last executing test programs: 5m46.557592177s ago: executing program 32 (id=106): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0xfffffffffffffffd, 0xfffffffffffffffe, 0xa, 0xd2, 0x5, 0x2000000000002, 0x7, 0x0, 0xc}) r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x2904c, 0x3ffffffffffffab, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0x3}, {0xffffffff, 0x8, 0xffffffdffffffffd, 0x0, 0xffffffffffffffff}]}) 5m1.592783003s ago: executing program 33 (id=397): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) 4m53.550145296s ago: executing program 34 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_mount_image$gfs2(&(0x7f0000000240), &(0x7f0000001c00)='./file1\x00', 0x1000800, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x125e2, &(0x7f0000001c40)="$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") r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 4m27.371118114s ago: executing program 35 (id=623): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0xe) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) 3m36.059951945s ago: executing program 36 (id=896): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000380)) 3m34.836970354s ago: executing program 37 (id=905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) sendmsg$IEEE802154_LIST_IFACE(r1, 0x0, 0x20000000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40880241}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x48854}, 0x0) 2m31.986480454s ago: executing program 38 (id=1339): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x23, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a324647ae3941d1747380b57bb23a78bd1175c15533631d10cd068c525e1cdf1", "6868aaf371b13a6a21324c50a094ab38785b31fe60b985a578ad106fd0eafef54485b61e1df4a065c451bf0f24279510", "7d8608ddf3268d2045b27ebf8ee672bc4421549386a5a5903b20b9f4", {"96775e3b6484c1851f6984768a7bb2fb", "412a7c8e5fffae9a88c46a3056c4319a"}}}}}}}, 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x2b, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}, "0a2875c075dbcc2eb256d47cc82c12a2e2447807497a5dd71cc2918311cbb0"}}}}}}, 0x0) 2m27.326329529s ago: executing program 7 (id=1375): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0x16, 0x6, "20fc94453a41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x20, 0x0, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m24.131400652s ago: executing program 7 (id=1400): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 2m23.729651498s ago: executing program 7 (id=1402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r4, 0x809, 0x0, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x14000}, 0x40010) 2m22.83232319s ago: executing program 39 (id=1403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2m21.842744631s ago: executing program 7 (id=1410): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) 2m20.646848837s ago: executing program 7 (id=1415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc1205531, &(0x7f00000010c0)=""/4111) 2m17.466821643s ago: executing program 7 (id=1426): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) io_setup(0x6, &(0x7f0000001380)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) 2m17.00036184s ago: executing program 40 (id=1426): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) io_setup(0x6, &(0x7f0000001380)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) 1m28.654938479s ago: executing program 1 (id=1769): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000002000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc01000000000000000000000000000000000000040000"], 0xfc}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1m26.670699889s ago: executing program 1 (id=1784): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=')', 0x1}], 0x1}}], 0x2, 0x600c000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x77}, 0x8) 1m26.628671699s ago: executing program 1 (id=1785): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m25.556212367s ago: executing program 1 (id=1788): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1m25.284046992s ago: executing program 1 (id=1793): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0x4000011, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/138, 0x8a}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000680)=""/216, 0xd8}], 0x3, 0x7f, 0x0) 1m24.846824818s ago: executing program 1 (id=1797): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 1m24.301867646s ago: executing program 41 (id=1797): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 1m15.093351521s ago: executing program 2 (id=1855): pipe2$9p(&(0x7f0000000240), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m14.74866542s ago: executing program 2 (id=1856): mkdir(&(0x7f0000000100)='./file0\x00', 0x91) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x0) fanotify_mark(r1, 0x1, 0x8000020, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189000, 0xa8) preadv(r2, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 1m14.472032513s ago: executing program 2 (id=1859): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m14.133232275s ago: executing program 2 (id=1863): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m13.769792534s ago: executing program 2 (id=1864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m13.347765247s ago: executing program 2 (id=1866): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000009c80)=ANY=[@ANYBLOB="614702381f9f677bd30d"], 0xa) 1m12.69871039s ago: executing program 42 (id=1866): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000009c80)=ANY=[@ANYBLOB="614702381f9f677bd30d"], 0xa) 45.710221889s ago: executing program 5 (id=2054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 45.323298037s ago: executing program 5 (id=2058): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) inotify_init() 44.740109661s ago: executing program 5 (id=2065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0xff, 0x5a82, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x9f, 0x2}}, 0x20) 43.497556746s ago: executing program 5 (id=2074): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[]) 39.395054228s ago: executing program 5 (id=2106): ioperm(0x9, 0x2, 0x7e) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) 38.678064013s ago: executing program 5 (id=2112): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 37.913680582s ago: executing program 43 (id=2112): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 7.56785353s ago: executing program 9 (id=2298): write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)={0x21e, 0x2, 0x0, {{0x500, 0xdd, 0x0, 0x0, {}, 0x2810000, 0x0, 0xfffffffd, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21e) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vcan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x29f) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 6.490325018s ago: executing program 8 (id=2307): syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000005d80), 0x1, 0x5ce8, &(0x7f0000005dc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) lseek(r0, 0x10000, 0x0) getdents(r0, 0x0, 0x58) 5.362152705s ago: executing program 9 (id=2316): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0xc8014) 4.572811244s ago: executing program 8 (id=2321): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) close(r0) 4.483034384s ago: executing program 3 (id=2322): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8c02, &(0x7f0000000940)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESHEX], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) syz_mount_image$bcachefs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x80140a, &(0x7f0000001480)=ANY=[@ANYBLOB="25e32ff89daf2dff6bcd08e290"], 0x1, 0x591d, &(0x7f0000009d00)="$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") sync_file_range(r0, 0x6, 0x0, 0x6) 4.282710366s ago: executing program 9 (id=2324): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3.677468747s ago: executing program 3 (id=2326): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TCSETSW2(r1, 0x5425, 0x0) 3.657691696s ago: executing program 8 (id=2327): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x1, 0x20000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)=ANY=[]) 3.615726422s ago: executing program 9 (id=2328): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x3, 0x1, 0x9, 0x53000000}) 2.875254698s ago: executing program 8 (id=2333): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.655790001s ago: executing program 6 (id=2336): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 2.645897424s ago: executing program 3 (id=2337): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000}, 0x28) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r1, &(0x7f0000002300)=""/102, 0x66) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000001, 0x13, r2, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2.410447448s ago: executing program 6 (id=2339): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)='\t', 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x4040090) 2.39781118s ago: executing program 4 (id=2340): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket(0x1e, 0x4, 0x0) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.046708191s ago: executing program 6 (id=2341): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.045481179s ago: executing program 9 (id=2353): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 2.044996002s ago: executing program 3 (id=2342): ioperm(0x0, 0x2, 0x7e) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) 2.015677302s ago: executing program 8 (id=2343): syz_clone(0x4042080, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="db5e8e8c2cfcfc128f7b5f") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.690670638s ago: executing program 6 (id=2344): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 1.625350495s ago: executing program 9 (id=2345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x0, 0x7, 0x3865, 0x2008, 0x11d, 0x5, 0x2, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 1.570836859s ago: executing program 4 (id=2346): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.367670188s ago: executing program 0 (id=2347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) 1.216878157s ago: executing program 4 (id=2348): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 1.021948967s ago: executing program 0 (id=2349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="cb", 0x1, 0x24004090, 0x0, 0x0) 1.000949472s ago: executing program 3 (id=2350): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000300)=[r3], &(0x7f0000000340)}) 870.715891ms ago: executing program 8 (id=2351): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r2) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="e6f251f523d2d62b", 0x8}], 0x1) 774.153962ms ago: executing program 3 (id=2352): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 730.689956ms ago: executing program 0 (id=2354): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x23, 0x12014891, 0xffba, 0x0, 0x1405, 0x803, 0x0, 0x0, 0x10, 0x1000003}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 693.286936ms ago: executing program 4 (id=2355): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) 542.813532ms ago: executing program 6 (id=2356): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 513.544844ms ago: executing program 0 (id=2357): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000340)={&(0x7f00000011c0), 0x0}) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000d80)={&(0x7f0000000000), &(0x7f0000002240)=""/4124, 0x101c}) 452.106447ms ago: executing program 4 (id=2358): r0 = creat(&(0x7f0000000640)='./bus\x00', 0x1a8) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r1, &(0x7f0000000180)="2cd889f0253e14", 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 366.753051ms ago: executing program 6 (id=2359): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 188.93473ms ago: executing program 4 (id=2360): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100000) r2 = socket(0x2, 0x2, 0x1) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800000) ioctl$NBD_DISCONNECT(r3, 0xab08) close_range(r0, 0xffffffffffffffff, 0x0) 173.890086ms ago: executing program 0 (id=2361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 0s ago: executing program 0 (id=2362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "95c4c0a71687c1b8", "9ca0f9c583cf76ffcfd33ba6c6fd01ed", "e7437dc5", "c44c05faeeccb50c"}, 0x28) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 336979][ T8727] do_writepages+0x27a/0x600 [ 374.337040][ T8727] ? __pfx_do_writepages+0x10/0x10 [ 374.337090][ T8727] ? do_raw_spin_unlock+0x172/0x230 [ 374.337130][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.337173][ T8727] ? _raw_spin_unlock+0x28/0x50 [ 374.337308][ T8727] filemap_fdatawrite_wbc+0x104/0x160 [ 374.337368][ T8727] __filemap_fdatawrite_range+0xb2/0xf0 [ 374.337409][ T8727] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 374.337522][ T8727] ? find_held_lock+0x2b/0x80 [ 374.337573][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.337618][ T8727] ? do_raw_spin_unlock+0x172/0x230 [ 374.337658][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.337710][ T8727] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 374.337790][ T8727] block_operations+0x2a3/0xfd0 [ 374.337862][ T8727] ? __pfx___schedule+0x10/0x10 [ 374.337910][ T8727] ? __pfx_block_operations+0x10/0x10 [ 374.338033][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.338080][ T8727] ? down_write+0x14d/0x200 [ 374.338130][ T8727] ? __pfx_down_write+0x10/0x10 [ 374.338183][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.338225][ T8727] ? rcu_is_watching+0x12/0xc0 [ 374.338284][ T8727] f2fs_write_checkpoint+0x2b8/0x4c60 [ 374.338347][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.338390][ T8727] ? kfree+0x2b4/0x4d0 [ 374.338439][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.338487][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.338529][ T8727] ? rcu_is_watching+0x12/0xc0 [ 374.338571][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.338614][ T8727] ? kthread_stop+0x273/0x630 [ 374.338678][ T8727] kill_f2fs_super+0x3c2/0x470 [ 374.338735][ T8727] ? __pfx_kill_f2fs_super+0x10/0x10 [ 374.338788][ T8727] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.338883][ T8727] deactivate_locked_super+0xc1/0x1a0 [ 374.338944][ T8727] deactivate_super+0xde/0x100 [ 374.339006][ T8727] cleanup_mnt+0x225/0x450 [ 374.339045][ T8727] task_work_run+0x150/0x240 [ 374.339087][ T8727] ? __pfx_task_work_run+0x10/0x10 [ 374.339123][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.339170][ T8727] ? __pfx___x64_sys_umount+0x10/0x10 [ 374.339222][ T8727] exit_to_user_mode_loop+0xeb/0x110 [ 374.339263][ T8727] do_syscall_64+0x3f6/0x4c0 [ 374.339318][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.339353][ T8727] RIP: 0033:0x7f055598fcd7 [ 374.339382][ T8727] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 374.339418][ T8727] RSP: 002b:00007ffc55bf7c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 374.339453][ T8727] RAX: 0000000000000000 RBX: 00007f0555a10b55 RCX: 00007f055598fcd7 [ 374.339476][ T8727] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc55bf7cc0 [ 374.339498][ T8727] RBP: 00007ffc55bf7cc0 R08: 0000000000000000 R09: 0000000000000000 [ 374.339521][ T8727] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc55bf8d50 [ 374.339545][ T8727] R13: 00007f0555a10b55 R14: 000000000005b58b R15: 00007ffc55bf8d90 [ 374.339602][ T8727] [ 374.819562][T10664] loop9: detected capacity change from 0 to 512 [ 374.830257][T10664] EXT4-fs: Ignoring removed nobh option [ 374.988140][ T8727] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 374.995211][ T8727] CPU: 0 UID: 0 PID: 8727 Comm: syz-executor Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 374.995268][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.995291][ T8727] Call Trace: [ 374.995302][ T8727] [ 374.995315][ T8727] dump_stack_lvl+0x16c/0x1f0 [ 374.995370][ T8727] f2fs_handle_critical_error+0x621/0x9f0 [ 374.995419][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.995464][ T8727] ? f2fs_build_fault_attr+0x53/0x1f0 [ 374.995535][ T8727] f2fs_write_end_io+0x785/0xc20 [ 374.995584][ T8727] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 374.995635][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.995689][ T8727] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 374.995732][ T8727] bio_endio+0x70d/0x850 [ 374.995778][ T8727] submit_bio_noacct+0x306/0x1eb0 [ 374.995843][ T8727] __submit_merged_bio+0x33c/0x770 [ 374.995898][ T8727] __submit_merged_write_cond+0x319/0x3f0 [ 374.995955][ T8727] f2fs_write_cache_pages+0x2067/0x2570 [ 374.996036][ T8727] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 374.996097][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.996141][ T8727] ? __lock_acquire+0x622/0x1c90 [ 374.996209][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.996341][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.996384][ T8727] ? mod_memcg_lruvec_state+0x394/0x610 [ 374.996448][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.996499][ T8727] f2fs_write_data_pages+0x4ad/0xd90 [ 374.996561][ T8727] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 374.996611][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.996666][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.996715][ T8727] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 374.996771][ T8727] do_writepages+0x27a/0x600 [ 374.996834][ T8727] ? __pfx_do_writepages+0x10/0x10 [ 374.996885][ T8727] ? do_raw_spin_unlock+0x172/0x230 [ 374.996925][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.996968][ T8727] ? _raw_spin_unlock+0x28/0x50 [ 374.997012][ T8727] filemap_fdatawrite_wbc+0x104/0x160 [ 374.997072][ T8727] __filemap_fdatawrite_range+0xb2/0xf0 [ 374.997113][ T8727] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 374.997209][ T8727] ? find_held_lock+0x2b/0x80 [ 374.997261][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.997305][ T8727] ? do_raw_spin_unlock+0x172/0x230 [ 374.997345][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.997396][ T8727] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 374.997472][ T8727] block_operations+0x2a3/0xfd0 [ 374.997532][ T8727] ? __pfx___schedule+0x10/0x10 [ 374.997660][ T8727] ? __pfx_block_operations+0x10/0x10 [ 374.997800][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.997845][ T8727] ? down_write+0x14d/0x200 [ 374.997895][ T8727] ? __pfx_down_write+0x10/0x10 [ 374.997953][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.997994][ T8727] ? rcu_is_watching+0x12/0xc0 [ 374.998046][ T8727] f2fs_write_checkpoint+0x2b8/0x4c60 [ 374.998109][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.998153][ T8727] ? kfree+0x2b4/0x4d0 [ 374.998203][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.998265][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.998309][ T8727] ? rcu_is_watching+0x12/0xc0 [ 374.998353][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.998396][ T8727] ? kthread_stop+0x273/0x630 [ 374.998459][ T8727] kill_f2fs_super+0x3c2/0x470 [ 374.998517][ T8727] ? __pfx_kill_f2fs_super+0x10/0x10 [ 374.998571][ T8727] ? lockdep_hardirqs_on+0x7c/0x110 [ 374.998635][ T8727] deactivate_locked_super+0xc1/0x1a0 [ 374.998697][ T8727] deactivate_super+0xde/0x100 [ 374.998757][ T8727] cleanup_mnt+0x225/0x450 [ 374.998795][ T8727] task_work_run+0x150/0x240 [ 374.998837][ T8727] ? __pfx_task_work_run+0x10/0x10 [ 374.998897][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 374.998948][ T8727] ? __pfx___x64_sys_umount+0x10/0x10 [ 374.998998][ T8727] exit_to_user_mode_loop+0xeb/0x110 [ 374.999036][ T8727] do_syscall_64+0x3f6/0x4c0 [ 374.999088][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.999124][ T8727] RIP: 0033:0x7f055598fcd7 [ 374.999154][ T8727] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 374.999190][ T8727] RSP: 002b:00007ffc55bf7c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 374.999224][ T8727] RAX: 0000000000000000 RBX: 00007f0555a10b55 RCX: 00007f055598fcd7 [ 374.999258][ T8727] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc55bf7cc0 [ 374.999281][ T8727] RBP: 00007ffc55bf7cc0 R08: 0000000000000000 R09: 0000000000000000 [ 374.999303][ T8727] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc55bf8d50 [ 374.999327][ T8727] R13: 00007f0555a10b55 R14: 000000000005b58b R15: 00007ffc55bf8d90 [ 374.999375][ T8727] [ 375.530949][T10660] loop4: detected capacity change from 0 to 32768 [ 375.534149][ T8727] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 375.550391][T10664] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.1563: iget: bad i_size value: 38620345925642 [ 375.612991][T10664] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1563: couldn't read orphan inode 15 (err -117) [ 375.676351][T10664] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.061530][ T3020] EXT4-fs error (device loop9): ext4_validate_block_bitmap:431: comm kworker/u8:12: bg 0: block 5: invalid block bitmap [ 376.099777][ T3020] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 376.118738][ T3020] EXT4-fs (loop9): This should not happen!! Data will be lost [ 376.118738][ T3020] [ 376.135719][ T3020] EXT4-fs (loop9): Total free blocks count 0 [ 376.145550][ T3020] EXT4-fs (loop9): Free/Dirty block details [ 376.170776][ T3020] EXT4-fs (loop9): free_blocks=0 [ 376.175890][ T3020] EXT4-fs (loop9): dirty_blocks=1 [ 376.198467][ T3020] EXT4-fs (loop9): Block reservation details [ 376.204754][ T3020] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 376.242679][ T7881] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.376243][T10684] ALSA: seq fatal error: cannot create timer (-16) [ 377.052202][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1577'. [ 377.161020][T10702] v: renamed from ip6_vti0 (while UP) [ 378.027803][T10721] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1586'. [ 378.430530][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 378.499102][ T9] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 379.891617][T10750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.198405][T10755] loop4: detected capacity change from 0 to 256 [ 380.205833][T10755] exfat: Deprecated parameter 'namecase' [ 380.237329][T10755] exfat: Deprecated parameter 'namecase' [ 380.277913][T10755] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 380.638137][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 380.704438][ T5916] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 380.828669][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 380.878526][ T5984] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 380.896629][ T44] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 380.908122][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 380.926616][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.943382][ T5916] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 380.963467][ T44] usb 4-1: Product: syz [ 380.967684][ T44] usb 4-1: Manufacturer: syz [ 380.983078][ T5916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.992050][ T44] usb 4-1: SerialNumber: syz [ 381.015153][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.015980][ T44] usb 4-1: config 0 descriptor?? [ 381.022060][ T44] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 381.022131][ T44] usb 4-1: setting power ON [ 381.022655][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 381.028478][ T5916] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.039542][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 381.076369][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.076414][ T5916] usb 3-1: Product: syz [ 381.076440][ T5916] usb 3-1: Manufacturer: syz [ 381.076466][ T5916] usb 3-1: SerialNumber: syz [ 381.127570][ T5984] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.127628][ T5984] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 381.127687][ T5984] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.127728][ T5984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.133953][T10764] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 381.147551][ T44] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 381.214213][ T44] usb 4-1: media controller created [ 381.233269][T10757] dvb-usb: bulk message failed: -22 (3/0) [ 381.233401][T10757] dvb-usb: bulk message failed: -22 (4/0) [ 381.233424][T10757] cxusb: i2c read failed [ 381.265819][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.307046][ T44] usb 4-1: selecting invalid altsetting 6 [ 381.307124][ T44] usb 4-1: digital interface selection failed (-22) [ 381.307152][ T44] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 381.317259][ T44] usb 4-1: setting power OFF [ 381.317382][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 381.317429][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 381.317451][ T44] (NULL device *): no alternate interface [ 381.376756][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 381.383122][ T44] usb 4-1: USB disconnect, device number 4 [ 381.509442][ T5916] usb 3-1: 0:2 : does not exist [ 381.578292][ T5848] Bluetooth: hci0: command tx timeout [ 381.946417][T10777] netlink: 'syz.6.1612': attribute type 1 has an invalid length. [ 382.064105][T10777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.122297][ T5984] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.171475][ T5984] usb 10-1: USB disconnect, device number 6 [ 382.276595][T10782] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.301713][T10782] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 382.321025][ T44] usb 3-1: USB disconnect, device number 11 [ 382.332904][T10782] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 383.868719][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1631'. [ 383.913511][T10831] bridge_slave_1: left allmulticast mode [ 383.913548][T10831] bridge_slave_1: left promiscuous mode [ 383.915611][T10831] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.957134][T10831] bridge_slave_0: left allmulticast mode [ 383.957167][T10831] bridge_slave_0: left promiscuous mode [ 383.957402][T10831] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.523615][T10856] netlink: 'syz.2.1643': attribute type 39 has an invalid length. [ 384.881586][T10852] loop3: detected capacity change from 0 to 40427 [ 384.897690][T10852] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 384.904756][T10852] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 384.913546][T10852] F2FS-fs (loop3): build fault injection rate: 17008 [ 384.920341][T10852] F2FS-fs (loop3): build fault injection type: 0x6 [ 384.930590][T10852] F2FS-fs (loop3): invalid crc value [ 385.033857][T10852] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 385.041068][T10852] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 385.068097][ T44] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 385.079284][T10868] loop4: detected capacity change from 0 to 128 [ 385.122003][T10868] EXT4-fs (loop4): Test dummy encryption mode enabled [ 385.159630][T10868] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.184156][T10875] netlink: 'syz.6.1650': attribute type 5 has an invalid length. [ 385.219884][T10868] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 385.220372][ T44] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 385.241571][ T44] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1616, setting to 64 [ 385.262087][ T44] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 385.277435][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.285700][ T44] usb 10-1: Product: syz [ 385.290919][ T44] usb 10-1: Manufacturer: syz [ 385.295639][ T44] usb 10-1: SerialNumber: syz [ 385.307153][T10846] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 385.324995][ T8727] syz-executor: attempt to access beyond end of device [ 385.324995][ T8727] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 385.361066][ T8727] CPU: 1 UID: 0 PID: 8727 Comm: syz-executor Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 385.361117][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.361139][ T8727] Call Trace: [ 385.361150][ T8727] [ 385.361163][ T8727] dump_stack_lvl+0x16c/0x1f0 [ 385.361216][ T8727] f2fs_handle_critical_error+0x621/0x9f0 [ 385.361261][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.361305][ T8727] ? f2fs_build_fault_attr+0x53/0x1f0 [ 385.361374][ T8727] f2fs_write_end_io+0x785/0xc20 [ 385.361422][ T8727] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 385.361472][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.361525][ T8727] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 385.361567][ T8727] bio_endio+0x70d/0x850 [ 385.361610][ T8727] submit_bio_noacct+0x306/0x1eb0 [ 385.361673][ T8727] __submit_merged_bio+0x33c/0x770 [ 385.361723][ T8727] __submit_merged_write_cond+0x319/0x3f0 [ 385.361778][ T8727] f2fs_write_cache_pages+0x2067/0x2570 [ 385.361856][ T8727] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 385.361915][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.361956][ T8727] ? __lock_acquire+0x622/0x1c90 [ 385.362020][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.362151][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.362194][ T8727] ? mod_memcg_lruvec_state+0x394/0x610 [ 385.362251][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.362293][ T8727] ? __mod_zone_page_state+0xcc/0x1a0 [ 385.362421][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.362474][ T8727] f2fs_write_data_pages+0x4ad/0xd90 [ 385.362535][ T8727] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 385.362601][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.362645][ T8727] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 385.362700][ T8727] do_writepages+0x27a/0x600 [ 385.362756][ T8727] ? __pfx_do_writepages+0x10/0x10 [ 385.362802][ T8727] ? do_raw_spin_unlock+0x172/0x230 [ 385.362841][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.362882][ T8727] ? _raw_spin_unlock+0x28/0x50 [ 385.362925][ T8727] filemap_fdatawrite_wbc+0x104/0x160 [ 385.362981][ T8727] __filemap_fdatawrite_range+0xb2/0xf0 [ 385.363022][ T8727] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 385.363126][ T8727] ? find_held_lock+0x2b/0x80 [ 385.363171][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.363261][ T8727] ? do_raw_spin_unlock+0x172/0x230 [ 385.363299][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.363348][ T8727] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 385.363423][ T8727] block_operations+0x2a3/0xfd0 [ 385.363481][ T8727] ? __pfx___schedule+0x10/0x10 [ 385.363524][ T8727] ? __pfx_block_operations+0x10/0x10 [ 385.363630][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.363673][ T8727] ? down_write+0x14d/0x200 [ 385.363723][ T8727] ? __pfx_down_write+0x10/0x10 [ 385.363774][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.363816][ T8727] ? rcu_is_watching+0x12/0xc0 [ 385.363866][ T8727] f2fs_write_checkpoint+0x2b8/0x4c60 [ 385.363930][ T8727] ? kthread_stop+0x163/0x630 [ 385.363987][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.364029][ T8727] ? rcu_is_watching+0x12/0xc0 [ 385.364081][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.364123][ T8727] ? kthread_stop+0x273/0x630 [ 385.364184][ T8727] kill_f2fs_super+0x3c2/0x470 [ 385.364241][ T8727] ? __pfx_kill_f2fs_super+0x10/0x10 [ 385.364293][ T8727] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.364354][ T8727] deactivate_locked_super+0xc1/0x1a0 [ 385.364413][ T8727] deactivate_super+0xde/0x100 [ 385.364469][ T8727] cleanup_mnt+0x225/0x450 [ 385.364505][ T8727] task_work_run+0x150/0x240 [ 385.364549][ T8727] ? __pfx_task_work_run+0x10/0x10 [ 385.364584][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.364630][ T8727] ? __pfx___x64_sys_umount+0x10/0x10 [ 385.364679][ T8727] exit_to_user_mode_loop+0xeb/0x110 [ 385.364717][ T8727] do_syscall_64+0x3f6/0x4c0 [ 385.364767][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.364801][ T8727] RIP: 0033:0x7f055598fcd7 [ 385.364829][ T8727] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 385.364863][ T8727] RSP: 002b:00007ffc55bf7c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 385.364895][ T8727] RAX: 0000000000000000 RBX: 00007f0555a10b55 RCX: 00007f055598fcd7 [ 385.364917][ T8727] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc55bf7cc0 [ 385.364939][ T8727] RBP: 00007ffc55bf7cc0 R08: 0000000000000000 R09: 0000000000000000 [ 385.364960][ T8727] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc55bf8d50 [ 385.364981][ T8727] R13: 00007f0555a10b55 R14: 000000000005e075 R15: 00007ffc55bf8d90 [ 385.365026][ T8727] [ 385.819583][ T8727] F2FS-fs (loop3): Remounting filesystem read-only [ 385.830861][ T8727] CPU: 0 UID: 0 PID: 8727 Comm: syz-executor Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 385.830911][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.830933][ T8727] Call Trace: [ 385.830945][ T8727] [ 385.830958][ T8727] dump_stack_lvl+0x16c/0x1f0 [ 385.831012][ T8727] f2fs_handle_critical_error+0x621/0x9f0 [ 385.831058][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.831176][ T8727] ? f2fs_build_fault_attr+0x53/0x1f0 [ 385.831246][ T8727] f2fs_write_end_io+0x785/0xc20 [ 385.831301][ T8727] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 385.831351][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.831405][ T8727] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 385.831448][ T8727] bio_endio+0x70d/0x850 [ 385.831493][ T8727] submit_bio_noacct+0x306/0x1eb0 [ 385.831558][ T8727] __submit_merged_bio+0x33c/0x770 [ 385.831609][ T8727] __submit_merged_write_cond+0x319/0x3f0 [ 385.831668][ T8727] f2fs_write_cache_pages+0x2067/0x2570 [ 385.831750][ T8727] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 385.831810][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.831855][ T8727] ? __lock_acquire+0x622/0x1c90 [ 385.831922][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.832047][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.832089][ T8727] ? mod_memcg_lruvec_state+0x394/0x610 [ 385.832148][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.832190][ T8727] ? __mod_zone_page_state+0xcc/0x1a0 [ 385.832243][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.832300][ T8727] f2fs_write_data_pages+0x4ad/0xd90 [ 385.832362][ T8727] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 385.832430][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.832474][ T8727] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 385.832528][ T8727] do_writepages+0x27a/0x600 [ 385.832584][ T8727] ? __pfx_do_writepages+0x10/0x10 [ 385.832633][ T8727] ? do_raw_spin_unlock+0x172/0x230 [ 385.832673][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.832713][ T8727] ? _raw_spin_unlock+0x28/0x50 [ 385.832756][ T8727] filemap_fdatawrite_wbc+0x104/0x160 [ 385.832813][ T8727] __filemap_fdatawrite_range+0xb2/0xf0 [ 385.832852][ T8727] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 385.832944][ T8727] ? find_held_lock+0x2b/0x80 [ 385.832989][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.833032][ T8727] ? do_raw_spin_unlock+0x172/0x230 [ 385.833070][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.833121][ T8727] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 385.833195][ T8727] block_operations+0x2a3/0xfd0 [ 385.833254][ T8727] ? __pfx___schedule+0x10/0x10 [ 385.833304][ T8727] ? __pfx_block_operations+0x10/0x10 [ 385.833411][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.833455][ T8727] ? down_write+0x14d/0x200 [ 385.833506][ T8727] ? __pfx_down_write+0x10/0x10 [ 385.833559][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.833601][ T8727] ? rcu_is_watching+0x12/0xc0 [ 385.833652][ T8727] f2fs_write_checkpoint+0x2b8/0x4c60 [ 385.833717][ T8727] ? kthread_stop+0x163/0x630 [ 385.833776][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.833860][ T8727] ? rcu_is_watching+0x12/0xc0 [ 385.833905][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.833947][ T8727] ? kthread_stop+0x273/0x630 [ 385.834009][ T8727] kill_f2fs_super+0x3c2/0x470 [ 385.834063][ T8727] ? __pfx_kill_f2fs_super+0x10/0x10 [ 385.834110][ T8727] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.834160][ T8727] deactivate_locked_super+0xc1/0x1a0 [ 385.834209][ T8727] deactivate_super+0xde/0x100 [ 385.834257][ T8727] cleanup_mnt+0x225/0x450 [ 385.834294][ T8727] task_work_run+0x150/0x240 [ 385.834327][ T8727] ? __pfx_task_work_run+0x10/0x10 [ 385.834355][ T8727] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.834394][ T8727] ? __pfx___x64_sys_umount+0x10/0x10 [ 385.834435][ T8727] exit_to_user_mode_loop+0xeb/0x110 [ 385.834468][ T8727] do_syscall_64+0x3f6/0x4c0 [ 385.834511][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.834541][ T8727] RIP: 0033:0x7f055598fcd7 [ 385.834566][ T8727] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 385.834596][ T8727] RSP: 002b:00007ffc55bf7c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 385.834625][ T8727] RAX: 0000000000000000 RBX: 00007f0555a10b55 RCX: 00007f055598fcd7 [ 385.834644][ T8727] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc55bf7cc0 [ 385.834662][ T8727] RBP: 00007ffc55bf7cc0 R08: 0000000000000000 R09: 0000000000000000 [ 385.834681][ T8727] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc55bf8d50 [ 385.834701][ T8727] R13: 00007f0555a10b55 R14: 000000000005e075 R15: 00007ffc55bf8d90 [ 385.834740][ T8727] [ 385.834752][ T8727] F2FS-fs (loop3): Remounting filesystem read-only [ 385.984084][T10846] loop9: detected capacity change from 0 to 1024 [ 386.308144][ T5916] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 386.350825][T10030] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 386.858311][ T13] wlan1: Trigger new scan to find an IBSS to join [ 387.388121][ T44] cdc_ncm 10-1:1.0: bind() failure [ 387.478234][ T44] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 387.516287][ T44] cdc_ncm 10-1:1.1: bind() failure [ 387.577745][ T44] usb 10-1: USB disconnect, device number 7 [ 388.250603][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.261757][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.278465][ T5916] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 388.287517][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.317350][ T5916] usb 3-1: config 0 descriptor?? [ 388.544891][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1665'. [ 388.575515][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1665'. [ 388.658232][ T55] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 388.757195][ T5916] hid-steam 0003:28DE:1142.0012: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 388.830688][ T55] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 388.848089][ T5916] hid-steam 0003:28DE:1142.0012: Steam wireless receiver connected [ 388.850506][ T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.889739][ T5916] hid-steam 0003:28DE:1142.0013: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 388.910733][ T55] usb 10-1: config 0 descriptor?? [ 389.048429][ T44] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 389.220873][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 389.240689][ T44] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 389.257994][ T44] usb 5-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 389.275288][ T44] usb 5-1: Manufacturer: syz [ 389.284830][ T44] usb 5-1: config 0 descriptor?? [ 389.402249][ T55] elan 0003:04F3:0755.0014: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 389.488398][ T5916] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 389.516686][ T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 389.537615][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.553882][ T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 389.557464][ T9] usb 10-1: USB disconnect, device number 8 [ 389.566778][ T44] usb 5-1: media controller created [ 389.617484][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.631246][ T10] usb 3-1: USB disconnect, device number 12 [ 389.674311][ T10] hid-steam 0003:28DE:1142.0012: Steam wireless receiver disconnected [ 389.696569][ T5916] usb 4-1: config 0 has no interfaces? [ 389.709593][ T5916] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 389.721129][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 389.730861][ T44] az6027: usb out operation failed. (-71) [ 389.737839][ T44] az6027: usb out operation failed. (-71) [ 389.738463][ T5916] usb 4-1: Product: syz [ 389.747878][ T5916] usb 4-1: Manufacturer: syz [ 389.758519][ T44] stb0899_attach: Driver disabled by Kconfig [ 389.759461][ T5916] usb 4-1: config 0 descriptor?? [ 389.773297][ T44] az6027: no front-end attached [ 389.773297][ T44] [ 389.791420][ T44] az6027: usb out operation failed. (-71) [ 389.797448][ T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 389.815744][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 389.843149][ T44] dvb-usb: schedule remote query interval to 400 msecs. [ 389.854401][ T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 389.871126][ T44] usb 5-1: USB disconnect, device number 12 [ 389.965806][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 390.014472][ T5944] usb 4-1: USB disconnect, device number 5 [ 391.123878][ T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 391.278172][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 391.300590][T10945] vlan2: entered allmulticast mode [ 391.317448][ T44] usb 4-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 391.321391][T10945] erspan0: entered allmulticast mode [ 391.332092][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.332134][ T44] usb 4-1: Product: syz [ 391.332161][ T44] usb 4-1: Manufacturer: syz [ 391.332192][ T44] usb 4-1: SerialNumber: syz [ 391.337933][ T44] usb 4-1: config 0 descriptor?? [ 391.399944][ T44] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 391.416604][T10946] netlink: 'syz.2.1681': attribute type 12 has an invalid length. [ 391.449442][T10946] netlink: 'syz.2.1681': attribute type 29 has an invalid length. [ 391.488176][T10946] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1681'. [ 391.543450][T10946] netlink: 'syz.2.1681': attribute type 1 has an invalid length. [ 391.551901][T10946] netlink: 'syz.2.1681': attribute type 2 has an invalid length. [ 391.608391][T10946] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1681'. [ 391.819183][ T1163] wlan1: Trigger new scan to find an IBSS to join [ 392.078112][ T55] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 392.221205][ T44] gspca_zc3xx: reg_w_i err -71 [ 392.239572][ T55] usb 10-1: device descriptor read/64, error -71 [ 392.499998][ T55] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 392.718232][ T55] usb 10-1: device descriptor read/64, error -71 [ 392.785730][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.795433][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.843773][ T55] usb usb10-port1: attempt power cycle [ 392.856581][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.968504][ T44] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 392.975510][ T44] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 393.015317][ T44] usb 4-1: USB disconnect, device number 6 [ 393.248795][ T55] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 393.310044][ T55] usb 10-1: device descriptor read/8, error -71 [ 393.400241][ T10] libceph: connect (1)[c::]:6789 error -101 [ 393.428317][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 393.588140][ T55] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 393.629511][ T55] usb 10-1: device descriptor read/8, error -71 [ 393.708675][ T10] libceph: connect (1)[c::]:6789 error -101 [ 393.716115][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 393.757705][ T55] usb usb10-port1: unable to enumerate USB device [ 394.206839][T10998] ceph: No mds server is up or the cluster is laggy [ 394.250984][ T10] libceph: connect (1)[c::]:6789 error -101 [ 394.262244][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 394.421619][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1716'. [ 394.690908][T11041] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 394.879387][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 394.949004][T11041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.167655][T11045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.184497][T11045] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 395.200937][T11045] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 395.267887][T11055] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1723'. [ 395.774404][ T9] delete_channel: no stack [ 397.405497][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1741'. [ 397.428661][T11091] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 397.437472][T11091] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 397.511414][T11058] loop3: detected capacity change from 0 to 40427 [ 397.594731][T11058] F2FS-fs (loop3): invalid crc value [ 397.692463][T11101] loop4: detected capacity change from 0 to 256 [ 397.788350][T11103] netlink: 'syz.9.1745': attribute type 9 has an invalid length. [ 397.794156][T11101] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 397.814819][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1745'. [ 397.858098][T11058] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 397.877224][T11103] netlink: 'syz.9.1745': attribute type 9 has an invalid length. [ 397.895689][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1745'. [ 397.908373][T11101] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 398.143964][T11101] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 398.185974][T11097] f2fs_ckpt-7:3: attempt to access beyond end of device [ 398.185974][T11097] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 398.302904][T11097] CPU: 0 UID: 0 PID: 11097 Comm: f2fs_ckpt-7:3 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 398.302958][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.302979][T11097] Call Trace: [ 398.302989][T11097] [ 398.303001][T11097] dump_stack_lvl+0x16c/0x1f0 [ 398.303061][T11097] f2fs_handle_critical_error+0x621/0x9f0 [ 398.303106][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.303150][T11097] ? f2fs_build_fault_attr+0x53/0x1f0 [ 398.303226][T11097] f2fs_write_end_io+0x785/0xc20 [ 398.303274][T11097] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 398.303324][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.303379][T11097] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 398.303422][T11097] bio_endio+0x70d/0x850 [ 398.303466][T11097] submit_bio_noacct+0x306/0x1eb0 [ 398.303531][T11097] __submit_merged_bio+0x33c/0x770 [ 398.303582][T11097] __submit_merged_write_cond+0x319/0x3f0 [ 398.303640][T11097] f2fs_write_cache_pages+0x2067/0x2570 [ 398.303720][T11097] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 398.303889][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.303940][T11097] f2fs_write_data_pages+0x4ad/0xd90 [ 398.303999][T11097] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 398.304073][T11097] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 398.304127][T11097] do_writepages+0x27a/0x600 [ 398.304186][T11097] ? __pfx_do_writepages+0x10/0x10 [ 398.304235][T11097] ? do_raw_spin_unlock+0x172/0x230 [ 398.304274][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.304317][T11097] ? _raw_spin_unlock+0x28/0x50 [ 398.304359][T11097] filemap_fdatawrite_wbc+0x104/0x160 [ 398.304417][T11097] __filemap_fdatawrite_range+0xb2/0xf0 [ 398.304456][T11097] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 398.304552][T11097] ? find_held_lock+0x2b/0x80 [ 398.304597][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.304640][T11097] ? do_raw_spin_unlock+0x172/0x230 [ 398.304680][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.304730][T11097] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 398.304805][T11097] block_operations+0x2a3/0xfd0 [ 398.304862][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.304910][T11097] ? __pfx_block_operations+0x10/0x10 [ 398.305109][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.305151][T11097] ? down_write+0x14d/0x200 [ 398.305201][T11097] ? __pfx_down_write+0x10/0x10 [ 398.305253][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.305295][T11097] ? rcu_is_watching+0x12/0xc0 [ 398.305346][T11097] f2fs_write_checkpoint+0x2b8/0x4c60 [ 398.305404][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.305449][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.305491][T11097] ? down_write+0x14d/0x200 [ 398.305540][T11097] ? __pfx_down_write+0x10/0x10 [ 398.305603][T11097] __checkpoint_and_complete_reqs+0xe8/0x350 [ 398.305668][T11097] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 398.305747][T11097] issue_checkpoint_thread+0xe8/0x2e0 [ 398.305806][T11097] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 398.305866][T11097] ? __pfx_autoremove_wake_function+0x10/0x10 [ 398.305918][T11097] ? lockdep_hardirqs_on+0x7c/0x110 [ 398.305961][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.306005][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.306052][T11097] ? __kthread_parkme+0x19e/0x250 [ 398.306106][T11097] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 398.306162][T11097] kthread+0x3c5/0x780 [ 398.306196][T11097] ? __pfx_kthread+0x10/0x10 [ 398.306232][T11097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 398.306274][T11097] ? rcu_is_watching+0x12/0xc0 [ 398.306318][T11097] ? __pfx_kthread+0x10/0x10 [ 398.306354][T11097] ret_from_fork+0x5d7/0x6f0 [ 398.306386][T11097] ? __pfx_kthread+0x10/0x10 [ 398.306420][T11097] ret_from_fork_asm+0x1a/0x30 [ 398.306486][T11097] [ 398.679883][T11097] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 