.118454][T15779] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 518.190690][T15779] XFS (loop4): Ending clean mount [ 518.203624][T15779] XFS (loop4): Quotacheck needed: Please wait. [ 518.233033][ T79] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 [ 518.244687][T12392] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 518.274129][ T79] XFS (loop4): Unmount and run xfs_repair [ 518.309097][ T79] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 518.327798][ T79] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 518.350595][ T79] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 518.364781][ T79] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 518.373676][ T79] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 518.422651][ T79] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 518.432786][ T79] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 518.441863][ T79] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 518.452600][ T79] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 518.462712][T12392] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 518.480390][T15824] loop7: detected capacity change from 0 to 512 [ 518.488007][T12392] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 518.498027][T12392] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 518.512741][ T79] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74 [ 518.525820][T12392] usb 7-1: config 220 has no interface number 2 [ 518.532548][T12392] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 518.552789][T12392] usb 7-1: config 220 interface 0 has no altsetting 0 [ 518.560334][ T79] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 518.575637][T12392] usb 7-1: config 220 interface 76 has no altsetting 0 [ 518.582517][T12392] usb 7-1: config 220 interface 1 has no altsetting 0 [ 518.595974][ T79] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 518.611053][T15824] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.624348][T15779] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 518.648677][T12392] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 518.657861][T12392] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.660538][T15824] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.666568][T12392] usb 7-1: Product: syz [ 518.677021][T15779] XFS (loop4): Error -5 reserving per-AG metadata reserve pool. [ 518.680785][T12392] usb 7-1: Manufacturer: syz [ 518.694277][T12392] usb 7-1: SerialNumber: syz [ 518.869608][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.964748][T12392] usb 7-1: selecting invalid altsetting 0 [ 518.981271][T12392] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 519.003959][T12392] usb 7-1: No valid video chain found. [ 519.079620][T12392] usb 7-1: selecting invalid altsetting 0 [ 519.094650][T12392] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 519.125000][T12392] usb 7-1: USB disconnect, device number 12 [ 519.328421][T15835] loop7: detected capacity change from 0 to 4096 [ 519.336740][T15835] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 519.438420][T15835] ntfs3(loop7): Failed to load $Extend (-22). [ 519.444751][T15835] ntfs3(loop7): Failed to initialize $Extend. [ 520.068744][T15856] mkiss: ax0: crc mode is auto. [ 520.494964][T15848] loop7: detected capacity change from 0 to 32768 [ 520.502765][T15848] btrfs: Deprecated parameter 'usebackuproot' [ 520.544695][T15848] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 520.564347][T15848] BTRFS warning: excessive commit interval 5574, use with care [ 520.614197][T15848] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3007 (15848) [ 520.669286][T15848] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 520.710077][T15848] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm [ 520.881386][T15848] BTRFS info (device loop7): rebuilding free space tree [ 520.911416][T15848] BTRFS info (device loop7): disabling free space tree [ 520.919141][T15848] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 520.929489][T15848] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 520.977484][T15862] loop4: detected capacity change from 0 to 32768 [ 521.005358][T15862] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3013 (15862) [ 521.028607][ T30] audit: type=1800 audit(2000000931.686:180): pid=15848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3007" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 521.065622][T15862] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 521.083152][T15862] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 521.114957][T15862] BTRFS info (device loop4): using free-space-tree [ 521.156553][T13101] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 521.232149][T15866] loop6: detected capacity change from 0 to 32768 [ 521.243278][T15866] XFS: ikeep mount option is deprecated. [ 521.302229][T15866] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 521.407543][T15866] XFS (loop6): Ending clean mount [ 521.533787][T14581] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 521.631320][T12162] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 521.667567][T15913] loop7: detected capacity change from 0 to 128 [ 521.677108][T15913] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 521.721570][T15913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 522.123835][T15922] trusted_key: syz.4.3032 sent an empty control message without MSG_MORE. [ 522.137528][T15925] ALSA: mixer_oss: invalid OSS volume '' [ 522.343281][T15928] loop4: detected capacity change from 0 to 2048 [ 522.384868][T15931] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 522.436814][T15928] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 522.504819][T15928] Remounting filesystem read-only [ 522.536529][T15934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.700111][T15924] loop7: detected capacity change from 0 to 32768 [ 522.725085][T15924] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3024 (15924) [ 522.771049][T15924] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 522.788884][T15924] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm [ 522.802506][T15924] BTRFS info (device loop7): using free-space-tree [ 522.819471][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 523.072216][ T49] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared) [ 523.119120][T15965] loop4: detected capacity change from 0 to 256 [ 523.136783][T15965] exfat: Deprecated parameter 'utf8' [ 523.161642][T15965] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 523.220784][T15967] autofs4:pid:15967:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 523.241797][T13101] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 523.254697][T15967] autofs4:pid:15967:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 523.725614][T15981] loop7: detected capacity change from 0 to 256 [ 523.986100][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'. [ 524.015692][T15988] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 524.204858][T15976] loop4: detected capacity change from 0 to 40427 [ 524.235993][T15976] F2FS-fs (loop4): build fault injection rate: 771 [ 524.246563][T15976] F2FS-fs (loop4): invalid crc value [ 524.464709][T15976] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 524.562612][T15976] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 525.792984][T16033] kvm: kvm [16031]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x2 [ 526.249306][T16046] loop4: detected capacity change from 0 to 4096 [ 526.277867][T16046] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 526.317943][T16046] ntfs3(loop4): Failed to load $Extend (-22). [ 526.324149][T16046] ntfs3(loop4): Failed to initialize $Extend. [ 526.379966][T16052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.507288][T16054] loop6: detected capacity change from 0 to 2048 [ 526.571922][T16054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.592824][T16040] loop7: detected capacity change from 0 to 32768 [ 526.672759][T16040] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 526.702109][T16054] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 526.724811][T16054] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 3 with error 28 [ 526.803124][T16054] EXT4-fs (loop6): This should not happen!! Data will be lost [ 526.803124][T16054] [ 526.858122][T16054] EXT4-fs (loop6): Total free blocks count 0 [ 526.886167][T16054] EXT4-fs (loop6): Free/Dirty block details [ 526.895645][T16054] EXT4-fs (loop6): free_blocks=2415919504 [ 526.912033][T16054] EXT4-fs (loop6): dirty_blocks=16 [ 526.919005][T13101] ocfs2: Unmounting device (7,7) on (node local) [ 526.929373][T16054] EXT4-fs (loop6): Block reservation details [ 526.961699][T16054] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 527.093633][ T49] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 527.855036][T16077] loop6: detected capacity change from 0 to 32768 [ 527.918464][T16077] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3081 (16077) [ 528.034095][T16077] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 528.084709][T16077] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm [ 528.093661][T16077] BTRFS info (device loop6): using free-space-tree [ 528.162573][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3090'. [ 