last executing test programs: 4m43.43230794s ago: executing program 2 (id=62): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x4, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x8000000000000001, 0x8, 0x8, 0xc6e, 0x9e9, 0xc5, 0x4, 0xa000, 0xfffffff8, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4m42.950985047s ago: executing program 2 (id=66): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0xfffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x8282, 0x0) 4m40.356845942s ago: executing program 2 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 4m38.499028612s ago: executing program 2 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount(&(0x7f00000002c0)=@filename='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x802001, 0x0) 4m38.184978402s ago: executing program 2 (id=86): r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f000000ba00)='./file0\x00', 0x94, &(0x7f0000000a80)=ANY=[@ANYRES8=r0, @ANYRESOCT], 0x1, 0xdc8, &(0x7f0000002080)="$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") r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) 4m37.336996562s ago: executing program 2 (id=94): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 4m36.88990252s ago: executing program 32 (id=94): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 4m13.398835405s ago: executing program 5 (id=206): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x40, 0x1, 0x40024b}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 4m13.096857282s ago: executing program 5 (id=209): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000040)=r1) close_range(r0, 0xffffffffffffffff, 0x0) 4m12.47270358s ago: executing program 5 (id=213): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") mkdir(&(0x7f0000000040)='./file0\x00', 0x28) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x0, @desc3}) chdir(0x0) 4m11.382182351s ago: executing program 5 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 4m10.871566908s ago: executing program 5 (id=221): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_linger(r1, 0x1, 0x49, &(0x7f0000000540)={0xfffffffd, 0x8000}, 0x8) 4m10.397217995s ago: executing program 5 (id=223): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000010900"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000d7c139a0d4fe"], 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c"], 0x340a) 4m9.567124218s ago: executing program 33 (id=223): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000010900"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000d7c139a0d4fe"], 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c"], 0x340a) 2m55.16286789s ago: executing program 1 (id=659): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000003080)={0x18, &(0x7f0000002ec0)={0x40, 0x7}, 0x0, 0x0, 0x0, &(0x7f0000003040)={0x20, 0x3, 0x1, 0xb4}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x80015b1a, 0x0) 2m51.907065296s ago: executing program 1 (id=674): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m51.399225382s ago: executing program 1 (id=676): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m48.544162939s ago: executing program 1 (id=692): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 2m48.291122149s ago: executing program 1 (id=696): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, 0x0) 2m47.852478159s ago: executing program 1 (id=701): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m47.375644465s ago: executing program 34 (id=701): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m32.043435681s ago: executing program 7 (id=1176): setresgid(0xee00, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x6}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f0000000140)='./file0/file0\x00', 0xecb42, 0x86) 1m31.861643049s ago: executing program 7 (id=1178): ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000280)={{0x0, 0x0, 0x40, 0x0, 0x2}, {&(0x7f0000000000)=[{0x1, 0x3}], 0x1, 0x10, 0x9, 0x7}, {0x0, 0x0, 0x8, 0x233a, 0xd09f}, {0x0, 0x0, 0x28, 0x8, 0x10001}, {0x0, 0x0, 0x8, 0x3, 0x79}}) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xa3d8, &(0x7f0000000340)=[{&(0x7f00000000c0)='\x009zL', 0x4}], 0x1, 0x0, 0x1, {0x2}}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1m31.33597651s ago: executing program 7 (id=1183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xc, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0x30004440) 1m29.371876283s ago: executing program 7 (id=1189): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 1m29.174042154s ago: executing program 7 (id=1191): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0xffffffff, 0xfffffffc, 0xf, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000300)={0xfc5, 