last executing test programs: 6m17.064966205s ago: executing program 3 (id=391): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 6m16.982513004s ago: executing program 3 (id=392): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6m16.76492485s ago: executing program 3 (id=396): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xf7fffff8, 0x10001, 0x64, 0xc5f, 0x8, "00000000001a00f5ff7d0d00", 0xfffffffc, 0xa}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042f"], 0x102) 6m16.537822794s ago: executing program 3 (id=397): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x102, &(0x7f00000001c0)=ANY=[], 0x0) 6m16.450952947s ago: executing program 3 (id=398): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') 6m16.276413001s ago: executing program 3 (id=400): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000ea}], 0x1, 0xc002a0, 0x0) 6m1.263693754s ago: executing program 32 (id=400): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000ea}], 0x1, 0xc002a0, 0x0) 4m38.045929305s ago: executing program 1 (id=1443): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m37.924620786s ago: executing program 1 (id=1447): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0xd0) flock(r0, 0x2) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) 4m36.252418829s ago: executing program 1 (id=1472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r0, 0x4) sendmsg$sock(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="67f1", 0xfdef}], 0x1}, 0x40840) 4m35.029198597s ago: executing program 1 (id=1474): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) 4m34.80772798s ago: executing program 1 (id=1466): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000040)={[{@errors_remount}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 4m34.395453932s ago: executing program 1 (id=1471): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) close(0x4) 4m34.056515857s ago: executing program 33 (id=1471): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) close(0x4) 3m52.802715646s ago: executing program 5 (id=1921): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 3m52.53224584s ago: executing program 5 (id=1914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3m52.190065065s ago: executing program 5 (id=1917): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0a, &(0x7f00000002c0)="0400000000000000060000007e01") 3m51.952295585s ago: executing program 5 (id=1919): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) 3m51.181088807s ago: executing program 5 (id=1925): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 3m51.180931464s ago: executing program 5 (id=1926): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0062276db8f74f7fdd09aea23fa94ad923d0fdb5a8680772f7e88064a7cad2a43e39cd0b5199dd9fb84274cab09917e9509aa3fed7804e943937"], 0x1, 0x14d3, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) 3m50.829269117s ago: executing program 34 (id=1926): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0062276db8f74f7fdd09aea23fa94ad923d0fdb5a8680772f7e88064a7cad2a43e39cd0b5199dd9fb84274cab09917e9509aa3fed7804e943937"], 0x1, 0x14d3, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) 2m40.515184627s ago: executing program 6 (id=2600): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100"}) unshare(0x20400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40000040004, 0x80000000000000, 0x6a9, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2m40.0303498s ago: executing program 6 (id=2613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f00000018"], 0x20) 2m39.798357516s ago: executing program 6 (id=2608): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0xfffffe80) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 2m39.659582127s ago: executing program 6 (id=2609): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') openat(r1, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x400, 0x114) close_range(r0, 0xffffffffffffffff, 0x0) 2m39.496144231s ago: executing program 6 (id=2621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m39.102979658s ago: executing program 6 (id=2614): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 2m23.866254055s ago: executing program 35 (id=2614): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 43.067900275s ago: executing program 7 (id=3747): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0) 42.864576815s ago: executing program 7 (id=3752): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x2, 0x0, &(0x7f00000004c0)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x107e}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000140)="14", 0x1, 0x100000002}) 42.837050499s ago: executing program 7 (id=3753): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x539}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xef}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 42.752710706s ago: executing program 7 (id=3754): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f0000000000)={[{@order_strict}], [], 0x2c}, 0x3, 0xf02, &(0x7f0000001e40)="$eJzs3U9sHNUZAPCZtdd2YideAwUDJaTQikDBDkmqprcgUI+IS++gkNAIQ2lDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFVlUqBfXQRkpcxX5vvfvs6a7H69l/v5/0+fnNm53vG69lzYxn32TA2Kqtfz1xYjHPsnc+efuRl57Mf3192Z3NNQ6vf81Dr5FlWb2lnyfb+ywsuHr5xdPbtXl2bP1r7GePXmq+djbLstXscPZp1sg+XF754oN3Hz7y0WszN7954emX92j3m9L9AACAUXTxjyt/vffvf7h/4crFQ6ey6ebyeHzeCP3ZcNx/NBwox+PlWtbez1ui1VSy3kSIWrLeRLLeZJJnsiBfPdlOvWC9qQ75JlqWbbefAAAAMIzieW0jy2tLbf1abWlp47z/us/mp/KlZ8+tnD3fp0IBAACA0v79yvpNt0IIIYQQm5ENQA1CCCGE6Gmszff5AgQAAAAwdlrnC5vZboXV3s7U1dxaY2v+7da/9FBt+9dDD3T6/ev177/8w5X//Vf9xQEAoLxRPZqM+xWPo+M8Buk8ghPJ63Z6/F9LtjO5wzqL5hUclvkGi+pMf66Dqqj+nb6P/VJUfzof5qAqqj+dp3NQFdU/XXEdZRXVv+211wFUVP++iusoq6j+/RXXUVZR/bMV11FWUf1zFddRVlH9Byquo6yi+g9WXEdZRfUPy221RfU3Kq6jrKL6Fyquo6yi+m/o7uX/6GUtZRTVf2PFdZRVVP9NFdfRL3eENv4cDiXjrefP6TndsJzjAQAAwLj7r/n/RE+iPgA1CCGEGNn4z1r/axBCCFF5rA5ADaMUr/T7AgQAAADQd/FzAfFT72tBHJ/oML5xoaF4vN7h9VMdxqc75gcAAAB+8/rZW9/KNz/nv9v58OK8UXH+pZ3OY5TOR7jT/Lud92y3+Ydl3jIAAADGS/7tT6/d98h7zy9cuXjoVMvZ77VwvhvnAZ0M1wY+Dv14X8Bc0s/jOfSp9jy1gvXS6wMHirb32C53FAAAAMZYPH9vZHltqeW8u5HVaktLk83z8cWsnp89t3LmaOjH57P8fr4+fX35g11lG5ankgEAAMBo2Tzf3+78f/M5vovZVL707LmVs+c3+nPN5fVa63WB+c3leet1gUay/FjB8uOhH5/f+d35fevLl05/b+XJXu88AAAAjInzL1x4+omVlTM/8I1vxvOb/YNRxqB90++/TAAAQK99/vnb9R8en/vtxuf/N+e/i5//Pxz6jTC335/CCvE+gfg5gC2f13+8Pc980XrPta/XSNabCDGd1D3Tsp2sZb7B+LqFonyN9u1MFeSbTfLNJfnSeQomk/VjvoPJ8vQTEHG9+WR5Og/jZJIjT/LflQEAAECx5eefeW75/AsXHjj3zBNPnXnqzLPHj5381smTRx/85oPL6/f1L7fe3Q8AAAAMo82bfvtdCQAAAAAAAAAAAAAAAAAAAIyvKh4n1u99BAAAgHH3r1eyLFsVQhTExiMw+1+HEEIIsbOID0vudx2i2pgYgBpEiNrmSVffaxFiI9bW0ifNAwAAAOytq5dfPN3abrGa9zRfc2uNjeZayBvbuQf+snA94mqXHmq/XrK/p9Uw7qr+/Zd/uPK//2pv88d/DXb/96/WvoFT5fLes/zzxdb8t012mT/d/8fK5T+S5L8n6y7/2ntJ/sfL5b83yb+/y/xb9v+5cvnvC/kXQ//I3d3mb3//p0Mb92Nfl/m/nuz/k1m3+ZP9b3SZMHF/yA8A46jW7wL2SDxKiMfRs6Ef9zccbmbp3Q87Pf6vJduZ3HXl7duNx0G3hH48XppL8kY7rX822d6BzaH6TupMDctdJUX19+p93GtF9Xf15g2AovqnKq6jrKL6pyuuo6yi+mcqrqOsovq7PQ/tt6L6h+W6clH9sxXXUVZR/XMV11FWUf0HKq6jrKL6D1ZcR1lF9c9XXEdZRfWXvKxWuaL6Fyquo6yi+m+ouI6yiuq/seI6yiqq/6aK6+iX20NbdD4czz/nw1jsN5L+9DY/y1G9tgAAAADD5p/m/xNCCCGEEEIIIfYivv+N/tfQjLW1fl+BoJ/29tPMAAwqf//Hm/d/vHn/x5v3n/8n3sOfJ/1oosP4ZIfxeofxqWQ8/X2d7jB+Y7LdtSCO39Rh/Esdxg92GL+lw/hih/FbO4zf1mH89g7jAAAAjIebQ+v8EAAAAEbXS7/4+I1f3fP45YUrFw+dyqa2zDt/NPSnw//WXw/9dN77qB7+5/+j0P9ZaH8X2r8l67v/BAAAAPZefE6M//8DAADA6IrPKXX+DwAAAKNrIbTO/wEAAGB03RBa5/8AAAAwwvKZ7ReHNl4XuCu03c7rBwAMvi+H9o7QHgrtnaH9SmjjccDdof1qRfUBAL3z0+/8+ORb+eZ8/8eT8atheWy3WN24UpDX2mfy3xfa/aH9Wpf1pM8D6DZ/dLDLPHuVf36X+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0VFb/3rixGKeZe988vYjP5l648/Xl93ZXOPw+tc89BpZltWbr4ujm/1fhhWvXn7xdGt7LbR5dizLs7y5PHv0UjPTbJZlq9nh7NOskX24vPLFB+8+fOSj12ZufvPC0y/v4Y+gbf8AAABgFP0vAAD//5d6H5E=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, 0x0) 42.131694113s ago: executing program 7 (id=3765): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000940), r1}}, 0x18) 41.669940595s ago: executing program 7 (id=3773): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 41.37933207s ago: executing program 36 (id=3773): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 2.889024101s ago: executing program 0 (id=4235): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x6, @mcast2, 0x8}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) 2.707035265s ago: executing program 0 (id=4238): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 2.60103115s ago: executing program 8 (id=4241): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f000000a380)={0x2020}, 0x2020) 2.179404969s ago: executing program 8 (id=4245): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0xfd}}, 0x1c, 0x0}}], 0x1, 0x8010) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 1.946148726s ago: executing program 8 (id=4249): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@multicast, @random="4e7b5543e090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x24, 0x3a, 0xff, @remote, @mcast2, {[@hopopts={0x6c}], @mlv2_query={0x82, 0x0, 0x0, 0x479, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x1, 0x8, 0x3}}}}}}, 0x0) 1.781046732s ago: executing program 8 (id=4252): r0 = msgget$private(0x0, 0x3ac) msgsnd(r0, &(0x7f0000006440)=ANY=[@ANYRESHEX], 0x8, 0x0) msgsnd(r0, &(0x7f0000001880)=ANY=[@ANYRESDEC=r0], 0x39, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x0) 1.692519737s ago: executing program 0 (id=4253): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r0, r0, 0x0, 0x1000000201005) 1.533444037s ago: executing program 0 (id=4256): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.367775303s ago: executing program 0 (id=4260): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0058a0c934b1116842c95456a6124e8b62df9c48c54d4d8163efc13ca3a6e27eb7b348e0259a12cb5fafd4f195000000000000a9d5a46f70040f788bb9cacc8d0e61b449aa71d459ac8493fdf304a7f762a07e73925cd978bd1dc9443b687a38b9498c6947a978050d45a6e6838e43f76c3b0eb5f7a76ad1d0ab329ef77f8c1aeec8617fa5e243d4ed850500000046096b51f43b599e844afd4329d7d333b48a97f39e"], 0x1, 0x483, &(0x7f0000000580)="$eJzs201vG0Ucx/HfbGJ34xZwn9yCKmEJiaIiSuy0pE8ghZa0SH2gbYJAKEEhcYLVxInitGoqaCtx6BEoEgiJAxx6QagKElzgwAFuvAMu3HrggjlxAqHdzHrXjtuk+CFx8v1IiSe7/92dnZmdnc2OBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApJdf6evOmNXOBQAAaKWzFy90Z7n/AwCwoQzw/A8AALCRGDn6REY/floyZ/y/F7mn84XLVwdP9NferMv4W3b48d6Pm8n2HDj4Qu+h4PPB2zfa4zp3caAvfXx6amY2VyzmxtKDhfzo9FhuxXuod/tq+/wCSE9dujw2Pl5MZ/f3VKy+mry3aXMqebQ3dezpIHbwRH//xUhMZ+x/H32J+43w43J0S0alj++as5Ic1V8Wy7SdZuvyT2KffxKDJ/r9E5nMjxTmvJUmKAinskziQRm1oC7qskPy8mXijXlmi8lRUUY7UyVzTlJHUA7P+v8YXn4HTkOy8dC8fA5JSqsN6mwN2yRHB2V0+3BSr3llFtR/p/T+amcOTdcpR3dltPelkjnv9wfe9eR1m6dfT79aGJ+OxBpjr6h2vz+00hrvm1w5Outf8SVzYbUzg5bzBktDMjowcMUfV8gflz52tPfkqYHoCGPXMvvxYvfb9EruybHI0MGs0hgCAAAAAAAAWO9c42hYRp9/6/p/p+07IGwQxtHzMvrrVMl/NR6dl9ARmd9R1u7vfpqb/y73+PTM/Gx+4t25musTbt87xbnZkdHaq9XlXXwV/w5fbh5DnWLG0SEZ3fh3ITxu0nhp2w2EB7pzLMyba6rW+u3m0cX5LME7hCP9u6Lpmll+iPdjSXtc+iegMYxx1Cej8R9227kfCS3pg2zcdzL688s9Ns6Je0HBZZr0f7vj+clctxf7s4y++ieI9aeZabON3R7GZrxYR0YfnamM3WJjd4SxWS/2pIx+Ga4duzOM7fFiP5DRzB/pIDbhxT5pY1Nh7P7R6cmxphXwGuf1/9dltO3FtAnq0paX7WY7yrF33gv7+5vVO7pPn19v/5+MLLtp2+E9r70O7/bbnt9endrt9ZaMvvl+j41bbCtxu36r/ztsr2/IaOLXytiEjd0WxmZWXLBtwqv/t2WULSyUy8bWv62ByP0/Uv9PVLeOJtX/1siypD3upsacOiQV569dGpmczM2SIEGCRDmx2j0TWsG7/38mozfP/1Ye79j7vx1Wh+O/v6+H9/8j1Ttq0v1/W2TZETsaiXVK7tzUTCwlucX5a8/lp0YmchO5Qk82c7j78IHeTCwejO3CVN1FtS7F7LPalQ+/Lj+fVY7/ao//E9U7alL9b48sS1SMV+o+ddj6/11Gb/20UH6OftD4P3jOeuapxc/y9dmk+t8RWZa0x32kMacOAAAAAAAAAAAAAAAAAG0tZhzdlpE71GmC70atZP7fki9MNWn+VyqybKxF31eou1ABoA04cvSFjPaqZG54C7ZIZ6KfWNf+CwAA//8n8SDK") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 1.207990375s ago: executing program 4 (id=4263): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x124, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_ACT={0xe4, 0x1, [@m_tunnel_key={0xe0, 0xf, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x85, 0x6, "49faabd009eada9d7be60c407dafa92f49e8cd3a8f4fa8421129f6125120e80ad1f39b81fe547f4b02f63246313a813a99ecef91e6d9ef24aa123d4ec0ae96adae785c4e501ba800b202cd14d8c0016fc9c4f3ebc53feced9d30abb38c8943dce2293b002415feb1aef9c5838b7441da572c3dbb88fe9a038660b5a726819d6ad3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xec}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x124}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.128374702s ago: executing program 4 (id=4264): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) accept4(r0, &(0x7f00000000c0)=@nl=@unspec, 0x0, 0x800) 993.634914ms ago: executing program 9 (id=4265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05022cbd7000fbdbdf252b0000000a0001007770616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x24004000) 856.565929ms ago: executing program 4 (id=4266): fallocate(0xffffffffffffffff, 0x0, 0x9e1f, 0x575) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x17, 0x1000, &(0x7f00000a2000/0x1000)=nil}) 820.965794ms ago: executing program 2 (id=4267): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1000, 0x300}) 745.508499ms ago: executing program 8 (id=4268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}], 0x4) 688.614394ms ago: executing program 9 (id=4269): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r0, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 688.325254ms ago: executing program 0 (id=4270): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) 668.236177ms ago: executing program 4 (id=4271): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 598.374213ms ago: executing program 2 (id=4272): ioperm(0x0, 0x2, 0x3ff) ioperm(0x0, 0x40, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x51) 491.94993ms ago: executing program 8 (id=4273): r0 = msgget$private(0x0, 0x790) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0xa17}, 0x0, 0x0, 0x9, 0x5, 0xffffffff, 0x4, 0x6, 0x7, 0x85c3, 0x3}) 491.806257ms ago: executing program 9 (id=4274): r0 = socket$inet6(0xa, 0x1, 0x100) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x24004040) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 454.242494ms ago: executing program 2 (id=4275): unshare(0x2c020400) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x2, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xfffffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0x1, 0xe, 0x2b12, 0x1100, 0x6, 0x1c00, 0xb, 0x40, 0x4, 0x1, 0x3, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x5, 0x7f, 0x7, 0xa, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x400, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x20006, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x80003b, 0x2, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0xc59, 0xffffffff]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 400.922363ms ago: executing program 9 (id=4276): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) 336.176063ms ago: executing program 2 (id=4277): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c", 0xc}], 0x1}}], 0x1, 0x8040) 335.764346ms ago: executing program 4 (id=4278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{0x80000000, 0xfffff479, 0x1, 0x200, 0x7fffffff, 0x1, 0x4}, {0xa, 0x0, 0x0, 0x1, 0x8001, 0x9, 0xaf5e}]}) 247.661414ms ago: executing program 9 (id=4279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x3eea, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x394}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x7c65, 0xa334, 0x5, 0x0, 0x0) 207.604875ms ago: executing program 2 (id=4280): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00 \x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 75.628246ms ago: executing program 2 (id=4281): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000080)={[{@usrjquota}, {@errors_remount}]}, 0xfd, 0x4a4, &(0x7f0000001300)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='async\x00', 0x0, 0x0) 75.324541ms ago: executing program 9 (id=4282): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x0, 0x20421}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040891}, 0x0) 0s ago: executing program 4 (id=4283): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0]) kernel console output (not intermixed with test programs): 34 comm="syz.0.3105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff90f99e0d9 code=0x7ffc0000 [ 396.554115][ T32] audit: type=1326 audit(1786493771.836:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.3105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff90f99dd6b code=0x7ffc0000 [ 396.554151][ T32] audit: type=1326 audit(1786493771.836:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.3105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff90f99dd6b