528.212730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 528.374905][T16077] BTRFS info (device loop6): rebuilding free space tree [ 528.508529][T16077] BTRFS info (device loop6): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 528.525149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 528.580498][T16124] loop4: detected capacity change from 0 to 64 [ 528.688735][T12162] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 528.729533][ T30] audit: type=1800 audit(2000000939.386:181): pid=16127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3097" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 529.129671][T16138] loop4: detected capacity change from 0 to 1024 [ 529.166424][T16138] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 529.202279][T16138] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 529.218969][T16138] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 529.239786][T16138] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.3104: unexpected bad inode w/o EXT4_IGET_BAD [ 529.288949][T16138] EXT4-fs (loop4): no journal found [ 529.294240][T16138] EXT4-fs (loop4): can't get journal size [ 529.331193][T16138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8840e11c, mo2=0102] [ 529.357140][T16138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 529.358259][T16149] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3107'. [ 529.379242][ T5885] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 529.397507][T16150] netlink: 'syz.6.3099': attribute type 9 has an invalid length. [ 529.517959][T14581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.565283][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 529.579240][ T5885] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 529.591120][ T5885] usb 4-1: config 0 has no interface number 0 [ 529.601339][ T5885] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 529.619476][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.628610][ T5885] usb 4-1: Product: syz [ 529.632928][ T5885] usb 4-1: Manufacturer: syz [ 529.653760][ T5885] usb 4-1: SerialNumber: syz [ 529.678469][ T5885] usb 4-1: config 0 descriptor?? [ 529.688114][ T5885] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 529.916175][ T5885] usb 4-1: qt2_attach - failed to power on unit: -71 [ 529.925212][ T5885] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 529.937187][T16174] loop7: detected capacity change from 0 to 8 [ 529.949009][ T5885] usb 4-1: USB disconnect, device number 16 [ 529.987084][T16174] SQUASHFS error: Failed to read block 0x6e6: -5 [ 529.993653][T16174] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 530.004716][T16174] SQUASHFS error: Unable to read directory block [6e4:0] [ 531.244720][ T1210] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 531.418720][ T1210] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 531.434905][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.449007][ T1210] usb 7-1: Product: syz [ 531.461396][ T1210] usb 7-1: Manufacturer: syz [ 531.476132][ T1210] usb 7-1: SerialNumber: syz [ 531.497924][ T1210] usb 7-1: config 0 descriptor?? [ 531.517503][ T1210] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 531.920633][T16243] netlink: 'syz.0.3153': attribute type 7 has an invalid length. [ 532.340690][ T1210] gspca_sunplus: reg_r err -71 [ 532.346122][ T1210] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 532.366606][ T1210] usb 7-1: USB disconnect, device number 13 [ 532.414496][T16259] loop4: detected capacity change from 0 to 1024 [ 532.839713][T16269] loop4: detected capacity change from 0 to 128 [ 532.890127][T16269] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 532.931901][T16269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.190213][ T5154] Bluetooth: hci2: command 0x0406 tx timeout [ 534.246361][T16301] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3180'. [ 534.484645][ T5919] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 534.644612][ T5919] usb 7-1: Using ep0 maxpacket: 16 [ 534.662075][ T5919] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 534.690751][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.717234][ T5919] usb 7-1: config 0 descriptor?? [ 534.738622][ T5919] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 535.552274][ T5919] gspca_sonixj: reg_r err -71 [ 535.557850][ T5919] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 535.576744][ T5919] usb 7-1: USB disconnect, device number 14 [ 535.636267][T16341] binder: 16340:16341 ioctl c0306201 0 returned -14 [ 536.213281][T16366] program syz.6.3211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.363840][T16377] loop6: detected capacity change from 0 to 64 [ 536.564901][T12392] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 536.595996][T16389] loop7: detected capacity change from 0 to 512 [ 536.633343][T16389] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.3221: bad orphan inode 134217728 [ 536.660292][T16393] loop4: detected capacity change from 0 to 256 [ 536.668484][T16393] exfat: Deprecated parameter 'utf8' [ 536.692175][T16389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.712695][T16389] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 536.738717][T16393] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 536.752775][T12392] usb 4-1: Using ep0 maxpacket: 32 [ 536.764037][T16397] loop6: detected capacity change from 0 to 128 [ 536.791413][T16397] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 536.796402][T12392] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 536.850275][T12392] usb 4-1: config 0 has no interface number 0 [ 536.863426][T12392] usb 4-1: config 0 interface 12 has no altsetting 0 [ 536.872860][T16397] FAT-fs (loop6): FAT read failed (blocknr 128) [ 536.885506][T12392] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 536.896038][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.904605][T12392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.926582][T12392] usb 4-1: Product: syz [ 536.941345][T12392] usb 4-1: Manufacturer: syz [ 536.955128][T12392] usb 4-1: SerialNumber: syz [ 536.976099][T12392] usb 4-1: config 0 descriptor?? [ 537.204739][T16405] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 537.269323][T16408] can0: slcan on ttyS3. [ 537.349089][T16408] can0 (unregistered): slcan off ttyS3. [ 537.360756][T16408] Falling back ldisc for ttyS3. [ 537.704736][ T51] Bluetooth: hci4: command tx timeout [ 537.819217][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3237'. [ 537.846284][T12392] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 537.854816][T12392] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 537.881487][T12392] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 537.902487][T12392] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 537.915845][T12392] usb 4-1: USB disconnect, device number 17 [ 538.019865][T16430] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3239'. [ 538.056892][T16432] loop7: detected capacity change from 0 to 2048 [ 538.085304][T16433] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 538.140639][ T30] audit: type=1800 audit(2000000948.796:182): pid=16432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3241" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 538.414971][T16437] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3243'. [ 539.306735][T16464] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3254'. [ 539.533740][T16477] loop7: detected capacity change from 0 to 16 [ 539.546323][T16477] erofs (device loop7): mounted with root inode @ nid 36. [ 539.837395][T16469] loop6: detected capacity change from 0 to 32768 [ 539.861971][T16469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3255 (16469) [ 539.892573][T16469] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 539.922303][T16469] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 539.954152][T16491] loop7: detected capacity change from 0 to 256 [ 539.963184][T16469] BTRFS info (device loop6): disk space caching is enabled [ 539.973128][T16491] exfat: Deprecated parameter 'namecase' [ 539.979203][T16491] exfat: Deprecated parameter 'namecase' [ 539.985008][T16469] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 540.010474][T16491] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 540.069209][T16469] BTRFS info (device loop6): rebuilding free space tree [ 540.117323][T16469] BTRFS info (device loop6): disabling free space tree [ 540.138083][T16469] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 540.160787][T16469] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 540.217748][T16512] loop4: detected capacity change from 0 to 256 [ 540.329993][T16512] FAT-fs (loop4): Directory bread(block 64) failed [ 540.339140][T16512] FAT-fs (loop4): Directory bread(block 65) failed [ 540.360900][T16512] FAT-fs (loop4): Directory bread(block 66) failed [ 540.377264][ T30] audit: type=1804 audit(2000000951.036:183): pid=16516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3271" name="/newroot/213/cgroup.controllers" dev="tmpfs" ino=1126 res=1 errno=0 [ 540.384647][T16512] FAT-fs (loop4): Directory bread(block 67) failed [ 540.435391][T12162] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 540.438939][T16512] FAT-fs (loop4): Directory bread(block 68) failed [ 