0x4, 0x56b4406f, 0xb98c, 0x7, "7f5972d49f67f3663054ca49a8afa7149ba3f6"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 1m28.661368124s ago: executing program 7 (id=1196): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x373, &(0x7f00000006c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x10, 0x0, 0x4, 0x0, 0x2, 0x3, 0x8, 0x7, 0x7, 0x4f, 0x2, 0x3, 0x0, 0x6, 0x1, 0x0, 0x40, 0xcb, 0x6, '\x00', 0x0, 0x10}) 1m28.149430797s ago: executing program 35 (id=1196): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x373, &(0x7f00000006c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x10, 0x0, 0x4, 0x0, 0x2, 0x3, 0x8, 0x7, 0x7, 0x4f, 0x2, 0x3, 0x0, 0x6, 0x1, 0x0, 0x40, 0xcb, 0x6, '\x00', 0x0, 0x10}) 10.887466093s ago: executing program 0 (id=1561): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) 10.497655129s ago: executing program 0 (id=1563): r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x1000000000000d0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x2d) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff) 10.07709091s ago: executing program 0 (id=1564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x2f}) 9.277605093s ago: executing program 0 (id=1566): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)={0x0, 0x7ff, 0x4, 0x0, 0x9}) r0 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x4000001e, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 8.670112186s ago: executing program 0 (id=1568): syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1, 0x12588, &(0x7f0000024ac0)="$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") open(0x0, 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) 8.144465891s ago: executing program 6 (id=1571): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESOCT, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) 6.108085741s ago: executing program 0 (id=1576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 5.472897968s ago: executing program 6 (id=1577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x400000b0, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.446589826s ago: executing program 6 (id=1583): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$inet(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) 4.269020313s ago: executing program 6 (id=1584): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x4e14, 0x913a, 0x41, 0x0, 0x0) 3.228408697s ago: executing program 6 (id=1588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 2.727897811s ago: executing program 6 (id=1592): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) write(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x100, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) 2.355479476s ago: executing program 8 (id=1594): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008ac0)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x2404e0d0}, 0x404c845) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x844) 2.000827001s ago: executing program 8 (id=1596): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.809975544s ago: executing program 3 (id=1598): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f45a86c665d7ec75fc9e7c000000000000003d2f00", [0x8, 0xffffffff9673e35d]}}) 1.768794355s ago: executing program 4 (id=1599): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x1019fa, @loopback, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c) listen(r1, 0x3) 1.659098006s ago: executing program 4 (id=1600): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x48080) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x38, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x7, @loopback, 0x8}, @in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x100}]}, &(0x7f0000000300)=0x10) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x800) 1.596262814s ago: executing program 3 (id=1601): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100), 0x1}}], 0x4000253, 0x44) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 1.535682911s ago: executing program 4 (id=1602): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="80000080", 0x4, 0x24000000, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.437424598s ago: executing program 4 (id=1603): writev(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="83", 0x1}], 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.357497858s ago: executing program 3 (id=1604): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_io_uring_setup(0x208e, &(0x7f0000000200)={0x0, 0xcb14, 0x10, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.259290892s ago: executing program 4 (id=1605): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 996.588729ms ago: executing