398.770174][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 398.775494][T11116] loop9: detected capacity change from 0 to 16 [ 398.780713][T11118] bridge_slave_1: left allmulticast mode [ 398.792575][T11118] bridge_slave_1: left promiscuous mode [ 398.798567][T11118] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.834890][T11118] bridge_slave_0: left allmulticast mode [ 398.841069][T11118] bridge_slave_0: left promiscuous mode [ 398.846921][T11118] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.899917][T11116] erofs (device loop9): mounted with root inode @ nid 36. [ 398.978607][ T5848] erofs (device loop9): failed to decompress -26 in[46, 0] out[9000] [ 399.008570][T11115] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 399.014585][T11115] syzkaller1: Refused to change device type [ 399.018617][T11116] erofs (device loop9): failed to decompress -26 in[46, 4050] out[8192] [ 399.104723][T11116] erofs (device loop9): read error -117 @ 0 of nid 89 [ 399.949693][ T5916] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 399.993568][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 400.021784][T11137] loop9: detected capacity change from 0 to 32768 [ 400.114192][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 400.214634][T11137] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 400.214685][T11137] allowing incompatible features above 0.0: (unknown version) [ 400.214707][T11137] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 400.256469][ T5916] usb 5-1: config 0 has an invalid interface number: 225 but max is 0 [ 400.260914][T11137] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 400.276970][T11137] bcachefs (loop9): initializing new filesystem [ 400.300558][T11137] bcachefs (loop9): going read-write [ 400.343573][T11137] bcachefs (loop9): marking superblocks [ 400.350340][ T5916] usb 5-1: config 0 has no interface number 0 [ 400.362249][T11137] bcachefs (loop9): initializing freespace [ 400.372345][T11137] bcachefs (loop9): done initializing freespace [ 400.385775][T11137] bcachefs (loop9): reading snapshots table [ 400.395632][T11137] bcachefs (loop9): reading snapshots done [ 400.396491][ T5916] usb 5-1: config 0 interface 225 has no altsetting 0 [ 400.488237][T11137] bcachefs (loop9): done starting filesystem [ 400.551129][ T30] audit: type=1800 audit(1753914994.190:43): pid=11137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1761" name="file1" dev="loop9" ino=4098 res=0 errno=0 [ 400.578155][ T5916] usb 5-1: New USB device found, idVendor=0b95, idProduct=1720, bcdDevice=23.b4 [ 400.627832][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.647303][ T5916] usb 5-1: Product: syz [ 400.652078][ T5916] usb 5-1: Manufacturer: syz [ 400.656696][ T5916] usb 5-1: SerialNumber: syz [ 400.679223][ T5916] usb 5-1: config 0 descriptor?? [ 401.324088][ T7881] bcachefs (loop9): shutting down [ 401.351366][ T7881] bcachefs (loop9): going read-only [ 401.356787][ T7881] bcachefs (loop9): finished waiting for writes to stop [ 401.397290][ T7881] bcachefs (loop9): flushing journal and stopping allocators, journal seq 3 [ 401.628663][ T7881] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 3 [ 401.676407][ T7881] bcachefs (loop9): clean shutdown complete, journal seq 4 [ 401.699253][ T7881] bcachefs (loop9): marking filesystem clean [ 401.757830][ T5916] asix 5-1:0.225 (unnamed net_device) (uninitialized): invalid hw address, using random [ 401.777913][T11177] Invalid ELF header magic: != ELF [ 401.847879][ T7881] bcachefs (loop9): shutdown complete [ 401.917290][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 401.959444][ T5916] asix 5-1:0.225 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 402.002129][ T5916] asix 5-1:0.225 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 402.049995][ T5916] asix 5-1:0.225: probe with driver asix failed with error -71 [ 402.082659][ T5916] usb 5-1: USB disconnect, device number 13 [ 402.098054][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 402.112818][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 402.168281][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.205138][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.257767][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.277446][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.304365][ T10] usb 4-1: Product: syz [ 402.318443][ T10] usb 4-1: Manufacturer: syz [ 402.323291][ T10] usb 4-1: SerialNumber: syz [ 403.046429][ T10] usb 4-1: 0:2 : does not exist [ 403.112962][T11197] netlink: 'syz.1.1785': attribute type 1 has an invalid length. [ 403.162300][T11197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.685828][T11187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.826407][T11199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.848797][T11199] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 403.866576][T11199] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 403.914370][ T10] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 403.974477][ T10] usb 4-1: USB disconnect, device number 7 [ 405.844254][T11238] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 405.974571][T11238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.125804][T11240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.141828][T11240] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 406.199025][T11240] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 406.379370][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.415305][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.428260][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 406.437629][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 406.449605][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.119864][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 407.435520][T11241] chnl_net:caif_netlink_parms(): no params data found [ 407.843245][T11241] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.871104][T11241] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.903968][T11241] bridge_slave_0: entered allmulticast mode [ 407.932732][T11241] bridge_slave_0: entered promiscuous mode [ 407.974713][T11241] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.995982][T11257] ceph: No mds server is up or the cluster is laggy [ 408.022771][T11241] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.089044][T11241] bridge_slave_1: entered allmulticast mode [ 408.128359][T11241] bridge_slave_1: entered promiscuous mode [ 408.452983][T11286] netlink: 'syz.9.1817': attribute type 1 has an invalid length. [ 408.491742][T11241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.538473][ T5848] Bluetooth: hci3: command tx timeout [ 408.578093][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 408.588805][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 408.594988][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 408.669717][ T55] libceph: connect (1)[c::]:6789 error -101 [ 408.675921][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 408.754990][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 408.798322][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 408.827923][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 408.888193][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.922769][T11286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.938766][ T55] libceph: connect (1)[c::]:6789 error -101 [ 408.945070][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 408.960607][ T9] usb 4-1: config 0 descriptor?? [ 408.972637][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 408.982112][T11241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.034991][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 409.238527][T11299] ip6_vti0: entered allmulticast mode [ 409.244737][T11300] ip6_vti0: left allmulticast mode [ 409.299382][T11288] ceph: No mds server is up or the cluster is laggy [ 409.306702][T11292] ceph: No mds server is up or the cluster is laggy [ 409.452055][ T9] corsair-cpro 0003:1B1C:0C10.0015: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 409.485395][T11241] team0: Port device team_slave_0 added [ 409.519538][T11241] team0: Port device team_slave_1 added [ 409.586068][T11304] loop4: detected capacity change from 0 to 512 [ 409.623527][ T9] corsair-cpro 0003:1B1C:0C10.0015: probe with driver corsair-cpro failed with error -71 [ 409.638726][T11304] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 409.688115][ T9] usb 4-1: USB disconnect, device number 8 [ 409.842219][T11304] EXT4-fs (loop4): 1 truncate cleaned up [ 409.909797][T11304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.924953][T11241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.956547][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.014794][T11241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.037772][T11241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.045859][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.071851][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.086272][T11241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.292878][T11241] hsr_slave_0: entered promiscuous mode [ 410.335610][T11241] hsr_slave_1: entered promiscuous mode [ 410.391610][T11241] debugfs: 'hsr0' already exists in 'hsr' [ 410.397384][T11241] Cannot create hsr debugfs directory [ 410.618084][ T5848] Bluetooth: hci3: command tx timeout [ 410.999451][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.485651][T11241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.564030][T11241] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.657213][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.664450][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.740468][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.747701][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.698831][ T5848] Bluetooth: hci3: command tx timeout [ 413.000622][T11241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.816632][T11379] netlink: 'syz.9.1849': attribute type 4 has an invalid length. [ 413.849351][T11379] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1849'. [ 413.993782][T11379] : renamed from bond0 (while UP) [ 414.778163][ T5848] Bluetooth: hci3: command tx timeout [ 414.789482][T11392] netlink: 'syz.9.1853': attribute type 10 has an invalid length. [ 414.816597][T11392] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1853'. [ 414.829937][T11241] veth0_vlan: entered promiscuous mode [ 414.836844][T11392] dummy0: entered promiscuous mode [ 414.893989][T11392] bridge0: port 3(dummy0) entered blocking state [ 414.978213][T11392] bridge0: port 3(dummy0) entered disabled state [ 415.001133][T11392] dummy0: entered allmulticast mode [ 415.037579][T11392] bridge0: port 3(dummy0) entered blocking state [ 415.044212][T11392] bridge0: port 3(dummy0) entered forwarding state [ 415.136757][T11241] veth1_vlan: entered promiscuous mode [ 415.321841][T11241] veth0_macvtap: entered promiscuous mode [ 415.340695][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 415.372243][T11241] veth1_macvtap: entered promiscuous mode [ 415.441739][T11409] loop9: detected capacity change from 0 to 128 [ 415.482056][T11241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.502988][T11409] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 415.529729][T11241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.550413][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 415.581530][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 415.591734][T11409] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.620926][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.655096][ T9] usb 4-1: Product: syz [ 415.668693][ T9] usb 4-1: Manufacturer: syz [ 415.679073][ T9] usb 4-1: SerialNumber: syz [ 415.720034][ T9] usb 4-1: config 0 descriptor?? [ 415.756143][ T9] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 416.045845][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.089225][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.266342][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.283511][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.434268][ T7881] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.637434][ T1139] bridge_slave_1: left allmulticast mode [ 416.648183][ T1139] bridge_slave_1: left promiscuous mode [ 416.654159][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.703138][ T1139] bridge_slave_0: left allmulticast mode [ 416.720399][ T1139] bridge_slave_0: left promiscuous mode [ 416.741413][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.860023][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 416.866162][ T5848] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 417.024242][ T9] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 417.039352][ T9] usb 4-1: USB disconnect, device number 9 [ 417.589747][ T5944] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 417.809340][ T5944] usb 10-1: Using ep0 maxpacket: 8 [ 417.867940][ T5944] usb 10-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 417.906613][ T5944] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.956112][ T5944] usb 10-1: Product: syz [ 417.966220][ T5944] usb 10-1: Manufacturer: syz [ 418.003299][ T5944] usb 10-1: SerialNumber: syz [ 418.065778][T11444] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1876'. [ 418.086542][ T5944] usb 10-1: config 0 descriptor?? [ 418.148493][ T5944] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 418.541751][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.559346][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.571855][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.588763][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.616902][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.876901][T11451] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 419.040770][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.086571][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.131891][ T1139] bond0 (unregistering): Released all slaves [ 419.380571][ T5944] gspca_sonixj: reg_w1 err -71 [ 419.443174][ T5944] sonixj 10-1:0.0: probe with driver sonixj failed with error -71 [ 419.475019][ T5944] usb 10-1: USB disconnect, device number 13 [ 419.654383][ T1139] bond1 (unregistering): Released all slaves [ 420.006860][T11472] capability: warning: `syz.0.1887' uses 32-bit capabilities (legacy support in use) [ 420.703044][ T5851] Bluetooth: hci2: command tx timeout [ 421.035121][T11486] loop0: detected capacity change from 0 to 1024 [ 421.062625][T11486] EXT4-fs: Ignoring removed orlov option [ 421.124892][T11486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.250617][ T1139] hsr_slave_0: left promiscuous mode [ 421.321158][ T1139] hsr_slave_1: left promiscuous mode [ 421.343008][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.381729][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.411535][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.438096][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.502042][T11241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.530681][ T1139] veth1_macvtap: left promiscuous mode [ 421.556608][ T1139] veth0_macvtap: left promiscuous mode [ 421.587124][ T1139] veth1_vlan: left promiscuous mode [ 421.641172][ T1139] veth0_vlan: left promiscuous mode [ 422.090784][T11517] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 422.215643][T11521] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 422.247928][T11521] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1908'. [ 422.288066][T11521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1908'. [ 422.358222][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 422.407480][T11507] loop9: detected capacity change from 0 to 32768 [ 422.477754][T11507] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode. [ 422.562082][ T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 422.681535][ T10] usb 4-1: config 0 has no interface number 0 [ 422.695357][ T10] usb 4-1: config 0 interface 41 has no altsetting 0 [ 422.727515][ T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 422.753010][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.761710][ T10] usb 4-1: Product: syz [ 422.782147][ T5851] Bluetooth: hci2: command tx timeout [ 422.790722][ T10] usb 4-1: Manufacturer: syz [ 422.796769][ T10] usb 4-1: SerialNumber: syz [ 422.807044][ T10] usb 4-1: config 0 descriptor?? [ 423.024347][T11507] OCFS2: ERROR (device loop9): ocfs2_get_clusters_nocache: Inode 17058 has bad extent record (0, 8, 0) [ 423.079381][T11507] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 