540.466001][ T30] audit: type=1800 audit(2000000951.036:184): pid=16516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3271" name="cgroup.controllers" dev="tmpfs" ino=1126 res=0 errno=0 [ 540.471988][T16512] FAT-fs (loop4): Directory bread(block 69) failed [ 540.542714][T16512] FAT-fs (loop4): Directory bread(block 70) failed [ 540.543901][ T30] audit: type=1800 audit(2000000951.066:185): pid=16516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3271" name="cgroup.controllers" dev="tmpfs" ino=1126 res=0 errno=0 [ 540.562816][T16512] FAT-fs (loop4): Directory bread(block 71) failed [ 540.609437][T16512] FAT-fs (loop4): Directory bread(block 72) failed [ 540.627098][T16512] FAT-fs (loop4): Directory bread(block 73) failed [ 541.381652][T16535] loop4: detected capacity change from 0 to 256 [ 541.403760][T16535] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d72, utbl_chksum : 0xe619d30d) [ 541.769294][T16545] xt_CT: No such helper "pptp" [ 541.958539][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 542.271564][T16575] netlink: 'syz.7.3298': attribute type 9 has an invalid length. [ 542.289911][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3298'. [ 542.495077][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3303'. [ 542.613962][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'. [ 542.640750][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3306'. [ 542.680806][T16591] xt_CT: No such helper "snmp" [ 543.138434][T16615] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3317'. [ 543.282804][T16622] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3320'. [ 544.031845][T16649] loop4: detected capacity change from 0 to 512 [ 544.046015][T16649] EXT4-fs (loop4): orphan cleanup on readonly fs [ 544.056814][T16649] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3333: bg 0: block 248: padding at end of block bitmap is not set [ 544.072017][T16649] Quota error (device loop4): write_blk: dquota write failed [ 544.091238][T16649] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 544.101421][T16649] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3333: Failed to acquire dquot type 1 [ 544.124977][T16649] EXT4-fs (loop4): 1 truncate cleaned up [ 544.140515][T16649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 544.187799][T16658] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3334'. [ 544.202474][T14581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.424726][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 544.536520][T16643] loop6: detected capacity change from 0 to 32768 [ 544.577368][T16643] XFS (loop6): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 544.586187][ T30] audit: type=1326 audit(2000000955.236:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 544.622913][ T30] audit: type=1326 audit(2000000955.236:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 544.645732][T16643] XFS (loop6): Log size 624 blocks too small, minimum size is 816 blocks [ 544.654175][T16643] XFS (loop6): AAIEEE! Log failed size checks. Abort! [ 544.660609][T16681] loop7: detected capacity change from 0 to 2048 [ 544.687994][T16643] XFS (loop6): log mount failed [ 544.689885][T16681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.692968][ T30] audit: type=1326 audit(2000000955.236:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 544.725025][ T30] audit: type=1326 audit(2000000955.236:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 544.747545][ T30] audit: type=1326 audit(2000000955.236:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 544.776126][ T30] audit: type=1326 audit(2000000955.236:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 544.828332][T12356] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 544.841313][ T30] audit: type=1326 audit(2000000955.236:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 544.922181][ T30] audit: type=1326 audit(2000000955.236:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 544.994702][T12356] usb 4-1: Using ep0 maxpacket: 32 [ 545.002119][T12356] usb 4-1: config 0 interface 0 has no altsetting 0 [ 545.010525][T12356] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 545.020613][T12356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.053219][T12356] usb 4-1: config 0 descriptor?? [ 545.085661][T16687] loop4: detected capacity change from 0 to 256 [ 545.129507][T16687] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 545.142252][T16687] FAT-fs (loop4): Filesystem has been set read-only [ 545.149164][T16687] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 545.165521][T16687] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 545.188812][T16686] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 545.199668][T16687] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 545.212663][T16686] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 545.223146][T16687] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 545.242468][T16687] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 545.254329][T16687] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 545.264860][T16686] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 545.484114][T12356] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 545.496232][T12356] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 545.534127][T12356] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 545.572256][T12356] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 545.610289][T12356] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 545.657855][T12356] waterforce 0003:1044:7A4D.000F: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 545.707978][T16697] loop6: detected capacity change from 0 to 4096 [ 545.764108][T16699] loop7: detected capacity change from 0 to 24 [ 545.790008][T12356] waterforce 0003:1044:7A4D.000F: fw version request failed with -38 [ 545.815756][T16699] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 545.831459][T16699] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 545.836211][T12356] usb 4-1: USB disconnect, device number 18 [ 546.261207][T16719] loop7: detected capacity change from 0 to 64 [ 546.346417][T16719] Trying to free block not in datazone [ 546.351928][T16719] Trying to free block not in datazone [ 546.372167][T16719] Trying to free block not in datazone [ 546.522513][T16732] loop7: detected capacity change from 0 to 2048 [ 546.563254][T16732] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.714256][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.864048][T16743] mkiss: ax0: crc mode is auto. [ 547.040767][T16751] netlink: 324 bytes leftover after parsing attributes in process `syz.7.3373'. [ 547.377847][T16758] netlink: 'syz.7.3377': attribute type 1 has an invalid length. [ 547.459386][T16758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.730480][T16772] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3383'. [ 547.987722][T12323] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 548.021236][T16786] loop4: detected capacity change from 0 to 2048 [ 548.032634][T16786] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 548.108232][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 548.145232][T12323] usb 4-1: Using ep0 maxpacket: 32 [ 548.156393][T12323] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 548.165203][T12323] usb 4-1: config 0 has no interface number 0 [ 548.171339][T12323] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 548.189553][T12323] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 548.200944][T12323] usb 4-1: config 0 interface 126 has no altsetting 0 [ 548.210993][T12323] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 548.222588][T12323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.231000][T12323] usb 4-1: Product: syz [ 548.235324][T12323] usb 4-1: Manufacturer: syz [ 548.239955][T12323] usb 4-1: SerialNumber: syz [ 548.250045][T12323] usb 4-1: config 0 descriptor?? [ 548.256218][T16774] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 548.263601][T16774] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 548.690261][T16784] loop6: detected capacity change from 0 to 32768 [ 548.696045][T12323] ir_usb 4-1:0.126: IR Dongle converter detected [ 548.718062][T16784] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 548.738629][T16784] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 548.784013][T16784] XFS (loop6): Ending clean mount [ 548.792466][T16784] XFS (loop6): Quotacheck needed: Please wait. [ 548.879242][T16784] XFS (loop6): Quotacheck: Done. [ 548.895003][T12323] usb 4-1: IRDA class descriptor not found, device not bound [ 549.007517][T12162] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 549.110577][T12323] usb 4-1: USB disconnect, device number 19 [ 550.236748][T16835] loop4: detected capacity change from 0 to 32768 [ 550.243982][T16835] XFS: ikeep mount option is deprecated. [ 550.286461][T16835] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 550.425837][T16835] XFS (loop4): Ending clean mount [ 550.432393][T16849] loop6: detected capacity change from 0 to 32768 [ 550.449397][T16835] XFS (loop4): Quotacheck needed: Please wait. [ 550.498956][T16867] team0: Device ipvlan2 failed to register rx_handler [ 550.505606][T16849] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 550.505606][T16849] allowing