last executing test programs: 2m15.718791683s ago: executing program 32 (id=946): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x1, 0x80}, 0xc) 1m54.037820423s ago: executing program 2 (id=1140): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)='1', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20) 1m53.211668087s ago: executing program 2 (id=1143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x0, 0x5, 0x0, 0x0, 0x5}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9407"}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}}, 0x0) 1m53.159747597s ago: executing program 2 (id=1145): unshare(0x22020600) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) syncfs(r0) 1m52.999204548s ago: executing program 2 (id=1147): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0xffffeffffffffffb, 0x12) 1m52.910032338s ago: executing program 2 (id=1150): syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000480), 0xfd, 0x448, &(0x7f0000000d00)="$eJzs3MtvG0UYAPBv10kLfZBQyqOlgKEgIh5Jk/LogQsIJDggIcGhSFxCklalboOaINEqgoBQe0SVuCNuIPEXcIILAk5IcATOqFKFcmngZLT2OnEd28ROUqf495O2numOPfN5d9azM3YC6FvF7J8kYk9E/BYRQ9Xs9QWK1YflpYWpv5cWppIol1//K6mUu7a0MFUrWnve7jwzkkaknyQNL1g1d/7C6clSaeZcnh+bP/Pu2Nz5C0+eOjN5cubkzNmJY8eeOjr+7DMTT29KnFlc1w5+MHvowMtvXn516vjlt3/8+tLeatzREEd7O9ZdZzGKzUKveGTdr3Jz2FuXTgZ62BA6UoiI7HANVvr/UBRi9eANxUsf97RxwJYql8vlna13L5aB/7Eket0CoDdqH/TZ/W9tu0FDj23h6vPVG6As7uV8q+4ZiDQvM9hwf7uZihFxfPGfz7MtOpqHAADozrfZ+OeJZuO/NO6qK3dbvoYyHBG3R8S+iLgjIvZHxJ0RlbJ3R8Q9HdZfbMivHf+kV7oKbJ2y8d9z+drW9eO/2ugvhgt5bm8l/sHkxKnSzJH8PRmJwZ1ZfrxNHd+9+MunrfbVj/+yLau/NhbM23FloGGCbnpyfnIjMde7+lHEwYFm8ScrKwFJRByIiINd1nHqsa8Otdr33/G3sQnrTOUvIh6tHv/FyOOvrvCtrtwl7dcnx26J0syRsdpZsdZPP198rVX9G4p/E2THf1fT838l/uGkfr12rvM6Lv5+qeU9Tbfn/47kjUq6thr7/uT8/LnxyuVp7f9PrD63ls/LV+IfOdy8/++L1Xfi3ojITuL7IuL+iHggb/uDEfFQRBxuE/8PLzz8Tvfxb60s/umOjn/nicLp779pVf86jv+vb+WpkfxxPde/SuWv5Jk2DezuXQMAAICbSxoReyJJR1fSaTo6Wv0O//7YlZZm5+YfPzH73tnp6nflh2Mwrc10DdXNh47nc8O1/ERD/mg+b/xZ4dZKfnRqtjTd6+Chz+1u0f8zfxZ63Tpgy/m9FvQv/R/6l/4P/Uv/h/6l/0P/atb/P+xBO4Abz+c/9C/9H/qX/g/9S/+HvrSR3/V3kFgul8tbXMW2SXyZ/63A7dKeLUpEui2aIbGhxB/5dWDtrl5elQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbPvwEAAP//rdfgqg==") syz_mount_image$gfs2(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x8c9b, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESHEX, @ANYRES8], 0x0, 0x12760, &(0x7f0000002bc0)="$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") lstat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000001a80)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000240)={0x5, 0x700, 0x0, 0x6, 0x3, 0x400000000400, 0x7, 0x8000000000000000, 0x1}) 1m51.527636565s ago: executing program 2 (id=1162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x28}}, 0x4002) 1m43.90438197s ago: executing program 3 (id=1255): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7}}], 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf251100000008001500c0000000080001"], 0x2c}}, 0x0) 1m43.81758578s ago: executing program 3 (id=1258): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x8d) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 1m43.350233592s ago: executing program 3 (id=1262): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r1) setfsgid(r1) 1m43.146843523s ago: executing program 3 (id=1265): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='size=E']) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020) 1m43.001934494s ago: executing program 3 (id=1268): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1m42.447879127s ago: executing program 3 (id=1277): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000180)="$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") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) ftruncate(r0, 0xfe8) 1m42.416495976s ago: executing program 33 (id=1277): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000180)="$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") r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) ftruncate(r0, 0xfe8) 1m36.427839094s ago: executing program 34 (id=1162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x28}}, 0x4002) 50.462406707s ago: executing program 6 (id=1932): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setresuid(0xee00, 0xffffffffffffffff, r1) 50.301831867s ago: executing program 6 (id=1938): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, "8500"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 48.121664977s ago: executing program 6 (id=1971): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 48.027768058s ago: executing program 6 (id=1973): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000580)={[{@lfs_mode}, {@usrjquota={'usrjquota', 0x3d, 'nou\xe1\xc6\x9c\xf0xVttr'}}, {@acl}, {@grpjquota={'grpjquota', 0x3d, 'grpquota'}}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@acl}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@adaptive_mode}]}, 0x1, 0x5514, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000480)={[{@grpquota}]}) 47.381239111s ago: executing program 6 (id=1978): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x58}}, 0x0) 46.622291164s ago: executing program 6 (id=1987): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) 46.580095454s ago: executing program 35 (id=1987): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x9}}]}]}, 0x2c}}, 0x0) 27.155516204s ago: executing program 7 (id=2227): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 26.899200665s ago: executing program 7 (id=2230): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x496, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 26.528164527s ago: executing program 7 (id=2234): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x1, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x8}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 26.332858058s ago: executing program 7 (id=2238): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001900)="a9cff3", 0x3}, {&(0x7f0000001980)="5fb3450effde69bf04e3e44a973930e0b6f397ee7a964d6dbf627acb2d9426f6a9b00bee1bf4eb68838680", 0x2b}, {&(0x7f00000019c0)="48c2c8557113f61ff1aafba9c7e66173164c8ca0c15cbff5683fb4ddb6394595afbcbaaa377a4a5f830744e047edf851d62a66716dd1b4267d5ed18eb9f5c4f88793e82590b71922e22ef06265309b871cba49e7299e2c090c02bd10630588bdc3466f4f5bb8578a26c37021bbb564f50e373543dbd71abbcbe8e6e7bb3b26a9dd2f5ed56323a0055e2e30ed595dea33087b6392a8cabc9e5a07b064e79c7528a81ab8d7ee7aa5ff27ab7c51", 0xac}, {&(0x7f0000001a80)='Tq', 0x2}, {&(0x7f0000001b00)="696c6a7b5ea3afd7819ee415dbdde5557921387803db572c10968b2e1fcb5d68baa44bba", 0x24}, {&(0x7f0000001c00)="5ca5b1dabcc26ad25d615b05179a9fd11e6653791ad22b90c11d51d82c5339db07573325f2a50b1f39be84a4ded40063e6538f23fbbb6e35546898cd11f3aed21d065dae1ca8fe6f98feeab1efe708ae36e99ef9540324c582f7f497944e4d88c571328536fa3082092fe0866359247a8cc4fa868e328224411de12869db981383d403e97e958db40152d168b100a3220ec4a243377a0dc1be323e588ac346ed86498d1878e5c8dcc063812c", 0xac}, {&(0x7f0000001d00)="40a39684f731a649fe952deb2eff7fae7af9f2e9", 0x14}, {&(0x7f0000000100)="95279e21b45ae4a5aee2922fbb42ddef77720dcd69c3a7634fa5d5dd8cb61ccf37a54770b9a3141176a43be9992f69be2e7ae28de8ca65be6df98a32aa545334bb61ed7015c2aa6f83b8e33325c5f500730a46b63fa165125099e3df", 0x5c}, {&(0x7f0000000180)="25999f0918ac231cb77bc21ceee786cec4f4a6ab12f313957b371a5d7b5ce1e4fcedae66ada6f196ad603b1f2f1f0bc8847bc6c96e08e176381a2ea47f8c927b7bb343c64d2ee2db265a14470ac1d22325b6e008a839abf26507dcb2c3da6701ea6f498889feae3913310b96a7a01e196c5725f141fdaba9f1b82cfe1c8fa6f6cedf9e58be2dd164af50bca869ad348523cc0abb605f9d5a38296c19a26d8cb920124f61306159298ca0f77e425d89dc8cd02b450404d9d997d6c7fde70e1193a344371a5a9768aba7a19ec989d41ede0c731da027ea3a8d0d3bc5583962f1decb17d9c72792cdee", 0xe8}], 0x9}}], 0x1, 0x0) 26.167585569s ago: executing program 7 (id=2239): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0040ce91bae94d6591ac6d0100000000000000b5384050da"], 0x1, 0xd99, &(0x7f0000000e80)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 25.85670599s ago: executing program 7 (id=2240): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/43, 0x2b, 0x4) 16.487587293s ago: executing program 5 (id=2355): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000001c0)=@chain) 16.426073174s ago: executing program 5 (id=2358): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000001800ef0200000000000000000a100000fe000006"], 0x1c}, 0x1, 0x11, 0x0, 0x4000050}, 0x24) 16.346957164s ago: executing program 5 (id=2360): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f00000000c0)=ANY=[], 0x21, 0x1b2, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 15.919925516s ago: executing program 5 (id=2367): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) 15.635647318s ago: executing program 5 (id=2371): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x20404, &(0x7f0000000ec0)=ANY=[@ANYRESOCT=0x0], 0x1, 0x1235, &(0x7f0000001dc0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x10001, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@norecovery}, {@noquota}, {@noblock_validity}, {@data_err_ignore}, {@nojournal_checksum}, {@acl}, {@usrquota}], [], 0x3d}, 0x64, 0x51c, &(0x7f0000000200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r0}, 0x38) 15.15197988s ago: executing program 5 (id=2380): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), 0x4) 15.040322321s ago: executing program 36 (id=2380): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), 0x4) 10.83588624s ago: executing program 37 (id=2240): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/43, 0x2b, 0x4) 4.979957207s ago: executing program 8 (id=2470): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0x3, "8d"}, @global=@item_012={0x2, 0x1, 0x4, "2c9b"}]}}, 0x0}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 4.592326748s ago: executing program 1 (id=2474): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000540)={[{@jqfmt_vfsv0}]}, 0x1, 0x439, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x140400, 0x13) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 4.086460071s ago: executing program 0 (id=2479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8) 4.086179061s ago: executing program 1 (id=2480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000039c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x28}}, 0x0) 3.919592992s ago: executing program 0 (id=2481): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(r0, &(0x7f00000002c0)) 3.159990785s ago: executing program 0 (id=2482): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x72b80180, 0x0, 0x0, 0x0, 0x0, 0x0) 2.747803037s ago: executing program 1 (id=2485): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0xab, 0x37, 0x40, 0x4e8, 0x6889, 0xefdd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0xa}}]}}]}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCFLSH(r0, 0x89f0, 0x20000000) 2.394974139s ago: executing program 0 (id=2487): unshare(0x2040400) syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0x1, 0x10f6, &(0x7f00000022c0)="$eJzs2LFqFEEYB/D/7J6C1cmkXwJaKEhIOF8ghcI1FtZ2h5WdVyn3OD6OpLIPeYAUAXtlb10NIki4JQfH7wfL7vyZb76dciYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmyUPkxw1SR2zJklJuu5ieZWkG/PHX9smJW/fL9evPi5er4dp6bMmpa/ajuvZk1oXdVHP6suj86d1/enzh/ZWy5Iulzeb1aM315Nupe/dTroiAAAAHIYfO5vvuT8AAADwP5NdJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMoI4fTZKSdN3F8ipJt9/fAgAAAHZU0uTd/F/5cA3wx4t8m5dtPvpe+jmn+TLUP7979wd3LwEAAIADVW6dx59l9vtc3mfHmeXkZBj/euX6PGmTnP61zuXNZrV9jjercp8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sgPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAACAqQIAAP//I7HRJg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) fsync(r0) 2.12402167s ago: executing program 8 (id=2489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r1, 0x301, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 2.038678161s ago: executing program 8 (id=2491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_2GHZ={0xffffffffffffff80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14}]}]}]}, 0x6c}}, 0x0) 1.919268451s ago: executing program 8 (id=2493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000d6000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x17ba, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x100002) 1.699116412s ago: executing program 8 (id=2496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) 1.611456372s ago: executing program 9 (id=2497): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0}) 953.770986ms ago: executing program 9 (id=2505): r0 = msgget(0x1, 0x291) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="03"], 0x8, 0x800) 745.700367ms ago: executing program 9 (id=2506): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 542.251158ms ago: executing program 0 (id=2507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000006902000000000000010013"]) 538.595537ms ago: executing program 4 (id=2508): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x80, 0x0, 0x2, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x9040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 422.336388ms ago: executing program 4 (id=2509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r0) 405.708158ms ago: executing program 1 (id=2510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0) 191.973529ms ago: executing program 1 (id=2511): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001780)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000017c0)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbb}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004811}, 0x20000004) 160.422759ms ago: executing program 1 (id=2512): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082102, &(0x7f0000000200)) syz_usb_connect(0x0, 0x34, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb905000000010902220001000000000904000001010351000905030e000000000007"], 0x0) 146.544089ms ago: executing program 4 (id=2513): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x694, &(0x7f0000001100)="$eJzs3U1sHGf9B/DvbnbX3vz/Sp02SQOqRNRIBRGROLGSYi4NCKFIVKgqB8TRSpzGyiatHBc5EYLwfuDCoXeKRG5cQOIeVM7AqVcfKyFx6SmAxKKZnbXXr9l1Yq8tPp9odp5nnpd5nt/M7OzOKnKA/1nXzqXxOLVcO/fmcpFfeTTTWXk0c6efTjKRpJ40eqvU7ia1j5Kr6S35TLGx6q623X4+WJh9++NPVz7p5RrVUtav79Rukyv1LTY+rJacSXKkWj+Ddf1d39Bfa+TuaqszLAJ2th84GLdmku463z21VvJUw1+3wIFVK++bm6/5qeRoksnqc0Dvrti7Zx9qD8c9AAAAANgHL/yy/Ap/bNzjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMOk9/f/i1W51PvpM6n1//5/q9qWKn2oPR73AAAAAAAAAABgdN/8/w0bPvckT7KcY/18t1b+5v9qmTlRvv5f3s+9zGcx57OcuSxlKYu5mGSqLG+Wr63luaWlxYtDtLy02jIDLS8NOYP27icPAAAAAAAAAIdFY/QmP861td//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIKglR3qrcjnRT0+l3kgymaRV1HuY/LWfPpB+/afBXPff3dKmao/3c0wAAAAwJi88yZMs51g/362V3/lPld/7J/N+7mYpC1lKJ/O5UT4L6H3rr688mumsPJq5Uyyb+/3qP0YaRtljes8ett7z6bJGOzezUG45n+t5N53cSL1sWTjdH8/W4/pRMabaG5UhR3ajWhcz/1WaI81qN2pD15wqI1KMqBeR6aptEY3jO0dixKPT31M/9hdTX33yc+J5xny5t3r9t711MZ+fjxSTvbYxEpcGzr5TK6ntEInk83/83Xdude7enrh579zBmdIIJgaeoG2MxMxAJF7e+ZxIM1Ukbh3WSAyaLiNxcjV/Ld/It3MuZ/JWFrOQ72UuS5nPmXw9czmSuep8Ll6ndo7U1XW5t542klZ5XJrVu+jwY1rKXF4t2x7LQr6Vd3Mj87lS/ruUi3m96jGrR/jkEFd9fbR32rNfGHiY/Isk7eHa7YNiYMdX706DZ/10eR0cX7dl7Tp48fnfjxqfrRLFPn4ycETGb2MkLg5E4qWdI/Gb8m3lXufu7cVbc+8Nub/XqnVxHf3sQN0livPlxeJglbn1Z0dR9tLGsslevFrVLy69svV33KLs5GrZ9lfq5VzObFn71JY9XSrLXt6ybKYsOz1Qtu7z1tXe5y0ADryjXzzaav+9/Zf2h+2ftm+135z82sSXJ15ppfnn5lca00deq79S+0M+zA/Wvv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7d+/+g9tznc784oZEt9v94TZFe5hoJ+lvSZ7Wqpmn19mbRCtJmWj0E6P1MzFU5dba0Xnj988y5uaorZLnEqhGdZLdf3D7n91ud98P0xaJ5g7n/FqiW9lU1B2q+dgS/+o+vw7H/MYE7LkLS3feu3Dv/oMvLdyZe2f+nfm7s5cvz07PXr7ytws3Fzrz073XcY8S2AtrN/1xjwQAAAAAAAAAAAAY1n78t4Rtdv2ffZ4qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEhdOzdRpc5PF68rj2Y6xdJPr1Ysq9WT1L6f1D5Krqa3ZGqgu9p2+/lgYfbtjz9d+aSXa1RLWb++rl1zN7N4WC05k+RItR40+Qz9Xa/WuxpZqbY6wyJgZ/uBg3H7bwAAAP//2wMQAg==") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x70000}]) 0s ago: executing program 0 (id=2514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000748d"]) kernel console output (not intermixed with test programs): detected capacity change from 0 to 512 [ 208.471501][ T9241] loop6: detected capacity change from 0 to 32768 [ 208.514115][ T9252] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 208.537741][ T9252] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.555428][ T9241] XFS (loop6): Mounting V5 Filesystem [ 208.586107][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 208.586123][ T26] audit: type=1800 audit(1733196848.504:161): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1798" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 208.640903][ T26] audit: type=1800 audit(1733196848.564:162): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1798" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 208.696194][ T9241] XFS (loop6): Ending clean mount [ 208.757703][ T7785] XFS (loop6): Unmounting Filesystem [ 208.857361][ T26] audit: type=1326 audit(1733196848.774:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.5.