program 3 (id=1606): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r2, 0x1, 0x27, &(0x7f0000000040)=""/100, &(0x7f00000000c0)=0x64) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 994.588349ms ago: executing program 8 (id=1607): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) close_range(r0, 0xffffffffffffffff, 0x0) 943.692729ms ago: executing program 4 (id=1608): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000e97000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000}) 758.126131ms ago: executing program 8 (id=1609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x2, 0x40040) 730.46023ms ago: executing program 3 (id=1610): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='maps\x00') preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/97, 0x61}], 0x1, 0x9, 0x4) 633.620321ms ago: executing program 8 (id=1611): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x18088, 0x80}}}}}}, @IFLA_MASTER={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x8}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 57.020611ms ago: executing program 3 (id=1612): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) 0s ago: executing program 8 (id=1613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x0, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0x4e20, 0x4e24, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): 9.819308][ T5851] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.819332][ T5851] do_writepages+0x32e/0x550 [ 259.819369][ T5851] ? do_raw_spin_unlock+0xf5/0x210 [ 259.819410][ T5851] filemap_fdatawrite+0x1e9/0x2f0 [ 259.819441][ T5851] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 259.819517][ T5851] ? do_raw_spin_unlock+0xf5/0x210 [ 259.819550][ T5851] f2fs_sync_dirty_inodes+0x30e/0x830 [ 259.819590][ T5851] f2fs_write_checkpoint+0x9df/0x26a0 [ 259.819614][ T5851] ? __lock_acquire+0x6b5/0x2cf0 [ 259.819679][ T5851] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 259.819761][ T5851] kill_f2fs_super+0x314/0x720 [ 259.819792][ T5851] ? __pfx_kill_f2fs_super+0x10/0x10 [ 259.819829][ T5851] ? lockdep_hardirqs_on+0x7a/0x110 [ 259.819876][ T5851] deactivate_locked_super+0xbc/0x130 [ 259.819912][ T5851] cleanup_mnt+0x437/0x4d0 [ 259.819934][ T5851] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.819968][ T5851] task_work_run+0x1d9/0x270 [ 259.820000][ T5851] ? __pfx_task_work_run+0x10/0x10 [ 259.820040][ T5851] exit_to_user_mode_loop+0xed/0x480 [ 259.820070][ T5851] ? rcu_is_watching+0x15/0xb0 [ 259.820098][ T5851] do_syscall_64+0x32d/0xf80 [ 259.820129][ T5851] ? trace_irq_disable+0x3b/0x140 [ 259.820156][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.820178][ T5851] ? clear_bhb_loop+0x40/0x90 [ 259.820206][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.820228][ T5851] RIP: 0033:0x7f020999d9d7 [ 259.820248][ T5851] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 259.820267][ T5851] RSP: 002b:00007ffd3c89e7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 259.820289][ T5851] RAX: 0000000000000000 RBX: 00007f0209a32050 RCX: 00007f020999d9d7 [ 259.820304][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3c89e860 [ 259.820317][ T5851] RBP: 00007ffd3c89e860 R08: 00007ffd3c89f860 R09: 00000000ffffffff [ 259.820332][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3c89f8f0 [ 259.820346][ T5851] R13: 00007f0209a32050 R14: 000000000003f659 R15: 00007ffd3c89f930 [ 259.820381][ T5851] [ 259.905169][ T5851] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 260.176860][ T9345] netlink: 7 bytes leftover after parsing attributes in process `syz.7.894'. [ 260.715025][ T6041] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 260.860237][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 260.879448][ T6041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.909572][ T6041] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 260.920052][ T9366] macvtap1: entered promiscuous mode [ 260.936725][ T9366] erspan0: entered promiscuous mode [ 260.943414][ T6041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.954232][ T9366] macvtap1: entered allmulticast mode [ 260.961180][ T9366] erspan0: entered allmulticast mode [ 260.969197][ T6041] usb 5-1: config 0 descriptor?? [ 261.022103][ T9368] erspan0: left allmulticast mode [ 261.028891][ T9368] erspan0: left promiscuous mode [ 261.037040][ T9368] macvtap1: left promiscuous mode [ 261.043369][ T9368] macvtap1: left allmulticast mode [ 261.165429][ T8567] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 261.219153][ T6041] usbhid 5-1:0.0: can't add hid device: -71 [ 261.231893][ T6041] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 261.252136][ T6041] usb 5-1: USB