incompatible features above 0.0: (unknown version) [ 550.505606][T16849] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 550.531659][T16835] XFS (loop4): Quotacheck: Done. [ 550.548527][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.563679][T16849] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 550.572076][T16849] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 550.583591][T16849] bcachefs (loop6): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 550.583591][T16849] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 550.605447][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.612350][T16849] bcachefs (loop6): dropping and reconstructing all alloc info [ 550.670739][T16849] bcachefs (loop6): accounting_read... done [ 550.694951][T16849] bcachefs (loop6): alloc_read... done [ 550.700837][T16849] bcachefs (loop6): snapshots_read... done [ 550.708156][T16849] bcachefs (loop6): done starting filesystem [ 550.778760][T14581] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 550.880462][T12162] bcachefs (loop6): shutting down [ 550.939844][T12162] bcachefs (loop6): shutdown complete [ 551.543682][T16901] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 551.698389][T16903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3439'. [ 552.221488][T16931] tap0: tun_chr_ioctl cmd 2147767506 [ 552.520362][T16944] loop4: detected capacity change from 0 to 256 [ 552.858827][T16960] loop6: detected capacity change from 0 to 128 [ 552.891765][T16960] ufs: You didn't specify the type of your ufs filesystem [ 552.891765][T16960] [ 552.891765][T16960] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 552.891765][T16960] [ 552.891765][T16960] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 552.900931][T16965] loop7: detected capacity change from 0 to 512 [ 552.922850][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.964458][T16966] loop4: detected capacity change from 0 to 2048 [ 552.982692][T16960] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 552.987369][T16966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.002683][T16965] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 553.013094][T16965] EXT4-fs (loop7): 1 truncate cleaned up [ 553.021860][T16965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.059318][T16960] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3464'. [ 553.080854][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.330196][T16982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3472'. [ 553.793363][T16985] loop4: detected capacity change from 0 to 32768 [ 553.822010][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 553.822030][ T30] audit: type=1800 audit(2000000964.476:196): pid=16985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3474" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 554.720576][T17039] mkiss: ax0: crc mode is auto. [ 554.725122][ T1210] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 554.889567][ T1210] usb 7-1: Using ep0 maxpacket: 16 [ 554.907582][ T1210] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 554.922157][T17053] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3506'. [ 554.927118][ T1210] usb 7-1: config 0 has no interface number 0 [ 554.947997][T17053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3506'. [ 554.956910][ T1210] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 554.959694][ T1210] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 554.994134][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.012651][ T1210] usb 7-1: Product: syz [ 555.024676][ T1210] usb 7-1: Manufacturer: syz [ 555.042930][ T1210] usb 7-1: SerialNumber: syz [ 555.062231][ T1210] usb 7-1: config 0 descriptor?? [ 555.321325][T17070] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 555.370618][T17074] netlink: 'syz.4.3516': attribute type 3 has an invalid length. [ 555.394712][T17074] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3516'. [ 555.527360][T17079] kernel profiling enabled (shift: 17) [ 555.691653][ T1210] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.214/input/input22 [ 555.897218][ T1210] usb 7-1: USB disconnect, device number 15 [ 555.970636][T17076] loop7: detected capacity change from 0 to 32768 [ 556.011347][T17076] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 556.166450][T17097] loop4: detected capacity change from 0 to 256 [ 556.250229][T13101] ocfs2: Unmounting device (7,7) on (node local) [ 556.487240][T17103] debugfs: Directory 'netdev:nicvf0' with parent 'phy40' already present! [ 556.633717][T17109] netlink: 'syz.7.3526': attribute type 8 has an invalid length. [ 556.870519][T17120] loop4: detected capacity change from 0 to 64 [ 557.085527][T17127] netlink: 'syz.4.3538': attribute type 4 has an invalid length. [ 557.850085][T17164] loop7: detected capacity change from 0 to 128 [ 557.901023][T17166] loop4: detected capacity change from 0 to 1024 [ 557.935590][T17166] EXT4-fs: Ignoring removed nobh option [ 557.941274][T17166] EXT4-fs: Ignoring removed bh option [ 557.964533][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3559'. [ 557.974204][T17170] bridge: RTM_NEWNEIGH with invalid ether address [ 557.991757][T17166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.098594][T17166] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 558.123641][T17166] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 558.233268][T14581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.631762][T17203] input: syz0 as /devices/virtual/input/input23 [ 558.858768][T17213] loop7: detected capacity change from 0 to 256 [ 559.111888][T17226] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.121916][T17226] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.448266][T17241] loop4: detected capacity change from 0 to 164 [ 559.509281][T17241] Unable to read rock-ridge attributes [ 559.527946][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3591'. [ 559.558087][T17241] Unable to read rock-ridge attributes [ 559.587064][T17235] loop6: detected capacity change from 0 to 32768 [ 559.651360][T17235] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 559.764777][T17235] XFS (loop6): Ending clean mount [ 559.774821][T17260] loop4: detected capacity change from 0 to 128 [ 559.792972][T17235] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 [ 559.806155][T17235] XFS (loop6): Unmount and run xfs_repair [ 559.811899][T17235] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 559.821580][T17235] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 559.832224][T17235] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 559.841400][T17235] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 559.850316][T17235] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 559.861182][T17235] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 559.870533][T17235] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 559.880228][T17235] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 559.889140][T17235] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 559.898076][T17235] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74 [ 559.923058][T17235] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 559.938001][T17235] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 559.978132][T12162] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 560.066204][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'. [ 560.393958][T17280] loop4: detected capacity change from 0 to 512 [ 560.430364][T17280] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 560.465452][T17285] loop7: detected capacity change from 0 to 128 [ 560.530932][T17280] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 560.596548][T17280] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 560.678447][T17291] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 560.727795][T17291] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 560.765843][T17291] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 560.955411][T14581] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 561.310238][T17324] loop4: detected capacity change from 0 to 2048 [ 561.361068][T17324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.474442][T17335] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3624: bg 0: block 234: padding at end of block bitmap is not set [ 561.537984][T17335] EXT4-fs (loop4): Remounting filesystem read-only [ 561.620299][T14581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.798390][T17343] mkiss: ax0: crc mode is auto. [ 562.840623][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.930710][T17351] loop4: detected capacity change from 0 to 32768 [ 562.958147][T17351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3635 (17351) [ 563.007812][T17351] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 563.044688][T17351] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 563.070777][T17351] BTRFS info (device loop4): using free-space-tree [ 563.350601][T14581] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 564.047192][T17412] netlink: 'syz.3.3657': attribute type 10 has an invalid length. [ 564.131558][T17412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.854163][T17416] loop7: detected capacity change from 0 to 32768 [ 564.894205][T17416] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3660 (17416) [ 564.944333][T17418] loop4: detected capacity change from 0 to 40427 [ 564.953580][T17416] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 564.963152][T17418] F2FS-fs (loop4): build fault injection rate: 690 [ 564.980466][T17416] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm [ 564.984612][T17418] F2FS-fs (loop4): Image doesn't support compression [ 565.007891][T17416] BTRFS info (device loop7): using free-space-tree [ 565.018384][T17418] F2FS-fs (loop4): Image doesn't support compression [ 565.065069][T17418] F2FS-fs (loop4): invalid crc value [ 565.165794][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3676'. [ 565.180226][T17469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3676'. [ 565.210920][T13101] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 565.297724][T17418] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 565.755035][T12356] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 565.960889][T12356] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 565.983188][T12356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.012706][T12356] usb 7-1: Product: syz [ 566.018665][T12356] usb 7-1: Manufacturer: syz [ 566.028689][T12356] usb 7-1: SerialNumber: syz [ 566.042381][T12356] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 566.098763][T17489] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 566.144711][T17489] macvlan2: entered allmulticast mode [ 566.150243][T17489] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 566.170349][T17489] mac80211_hwsim hwsim38 wlan0: left allmulticast mode [ 566.180862][T17489] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 566.239968][ T1210] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 566.508699][T17505] loop4: detected capacity change from 0 to 256 [ 566.563964][T17505] FAT-fs (loop4): Directory bread(block 64) failed [ 566.571342][T17505] FAT-fs (loop4): Directory bread(block 65) failed [ 566.578253][T17505] FAT-fs (loop4): Directory bread(block 66) failed [ 566.585519][T17505] FAT-fs (loop4): Directory bread(block 67) failed [ 566.592804][T17505] FAT-fs (loop4): Directory bread(block 68) failed [ 566.599523][T17505] FAT-fs (loop4): Directory bread(block 69) failed [ 566.608097][T17505] FAT-fs (loop4): Directory bread(block 70) failed [ 566.616118][T17505] FAT-fs (loop4): Directory bread(block 71) failed [ 566.622785][T17505] FAT-fs (loop4): Directory bread(block 72) failed [ 566.629435][T17505] FAT-fs (loop4): Directory bread(block 73) failed [ 567.018758][T17515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.044260][T17515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.177649][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3699'. [ 567.316590][ T1210] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 567.323896][ T1210] ath9k_htc: Failed to initialize the device [ 567.341165][T17517] loop4: detected capacity change from 0 to 32768 [ 567.387862][ T1210] usb 7-1: ath9k_htc: USB layer deinitialized [ 567.414953][T17517] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 567.431081][ T5885] usb 7-1: USB disconnect, device number 16 [ 567.488591][T14581] (syz-executor,14581,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 567.511892][T14581] ocfs2: Unmounting device (7,4) on (node local) [ 568.020597][T17549] loop6: detected capacity change from 0 to 512 [ 568.112914][T17549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.126510][T17549] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 568.165555][T17547] loop4: detected capacity change from 0 to 32768 [ 568.185016][T17547] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 568.206758][T12162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.245037][T17547] XFS (loop4): Ending clean mount [ 568.258491][T17547] XFS (loop4): Quotacheck needed: Please wait. [ 568.316369][T17547] XFS (loop4): Quotacheck: Done. [ 568.338889][T17562] loop6: detected capacity change from 0 to 2048 [ 568.449267][T14581] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 569.024870][T12392] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 569.151093][T17580] loop6: detected capacity change from 0 to 32768 [ 569.167320][T17580] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3721 (17580) [ 569.174716][T12392] usb 5-1: Using ep0 maxpacket: 16 [ 569.199332][T17580] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 569.206405][T12392] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 569.213251][T17580] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 569.231040][T12392] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 569.234984][T17580] BTRFS info (device loop6): using free-space-tree [ 569.244642][T12392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.264660][T12392] usb 5-1: Product: syz [ 569.276685][T12392] usb 5-1: Manufacturer: syz [ 569.284011][T12392] usb 5-1: SerialNumber: syz [ 569.305431][T12392] usb 5-1: config 0 descriptor?? [ 569.316582][T12392] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 569.335452][T12392] usb 5-1: Detected FT232R [ 569.407369][T12162] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 569.519913][T12392] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 569.757503][T12392] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 569.833424][T17615] syz.6.3728: attempt to access beyond end of device [ 569.833424][T17615] loop6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 569.871965][T17615] syz.6.3728: attempt to access beyond end of device [ 569.871965][T17615] loop6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 569.948081][ T5885] usb 5-1: USB disconnect, device number 10 [ 569.971972][ T5885] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 569.992917][ T5885] ftdi_sio 5-1:0.0: device disconnected [ 570.034843][T16789] Bluetooth: hci0: command 0x0406 tx timeout [ 570.049837][T17621] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3734'. [ 570.060124][T17621] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3734'. [ 570.426984][T17619] loop7: detected capacity change from 0 to 40427 [ 570.439365][T17619] F2FS-fs (loop7): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 570.449799][T17619] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 570.494778][T17619] F2FS-fs (loop7): build fault injection type: 0x6 [ 570.518786][T17619] F2FS-fs (loop7): invalid crc value [ 570.615015][T17637] loop4: detected capacity change from 0 to 1024 [ 570.659797][T17619] F2FS-fs (loop7): Start checkpoint disabled! [ 570.664167][T17637] hfsplus: bad catalog entry type [ 570.676750][T17619] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 570.683811][T17619] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 570.755320][ T49] hfsplus: b-tree write err: -5, ino 4 [ 570.788550][ T5015] kworker/u8:8: attempt to access beyond end of device [ 570.788550][ T5015] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 570.824836][ T5015] CPU: 0 UID: 0 PID: 5015 Comm: kworker/u8:8 Not tainted 6.15.0-next-20250529-syzkaller #0 PREEMPT(full) [ 570.824864][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 570.824877][ T5015] Workqueue: writeback wb_workfn (flush-7:7) [ 570.824911][ T5015] Call Trace: [ 570.824920][ T5015] [ 570.824929][ T5015] dump_stack_lvl+0x189/0x250 [ 570.824955][ T5015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.824970][ T5015] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 570.824998][ T5015] ? __pfx_queue_work_on+0x10/0x10 [ 570.825020][ T5015] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 570.825046][ T5015] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 570.825073][ T5015] ? f2fs_hw_is_readonly+0x39b/0x470 [ 570.825105][ T5015] f2fs_handle_critical_error+0x37c/0x540 [ 570.825138][ T5015] f2fs_write_end_io+0x495/0x810 [ 570.825166][ T5015] ? blkg_put+0x22/0x240 [ 570.825204][ T5015] __submit_merged_bio+0x27a/0x6a0 [ 570.825238][ T5015] __submit_merged_write_cond+0x255/0x530 [ 570.825273][ T5015] f2fs_write_data_pages+0x261d/0x3000 [ 570.825342][ T5015] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 570.825369][ T5015] ? __local_bh_enable_ip+0x12d/0x1c0 [ 570.825415][ T5015] ? rcu_is_watching+0x15/0xb0 [ 570.825502][ T5015] ? psi_task_change+0xe5/0x250 [ 570.825548][ T5015] ? update_curr+0x78/0x8b0 [ 570.825579][ T5015] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 570.825610][ T5015] do_writepages+0x32e/0x550 [ 570.825637][ T5015] ? reacquire_held_locks+0x127/0x1d0 [ 570.825655][ T5015] ? writeback_sb_inodes+0x372/0x1000 [ 570.825686][ T5015] __writeback_single_inode+0x145/0xff0 [ 570.825706][ T5015] ? do_raw_spin_unlock+0x122/0x240 [ 570.825736][ T5015] writeback_sb_inodes+0x6b5/0x1000 [ 570.825787][ T5015] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 570.825858][ T5015] ? rcu_is_watching+0x15/0xb0 [ 570.825889][ T5015] wb_writeback+0x43b/0xaf0 [ 570.825918][ T5015] ? queue_io+0x371/0x590 [ 570.825941][ T5015] ? __pfx_wb_writeback+0x10/0x10 [ 570.825971][ T5015] ? _raw_spin_unlock_irq+0x23/0x50 [ 570.826003][ T5015] wb_workfn+0x409/0xef0 [ 570.826049][ T5015] ? __pfx_wb_workfn+0x10/0x10 [ 570.826082][ T5015] ? __lock_acquire+0xab9/0xd20 [ 570.826124][ T5015] ? process_scheduled_works+0x9ef/0x17b0 [ 570.826162][ T5015] ? _raw_spin_unlock_irq+0x23/0x50 [ 570.826186][ T5015] ? process_scheduled_works+0x9ef/0x17b0 [ 570.826215][ T5015] ? process_scheduled_works+0x9ef/0x17b0 [ 570.826247][ T5015] process_scheduled_works+0xade/0x17b0 [ 570.826313][ T5015] ? __pfx_process_scheduled_works+0x10/0x10 [ 570.826364][ T5015] worker_thread+0x8a0/0xda0 [ 570.826416][ T5015] kthread+0x711/0x8a0 [ 570.826468][ T5015] ? __pfx_worker_thread+0x10/0x10 [ 570.826488][ T5015] ? __pfx_kthread+0x10/0x10 [ 570.826516][ T5015] ? _raw_spin_unlock_irq+0x23/0x50 [ 570.826543][ T5015] ? lockdep_hardirqs_on+0x9c/0x150 [ 570.826571][ T5015] ? __pfx_kthread+0x10/0x10 [ 570.826597][ T5015] ret_from_fork+0x3fc/0x770 [ 570.826630][ T5015] ? __pfx_ret_from_fork+0x10/0x10 [ 570.826679][ T5015] ? __switch_to_asm+0x39/0x70 [ 570.826697][ T5015] ? __switch_to_asm+0x33/0x70 [ 570.826716][ T5015] ? __pfx_kthread+0x10/0x10 [ 570.826742][ T5015] ret_from_fork_asm+0x1a/0x30 [ 570.826782][ T5015] [ 570.826790][ T5015] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 570.843821][T17640] loop6: detected capacity change from 0 to 4096 [ 571.214495][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3746'. [ 571.570445][T17657] loop4: detected capacity change from 0 to 4096 [ 571.697920][ T51] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 571.986141][T17681] loop4: detected capacity change from 0 to 1024 [ 572.043097][T17681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.076952][T17681] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.217646][T14581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.500451][T17706] loop6: detected capacity change from 0 to 512 [ 572.553391][T17706] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.3771: corrupted in-inode xattr: invalid ea_ino [ 572.620145][T17706] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3771: couldn't read orphan inode 15 (err -117) [ 572.690417][T17706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.772135][T12162] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.882024][T17711] loop6: detected capacity change from 0 to 64 [ 573.297723][T17728] netlink: 'syz.7.3782': attribute type 2 has an invalid length. [ 573.307749][T17709] loop4: detected capacity change from 0 to 40427 [ 573.324347][T17709] F2FS-fs (loop4): invalid crc value [ 573.446027][T17709] F2FS-fs (loop4): Start checkpoint disabled! [ 573.459965][T17709] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 573.461259][ T30] audit: type=1326 audit(2000000984.116:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 573.533455][ T30] audit: type=1326 audit(2000000984.116:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 573.558823][ T30] audit: type=1326 audit(2000000984.156:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 573.582505][ T30] audit: type=1326 audit(2000000984.156:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 573.610392][ T30] audit: type=1326 audit(2000000984.156:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 573.639698][ T30] audit: type=1326 audit(2000000984.156:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 573.687655][ T12] kworker/u8:0: attempt to access beyond end of device [ 573.687655][ T12] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 573.714972][ T30] audit: type=1326 audit(2000000984.156:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 573.737809][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-next-20250529-syzkaller #0 PREEMPT(full) [ 573.737835][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.737849][ T12] Workqueue: writeback wb_workfn (flush-7:4) [ 573.737884][ T12] Call Trace: [ 573.737892][ T12] [ 573.737901][ T12] dump_stack_lvl+0x189/0x250 [ 573.737926][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.737943][ T12] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 573.737969][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 573.737989][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 573.738014][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 573.738042][ T12] ? f2fs_hw_is_readonly+0x39b/0x470 [ 573.738074][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 573.738108][ T12] f2fs_write_end_io+0x495/0x810 [ 573.738136][ T12] ? blkg_put+0x22/0x240 [ 573.738172][ T12] __submit_merged_bio+0x27a/0x6a0 [ 573.738204][ T12] __submit_merged_write_cond+0x255/0x530 [ 573.738238][ T12] f2fs_write_data_pages+0x261d/0x3000 [ 573.738302][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 573.738346][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 573.738403][ T12] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 573.738454][ T12] ? trace_f2fs_writepages+0x7f/0x200 [ 573.738482][ T12] ? f2fs_write_node_pages+0x478/0x6e0 [ 573.738513][ T12] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 573.738564][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 573.738594][ T12] do_writepages+0x32e/0x550 [ 573.738619][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 573.738640][ T12] ? writeback_sb_inodes+0x372/0x1000 [ 573.738667][ T12] __writeback_single_inode+0x145/0xff0 [ 573.738688][ T12] ? do_raw_spin_unlock+0x122/0x240 [ 573.738714][ T12] writeback_sb_inodes+0x6b5/0x1000 [ 573.738759][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 573.738821][ T12] ? rcu_is_watching+0x15/0xb0 [ 573.738849][ T12] wb_writeback+0x43b/0xaf0 [ 573.738876][ T12] ? queue_io+0x371/0x590 [ 573.738898][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 573.738926][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.738956][ T12] wb_workfn+0x409/0xef0 [ 573.738999][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 573.739030][ T12] ? __lock_acquire+0xab9/0xd20 [ 573.739069][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 573.739105][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.739129][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 573.739156][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 573.739187][ T12] process_scheduled_works+0xade/0x17b0 [ 573.739248][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 573.739295][ T12] worker_thread+0x8a0/0xda0 [ 573.739341][ T12] kthread+0x711/0x8a0 [ 573.739366][ T12] ? __pfx_worker_thread+0x10/0x10 [ 573.739384][ T12] ? __pfx_kthread+0x10/0x10 [ 573.739408][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.739438][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.739464][ T12] ? __pfx_kthread+0x10/0x10 [ 573.739487][ T12] ret_from_fork+0x3fc/0x770 [ 573.739518][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 573.739552][ T12] ? __switch_to_asm+0x39/0x70 [ 573.739571][ T12] ? __switch_to_asm+0x33/0x70 [ 573.739590][ T12] ? __pfx_kthread+0x10/0x10 [ 573.739613][ T12] ret_from_fork_asm+0x1a/0x30 [ 573.739651][ T12] [ 573.739659][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 573.965007][ T30] audit: type=1326 audit(2000000984.156:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 574.164641][ T30] audit: type=1326 audit(2000000984.156:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 574.234701][ T30] audit: type=1326 audit(2000000984.156:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.7.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687498e969 code=0x7ffc0000 [ 574.370094][T17760] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3797'. [ 574.632470][T17773] loop7: detected capacity change from 0 to 512 [ 574.635436][T17773] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 574.638715][T17773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 574.644874][T17773] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.3802: corrupted in-inode xattr: e_value size too large [ 574.646439][T17773] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3802: couldn't read orphan inode 15 (err -117) [ 574.649721][T17773] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.802702][T13101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.004649][T12323] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 575.093542][T17767] loop4: detected capacity change from 0 to 32768 [ 575.130900][T17767] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 575.140286][T17767] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 575.164689][T12323] usb 7-1: Using ep0 maxpacket: 16 [ 575.172721][T12323] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 575.185455][T12323] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 575.194995][T12323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.203121][T12323] usb 7-1: Product: syz [ 575.207935][T12323] usb 7-1: Manufacturer: syz [ 575.212554][T12323] usb 7-1: SerialNumber: syz [ 575.220554][T12323] usb 7-1: config 0 descriptor?? [ 575.228752][T12323] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 575.239413][T12323] usb 7-1: Detected FT232R [ 575.255657][T17767] XFS (loop4): Ending clean mount [ 575.264005][T17767] XFS (loop4): Quotacheck needed: Please wait. [ 575.343273][T17767] XFS (loop4): Quotacheck: Done. [ 575.441397][T12323] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 575.523513][T14581] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 575.644315][T17812] ipvlan2: entered promiscuous mode [ 575.662637][T17812] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 575.694948][T12323] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 575.695439][T17812] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 