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147f283f19 code=0x7ffc0000 [ 208.938219][ T9283] loop5: detected capacity change from 0 to 128 [ 208.948448][ T26] audit: type=1326 audit(1733196848.804:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.5.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f147f283f19 code=0x7ffc0000 [ 208.971367][ T26] audit: type=1326 audit(1733196848.804:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.5.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147f283f19 code=0x7ffc0000 [ 208.998443][ T26] audit: type=1326 audit(1733196848.804:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.5.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f147f283f19 code=0x7ffc0000 [ 209.047684][ T26] audit: type=1326 audit(1733196848.804:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.5.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147f283f19 code=0x7ffc0000 [ 209.101848][ T9283] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 209.121010][ T26] audit: type=1326 audit(1733196848.804:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.5.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f147f283f19 code=0x7ffc0000 [ 209.210119][ T9283] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.335491][ T26] audit: type=1326 audit(1733196848.804:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.5.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147f283f19 code=0x7ffc0000 [ 209.520494][ T9298] netlink: 'syz.5.1812': attribute type 33 has an invalid length. [ 209.528379][ T9298] netlink: 'syz.5.1812': attribute type 13 has an invalid length. [ 209.616034][ T9298] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1812'. [ 209.647995][ T9302] netlink: 'syz.5.1812': attribute type 33 has an invalid length. [ 209.756197][ T9276] loop7: detected capacity change from 0 to 32768 [ 209.944171][ T9304] loop1: detected capacity change from 0 to 32768 [ 209.997456][ T9304] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 210.009376][ T9304] CPU: 0 PID: 9304 Comm: syz.1.1815 Not tainted 5.15.173-syzkaller #0 [ 210.017670][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.027746][ T9304] Call Trace: [ 210.031166][ T9304] [ 210.034112][ T9304] dump_stack_lvl+0x1e3/0x2d0 [ 210.038804][ T9304] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 210.044449][ T9304] ? panic+0x860/0x860 [ 210.048530][ T9304] ? sysfs_create_dir_ns+0x282/0x390 [ 210.053856][ T9304] sysfs_create_dir_ns+0x2c6/0x390 [ 210.058972][ T9304] ? sysfs_warn_dup+0xa0/0xa0 [ 210.063649][ T9304] ? do_raw_spin_unlock+0x137/0x8b0 [ 210.068861][ T9304] ? kobject_set_name_vargs+0xca/0x110 [ 210.074328][ T9304] kobject_add_internal+0x6e0/0xe00 [ 210.079539][ T9304] kobject_init_and_add+0x120/0x190 [ 210.084749][ T9304] ? lockdep_softirqs_off+0x420/0x420 [ 210.090128][ T9304] ? widen_string+0x3a/0x310 [ 210.094740][ T9304] ? kobject_add+0x210/0x210 [ 210.099340][ T9304] ? __init_swait_queue_head+0xaa/0x140 [ 210.104921][ T9304] gfs2_sys_fs_add+0x237/0x4a0 [ 210.109694][ T9304] ? gfs2_recover_set+0x240/0x240 [ 210.114756][ T9304] ? snprintf+0xd6/0x120 [ 210.119018][ T9304] ? vscnprintf+0x80/0x80 [ 210.123349][ T9304] ? read_word_at_a_time+0xe/0x20 [ 210.128372][ T9304] ? strscpy+0x89/0x220 [ 210.132544][ T9304] gfs2_fill_super+0x1299/0x2750 [ 210.137511][ T9304] ? gfs2_reconfigure+0xcf0/0xcf0 [ 210.142532][ T9304] ? ptr_to_hashval+0x60/0x60 [ 210.147207][ T9304] ? up_write+0x19d/0x580 [ 210.151575][ T9304] ? set_blocksize+0x1ec/0x370 [ 210.156366][ T9304] get_tree_bdev+0x3fe/0x620 [ 210.160950][ T9304] ? gfs2_reconfigure+0xcf0/0xcf0 [ 210.166082][ T9304] gfs2_get_tree+0x50/0x210 [ 210.170597][ T9304] ? bpf_lsm_capable+0x5/0x10 [ 210.175330][ T9304] vfs_get_tree+0x88/0x270 [ 210.179776][ T9304] do_new_mount+0x2ba/0xb40 [ 210.184283][ T9304] ? do_move_mount_old+0x160/0x160 [ 210.189399][ T9304] ? user_path_at_empty+0x12b/0x180 [ 210.194620][ T9304] __se_sys_mount+0x2d5/0x3c0 [ 210.199304][ T9304] ? __x64_sys_mount+0xc0/0xc0 [ 210.204076][ T9304] ? syscall_enter_from_user_mode+0x2e/0x240 [ 210.210057][ T9304] ? lockdep_hardirqs_on+0x94/0x130 [ 210.215272][ T9304] ? __x64_sys_mount+0x1c/0xc0 [ 210.220039][ T9304] do_syscall_64+0x3b/0xb0 [ 210.224495][ T9304] ? clear_bhb_loop+0x15/0x70 [ 210.229177][ T9304] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.235098][ T9304] RIP: 0033:0x7fc82fa476ba [ 210.239508][ T9304] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.259110][ T9304] RSP: 002b:00007fc82d8bbe88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.267524][ T9304] RAX: ffffffffffffffda RBX: 00007fc82d8bbf10 RCX: 00007fc82fa476ba [ 210.275499][ T9304] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fc82d8bbed0 [ 210.283540][ T9304] RBP: 0000000020000000 R08: 00007fc82d8bbf10 R09: 0000000000218c5b [ 210.291537][ T9304] R10: 0000000000218c5b R11: 0000000000000246 R12: 0000000020000100 [ 210.299528][ T9304] R13: 00007fc82d8bbed0 R14: 0000000000012752 R15: 0000000020000080 [ 210.307533][ T9304] [ 210.319057][ T9304] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 210.335361][ T9304] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 210.512138][ T9304] loop1: detected capacity change from 0 to 256 [ 210.579060][ T9304] FAT-fs (loop1): Directory bread(block 64) failed [ 210.585927][ T9304] FAT-fs (loop1): Directory bread(block 65) failed [ 210.592604][ T9304] FAT-fs (loop1): Directory bread(block 66) failed [ 210.599141][ T9304] FAT-fs (loop1): Directory bread(block 67) failed [ 210.605845][ T9304] FAT-fs (loop1): Directory bread(block 68) failed [ 210.612529][ T9304] FAT-fs (loop1): Directory bread(block 69) failed [ 210.619147][ T9304] FAT-fs (loop1): Directory bread(block 70) failed [ 210.626072][ T9304] FAT-fs (loop1): Directory bread(block 71) failed [ 210.632843][ T9304] FAT-fs (loop1): Directory bread(block 72) failed [ 210.639592][ T9304] FAT-fs (loop1): Directory bread(block 73) failed [ 210.779175][ T9312] IPv6: Can't replace route, no match found [ 210.809406][ T9315] netlink: 'syz.7.1821': attribute type 7 has an invalid length. [ 210.816299][ T9316] loop1: detected capacity change from 0 to 1024 [ 210.861598][ T9320] loop6: detected capacity change from 0 to 1024 [ 210.893135][ T9316] EXT4-fs (loop1): Ignoring removed bh option [ 210.903171][ T9316] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.921790][ T9320] EXT4-fs (loop6): Test dummy encryption mode enabled [ 210.928921][ T9320] EXT4-fs (loop6): Test dummy encryption mode enabled [ 210.979828][ T9316] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,i_version,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 211.019501][ T9320] EXT4-fs (loop6): Ignoring removed orlov option [ 211.062260][ T9320] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 211.174467][ T9318] loop5: detected capacity change from 0 to 32768 [ 211.214855][ T9318] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1822 (9318) [ 211.276427][ T9318] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 211.286242][ T9318] BTRFS info (device loop5): using free space tree [ 211.292852][ T9318] BTRFS info (device loop5): has skinny extents [ 211.387674][ T9357] loop1: detected capacity change from 0 to 1024 [ 211.396085][ T9318] BTRFS info (device loop5): enabling ssd optimizations [ 211.438088][ T9363] loop6: detected capacity change from 0 to 128 [ 211.454678][ T9357] EXT4-fs (loop1): Ignoring removed orlov option [ 211.469561][ T1108] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 211.508451][ T9357] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,bsddf,barrier=0x0000000000000000,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,delalloc,,errors=continue. Quota mode: none. [ 211.534655][ T9363] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 211.551136][ T2312] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 211.593814][ T9363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.840295][ T1108] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.869293][ T1108] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.907040][ T1108] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 211.926865][ T1108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.938074][ T1108] usb 8-1: config 0 descriptor?? [ 211.941821][ T9370] netlink: 'syz.1.1833': attribute type 1 has an invalid length. [ 211.955463][ T9370] netlink: 'syz.1.1833': attribute type 2 has an invalid length. [ 212.009667][ T2312] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 212.023037][ T2312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.044726][ T2312] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 212.063995][ T2312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.065498][ T9378] loop1: detected capacity change from 0 to 256 [ 212.138062][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1839'. [ 212.147693][ T9382] netlink: 'syz.5.1839': attribute type 1 has an invalid length. [ 212.153370][ T9378] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 212.156824][ T9382] netlink: 'syz.5.1839': attribute type 2 has an invalid length. [ 212.216258][ T2312] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 212.227793][ T2312] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 212.244118][ T2312] usb 1-1: Product: syz [ 212.248602][ T2312] usb 1-1: Manufacturer: syz [ 212.290277][ T2312] cdc_wdm 1-1:1.0: skipping garbage [ 212.295563][ T2312] cdc_wdm 1-1:1.0: skipping garbage [ 212.306979][ T9386] loop5: detected capacity change from 0 to 4096 [ 212.341370][ T2312] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 212.347296][ T2312] cdc_wdm 1-1:1.0: Unknown control protocol [ 212.398045][ T9389] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.444849][ T1108] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 212.471118][ T1108] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.000A/input/input11 [ 212.500750][ T7415] usb 1-1: USB disconnect, device number 14 [ 212.535348][ T1108] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 212.678010][ T1108] usb 8-1: USB disconnect, device number 3 [ 212.730245][ T9400] loop5: detected capacity change from 0 to 8192 [ 212.799139][ T9400] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 212.814972][ T9407] loop6: detected capacity change from 0 to 4096 [ 212.833989][ T9400] REISERFS (device loop5): using ordered data mode [ 212.841113][ T9400] reiserfs: using flush barriers [ 212.847871][ T9400] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.869798][ T9400] REISERFS (device loop5): checking transaction log (loop5) [ 212.877133][ T9407] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 212.925773][ T9412] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 212.925773][ T9412] program syz.1.1853 not setting count and/or reply_len properly [ 212.967847][ T9407] ntfs3: loop6: failed to convert "c46c" to iso8859-5 [ 213.012274][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 213.044501][ T9400] REISERFS (device loop5): Using tea hash to sort names [ 213.049008][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 213.062899][ T9400] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 213.066669][ T9414] device gtp0 entered promiscuous mode [ 213.084073][ T9400] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 213.391094][ T9434] IPv6: Can't replace route, no match found [ 213.483501][ T9442] netlink: 'syz.6.1869': attribute type 1 has an invalid length. [ 213.722795][ T7416] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 213.853369][ T9462] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 213.871766][ T9462] XFS (loop6): SB validate failed with error -5. [ 213.878225][ T9471] loop1: detected capacity change from 0 to 64 [ 213.990397][ T7416] usb 1-1: Using ep0 maxpacket: 8 [ 214.045301][ T9471] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 214.109845][ T7416] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.129704][ T7416] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.159325][ T7416] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.184939][ T7416] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.205962][ T7416] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.214678][ T9436] loop7: detected capacity change from 0 to 40427 [ 214.215413][ T7416] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.275993][ T9436] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 214.284173][ T9436] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 214.338460][ T9436] F2FS-fs (loop7): invalid crc value [ 214.370501][ T9460] loop5: detected capacity change from 0 to 32768 [ 214.386267][ T9436] F2FS-fs (loop7): Found nat_bits in checkpoint [ 214.408433][ T9483] loop6: detected capacity change from 0 to 512 [ 214.452250][ T9436] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 214.461490][ T9436] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 214.509965][ T7416] usb 1-1: GET_CAPABILITIES returned 0 [ 214.516409][ T7416] usbtmc 1-1:16.0: can't read capabilities [ 214.530422][ T9483] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 214.548739][ T26] audit: type=1804 