code=0x7ffc0000 [ 396.582398][ T32] audit: type=1326 audit(1786493771.856:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.3105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff90f99dd6b code=0x7ffc0000 [ 396.582452][ T32] audit: type=1326 audit(1786493771.856:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.0.3105" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff90f99dd6b code=0x7ffc0000 [ 396.604316][ T5724] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 396.613347][ T5724] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 396.613423][ T5724] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 396.613518][ T5724] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.662850][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 396.671182][T14125] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 396.792481][ T5724] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.862519][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 396.870751][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 396.870832][ T10] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 396.889485][ T10] usb 5-1: config 117 has an invalid interface number: 163 but max is 0 [ 396.889522][ T10] usb 5-1: config 117 has no interface number 0 [ 396.889583][ T10] usb 5-1: config 117 interface 163 has no altsetting 0 [ 396.920218][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.920251][ T10] usb 5-1: Product: syz [ 396.920769][ T10] usb 5-1: Manufacturer: syz [ 396.920789][ T10] usb 5-1: SerialNumber: syz [ 397.187674][ T5724] usb 8-1: USB disconnect, device number 9 [ 397.534573][T14145] loop2: detected capacity change from 0 to 512 [ 397.550816][T14145] EXT4-fs: Ignoring removed oldalloc option [ 397.557698][T14145] EXT4-fs (loop2): filesystem is read-only [ 397.562674][T14145] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 397.599935][T14145] EXT4-fs (loop2): filesystem is read-only [ 397.599974][T14145] EXT4-fs (loop2): orphan cleanup on readonly fs [ 397.602370][T14145] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.3108: bg 0: block 64: padding at end of block bitmap is not set [ 397.602455][T14145] loop2: lost filesystem error report for type 5 error -117 [ 397.611534][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 397.611610][ C1] EXT4-fs (loop2): initial error at time 1786493772: ext4_validate_block_bitmap:445 [ 397.611674][ C1] EXT4-fs (loop2): last error at time 1786493772: ext4_validate_block_bitmap:445 [ 397.642106][T14145] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 397.642177][T14145] loop2: lost filesystem error report for type 5 error -117 [ 397.646885][T14145] EXT4-fs (loop2): 1 orphan inode deleted [ 397.662118][ T10] f81534a_ctrl 5-1:117.163: probe with driver f81534a_ctrl failed with error -121 [ 397.703729][T14145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.800812][T11015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.844641][T14152] program syz.7.3113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.952315][ T5717] usb 5-1: USB disconnect, device number 29 [ 398.820296][T14187] loop7: detected capacity change from 0 to 256 [ 398.852489][T14187] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x28ba01bf, utbl_chksum : 0xe619d30d) [ 398.922916][ T5753] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 399.092293][ T5753] usb 3-1: Using ep0 maxpacket: 8 [ 399.098736][ T5753] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 399.109082][ T5753] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.120299][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.134382][ T5753] usb 3-1: config 0 descriptor?? [ 399.162111][ T5753] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 399.498625][T14202] loop4: detected capacity change from 0 to 2048 [ 399.967564][ T5753] gspca_vc032x: reg_w err -71 [ 399.967666][ T5753] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 399.996612][ T5753] usb 3-1: USB disconnect, device number 15 [ 400.499580][T14235] loop4: detected capacity change from 0 to 4096 [ 400.611288][T14238] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.232603][T14250] loop7: detected capacity change from 0 to 512 [ 401.253046][T14250] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 401.273582][T14250] EXT4-fs (loop7): 1 truncate cleaned up [ 401.278955][T14250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.292683][T14252] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 401.321415][T14252] EXT4-fs (loop7): Remounting filesystem read-only [ 401.328938][ T32] audit: type=1800 audit(1786493776.606:574): pid=14250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3155" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 401.488768][T11023] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.740151][T14268] loop8: detected capacity change from 0 to 256 [ 402.380503][T14283] loop2: detected capacity change from 0 to 256 [ 403.489994][T14301] loop7: detected capacity change from 0 to 32768 [ 403.514568][T14301] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 403.532418][T14301] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3177 (14301) [ 403.569916][T14301] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 403.580540][T14301] BTRFS info (device loop7): using crc32c checksum algorithm [ 403.709810][T14326] ubi31: attaching mtd0 [ 403.709861][T14326] ubi31 error: ubi_attach_mtd_dev: bad VID header (12293) or data offsets (12357) [ 403.781117][T14301] BTRFS info (device loop7): rebuilding free space tree [ 403.942866][T14301] BTRFS info (device loop7): disabling free space tree [ 403.950061][T14301] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 403.971095][T14301] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 404.025213][T14301] BTRFS info (device loop7): enabling ssd optimizations [ 404.036280][T14301] BTRFS info (device loop7): disabling tree log [ 404.043243][T14301] BTRFS info (device loop7): turning on sync discard [ 404.050200][T14301] BTRFS info (device loop7): force clearing of disk cache [ 404.114876][T14339] net_ratelimit: 1990 callbacks suppressed [ 404.114936][T14339] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 404.115008][T14339] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 404.115232][T14339] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 404.115294][T14339] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 404.115502][T14339] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 404.115563][T14339] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 404.115791][T14339] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 404.115849][T14339] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 404.116062][T14339] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 404.116120][T14339] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 404.472279][T11023] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 405.546948][T14362] loop2: detected capacity change from 0 to 512 [ 407.190867][T14411] loop8: detected capacity change from 0 to 256 [ 407.220724][T14411] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x28ba01bf, utbl_chksum : 0xe619d30d) [ 407.630148][T14409] loop2: detected capacity change from 0 to 32768 [ 407.637691][T14409] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 407.648070][T14409] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3214 (14409) [ 407.719782][ T5724] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 407.819220][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3223'. [ 407.830945][T14409] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 407.831013][T14409] BTRFS info (device loop2): using crc32c checksum algorithm [ 407.908164][T14419] dummy0: entered promiscuous mode [ 407.922270][ T5724] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 407.924727][ T5724] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.924841][ T5724] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 407.924902][ T5724] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 407.924957][ T5724] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.925068][ T5724] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.077392][T14409] BTRFS info (device loop2): rebuilding free space tree [ 408.253674][T14409] BTRFS info (device loop2): disabling free space tree [ 408.261149][T14409] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 408.280625][T14409] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 408.356912][T14409] BTRFS info (device loop2): enabling ssd optimizations [ 408.366153][T14409] BTRFS info (device loop2): disabling tree log [ 408.375985][T14409] BTRFS info (device loop2): turning on sync discard [ 408.384816][T14409] BTRFS info (device loop2): force clearing of disk cache [ 408.396942][ T5724] gud 8-1:1.0: Unexpected status OK for failed transfer [ 408.396987][ T5724] gud 8-1:1.0: probe with driver gud failed with error -32 [ 408.510396][T11015] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 408.607111][ T10] usb 8-1: USB disconnect, device number 10 [ 408.985516][T14452] loop4: detected capacity change from 0 to 512 [ 409.014303][T14452] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 409.041155][T14452] EXT4-fs (loop4): 1 truncate cleaned up [ 409.056861][T14452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.213072][T14459] loop2: detected capacity change from 0 to 164 [ 409.226793][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.308417][T14459] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 409.602250][T14472] loop8: detected capacity change from 0 to 512 [ 409.609707][T14472] EXT4-fs: Ignoring removed orlov option [ 409.615588][T14472] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.628061][T14471] binder: 14468:14471 ioctl c0306201 200000000640 returned -22 [ 409.645496][T14472] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.3238: corrupted in-inode xattr: e_value size too large [ 409.660123][T14472] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 409.661526][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 409.661561][ C0] EXT4-fs (loop8): initial error at time 1786493790: ext4_iget_extra_inode:5210: inode 15 [ 409.661620][ C0] EXT4-fs (loop8): last error at time 1786493790: ext4_iget_extra_inode:5210: inode 15 [ 409.703530][T14472] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.3238: couldn't read orphan inode 15 (err -117) [ 409.703573][T14472] loop8: lost filesystem error report for type 5 error -117 [ 409.744778][T14472] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.010491][T13299] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.207280][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3245'. [ 410.946424][T14490] netlink: 'syz.4.3246': attribute type 1 has an invalid length. [ 411.464390][T14506] loop7: detected capacity change from 0 to 256 [ 411.503889][T14506] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 412.263252][T14525] loop7: detected capacity change from 0 to 512 [ 412.310297][T14525] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (1966!=2687) [ 412.310344][T14525] EXT4-fs (loop7): group descriptors corrupted! [ 412.857626][T14531] loop4: detected capacity change from 0 to 128 [ 412.871960][T14531] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 412.971364][T14531] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 412.971436][T14531] FAT-fs (loop4): Filesystem has been set read-only [ 413.029551][T14536] loop8: detected capacity change from 0 to 2048 [ 413.038557][T14536] EXT4-fs: Ignoring removed nobh option [ 413.098040][T14536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.098172][T14536] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.169046][T14542] loop7: detected capacity change from 0 to 512 [ 413.257675][T14544] program syz.2.3278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.772350][T13299] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.516275][T14569] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3280'. [ 414.568155][T14555] loop4: detected capacity change from 0 to 32768 [ 414.573717][T14555] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 414.728757][T14555] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3266 (14555) [ 414.849449][T14555] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 414.849517][T14555] BTRFS info (device loop4): using crc32c checksum algorithm [ 414.944746][T14555] BTRFS info (device loop4): rebuilding free space tree [ 415.043688][T14555] BTRFS info (device loop4): disabling free space tree [ 415.043768][T14555] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 415.043828][T14555] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 415.102137][T14555] BTRFS info (device loop4): enabling ssd optimizations [ 415.102185][T14555] BTRFS info (device loop4): disabling tree log [ 415.102536][T14555] BTRFS info (device loop4): turning on sync discard [ 415.102960][T14555] BTRFS info (device loop4): force clearing of disk cache [ 415.253770][T14599] net_ratelimit: 3990 callbacks suppressed [ 415.253815][T14599] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 415.253878][T14599] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 415.273821][T14599] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 415.273904][T14599] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 415.287191][T14599] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 415.287275][T14599] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 415.301021][T14599] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 415.301098][T14599] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 415.314301][T14599] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 415.314373][T14599] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 415.408329][T14602] loop7: detected capacity change from 0 to 256 [ 415.608029][ T5616] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 415.741365][T14606] loop9: detected capacity change from 0 to 524287936 [ 416.310220][T14626] loop7: detected capacity change from 0 to 128 [ 416.338154][ T1723] block nbd0: Possible stuck request ffff888027805080: control (read@0,1024B). Runtime 120 seconds [ 416.338204][ T1723] block nbd0: Possible stuck request ffff8880277f7000: control (read@1024,3072B). Runtime 120 seconds [ 416.451098][T14626] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 416.463613][T14626] hpfs: filesystem error: improperly stopped [ 416.469738][T14626] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 416.477692][T14626] hpfs: You really don't want any checks? You are crazy... [ 416.485368][T14626] hpfs: hpfs_map_sector(): read error [ 416.490925][T14626] hpfs: code page support is disabled [ 416.497670][T14626] hpfs: hpfs_map_4sectors(): unaligned read [ 416.504017][T14626] hpfs: hpfs_map_4sectors(): unaligned read [ 416.510031][T14626] hpfs: filesystem error: unable to find root dir [ 416.577905][T14626] hpfs: hpfs_map_4sectors(): unaligned read [ 416.620081][T14626] hpfs: hpfs_map_sector(): read error [ 416.969970][T14643] nvme_fcloop: unknown parameter or missing value 'ww' [ 418.152760][T14663] loop4: detected capacity change from 0 to 1024 [ 418.255568][T14663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.290595][ T32] audit: type=1800 audit(1786493799.565:575): pid=14663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3316" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 418.316930][T14663] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3316: missing EA_INODE flag [ 418.347386][T14663] EXT4-fs (loop4): Remounting filesystem read-only [ 418.595958][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.733174][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3320'. [ 418.932420][T14682] loop7: detected capacity change from 0 to 256 [ 418.941344][T14682] exfat: Deprecated parameter 'namecase' [ 418.947174][T14682] exfat: Deprecated parameter 'namecase' [ 418.953093][T14682] exfat: Deprecated parameter 'utf8' [ 418.990732][T14682] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 419.165189][T14688] loop7: detected capacity change from 0 to 256 [ 419.309201][T14690] loop4: detected capacity change from 0 to 512 [ 419.316384][T14690] EXT4-fs: Ignoring removed nobh option [ 419.321285][T14690] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 419.340004][T14690] EXT4-fs (loop4): 1 truncate cleaned up [ 419.378663][T14690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.471415][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.706223][T14703] batadv0: entered promiscuous mode [ 419.718057][T14702] batadv0: left promiscuous mode [ 419.817695][T14698] loop8: detected capacity change from 0 to 32768 [ 419.825453][T14698] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 419.849812][T14698] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3327 (14698) [ 419.881129][T14698] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 419.881200][T14698] BTRFS info (device loop8): using crc32c checksum algorithm [ 420.023329][T14698] BTRFS info (device loop8): rebuilding free space tree [ 420.113572][T14709] loop2: detected capacity change from 0 to 32768 [ 420.121096][T14709] xfs: Deprecated parameter 'noikeep' [ 420.126727][T14709] XFS: noikeep mount option is deprecated. [ 420.160526][T14698] BTRFS info (device loop8): disabling free space tree [ 420.169905][T14709] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 420.175390][T14698] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 420.207855][T14709] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 420.239328][T14698] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 420.285783][T14698] BTRFS info (device loop8): enabling ssd optimizations [ 420.295782][T14698] BTRFS info (device loop8): disabling tree log [ 420.302914][T14698] BTRFS info (device loop8): turning on sync discard [ 420.310104][T14698] BTRFS info (device loop8): force clearing of disk cache [ 420.413353][T14709] XFS (loop2): Ending clean mount [ 420.425782][T14709] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x10 [ 420.441935][T14709] XFS (loop2): Unmount and run xfs_repair [ 420.448072][T14709] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 420.456164][T14709] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 420.465578][T14709] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80 ................ [ 420.475267][T14709] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 420.484789][T14709] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 420.494141][T14709] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 420.545320][T14709] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 420.545382][T14709] 00000060: 00 00 00 00 00 00 30 77 00 00 00 00 00 00 00 00 ......0w........ [ 420.545434][T14709] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 420.546249][T14709] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x10 len 4 error 74 [ 420.563316][T14709] loop2: lost filesystem error report for type 5 error -117 [ 420.563648][T14709] XFS (loop2): Failed to initialize disk quotas, err -117. [ 420.611998][T14736] erspan0: entered promiscuous mode [ 420.796880][T13299] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 420.829318][T11015] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 420.829842][T11015] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 421.074805][T14731] loop4: detected capacity change from 0 to 32768 [ 421.168880][T14731] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 421.256238][T14731] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 421.287349][T14731] XFS (loop4): Starting recovery (logdev: internal) [ 421.370772][T14731] XFS (loop4): Ending recovery (logdev: internal) [ 421.395806][T14739] loop7: detected capacity change from 0 to 32768 [ 421.482256][T14731] XFS (loop4): Metadata corruption detected at xfs_btree_lookup_get_block+0x2f6/0x4f0, xfs_bnobt block 0x8 [ 421.482333][T14731] XFS (loop4): Unmount and run xfs_repair [ 421.633951][ T5616] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 421.637757][ T5616] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 422.010766][T14749] loop2: detected capacity change from 0 to 32768 [ 422.427763][ T5632] Bluetooth: hci5: link tx timeout [ 422.427906][ T5632] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 422.447024][ T5632] Bluetooth: hci5: link tx timeout [ 422.447041][ T5632] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 422.793085][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3357'. [ 422.793134][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3357'. [ 422.862467][ T85] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.881043][ T85] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.890694][ T85] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.900520][ T85] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.366695][T14807] loop2: detected capacity change from 0 to 128 [ 423.384116][T14807] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 423.384194][T14807] hpfs: filesystem error: improperly stopped [ 423.384215][T14807] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 423.384235][T14807] hpfs: You really don't want any checks? You are crazy... [ 423.386616][T14807] hpfs: hpfs_map_sector(): read error [ 423.386648][T14807] hpfs: code page support is disabled [ 423.422237][T14807] hpfs: hpfs_map_4sectors(): unaligned read [ 423.422460][T14807] hpfs: hpfs_map_4sectors(): unaligned read [ 423.422490][T14807] hpfs: filesystem error: unable to find root dir [ 423.495885][T14807] hpfs: hpfs_map_4sectors(): unaligned read [ 423.496429][T14807] hpfs: hpfs_map_sector(): read error [ 423.742341][T14816] loop8: detected capacity change from 0 to 2048 [ 423.754204][T14816] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 423.768927][T14816] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.955767][T14823] loop7: detected capacity change from 0 to 1024 [ 424.033792][T14831] loop2: detected capacity change from 0 to 1024 [ 424.039788][T14823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.072475][ T32] audit: type=1800 audit(1786493805.355:576): pid=14823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3375" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 424.173185][T14831] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 424.206516][T14831] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 424.206565][T14831] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.3374: Failed to acquire dquot type 0 [ 424.206590][T14831] loop2: lost filesystem error report for type 5 error -117 [ 424.216318][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 424.216345][ C0] EXT4-fs (loop2): initial error at time 1786493805: ext4_acquire_dquot:7069 [ 424.216368][ C0] EXT4-fs (loop2): last error at time 1786493805: ext4_acquire_dquot:7069 [ 424.265649][T14831] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 424.283354][T14831] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #13: comm syz.2.3374: corrupted inode contents [ 424.283394][T14831] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 424.295944][T14831] EXT4-fs error (device loop2): ext4_dirty_inode:6731: inode #13: comm syz.2.3374: mark_inode_dirty error [ 424.295996][T14831] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 424.304607][T14831] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #13: comm syz.2.3374: corrupted inode contents [ 424.305663][T14831] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 424.309434][T14831] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.3374: mark_inode_dirty error [ 424.309506][T14831] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 424.314810][T14831] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #13: comm syz.2.3374: corrupted inode contents [ 424.314928][T14831] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 424.321344][T14831] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 424.321402][T14831] loop2: lost filesystem error report for type 5 error -117 [ 424.333217][T14831] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #13: comm syz.2.3374: corrupted inode contents [ 424.333281][T14831] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 424.337873][T14831] EXT4-fs error (device loop2): ext4_truncate:4721: inode #13: comm syz.2.3374: mark_inode_dirty error [ 424.337940][T14831] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 424.343250][T14831] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 424.343295][T14831] loop2: lost filesystem error report for type 5 error -117 [ 424.360791][T14831] EXT4-fs (loop2): 1 truncate cleaned up [ 424.405621][T14823] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.3375: missing EA_INODE flag [ 424.433202][T14831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.485169][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 424.527075][T14835] loop8: detected capacity change from 0 to 512 [ 424.545756][T14823] EXT4-fs (loop7): Remounting filesystem read-only [ 424.563188][T14835] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 424.584403][T14831] EXT4-fs (loop2): shut down requested (2) [ 424.625243][T11015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.636686][T14835] EXT4-fs (loop8): 1 truncate cleaned up [ 424.638513][T14835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.674330][T11023] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.846462][T13299] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.064059][T14848] nvme_fcloop: unknown parameter or missing value 'ww' [ 425.178852][T14850] netlink: 'syz.0.3384': attribute type 32 has an invalid length. [ 425.178903][T14850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3384'. [ 425.178932][T14850] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 425.215301][T14852] loop7: detected capacity change from 0 to 64 [ 426.127812][T14863] loop7: detected capacity change from 0 to 32768 [ 426.136899][T14863] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 426.153202][T14863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3389 (14863) [ 426.178706][T14863] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 426.189219][T14863] BTRFS info (device loop7): using sha256 checksum algorithm [ 426.213006][T14880] kAFS: Invalid Command on /proc/fs/afs/cells file [ 426.290698][T14863] BTRFS info (device loop7): rebuilding free space tree [ 426.528001][T14863] BTRFS info (device loop7): disabling free space tree [ 426.528162][T14863] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 426.528230][T14863] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 426.562510][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 426.622888][T14863] BTRFS info (device loop7): enabling ssd optimizations [ 426.622962][T14863] BTRFS info (device loop7): turning on async discard [ 426.625541][T14863] BTRFS info (device loop7): force clearing of disk cache [ 426.893980][T11023] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 427.682369][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 427.843182][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 427.845352][ T10] usb 8-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 427.848720][ T10] usb 8-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 427.848802][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 427.848894][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.892700][T14937] loop4: detected capacity change from 0 to 32768 [ 427.898503][ T10] usb 8-1: config 0 descriptor?? [ 427.906242][T14937] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 427.916652][T14937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3416 (14937) [ 427.964150][T14937] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 427.964207][T14937] BTRFS info (device loop4): using crc32c checksum algorithm [ 428.088066][T14937] BTRFS info (device loop4): rebuilding free space tree [ 428.144889][T14937] BTRFS info (device loop4): disabling free space tree [ 428.144988][T14937] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 428.145140][T14937] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 428.183281][T14953] net_ratelimit: 1990 callbacks suppressed [ 428.189292][T14953] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 428.235408][T14937] BTRFS info (device loop4): enabling ssd optimizations [ 428.235451][T14937] BTRFS info (device loop4): disabling tree log [ 428.235520][T14937] BTRFS info (device loop4): turning on sync discard [ 428.237697][T14937] BTRFS info (device loop4): force clearing of disk cache [ 428.320200][T14959] loop8: detected capacity change from 0 to 256 [ 428.373057][T14957] loop2: detected capacity change from 0 to 1024 [ 428.462939][ T10] hid_parser_main: 30 callbacks suppressed [ 428.463001][ T10] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 428.463086][ T10] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 428.463170][ T10] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 428.463246][ T10] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 428.463307][ T10] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 428.463372][ T10] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 428.463430][ T10] ntrig 0003:1B96:000A.001C: unknown main item tag 0x0 [ 428.586867][ T10] ntrig 0003:1B96:000A.001C: hidraw0: USB HID v0.02 Device [HID 1b96:000a] on usb-dummy_hcd.7-1/input0 [ 428.635471][ T5616] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 428.647999][ T10] usb 8-1: USB disconnect, device number 11 [ 429.017014][T14971] fido_id[14971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 429.468923][T14988] MTRR 1 not used [ 429.928849][T14999] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3437'. [ 430.212975][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3438'. [ 430.315421][T14997] loop8: detected capacity change from 0 to 32768 [ 430.329602][T14997] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 430.344143][T14997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3436 (14997) [ 430.430821][T14997] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 430.430884][T14997] BTRFS info (device loop8): using crc32c checksum algorithm [ 430.671345][T14997] BTRFS info (device loop8): rebuilding free space tree [ 430.744217][T14997] BTRFS info (device loop8): disabling free space tree [ 430.752731][T14997] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 430.763518][T14997] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 430.783007][T14997] BTRFS info (device loop8): enabling ssd optimizations [ 430.790884][T14997] BTRFS info (device loop8): disabling tree log [ 430.797267][T14997] BTRFS info (device loop8): turning on sync discard [ 430.806437][T14997] BTRFS info (device loop8): force clearing of disk cache [ 431.414894][T15028] block nbd1: server does not support multiple connections per device. [ 431.479257][T15028] block nbd1: shutting down sockets [ 431.546336][T15037] loop2: detected capacity change from 0 to 512 [ 431.577473][T13299] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 431.617115][ T5746] kernel write not supported for file /input/mice (pid: 5746 comm: kworker/0:6) [ 431.636894][T15037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.637023][T15037] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.734261][T15037] EXT4-fs error (device loop2): ext4_xattr_block_list:777: inode #12: comm syz.2.3448: corrupted xattr block 6: invalid header [ 431.754259][T15037] EXT4-fs (loop2): Remounting filesystem read-only [ 431.808021][T11015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.067961][T15051] loop8: detected capacity change from 0 to 256 [ 432.561678][T15063] loop7: detected capacity change from 0 to 1024 [ 432.621261][T15063] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 432.621337][T15063] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 432.621404][T15063] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.3459: Failed to acquire dquot type 0 [ 432.621740][T15063] loop7: lost filesystem error report for type 5 error -117 [ 432.631531][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 432.631615][ C1] EXT4-fs (loop7): initial error at time 1786493813: ext4_acquire_dquot:7069 [ 432.631665][ C1] EXT4-fs (loop7): last error at time 1786493813: ext4_acquire_dquot:7069 [ 432.726658][T15069] loop4: detected capacity change from 0 to 512 [ 432.733292][T15063] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 432.744127][T15063] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #13: comm syz.7.3459: corrupted inode contents [ 432.744252][T15063] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 432.759020][T15063] EXT4-fs error (device loop7): ext4_dirty_inode:6731: inode #13: comm syz.7.3459: mark_inode_dirty error [ 432.759139][T15063] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 432.763886][T15063] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #13: comm syz.7.3459: corrupted inode contents [ 432.763973][T15063] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 432.766765][T15063] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #13: comm syz.7.3459: mark_inode_dirty error [ 432.766835][T15063] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 432.768091][T15063] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #13: comm syz.7.3459: corrupted inode contents [ 432.768187][T15063] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 432.769267][T15063] EXT4-fs error (device loop7) in ext4_orphan_del:304: Corrupt filesystem [ 432.769290][T15063] loop7: lost filesystem error report for type 5 error -117 [ 432.769658][T15063] EXT4-fs error (device loop7): ext4_do_update_inode:5801: inode #13: comm syz.7.3459: corrupted inode contents [ 432.769723][T15063] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 432.780636][T15063] EXT4-fs error (device loop7): ext4_truncate:4721: inode #13: comm syz.7.3459: mark_inode_dirty error [ 432.780715][T15063] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 432.786062][T15063] EXT4-fs error (device loop7) in ext4_process_orphan:346: Corrupt filesystem [ 432.786133][T15063] loop7: lost filesystem error report for type 5 error -117 [ 432.946586][T15063] EXT4-fs (loop7): 1 truncate cleaned up [ 432.979587][T15063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.011324][T15063] EXT4-fs (loop7): shut down requested (2) [ 433.357287][T11023] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.133031][ T5724] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 434.191344][T15095] loop2: detected capacity change from 0 to 1024 [ 434.352513][ T5724] usb 9-1: unable to get BOS descriptor or descriptor too short [ 434.352598][ T5724] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 434.358673][ T5724] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 434.358758][ T5724] usb 9-1: can't read configurations, error -71 [ 434.864730][T15115] loop4: detected capacity change from 0 to 256 [ 434.940002][T15115] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 434.957854][T15117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 434.958279][T15117] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 434.958864][T15117] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 434.959239][T15117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 434.981340][T15117] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 434.982256][T15117] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 435.543205][T15141] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3486'. [ 435.757040][T15149] vlan2: entered allmulticast mode [ 435.757090][T15149] dummy0: entered allmulticast mode [ 435.839347][T15153] loop4: detected capacity change from 0 to 128 [ 435.858235][T15153] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 435.887369][T15153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.005338][T15147] loop2: detected capacity change from 0 to 32768 [ 436.014934][T15147] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 436.026282][T15147] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3492 (15147) [ 436.057113][T15147] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 436.067702][T15147] BTRFS info (device loop2): using sha256 checksum algorithm [ 436.163556][ T3010] IPVS: starting estimator thread 0... [ 436.172271][T15147] BTRFS info (device loop2): rebuilding free space tree [ 436.251653][T15173] IPVS: using max 28 ests per chain, 67200 per kthread [ 436.284315][T15147] BTRFS info (device loop2): disabling free space tree [ 436.284457][T15147] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 436.287490][T15147] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 436.335416][T15177] loop8: detected capacity change from 0 to 256 [ 436.344608][T15147] BTRFS info (device loop2): enabling ssd optimizations [ 436.344646][T15147] BTRFS info (device loop2): turning on async discard [ 436.344696][T15147] BTRFS info (device loop2): force clearing of disk cache [ 436.415352][T11015] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 436.449676][T15178] macvlan0: entered promiscuous mode [ 436.459124][T15178] netlink: 'syz.4.3498': attribute type 1 has an invalid length. [ 436.459168][T15178] netlink: 'syz.4.3498': attribute type 2 has an invalid length. [ 436.972654][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout [ 437.002902][ T5724] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 437.049704][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 437.049761][ T5631] Bluetooth: hci4: command 0x0c1a tx timeout [ 437.049807][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 437.049839][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout [ 437.049898][ T5631] Bluetooth: hci3: command 0x0c1a tx timeout [ 437.103387][T15188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.126301][T15188] team0: Port device bond1 added [ 437.154943][ T5724] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.156230][ T5724] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 437.156274][ T5724] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 437.156298][ T5724] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.156345][ T5724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 437.156385][ T5724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 437.158692][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.158720][ T5724] usb 5-1: Product: syz [ 437.158748][ T5724] usb 5-1: Manufacturer: syz [ 437.249084][ T5724] cdc_wdm 5-1:1.0: skipping garbage [ 437.249123][ T5724] cdc_wdm 5-1:1.0: skipping garbage [ 437.324871][ T5724] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 437.324917][ T5724] cdc_wdm 5-1:1.0: Unknown control protocol [ 437.462902][T15195] loop2: detected capacity change from 0 to 32768 [ 437.472730][T15195] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 437.489640][T15195] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3506 (15195) [ 437.518787][T15195] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 437.518836][T15195] BTRFS info (device loop2): using crc32c checksum algorithm [ 437.635803][T15195] BTRFS info (device loop2): rebuilding free space tree [ 437.680905][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3509'. [ 437.713280][ T1731] usb 5-1: USB disconnect, device number 30 [ 437.731682][T15195] BTRFS info (device loop2): disabling free space tree [ 437.738743][T15195] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 437.748676][T15195] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 437.776749][T15195] BTRFS info (device loop2): enabling ssd optimizations [ 437.784100][T15195] BTRFS info (device loop2): disabling tree log [ 437.790463][T15195] BTRFS info (device loop2): turning on sync discard [ 437.797801][T15195] BTRFS info (device loop2): force clearing of disk cache [ 438.079143][T11015] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 438.291554][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 438.463233][ T10] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 438.485887][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.485949][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 438.485993][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 438.486040][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 438.486070][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 438.486108][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 438.486133][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 438.486159][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 438.486185][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 438.486209][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 438.486236][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 438.486263][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 438.486291][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 438.486317][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 438.598473][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.598498][ T10] usb 8-1: Product: syz [ 438.598512][ T10] usb 8-1: Manufacturer: syz [ 438.598526][ T10] usb 8-1: SerialNumber: syz [ 438.672598][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.672892][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.673191][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.673432][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.673680][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.674137][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.674421][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.674662][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.674907][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.675157][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.675386][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.677132][T15225] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 438.681555][ T10] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 438.683909][ T10] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 438.790544][ T10] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 438.800848][ T10] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 438.832644][ T10] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 439.319656][T15237] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.365155][ T5724] usb 8-1: USB disconnect, device number 12 [ 439.658420][ T5724] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 439.688129][ T5724] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 439.705774][ T5724] keyspan 8-1:1.0: device disconnected [ 439.718276][T15248] jffs2: notice: (15248) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 440.007127][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.007205][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.205683][T15266] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 440.377478][T15268] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 440.584070][ T5724] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 440.742475][ T5724] usb 8-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 440.753457][ T5724] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 440.753504][ T5724] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 132, setting to 64 [ 440.778769][ T5724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.778813][ T5724] usb 8-1: Product: syz [ 440.778845][ T5724] usb 8-1: Manufacturer: syz [ 440.778867][ T5724] usb 8-1: SerialNumber: syz [ 440.799056][ T5724] usb 8-1: config 0 descriptor?? [ 440.809937][T15264] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 440.868731][T15274] loop4: detected capacity change from 0 to 32768 [ 440.876596][T15274] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 440.893244][T15274] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3534 (15274) [ 440.917432][T15274] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 440.927948][T15274] BTRFS info (device loop4): using crc32c checksum algorithm [ 441.020712][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 441.028313][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 441.035976][ T5724] usbtouchscreen 8-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 441.056272][ T5724] usb 8-1: USB disconnect, device number 13 [ 441.150202][T15274] BTRFS info (device loop4): rebuilding free space tree [ 441.207829][T15274] BTRFS info (device loop4): disabling free space tree [ 441.207956][T15274] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 441.208029][T15274] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 441.242095][T15274] BTRFS info (device loop4): enabling ssd optimizations [ 441.242145][T15274] BTRFS info (device loop4): disabling tree log [ 441.242166][T15274] BTRFS info (device loop4): turning on sync discard [ 441.242224][T15274] BTRFS info (device loop4): force clearing of disk cache [ 441.463477][ T5616] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 441.738751][T15297] syz.4.3536 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 441.846805][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3539'. [ 442.016935][T15299] loop2: detected capacity change from 0 to 8192 [ 442.036188][T15299] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 443.347553][T15337] loop8: detected capacity change from 0 to 1764 [ 443.446137][T15341] loop8: detected capacity change from 0 to 764 [ 443.581571][ T1731] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 443.731518][ T1731] usb 5-1: Using ep0 maxpacket: 8 [ 443.737432][ T1731] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 443.751198][ T1731] usb 5-1: config 6 has an invalid interface number: 213 but max is 1 [ 443.751250][ T1731] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 443.751288][ T1731] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 443.751314][ T1731] usb 5-1: config 6 has no interface number 0 [ 443.751354][ T1731] usb 5-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 443.751379][ T1731] usb 5-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 443.751408][ T1731] usb 5-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 443.751464][ T1731] usb 5-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.839918][ T1731] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 443.839962][ T1731] usb 5-1: Manufacturer: syz [ 443.840001][ T1731] usb 5-1: SerialNumber: syz [ 444.169982][ T1731] em28xx 5-1:6.213: New device syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 444.181721][ T1731] em28xx 5-1:6.213: Audio interface 213 found (Vendor Class) [ 444.280139][T15352] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.287156][ T1731] em28xx 5-1:6.213: unknown em28xx chip ID (0) [ 444.296871][ T1731] em28xx 5-1:6.213: Config register raw data: 0xfffffffb [ 444.304495][ T1731] em28xx 5-1:6.213: AC97 chip type couldn't be determined [ 444.304525][ T1731] em28xx 5-1:6.213: No AC97 audio processor [ 444.329230][ T1731] usb 5-1: USB disconnect, device number 31 [ 444.336731][T15354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.347004][ T1731] em28xx 5-1:6.213: Disconnecting em28xx [ 444.362261][T15354] team0: Port device bond1 added [ 444.389004][ T8434] udevd[8434]: setting owner of /dev/media28 to uid=0, gid=28 failed: No such file or directory [ 444.413834][ T1731] em28xx: Freeing device [ 444.572724][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3566'. [ 444.579369][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3566'. [ 444.786909][T15367] loop8: detected capacity change from 0 to 2048 [ 444.808807][T15367] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.823490][T15356] loop7: detected capacity change from 0 to 32768 [ 444.842717][T15356] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 444.908698][T15356] XFS (loop7): Ending clean mount [ 445.029046][T11023] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 445.553766][T15391] loop7: detected capacity change from 0 to 256 [ 445.643451][T15391] exFAT-fs (loop7): error, no upcase table entry. Please run fsck [ 445.643491][T15391] exFAT-fs (loop7): Filesystem has been set read-only [ 445.660913][T15393] loop2: detected capacity change from 0 to 4096 [ 445.711508][T15393] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 445.845871][T15393] ntfs3(loop2): ino=1a, mi_enum_attr [ 445.846167][T15393] ntfs3(loop2): ino=1a, mi_enum_attr [ 445.846224][T15393] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 445.929263][ T32] audit: type=1800 audit(1786493827.205:577): pid=15393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3576" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 446.000829][T15390] ntfs3(loop2): ino=1e, "file1" attr_set_size_ex [ 446.177459][T15404] loop4: detected capacity change from 0 to 8 [ 446.254528][ T1731] kernel read not supported for file /dsp (pid: 1731 comm: kworker/1:2) [ 446.385069][T15409] loop2: detected capacity change from 0 to 16 [ 446.412165][ T1723] block nbd0: Possible stuck request ffff888027805080: control (read@0,1024B). Runtime 150 seconds [ 446.412233][ T1723] block nbd0: Possible stuck request ffff8880277f7000: control (read@1024,3072B). Runtime 150 seconds [ 446.437961][T15409] erofs (device loop2): mounted with root inode @ nid 36. [ 446.545040][T15413] jffs2: notice: (15413) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 446.701999][T15409] syz.2.3584: attempt to access beyond end of device [ 446.701999][T15409] loop2: rw=0, sector=301990144, nr_sectors = 257 limit=16 [ 446.739603][T15409] syz.2.3584: attempt to access beyond end of device [ 446.739603][T15409] loop2: rw=0, sector=301990400, nr_sectors = 2 limit=16 [ 446.755494][T15409] erofs (device loop2): read error -5 @ 0 of nid 36 [ 446.886598][T15418] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 447.964432][T15446] loop7: detected capacity change from 0 to 1024 [ 448.000894][T15446] hfsplus: extend alloc file! (16384,256,150995124) [ 448.018142][T15446] hfsplus: failed to extend attributes file [ 448.036148][T15446] hfsplus: extend alloc file! (16384,256,150995124) [ 448.036200][T15446] hfsplus: failed to extend attributes file [ 448.357817][T15460] netlink: 'syz.7.3607': attribute type 10 has an invalid length. [ 448.386766][T15460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.409449][T15460] team0: Port device bond0 added [ 448.944950][ T32] audit: type=1326 audit(1786493830.225:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.0.3613" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff90f99e0d9 code=0x0 [ 449.893480][T15492] scsi_dev_info_list_add_str: bad dev info string 'vŸ¿{¥˜_' '' '' [ 450.078907][T15497] loop4: detected capacity change from 0 to 128 [ 450.098438][T15497] EXT4-fs (loop4): Test dummy encryption mode enabled [ 450.132530][T15497] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a845c098, mo2=0042] [ 450.132758][T15497] System zones: 1-3, 19-19, 35-36 [ 450.165012][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3624'. [ 450.174642][T15502] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.184225][T15502] bridge0: entered allmulticast mode [ 450.197026][T15497] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 450.210596][T15497] ext4 filesystem being mounted at /789/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.439273][T15497] fscrypt: AES-256-XTS using blk-crypto-fallback [ 450.447175][ T32] audit: type=1800 audit(1786493831.735:579): pid=15497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3623" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 450.647777][ T5616] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 450.865156][T15523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3633'. [ 451.143689][T15526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3635'. [ 451.651791][T15545] jffs2: notice: (15545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 452.164856][T15554] loop8: detected capacity change from 0 to 128 [ 452.178707][T15554] EXT4-fs (loop8): Test dummy encryption mode enabled [ 452.193348][T15554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a845c098, mo2=0042] [ 452.202663][T15554] System zones: 1-3, 19-19, 35-36 [ 452.241309][T15554] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 452.256175][T15554] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.349224][ T32] audit: type=1800 audit(1786493833.625:580): pid=15554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3644" name="file1" dev="loop8" ino=12 res=0 errno=0 [ 452.541349][T13299] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 453.197221][T15561] loop2: detected capacity change from 0 to 131072 [ 453.206765][T15561] F2FS-fs (loop2): invalid crc value [ 453.289369][T15561] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 453.314013][T15561] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 453.447076][T15579] loop4: detected capacity change from 0 to 512 [ 453.457122][T15579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.469726][T15579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.488136][T15579] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 453.508675][T15579] EXT4-fs (loop4): 1 truncate cleaned up [ 453.519868][T15579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.782456][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.086334][T15575] loop7: detected capacity change from 0 to 32768 [ 454.166460][T15575] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 454.588464][T11023] ocfs2: Unmounting device (7,7) on (node local) [ 455.190565][T15612] netlink: 'syz.0.3671': attribute type 3 has an invalid length. [ 455.190615][T15612] netlink: 'syz.0.3671': attribute type 3 has an invalid length. [ 455.207611][ T5753] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 455.228951][T15612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3671'. [ 455.318359][T15615] jffs2: notice: (15615) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 455.335668][ T5746] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 455.370981][ T5753] usb 5-1: Using ep0 maxpacket: 8 [ 455.381398][ T5753] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 455.394553][ T5753] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 455.404035][ T5753] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.414744][ T5753] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 455.424679][ T5753] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.435775][ T5753] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.449231][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.488953][T15618] msr: Write to unrecognized MSR 0x0 by syz.0.3682 (pid: 15618), tainting CPU_OUT_OF_SPEC. [ 455.488999][T15618] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 455.510136][ T5746] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 455.523009][ T5746] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.523059][ T5746] usb 8-1: Product: syz [ 455.523087][ T5746] usb 8-1: Manufacturer: syz [ 455.523103][ T5746] usb 8-1: SerialNumber: syz [ 455.626891][T15620] loop2: detected capacity change from 0 to 128 [ 455.674904][ T5753] usb 5-1: GET_CAPABILITIES returned 0 [ 455.680581][ T5753] usbtmc 5-1:16.0: can't read capabilities [ 455.691032][T15620] EXT4-fs (loop2): Test dummy encryption mode enabled [ 455.709609][T15620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a845c098, mo2=0042] [ 455.711365][T15620] System zones: 1-3, 19-19, 35-36 [ 455.726144][T15620] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 455.739367][T15620] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.883404][ T32] audit: type=1800 audit(1786493837.165:581): pid=15620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3672" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 455.922199][ T5753] usb 5-1: USB disconnect, device number 32 [ 456.010965][T15608] loop8: detected capacity change from 0 to 32768 [ 456.025477][T15608] xfs: Deprecated parameter 'noikeep' [ 456.025523][T15608] XFS: noikeep mount option is deprecated. [ 456.095930][T15608] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 456.107631][T15608] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 456.147063][T11015] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.229935][T15608] XFS (loop8): Ending clean mount [ 456.237639][T15608] XFS (loop8): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x10 [ 456.237717][T15608] XFS (loop8): Unmount and run xfs_repair [ 456.237771][T15608] XFS (loop8): First 128 bytes of corrupted metadata buffer: [ 456.237879][T15608] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 456.237939][T15608] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80 ................ [ 456.237983][T15608] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 456.238030][T15608] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 456.238071][T15608] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 456.238112][T15608] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 456.238154][T15608] 00000060: 00 00 00 00 00 00 30 77 00 00 00 00 00 00 00 00 ......0w........ [ 456.238199][T15608] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 456.238242][T15608] XFS (loop8): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x10 len 4 error 74 [ 456.238503][T15608] loop8: lost filesystem error report for type 5 error -117 [ 456.238814][T15608] XFS (loop8): Failed to initialize disk quotas, err -117. [ 456.406589][ T5746] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 456.406669][ T5746] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 456.407985][ T5746] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 456.443995][ T5746] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 456.459091][ T5746] usb 8-1: USB disconnect, device number 14 [ 456.467814][T13299] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 456.525221][T13299] XFS (loop8): Uncorrected metadata errors detected; please run xfs_repair. [ 457.347474][T15653] loop4: detected capacity change from 0 to 512 [ 457.355041][T15653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 457.409496][T15653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.409684][T15653] ext4 filesystem being mounted at /808/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 457.512042][T15653] netlink: 436 bytes leftover after parsing attributes in process `syz.4.3683'. [ 457.512162][T15653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3683'. [ 457.605098][T15644] loop2: detected capacity change from 0 to 40427 [ 457.617328][T15644] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 457.624488][T15644] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 457.640807][T15644] F2FS-fs (loop2): invalid crc value [ 457.646711][T15644] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 457.707912][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.742078][T15644] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 457.761175][T15644] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 457.768399][T15644] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 457.839953][T11015] syz-executor: attempt to access beyond end of device [ 457.839953][T11015] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 457.876135][T11015] CPU: 0 UID: 0 PID: 11015 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 457.876168][T11015] Tainted: [L]=SOFTLOCKUP [ 457.876176][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.876204][T11015] Call Trace: [ 457.876215][T11015] [ 457.876225][T11015] dump_stack_lvl+0xe8/0x150 [ 457.876258][T11015] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 457.876292][T11015] f2fs_write_end_bio+0x1211/0x16e0 [ 457.876316][T11015] ? blkg_put+0x22/0x240 [ 457.876360][T11015] __submit_merged_bio+0x258/0x6a0 [ 457.876388][T11015] ? rcu_is_watching+0x16/0xb0 [ 457.876415][T11015] __submit_merged_write_cond+0x3c9/0x4e0 [ 457.876450][T11015] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 457.876499][T11015] f2fs_write_data_pages+0x2a27/0x36f0 [ 457.876530][T11015] ? __lock_acquire+0x6df/0x2e50 [ 457.876582][T11015] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 457.876621][T11015] ? is_bpf_text_address+0x26/0x2b0 [ 457.876656][T11015] ? arch_stack_walk+0xfb/0x150 [ 457.876706][T11015] ? add_lock_to_list+0xc7/0x100 [ 457.876733][T11015] ? lockdep_unlock+0x5c/0xd0 [ 457.876762][T11015] ? __lock_acquire+0x14b9/0x2e50 [ 457.876809][T11015] ? do_raw_spin_lock+0x12b/0x2f0 [ 457.876847][T11015] ? do_raw_spin_unlock+0xf5/0x200 [ 457.876875][T11015] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 457.876905][T11015] do_writepages+0x338/0x560 [ 457.876939][T11015] ? do_raw_spin_unlock+0xf5/0x200 [ 457.876971][T11015] filemap_fdatawrite+0x1e9/0x2f0 [ 457.877018][T11015] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 457.877099][T11015] ? do_raw_spin_unlock+0xf5/0x200 [ 457.877133][T11015] f2fs_sync_dirty_inodes+0x30e/0x830 [ 457.877169][T11015] f2fs_write_checkpoint+0xa3d/0x2710 [ 457.877191][T11015] ? __lock_acquire+0x6df/0x2e50 [ 457.877244][T11015] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 457.877304][T11015] ? try_to_wake_up+0x8b6/0x14d0 [ 457.877345][T11015] kill_f2fs_super+0x2dd/0x700 [ 457.877389][T11015] ? __pfx_kill_f2fs_super+0x10/0x10 [ 457.877434][T11015] ? call_rcu+0x64d/0x8b0 [ 457.877460][T11015] ? lockdep_hardirqs_on+0x7b/0x110 [ 457.877495][T11015] deactivate_locked_super+0xbc/0x110 [ 457.877533][T11015] cleanup_mnt+0x3d3/0x460 [ 457.877575][T11015] task_work_run+0x1d9/0x270 [ 457.877608][T11015] ? __pfx_task_work_run+0x10/0x10 [ 457.877638][T11015] exit_to_user_mode_loop+0x204/0x770 [ 457.877659][T11015] ? rcu_is_watching+0x16/0xb0 [ 457.877687][T11015] do_syscall_64+0x328/0x520 [ 457.877707][T11015] ? trace_irq_disable+0x3b/0x140 [ 457.877726][T11015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.877747][T11015] ? clear_bhb_loop+0x70/0xc0 [ 457.877773][T11015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.877792][T11015] RIP: 0033:0x7f8ae3b9f317 [ 457.877813][T11015] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 457.877831][T11015] RSP: 002b:00007ffe2bb7ed38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 457.877852][T11015] RAX: 0000000000000000 RBX: 00007f8ae3c34474 RCX: 00007f8ae3b9f317 [ 457.877866][T11015] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2bb7edf0 [ 457.877879][T11015] RBP: 00007ffe2bb7edf0 R08: 00007ffe2bb7fdf0 R09: 00000000ffffffff [ 457.877893][T11015] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2bb7fe80 [ 457.877906][T11015] R13: 00007f8ae3c34474 R14: 000000000006fc13 R15: 00007ffe2bb7fec0 [ 457.877938][T11015] [ 458.121087][T11015] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 459.268372][T15696] jffs2: notice: (15696) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 459.668983][T15715] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 459.669028][T15715] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 459.900484][T15726] loop4: detected capacity change from 0 to 512 [ 459.911083][T15726] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 459.939788][T15726] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 459.949289][T15726] System zones: 1-12 [ 459.956087][T15726] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.3711: bad orphan inode 131072 [ 459.966801][T15726] loop4: lost filesystem error report for type 5 error -117 [ 459.970379][T15726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.057437][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.429292][T15725] loop2: detected capacity change from 0 to 32768 [ 460.469505][T15725] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 460.506245][T15744] netlink: 'syz.8.3718': attribute type 39 has an invalid length. [ 460.555225][T15725] XFS (loop2): Ending clean mount [ 460.674513][T11015] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 461.168423][T15759] loop2: detected capacity change from 0 to 2048 [ 461.217757][T15759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.217978][T15759] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.324415][T11015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.598688][ T5632] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 461.762569][T15780] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3730'. [ 462.654618][T15813] loop8: detected capacity change from 0 to 512 [ 462.664312][T15813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 462.726725][T15813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.726924][T15813] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.863029][T15813] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 462.899681][T15813] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 462.909940][T15813] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.3745: Failed to acquire dquot type 1 [ 462.996962][T13299] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.296077][T15835] loop7: detected capacity change from 0 to 4096 [ 463.425569][T15846] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 463.431052][T15835] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 463.466172][T15847] loop4: detected capacity change from 0 to 256 [ 463.515326][T15847] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 463.534275][T15849] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3761'. [ 463.607390][T15835] Remounting filesystem read-only [ 464.453557][ T50] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.628843][T15883] loop8: detected capacity change from 0 to 1024 [ 464.646907][ T50] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.742470][T15883] hfsplus: bad catalog file entry [ 464.796042][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 464.819723][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 464.834549][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 464.843002][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 464.843614][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 464.920187][ T50] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.950137][ T992] hfsplus: bad catalog file entry [ 465.159413][ T50] batman_adv: batadv0: Removing interface: vlan2 [ 465.189914][ T50] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.525197][ T50] bridge_slave_1: left allmulticast mode [ 465.525247][ T50] bridge_slave_1: left promiscuous mode [ 465.525734][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.557949][ T50] bridge_slave_0: left allmulticast mode [ 465.558012][ T50] bridge_slave_0: left promiscuous mode [ 465.558614][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.611767][ T5631] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 465.617458][ T5631] Bluetooth: hci1: Injecting HCI hardware error event [ 465.634368][ T5632] Bluetooth: hci1: hardware error 0x00 [ 465.949844][ T50] team0: Port device bond0 removed [ 465.964068][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.979646][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.990252][ T50] bond0 (unregistering): Released all slaves [ 466.005735][ T50] team0: Port device bond1 removed [ 466.009496][ T50] bond1 (unregistering): Released all slaves [ 466.259992][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 466.370484][ T50] hsr_slave_0: left promiscuous mode [ 466.378112][ T50] hsr_slave_1: left promiscuous mode [ 466.386410][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.387741][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.399512][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.399567][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.409478][ T50] batman_adv: batadv0: Removing interface: vlan3 [ 466.426482][ T50] veth1_macvtap: left promiscuous mode [ 466.426545][ T50] veth0_macvtap: left promiscuous mode [ 466.430474][ T50] veth1_vlan: left promiscuous mode [ 466.430641][ T50] veth0_vlan: left promiscuous mode [ 466.670756][ T50] team0 (unregistering): Port device team_slave_1 removed [ 466.684654][ T50] team0 (unregistering): Port device team_slave_0 removed [ 466.964450][ T5631] Bluetooth: hci4: command tx timeout [ 467.047787][T15887] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.055038][T15887] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.055301][T15887] bridge_slave_0: entered allmulticast mode [ 467.060369][T15887] bridge_slave_0: entered promiscuous mode [ 467.067918][T15887] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.068273][T15887] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.068597][T15887] bridge_slave_1: entered allmulticast mode [ 467.074281][T15887] bridge_slave_1: entered promiscuous mode [ 467.150308][T15887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.184726][T15887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.261907][T15887] team0: Port device team_slave_0 added [ 467.274847][T15887] team0: Port device team_slave_1 added [ 467.331784][T15887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.331831][T15887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.331860][T15887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.336555][T15887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.336580][T15887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.336635][T15887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.449934][T15887] hsr_slave_0: entered promiscuous mode [ 467.452584][T15887] hsr_slave_1: entered promiscuous mode [ 467.454509][T15887] debugfs: 'hsr0' already exists in 'hsr' [ 467.454560][T15887] Cannot create hsr debugfs directory [ 467.576314][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 467.681924][ T5632] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 467.708897][T15887] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 467.723641][T15887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.732842][T15887] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 467.752255][T15887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.754491][T15887] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 467.775003][T15887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.782838][T15887] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 467.794559][T15887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.909014][T15887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.945455][T15887] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.959907][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.960154][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.980939][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.981182][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.255331][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 468.520090][T15887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.825010][T15887] veth0_vlan: entered promiscuous mode [ 468.843037][T15887] veth1_vlan: entered promiscuous mode [ 468.875939][T15887] veth0_macvtap: entered promiscuous mode [ 468.886905][T15887] veth1_macvtap: entered promiscuous mode [ 468.906966][T15887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.919444][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12 [ 468.933235][T15887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.937630][ T1160] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.937775][ T1160] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.937828][ T1160] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.022101][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.043544][ T5632] Bluetooth: hci4: command tx timeout [ 469.139505][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.139550][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.205713][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.205759][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.413989][T15996] loop4: detected capacity change from 0 to 512 [ 469.441021][T15996] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 469.441139][T15996] System zones: 0-2, 18-18, 34-34 [ 469.469890][T15996] EXT4-fs (loop4): 1 orphan inode deleted [ 469.485832][T15996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.488196][T15996] ext4 filesystem being mounted at /824/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.760562][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.797893][T15990] loop9: detected capacity change from 0 to 32768 [ 469.820897][T15990] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 469.885540][T15990] XFS (loop9): Ending clean mount [ 469.940453][T15887] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 470.008614][T16013] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 470.136484][T16015] loop2: detected capacity change from 0 to 256 [ 470.156323][T16015] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 470.186753][ T32] audit: type=1800 audit(1786493851.465:582): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3783" name="file1" dev="loop2" ino=1048816 res=0 errno=0 [ 470.206688][ T32] audit: type=1800 audit(1786493851.465:583): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3783" name="file1" dev="loop2" ino=1048816 res=0 errno=0 [ 470.655220][T16029] loop4: detected capacity change from 0 to 512 [ 470.669342][T16029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 470.791313][T16029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.805521][T16029] ext4 filesystem being mounted at /827/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 470.921129][T16015] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 470.921177][T16015] FAT-fs (loop2): Filesystem has been set read-only [ 470.921860][T16015] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 470.985119][T16029] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 470.985231][T16029] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 470.985284][T16029] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.3786: Failed to acquire dquot type 1 [ 471.123316][ T5632] Bluetooth: hci4: command tx timeout [ 471.270704][T16038] loop8: detected capacity change from 0 to 32768 [ 471.340750][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.806483][T16056] program syz.2.3799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.824115][T16055] loop8: detected capacity change from 0 to 512 [ 471.837166][T16055] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 471.873158][T16055] EXT4-fs (loop8): 1 truncate cleaned up [ 471.888354][T16055] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.968013][T16059] loop4: detected capacity change from 0 to 1024 [ 472.010579][T13299] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.020541][T16061] input: syz1 as /devices/virtual/input/input19 [ 472.098340][ T32] audit: type=1326 audit(1786493853.375:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.3805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15af9e0d9 code=0x7ffc0000 [ 472.139029][ T32] audit: type=1326 audit(1786493853.405:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.3805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15af9e0d9 code=0x7ffc0000 [ 472.139106][ T32] audit: type=1326 audit(1786493853.405:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.3805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15af9e0d9 code=0x7ffc0000 [ 472.139225][ T32] audit: type=1326 audit(1786493853.405:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.3805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd15af9e0d9 code=0x7ffc0000 [ 472.139331][ T32] audit: type=1326 audit(1786493853.405:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.3805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15af9e0d9 code=0x7ffc0000 [ 472.139425][ T32] audit: type=1326 audit(1786493853.405:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16065 comm="syz.8.3805" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15af9e0d9 code=0x7ffc0000 [ 472.941294][T16071] loop9: detected capacity change from 0 to 40427 [ 472.956341][T16071] F2FS-fs (loop9): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 472.956390][T16071] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 472.978384][T16071] F2FS-fs (loop9): invalid crc value [ 473.105361][T16071] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 473.128442][T16071] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 473.136463][T16071] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 473.168277][T16071] syz.9.3807: attempt to access beyond end of device [ 473.168277][T16071] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 473.185997][T16071] CPU: 0 UID: 0 PID: 16071 Comm: syz.9.3807 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.186034][T16071] Tainted: [L]=SOFTLOCKUP [ 473.186044][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.186060][T16071] Call Trace: [ 473.186069][T16071] [ 473.186079][T16071] dump_stack_lvl+0xe8/0x150 [ 473.186195][T16071] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 473.186343][T16071] f2fs_write_end_bio+0x1211/0x16e0 [ 473.186397][T16071] ? blkg_put+0x22/0x240 [ 473.186493][T16071] __submit_merged_bio+0x258/0x6a0 [ 473.186548][T16071] ? rcu_is_watching+0x16/0xb0 [ 473.186601][T16071] __submit_merged_write_cond+0x3c9/0x4e0 [ 473.186644][T16071] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 473.186703][T16071] f2fs_write_data_pages+0x2a27/0x36f0 [ 473.186739][T16071] ? __lock_acquire+0x6df/0x2e50 [ 473.186812][T16071] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 473.186847][T16071] ? is_bpf_text_address+0x26/0x2b0 [ 473.186907][T16071] ? arch_stack_walk+0xfb/0x150 [ 473.186986][T16071] ? add_lock_to_list+0xc7/0x100 [ 473.187017][T16071] ? lockdep_unlock+0x5c/0xd0 [ 473.187049][T16071] ? __lock_acquire+0x14b9/0x2e50 [ 473.187104][T16071] ? do_raw_spin_lock+0x12b/0x2f0 [ 473.187176][T16071] ? do_raw_spin_unlock+0xf5/0x200 [ 473.187207][T16071] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 473.187241][T16071] do_writepages+0x338/0x560 [ 473.187294][T16071] ? do_raw_spin_unlock+0xf5/0x200 [ 473.187328][T16071] filemap_fdatawrite+0x1e9/0x2f0 [ 473.187360][T16071] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 473.187431][T16071] ? do_raw_spin_unlock+0xf5/0x200 [ 473.187465][T16071] f2fs_sync_dirty_inodes+0x30e/0x830 [ 473.187502][T16071] f2fs_write_checkpoint+0xa3d/0x2710 [ 473.187557][T16071] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 473.187617][T16071] ? __pfx_down_write+0x10/0x10 [ 473.187727][T16071] ? lock_acquire+0x115/0x350 [ 473.187752][T16071] ? rcu_is_watching+0x16/0xb0 [ 473.187781][T16071] f2fs_trim_fs+0xa88/0x13e0 [ 473.187853][T16071] ? __pfx_f2fs_trim_fs+0x10/0x10 [ 473.187891][T16071] ? mnt_get_write_access+0x66/0x280 [ 473.187960][T16071] ? mnt_want_write_file+0x172/0x200 [ 473.187988][T16071] __f2fs_ioctl+0x4e05/0xbcf0 [ 473.188080][T16071] ? __pfx_stack_trace_save+0x10/0x10 [ 473.188123][T16071] ? stack_depot_save_flags+0x33/0x7f0 [ 473.188192][T16071] ? __lock_acquire+0x6df/0x2e50 [ 473.188217][T16071] ? kasan_save_track+0x4f/0x80 [ 473.188253][T16071] ? kasan_save_track+0x3e/0x80 [ 473.188278][T16071] ? kasan_save_free_info+0x40/0x50 [ 473.188298][T16071] ? __kasan_slab_free+0x5c/0x80 [ 473.188323][T16071] ? kfree+0x1c5/0x650 [ 473.188353][T16071] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 473.188445][T16071] ? security_file_ioctl+0xc3/0x2a0 [ 473.188518][T16071] ? __se_sys_ioctl+0x47/0x170 [ 473.188542][T16071] ? do_syscall_64+0x166/0x520 [ 473.188606][T16071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.188667][T16071] ? __pfx___f2fs_ioctl+0x10/0x10 [ 473.188729][T16071] ? kasan_quarantine_put+0xbb/0x1f0 [ 473.188764][T16071] ? tomoyo_path_number_perm+0x219/0x5f0 [ 473.188786][T16071] ? tomoyo_path_number_perm+0x219/0x5f0 [ 473.188811][T16071] ? do_vfs_ioctl+0x116f/0x1530 [ 473.188839][T16071] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 473.188877][T16071] ? hook_file_ioctl+0x1f0/0x5f0 [ 473.189005][T16071] ? __fget_files+0x2a/0x420 [ 473.189031][T16071] ? __fget_files+0x3a2/0x420 [ 473.189052][T16071] ? __fget_files+0x2a/0x420 [ 473.189076][T16071] ? f2fs_ioctl+0x135/0x250 [ 473.189107][T16071] ? __pfx_f2fs_ioctl+0x10/0x10 [ 473.189138][T16071] __se_sys_ioctl+0xfc/0x170 [ 473.189168][T16071] do_syscall_64+0x166/0x520 [ 473.189189][T16071] ? trace_irq_disable+0x3b/0x140 [ 473.189209][T16071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.189231][T16071] ? clear_bhb_loop+0x70/0xc0 [ 473.189258][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.189280][T16071] RIP: 0033:0x7f476219e0d9 [ 473.189301][T16071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.189319][T16071] RSP: 002b:00007f4762f82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.189342][T16071] RAX: ffffffffffffffda RBX: 00007f4762425fa0 RCX: 00007f476219e0d9 [ 473.189356][T16071] RDX: 0000200000000140 RSI: 00000000c0185879 RDI: 0000000000000004 [ 473.189369][T16071] RBP: 00007f4762235024 R08: 0000000000000000 R09: 0000000000000000 [ 473.189382][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.189394][T16071] R13: 00007f4762426038 R14: 00007f4762425fa0 R15: 00007ffd6586d238 [ 473.189426][T16071] [ 473.203799][ T5632] Bluetooth: hci4: command tx timeout [ 473.657062][T16071] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 474.112559][T16111] Bluetooth: MGMT ver 1.23 [ 474.742294][T16123] loop9: detected capacity change from 0 to 2048 [ 474.783706][T16115] loop8: detected capacity change from 0 to 32768 [ 474.805484][T16115] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3824 (16115) [ 474.830040][T16115] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 474.830152][T16115] BTRFS info (device loop8): using sha256 checksum algorithm [ 474.854091][T16123] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.857523][T16123] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.976890][T16115] BTRFS info (device loop8): enabling ssd optimizations [ 474.987518][T16115] BTRFS info (device loop8): turning on sync discard [ 474.995679][T16115] BTRFS info (device loop8): enabling free space tree [ 475.002875][T16115] BTRFS info (device loop8): use zlib compression, level 3 [ 475.049563][T15887] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.224969][T13299] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 475.440665][T16147] loop4: detected capacity change from 0 to 64 [ 475.526329][T16151] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3829'. [ 475.601894][T16147] Bad inode number on dev loop4: 2 is out of range [ 476.061647][ T1731] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 476.212276][ T1731] usb 10-1: Using ep0 maxpacket: 8 [ 476.214543][ T1731] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 476.217363][ T1731] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 476.217427][ T1731] usb 10-1: config 179 has no interface number 0 [ 476.217522][ T1731] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 