423.108106][T11507] OCFS2: File system is now read-only. [ 423.113852][T11507] (syz.9.1902,11507,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 423.133665][T11507] (syz.9.1902,11507,0):ocfs2_populate_write_desc:1384 ERROR: status = -30 [ 423.209475][T11507] (syz.9.1902,11507,1):ocfs2_write_begin_nolock:1690 ERROR: status = -30 [ 423.287866][T11507] (syz.9.1902,11507,1):__ocfs2_page_mkwrite:97 ERROR: status = -30 [ 423.484645][ T7881] ocfs2: Unmounting device (7,9) on (node local) [ 423.677352][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 423.959753][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 424.002735][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 424.044075][T11544] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(Íë…èo¢N ááí«QhQI¸¥ [ 424.078367][ T10] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 424.129186][ T10] usb 4-1: USB disconnect, device number 10 [ 424.834096][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 424.858456][ T5851] Bluetooth: hci2: command tx timeout [ 425.101368][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 425.280689][ T5981] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 425.301855][T11576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 425.504356][ T5981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.535497][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.607024][ T5981] usb 4-1: Product: syz [ 425.620939][ T5981] usb 4-1: Manufacturer: syz [ 425.630147][ T5981] usb 4-1: SerialNumber: syz [ 426.142414][T11587] overlayfs: failed to resolve './file0': -2 [ 426.154951][T11588] loop9: detected capacity change from 0 to 512 [ 426.254721][T11588] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 426.292387][T11588] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 426.514399][T11588] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #12: comm syz.9.1935: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 426.706912][ T5981] cdc_ncm 4-1:1.0: failed to get mac address [ 426.727550][ T7881] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 426.908682][ T5981] cdc_ncm 4-1:1.0: bind() failure [ 426.950501][ T5851] Bluetooth: hci2: command tx timeout [ 427.748143][ T5981] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 427.841915][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 427.895604][ T5981] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 427.908108][ T5981] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 427.931794][ T5981] usb 4-1: USB disconnect, device number 11 [ 428.007000][T11603] batadv_slave_0: entered promiscuous mode [ 428.017278][T11602] @: renamed from vlan0 (while UP) [ 428.029594][T11608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.141798][T11608] batadv_slave_0 (unregistering): left promiscuous mode [ 428.165042][T11608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.318521][ T5981] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 428.548741][ T5981] usb 4-1: Using ep0 maxpacket: 32 [ 428.602804][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.638414][ T5981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.675881][ T5981] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 428.685460][ T5981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.696176][T11446] chnl_net:caif_netlink_parms(): no params data found [ 428.724973][ T5981] usb 4-1: config 0 descriptor?? [ 428.770023][ T5981] hub 4-1:0.0: USB hub found [ 428.921530][T11446] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.932368][T11446] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.940436][T11446] bridge_slave_0: entered allmulticast mode [ 428.950744][T11446] bridge_slave_0: entered promiscuous mode [ 428.960761][T11446] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.968820][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.976200][T11446] bridge_slave_1: entered allmulticast mode [ 428.985850][T11446] bridge_slave_1: entered promiscuous mode [ 429.029459][ T5981] hub 4-1:0.0: 1 port detected [ 429.047299][T11446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.066141][T11446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.117553][T11446] team0: Port device team_slave_0 added [ 429.130212][T11446] team0: Port device team_slave_1 added [ 429.172726][T11446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.179919][T11446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.208194][T11446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.221588][T11446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.228627][T11446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.256822][T11446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.281016][ T5981] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 429.298954][ T5981] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 429.319070][ T5981] usbhid 4-1:0.0: can't add hid device: -71 [ 429.325152][ T5981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 429.349945][T11446] hsr_slave_0: entered promiscuous mode [ 429.354726][ T5981] usb 4-1: USB disconnect, device number 12 [ 429.357080][T11446] hsr_slave_1: entered promiscuous mode [ 429.373090][T11446] debugfs: 'hsr0' already exists in 'hsr' [ 429.378969][T11446] Cannot create hsr debugfs directory [ 429.636996][T11446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.672816][T11446] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.694031][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.701665][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.726653][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.733937][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.001722][T11638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1957'. [ 430.033570][T11639] loop0: detected capacity change from 0 to 256 [ 430.061352][T11639] exfat: Deprecated parameter 'utf8' [ 430.066705][T11639] exfat: Deprecated parameter 'utf8' [ 430.081988][T11639] exfat: Deprecated parameter 'utf8' [ 430.124928][T11639] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 430.782051][T11446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.035843][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1956'. [ 432.338400][T11689] loop3: detected capacity change from 0 to 32768 [ 432.347593][T11689] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1966 (11689) [ 432.369143][T11689] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 432.380892][T11689] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 432.390408][T11689] BTRFS info (device loop3): using free-space-tree [ 432.451612][T11695] loop4: detected capacity change from 0 to 4096 [ 432.599472][T11446] veth0_vlan: entered promiscuous mode [ 432.643004][T11714] loop9: detected capacity change from 0 to 512 [ 432.670767][T11716] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1981'. [ 432.675115][T11446] veth1_vlan: entered promiscuous mode [ 432.693825][T11714] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 432.727520][T11714] EXT4-fs (loop9): 1 truncate cleaned up [ 432.754923][T11714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.812509][T11446] veth0_macvtap: entered promiscuous mode [ 432.828565][T11446] veth1_macvtap: entered promiscuous mode [ 432.852480][T11446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.871561][T11446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.912693][ T8727] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 433.283185][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.292036][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.431941][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.441639][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.523865][ T7881] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.967917][T11730] loop5: detected capacity change from 0 to 32768 [ 433.995249][T11726] loop3: detected capacity change from 0 to 512 [ 434.038891][T11726] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 434.112498][T11726] EXT4-fs (loop3): 1 truncate cleaned up [ 434.144201][T11726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.175193][T11730] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 434.175232][T11730] allowing incompatible features above 0.0: (unknown version) [ 434.175255][T11730] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 434.212853][T11730] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 434.222539][T11730] bcachefs (loop5): initializing new filesystem [ 434.236269][T11730] bcachefs (loop5): going read-write [ 434.249682][T11730] bcachefs (loop5): marking superblocks [ 434.265145][T11730] bcachefs (loop5): initializing freespace [ 434.276987][T11730] bcachefs (loop5): done initializing freespace [ 434.285948][T11730] bcachefs (loop5): reading snapshots table [ 434.292148][T11730] bcachefs (loop5): reading snapshots done [ 434.348165][T11730] bcachefs (loop5): loop5: Superblock write was silently dropped! (seq 0 expected 42) [ 434.366026][T11730] bcachefs (loop5): done starting filesystem [ 434.727701][T11446] bcachefs (loop5): shutting down [ 434.732474][T11746] loop9: detected capacity change from 0 to 512 [ 434.748526][T11446] bcachefs (loop5): going read-only [ 434.773503][T11746] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 434.793650][T11446] bcachefs (loop5): finished waiting for writes to stop [ 434.822757][T11446] bcachefs (loop5): flushing journal and stopping allocators, journal seq 17 [ 434.827869][T11752] loop0: detected capacity change from 0 to 64 [ 435.228873][T11746] EXT4-fs (loop9): 1 truncate cleaned up [ 435.269925][T11746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.345063][T11446] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 17 [ 435.390392][T11446] bcachefs (loop5): clean shutdown complete, journal seq 18 [ 435.410608][T11446] bcachefs (loop5): marking filesystem clean [ 435.475600][ T8727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.566180][T11446] bcachefs (loop5): shutdown complete [ 435.681138][ T7881] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.249096][T11775] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1990'. [ 436.272658][T11777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.304607][T11778] netlink: 75 bytes leftover after parsing attributes in process `syz.9.1990'. [ 436.439450][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1994'. [ 436.464256][T11780] netlink: 'syz.4.1994': attribute type 30 has an invalid length. [ 436.575999][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1994'. [ 436.599136][T11780] netlink: 'syz.4.1994': attribute type 30 has an invalid length. [ 437.518307][T11791] loop4: detected capacity change from 0 to 1024 [ 437.544040][T11796] loop0: detected capacity change from 0 to 512 [ 437.546342][T11791] EXT4-fs: Ignoring removed nobh option [ 437.569770][T11796] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 437.599649][T11791] EXT4-fs: Ignoring removed bh option [ 437.637744][T11791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.643963][T11796] EXT4-fs (loop0): 1 truncate cleaned up [ 437.667480][T11796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.691898][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 437.879327][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 437.893988][ T9] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 437.907781][ T9] usb 10-1: config 0 has no interface number 0 [ 437.940051][ T9] usb 10-1: config 0 interface 184 has no altsetting 0 [ 437.963578][ T9] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 437.986956][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.032380][ T9] usb 10-1: Product: syz [ 438.062268][ T9] usb 10-1: Manufacturer: syz [ 438.069991][ T9] usb 10-1: SerialNumber: syz [ 438.112373][ T9] usb 10-1: config 0 descriptor?? [ 438.126396][ T9] smsc75xx v1.0.0 [ 438.184897][T11241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.302219][T11791] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4112: comm syz.4.2008: Allocating blocks 385-513 which overlap fs metadata [ 438.344725][T11791] EXT4-fs (loop4): Remounting filesystem read-only [ 438.356055][T11791] EXT4-fs (loop4): pa ffff888031aa33a0: logic 16, phys. 129, len 24 [ 438.445659][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.082774][T11812] loop3: detected capacity change from 0 to 512 [ 439.115123][T11808] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2001'. [ 439.171500][ T9] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 439.265400][T11812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.278282][T11812] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 439.388650][ T9] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 439.441060][ T9] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 439.494414][ T9] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 439.499411][ T8727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.555613][ T9] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 439.614699][ T9] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 439.657005][ T9] usb 10-1: USB disconnect, device number 14 [ 439.890938][T11826] block nbd3: shutting down sockets [ 440.418371][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 440.588246][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 440.611879][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 440.628235][T11848] netlink: 'syz.4.2019': attribute type 10 has an invalid length. [ 440.658279][ T9] usb 1-1: config 4 interface 0 has no altsetting 0 [ 440.682144][ T9] usb 1-1: string descriptor 0 read error: -22 [ 440.690767][T11848] team0: Device hsr_slave_0 failed to register rx_handler [ 440.717467][ T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 440.741924][T11851] loop9: detected capacity change from 0 to 2048 [ 440.757324][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 440.795758][T11851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 440.812627][ T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 440.869636][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 440.915457][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 440.930230][ T9] usb 1-1: media controller created [ 441.023790][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.263634][T11830] loop5: detected capacity change from 0 to 32768 [ 441.287338][ T30] audit: type=1326 audit(1753915034.920:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0098e9a9 code=0x7ffc0000 [ 441.320811][ T30] audit: type=1326 audit(1753915034.920:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0098e9a9 code=0x7ffc0000 [ 441.358448][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 441.419614][ T30] audit: type=1326 audit(1753915034.950:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fcf0098e9a9 code=0x7ffc0000 [ 441.446741][T11865] 9pnet_fd: Insufficient options for proto=fd [ 441.453418][T11830] jfs_readdir called with invalid offset! [ 441.517369][ T30] audit: type=1326 audit(1753915034.950:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0098e9a9 code=0x7ffc0000 [ 441.555706][ T9] usb 1-1: USB disconnect, device number 9 [ 441.589414][ T30] audit: type=1326 audit(1753915034.950:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0098e9a9 code=0x7ffc0000 [ 441.617542][ T30] audit: type=1326 audit(1753915034.960:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcf0098e9a9 code=0x7ffc0000 [ 441.656803][ T30] audit: type=1326 audit(1753915034.960:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0098e9a9 code=0x7ffc0000 [ 441.738617][ T30] audit: type=1326 audit(1753915034.960:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0098e9a9 code=0x7ffc0000 [ 441.782778][ T30] audit: type=1326 audit(1753915034.980:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fcf0098e9a9 code=0x7ffc0000 [ 441.813304][ T30] audit: type=1326 audit(1753915034.980:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0098e9a9 code=0x7ffc0000 [ 441.938186][ T5984] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 442.100176][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.100232][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.100272][ T5984] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.100431][ T5984] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 442.100474][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.103563][ T5984] usb 5-1: config 0 descriptor?? [ 442.315912][T11885] loop3: detected capacity change from 0 to 1024 [ 442.535123][T11885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.646623][ T5984] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 442.646671][ T5984] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 442.646705][ T5984] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 442.646737][ T5984] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 442.646769][ T5984] acrux 0003:1A34:0802.0016: unknown main item tag 0x0 [ 442.668661][ T5984] acrux 0003:1A34:0802.0016: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 442.668720][ T5984] acrux 0003:1A34:0802.0016: no inputs found [ 442.668747][ T5984] acrux 0003:1A34:0802.0016: Failed to enable force feedback support, error: -19 [ 442.801824][ T8727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.850448][T11896] loop0: detected capacity change from 0 to 128 [ 442.862725][T11896] EXT4-fs (loop0): Test dummy encryption mode enabled [ 442.869716][ T5984] usb 5-1: USB disconnect, device number 14 [ 442.918189][T11896] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 442.918672][T11896] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.992935][T11899] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 443.195997][T11241] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 443.335120][T11907] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 443.997748][T11925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.237270][T11929] binder: 11928:11929 ioctl c0306201 2000000003c0 returned -14 [ 444.320704][T11934] loop0: detected capacity change from 0 to 1024 [ 444.363046][T11934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.579618][T11942] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2060'. [ 444.967486][T11241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.313746][T11950] loop5: detected capacity change from 0 to 32768 [ 445.349607][ T5851] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 445.384897][T11944] loop4: detected capacity change from 0 to 65536 [ 445.570414][T11950] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 445.570454][T11950] allowing incompatible features above 0.0: (unknown version) [ 445.570476][T11950] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 445.610193][T11950] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 445.618579][T11950] bcachefs (loop5): initializing new filesystem [ 445.630605][T11944] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 445.641434][T11950] bcachefs (loop5): going read-write [ 445.682948][T11950] bcachefs (loop5): marking superblocks [ 445.699319][T11950] bcachefs (loop5): initializing freespace [ 445.709714][T11950] bcachefs (loop5): done initializing freespace [ 445.716376][T11944] XFS (loop4): Ending clean mount [ 445.719395][T11950] bcachefs (loop5): reading snapshots table [ 445.728041][T11950] bcachefs (loop5): reading snapshots done [ 445.731618][T11944] XFS (loop4): Quotacheck needed: Please wait. [ 445.744882][ T5923] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 445.769289][T11950] bcachefs (loop5): loop5: Superblock write was silently dropped! (seq 0 expected 42) [ 445.782054][T11950] bcachefs (loop5): done starting filesystem [ 445.887865][T11944] XFS (loop4): Quotacheck: Done. [ 445.957764][ T5923] usb 10-1: Using ep0 maxpacket: 8 [ 446.006734][T11950] bcachefs (loop5): shutdown by ioctl type 2emergency read only at seq 2 [ 446.015709][ T10] bcachefs (loop5): going read-only [ 446.022330][ T5923] usb 10-1: config 0 has no interfaces? [ 446.032082][ T10] bcachefs (loop5): finished waiting for writes to stop [ 446.059331][ T5923] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 446.088424][ T5923] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.101498][ T5923] usb 10-1: Product: syz [ 446.105783][ T5923] usb 10-1: Manufacturer: syz [ 446.118003][ T10] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2 [ 446.148522][ T5923] usb 10-1: SerialNumber: syz [ 446.156558][T11446] bcachefs (loop5): shutting down [ 446.160711][ T10] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 2 [ 446.177207][ T5923] usb 10-1: config 0 descriptor?? [ 446.185396][T10030] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 446.204590][ T10] bcachefs (loop5): unclean shutdown complete, journal seq 2 [ 446.229409][ T10] bcachefs (loop5): done going read-only, filesystem not clean [ 446.317082][T11446] bcachefs (loop5): shutdown complete [ 446.413346][ T5923] usb 10-1: USB disconnect, device number 15 [ 447.273312][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'. [ 447.362703][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'. [ 447.452270][T12009] loop0: detected capacity change from 0 to 1024 [ 447.629164][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 447.629190][ T30] audit: type=1800 audit(1753915041.260:60): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2083" name="file2" dev="loop0" ino=20 res=0 errno=0 [ 447.664360][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2087'. [ 447.682677][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2087'. [ 447.694236][ T2970] hfsplus: request for non-existent node 33554434 in B*Tree [ 447.694474][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2087'. [ 447.712989][ T2970] hfsplus: request for non-existent node 33554434 in B*Tree [ 447.714587][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2087'. [ 447.901886][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 448.005325][T12023] loop3: detected capacity change from 0 to 2048 [ 448.051602][T12023] Dev loop3: RDB in block 1 has bad checksum [ 448.071565][T11997] loop4: detected capacity change from 0 to 32768 [ 448.095426][ T998] Bluetooth: (null): Invalid header checksum [ 448.098550][T11997] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2078 (11997) [ 448.116734][ T998] Bluetooth: (null): Invalid header checksum [ 448.152199][T12028] overlayfs: failed to clone upperpath [ 448.181546][T11997] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 448.208156][T11997] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 448.240762][T12025] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.288167][T11997] BTRFS info (device loop4): using free-space-tree [ 448.648669][ T30] audit: type=1800 audit(1753915042.280:61): pid=11997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2078" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 448.713779][ T30] audit: type=1800 audit(1753915042.350:62): pid=12059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2078" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 448.734488][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.753087][T12057] loop9: detected capacity change from 0 to 4096 [ 448.765092][T12060] loop3: detected capacity change from 0 to 512 [ 448.765840][T12057] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 448.795201][T12060] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.809800][T12060] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 448.847868][T12060] EXT4-fs (loop3): 1 truncate cleaned up [ 448.871308][T12060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.896578][T12057] ntfs3(loop9): ino=0, attr_set_size [ 448.922000][T12057] ntfs3(loop9): ino=0, attr_set_size [ 448.957909][T12057] ntfs3(loop9): ino=0, attr_set_size [ 448.969520][T12064] EXT4-fs (loop3): shut down requested (2) [ 449.093828][T10030] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 449.136338][T12065] ntfs3(loop9): no free space to extend mft [ 449.436764][ T8727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.522242][T12071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2100'. [ 449.655024][T12073] loop5: detected capacity change from 0 to 512 [ 449.719559][T12073] EXT4-fs: Ignoring removed bh option [ 449.750251][T12073] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 449.822526][T12073] EXT4-fs (loop5): 1 truncate cleaned up [ 449.860346][T12073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.414448][T11446] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 450.452171][T11446] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 450.469982][T12095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.834742][T11446] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.932421][ T12] bridge_slave_1: left allmulticast mode [ 450.940636][ T12] bridge_slave_1: left promiscuous mode [ 450.975658][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.032249][ T12] bridge_slave_0: left allmulticast mode [ 451.039337][ T12] bridge_slave_0: left promiscuous mode [ 451.062028][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.315451][T12105] loop0: detected capacity change from 0 to 4096 [ 451.392574][T12105] NILFS (loop0): invalid segment: Checksum error in segment payload [ 451.406909][T12105] NILFS (loop0): trying rollback from an earlier position [ 451.510348][T12105] NILFS (loop0): recovery complete [ 451.563165][T12107] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 452.156508][T12115] input: syz1 as /devices/virtual/input/input25 [ 452.298761][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2119'. [ 452.617929][T12123] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2121'. [ 453.019690][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.106628][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.117931][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.127117][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 453.135205][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 453.446994][ T30] audit: type=1326 audit(1753915047.060:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041db8e9a9 code=0x7fc00000 [ 453.571512][ T30] audit: type=1326 audit(1753915047.060:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041db8e9a9 code=0x7fc00000 [ 453.671108][ T30] audit: type=1326 audit(1753915047.060:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041db8e9a9 code=0x7fc00000 [ 453.697258][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.716758][ T30] audit: type=1326 audit(1753915047.060:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12125 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041db8e9a9 code=0x7fc00000 [ 454.071025][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 454.130877][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.144531][ T12] bond0 (unregistering): Released all slaves [ 454.225054][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.231513][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.281265][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.338249][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.360468][ T10] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 454.376087][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.419253][ T10] usb 1-1: config 0 descriptor?? [ 454.966263][T12153] overlayfs: failed to clone lowerpath [ 455.252393][ T12] hsr_slave_0: left promiscuous mode [ 455.258255][ T5851] Bluetooth: hci2: command tx timeout [ 455.267488][ T10] hid-led 0003:27B8:01ED.0017: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 455.281011][ T12] hsr_slave_1: left promiscuous mode [ 455.287182][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.315575][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.334107][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.341625][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.368693][ T10] hid-led 0003:27B8:01ED.0017: ThingM blink(1) v1 initialized [ 455.405610][ T12] veth1_macvtap: left promiscuous mode [ 455.415086][ T12] veth0_macvtap: left promiscuous mode [ 455.432672][ T12] veth1_vlan: left promiscuous mode [ 455.448351][ T12] veth0_vlan: left promiscuous mode [ 455.469937][ T10] usb 1-1: USB disconnect, device number 10 [ 456.745646][ T12] team0 (unregistering): Port device team_slave_1 removed [ 456.796937][T12176] overlayfs: failed to clone upperpath [ 456.819289][ T12] team0 (unregistering): Port device team_slave_0 removed [ 457.342637][ T5851] Bluetooth: hci2: command tx timeout [ 457.966621][ T5944] IPVS: starting estimator thread 0... [ 458.084326][T12188] IPVS: using max 26 ests per chain, 62400 per kthread [ 458.255579][T12196] loop4: detected capacity change from 0 to 512 [ 458.267864][T12196] EXT4-fs: Ignoring removed mblk_io_submit option [ 458.282489][T12196] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 458.480100][T12196] EXT4-fs (loop4): 1 truncate cleaned up [ 458.533895][T12196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.684525][T12136] chnl_net:caif_netlink_parms(): no params data found [ 458.758431][T12204] EXT4-fs (loop4): shut down requested (2) [ 459.069156][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.298068][T12136] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.326123][T12136] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.359995][T12136] bridge_slave_0: entered allmulticast mode [ 459.368416][T12136] bridge_slave_0: entered promiscuous mode [ 459.377764][T12136] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.423963][ T5863] Bluetooth: hci2: command tx timeout [ 459.450588][T12136] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.467375][T12136] bridge_slave_1: entered allmulticast mode [ 459.491671][T12136] bridge_slave_1: entered promiscuous mode [ 459.547384][T12136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.562966][T12136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.644935][T12136] team0: Port device team_slave_0 added [ 459.656815][T12136] team0: Port device team_slave_1 added [ 459.701144][T12136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.709024][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.736250][T12136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.750430][T12136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.757474][T12136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.783590][T12136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.845874][T12136] hsr_slave_0: entered promiscuous mode [ 459.852997][T12136] hsr_slave_1: entered promiscuous mode [ 459.860436][T12136] debugfs: 'hsr0' already exists in 'hsr' [ 459.866314][T12136] Cannot create hsr debugfs directory [ 460.116522][T12136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.155934][T12136] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.175407][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.182608][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.194302][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.201524][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.320434][ T30] audit: type=1326 audit(1753915053.960:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055598e9a9 code=0x7fc00000 [ 460.534032][T12136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.867607][T12136] veth0_vlan: entered promiscuous mode [ 460.887274][T12136] veth1_vlan: entered promiscuous mode [ 460.921421][T12136] veth0_macvtap: entered promiscuous mode [ 460.933818][T12136] veth1_macvtap: entered promiscuous mode [ 460.959655][T12136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.978055][T12136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.100165][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.108515][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.157824][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.166499][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.363241][T12250] bond0: entered promiscuous mode [ 461.372197][T12250] bond_slave_0: entered promiscuous mode [ 461.382417][T12250] bond_slave_1: entered promiscuous mode [ 461.390976][T12250] team0: entered promiscuous mode [ 461.404396][T12250] team_slave_0: entered promiscuous mode [ 461.435668][T12250] team_slave_1: entered promiscuous mode [ 461.443634][ T5863] Bluetooth: hci4: command 0x0406 tx timeout [ 461.501060][ T5863] Bluetooth: hci2: command tx timeout [ 461.570122][ T55] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 461.579789][T12246] bond0: left promiscuous mode [ 461.592492][T12246] bond_slave_0: left promiscuous mode [ 461.625680][T12246] bond_slave_1: left promiscuous mode [ 461.640877][T12246] team0: left promiscuous mode [ 461.666571][T12246] team_slave_0: left promiscuous mode [ 461.698430][T12246] team_slave_1: left promiscuous mode [ 461.770437][ T55] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.398684][T12248] loop4: detected capacity change from 0 to 131072 [ 462.415839][T12248] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 462.424067][T12248] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 462.436438][T12254] loop8: detected capacity change from 0 to 512 [ 462.445428][T12248] F2FS-fs (loop4): invalid crc value [ 462.462806][ T55] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.499887][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.543968][T12254] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 