575.715105][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 575.724112][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 575.735135][ T51] Bluetooth: hci2: hardware error 0x00 [ 575.887262][T12323] usb 7-1: USB disconnect, device number 17 [ 575.918687][T12323] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 575.938924][T12323] ftdi_sio 7-1:0.0: device disconnected [ 576.112274][T17806] loop7: detected capacity change from 0 to 32768 [ 576.134825][T17806] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 576.179062][T17806] XFS (loop7): Ending clean mount [ 576.423149][T13101] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 576.580004][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3825'. [ 576.719400][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3827'. [ 576.810504][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3830'. [ 576.824889][T17846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3830'. [ 576.833808][T17846] netlink: 'syz.6.3830': attribute type 11 has an invalid length. [ 577.184662][ T1210] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 577.296533][T17862] syz.3.3837 (17862) used greatest stack depth: 18952 bytes left [ 577.378006][ T1210] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 577.387792][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.409720][ T1210] usb 7-1: config 0 descriptor?? [ 577.429789][ T1210] cp210x 7-1:0.0: cp210x converter detected [ 577.472204][T17872] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 577.778897][T17889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3850'. [ 577.852372][ T1210] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 577.865451][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 577.882991][ T1210] usb 7-1: cp210x converter now attached to ttyUSB0 [ 578.081272][T12392] usb 7-1: USB disconnect, device number 18 [ 578.105893][T12392] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 578.125783][T12392] cp210x 7-1:0.0: device disconnected [ 578.726478][T17926] loop6: detected capacity change from 0 to 128 [ 578.741598][T17927] [ 578.743960][T17927] ===================================================== [ 578.750883][T17927] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 578.758341][T17927] 6.15.0-next-20250529-syzkaller #0 Not tainted [ 578.764584][T17927] ----------------------------------------------------- [ 578.765698][T17926] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 578.771510][T17927] syz.4.3866/17927 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 578.784423][T17926] ext4 filesystem being mounted at /401/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 578.791169][T17927] ffff88807f7492b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 578.810159][T17927] [ 578.810159][T17927] and this task is already holding: [ 578.817535][T17927] ffff88802a16a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 578.827248][T17927] which would create a new lock dependency: [ 578.833126][T17927] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 578.841051][T17927] [ 578.841051][T17927] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 578.850494][T17927] (&dev->event_lock#2){..-.}-{3:3} [ 578.850534][T17927] [ 578.850534][T17927] ... which became SOFTIRQ-irq-safe at: [ 578.863430][T17927] lock_acquire+0x120/0x360 [ 578.868024][T17927] _raw_spin_lock_irqsave+0xa7/0xf0 [ 578.873310][T17927] input_inject_event+0xab/0x320 [ 578.878336][T17927] led_trigger_event+0x138/0x210 [ 578.883359][T17927] kbd_bh+0x1c6/0x2e0 [ 578.887443][T17927] tasklet_action_common+0x369/0x580 [ 578.892809][T17927] handle_softirqs+0x283/0x870 [ 578.897664][T17927] run_ksoftirqd+0x9b/0x100 [ 578.902249][T17927] smpboot_thread_fn+0x542/0xa60 [ 578.907276][T17927] kthread+0x711/0x8a0 [ 578.911430][T17927] ret_from_fork+0x3fc/0x770 [ 578.916119][T17927] ret_from_fork_asm+0x1a/0x30 [ 578.920968][T17927] [ 578.920968][T17927] to a SOFTIRQ-irq-unsafe lock: [ 578.927981][T17927] (tasklist_lock){.+.+}-{3:3} [ 578.928008][T17927] [ 578.928008][T17927] ... which became SOFTIRQ-irq-unsafe at: [ 578.940619][T17927] ... [ 578.940627][T17927] lock_acquire+0x120/0x360 [ 578.947778][T17927] _raw_read_lock+0x36/0x50 [ 578.952374][T17927] __do_wait+0xde/0x740 [ 578.956614][T17927] do_wait+0x1f8/0x520 [ 578.960765][T17927] kernel_wait+0xab/0x170 [ 578.965178][T17927] call_usermodehelper_exec_work+0xbe/0x230 [ 578.971155][T17927] process_scheduled_works+0xade/0x17b0 [ 578.976785][T17927] worker_thread+0x8a0/0xda0 [ 578.981456][T17927] kthread+0x711/0x8a0 [ 578.985607][T17927] ret_from_fork+0x3fc/0x770 [ 578.990289][T17927] ret_from_fork_asm+0x1a/0x30 [ 578.995132][T17927] [ 578.995132][T17927] other info that might help us debug this: [ 578.995132][T17927] [ 579.005351][T17927] Chain exists of: [ 579.005351][T17927] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 579.005351][T17927] [ 579.018315][T17927] Possible interrupt unsafe locking scenario: [ 579.018315][T17927] [ 579.026630][T17927] CPU0 CPU1 [ 579.031993][T17927] ---- ---- [ 579.037346][T17927] lock(tasklist_lock); [ 579.041581][T17927] local_irq_disable(); [ 579.048326][T17927] lock(&dev->event_lock#2); [ 579.055525][T17927] lock(&new->fa_lock); [ 579.062277][T17927] [ 579.065740][T17927] lock(&dev->event_lock#2); [ 579.070594][T17927] [ 579.070594][T17927] *** DEADLOCK *** [ 579.070594][T17927] [ 579.078726][T17927] 6 locks held by syz.4.3866/17927: [ 579.083909][T17927] #0: ffff88802a16c118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 579.093050][T17927] #1: ffff88802a16a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 579.103172][T17927] #2: ffffffff8e13f080 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 579.112836][T17927] #3: ffffffff8e13f080 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 579.122400][T17927] #4: ffffffff8e13f080 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 579.132483][T17927] #5: ffffffff8e13f080 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 579.141544][T17927] [ 579.141544][T17927] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 579.151934][T17927] -> (&dev->event_lock#2){..-.}-{3:3} { [ 579.157495][T17927] IN-SOFTIRQ-W at: [ 579.161465][T17927] lock_acquire+0x120/0x360 [ 579.167618][T17927] _raw_spin_lock_irqsave+0xa7/0xf0 [ 579.174460][T17927] input_inject_event+0xab/0x320 [ 579.181046][T17927] led_trigger_event+0x138/0x210 [ 579.187629][T17927] kbd_bh+0x1c6/0x2e0 [ 579.193293][T17927] tasklet_action_common+0x369/0x580 [ 579.200220][T17927] handle_softirqs+0x283/0x870 [ 579.206643][T17927] run_ksoftirqd+0x9b/0x100 [ 579.212806][T17927] smpboot_thread_fn+0x542/0xa60 [ 579.219391][T17927] kthread+0x711/0x8a0 [ 579.225122][T17927] ret_from_fork+0x3fc/0x770 [ 579.231368][T17927] ret_from_fork_asm+0x1a/0x30 [ 579.237802][T17927] INITIAL USE at: [ 579.241688][T17927] lock_acquire+0x120/0x360 [ 579.247756][T17927] _raw_spin_lock_irqsave+0xa7/0xf0 [ 579.254539][T17927] input_inject_event+0xab/0x320 [ 579.261074][T17927] kbd_led_trigger_activate+0xbc/0x100 [ 579.268102][T17927] led_trigger_set+0x52a/0x950 [ 579.274425][T17927] led_trigger_set_default+0x260/0x2a0 [ 579.281440][T17927] led_classdev_register_ext+0x73d/0x930 [ 579.288651][T17927] input_leds_connect+0x517/0x790 [ 579.295267][T17927] input_register_device+0xcee/0x10b0 [ 579.302196][T17927] atkbd_connect+0x70e/0x9c0 [ 579.308348][T17927] serio_driver_probe+0x7f/0xa0 [ 579.314771][T17927] really_probe+0x26d/0x9a0 [ 579.320857][T17927] __driver_probe_device+0x18c/0x2f0 [ 579.327715][T17927] driver_probe_device+0x4f/0x430 [ 579.334306][T17927] __driver_attach+0x452/0x700 [ 579.340639][T17927] bus_for_each_dev+0x233/0x2b0 [ 579.347082][T17927] serio_handle_event+0x1a2/0x860 [ 579.353674][T17927] process_scheduled_works+0xade/0x17b0 [ 579.360790][T17927] worker_thread+0x8a0/0xda0 [ 579.366940][T17927] kthread+0x711/0x8a0 [ 579.372571][T17927] ret_from_fork+0x3fc/0x770 [ 579.378749][T17927] ret_from_fork_asm+0x1a/0x30 [ 579.385076][T17927] } [ 579.387570][T17927] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 579.396588][T17927] [ 579.396588][T17927] the dependencies between the lock to be acquired [ 579.396598][T17927] and SOFTIRQ-irq-unsafe lock: [ 579.410096][T17927] -> (tasklist_lock){.+.