disconnect, device number 13 [ 261.325127][ T8567] usb 7-1: Using ep0 maxpacket: 16 [ 261.343868][ T8567] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 261.360120][ T8567] usb 7-1: config 0 has no interface number 0 [ 261.371194][ T8567] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 261.387450][ T8567] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 261.409408][ T8567] usb 7-1: config 0 interface 41 has no altsetting 0 [ 261.422689][ T8567] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 261.434732][ T8567] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.449959][ T8567] usb 7-1: Product: syz [ 261.464247][ T8567] usb 7-1: Manufacturer: syz [ 261.473254][ T8567] usb 7-1: SerialNumber: syz [ 261.495528][ T8567] usb 7-1: config 0 descriptor?? [ 261.501624][ T9370] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 261.510737][ T9370] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 261.666716][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.906'. [ 261.709750][ T35] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.712208][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.906'. [ 261.738459][ T35] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.760873][ T35] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.779042][ T9370] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 261.789605][ T35] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.800563][ T9370] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 261.815308][ T6041] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 261.975093][ T6041] usb 5-1: Using ep0 maxpacket: 32 [ 261.993323][ T6041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.018759][ T6041] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 262.040313][ T6041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.080713][ T6041] usb 5-1: config 0 descriptor?? [ 262.107727][ T6041] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 262.150834][ T6041] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 262.438639][ T8567] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 262.618921][ T8568] usb 5-1: USB disconnect, device number 14 [ 262.652134][ T8568] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 262.871052][ T8567] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 262.897452][ T8567] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 262.914128][ T8567] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 262.945925][ T8567] usb 7-1: USB disconnect, device number 3 [ 263.303196][ T9420] vlan2: entered allmulticast mode [ 263.321790][ T9420] veth0_to_bond: entered allmulticast mode [ 263.434582][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 263.902917][ T9431] loop4: detected capacity change from 0 to 4096 [ 264.776520][ T8563] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 264.962987][ T8563] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.992791][ T8563] usb 4-1: config 0 interface 0 has no altsetting 0 [ 265.002677][ T8563] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 265.014295][ T8563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.033119][ T8563] usb 4-1: Product: syz [ 265.037963][ T8563] usb 4-1: Manufacturer: syz [ 265.047136][ T8563] usb 4-1: SerialNumber: syz [ 265.063313][ T8563] usb 4-1: config 0 descriptor?? [ 265.097750][ T8563] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 265.160515][ T8563] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.189736][ T8563] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 265.199426][ T8563] usb 4-1: media controller created [ 265.234584][ T8563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.562131][ T8563] DVB: Unable to find symbol tda10046_attach() [ 265.593626][ T8563] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 265.616992][ T8563] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 266.470314][ T8563] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 266.509951][ T9470] mmap: syz.6.937 (9470) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 266.523217][ T8563] usb 4-1: USB disconnect, device number 7 [ 267.387091][ T9480] loop0: detected capacity change from 0 to 32768 [ 267.491261][ T9480] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 267.539836][ T9480] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 267.743619][ T9480] XFS (loop0): Ending clean mount [ 267.801378][ T9480] XFS (loop0): Quotacheck needed: Please wait. [ 267.914728][ T9512] loop6: detected capacity change from 0 to 32768 [ 267.932273][ T9512] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.950 (9512) [ 267.959295][ T9512] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 267.969562][ T9512] BTRFS info (device