462.579134][T12248] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 462.587244][T12248] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 462.630424][T12254] EXT4-fs (loop8): 1 truncate cleaned up [ 462.637794][ T55] usb 1-1: Product: syz [ 462.646315][T12254] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.678073][ T55] usb 1-1: Manufacturer: syz [ 462.716377][ T55] usb 1-1: SerialNumber: syz [ 462.718203][T12248] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 463.080222][T12268] dlm: no local IP address has been set [ 463.118216][T12268] dlm: cannot start dlm midcomms -107 [ 463.594206][T12136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.597762][ T55] cdc_ncm 1-1:1.0: bind() failure [ 463.674375][ T55] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 463.686425][ T55] cdc_ncm 1-1:1.1: bind() failure [ 463.714321][ T55] usb 1-1: USB disconnect, device number 11 [ 464.667730][T12292] loop0: detected capacity change from 0 to 4096 [ 464.694485][T12297] input: syz1 as /devices/virtual/input/input26 [ 465.058566][T12277] loop9: detected capacity change from 0 to 32768 [ 465.632109][T12316] dlm: no local IP address has been set [ 465.638099][T12316] dlm: cannot start dlm midcomms -107 [ 466.704130][T12321] loop8: detected capacity change from 0 to 32768 [ 466.759423][T12321] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 466.768445][T12321] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 466.961385][T12321] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 466.975153][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 466.989174][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 467.204745][T12334] syz.4.2189 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 467.228876][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 239ms [ 467.244809][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 467.259326][T12321] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 467.622737][T12340] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 467.637644][T12340] overlayfs: failed to set xattr on upper [ 467.644592][T12340] overlayfs: ...falling back to redirect_dir=nofollow. [ 467.652199][T12340] overlayfs: ...falling back to index=off. [ 467.853266][T12338] loop9: detected capacity change from 0 to 32768 [ 468.052717][T12338] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 468.052752][T12338] allowing incompatible features above 0.0: (unknown version) [ 468.052774][T12338] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 468.086542][T12338] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0 [ 468.095226][T12338] bcachefs (loop9): recovering from clean shutdown, journal seq 15 [ 468.104196][T12338] bcachefs (loop9): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 468.104196][T12338] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 468.173066][T12338] bcachefs (loop9): btree node read error at btree alloc level 0/0 [ 468.173163][T12338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a64f6cc698df3452 written 48 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 468.173194][T12338] loop9 node offset 0/48 bset u64s 0: checksum error, type chacha20_poly1305_80: got a27f119bba62858d23a6 should be 9948119f4b23e09f462b [ 468.173225][T12338] loop9 btree validate error [ 468.173242][T12338] flagging btree alloc lost data [ 468.173260][T12338] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 468.173284][T12338] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 468.173308][T12338] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 468.173333][T12338] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 468.173357][T12338] ret fsck_errors_not_fixed [ 468.278769][T12338] bcachefs (loop9): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 468.331535][T12338] bcachefs (loop9): check_topology... done [ 468.345975][T12338] bcachefs (loop9): accounting_read... done [ 468.365618][T12338] bcachefs (loop9): alloc_read... done [ 468.385411][T12338] bcachefs (loop9): snapshots_read... done [ 468.393722][T12338] bcachefs (loop9): check_allocations... [ 468.399679][T12338] bcachefs (loop9): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 468.399752][T12338] while marking u64s 8 type extent 4099:8:U32_MAX len 8 ver 1: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum chacha20_poly1305_80 77fa:f532966a693125aa compress incompressible ptr: 0:34:0 gen 0, fixing [ 468.446278][T12338] bcachefs (loop9): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 468.446311][T12338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq f5560e09620e825a written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 468.472775][T12338] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 468.472805][T12338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 468.504338][T12338] bcachefs (loop9): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 468.504371][T12338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a4a08c15958b7fc8 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 468.533727][T12338] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 468.533759][T12338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 468.565733][ T30] audit: type=1800 audit(1753915062.050:68): pid=12321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2185" name="file1" dev="loop8" ino=9378 res=0 errno=0 [ 468.603692][T12338] bcachefs (loop9): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 468.603725][T12338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 68ba4c6599367 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 468.632231][T12338] bcachefs (loop9): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 468.632264][T12338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 31ed7f7a6a187f69 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 468.660289][T12338] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 468.660322][T12338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 468.685765][T12338] bcachefs (loop9): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 468.685792][T12338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a6f3a05050194d82 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 468.712100][T12338] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 468.712132][T12338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 468.741276][T12338] bcachefs (loop9): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 468.741308][T12338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b2fb6fcebb2a2f51 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 468.767196][T12338] bcachefs (loop9): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 468.767229][T12338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7f39628faed02285 written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 468.793126][T12338] bcachefs (loop9): btree ptr not marked in member info btree allocated bitmap [ 468.793158][T12338] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 468.820951][T12338] bcachefs (loop9): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 468.820984][T12338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7fd83409d5b7165 written 48 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 468.849020][T12338] bcachefs (loop9): bucket 0:36 data type btree ptr gen 0 missing in alloc btree [ 468.849053][T12338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bbca91b628560366 written 32 min_key POS_MIN durability: 1 ptr: 0:36:0 gen 0, fixing [ 468.875506][T12338] bcachefs (loop9): bucket 0:40 data type btree ptr gen 0 missing in alloc btree [ 468.875536][T12338] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 85370abb7fc040b3 written 8 min_key POS_MIN durability: 1 ptr: 0:40:0 gen 0, fixing [ 468.875568][T12338] Ratelimiting new instances of previous error [ 468.923900][T12338] done [ 468.929342][T12338] bcachefs (loop9): going read-write [ 468.952828][T12338] bcachefs (loop9): journal_replay... done [ 469.145413][T12338] bcachefs (loop9): check_alloc_info... [ 469.148935][T12338] bcachefs (loop9): hole in alloc btree missing in freespace btree [ 469.149019][T12338] device 0 buckets 26-27, fixing [ 469.182753][T12338] done [ 469.190505][T12338] bcachefs (loop9): check_lrus... done [ 469.198605][T12338] bcachefs (loop9): check_backpointers_to_extents... done [ 469.213043][T12338] bcachefs (loop9): check_extents_to_backpointers... [ 469.214780][T12338] bcachefs (loop9): scanning for missing backpointers in 5/128 buckets [ 469.238996][T12338] done [ 469.253844][T12338] bcachefs (loop9): check_inodes... done [ 469.264772][T12338] bcachefs (loop9): resume_logged_ops... done [ 469.273601][T12338] bcachefs (loop9): delete_dead_inodes... done [ 469.287231][T12338] bcachefs (loop9): Fixed errors, running fsck a second time to verify fs is clean [ 469.289016][T12374] loop3: detected capacity change from 0 to 4096 [ 469.296650][T12338] bcachefs (loop9): check_extents_to_backpointers... [ 469.303856][T12338] bcachefs (loop9): scanning for missing backpointers in 1/128 buckets [ 469.328748][T12338] done [ 469.358114][T12374] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 469.370533][T12338] bcachefs (loop9): check_inodes... done [ 469.380135][T12338] bcachefs (loop9): resume_logged_ops... done [ 469.407775][T12338] bcachefs (loop9): delete_dead_inodes... done [ 469.417887][T12338] bcachefs (loop9): done starting filesystem [ 469.690683][T12374] ntfs3(loop3): ino=0, attr_set_size [ 469.719481][T12374] ntfs3(loop3): ino=0, attr_set_size [ 469.769141][T12338] syz.9.2186 (12338) used greatest stack depth: 17320 bytes left [ 469.800600][ T7881] bcachefs (loop9): shutting down [ 469.806375][T12374] ntfs3(loop3): ino=0, attr_set_size [ 469.808609][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2204'. [ 469.814988][ T7881] bcachefs (loop9): going read-only [ 469.851815][T12384] loop4: detected capacity change from 0 to 128 [ 469.865504][ T7881] bcachefs (loop9): finished waiting for writes to stop [ 469.892643][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2204'. [ 469.945804][T12374] ntfs3(loop3): ino=0, attr_set_size [ 469.950195][ T7881] bcachefs (loop9): flushing journal and stopping allocators, journal seq 28 [ 470.003680][T12384] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 470.023012][T12384] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.054682][ T7881] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 28 [ 470.123878][ T7881] bcachefs (loop9): clean shutdown complete, journal seq 29 [ 470.137664][T12390] overlayfs: failed to clone upperpath [ 470.169199][ T7881] bcachefs (loop9): marking filesystem clean [ 470.361043][ T7881] bcachefs (loop9): shutdown complete [ 470.605368][T12399] all: renamed from lo (while UP) [ 470.919265][T10030] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 471.182143][T12403] loop0: detected capacity change from 0 to 32768 [ 471.221733][T12403] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 471.230596][T12403] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 471.300855][T12403] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 2ms [ 471.312129][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 471.320975][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 471.459325][T12417] loop4: detected capacity change from 0 to 512 [ 471.542947][T12417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 471.566181][T12417] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 471.657268][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 336ms [ 471.685100][T12417] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #12: comm syz.4.2214: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 471.713278][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 471.720345][T12403] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 472.041836][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 472.275228][ T30] audit: type=1800 audit(1753915065.910:69): pid=12403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2212" name="file1" dev="loop0" ino=9378 res=0 errno=0 [ 473.300883][ T55] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 473.460729][ T55] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 473.497582][ T55] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 473.538056][ T55] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 473.570440][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.581543][T12464] overlayfs: failed to clone upperpath [ 473.595265][T12453] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 473.617435][ T55] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 473.902096][ T55] usb 1-1: USB disconnect, device number 12 [ 473.960000][T12471] loop9: detected capacity change from 0 to 2048 [ 474.041816][T12471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 475.596554][T12513] input: syz0 as /devices/virtual/input/input27 [ 475.830044][T12511] loop4: detected capacity change from 0 to 32768 [ 476.053071][T12511] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 476.053117][T12511] allowing incompatible features above 0.0: (unknown version) [ 476.053137][T12511] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 476.091206][T12511] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 476.099471][T12511] bcachefs (loop4): initializing new filesystem [ 476.124926][T12511] bcachefs (loop4): going read-write [ 476.208389][T12511] bcachefs (loop4): marking superblocks [ 476.226616][T12511] bcachefs (loop4): initializing freespace [ 476.237070][T12511] bcachefs (loop4): done initializing freespace [ 476.246435][T12511] bcachefs (loop4): reading snapshots table [ 476.252428][T12511] bcachefs (loop4): reading snapshots done [ 476.341495][T12511] bcachefs (loop4): loop4: Superblock write was silently dropped! (seq 0 expected 42) [ 476.352444][T12511] bcachefs (loop4): done starting filesystem [ 476.529863][T12511] bcachefs (loop4): shutdown by ioctl type 2emergency read only at seq 2 [ 476.538691][ T10] bcachefs (loop4): going read-only [ 476.543929][ T10] bcachefs (loop4): finished waiting for writes to stop [ 476.600733][ T10] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 476.670958][ T10] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 2 [ 476.737061][ T10] bcachefs (loop4): unclean shutdown complete, journal seq 2 [ 476.781694][ T10] bcachefs (loop4): done going read-only, filesystem not clean [ 476.814779][T10030] bcachefs (loop4): shutting down [ 476.885408][T12537] loop3: detected capacity change from 0 to 512 [ 476.918575][T12537] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 476.970913][T10030] bcachefs (loop4): shutdown complete [ 477.132835][T12537] EXT4-fs (loop3): 1 truncate cleaned up [ 477.140992][T12537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.275035][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 477.298505][ T10] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 477.464769][ T8727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.680156][T12532] libceph: connect (1)[c::]:6789 error -101 [ 477.686453][T12532] libceph: mon0 (1)[c::]:6789 connect error [ 477.749481][T12555] ceph: No mds server is up or the cluster is laggy [ 478.139261][T12567] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2269'. [ 478.378424][ T5851] Bluetooth: hci5: command 0x0406 tx timeout [ 478.388235][ T44] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 478.394967][ T44] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 480.262407][T12598] loop3: detected capacity change from 0 to 47 [ 480.531921][T12604] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2288'. [ 481.982063][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 481.986904][T12628] loop0: detected capacity change from 0 to 512 [ 481.988348][ T44] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 482.018112][ T44] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 482.093170][T12628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.637711][T11241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.743704][T12646] loop8: detected capacity change from 0 to 4096 [ 482.764137][T12646] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 482.869073][T12646] ntfs3(loop8): ino=0, attr_set_size [ 482.882442][T12646] ntfs3(loop8): ino=0, attr_set_size [ 482.892182][T12646] ntfs3(loop8): ino=0, attr_set_size [ 482.978699][T12650] ntfs3(loop8): ino=0, attr_set_size [ 483.303527][T12635] loop9: detected capacity change from 0 to 32768 [ 483.343574][T12635] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2298 (12635) [ 