audit(1733196854.454:170): pid=9436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1866" name="/newroot/115/file0/file0" dev="loop7" ino=10 res=1 errno=0 [ 214.577742][ T9483] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.599381][ T9460] XFS (loop5): Mounting V5 Filesystem [ 214.619564][ T26] audit: type=1800 audit(1733196854.534:171): pid=9483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1884" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 214.655966][ T26] audit: type=1800 audit(1733196854.554:172): pid=9483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1884" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 214.713710][ T9501] loop1: detected capacity change from 0 to 4096 [ 214.743069][ T2312] usb 1-1: USB disconnect, device number 15 [ 214.766519][ T9501] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 214.774237][ T9460] XFS (loop5): Ending clean mount [ 214.924794][ T6769] XFS (loop5): Unmounting Filesystem [ 215.407066][ T9517] loop0: detected capacity change from 0 to 1024 [ 215.617134][ T9523] loop1: detected capacity change from 0 to 512 [ 215.622660][ T9509] loop7: detected capacity change from 0 to 32768 [ 215.677013][ T4232] hfsplus: b-tree write err: -5, ino 4 [ 215.691247][ T9523] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 215.726855][ T9509] JBD2: Ignoring recovery information on journal [ 215.778334][ T9509] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 215.826133][ T9523] EXT4-fs (loop1): 1 truncate cleaned up [ 215.832137][ T9523] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,grpjquota=,usrjquota=,block_validity,lazytime,quota,acl,i_version,,errors=continue. Quota mode: writeback. [ 215.865537][ T9513] loop6: detected capacity change from 0 to 32768 [ 215.919582][ T9513] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1893 (9513) [ 215.937612][ T7962] ocfs2: Unmounting device (7,7) on (node local) [ 216.017805][ T9513] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 216.039356][ T9513] BTRFS info (device loop6): enabling auto defrag [ 216.045838][ T9513] BTRFS info (device loop6): use no compression [ 216.063839][ T9513] BTRFS info (device loop6): force clearing of disk cache [ 216.079652][ T9513] BTRFS info (device loop6): max_inline at 4096 [ 216.095661][ T9513] BTRFS info (device loop6): disabling free space tree [ 216.110808][ T9513] BTRFS info (device loop6): has skinny extents [ 216.427335][ T9513] BTRFS info (device loop6): enabling ssd optimizations [ 216.460844][ T9513] BTRFS info (device loop6): clearing free space tree [ 216.467710][ T9513] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.482144][ T9567] loop5: detected capacity change from 0 to 8 [ 216.531648][ T9513] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.884101][ T9581] program syz.5.1913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.136791][ T9556] loop0: detected capacity change from 0 to 32768 [ 217.241573][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.338575][ T9556] JBD2: Ignoring recovery information on journal [ 217.427126][ T9556] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 217.461423][ T26] audit: type=1800 audit(1733197113.376:173): pid=9556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1907" name="file0" dev="loop0" ino=16946 res=0 errno=0 [ 217.493504][ T4167] ocfs2: Unmounting device (7,0) on (node local) [ 217.684526][ T9603] loop6: detected capacity change from 0 to 128 [ 217.749964][ T9603] EXT4-fs (loop6): Ignoring removed nobh option [ 217.794925][ T9603] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 217.851513][ T9603] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.323675][ T9640] loop7: detected capacity change from 0 to 256 [ 218.464481][ T9647] loop0: detected capacity change from 0 to 1024 [ 218.529627][ T7415] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 218.558009][ T9654] loop7: detected capacity change from 0 to 256 [ 218.561642][ T9647] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,bsddf,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 218.611302][ T9654] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 218.666724][ T26] audit: type=1800 audit(1733197114.576:174): pid=9654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1942" name="bus" dev="loop7" ino=1048676 res=0 errno=0 [ 218.697913][ T9657] loop5: detected capacity change from 0 to 128 [ 218.728166][ T9659] loop1: detected capacity change from 0 to 256 [ 218.775426][ T9657] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 218.800274][ T7415] usb 7-1: Using ep0 maxpacket: 16 [ 218.835701][ T9659] FAT-fs (loop1): Directory bread(block 64) failed [ 218.847606][ T9657] sysv_free_block: trying to free block not in datazone [ 218.870580][ T9659] FAT-fs (loop1): Directory bread(block 65) failed [ 218.892062][ T9659] FAT-fs (loop1): Directory bread(block 66) failed [ 218.898669][ T9659] FAT-fs (loop1): Directory bread(block 67) failed [ 218.920025][ T7415] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.939493][ T7415] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.968917][ T9659] FAT-fs (loop1): Directory bread(block 68) failed [ 218.975708][ T7415] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.976068][ T9665] sysv_count_free_blocks: free block count was -2041545929, correcting to 9 [ 218.989147][ T9659] FAT-fs (loop1): Directory bread(block 69) failed [ 219.014239][ T7415] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 219.025496][ T9659] FAT-fs (loop1): Directory bread(block 70) failed [ 219.037949][ T7415] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.048195][ T9659] FAT-fs (loop1): Directory bread(block 71) failed [ 219.066779][ T7415] usb 7-1: config 0 descriptor?? [ 219.074749][ T9659] FAT-fs (loop1): Directory bread(block 72) failed [ 219.086395][ T9659] FAT-fs (loop1): Directory bread(block 73) failed [ 219.204557][ T9677] netlink: 'syz.7.1952': attribute type 25 has an invalid length. [ 219.243436][ T9665] sysv_count_free_inodes: unable to read inode table [ 219.298386][ T9679] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 219.404756][ T6769] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 219.420484][ T9687] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1957'. [ 219.576735][ T7415] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000B/input/input12 [ 219.618678][ T7415] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 219.626252][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'. [ 219.679598][ T9702] loop5: detected capacity change from 0 to 16 [ 219.739803][ T1108] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 219.776780][ T9702] erofs: (device loop5): mounted with root inode @ nid 36. [ 219.789322][ T7415] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 219.820704][ T7416] usb 7-1: USB disconnect, device number 7 [ 220.042547][ T7415] usb 8-1: Using ep0 maxpacket: 32 [ 220.047853][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 220.112866][ T9704] loop1: detected capacity change from 0 to 32768 [ 220.169960][ T7415] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.181450][ T1108] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 220.195639][ T9704] JBD2: Ignoring recovery information on journal [ 220.199741][ T1108] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 220.213243][ T7415] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.223197][ T7415] usb 8-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 220.246707][ T1108] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 220.287535][ T7415] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.298699][ T9704] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 220.324961][ T1108] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.346232][ T7415] usb 8-1: config 0 descriptor?? [ 220.355461][ T1108] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.382060][ T1108] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.406712][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.452596][ T4180] ocfs2: Unmounting device (7,1) on (node local) [ 220.656246][ T4362] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 220.679596][ T1108] usb 1-1: GET_CAPABILITIES returned 0 [ 220.685149][ T1108] usbtmc 1-1:16.0: can't read capabilities [ 220.831557][ T9718] loop6: detected capacity change from 0 to 40427 [ 220.862999][ T7415] macally 0003:060B:0001.000C: item fetching failed at offset 2/5 [ 220.874194][ T7415] macally: probe of 0003:060B:0001.000C failed with error -22 [ 220.906665][ T9728] loop1: detected capacity change from 0 to 8192 [ 220.916676][ T9718] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 1) [ 220.917883][ T1108] usb 1-1: USB disconnect, device number 16 [ 220.924879][ T9718] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 220.942569][ T9718] F2FS-fs (loop6): invalid crc value [ 220.955077][ T9718] F2FS-fs (loop6): Found nat_bits in checkpoint [ 220.983346][ T9728] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 220.995207][ T9728] REISERFS (device loop1): using ordered data mode [ 221.001873][ T9728] reiserfs: using flush barriers [ 221.006784][ T9718] F2FS-fs (loop6): Cannot turn on quotas: -7 on 0 [ 221.009565][ T9728] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.026208][ T9718] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 221.032564][ T9728] REISERFS (device loop1): checking transaction log (loop1) [ 221.047624][ T9728] REISERFS (device loop1): Using r5 hash to sort names [ 221.054851][ T9718] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 221.062100][ T9718] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 221.065847][ T9728] reiserfs: enabling write barrier flush mode [ 221.098463][ T7416] usb 8-1: USB disconnect, device number 4 [ 221.123088][ T9728] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 221.138879][ T7785] attempt to access beyond end of device [ 221.138879][ T7785] loop6: rw=524288, want=45072, limit=40427 [ 221.154604][ T7785] attempt to access beyond end of device [ 221.154604][ T7785] loop6: rw=0, want=45072, limit=40427 [ 221.190399][ T8445] attempt to access beyond end of device [ 221.190399][ T8445] loop6: rw=2049, want=45104, limit=40427 [ 221.313277][ T4362] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 221.322723][ T4362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.330872][ T4362] usb 6-1: Product: syz [ 221.335053][ T4362] usb 6-1: Manufacturer: syz [ 221.347195][ T4362] usb 6-1: SerialNumber: syz [ 221.361488][ T4362] usb 6-1: config 0 descriptor?? [ 221.536789][ T9743] loop1: detected capacity change from 0 to 4096 [ 221.595153][ T9744] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.635639][ T1235] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.647653][ T4362] usb 6-1: USB disconnect, device number 3 [ 221.674313][ T26] audit: type=1800 audit(1733197117.586:175): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1982" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 221.747116][ T1235] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.789487][ T4360] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 221.940069][ T1235] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.006760][ T1235] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.049337][ T4360] usb 1-1: Using ep0 maxpacket: 16 [ 222.362772][ T9749] loop7: detected capacity change from 0 to 32768 [ 222.394736][ T4360] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 222.411347][ T4360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.424225][ T4360] usb 1-1: Product: syz [ 222.428427][ T4360] usb 1-1: Manufacturer: syz [ 222.435447][ T4360] usb 1-1: SerialNumber: syz [ 222.472852][ T4360] usb 1-1: config 0 descriptor?? [ 222.484029][ T9758] TCP: tcp_parse_options: Illegal window scaling value 184 > 14 received [ 222.515782][ T4360] as10x_usb: device has been detected [ 222.530245][ T4360] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 222.609288][ T4360] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 222.652813][ T4360] as10x_usb: error during firmware upload part1 [ 222.699724][ T4360] Registered device Sky IT Digital Key (green led) [ 222.906972][ T9777] loop5: detected capacity change from 0 to 64 [ 222.938103][ T9767] loop1: detected capacity change from 0 to 8192 [ 222.950284][ T9755] chnl_net:caif_netlink_parms(): no params data found [ 223.008781][ T9767] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 223.036042][ T9767] REISERFS (device loop1): using ordered data mode [ 223.081311][ T9767] reiserfs: using flush barriers [ 223.120271][ T9781] loop7: detected capacity change from 0 to 128 [ 223.130695][ T9767] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 223.226780][ T1108] usb 1-1: USB disconnect, device number 17 [ 223.241300][ T1108] Unregistered device Sky IT Digital Key (green led) [ 223.242399][ T1108] as10x_usb: device has been disconnected [ 223.247059][ T9767] REISERFS (device loop1): checking transaction log (loop1) [ 223.318464][ T9755] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.336222][ T6769] Trying to free block not in datazone [ 223.343147][ T9755] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.354808][ T9755] device bridge_slave_0 entered promiscuous mode [ 223.385698][ T9767] REISERFS (device loop1): Using tea hash to sort names [ 223.395000][ T9755] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.395512][ T9767] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 223.416001][ T9755] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.424868][ T9755] device bridge_slave_1 entered promiscuous mode [ 223.426710][ T9767] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 223.594308][ T9755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.633243][ T9790] loop7: detected capacity change from 0 to 256 [ 223.642651][ T9755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.711603][ T9790] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 198) [ 223.731858][ T9790] FAT-fs (loop7): Filesystem has been set read-only [ 223.742420][ T9755] team0: Port device team_slave_0 added [ 223.839527][ T1235] device hsr_slave_0 left promiscuous mode [ 223.856547][ T1235] device hsr_slave_1 left promiscuous mode [ 223.863301][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.879534][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.890384][ T1235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.897830][ T1235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.935251][ T1235] device bridge_slave_1 left promiscuous mode [ 223.955143][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.002365][ T9793] loop0: detected capacity change from 0 to 4096 [ 224.019663][ T1235] device bridge_slave_0 left promiscuous mode [ 224.025986][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.086469][ T1235] device veth1_macvtap left promiscuous mode [ 224.104113][ T1235] device veth0_macvtap left promiscuous mode [ 224.110107][ T9793] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 224.139601][ T1235] device veth1_vlan left promiscuous mode [ 224.149570][ T1235] device veth0_vlan left promiscuous mode [ 224.219710][ T7415] Bluetooth: hci2: command 0x0409 tx timeout [ 224.388567][ T9805] loop5: detected capacity change from 0 to 512 [ 224.464988][ T9805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 224.495967][ T9805] System zones: 1-12 [ 224.530430][ T9805] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.2009: corrupted in-inode xattr [ 224.587601][ T9805] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2009: couldn't read orphan inode 15 (err -117) [ 224.610347][ T9811] loop0: detected capacity change from 0 to 256 [ 224.632794][ T9805] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,auto_da_alloc,commit=0x0000000000000005,nojournal_checksum,acl,nodelalloc,,errors=continue. Quota mode: none. [ 224.716946][ T9799] loop7: detected capacity change from 0 to 32768 [ 224.775186][ T1235] team0 (unregistering): Port device team_slave_1 removed [ 224.809425][ T9799] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop7 scanned by syz.7.2007 (9799) [ 224.833270][ T1235] team0 (unregistering): Port device team_slave_0 removed [ 224.847855][ T1235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.864032][ T9799] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 224.878671][ T9799] BTRFS info (device loop7): enabling ssd optimizations [ 224.880868][ T1235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.890871][ T9799] BTRFS info (device loop7): using spread ssd allocation scheme [ 224.904891][ T9799] BTRFS info (device loop7): not using spread ssd allocation scheme [ 224.913148][ T9799] BTRFS info (device loop7): disabling tree log [ 224.919731][ T9799] BTRFS info (device loop7): turning on sync discard [ 224.926640][ T9799] BTRFS info (device loop7): setting nodatacow, compression disabled [ 224.935199][ T9799] BTRFS info (device loop7): force clearing of disk cache [ 224.950873][ T9799] BTRFS info (device loop7): using spread ssd allocation scheme [ 224.966495][ T9799] BTRFS info (device loop7): setting datasum, datacow enabled [ 224.992516][ T9799] BTRFS info (device loop7): using free space tree [ 225.009756][ T9799] BTRFS info (device loop7): has skinny extents [ 225.119973][ T1235] bond0 (unregistering): Released all slaves [ 225.173440][ T9799] BTRFS info (device loop7): clearing free space tree [ 225.181326][ T9799] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.191588][ T9799] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.221263][ T9799] BTRFS info (device loop7): creating free space tree [ 225.232606][ T9799] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.244500][ T9799] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.270206][ T9755] team0: Port device team_slave_1 added [ 225.432337][ T9842] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.490761][ T9843] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 225.498580][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.519420][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.545887][ T9755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.597183][ T9755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.616842][ T9755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.703401][ T9755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.755974][ T9857] loop1: detected capacity change from 0 to 1024 [ 225.893741][ T9857] hfsplus: bad catalog folder thread [ 226.069890][ T9755] device hsr_slave_0 entered promiscuous mode [ 226.081123][ T9755] device hsr_slave_1 entered promiscuous mode [ 226.109842][ T9755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.117440][ T9755] Cannot create hsr debugfs directory [ 226.139438][ T4366] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 226.309579][ T4360] Bluetooth: hci2: command 0x041b tx timeout [ 226.365052][ T9876] syz.7.2031 sent an empty control message without MSG_MORE. [ 226.496880][ T9755] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 226.507214][ T9755] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 226.530975][ T4366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 226.548828][ T9755] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 226.565913][ T4366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.586225][ T4366] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.596431][ T9882] loop7: detected capacity change from 0 to 512 [ 226.608118][ T9755] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 226.656168][ T9882] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 226.669936][ T4366] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 226.695214][ T4366] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 226.728848][ T4366] usb 1-1: Manufacturer: syz [ 226.736894][ T4366] usb 1-1: config 0 descriptor?? [ 226.739097][ T9882] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz.7.2034: corrupted in-inode xattr [ 226.761374][ T4360] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 226.798810][ T9882] EXT4-fs (loop7): Remounting filesystem read-only [ 226.857436][ T9882] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.2034: couldn't read orphan inode 15 (err -117) [ 226.878318][ T9755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.910552][ T9755] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.924328][ T9882] EXT4-fs (loop7): Remounting filesystem read-only [ 226.932472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 226.939303][ T9882] EXT4-fs (loop7): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,noauto_da_alloc,nombcache,noquota,grpquota,norecovery,. Quota mode: writeback. [ 226.952649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.997987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.011544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.029985][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.037150][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.046808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.055048][ T4360] usb 2-1: Using ep0 maxpacket: 32 [ 227.061380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.076757][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.083941][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.096049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.107923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.135470][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.196360][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.221983][ T4360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 44376, setting to 1024 [ 227.244496][ T4366] wacom 0003:056A:0045.000D: ignoring exceeding usage max [ 227.260894][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.268926][ T4360] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 227.278905][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.292689][ T4366] wacom 0003:056A:0045.000D: Unknown device_type for 'syz'. Assuming pen. [ 227.321961][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.330231][ T4366] wacom 0003:056A:0045.000D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 227.337941][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.346589][ T4366] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0045.000D/input/input13 [ 227.365123][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.373846][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.383056][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 227.395452][ T9755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 227.416758][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.459448][ T4360] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 227.492937][ T4360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.532025][ T4360] usb 2-1: Product: syz [ 227.536273][ T4360] usb 2-1: Manufacturer: syz [ 227.560607][ T4360] usb 2-1: SerialNumber: syz [ 227.583881][ T4381] usb 1-1: USB disconnect, device number 18 [ 227.591055][ T4360] usb 2-1: config 0 descriptor?? [ 227.609696][ T9878] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 227.646792][ T4360] usb 2-1: invalid MIDI out EP 0 [ 227.727117][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.730677][ T4360] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 227.753408][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.786364][ T9755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.831829][ T9914] loop7: detected capacity change from 0 to 164 [ 227.889274][ T4381] usb 2-1: USB disconnect, device number 20 [ 227.934271][ T9914] Unable to read rock-ridge attributes [ 227.954031][ T9914] Unable to read rock-ridge attributes [ 228.176033][ T9928] loop5: detected capacity change from 0 to 2048 [ 228.238858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.263574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.327332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.350052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.371349][ T9755] device veth0_vlan entered promiscuous mode [ 228.380269][ T4368] Bluetooth: hci2: command 0x040f tx timeout [ 228.393002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.419945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.454985][ T9755] device veth1_vlan entered promiscuous mode [ 228.476088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.564512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.588115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.604328][ T9755] device veth0_macvtap entered promiscuous mode [ 228.624563][ T9755] device veth1_macvtap entered promiscuous mode [ 228.665747][ T9755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.695928][ T9755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.730943][ T9755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.759022][ T9755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.785316][ T9755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.799381][ T9946] loop7: detected capacity change from 0 to 4096 [ 228.805854][ T9755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.815904][ T9755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.826729][ T9755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.841890][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.849419][ T4381] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 228.866596][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 228.883208][ T9946] NILFS (loop7): invalid segment: Checksum error in segment payload [ 228.901847][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.909305][ T9946] NILFS (loop7): trying rollback from an earlier position [ 228.930783][ T9946] NILFS (loop7): recovery complete [ 228.948547][ T9948] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.950284][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.986238][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.011657][ T9755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.028358][ T9932] loop0: detected capacity change from 0 to 32768 [ 229.032284][ T9950] loop5: detected capacity change from 0 to 128 [ 229.049988][ T9755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.069326][ T9755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.086924][ T9946] fuse: Bad value for 'fd' [ 229.089241][ T9755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.119399][ T4381] usb 2-1: Using ep0 maxpacket: 16 [ 229.123374][ T9755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.135313][ T9755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.146358][ T9755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.157156][ T9755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.167081][ T9755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.178100][ T9755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.190573][ T9755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.216256][ T9932] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2050 (9932) [ 229.219942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.242083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.250747][ T4381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.271800][ T9755] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.288453][ T9932] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 229.301134][ T4381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.308570][ T9932] BTRFS info (device loop0): using free space tree [ 229.319356][ T9755] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.338424][ T9932] BTRFS info (device loop0): has skinny extents [ 229.342630][ T4381] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.358146][ T9755] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.382138][ T9954] loop7: detected capacity change from 0 to 64 [ 229.388755][ T9755] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.401909][ T4381] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 229.422802][ T1232] attempt to access beyond end of device [ 229.422802][ T1232] loop5: rw=1, want=1041, limit=128 [ 229.430401][ T4381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.483692][ T9932] BTRFS info (device loop0): enabling ssd optimizations [ 229.533414][ T4381] usb 2-1: config 0 descriptor?? [ 229.601776][ T26] audit: type=1800 audit(1733197125.516:176): pid=9932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2050" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 229.741068][ T9978] loop7: detected capacity change from 0 to 8192 [ 229.800696][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.887221][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.006111][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.021604][ T9978] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 230.035804][ T4381] hid-u2fzero 0003:10C4:8ACF.000E: unknown main item tag 0x0 [ 230.049338][ T9978] REISERFS (device loop7): using ordered data mode [ 230.055871][ T9978] reiserfs: using flush barriers [ 230.061194][ T4381] hid-u2fzero 0003:10C4:8ACF.000E: unknown main item tag 0x0 [ 230.068599][ T4381] hid-u2fzero 0003:10C4:8ACF.000E: item fetching failed at offset 2/5 [ 230.078315][ T9978] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 230.094942][ T4381] hid-u2fzero: probe of 0003:10C4:8ACF.000E failed with error -22 [ 230.098641][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.110093][ T9978] REISERFS (device loop7): checking transaction log (loop7) [ 230.120944][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.177947][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.267332][ T2312] usb 2-1: USB disconnect, device number 21 [ 230.363823][ T9984] lo speed is unknown, defaulting to 1000 [ 230.378295][ T9984] lo speed is unknown, defaulting to 1000 [ 230.378332][ T9978] REISERFS (device loop7): Using tea hash to sort names [ 230.391894][ T9978] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 230.400914][ T9984] lo speed is unknown, defaulting to 1000 [ 230.405634][ T9978] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 230.463812][ T9984] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 230.468740][ T4381] Bluetooth: hci2: command 0x0419 tx timeout [ 230.527492][ T9984] lo speed is unknown, defaulting to 1000 [ 230.542038][ T9984] lo