loop6): using crc32c checksum algorithm [ 267.977104][ T9512] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 268.145953][ T9512] BTRFS info (device loop6): rebuilding free space tree [ 268.269221][ T9512] BTRFS info (device loop6): disabling free space tree [ 268.276340][ T9512] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 268.287683][ T9512] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 268.309717][ T9512] BTRFS info (device loop6): enabling ssd optimizations [ 268.316937][ T9512] BTRFS info (device loop6): turning on async discard [ 268.323745][ T9512] BTRFS info (device loop6): enabling disk space caching [ 268.331755][ T9512] BTRFS info (device loop6): force clearing of disk cache [ 268.338994][ T9512] BTRFS info (device loop6): use zstd compression, level 3 [ 268.537078][ T9480] XFS (loop0): Quotacheck: Done. [ 268.683353][ T9495] loop4: detected capacity change from 0 to 32768 [ 268.698858][ T5851] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 268.720824][ T9495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.947 (9495) [ 268.856309][ T9495] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.881506][ T6837] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 268.906712][ T9495] BTRFS info (device loop4): using sha256 checksum algorithm [ 269.025308][ T9544] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.290911][ T9495] BTRFS info (device loop4): rebuilding free space tree [ 269.358463][ T9495] BTRFS info (device loop4): enabling ssd optimizations [ 269.382767][ T9495] BTRFS info (device loop4): using spread ssd allocation scheme [ 269.414405][ T9495] BTRFS info (device loop4): turning on async discard [ 269.450956][ T9495] BTRFS info (device loop4): enabling free space tree [ 269.491904][ T9495] BTRFS info (device loop4): force clearing of disk cache [ 270.288080][ T9495] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 270.672135][ T9592] netlink: 'syz.6.967': attribute type 39 has an invalid length. [ 270.911518][ T5845] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 271.108809][ T5909] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 271.285668][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 271.311059][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.359301][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.395526][ T5909] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 271.424924][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.462921][ T5909] usb 4-1: config 0 descriptor?? [ 271.498487][ T5909] hub 4-1:0.0: USB hub found [ 271.542197][ T9601] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 271.696129][ T5909] hub 4-1:0.0: 1 port detected [ 271.894083][ T9611] loop4: detected capacity change from 0 to 128 [ 271.906729][ T9599] loop7: detected capacity change from 0 to 32768 [ 271.944247][ T9611] EXT4-fs (loop4): Test dummy encryption mode enabled [ 271.978847][ T9611] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.007580][ T9599] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 272.046447][ T9611] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 272.229709][ T9599] XFS (loop7): Ending clean mount [ 272.332499][ T5845] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.345379][ T9599] XFS (loop7): Quotacheck needed: Please wait. [ 272.356602][ T6041] hub 4-1:0.0: activate --> -90 [ 272.448939][ T9628] loop0: detected capacity change from 0 to 128 [ 272.457363][ T9628] EXT4-fs (loop0): Test dummy encryption mode enabled [ 272.488693][ T9628] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.618142][ T9599] XFS (loop7): Quotacheck: Done. [ 272.625265][ T9628] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 272.779111][ T5909] usb 4-1: USB disconnect, device number 8 [ 272.812907][ T5851] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.002105][ T8627] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 273.017547][ T6041] usb 4-1-port1: config error [ 273.595566][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 273.604654][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 273.761693][ T9655] loop3: detected capacity change from 0 to 512 [ 273.839330][ T9655] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.043927][ T9655] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.988: Bad quota inum: 2, type: 1 [ 274.124568][ T9655] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 274.218354][ T9662] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 274.249889][ T9662] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.988: Bad quota inum: 2, type: 1 [ 274.273518][ T9662] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 274.453217][ T5849] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 