483.375124][T12635] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 483.418394][T12635] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 483.427888][T12635] BTRFS info (device loop9): using free-space-tree [ 483.502248][T12660] loop3: detected capacity change from 0 to 1024 [ 483.524308][T12660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 483.603524][T12660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.899179][ T5851] Bluetooth: hci2: command tx timeout [ 484.010849][ T8727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.195700][ T7881] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 484.378895][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 484.390254][ T44] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 484.418766][ T44] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 484.593120][T12656] loop8: detected capacity change from 0 to 32768 [ 484.718726][T12656] jfs_readdir called with invalid offset! [ 485.340610][T12713] loop3: detected capacity change from 0 to 64 [ 485.556706][T12709] loop0: detected capacity change from 0 to 4096 [ 485.621981][T12709] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 485.640606][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2325'. [ 485.665558][T12717] netlink: 'syz.6.2325': attribute type 30 has an invalid length. [ 485.732554][T12693] loop4: detected capacity change from 0 to 32768 [ 485.739965][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2325'. [ 485.761508][T12717] netlink: 'syz.6.2325': attribute type 30 has an invalid length. [ 485.779257][T12709] ntfs3(loop0): ino=0, attr_set_size [ 485.796173][T12709] ntfs3(loop0): ino=0, attr_set_size [ 485.809580][T12720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.844653][T12721] ntfs3(loop0): ino=0, attr_set_size [ 485.935154][T12709] ntfs3(loop0): ino=0, attr_set_size [ 485.979035][ T5851] Bluetooth: hci2: command tx timeout [ 486.192866][T12724] loop8: detected capacity change from 0 to 128 [ 486.220491][T12726] loop9: detected capacity change from 0 to 512 [ 486.336888][T12724] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 486.339984][T12733] loop0: detected capacity change from 0 to 2048 [ 486.418472][T12724] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 486.422427][T12726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.498150][T12733] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.519613][T12726] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.654119][ T30] audit: type=1800 audit(1753915080.290:70): pid=12726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2328" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 486.722587][ T30] audit: type=1800 audit(1753915080.320:71): pid=12726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2328" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 486.786266][ T30] audit: type=1800 audit(1753915080.320:72): pid=12726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2328" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 486.795435][T12136] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 487.022567][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 487.046265][ T44] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 487.098517][ T44] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 487.350409][ T7881] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.480379][T12532] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 488.651299][T12532] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.683789][T12532] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 488.694934][T12785] loop4: detected capacity change from 0 to 2048 [ 488.721738][T12532] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 488.738390][T12532] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.756202][T12785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 488.776467][T12532] usb 10-1: Product: syz [ 488.785773][T12532] usb 10-1: Manufacturer: syz [ 488.794420][T12532] usb 10-1: SerialNumber: syz [ 488.809987][T12532] cdc_mbim 10-1:1.0: skipping garbage [ 489.016577][T12779] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 489.155826][ T30] audit: type=1800 audit(1753915082.790:73): pid=12800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2356" name="nullb0" dev="tmpfs" ino=2940 res=0 errno=0 [ 489.158497][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 489.384211][ T24] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 489.403021][ T24] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 489.415530][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 489.442855][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.474012][T12791] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 489.505002][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.625410][T12810] block nbd4: NBD_DISCONNECT [ 489.635107][T12810] block nbd4: Send disconnect failed -22 [ 489.649982][T12810] block nbd4: Disconnected due to user request. [ 489.652447][T12779] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 489.656885][T12810] block nbd4: shutting down sockets [ 489.664543][ T44] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 489.664580][ T44] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 489.664745][ C0] ------------[ cut here ]------------ [ 489.665206][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 489.665472][ C0] WARNING: CPU: 0 PID: 12810 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 489.665539][ C0] Modules linked in: [ 489.665610][ C0] CPU: 0 UID: 0 PID: 12810 Comm: syz.4.2360 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 489.665671][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.665695][ C0] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 489.665738][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 e0 09 ac 8b e8 85 19 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 96 82 38 00 90 0f 0b 90 e9 1b f6 ff [ 489.665775][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 489.665804][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3658 [ 489.665828][ C0] RDX: ffff88805f3fbc00 RSI: ffffffff817a3665 RDI: 0000000000000001 [ 489.665854][ C0] RBP: ffff88807f23c970 R08: 0000000000000001 R09: 0000000000000000 [ 489.665878][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000000f8f [ 489.665902][ C0] R13: 0000000000000101 R14: ffff88807b7a7178 R15: 0000000000000001 [ 489.665928][ C0] FS: 00007fcf0189c6c0(0000) GS:ffff888124725000(0000) knlGS:0000000000000000 [ 489.665960][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.665987][ C0] CR2: 000000110c311c59 CR3: 0000000049237000 CR4: 0000000000350ef0 [ 489.666013][ C0] Call Trace: [ 489.666025][ C0] [ 489.666046][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.666100][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 489.666155][ C0] call_timer_fn+0x19a/0x620 [ 489.666267][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 489.666348][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.666402][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.666455][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 489.666503][ C0] __run_timers+0x569/0x960 [ 489.666571][ C0] ? __pfx___run_timers+0x10/0x10 [ 489.666636][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.666706][ C0] run_timer_base+0x114/0x190 [ 489.666764][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 489.666819][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.666871][ C0] run_timer_softirq+0x1a/0x40 [ 489.666928][ C0] handle_softirqs+0x219/0x8e0 [ 489.666992][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 489.667043][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.667094][ C0] __irq_exit_rcu+0x109/0x170 [ 489.667148][ C0] irq_exit_rcu+0x9/0x30 [ 489.667192][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 489.667240][ C0] [ 489.667253][ C0] [ 489.667269][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 489.667311][ C0] RIP: 0010:vprintk_emit+0x567/0x6d0 [ 489.667365][ C0] Code: 00 4d 85 ed 0f 85 19 01 00 00 e8 f4 bb 20 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 52 b7 20 00 48 85 ed 0f 85 25 01 00 00 d4 bb 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 489.667402][ C0] RSP: 0018:ffffc9000395f958 EFLAGS: 00000287 [ 489.667433][ C0] RAX: 000000000002f09c RBX: 0000000000000021 RCX: ffffc9000bcfa000 [ 489.667459][ C0] RDX: 0000000000080000 RSI: ffffffff819ae326 RDI: 0000000000000007 [ 489.667483][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 489.667507][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200072bf2d [ 489.667532][ C0] R13: 0000000000000200 R14: ffff88804939da00 R15: ffffc9000395fa20 [ 489.667572][ C0] ? vprintk_emit+0x686/0x6d0 [ 489.667626][ C0] ? vprintk_emit+0x686/0x6d0 [ 489.667675][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 489.667739][ C0] dev_printk_emit+0xfa/0x140 [ 489.667802][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 489.667885][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.667931][ C0] ? find_held_lock+0x2b/0x80 [ 489.667988][ C0] __dev_printk+0xf5/0x270 [ 489.668048][ C0] _dev_warn+0xe4/0x120 [ 489.668113][ C0] ? __pfx__dev_warn+0x10/0x10 [ 489.668171][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 489.668233][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 489.668298][ C0] sock_shutdown+0x213/0x280 [ 489.668374][ C0] nbd_config_put+0x1e6/0x750 [ 489.668432][ C0] ? find_held_lock+0x2b/0x80 [ 489.668482][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.668536][ C0] nbd_release+0xb7/0x190 [ 489.668570][ C0] ? __pfx_nbd_release+0x10/0x10 [ 489.668606][ C0] blkdev_put_whole+0xb0/0xf0 [ 489.668703][ C0] bdev_release+0x47e/0x6d0 [ 489.668764][ C0] ? __pfx_blkdev_release+0x10/0x10 [ 489.668821][ C0] blkdev_release+0x15/0x20 [ 489.668875][ C0] __fput+0x402/0xb70 [ 489.668936][ C0] task_work_run+0x150/0x240 [ 489.668979][ C0] ? __pfx_task_work_run+0x10/0x10 [ 489.669020][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 489.669077][ C0] exit_to_user_mode_loop+0xeb/0x110 [ 489.669128][ C0] do_syscall_64+0x3f6/0x4c0 [ 489.669182][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.669220][ C0] RIP: 0033:0x7fcf0098e9a9 [ 489.669250][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.669287][ C0] RSP: 002b:00007fcf0189c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 489.669324][ C0] RAX: 0000000000000000 RBX: 00007fcf00bb5fa0 RCX: 00007fcf0098e9a9 [ 489.669349][ C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 489.669373][ C0] RBP: 00007fcf00a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 489.669398][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.669422][ C0] R13: 0000000000000000 R14: 00007fcf00bb5fa0 R15: 00007ffc3e1583f8 [ 489.669469][ C0] [ 489.669487][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 489.669513][ C0] CPU: 0 UID: 0 PID: 12810 Comm: syz.4.2360 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 489.669562][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.669585][ C0] Call Trace: [ 489.669598][ C0] [ 489.669612][ C0] dump_stack_lvl+0x3d/0x1f0 [ 489.669663][ C0] panic+0x71c/0x800 [ 489.669730][ C0] ? __pfx_panic+0x10/0x10 [ 489.669789][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 489.669870][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 489.669935][ C0] ? __queue_work+0xc9c/0x10f0 [ 489.669977][ C0] check_panic_on_warn+0xab/0xb0 [ 489.670039][ C0] __warn+0xf6/0x3c0 [ 489.670097][ C0] ? __queue_work+0xc9c/0x10f0 [ 489.670148][ C0] report_bug+0x3c3/0x580 [ 489.670191][ C0] ? __queue_work+0xc9c/0x10f0 [ 489.670233][ C0] handle_bug+0x184/0x210 [ 489.670289][ C0] exc_invalid_op+0x17/0x50 [ 489.670343][ C0] asm_exc_invalid_op+0x1a/0x20 [ 489.670379][ C0] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 489.670421][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 e0 09 ac 8b e8 85 19 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 96 82 38 00 90 0f 0b 90 e9 1b f6 ff [ 489.670458][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 489.670489][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3658 [ 489.670515][ C0] RDX: ffff88805f3fbc00 RSI: ffffffff817a3665 RDI: 0000000000000001 [ 489.670541][ C0] RBP: ffff88807f23c970 R08: 0000000000000001 R09: 0000000000000000 [ 489.670566][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000000f8f [ 489.670590][ C0] R13: 0000000000000101 R14: ffff88807b7a7178 R15: 0000000000000001 [ 489.670668][ C0] ? __warn_printk+0x198/0x350 [ 489.670724][ C0] ? __warn_printk+0x1a5/0x350 [ 489.670787][ C0] ? __queue_work+0xc9b/0x10f0 [ 489.670832][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.670885][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 489.670929][ C0] call_timer_fn+0x19a/0x620 [ 489.670986][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 489.671038][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.671095][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.671155][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 489.671204][ C0] __run_timers+0x569/0x960 [ 489.671273][ C0] ? __pfx___run_timers+0x10/0x10 [ 489.671337][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.671409][ C0] run_timer_base+0x114/0x190 [ 489.671466][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 489.671521][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.671575][ C0] run_timer_softirq+0x1a/0x40 [ 489.671630][ C0] handle_softirqs+0x219/0x8e0 [ 489.671686][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 489.671735][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.671787][ C0] __irq_exit_rcu+0x109/0x170 [ 489.671832][ C0] irq_exit_rcu+0x9/0x30 [ 489.671875][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 489.671920][ C0] [ 489.671933][ C0] [ 489.671948][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 489.671991][ C0] RIP: 0010:vprintk_emit+0x567/0x6d0 [ 489.672039][ C0] Code: 00 4d 85 ed 0f 85 19 01 00 00 e8 f4 bb 20 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 52 b7 20 00 48 85 ed 0f 85 25 01 00 00 d4 bb 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 489.672078][ C0] RSP: 0018:ffffc9000395f958 EFLAGS: 00000287 [ 489.672123][ C0] RAX: 000000000002f09c RBX: 0000000000000021 RCX: ffffc9000bcfa000 [ 489.672149][ C0] RDX: 0000000000080000 RSI: ffffffff819ae326 RDI: 0000000000000007 [ 489.672178][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 489.672201][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200072bf2d [ 489.672226][ C0] R13: 0000000000000200 R14: ffff88804939da00 R15: ffffc9000395fa20 [ 489.672268][ C0] ? vprintk_emit+0x686/0x6d0 [ 489.672321][ C0] ? vprintk_emit+0x686/0x6d0 [ 489.672369][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 489.672433][ C0] dev_printk_emit+0xfa/0x140 [ 489.672488][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 489.672570][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.672615][ C0] ? find_held_lock+0x2b/0x80 [ 489.672669][ C0] __dev_printk+0xf5/0x270 [ 489.672728][ C0] _dev_warn+0xe4/0x120 [ 489.672785][ C0] ? __pfx__dev_warn+0x10/0x10 [ 489.672843][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 489.672901][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 489.672964][ C0] sock_shutdown+0x213/0x280 [ 489.673061][ C0] nbd_config_put+0x1e6/0x750 [ 489.673128][ C0] ? find_held_lock+0x2b/0x80 [ 489.673177][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 489.673230][ C0] nbd_release+0xb7/0x190 [ 489.673264][ C0] ? __pfx_nbd_release+0x10/0x10 [ 489.673299][ C0] blkdev_put_whole+0xb0/0xf0 [ 489.673348][ C0] bdev_release+0x47e/0x6d0 [ 489.673409][ C0] ? __pfx_blkdev_release+0x10/0x10 [ 489.673464][ C0] blkdev_release+0x15/0x20 [ 489.673517][ C0] __fput+0x402/0xb70 [ 489.673577][ C0] task_work_run+0x150/0x240 [ 489.673620][ C0] ? __pfx_task_work_run+0x10/0x10 [ 489.673661][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 489.673717][ C0] exit_to_user_mode_loop+0xeb/0x110 [ 489.673758][ C0] do_syscall_64+0x3f6/0x4c0 [ 489.673812][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.673850][ C0] RIP: 0033:0x7fcf0098e9a9 [ 489.673878][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.673914][ C0] RSP: 002b:00007fcf0189c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 489.673949][ C0] RAX: 0000000000000000 RBX: 00007fcf00bb5fa0 RCX: 00007fcf0098e9a9 [ 489.673973][ C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 489.673996][ C0] RBP: 00007fcf00a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 489.674019][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.674041][ C0] R13: 0000000000000000 R14: 00007fcf00bb5fa0 R15: 00007ffc3e1583f8 [ 489.674090][ C0] [ 489.674387][ C0] Kernel Offset: disabled