speed is unknown, defaulting to 1000 [ 230.590296][ T9984] lo speed is unknown, defaulting to 1000 [ 230.597173][ T9984] lo speed is unknown, defaulting to 1000 [ 230.628905][ T9984] lo speed is unknown, defaulting to 1000 [ 230.646820][ T9984] lo speed is unknown, defaulting to 1000 [ 230.863603][ T9992] loop1: detected capacity change from 0 to 1024 [ 230.965626][ T9992] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 231.002786][ T9982] loop8: detected capacity change from 0 to 40427 [ 231.038942][ T9992] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 231.106550][T10004] loop5: detected capacity change from 0 to 512 [ 231.139341][ T9982] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 231.147751][ T9982] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 231.194673][T10004] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.216471][T10010] loop7: detected capacity change from 0 to 512 [ 231.227723][T10004] EXT4-fs (loop5): orphan cleanup on readonly fs [ 231.240711][T10004] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #3: comm syz.5.2073: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 231.251340][ T9982] F2FS-fs (loop8): Found nat_bits in checkpoint [ 231.280930][T10004] EXT4-fs error (device loop5): ext4_quota_enable:6391: comm syz.5.2073: Bad quota inode: 3, type: 0 [ 231.337771][T10004] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 231.362116][T10004] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 231.368931][T10004] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.381414][ T9996] loop0: detected capacity change from 0 to 32768 [ 231.421224][ T9982] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 231.428330][ T9982] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 231.438123][T10010] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 231.468475][T10010] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.568731][ T26] audit: type=1800 audit(1733197127.476:177): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2075" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 231.622143][ T26] audit: type=1800 audit(1733197127.496:178): pid=10010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2075" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 231.804833][T10026] loop7: detected capacity change from 0 to 1024 [ 231.849550][ T7417] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 231.882655][T10026] hfsplus: bad catalog entry type [ 231.924737][ T1232] hfsplus: b-tree write err: -5, ino 4 [ 232.059374][ T4368] Bluetooth: hci4: command 0x0406 tx timeout [ 232.119506][ T7417] usb 6-1: Using ep0 maxpacket: 16 [ 232.138443][T10036] loop7: detected capacity change from 0 to 512 [ 232.206221][T10036] EXT4-fs (loop7): Ignoring removed orlov option [ 232.293487][T10036] EXT4-fs (loop7): 1 orphan inode deleted [ 232.298728][T10042] loop8: detected capacity change from 0 to 2048 [ 232.300226][T10036] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 232.326510][T10036] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.347372][T10042] EXT4-fs (loop8): Ignoring removed nobh option [ 232.399517][ T7417] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 232.409523][ T7417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.417648][ T7417] usb 6-1: Product: syz [ 232.422546][ T7417] usb 6-1: Manufacturer: syz [ 232.427407][ T7417] usb 6-1: SerialNumber: syz [ 232.433397][T10042] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,bsdgroups,nobh,barrier=0x0000000000000003,abort,,errors=continue. Quota mode: writeback. [ 232.451901][ T7417] usb 6-1: config 0 descriptor?? [ 232.460225][T10042] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.494495][ T7417] as10x_usb: device has been detected [ 232.502953][ T7417] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 232.505743][T10042] fs-verity: sha256 using implementation "sha256-avx2" [ 232.521258][ T7417] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 232.535912][ T7417] as10x_usb: error during firmware upload part1 [ 232.542983][ T7417] Registered device Sky IT Digital Key (green led) [ 232.565732][T10042] fs-verity (loop8, inode 13): ext4_end_enable_verity() failed with err -30 [ 232.673851][T10034] loop0: detected capacity change from 0 to 40427 [ 232.725518][T10034] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 232.743668][T10034] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 232.845189][T10034] F2FS-fs (loop0): Found nat_bits in checkpoint [ 232.998977][T10034] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 233.013248][T10034] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 233.080061][T10040] loop1: detected capacity change from 0 to 32768 [ 233.153899][T10040] JBD2: Ignoring recovery information on journal [ 233.312900][ T7417] usb 6-1: USB disconnect, device number 4 [ 233.325232][T10040] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 233.356794][ T7417] Unregistered device Sky IT Digital Key (green led) [ 233.386972][ T7417] as10x_usb: device has been disconnected [ 233.475220][ T26] audit: type=1800 audit(1733197129.386:179): pid=10040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2086" name="file0" dev="loop1" ino=16946 res=0 errno=0 [ 233.531443][ T4180] ocfs2: Unmounting device (7,1) on (node local) [ 233.579804][T10076] loop8: detected capacity change from 0 to 4096 [ 233.667044][T10076] NILFS (loop8): invalid segment: Checksum error in segment payload [ 233.689505][T10076] NILFS (loop8): trying rollback from an earlier position [ 233.729571][T10076] NILFS (loop8): recovery complete [ 233.760221][T10082] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.787332][T10083] autofs4:pid:10083:autofs_fill_super: pipe file descriptor does not contain proper ops [ 233.808677][T10085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input16 [ 234.458270][T10094] loop8: detected capacity change from 0 to 32768 [ 234.579522][T10094] XFS (loop8): Mounting V5 Filesystem [ 234.691348][ T7417] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 234.730135][T10094] XFS (loop8): Starting recovery (logdev: internal) [ 234.732128][T10099] loop0: detected capacity change from 0 to 32768 [ 234.775918][T10094] XFS (loop8): Ending recovery (logdev: internal) [ 234.829144][T10126] loop1: detected capacity change from 0 to 1024 [ 234.840690][T10099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2107 (10099) [ 234.876725][ T9755] XFS (loop8): Unmounting Filesystem [ 234.908639][T10126] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.929746][ T7417] usb 8-1: Using ep0 maxpacket: 32 [ 234.977543][T10111] loop5: detected capacity change from 0 to 40427 [ 234.993132][T10099] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 235.019225][T10099] BTRFS info (device loop0): metadata ratio 2 [ 235.025390][T10099] BTRFS info (device loop0): metadata ratio 227 [ 235.032604][T10099] BTRFS info (device loop0): doing ref verification [ 235.043215][T10099] BTRFS info (device loop0): using free space tree [ 235.049789][ T7417] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.068343][ T7417] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.078930][ T7417] usb 8-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 235.081333][T10099] BTRFS info (device loop0): has skinny extents [ 235.096511][ T7417] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.098410][T10111] F2FS-fs (loop5): Found nat_bits in checkpoint [ 235.116176][ T7417] usb 8-1: config 0 descriptor?? [ 235.175328][T10111] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 235.213837][T10099] BTRFS info (device loop0): enabling ssd optimizations [ 235.275170][ T26] audit: type=1800 audit(1733197131.186:180): pid=10099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2107" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 235.365902][ T6769] attempt to access beyond end of device [ 235.365902][ T6769] loop5: rw=2049, want=45104, limit=40427 [ 235.592957][ T7417] wacom 0003:056A:00F0.000F: unknown main item tag 0x0 [ 235.621200][ T7417] wacom 0003:056A:00F0.000F: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.7-1/input0 [ 235.897633][ T5248] usb 8-1: USB disconnect, device number 5 [ 236.065687][T10162] loop8: detected capacity change from 0 to 32768 [ 236.162081][T10162] JBD2: Ignoring recovery information on journal [ 236.240040][T10162] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 236.278171][T10179] loop0: detected capacity change from 0 to 2048 [ 236.337527][T10179] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.339033][T10186] loop5: detected capacity change from 0 to 1024 [ 236.360733][ T9755] ocfs2: Unmounting device (7,8) on (node local) [ 236.414159][T10186] hfsplus: request for non-existent node 3 in B*Tree [ 236.423212][T10186] hfsplus: request for non-existent node 3 in B*Tree [ 236.482535][ T26] audit: type=1800 audit(1733197132.396:181): pid=10186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2131" name="bus" dev="loop5" ino=1025 res=0 errno=0 [ 236.589837][T10191] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2136'. [ 236.692037][T10197] loop7: detected capacity change from 0 to 64 [ 236.842027][T10208] loop8: detected capacity change from 0 to 2048 [ 236.933927][T10214] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.100793][T10223] loop0: detected capacity change from 0 to 256 [ 237.112479][T10219] loop5: detected capacity change from 0 to 64 [ 237.201130][T10219] hfs: request for non-existent node 131072 in B*Tree [ 237.208351][T10219] hfs: request for non-existent node 131072 in B*Tree [ 237.717336][ T7962] Trying to free block not in datazone [ 237.724926][T10243] o2cb: This node has not been configured. [ 237.739262][T10243] o2cb: Cluster check failed. Fix errors before retrying. [ 237.779497][T10243] (syz.1.2158,10243,0):user_dlm_register:675 ERROR: status = -22 [ 237.797953][T10221] loop8: detected capacity change from 0 to 32768 [ 237.805871][T10243] (syz.1.2158,10243,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "bus" [ 238.070761][T10259] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2165'. [ 238.088457][T10256] loop7: detected capacity change from 0 to 256 [ 238.142769][T10256] exfat: Bad value for 'time_offset' [ 238.423710][T10273] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 238.564312][T10281] loop7: detected capacity change from 0 to 512 [ 238.659079][T10281] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 238.706215][T10265] loop1: detected capacity change from 0 to 40427 [ 238.711818][T10281] EXT4-fs (loop7): 1 orphan inode deleted [ 238.719354][T10281] EXT4-fs (loop7): 1 truncate cleaned up [ 238.733016][T10281] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 238.734722][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'. [ 238.767867][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'. [ 238.781768][T10265] F2FS-fs (loop1): invalid crc value [ 238.800142][T10265] F2FS-fs (loop1): Found nat_bits in checkpoint [ 238.909167][T10265] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 239.087580][T10302] lo speed is unknown, defaulting to 1000 [ 239.099100][ T4180] attempt to access beyond end of device [ 239.099100][ T4180] loop1: rw=2049, want=45104, limit=40427 [ 239.116351][T10306] loop7: detected capacity change from 0 to 512 [ 239.196212][T10306] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 239.196212][T10306] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 239.196212][T10306] [ 239.276402][T10306] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 239.285694][T10308] loop0: detected capacity change from 0 to 2048 [ 239.337695][T10306] EXT4-fs (loop7): orphan cleanup on readonly fs [ 239.367253][T10308] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 239.416809][T10306] EXT4-fs (loop7): 1 orphan inode deleted [ 239.419317][T10308] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 239.423711][T10306] EXT4-fs (loop7): 1 truncate cleaned up [ 239.443522][T10306] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 239.485042][T10306] EXT4-fs (loop7): shut down requested (2) [ 239.532552][T10315] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2188'. [ 239.543914][T10308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.894004][ T7418] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 239.965388][T10341] loop0: detected capacity change from 0 to 512 [ 240.026433][T10341] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 240.041797][T10341] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.055015][T10341] EXT4-fs (loop0): couldn't read superblock of external journal [ 240.245208][T10355] loop5: detected capacity change from 0 to 164 [ 240.273525][T10361] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2209'. [ 240.283247][ T7418] usb 9-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 240.300322][ T7418] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.310427][ T7418] usb 9-1: config 0 descriptor?? [ 240.316593][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2209'. [ 240.339382][ T4214] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 240.353768][ T7418] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 240.420363][T10365] loop7: detected capacity change from 0 to 256 [ 240.517253][T10365] FAT-fs (loop7): Directory bread(block 64) failed [ 240.540976][T10365] FAT-fs (loop7): Directory bread(block 65) failed [ 240.553780][T10365] FAT-fs (loop7): Directory bread(block 66) failed [ 240.570056][ T7418] gspca_sn9c2028: read1 error -32 [ 240.579360][ T4214] usb 2-1: Using ep0 maxpacket: 16 [ 240.584673][T10365] FAT-fs (loop7): Directory bread(block 67) failed [ 240.609377][ T7418] gspca_sn9c2028: read1 error -32 [ 240.619878][T10365] FAT-fs (loop7): Directory bread(block 68) failed [ 240.626473][T10365] FAT-fs (loop7): Directory bread(block 69) failed [ 240.641643][T10365] FAT-fs (loop7): Directory bread(block 70) failed [ 240.648786][T10365] FAT-fs (loop7): Directory bread(block 71) failed [ 240.662303][T10365] FAT-fs (loop7): Directory bread(block 72) failed [ 240.676636][T10365] FAT-fs (loop7): Directory bread(block 73) failed [ 240.699774][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.721696][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.742666][ T4214] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.772521][ T4214] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.786333][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.804742][ T4214] usb 2-1: config 0 descriptor?? [ 240.883623][ T7418] usb 9-1: USB disconnect, device number 2 [ 241.045698][T10391] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 241.264315][ T4214] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 241.273813][ T4214] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 241.306900][ T4214] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 241.340386][ T4214] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 241.389390][ T4214] microsoft 0003:045E:07DA.0010: no inputs found [ 241.399274][ T4214] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 241.466995][ T5257] usb 2-1: USB