476.217618][ T1731] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 476.217684][ T1731] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 476.217750][ T1731] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 476.217822][ T1731] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 476.217926][ T1731] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.253389][T16161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 476.408861][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3841'. [ 476.484878][ T1723] block nbd0: Possible stuck request ffff888027805080: control (read@0,1024B). Runtime 180 seconds [ 476.495772][ T1723] block nbd0: Possible stuck request ffff8880277f7000: control (read@1024,3072B). Runtime 180 seconds [ 476.796765][ T1731] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input20 [ 476.828807][ T25] usb 10-1: USB disconnect, device number 2 [ 476.828906][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 476.829029][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 476.918210][T16178] loop4: detected capacity change from 0 to 32768 [ 476.992359][T16178] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 477.048822][T16178] XFS (loop4): Ending clean mount [ 477.063104][T16202] openvswitch: netlink: IP tunnel dst address not specified [ 477.063153][T16202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.231070][T16206] ieee802154 phy0 wpan0: encryption failed: -22 [ 477.317105][ T5616] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 478.004849][T16232] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3864'. [ 478.453530][T16256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3876'. [ 478.648935][T16268] kAFS: Invalid Command on /proc/fs/afs/cells file [ 478.762511][T16272] loop4: detected capacity change from 0 to 256 [ 478.900225][T16277] loop8: detected capacity change from 0 to 16 [ 478.917472][T16277] erofs (device loop8): mounted with root inode @ nid 36. [ 479.362576][T16297] loop4: detected capacity change from 0 to 16 [ 479.435729][T16297] erofs (device loop4): mounted with root inode @ nid 36. [ 479.573252][T16306] loop2: detected capacity change from 0 to 256 [ 479.581053][T16306] exfat: Deprecated parameter 'utf8' [ 479.585389][T16306] exfat: Deprecated parameter 'utf8' [ 479.585601][T16306] exfat: Deprecated parameter 'utf8' [ 479.667093][T16306] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 480.503397][ T5724] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 480.600058][T16352] loop2: detected capacity change from 0 to 256 [ 480.643590][T16352] exFAT-fs (loop2): error, no upcase table entry. Please run fsck [ 480.643630][T16352] exFAT-fs (loop2): Filesystem has been set read-only [ 480.671309][T16356] gadgetfs: bound to dummy_udc driver [ 480.679341][ T5724] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 480.693273][ T5724] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 480.693318][ T5724] usb 9-1: config 1 has no interface number 0 [ 480.693381][ T5724] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 480.693416][ T5724] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 480.732964][ T5724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.733007][ T5724] usb 9-1: Product: syz [ 480.733042][ T5724] usb 9-1: Manufacturer: syz [ 480.733063][ T5724] usb 9-1: SerialNumber: syz [ 480.760616][T16335] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 480.997032][ T5724] usb 9-1: Error in usbnet_get_endpoints (-71) [ 481.019283][ T5724] usb 9-1: USB disconnect, device number 7 [ 481.622368][T16397] loop4: detected capacity change from 0 to 64 [ 481.800579][T16408] netlink: 'syz.9.3936': attribute type 2 has an invalid length. [ 482.070858][ T5724] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 482.185482][T16415] tun0: tun_chr_ioctl cmd 1074025680 [ 482.232320][ T5724] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 482.265625][ T5724] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 482.274595][ T5724] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 482.285073][ T5724] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 482.294210][ T5724] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 482.305494][ T5724] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 482.319841][ T5724] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 482.328311][ T5724] usb 9-1: Product: syz [ 482.332689][ T5724] usb 9-1: Manufacturer: syz [ 482.343783][ T5724] cdc_wdm 9-1:1.0: skipping garbage [ 482.349272][ T5724] cdc_wdm 9-1:1.0: skipping garbage [ 482.356355][ T5724] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 482.362706][ T5724] cdc_wdm 9-1:1.0: Unknown control protocol [ 482.652858][ T5724] usb 9-1: USB disconnect, device number 8 [ 482.659594][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 482.659645][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 482.659663][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 483.059045][T16436] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3942'. [ 483.060937][T16436] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3942'. [ 483.275438][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3945'. [ 483.275497][T16443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3945'. [ 483.847743][T16465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3953'. [ 483.877006][T16465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3953'. [ 483.975965][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3954'. [ 484.254917][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3955'. [ 484.699784][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'. [ 484.710893][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'. [ 484.725305][ T5632] Bluetooth: hci3: unexpected event for opcode 0x200b [ 485.091206][T16515] loop2: detected capacity change from 0 to 2048 [ 485.156287][T16515] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 485.426017][T16525] ip_tables: iptables: counters copy to user failed while replacing table [ 485.554172][T16529] loop8: detected capacity change from 0 to 256 [ 486.017385][T16542] input: syz1 as /devices/virtual/input/input21 [ 486.057665][T16540] kernel profiling enabled (shift: 63) [ 486.057692][T16540] profiling shift: 63 too large [ 486.318958][T16554] loop9: detected capacity change from 0 to 1024 [ 486.630091][T16569] netlink: 'syz.4.3996': attribute type 10 has an invalid length. [ 486.674243][T16569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.686130][T16569] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 486.795460][T16569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.837986][T16576] loop8: detected capacity change from 0 to 4096 [ 486.887791][T16580] loop2: detected capacity change from 0 to 1024 [ 486.896958][T16580] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 486.923395][T16580] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 486.937291][T16580] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 486.965661][T16569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.989355][T16576] ntfs3(loop8): Failed to load $Extend (-22). [ 486.989406][T16576] ntfs3(loop8): Failed to initialize $Extend. [ 487.007057][T16569] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 487.036723][T16569] bond0 (unregistering): Released all slaves [ 487.136792][ T5746] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 487.250082][T16584] loop8: detected capacity change from 0 to 512 [ 487.280088][T16584] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.4003: bg 0: block 5: invalid block bitmap [ 487.280157][T16584] loop8: lost filesystem error report for type 5 error -117 [ 487.305162][ T5746] usb 10-1: Using ep0 maxpacket: 16 [ 487.313848][ T5746] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 487.322280][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 487.322342][ C0] EXT4-fs (loop8): initial error at time 1786493868: ext4_validate_block_bitmap:436 [ 487.322418][ C0] EXT4-fs (loop8): last error at time 1786493868: ext4_validate_block_bitmap:436 [ 487.345115][ T5746] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.345190][ T5746] usb 10-1: Product: syz [ 487.345234][ T5746] usb 10-1: Manufacturer: syz [ 487.345279][ T5746] usb 10-1: SerialNumber: syz [ 487.438880][T16584] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 487.438928][T16584] loop8: lost filesystem error report for type 5 error -117 [ 487.440420][T16584] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4003: invalid indirect mapped block 3 (level 2) [ 487.440545][T16584] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 487.446554][T16584] EXT4-fs (loop8): 1 orphan inode deleted [ 487.446609][T16584] EXT4-fs (loop8): 1 truncate cleaned up [ 487.494022][T16584] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.557498][T13299] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.644434][ T5717] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 487.674537][T16596] loop8: detected capacity change from 0 to 256 [ 487.802169][ T5717] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 487.812902][ T5717] usb 3-1: config index 0 descriptor too short (expected 112, got 45) [ 487.824782][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.833164][ T5717] usb 3-1: Product: syz [ 487.837831][ T5717] usb 3-1: Manufacturer: syz [ 487.842647][ T5717] usb 3-1: SerialNumber: syz [ 487.888846][T16600] loop8: detected capacity change from 0 to 512 [ 487.903270][T16600] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.4010: corrupted in-inode xattr: invalid ea_ino [ 487.916926][T16600] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 487.917248][T16600] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.4010: couldn't read orphan inode 15 (err -117) [ 487.926440][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 487.926461][ C1] EXT4-fs (loop8): initial error at time 1786493869: ext4_iget_extra_inode:5210: inode 15 [ 487.926492][ C1] EXT4-fs (loop8): last error at time 1786493869: ext4_iget_extra_inode:5210: inode 15 [ 487.965962][T16600] loop8: lost filesystem error report for type 5 error -117 [ 487.968366][T16600] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.124738][T13299] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.143381][ T5717] rtl8150 3-1:1.0: couldn't reset the device [ 488.149709][ T5717] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 488.165858][ T5717] usb 3-1: USB disconnect, device number 16 [ 488.197497][ T8434] udevd[8434]: setting owner of /dev/bus/usb/003/016 to uid=0, gid=0 failed: No such file or directory [ 488.260907][ T5746] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 488.269030][ T5746] usb 10-1: USB disconnect, device number 3 [ 488.353442][T16609] input: syz0 as /devices/virtual/input/input22 [ 488.911222][T16623] loop8: detected capacity change from 0 to 32768 [ 488.936387][T16623] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 489.016906][T16623] XFS (loop8): Ending clean mount [ 489.040265][T16623] XFS (loop8): User initiated shutdown received. [ 489.050434][T16623] XFS (loop8): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468). Shutting down filesystem. [ 489.050652][T16623] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 489.126905][T16643] loop2: detected capacity change from 0 to 64 [ 489.145927][T13299] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 489.584031][T16658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.619803][ T32] kauditd_printk_skb: 12 callbacks suppressed [ 489.619849][ T32] audit: type=1326 audit(1786493870.895:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16659 comm="syz.8.4035" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd15af9e0d9 code=0x0 [ 489.729904][T16666] loop9: detected capacity change from 0 to 1024 [ 491.029935][T16700] loop8: detected capacity change from 0 to 1024 [ 491.098067][T16698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.143255][T16698] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.4051: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 491.189984][T16698] EXT4-fs (loop4): Remounting filesystem read-only [ 491.336808][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.468181][T16714] io-wq is not configured for unbound workers [ 491.492616][T16716] set_capacity_and_notify: 1 callbacks suppressed [ 491.505453][T16716] loop9: detected capacity change from 0 to 1024 [ 491.519086][T16716] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 491.782364][T16724] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 491.980476][T16735] __nla_validate_parse: 2 callbacks suppressed [ 491.987873][T16735] netlink: 774 bytes leftover after parsing attributes in process `syz.2.4069'. [ 491.997702][T16735] netlink: 'syz.2.4069': attribute type 1 has an invalid length. [ 492.191081][T16744] batman_adv: batadv0: Adding interface: gretap1 [ 492.197960][T16744] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.224112][T16744] batman_adv: batadv0: Interface activated: gretap1 [ 492.927239][T16765] loop4: detected capacity change from 0 to 8192 [ 493.200889][T16779] loop8: detected capacity change from 0 to 4096 [ 493.211235][T16779] ntfs3(loop8): Primary boot: invalid index size -57. [ 493.218716][T16779] ntfs3(loop8): try to read out of volume at offset 0x1ffe00 [ 493.349130][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4094'. [ 493.358551][T16786] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4094'. [ 493.748716][T16802] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 493.905150][T16782] overlayfs: statfs failed on './file0' [ 494.083834][T16807] loop4: detected capacity change from 0 to 4096 [ 494.179779][T16807] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 494.236477][T16807] ntfs3(loop4): Failed to load $Extend (-22). [ 494.236514][T16807] ntfs3(loop4): Failed to initialize $Extend. [ 494.287844][T16817] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 494.505722][T16825] loop2: detected capacity change from 0 to 256 [ 495.011719][T16846] loop9: detected capacity change from 0 to 524287997 [ 495.113057][T16848] loop2: detected capacity change from 0 to 128 [ 495.139375][T16848] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 495.191799][T16848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.712366][T16870] loop2: detected capacity change from 0 to 1024 [ 496.260267][T16878] loop2: detected capacity change from 0 to 32768 [ 496.276153][T16878] JBD2: Ignoring recovery information on journal [ 496.402429][T16878] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 496.588864][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4141'. [ 496.632268][T11015] ocfs2: Unmounting device (7,2) on (node local) [ 496.834120][T16902] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 496.986503][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4149'. [ 497.001373][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4149'. [ 497.121073][T16911] loop8: detected capacity change from 0 to 1024 [ 497.620973][T16929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.706592][T16935] netlink: 'syz.4.4162': attribute type 4 has an invalid length. [ 498.158519][T16954] loop9: detected capacity change from 0 to 1024 [ 498.159473][T16954] EXT4-fs: Ignoring removed bh option [ 498.159582][T16954] EXT4-fs: Ignoring removed bh option [ 498.185068][T16954] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 498.220564][T16954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.248696][T16954] EXT4-fs error (device loop9): ext4_check_all_de:675: inode #12: block 7: comm syz.9.4171: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 498.308403][T16954] EXT4-fs (loop9): Remounting filesystem read-only [ 498.399952][T15887] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.542186][T16943] sctp: [Deprecated]: syz.8.4165 (pid 16943) Use of int in max_burst socket option. [ 498.542186][T16943] Use struct sctp_assoc_value instead [ 498.586326][T16973] pim6reg: tun_chr_ioctl cmd 1074025677 [ 498.586424][T16973] pim6reg: linktype set to 6 [ 498.715918][T16975] batman_adv: batadv0: Adding interface: vlan2 [ 498.715955][T16975] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.715982][T16975] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 498.912945][T16985] ð [ 499.091496][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 499.251583][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 499.257594][ T25] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 499.270909][ T25] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.270952][ T25] usb 3-1: config 0 has no interface number 0 [ 499.287442][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.287478][ T25] usb 3-1: Product: syz [ 499.287529][ T25] usb 3-1: Manufacturer: syz [ 499.287548][ T25] usb 3-1: SerialNumber: syz [ 499.313222][ T25] usb 3-1: config 0 descriptor?? [ 499.323191][ T25] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 499.333942][ T25] usb 3-1: selecting invalid altsetting 1 [ 499.333985][ T25] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 499.377808][ T25] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 499.390164][ T25] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 499.398635][ T5717] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 499.410746][ T25] usb 3-1: media controller created [ 499.427694][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 499.551597][ T5717] usb 9-1: Using ep0 maxpacket: 16 [ 499.557933][ T5717] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 499.569801][ T5717] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.569902][ T5717] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.595540][ T5717] usb 9-1: config 0 descriptor?? [ 499.796151][T17011] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4193'. [ 499.826715][T16998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.829436][T16998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.836155][ T5632] Bluetooth: hci5: Malformed LE Event: 0x0d [ 499.838835][ T5753] usb 9-1: USB disconnect, device number 9 [ 500.261294][T17026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4200'. [ 500.498041][ T32] audit: type=1326 audit(1786493881.775:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17033 comm="syz.9.4206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476219e0d9 code=0x7ffc0000 [ 500.498589][ T32] audit: type=1326 audit(1786493881.775:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17033 comm="syz.9.4206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476219e0d9 code=0x7ffc0000 [ 500.510819][ T32] audit: type=1326 audit(1786493881.785:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17033 comm="syz.9.4206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476219e0d9 code=0x7ffc0000 [ 500.513033][ T32] audit: type=1326 audit(1786493881.785:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17033 comm="syz.9.4206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476219e0d9 code=0x7ffc0000 [ 500.513734][ T32] audit: type=1326 audit(1786493881.795:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17033 comm="syz.9.4206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f476219e0d9 code=0x7ffc0000 [ 500.515032][ T32] audit: type=1326 audit(1786493881.795:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17033 comm="syz.9.4206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476219e0d9 code=0x7ffc0000 [ 500.516225][ T32] audit: type=1326 audit(1786493881.795:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17033 comm="syz.9.4206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476219e0d9 code=0x7ffc0000 [ 500.517362][ T32] audit: type=1326 audit(1786493881.795:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17033 comm="syz.9.4206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476219e0d9 code=0x7ffc0000 [ 500.517867][ T32] audit: type=1326 audit(1786493881.795:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17033 comm="syz.9.4206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f476219e0d9 code=0x7ffc0000 [ 500.518590][ T32] audit: type=1326 audit(1786493881.795:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17033 comm="syz.9.4206" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476219e0d9 code=0x7ffc0000 [ 500.577308][ T25] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 500.713304][ T25] zl10353_read_register: readreg error (reg=127, ret==-110) [ 500.791174][ T25] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 500.908808][ T25] usb 3-1: USB disconnect, device number 17 [ 501.019445][T17043] loop8: detected capacity change from 0 to 512 [ 501.031376][T17043] EXT4-fs error (device loop8): ext4_get_journal_inode:5927: comm syz.8.4208: inode #2147418112: comm syz.8.4208: iget: illegal inode # [ 501.031781][T17043] loop8: lost filesystem error report for type 5 error -117 [ 501.032405][T17043] EXT4-fs (loop8): no journal found [ 501.032431][T17043] EXT4-fs (loop8): can't get journal size [ 501.042071][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 501.042131][ C0] EXT4-fs (loop8): initial error at time 1786493882: ext4_get_journal_inode:5927 [ 501.042202][ C0] EXT4-fs (loop8): last error at time 1786493882: ext4_get_journal_inode:5927 [ 501.096283][T17043] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 501.108625][T17043] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 501.132507][T17043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.285157][T13299] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.447100][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.447196][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.588622][T17065] loop2: detected capacity change from 0 to 256 [ 501.598647][T17065] exfat: Deprecated parameter 'namecase' [ 501.604559][T17065] exfat: Deprecated parameter 'namecase' [ 501.637155][T17065] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 502.121911][T17074] loop9: detected capacity change from 0 to 32768 [ 502.152206][T17074] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 502.192047][T17074] XFS (loop9): Ending clean mount [ 502.314210][T17089] loop8: detected capacity change from 0 to 736 [ 502.330031][T15887] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 502.658017][T17096] loop2: detected capacity change from 0 to 128 [ 502.681009][T17096] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 502.715341][T17096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 502.883097][T17104] loop8: detected capacity change from 0 to 512 [ 503.372397][T17123] loop9: detected capacity change from 0 to 512 [ 503.405473][T17123] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 503.405593][T17123] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.4240: corrupted in-inode xattr: e_value size too large [ 503.405642][T17123] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 503.413882][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 503.413903][ C1] EXT4-fs (loop9): initial error at time 1786493884: ext4_iget_extra_inode:5210: inode 15 [ 503.413934][ C1] EXT4-fs (loop9): last error at time 1786493884: ext4_iget_extra_inode:5210: inode 15 [ 503.470211][T17123] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.4240: couldn't read orphan inode 15 (err -117) [ 503.470270][T17123] loop9: lost filesystem error report for type 5 error -117 [ 503.475520][T17123] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.586330][T17133] ipvlan0: entered promiscuous mode [ 503.593800][T17133] ipvlan0: left promiscuous mode [ 503.630394][T15887] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.014423][T17148] loop4: detected capacity change from 0 to 512 [ 504.532849][T17170] ip_tables: iptables: counters copy to user failed while replacing table [ 504.781187][T17178] loop2: detected capacity change from 0 to 4096 [ 504.822022][T17178] ntfs3(loop2): Failed to load $Extend (-22). [ 504.822072][T17178] ntfs3(loop2): Failed to initialize $Extend. [ 505.037891][T17186] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4265'. [ 505.844213][ T3010] wlan1: Trigger new scan to find an IBSS to join [ 505.906426][T17222] loop2: detected capacity change from 0 to 512 [ 505.922073][ T33] INFO: task syz.6.2614:12956 blocked for more than 143 seconds. [ 505.922117][ T33] Tainted: G L syzkaller #0 [ 505.922145][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.922167][ T33] task:syz.6.2614 state:D stack:25720 pid:12956 tgid:12955 ppid:9781 task_flags:0x400040 flags:0x00080002 [ 505.922244][ T33] Call Trace: [ 505.922256][ T33] [ 505.922275][ T33] __schedule+0x1b4d/0x59e0 [ 505.922343][ T33] ? __pfx___schedule+0x10/0x10 [ 505.922392][ T33] ? schedule+0x90/0x2b0 [ 505.922444][ T33] schedule+0x164/0x2b0 [ 505.922485][ T33] schedule_preempt_disabled+0x13/0x30 [ 505.922523][ T33] __mutex_ ** replaying previous printk message ** [ 505.922523][ T33] __mutex_lock+0x7c1/0x1550 [ 505.922557][ T33] ? __mutex_lock+0x5d4/0x1550 [ 505.922590][ T33] ? sync_bdevs+0x276/0x470 [ 505.922626][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 505.922665][ T33] ? iput+0x456/0xf00 [ 505.922700][ T33] sync_bdevs+0x276/0x470 [ 505.922737][ T33] __ia32_sys_sync+0xc5/0x120 [ 505.922771][ T33] ? __pfx___ia32_sys_sync+0x10/0x10 [ 505.922829][ T33] do_syscall_64+0x166/0x520 [ 505.922857][ T33] ? trace_irq_disable+0x3b/0x140 [ 505.922884][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.922911][ T33] ? clear_bhb_loop+0x70/0xc0 [ 505.922943][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.922969][ T33] RIP: 0033:0x7fb729f9e0d9 [ 505.922994][ T33] RSP: 002b:00007fb72ae98028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 505.923025][ T33] RAX: ffffffffffffffda RBX: 00007fb72a225fa0 RCX: 00007fb729f9e0d9 [ 505.923048][ T33] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.923066][ T33] RBP: 00007fb72a225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 505.923085][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.923104][ T33] R13: 00007fb72a226038 R14: 00007fb72a225fa0 R15: 00007fff29b0eb18 [ 505.923144][ T33] [ 505.923189][ T33] [ 505.923189][ T33] Showing all locks held in the system: [ 505.923206][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 505.923228][ T33] #0: ffffffff8eb5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 505.923359][ T33] locks held by syslogd/4965: 1, on CPU#0: [ 505.923380][ T33] #0: ffff8880b863bca0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 505.923524][ T33] locks held by klogd/4972: 1, last CPU#0: [ 505.923545][ T33] #0: ffffffff8eb4eac0 (syslog_lock){+.+.}-{4:4}, at: syslog_print+0x4ad/0x610 [ 505.923628][ T33] locks held by getty/5373: 2, on CPU#0: [ 505.923648][ T33] #0: ffff8880324850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 505.923822][ T33] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 505.923906][ T33] locks held by udevd/5630: 1, last CPU#0: [ 505.923926][ T33] #0: ffffffff8f2e40f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 505.924009][ T33] locks held by udevd/5832: 1, on CPU#1: [ 505.924029][ T33] #0: ffff888027762350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 505.924111][ T33] locks held by udevd/8434: 1, last CPU#1: [ 505.924131][ T33] #0: ffff8880352fd038 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 505.924221][ T33] locks held by syz.6.2614/12956: 1, on CPU#0: [ 505.924241][ T33] #0: ffff888027762350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 505.924324][ T33] locks held by syz.0.4270/17208: 3, last CPU#0: [ 505.924345][ T33] #0: ffff88801c2c0460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 505.924449][ T33] #1: ffff888025308890 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 505.955176][ T33] #2: ffff8880b863bca0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 505.955407][ T33] locks held by syz.4.4283/17225: 2, last CPU#0: [ 505.955471][ T33] #0: ffffffff9003cf40 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 505.955786][ T33] #1: ffffffff8eb5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 505.955973][ T33] [ 505.955987][ T33] ============================================= [ 505.955987][ T33] [ 505.956027][ T33] NMI backtrace for cpu 0 [ 505.956078][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 505.956165][ T33] Tainted: [L]=SOFTLOCKUP [ 505.956187][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.956243][ T33] Call Trace: [ 505.956264][ T33] [ 505.956293][ T33] dump_stack_lvl+0xe8/0x150 [ 505.956376][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 505.956523][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 505.956622][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 505.956716][ T33] sys_info+0x135/0x170 [ 505.956796][ T33] watchdog+0xfd7/0x1030 [ 505.956887][ T33] ? watchdog+0x1c7/0x1030 [ 505.956971][ T33] kthread+0x38b/0x480 [ 505.957027][ T33] ? __pfx_watchdog+0x10/0x10 [ 505.957079][ T33] ? __pfx_kthread+0x10/0x10 [ 505.957141][ T33] ret_from_fork+0x514/0xb70 [ 505.957238][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 505.957322][ T33] ? __switch_to+0xc89/0x1420 [ 505.957400][ T33] ? __pfx_kthread+0x10/0x10 [ 505.957457][ T33] ret_from_fork_asm+0x1a/0x30 [ 505.957584][ T33] [ 505.957693][ T33] Sending NMI from CPU 0 to CPUs 1: [ 505.957751][ C1] NMI backtrace for cpu 1 [ 505.957773][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.957800][ C1] Tainted: [L]=SOFTLOCKUP [ 505.957807][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.957819][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 505.957913][ C1] Code: e8 2e c3 5a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3f 31 c9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 12 72 06 cc 44 89 f9 80 e1 07 [ 505.957931][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 505.957949][ C1] RAX: 1ffffffff3560100 RBX: 00000000000003fd RCX: 0000000000000000 [ 505.957963][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 505.957975][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 505.957988][ C1] R10: dffffc0000000000 R11: ffffffff856ce650 R12: dffffc0000000000 [ 505.958003][ C1] R13: 0000000000000000 R14: ffffffff9ab00b80 R15: 0000000000000000 [ 505.958016][ C1] FS: 0000000000000000(0000) GS:ffff88812500a000(0000) knlGS:0000000000000000 [ 505.958033][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.958046][ C1] CR2: 00007f847af75000 CR3: 000000007620e000 CR4: 00000000003526f0 [ 505.958064][ C1] Call Trace: [ 505.958072][ C1] [ 505.958081][ C1] wait_for_lsr+0x184/0x2f0 [ 505.958105][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 505.958137][ C1] serial8250_console_write+0xaa1/0x1200 [ 505.958158][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 505.958182][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 505.958203][ C1] ? __schedule+0x1b63/0x59e0 [ 505.958240][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 505.958270][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 505.958294][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 505.958322][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 505.958377][ C1] nbcon_kthread_func+0x679/0x880 [ 505.958400][ C1] ? nbcon_kthread_func+0x163/0x880 [ 505.958426][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 505.958450][ C1] ? __kthread_parkme+0x71/0x1f0 [ 505.958478][ C1] ? __kthread_parkme+0x199/0x1f0 [ 505.958508][ C1] kthread+0x38b/0x480 [ 505.958526][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 505.958544][ C1] ? __pfx_kthread+0x10/0x10 [ 505.958562][ C1] ret_from_fork+0x514/0xb70 [ 505.958593][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 505.958622][ C1] ? __switch_to+0xc89/0x1420 [ 505.958648][ C1] ? __pfx_kthread+0x10/0x10 [ 505.958667][ C1] ret_from_fork_asm+0x1a/0x30 [ 505.958705][ C1] [ 505.994625][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 506.705358][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 506.716044][ T33] Tainted: [L]=SOFTLOCKUP [ 506.720376][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.730444][ T33] Call Trace: [ 506.733744][ T33] [ 506.736683][ T33] vpanic+0x56d/0xa60 [ 506.740697][ T33] ? __pfx___schedule+0x10/0x10 [ 506.745570][ T33] ? __pfx_vpanic+0x10/0x10 [ 506.750105][ T33] panic+0xc5/0xd0 [ 506.753853][ T33] ? __pfx_panic+0x10/0x10 [ 506.758290][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 506.763773][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 506.769158][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 506.775332][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 506.781499][ T33] watchdog+0x1030/0x1030 [ 506.785841][ T33] ? watchdog+0x1c7/0x1030 [ 506.790275][ T33] kthread+0x38b/0x480 [ 506.794360][ T33] ? __pfx_watchdog+0x10/0x10 [ 506.799044][ T33] ? __pfx_kthread+0x10/0x10 [ 506.803643][ T33] ret_from_fork+0x514/0xb70 [ 506.808247][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 506.813374][ T33] ? __switch_to+0xc89/0x1420 [ 506.818069][ T33] ? __pfx_kthread+0x10/0x10 [ 506.822669][ T33] ret_from_fork_asm+0x1a/0x30 [ 506.827467][ T33] [ 506.831079][ T33] Kernel Offset: disabled [ 506.835415][ T33] Rebooting in 86400 seconds..