+}-{3:3} { [ 579.415398][T17927] HARDIRQ-ON-R at: [ 579.419552][T17927] lock_acquire+0x120/0x360 [ 579.426079][T17927] _raw_read_lock+0x36/0x50 [ 579.432606][T17927] __do_wait+0xde/0x740 [ 579.438786][T17927] do_wait+0x1f8/0x520 [ 579.444881][T17927] kernel_wait+0xab/0x170 [ 579.451210][T17927] call_usermodehelper_exec_work+0xbe/0x230 [ 579.459105][T17927] process_scheduled_works+0xade/0x17b0 [ 579.466684][T17927] worker_thread+0x8a0/0xda0 [ 579.473279][T17927] kthread+0x711/0x8a0 [ 579.479351][T17927] ret_from_fork+0x3fc/0x770 [ 579.485958][T17927] ret_from_fork_asm+0x1a/0x30 [ 579.492725][T17927] SOFTIRQ-ON-R at: [ 579.496872][T17927] lock_acquire+0x120/0x360 [ 579.503371][T17927] _raw_read_lock+0x36/0x50 [ 579.509869][T17927] __do_wait+0xde/0x740 [ 579.516034][T17927] do_wait+0x1f8/0x520 [ 579.522100][T17927] kernel_wait+0xab/0x170 [ 579.528430][T17927] call_usermodehelper_exec_work+0xbe/0x230 [ 579.536328][T17927] process_scheduled_works+0xade/0x17b0 [ 579.543882][T17927] worker_thread+0x8a0/0xda0 [ 579.550470][T17927] kthread+0x711/0x8a0 [ 579.556535][T17927] ret_from_fork+0x3fc/0x770 [ 579.563123][T17927] ret_from_fork_asm+0x1a/0x30 [ 579.569880][T17927] INITIAL USE at: [ 579.573937][T17927] lock_acquire+0x120/0x360 [ 579.580348][T17927] _raw_write_lock_irq+0xa2/0xf0 [ 579.587195][T17927] copy_process+0x224f/0x3c00 [ 579.593776][T17927] kernel_clone+0x21e/0x870 [ 579.600196][T17927] user_mode_thread+0xdd/0x140 [ 579.606864][T17927] rest_init+0x23/0x300 [ 579.612921][T17927] start_kernel+0x47d/0x500 [ 579.619351][T17927] x86_64_start_reservations+0x24/0x30 [ 579.626713][T17927] x86_64_start_kernel+0x143/0x1c0 [ 579.633725][T17927] common_startup_64+0x13e/0x147 [ 579.640563][T17927] INITIAL READ USE at: [ 579.645056][T17927] lock_acquire+0x120/0x360 [ 579.651899][T17927] _raw_read_lock+0x36/0x50 [ 579.658740][T17927] __do_wait+0xde/0x740 [ 579.665235][T17927] do_wait+0x1f8/0x520 [ 579.671643][T17927] kernel_wait+0xab/0x170 [ 579.678316][T17927] call_usermodehelper_exec_work+0xbe/0x230 [ 579.686554][T17927] process_scheduled_works+0xade/0x17b0 [ 579.694440][T17927] worker_thread+0x8a0/0xda0 [ 579.701368][T17927] kthread+0x711/0x8a0 [ 579.707786][T17927] ret_from_fork+0x3fc/0x770 [ 579.714729][T17927] ret_from_fork_asm+0x1a/0x30 [ 579.721866][T17927] } [ 579.724533][T17927] ... key at: [] tasklist_lock+0x18/0x40 [ 579.732437][T17927] ... acquired at: [ 579.736421][T17927] lock_acquire+0x120/0x360 [ 579.741104][T17927] _raw_read_lock+0x36/0x50 [ 579.745786][T17927] send_sigio+0x101/0x370 [ 579.750313][T17927] dnotify_handle_event+0x169/0x440 [ 579.755683][T17927] fsnotify+0x1814/0x1a80 [ 579.760181][T17927] path_openat+0x171e/0x3830 [ 579.764943][T17927] do_filp_open+0x1fa/0x410 [ 579.769614][T17927] do_sys_openat2+0x121/0x1c0 [ 579.774471][T17927] __x64_sys_openat+0x138/0x170 [ 579.779496][T17927] do_syscall_64+0xfa/0x3b0 [ 579.784173][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.790234][T17927] [ 579.792551][T17927] -> (&f_owner->lock){....}-{3:3} { [ 579.797855][T17927] INITIAL USE at: [ 579.801832][T17927] lock_acquire+0x120/0x360 [ 579.808078][T17927] _raw_write_lock_irq+0xa2/0xf0 [ 579.814759][T17927] __f_setown+0x67/0x370 [ 579.820742][T17927] generic_setlease+0xd5d/0x1240 [ 579.827440][T17927] fcntl_setlease+0x3a2/0x4c0 [ 579.833866][T17927] do_fcntl+0x6a9/0x1910 [ 579.839849][T17927] __se_sys_fcntl+0xc8/0x150 [ 579.846180][T17927] do_syscall_64+0xfa/0x3b0 [ 579.852425][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.860054][T17927] INITIAL READ USE at: [ 579.864465][T17927] lock_acquire+0x120/0x360 [ 579.871139][T17927] _raw_read_lock_irqsave+0xaf/0x100 [ 579.878607][T17927] send_sigio+0x38/0x370 [ 579.885027][T17927] dnotify_handle_event+0x169/0x440 [ 579.892395][T17927] fsnotify+0x1671/0x1a80 [ 579.898891][T17927] __fsnotify_parent+0x3fe/0x540 [ 579.906004][T17927] vfs_readv+0x6e2/0x850 [ 579.912422][T17927] __se_sys_preadv2+0x179/0x290 [ 579.919436][T17927] do_syscall_64+0xfa/0x3b0 [ 579.926112][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.934169][T17927] } [ 579.936745][T17927] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 579.945684][T17927] ... acquired at: [ 579.949565][T17927] lock_acquire+0x120/0x360 [ 579.954243][T17927] _raw_read_lock_irqsave+0xaf/0x100 [ 579.959707][T17927] send_sigio+0x38/0x370 [ 579.964125][T17927] kill_fasync+0x24d/0x4d0 [ 579.968719][T17927] lease_break_callback+0x26/0x30 [ 579.973910][T17927] __break_lease+0x6a5/0x1620 [ 579.978763][T17927] do_dentry_open+0xd62/0x1970 [ 579.983700][T17927] vfs_open+0x3b/0x340 [ 579.987946][T17927] path_openat+0x2ee5/0x3830 [ 579.992707][T17927] do_filp_open+0x1fa/0x410 [ 579.997376][T17927] do_sys_openat2+0x121/0x1c0 [ 580.002244][T17927] __x64_sys_openat+0x138/0x170 [ 580.007276][T17927] do_syscall_64+0xfa/0x3b0 [ 580.011953][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.018027][T17927] [ 580.020347][T17927] -> (&new->fa_lock){....}-{3:3} { [ 580.025477][T17927] INITIAL USE at: [ 580.029373][T17927] lock_acquire+0x120/0x360 [ 580.035449][T17927] _raw_write_lock_irq+0xa2/0xf0 [ 580.041960][T17927] fasync_remove_entry+0xf1/0x1c0 [ 580.048559][T17927] lease_modify+0x1ca/0x3c0 [ 580.054639][T17927] locks_remove_file+0x4bf/0xea0 [ 580.061160][T17927] __fput+0x3ab/0xa70 [ 580.066712][T17927] task_work_run+0x1d4/0x260 [ 580.072873][T17927] exit_to_user_mode_loop+0xec/0x110 [ 580.079726][T17927] do_syscall_64+0x2bd/0x3b0 [ 580.085886][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.093333][T17927] INITIAL READ USE at: [ 580.097658][T17927] lock_acquire+0x120/0x360 [ 580.104159][T17927] _raw_read_lock_irqsave+0xaf/0x100 [ 580.111442][T17927] kill_fasync+0x199/0x4d0 [ 580.117864][T17927] anon_pipe_write+0x6ce/0x1360 [ 580.124716][T17927] aio_write+0x532/0x7a0 [ 580.130977][T17927] io_submit_one+0x78b/0x1310 [ 580.137673][T17927] __se_sys_io_submit+0x185/0x2f0 [ 580.144696][T17927] do_syscall_64+0xfa/0x3b0 [ 580.151199][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.159091][T17927] } [ 580.161585][T17927] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 580.170269][T17927] ... acquired at: [ 580.174063][T17927] lock_acquire+0x120/0x360 [ 580.178757][T17927] _raw_read_lock_irqsave+0xaf/0x100 [ 580.184233][T17927] kill_fasync+0x199/0x4d0 [ 580.188831][T17927] mousedev_notify_readers+0x6f1/0xc00 [ 580.194464][T17927] mousedev_event+0x602/0x1320 [ 580.199401][T17927] input_handle_events_default+0xd1/0x1a0 [ 580.205294][T17927] input_pass_values+0x288/0x890 [ 580.210401][T17927] input_event_dispose+0x330/0x6b0 [ 580.215685][T17927] input_inject_event+0x1fe/0x320 [ 580.220881][T17927] evdev_write+0x2fc/0x480 [ 580.225466][T17927] vfs_write+0x27b/0xa90 [ 580.229873][T17927] ksys_write+0x145/0x250 [ 580.234367][T17927] do_syscall_64+0xfa/0x3b0 [ 580.239045][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.245119][T17927] [ 580.247471][T17927] [ 580.247471][T17927] stack backtrace: [ 580.253354][T17927] CPU: 0 UID: 0 PID: 17927 Comm: syz.4.3866 Not tainted 6.15.0-next-20250529-syzkaller #0 PREEMPT(full) [ 580.253375][T17927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.253386][T17927] Call Trace: [ 580.253393][T17927] [ 580.253401][T17927] dump_stack_lvl+0x189/0x250 [ 580.253418][T17927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.253432][T17927] ? __pfx__printk+0x10/0x10 [ 580.253454][T17927] validate_chain+0x1f05/0x2140 [ 580.253478][T17927] __lock_acquire+0xab9/0xd20 [ 580.253503][T17927] ? kill_fasync+0x199/0x4d0 [ 580.253525][T17927] lock_acquire+0x120/0x360 [ 580.253546][T17927] ? kill_fasync+0x199/0x4d0 [ 580.253573][T17927] _raw_read_lock_irqsave+0xaf/0x100 [ 580.253599][T17927] ? kill_fasync+0x199/0x4d0 [ 580.253622][T17927] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 580.253647][T17927] kill_fasync+0x199/0x4d0 [ 580.253668][T17927] ? kill_fasync+0x53/0x4d0 [ 580.253691][T17927] mousedev_notify_readers+0x6f1/0xc00 [ 580.253711][T17927] ? mousedev_notify_readers+0x2c/0xc00 [ 580.253727][T17927] mousedev_event+0x602/0x1320 [ 580.253743][T17927] input_handle_events_default+0xd1/0x1a0 [ 580.253764][T17927] ? input_pass_values+0x8d/0x890 [ 580.253778][T17927] input_pass_values+0x288/0x890 [ 580.253796][T17927] ? input_handle_event+0x70c/0xf30 [ 580.253819][T17927] input_event_dispose+0x330/0x6b0 [ 580.253844][T17927] input_inject_event+0x1fe/0x320 [ 580.253866][T17927] ? input_inject_event+0xbc/0x320 [ 580.253889][T17927] evdev_write+0x2fc/0x480 [ 580.253908][T17927] ? __pfx_evdev_write+0x10/0x10 [ 580.253924][T17927] ? bpf_lsm_file_permission+0x9/0x20 [ 580.253949][T17927] ? security_file_permission+0x75/0x290 [ 580.253974][T17927] ? rw_verify_area+0x258/0x650 [ 580.253988][T17927] ? __pfx_evdev_write+0x10/0x10 [ 580.254005][T17927] vfs_write+0x27b/0xa90 [ 580.254023][T17927] ? __pfx_vfs_write+0x10/0x10 [ 580.254038][T17927] ? __fget_files+0x2a/0x420 [ 580.254058][T17927] ? __fget_files+0x2a/0x420 [ 580.254076][T17927] ? __fget_files+0x3a0/0x420 [ 580.254094][T17927] ? __fget_files+0x2a/0x420 [ 580.254115][T17927] ksys_write+0x145/0x250 [ 580.254131][T17927] ? __pfx_ksys_write+0x10/0x10 [ 580.254145][T17927] ? rcu_is_watching+0x15/0xb0 [ 580.254161][T17927] ? do_syscall_64+0xbe/0x3b0 [ 580.254187][T17927] do_syscall_64+0xfa/0x3b0 [ 580.254209][T17927] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.254231][T17927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.254246][T17927] ? clear_bhb_loop+0x60/0xb0 [ 580.254263][T17927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.254278][T17927] RIP: 0033:0x7f1643d8e969 [ 580.254293][T17927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.254307][T17927] RSP: 002b:00007f1644b5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 580.254324][T17927] RAX: ffffffffffffffda RBX: 00007f1643fb5fa0 RCX: 00007f1643d8e969 [ 580.254336][T17927] RDX: 0000000000000078 RSI: 00002000000003c0 RDI: 0000000000000004 [ 580.254347][T17927] RBP: 00007f1643e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 580.254357][T17927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.254366][T17927] R13: 0000000000000000 R14: 00007f1643fb5fa0 R15: 00007ffe0fa3e7d8 [ 580.254383][T17927] [ 580.582524][T17932] loop7: detected capacity change from 0 to 64 [ 580.590389][T12162] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 580.642991][T17934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3868'.