disconnect, device number 22 [ 241.526584][T10385] loop0: detected capacity change from 0 to 40427 [ 241.574959][ T26] audit: type=1326 audit(1733197137.486:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb653605f19 code=0x7ffc0000 [ 241.608548][ T4214] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 241.628838][T10385] F2FS-fs (loop0): invalid crc value [ 241.630483][T10406] loop7: detected capacity change from 0 to 512 [ 241.659923][ T26] audit: type=1326 audit(1733197137.556:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb653605f19 code=0x7ffc0000 [ 241.691463][T10385] F2FS-fs (loop0): Found nat_bits in checkpoint [ 241.760795][ T26] audit: type=1326 audit(1733197137.556:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb653605f19 code=0x7ffc0000 [ 241.805575][T10406] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #12: comm syz.7.2230: corrupted in-inode xattr [ 241.825377][T10406] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.2230: couldn't read orphan inode 12 (err -117) [ 241.839930][T10406] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.869564][ T4214] usb 6-1: Using ep0 maxpacket: 32 [ 241.894064][T10415] loop8: detected capacity change from 0 to 4096 [ 241.898906][T10385] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 241.925293][T10406] EXT4-fs error (device loop7): htree_dirblock_to_tree:1083: inode #2: comm syz.7.2230: Directory hole found for htree leaf block 0 [ 241.961296][T10415] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 241.999531][ T4214] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 242.016716][T10415] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 242.065527][ T4167] attempt to access beyond end of device [ 242.065527][ T4167] loop0: rw=2049, want=45104, limit=40427 [ 242.116234][ T26] audit: type=1800 audit(1733197138.026:185): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2233" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 242.199944][ T4214] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 242.221613][ T4214] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 242.253256][ T4214] usb 6-1: Product: syz [ 242.257472][ T4214] usb 6-1: Manufacturer: syz [ 242.274157][ T4214] usb 6-1: SerialNumber: syz [ 242.294305][ T4214] usb 6-1: config 0 descriptor?? [ 242.319881][T10393] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 242.424439][T10426] loop7: detected capacity change from 0 to 4096 [ 242.439343][ T4368] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 242.538829][T10427] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.556188][ T4214] usb 6-1: USB disconnect, device number 5 [ 242.729278][ T4368] usb 2-1: Using ep0 maxpacket: 16 [ 242.849513][ T4368] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.857596][ T4368] usb 2-1: config 0 has no interface number 0 [ 243.021448][T10425] loop8: detected capacity change from 0 to 32768 [ 243.079637][ T4368] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 243.088988][ T4368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.099415][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'. [ 243.108385][T10425] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop8 scanned by syz.8.2237 (10425) [ 243.129634][ T4368] usb 2-1: Product: syz [ 243.133847][ T4368] usb 2-1: Manufacturer: syz [ 243.138471][ T4368] usb 2-1: SerialNumber: syz [ 243.172708][ T4368] usb 2-1: config 0 descriptor?? [ 243.212835][T10425] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 243.225340][ T4368] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 243.251921][T10425] BTRFS info (device loop8): using free space tree [ 243.274044][T10425] BTRFS info (device loop8): has skinny extents [ 243.430726][T10425] BTRFS info (device loop8): enabling ssd optimizations [ 243.441819][ T26] audit: type=1326 audit(1733197139.356:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10466 comm="syz.0.2249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88f0863f19 code=0x0 [ 243.485335][ T26] audit: type=1800 audit(1733197139.396:187): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2237" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 244.106202][ T4368] gspca_spca1528: reg_w err -71 [ 244.149461][ T4368] spca1528: probe of 2-1:0.1 failed with error -71 [ 244.167720][ T4368] usb 2-1: USB disconnect, device number 23 [ 244.294323][T10474] loop5: detected capacity change from 0 to 512 [ 244.379213][T10474] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 244.494695][T10474] EXT4-fs (loop5): 1 truncate cleaned up [ 244.511538][T10474] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,norecovery,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 244.673703][T10488] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2258'. [ 244.712160][T10491] EXT4-fs error (device loop5): ext4_xattr_block_find:1857: inode #15: comm syz.5.2252: corrupted xattr block 33 [ 245.073737][T10502] ALSA: mixer_oss: invalid OSS volume '' [ 245.172632][T10483] loop8: detected capacity change from 0 to 32768 [ 245.249542][ T4214] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 245.274045][T10483] [ 245.274045][T10483] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.274045][T10483] [ 245.302343][T10483] find_entry called with index = 0 [ 245.308831][T10483] read_mapping_page failed! [ 245.313619][T10483] ERROR: (device loop8): txCommit: [ 245.313619][T10483] [ 245.385792][ T9755] [ 245.385792][ T9755] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.385792][ T9755] [ 245.424752][ T9755] [ 245.424752][ T9755] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.424752][ T9755] [ 245.499712][ T4214] usb 1-1: Using ep0 maxpacket: 32 [ 245.619722][ T4214] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 245.652183][ T4214] usb 1-1: config 0 has no interface number 0 [ 245.739707][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2269'. [ 245.771180][T10527] device wg2 entered promiscuous mode [ 245.809540][ T4214] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 245.832560][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.855374][ T4214] usb 1-1: Product: syz [ 245.871554][ T4214] usb 1-1: Manufacturer: syz [ 245.876204][ T4214] usb 1-1: SerialNumber: syz [ 245.885738][T10532] loop5: detected capacity change from 0 to 1 [ 245.896773][ T4214] usb 1-1: config 0 descriptor?? [ 245.931013][T10532] attempt to access beyond end of device [ 245.931013][T10532] loop5: rw=2048, want=8, limit=1 [ 245.948246][ T4214] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 245.981623][T10532] SQUASHFS error: Failed to read block 0x0: -5 [ 246.000609][T10532] unable to read squashfs_super_block [ 246.181381][ T4214] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 246.211185][ T4214] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 246.256357][T10546] netem: unknown loss type 8 [ 246.261748][T10546] netem: change failed [ 246.387212][T10500] udc-core: couldn't find an available UDC or it's busy [ 246.428620][T10500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 246.519581][T10558] damon: kdamond (10558) starts [ 246.563611][T10540] loop1: detected capacity change from 0 to 32768 [ 246.625960][T10540] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2282 (10540) [ 246.662498][ T4368] usb 1-1: USB disconnect, device number 19 [ 246.679251][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 246.690346][ T4368] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 246.727711][T10540] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 246.736031][ T4368] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 246.747015][T10540] BTRFS info (device loop1): using free space tree [ 246.756823][T10540] BTRFS info (device loop1): has skinny extents [ 246.774768][ T4368] quatech2 1-1:0.51: device disconnected [ 246.807644][T10570] loop8: detected capacity change from 0 to 1024 [ 246.963991][T10540] BTRFS info (device loop1): enabling ssd optimizations [ 246.988805][T10570] attempt to access beyond end of device [ 246.988805][T10570] loop8: rw=0, want=201326594, limit=1024 [ 247.058567][T10570] Buffer I/O error on dev loop8, logical block 100663296, async page read [ 247.079641][T10570] hfsplus: unable to mark blocks free: error -5 [ 247.099269][T10570] hfsplus: can't free extent [ 247.127909][T10589] loop5: detected capacity change from 0 to 4096 [ 247.190425][T10589] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 247.305617][T10593] loop0: detected capacity change from 0 to 512 [ 247.409078][T10593] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 247.439617][T10593] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 247.471034][T10593] System zones: 0-1, 15-15, 18-18, 34-34 [ 247.477893][T10593] EXT4-fs (loop0): orphan cleanup on readonly fs [ 247.512614][T10593] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 247.569323][T10593] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 247.611299][T10593] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 247.634622][T10593] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.2298: bad orphan inode 16 [ 247.654010][T10593] ext4_test_bit(bit=15, block=18) = 1 [ 247.663221][T10593] is_bad_inode(inode)=0 [ 247.667417][T10593] NEXT_ORPHAN(inode)=0 [ 247.690060][T10593] max_ino=32 [ 247.693307][T10593] i_nlink=2 [ 247.696501][T10593] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.089071][T10606] loop5: detected capacity change from 0 to 512 [ 248.256244][T10606] EXT4-fs (loop5): 1 orphan inode deleted [ 248.271025][T10606] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 248.328416][T10617] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2306'. [ 248.396801][T10606] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.487653][T10623] loop8: detected capacity change from 0 to 1024 [ 248.553679][T10603] loop0: detected capacity change from 0 to 32768 [ 248.621490][T10603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2301 (10603) [ 248.698979][T10603] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 248.733250][T10603] BTRFS info (device loop0): use no compression [ 248.741486][ T1232] hfsplus: b-tree write err: -5, ino 4 [ 248.747958][T10603] BTRFS info (device loop0): force zlib compression, level 3 [ 248.769426][T10603] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 248.778734][T10603] BTRFS info (device loop0): use lzo compression, level 0 [ 248.795367][T10603] BTRFS info (device loop0): turning on flush-on-commit [ 248.805497][T10603] BTRFS info (device loop0): enabling auto defrag [ 248.820406][T10603] BTRFS info (device loop0): using free space tree [ 248.826987][T10603] BTRFS info (device loop0): has skinny extents [ 248.852134][T10631] loop5: detected capacity change from 0 to 512 [ 248.996038][T10631] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 33619980: comm syz.5.2313: invalid block [ 249.012397][T10644] loop8: detected capacity change from 0 to 2048 [ 249.032660][T10631] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.2313: Invalid block bitmap block 0 in block_group 0 [ 249.077606][T10631] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 249.102385][T10644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.143051][T10631] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.2313: attempt to clear invalid blocks 983261 len 1 [ 249.143170][T10625] loop1: detected capacity change from 0 to 40427 [ 249.160523][T10603] BTRFS info (device loop0): enabling ssd optimizations [ 249.222852][T10625] F2FS-fs (loop1): invalid crc value [ 249.230618][T10631] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2313: invalid indirect mapped block 2683928664 (level 0) [ 249.287892][T10625] F2FS-fs (loop1): Found nat_bits in checkpoint [ 249.318042][T10631] EXT4-fs error (device loop5): __ext4_get_inode_loc:4320: comm syz.5.2313: Invalid inode table block 0 in block_group 0 [ 249.379853][T10631] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 249.417531][T10625] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 249.466663][T10631] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 249.486606][T10631] EXT4-fs error (device loop5): __ext4_get_inode_loc:4320: comm syz.5.2313: Invalid inode table block 0 in block_group 0 [ 249.546517][T10631] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 249.566060][ T4180] attempt to access beyond end of device [ 249.566060][ T4180] loop1: rw=2049, want=45104, limit=40427 [ 249.580032][T10631] EXT4-fs error (device loop5): ext4_truncate:4272: inode #13: comm syz.5.2313: mark_inode_dirty error [ 249.605208][T10631] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 249.629606][T10631] EXT4-fs error (device loop5): __ext4_get_inode_loc:4320: comm syz.5.2313: Invalid inode table block 0 in block_group 0 [ 249.658088][T10631] EXT4-fs (loop5): 1 truncate cleaned up [ 249.679635][T10631] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 249.765446][T10631] EXT4-fs (loop5): shut down requested (2) [ 249.809886][T10631] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #2: comm syz.5.2313: directory missing '..' [ 249.975415][T10667] loop8: detected capacity change from 0 to 512 [ 250.131861][T10667] EXT4-fs (loop8): 1 orphan inode deleted [ 250.137777][T10667] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 250.169594][T10667] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.206809][T10671] loop1: detected capacity change from 0 to 2048 [ 250.340329][T10672] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.412834][ T26] audit: type=1800 audit(1733197146.326:188): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2318" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 250.558850][T10683] loop0: detected capacity change from 0 to 2048 [ 250.600739][T10685] netlink: 'syz.5.2326': attribute type 14 has an invalid length. [ 250.608760][T10685] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2326'. [ 250.645888][T10683] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 250.741159][T10689] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.884655][T10697] loop8: detected capacity change from 0 to 1024 [ 251.016243][ T4232] hfsplus: b-tree write err: -5, ino 4 [ 251.140780][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2339'. [ 251.201752][T10717] program syz.1.2341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.345407][T10724] device gretap0 entered promiscuous mode [ 251.363433][T10724] device erspan0 entered promiscuous mode [ 251.387696][T10728] loop0: detected capacity change from 0 to 512 [ 251.387889][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 251.491881][T10728] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 251.535479][T10728] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.654111][ T26] audit: type=1326 audit(1733197147.566:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10735 comm="syz.1.2349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc82fa45f19 code=0x0 [ 251.696600][T10739] EXT4-fs error (device loop0): ext4_get_first_dir_block:3608: inode #12: comm syz.0.2346: directory missing '.' [ 251.756181][T10739] EXT4-fs (loop0): Remounting filesystem read-only [ 251.765377][T10741] loop8: detected capacity change from 0 to 256 [ 252.117812][T10755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.125109][T10755] IPv6: NLM_F_CREATE should be set when creating new route [ 252.132408][T10755] IPv6: NLM_F_CREATE should be set when creating new route [ 252.208396][T10759] loop5: detected capacity change from 0 to 8 [ 252.278721][ T26] audit: type=1107 audit(1733197148.186:190): pid=10762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯' [ 252.296315][T10766] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 252.320227][T10759] SQUASHFS error: zstd decompression error: 2 [ 252.348362][T10759] SQUASHFS error: zstd decompression failed, data probably corrupt [ 252.378265][T10759] SQUASHFS error: Failed to read block 0x62b: -5 [ 252.415640][T10759] SQUASHFS error: Unable to read metadata cache entry [629] [ 252.415837][T10767] SQUASHFS error: Unable to read metadata cache entry [629] [ 252.434418][T10759] SQUASHFS error: Unable to read directory block [629:ff26] [ 252.454714][T10767] SQUASHFS error: Unable to read directory block [629:ff26] [ 252.636760][T10779] loop5: detected capacity change from 0 to 16 [ 252.643475][T10778] device ip6tnl0 entered promiscuous mode [ 252.666030][T10776] device ip6tnl0 left promiscuous mode [ 252.690232][T10779] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 252.766438][T10779] cramfs: Error -3 while decompressing! [ 252.795159][T10779] cramfs: ffffffff96bb7258(42)->ffff88807628c000(4096) [ 253.213224][T10797] program syz.8.2377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.600106][T10806] loop0: detected capacity change from 0 to 2048 [ 253.696957][T10806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.712440][T10808] loop8: detected capacity change from 0 to 16 [ 253.774711][T10795] loop1: detected capacity change from 0 to 40427 [ 253.797947][T10808] erofs: (device loop8): mounted with root inode @ nid 36. [ 253.867526][T10809] lo speed is unknown, defaulting to 1000 [ 253.903589][T10795] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 253.912480][T10795] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 253.938529][T10795] F2FS-fs (loop1): invalid crc value [ 254.029863][T10795] F2FS-fs (loop1): Found nat_bits in checkpoint [ 254.185702][T10795] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 254.211341][T10795] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 254.307880][T10809] chnl_net:caif_netlink_parms(): no params data found [ 254.319582][ T23] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 254.363149][ T4180] attempt to access beyond end of device [ 254.363149][ T4180] loop1: rw=2049, want=45112, limit=40427 [ 254.569424][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 254.570664][T10809] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.606344][T10809] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.650720][T10809] device bridge_slave_0 entered promiscuous mode [ 254.670915][T10809] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.703681][T10809] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.729579][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.738712][T10809] device bridge_slave_1 entered promiscuous mode [ 254.819451][ T23] usb 1-1: config 127 has an invalid interface number: 25 but max is 0 [ 254.839364][ T23] usb 1-1: config 127 has no interface number 0 [ 254.845696][ T23] usb 1-1: config 127 interface 25 has no altsetting 0 [ 254.871119][T10809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.928183][T10809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.020711][ T23] usb 1-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 255.033310][T10832] loop1: detected capacity change from 0 to 65 [ 255.034538][T10809] team0: Port device team_slave_0 added [ 255.055212][T10809] team0: Port device team_slave_1 added [ 255.056219][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.072777][ T23] usb 1-1: Product: syz [ 255.076974][ T23] usb 1-1: Manufacturer: syz [ 255.081834][ T23] usb 1-1: SerialNumber: syz [ 255.088604][T10832] BFS-fs: bfs_fill_super(): Impossible last inode number 4088 > 513 on loop1 [ 255.128869][T10809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.144366][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.179483][T10809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.192593][T10809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.199785][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.279015][T10809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.363769][T10809] device hsr_slave_0 entered promiscuous mode [ 255.371023][T10809] device hsr_slave_1 entered promiscuous mode [ 255.371471][ T23] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 255.396208][T10809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.414980][T10809] Cannot create hsr debugfs directory [ 255.591929][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.598274][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.681336][T10809] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 255.701718][T10809] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 255.729973][T10809] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 255.750181][T10809] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 255.880128][ T23] usb 1-1: reset high-speed USB device number 20 using dummy_hcd [ 255.899327][ T4368] Bluetooth: hci3: command 0x0409 tx timeout [ 255.961472][T10809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.000065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.014391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.034905][T10809] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.077151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.089052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.114167][T10855] loop1: detected capacity change from 0 to 256 [ 256.127637][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.134818][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.143222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.152747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.162027][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.169210][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.177261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.190954][T10855] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777ÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ¿ÄØR¢ˆ“~© ]Ñôf õ5¢Ä6㇄yeð= 504) [ 261.575027][T10985] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 261.618021][T10985] F2FS-fs (loop0): invalid crc value [ 261.642639][T10996] loop8: detected capacity change from 0 to 1024 [ 261.662183][T10985] F2FS-fs (loop0): Found nat_bits in checkpoint [ 261.811865][T10985] F2FS-fs (loop0): Start checkpoint disabled! [ 261.847120][T10985] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 261.860031][T10985] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 262.096602][ T144] attempt to access beyond end of device [ 262.096602][ T144] loop0: rw=2049, want=41000, limit=40427 [ 262.099060][T11010] loop1: detected capacity change from 0 to 2048 [ 262.146101][ T1232] team0 (unregistering): Port device team_slave_1 removed [ 262.150479][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 262.181435][ T1232] team0 (unregistering): Port device team_slave_0 removed [ 262.223320][ T1232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.240324][T11010] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 262.269024][ T1232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.317147][ T13] Bluetooth: hci6: command 0x041b tx timeout [ 262.369745][T11010] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 262.609906][ T1232] bond0 (unregistering): Released all slaves [ 262.725671][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.738112][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.749469][T10907] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.821101][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.831983][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.857936][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.865102][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.896671][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.939945][T11015] loop8: detected capacity change from 0 to 40427 [ 262.951337][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.970823][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.003920][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.011153][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.016019][T11015] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 263.029475][T11015] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 263.053078][T11015] F2FS-fs (loop8): invalid crc value [ 263.060335][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.079621][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.091657][T11015] F2FS-fs (loop8): Found nat_bits in checkpoint [ 263.110291][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.154237][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.175906][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.207416][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.224389][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.258094][T10907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.269800][T11015] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 263.286284][T11015] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 263.304222][T10907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.326696][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.336500][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.351198][T11029] loop9: detected capacity change from 0 to 32768 [ 263.359543][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.368209][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.372530][T11015] attempt to access beyond end of device [ 263.372530][T11015] loop8: rw=10241, want=53256, limit=40427 [ 263.377384][ T852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.505020][ T9755] attempt to access beyond end of device [ 263.505020][ T9755] loop8: rw=2049, want=45104, limit=40427 [ 263.595991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.607508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.662297][T10907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.965645][T11053] loop1: detected capacity change from 0 to 512 [ 264.039902][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.049387][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.075403][T11053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 264.125627][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.140932][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.165814][T10907] device veth0_vlan entered promiscuous mode [ 264.191664][T11053] EXT4-fs (loop1): 1 truncate cleaned up [ 264.197369][T11053] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 264.230911][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.239657][ T7948] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.294528][T10907] device veth1_vlan entered promiscuous mode [ 264.324498][T11053] EXT4-fs (loop1): shut down requested (2) [ 264.389847][ T4363] Bluetooth: hci6: command 0x040f tx timeout [ 264.421407][T10907] device veth0_macvtap entered promiscuous mode [ 264.433178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.442464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.450766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.463054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.484048][T10907] device veth1_macvtap entered promiscuous mode [ 264.491700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 264.501881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 264.520668][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.538819][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.559413][ T4363] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 264.571058][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.597914][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.619974][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.651699][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.673200][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.696589][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.716966][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.743950][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.772648][T10907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.826905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 264.856023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.881796][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.912790][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.944076][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.969499][ T4363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.988349][ T4363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.999264][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.018134][ T4363] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 265.029248][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.049758][ T4363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.064426][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.083195][ T4363] usb 9-1: config 0 descriptor?? [ 265.094979][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.117057][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.138547][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.168216][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.188552][T10907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.214673][T10907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.257198][T10907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.268988][T11074] syz.0.2481 (11074): drop_caches: 2 [ 265.282836][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.310410][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.352593][T10907] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.379236][T10907] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.403284][T10907] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.412225][T10907] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.442641][T11077] lo speed is unknown, defaulting to 1000 [ 265.749399][ T7948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.769815][ T7948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.803640][ T4363] hid-led: probe of 0003:27B8:01ED.0011 failed with error -71 [ 265.822917][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.838059][ T26] audit: type=1326 audit(1733197161.746:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.9.2484" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd213a86f19 code=0x0 [ 265.838733][ T4363] usb 9-1: USB disconnect, device number 4 [ 265.873827][ T852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.893458][ T852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.927737][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.239387][ T13] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 266.482522][ T4363] Bluetooth: hci6: command 0x0419 tx timeout [ 266.556877][T11093] loop0: detected capacity change from 0 to 8192 [ 266.636234][T11103] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2492'. [ 266.656209][T11103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2492'. [ 266.665534][ T13] usb 2-1: config 0 has an invalid interface number: 19 but max is 0 [ 266.684590][ T13] usb 2-1: config 0 has no interface number 0 [ 266.805065][T11093] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 266.879562][ T13] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=ef.dd [ 266.888661][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.897064][T11093] REISERFS (device loop0): using ordered data mode [ 266.919379][ T13] usb 2-1: Product: syz [ 266.923591][ T13] usb 2-1: Manufacturer: syz [ 266.928200][ T13] usb 2-1: SerialNumber: syz [ 266.949539][T11093] reiserfs: using flush barriers [ 266.970997][ T13] usb 2-1: config 0 descriptor?? [ 266.991898][T11093] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 267.030896][ T13] kalmia: probe of 2-1:0.19 failed with error -22 [ 267.038395][ T13] option 2-1:0.19: GSM modem (1-port) converter detected [ 267.081383][T11120] loop9: detected capacity change from 0 to 64 [ 267.129701][T11093] REISERFS (device loop0): checking transaction log (loop0) [ 267.182258][ T1232] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.279968][ T7418] usb 2-1: USB disconnect, device number 25 [ 267.286752][ T7418] option 2-1:0.19: device disconnected [ 267.299550][ T5257] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 267.374400][ T1232] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.484566][ T1232] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.536050][T11093] REISERFS (device loop0): Using tea hash to sort names [ 267.544153][T11093] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 267.568311][T11093] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 267.598292][ T1232] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.659682][ T5257] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 267.696875][ T5257] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 267.728928][ T5257] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 267.839789][ T5257] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.869695][ T5257] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 267.877734][ T5257] usb 9-1: SerialNumber: syz [ 267.929891][T11118] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 268.153549][T11118] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 268.355261][T11135] loop9: detected capacity change from 0 to 32768 [ 268.428660][T11135] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.2506 (11135) [ 268.442560][T11148] loop4: detected capacity change from 0 to 1024 [ 268.504110][T11135] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 268.523302][T11135] BTRFS info (device loop9): setting nodatacow, compression disabled [ 268.539614][T11135] BTRFS info (device loop9): enabling auto defrag [ 268.556122][T11148] [ 268.558479][T11148] ====================================================== [ 268.565503][T11148] WARNING: possible circular locking dependency detected [ 268.572517][T11148] 5.15.173-syzkaller #0 Not tainted [ 268.577705][T11148] ------------------------------------------------------ [ 268.584709][T11148] syz.4.2513/11148 is trying to acquire lock: [ 268.590765][T11148] ffff888078800e88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1d2/0x1b10 [ 268.601818][T11148] [ 268.601818][T11148] but task is already holding lock: [ 268.609180][T11148] ffff88807690a0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 268.618849][T11148] [ 268.618849][T11148] which lock already depends on the new lock. [ 268.618849][T11148] [ 268.629245][T11148] [ 268.629245][T11148] the existing dependency chain (in reverse order) is: [ 268.638259][T11148] [ 268.638259][T11148] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 268.646196][T11148] lock_acquire+0x1db/0x4f0 [ 268.651220][T11148] __mutex_lock_common+0x1da/0x25a0 [ 268.656937][T11148] mutex_lock_nested+0x17/0x20 [ 268.662218][T11148] hfsplus_find_init+0x146/0x1c0 [ 268.667673][T11148] hfsplus_get_block+0x5c0/0x14e0 [ 268.673211][T11148] __block_write_begin_int+0x60b/0x1650 [ 268.679272][T11148] cont_write_begin+0x5d6/0x840 [ 268.684636][T11148] hfsplus_write_begin+0x92/0xd0 [ 268.690091][T11148] generic_perform_write+0x2bf/0x5b0 [ 268.695895][T11148] __generic_file_write_iter+0x243/0x4f0 [ 268.702043][T11148] generic_file_write_iter+0xa7/0x1b0 [ 268.707938][T11148] vfs_write+0xacd/0xe50 [ 268.712697][T11148] ksys_write+0x1a2/0x2c0 [ 268.717539][T11148] do_syscall_64+0x3b/0xb0 [ 268.722466][T11148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.728900][T11148] [ 268.728900][T11148] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 268.737940][T11148] validate_chain+0x1649/0x5930 [ 268.743310][T11148] __lock_acquire+0x1295/0x1ff0 [ 268.748675][T11148] lock_acquire+0x1db/0x4f0 [ 268.753690][T11148] __mutex_lock_common+0x1da/0x25a0 [ 268.759411][T11148] mutex_lock_nested+0x17/0x20 [ 268.764706][T11148] hfsplus_file_extend+0x1d2/0x1b10 [ 268.770431][T11148] hfsplus_bmap_reserve+0x101/0x4e0 [ 268.776153][T11148] __hfsplus_ext_write_extent+0x2a4/0x5b0 [ 268.782389][T11148] __hfsplus_ext_cache_extent+0x84/0xe00 [ 268.788539][T11148] hfsplus_file_extend+0x435/0x1b10 [ 268.794256][T11148] hfsplus_get_block+0x402/0x14e0 [ 268.799796][T11148] __block_write_begin_int+0x60b/0x1650 [ 268.805866][T11148] cont_write_begin+0x5d6/0x840 [ 268.811233][T11148] hfsplus_write_begin+0x92/0xd0 [ 268.816688][T11148] generic_perform_write+0x2bf/0x5b0 [ 268.822485][T11148] __generic_file_write_iter+0x243/0x4f0 [ 268.828640][T11148] generic_file_write_iter+0xa7/0x1b0 [ 268.834525][T11148] aio_write+0x566/0x780 [ 268.839300][T11148] io_submit_one+0x768/0x18d0 [ 268.844501][T11148] __se_sys_io_submit+0x17b/0x2f0 [ 268.850043][T11148] do_syscall_64+0x3b/0xb0 [ 268.854979][T11148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.861393][T11148] [ 268.861393][T11148] other info that might help us debug this: [ 268.861393][T11148] [ 268.871608][T11148] Possible unsafe locking scenario: [ 268.871608][T11148] [ 268.879043][T11148] CPU0 CPU1 [ 268.884401][T11148] ---- ---- [ 268.889753][T11148] lock(&tree->tree_lock/1); [ 268.894430][T11148] lock(&HFSPLUS_I(inode)->extents_lock); [ 268.902744][T11148] lock(&tree->tree_lock/1); [ 268.909938][T11148] lock(&HFSPLUS_I(inode)->extents_lock); [ 268.915735][T11148] [ 268.915735][T11148] *** DEADLOCK *** [ 268.915735][T11148] [ 268.923871][T11148] 3 locks held by syz.4.2513/11148: [ 268.929071][T11148] #0: ffff888078806f00 (&sb->s_type->i_mutex_key#35){+.+.}-{3:3}, at: generic_file_write_iter+0x7c/0x1b0 [ 268.940401][T11148] #1: ffff888078806d08 (&hip->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1d2/0x1b10 [ 268.950764][T11148] #2: ffff88807690a0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0 [ 268.960868][T11148] [ 268.960868][T11148] stack backtrace: [ 268.966742][T11148] CPU: 0 PID: 11148 Comm: syz.4.2513 Not tainted 5.15.173-syzkaller #0 [ 268.974985][T11148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 268.985058][T11148] Call Trace: [ 268.988333][T11148] [ 268.991258][T11148] dump_stack_lvl+0x1e3/0x2d0 [ 268.995942][T11148] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 269.001576][T11148] ? print_circular_bug+0x12b/0x1a0 [ 269.006769][T11148] check_noncircular+0x2f8/0x3b0 [ 269.011718][T11148] ? add_chain_block+0x850/0x850 [ 269.016650][T11148] ? lockdep_lock+0x11f/0x2a0 [ 269.021324][T11148] ? check_path+0x21/0x40 [ 269.025654][T11148] ? check_noncircular+0x1e1/0x3b0 [ 269.030762][T11148] validate_chain+0x1649/0x5930 [ 269.035620][T11148] ? __bfs+0x359/0x6e0 [ 269.039719][T11148] ? reacquire_held_locks+0x660/0x660 [ 269.045086][T11148] ? noop_count+0x30/0x30 [ 269.049415][T11148] ? look_up_lock_class+0x77/0x120 [ 269.054532][T11148] ? register_lock_class+0x100/0x9a0 [ 269.059822][T11148] ? noop_count+0x30/0x30 [ 269.064154][T11148] ? is_dynamic_key+0x1f0/0x1f0 [ 269.069009][T11148] ? mark_lock+0x98/0x340 [ 269.073339][T11148] __lock_acquire+0x1295/0x1ff0 [ 269.078196][T11148] lock_acquire+0x1db/0x4f0 [ 269.082697][T11148] ? hfsplus_file_extend+0x1d2/0x1b10 [ 269.088075][T11148] ? read_lock_is_recursive+0x10/0x10 [ 269.093442][T11148] ? __might_sleep+0xc0/0xc0 [ 269.098038][T11148] __mutex_lock_common+0x1da/0x25a0 [ 269.103232][T11148] ? hfsplus_file_extend+0x1d2/0x1b10 [ 269.108600][T11148] ? is_dynamic_key+0x1f0/0x1f0 [ 269.113452][T11148] ? hfsplus_file_extend+0x1d2/0x1b10 [ 269.118831][T11148] ? mark_lock+0x98/0x340 [ 269.123164][T11148] ? mutex_lock_io_nested+0x60/0x60 [ 269.128377][T11148] mutex_lock_nested+0x17/0x20 [ 269.133149][T11148] hfsplus_file_extend+0x1d2/0x1b10 [ 269.138354][T11148] ? hfsplus_get_block+0x14e0/0x14e0 [ 269.143637][T11148] ? __mutex_trylock_common+0x17e/0x2e0 [ 269.149183][T11148] ? __might_sleep+0xc0/0xc0 [ 269.153774][T11148] ? rcu_lock_release+0x20/0x20 [ 269.158625][T11148] ? hfsplus_brec_find+0x199/0x570 [ 269.163734][T11148] hfsplus_bmap_reserve+0x101/0x4e0 [ 269.168935][T11148] __hfsplus_ext_write_extent+0x2a4/0x5b0 [ 269.174649][T11148] __hfsplus_ext_cache_extent+0x84/0xe00 [ 269.180277][T11148] ? mutex_lock_nested+0x17/0x20 [ 269.185210][T11148] hfsplus_file_extend+0x435/0x1b10 [ 269.190406][T11148] ? hfsplus_get_block+0x14e0/0x14e0 [ 269.195710][T11148] ? find_lock_entries+0x1030/0x1030 [ 269.200996][T11148] ? __lock_acquire+0x1ff0/0x1ff0 [ 269.206024][T11148] ? pagevec_lookup_range+0x2e/0x70 [ 269.211219][T11148] ? clean_bdev_aliases+0x801/0x940 [ 269.216426][T11148] hfsplus_get_block+0x402/0x14e0 [ 269.221450][T11148] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 269.227168][T11148] ? create_page_buffers+0x24b/0x330 [ 269.232450][T11148] __block_write_begin_int+0x60b/0x1650 [ 269.238006][T11148] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 269.243721][T11148] ? page_zero_new_buffers+0x510/0x510 [ 269.249185][T11148] ? exc_page_fault+0x342/0x700 [ 269.254034][T11148] ? wait_for_stable_page+0xe2/0x110 [ 269.259315][T11148] cont_write_begin+0x5d6/0x840 [ 269.264167][T11148] ? generic_cont_expand_simple+0x230/0x230 [ 269.270059][T11148] ? fault_in_readable+0x1d5/0x2e0 [ 269.275168][T11148] ? fault_in_safe_writeable+0x250/0x250 [ 269.280798][T11148] hfsplus_write_begin+0x92/0xd0 [ 269.285735][T11148] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 269.291455][T11148] generic_perform_write+0x2bf/0x5b0 [ 269.296753][T11148] ? grab_cache_page_write_begin+0x90/0x90 [ 269.302555][T11148] ? file_remove_privs+0x610/0x610 [ 269.307662][T11148] ? rwsem_write_trylock+0x166/0x210 [ 269.313033][T11148] ? aio_write+0x4ab/0x780 [ 269.317464][T11148] __generic_file_write_iter+0x243/0x4f0 [ 269.323096][T11148] generic_file_write_iter+0xa7/0x1b0 [ 269.328464][T11148] aio_write+0x566/0x780 [ 269.332702][T11148] ? aio_read+0x4a0/0x4a0 [ 269.337044][T11148] ? __might_fault+0xb8/0x110 [ 269.341719][T11148] ? __lock_acquire+0x1ff0/0x1ff0 [ 269.346750][T11148] ? __fget_files+0x413/0x480 [ 269.351423][T11148] io_submit_one+0x768/0x18d0 [ 269.356098][T11148] ? lookup_ioctx+0x620/0x620 [ 269.360764][T11148] ? __might_fault+0xb8/0x110 [ 269.365434][T11148] ? __lock_acquire+0x1ff0/0x1ff0 [ 269.370453][T11148] ? __might_fault+0xb4/0x110 [ 269.375125][T11148] __se_sys_io_submit+0x17b/0x2f0 [ 269.380143][T11148] ? __x64_sys_io_submit+0x80/0x80 [ 269.385251][T11148] ? syscall_enter_from_user_mode+0x2e/0x240 [ 269.391226][T11148] ? lockdep_hardirqs_on+0x94/0x130 [ 269.396417][T11148] ? syscall_enter_from_user_mode+0x2e/0x240 [ 269.402505][T11148] do_syscall_64+0x3b/0xb0 [ 269.406920][T11148] ? clear_bhb_loop+0x15/0x70 [ 269.411605][T11148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.417516][T11148] RIP: 0033:0x7f0509369f19 [ 269.421932][T11148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.441657][T11148] RSP: 002b:00007f05071e0058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 269.450084][T11148] RAX: ffffffffffffffda RBX: 00007f050952ffa0 RCX: 00007f0509369f19 [ 269.458051][T11148] RDX: 0000000020000540 RSI: 000000000000003b RDI: 00007f0509501000 [ 269.466017][T11148] RBP: 00007f05093dd986 R08: 0000000000000000 R09: 0000000000000000 [ 269.473984][T11148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.481947][T11148] R13: 0000000000000000 R14: 00007f050952ffa0 R15: 00007ffd2a7cec78 [ 269.489920][T11148] [ 269.492984][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.498782][T11135] BTRFS info (device loop9): max_inline at 0 [ 269.505780][T11135] BTRFS info (device loop9): using free space tree [ 269.512392][T11135] BTRFS info (device loop9): has skinny extents [ 269.559250][ T4208] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 269.579955][ T5257] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 269.639403][ T1235] hfsplus: b-tree write err: -5, ino 3 [ 269.653722][ T26] audit: type=1800 audit(1733197165.566:192): pid=11135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2506" name="bus" dev="loop9" ino=263 res=0 errno=0 [ 269.783140][ T5257] usb 9-1: USB disconnect, device number 5 [ 269.811872][ T1232] device hsr_slave_0 left promiscuous mode [ 269.818207][ T1232] device hsr_slave_1 left promiscuous mode [ 269.824954][ T1232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.842277][ T1232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.863052][ T1232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.871009][ T1232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.883605][ T1232] device bridge_slave_1 left promiscuous mode [ 269.890136][ T1232] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.905503][ T1232] device veth1_macvtap left promiscuous mode [ 269.912194][ T1232] device veth0_macvtap left promiscuous mode [ 269.918214][ T1232] device veth1_vlan left promiscuous mode [ 269.924392][ T4208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 269.934372][ T1232] device veth0_vlan left promiscuous mode [ 269.940567][ T4208] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 269.953475][ T4208] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 269.962717][ T4208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.975176][ T4208] usb 2-1: config 0 descriptor?? [ 270.021247][ T4208] gspca_main: spca561-2.14.0 probing abcd:cdee [ 270.116212][ T1232] team0 (unregistering): Port device team_slave_1 removed [ 270.130066][ T1232] team0 (unregistering): Port device team_slave_0 removed [ 270.140974][ T1232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.153522][ T1232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.214585][ T1232] bond0 (unregistering): Released all slaves [ 270.599624][ T4208] spca561: probe of 2-1:0.0 failed with error -22 [ 270.606890][ T4208] usb 2-1: MIDIStreaming interface descriptor not found [ 270.750340][ T4368] usb 2-1: USB disconnect, device number 26