274.796013][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 274.967775][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.980169][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 274.991700][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 275.003193][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.017067][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.028334][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.054049][ T10] usb 7-1: config 0 descriptor?? [ 275.131582][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 275.178187][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.178498][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 275.196660][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.207345][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.220911][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.588321][ T10] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 275.814329][ T9697] loop7: detected capacity change from 0 to 512 [ 276.060863][ T9709] loop7: detected capacity change from 0 to 1024 [ 276.119529][ T9709] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.334374][ T8627] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.442790][ T10] usb 7-1: USB disconnect, device number 4 [ 276.755125][ T5909] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 276.857921][ T9710] loop4: detected capacity change from 0 to 40427 [ 276.873157][ T9710] F2FS-fs (loop4): build fault injection rate: 174 [ 276.888893][ T9710] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 276.902327][ T9710] F2FS-fs (loop4): invalid crc value [ 276.927823][ T5909] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 276.941441][ T5909] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 276.955826][ T5909] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 276.976793][ T5909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.995115][ T5909] usb 8-1: Product: syz [ 277.005362][ T5909] usb 8-1: Manufacturer: syz [ 277.011676][ T5909] usb 8-1: SerialNumber: syz [ 277.034679][ T5909] usb 8-1: config 0 descriptor?? [ 277.071708][ T5909] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 277.530381][ T9710] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 277.562256][ T9710] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 277.731524][ T9757] loop6: detected capacity change from 0 to 1024 [ 277.776157][ T9710] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90 [ 277.829614][ T9710] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:17, node_footer[nid:17,ino:17,ofs:0,cpver:0,blkaddr:0] [ 278.036897][ T5845] syz-executor: attempt to access beyond end of device [ 278.036897][ T5845] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 278.113997][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 278.114036][ T5845] Tainted: [L]=SOFTLOCKUP [ 278.114045][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.114058][ T5845] Call Trace: [ 278.114067][ T5845] [ 278.114076][ T5845] dump_stack_lvl+0xe8/0x150 [ 278.114115][ T5845] f2fs_handle_critical_error+0x37c/0x540 [ 278.114156][ T5845] f2fs_write_end_io+0x1274/0x1740 [ 278.114200][ T5845] __submit_merged_bio+0x256/0x6a0 [ 278.114238][ T5845] __submit_merged_write_cond+0x3c9/0x4e0 [ 278.114279][ T5845] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 278.114334][ T5845] f2fs_write_data_pages+0x287e/0x34f0 [ 278.114356][ T5845] ? is_bpf_text_address+0x26/0x2b0 [ 278.114425][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 278.114461][ T5845] ? do_raw_spin_lock+0x12b/0x2f0 [ 278.114523][ T5845] ? __lock_acquire+0x6b5/0x2cf0 [ 278.114572][ T5845] ? __lock_acquire+0x6b5/0x2cf0 [ 278.114616][ T5845] ? do_raw_spin_lock+0x12b/0x2f0 [ 278.114655][ T5845] ? do_raw_spin_unlock+0xf5/0x210 [ 278.114684][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 278.114706][ T5845] do_writepages+0x32e/0x550 [ 278.114740][ T5845] ? do_raw_spin_unlock+0xf5/0x210 [ 278.114772][ T5845] filemap_fdatawrite+0x1e9/0x2f0 [ 278.114802][ T5845] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 278.114882][ T5845] ? do_raw_spin_unlock+0xf5/0x210 [ 278.114914][ T5845] f2fs_sync_dirty_inodes+0x30e/0x830 [ 278.114954][ T5845] f2fs_write_checkpoint+0x9df/0x26a0 [ 278.114978][ T5845] ? __lock_acquire+0x6b5/0x2cf0 [ 278.115043][ T5845] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 278.115125][ T5845] kill_f2fs_super+0x314/0x720 [ 278.115155][ T5845] ? __pfx_kill_f2fs_super+0x10/0x10 [ 278.115193][ T5845] ? lockdep_hardirqs_on+0x7a/0x110 [ 278.115240][ T5845] deactivate_locked_super+0xbc/0x130 [ 278.115276][ T5845] cleanup_mnt+0x437/0x4d0 [ 278.115298][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.115332][ T5845] task_work_run+0x1d9/0x270 [ 278.115364][ T5845] ? __pfx_task_work_run+0x10/0x10 [ 278.115405][ T5845] exit_to_user_mode_loop+0xed/0x480 [ 278.115436][ T5845] ? rcu_is_watching+0x15/0xb0 [ 278.115462][ T5845] do_syscall_64+0x32d/0xf80 [ 278.115493][ T5845] ? trace_irq_disable+0x3b/0x140 [ 278.115519][ T5845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.115541][ T5845] ? clear_bhb_loop+0x40/0x90 [ 278.115569][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.115591][ T5845] RIP: 0033:0x7f225ed9d9d7 [ 278.115612][ T5845] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 278.115630][ T5845] RSP: 002b:00007ffcf8e84a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 278.115654][ T5845] RAX: 0000000000000000 RBX: 00007f225ee32050 RCX: 00007f225ed9d9d7 [ 278.115669][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf8e84b00 [ 278.115683][ T5845] RBP: 00007ffcf8e84b00 R08: 00007ffcf8e85b00 R09: 00000000ffffffff [ 278.115698][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8e85b90 [ 278.115712][ T5845] R13: 00007f225ee32050 R14: 0000000000043d79 R15: 00007ffcf8e85bd0 [ 278.115746][ T5845] [ 278.460149][ T5842] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 278.468512][ T5845] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 278.475971][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 278.476003][ T5845] Tainted: [L]=SOFTLOCKUP [ 278.476012][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.476026][ T5845] Call Trace: [ 278.476034][ T5845] [ 278.476043][ T5845] dump_stack_lvl+0xe8/0x150 [ 278.476082][ T5845] f2fs_handle_critical_error+0x37c/0x540 [ 278.476121][ T5845] f2fs_write_end_io+0x1274/0x1740 [ 278.476166][ T5845] __submit_merged_bio+0x256/0x6a0 [ 278.476205][ T5845] __submit_merged_write_cond+0x3c9/0x4e0 [ 278.476245][ T5845] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 278.476309][ T5845] f2fs_write_data_pages+0x287e/0x34f0 [ 278.476330][ T5845] ? is_bpf_text_address+0x26/0x2b0 [ 278.476398][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 278.476436][ T5845] ? do_raw_spin_lock+0x12b/0x2f0 [ 278.476499][ T5845] ? __lock_acquire+0x6b5/0x2cf0 [ 278.476547][ T5845] ? __lock_acquire+0x6b5/0x2cf0 [ 278.476590][ T5845] ? do_raw_spin_lock+0x12b/0x2f0 [ 278.476629][ T5845] ? do_raw_spin_unlock+0xf5/0x210 [ 278.476657][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 278.476680][ T5845] do_writepages+0x32e/0x550 [ 278.476718][ T5845] ? do_raw_spin_unlock+0xf5/0x210 [ 278.476750][ T5845] filemap_fdatawrite+0x1e9/0x2f0 [ 278.476781][ T5845] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 278.476858][ T5845] ? do_raw_spin_unlock+0xf5/0x210 [ 278.476890][ T5845] f2fs_sync_dirty_inodes+0x30e/0x830 [ 278.476932][ T5845] f2fs_write_checkpoint+0x9df/0x26a0 [ 278.476955][ T5845] ? __lock_acquire+0x6b5/0x2cf0 [ 278.477020][ T5845] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 278.477102][ T5845] kill_f2fs_super+0x314/0x720 [ 278.477132][ T5845] ? __pfx_kill_f2fs_super+0x10/0x10 [ 278.477169][ T5845] ? lockdep_hardirqs_on+0x7a/0x110 [ 278.477215][ T5845] deactivate_locked_super+0xbc/0x130 [ 278.477251][ T5845] cleanup_mnt+0x437/0x4d0 [ 278.477279][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.477312][ T5845] task_work_run+0x1d9/0x270 [ 278.477344][ T5845] ? __pfx_task_work_run+0x10/0x10 [ 278.477384][ T5845] exit_to_user_mode_loop+0xed/0x480 [ 278.477414][ T5845] ? rcu_is_watching+0x15/0xb0 [ 278.477441][ T5845] do_syscall_64+0x32d/0xf80 [ 278.477471][ T5845] ? trace_irq_disable+0x3b/0x140 [ 278.477497][ T5845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.477518][ T5845] ? clear_bhb_loop+0x40/0x90 [ 278.477546][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.477569][ T5845] RIP: 0033:0x7f225ed9d9d7 [ 278.477589][ T5845] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 278.477607][ T5845] RSP: 002b:00007ffcf8e84a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 278.477630][ T5845] RAX: 0000000000000000 RBX: 00007f225ee32050 RCX: 00007f225ed9d9d7 [ 278.477645][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf8e84b00 [ 278.477658][ T5845] RBP: 00007ffcf8e84b00 R08: 00007ffcf8e85b00 R09: 00000000ffffffff [ 278.477673][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8e85b90 [ 278.477687][ T5845] R13: 00007f225ee32050 R14: 0000000000043d79 R15: 00007ffcf8e85bd0 [ 278.477722][ T5845] [ 278.477759][ T5845] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 278.901747][ T9769] hfsplus: request for non-existent node 33554434 in B*Tree [ 278.909793][ T9769] hfsplus: request for non-existent node 33554434 in B*Tree [ 279.017520][ T5909] gspca_sunplus: reg_r err -71 [ 279.022505][ T5909] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 279.046471][ T1115] hfsplus: request for non-existent node 33554434 in B*Tree [ 279.073614][ T5909] usb 8-1: USB disconnect, device number 2 [ 279.117508][ T1115] hfsplus: request for non-existent node 33554434 in B*Tree [ 279.714042][ T9790] Bluetooth: MGMT ver 1.23 [ 279.740374][ T9793] loop6: detected capacity change from 0 to 128 [ 279.778637][ T9793] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 279.811258][ T9793] hpfs: filesystem error: improperly stopped [ 279.837756][ T9793] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 279.864113][ T9793] hpfs: You really don't want any checks? You are crazy... [ 279.896006][ T9793] hpfs: Code page index out of array [ 279.907676][ T9793] hpfs: code page support is disabled [ 279.934209][ T9793] hpfs: hpfs_map_4sectors(): unaligned read [ 279.963501][ T9793] hpfs: hpfs_map_4sectors(): unaligned read [ 279.981085][ T9793] hpfs: filesystem error: unable to find root dir [ 282.515185][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1054'. [ 282.614650][ T9874] loop0: detected capacity change from 0 to 2048 [ 282.729027][ T9876] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.791538][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1056'. [ 282.831280][ T9877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.938808][ T9877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.545120][ T865] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 283.717659][ T865] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 283.741435][ T865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.753223][ T865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.763874][ T865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 283.778899][ T865] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 283.792383][ T865] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 283.801012][ T865] usb 4-1: Manufacturer: syz [ 283.828592][ T9904] loop4: detected capacity change from 0 to 128 [ 283.842458][ T865] usb 4-1: config 0 descriptor?? [ 283.920177][ T9904] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.986096][ T9904] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 284.079942][ T9904] syz.4.1066 (pid 9904) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 284.190713][ T5845] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.274490][ T865] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 284.331832][ T865] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 284.421732][ T9892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1062'. [ 284.539542][ T865] usb 4-1: USB disconnect, device number 9 [ 284.658497][ T9912] fido_id[9912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 285.134420][ T9930] loop3: detected capacity change from 0 to 256 [ 286.054013][ T9956] netlink: 'syz.7.1084': attribute type 1 has an invalid length. [ 286.267112][ T9956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.333145][ T9958] bond1: entered allmulticast mode [ 286.877405][ T9983] loop6: detected capacity change from 0 to 1024 [ 286.894108][ T9983] EXT4-fs: Ignoring removed bh option [ 286.904348][ T9981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1093'. [ 286.913584][ T9983] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 286.942209][ T9983] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 286.981148][ T9983] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 287.141483][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 287.311808][ T9983] EXT4-fs (loop6): failed to open journal device unknown-block(0,5) -6 [ 287.369889][ T9976] loop7: detected capacity change from 0 to 32768 [ 287.436570][ T9976] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1091 (9976) [ 287.481113][ T9983] loop6: detected capacity change from 0 to 512 [ 287.517051][ T9983] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 287.556487][ T9976] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.601805][ T9983] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 287.628203][ T9983] EXT4-fs (loop6): 1 truncate cleaned up [ 287.635104][ T9976] BTRFS info (device loop7): using crc32c checksum algorithm [ 287.659424][ T9983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.740422][ T9983] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1094'. [ 287.928770][ T9976] BTRFS info (device loop7): enabling ssd optimizations [ 287.955102][ T9976] BTRFS info (device loop7): turning on async discard [ 287.974162][ T6837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.991771][ T9976] BTRFS info (device loop7): enabling free space tree [ 288.255540][T10022] loop6: detected capacity change from 0 to 256 [ 289.242963][ T8627] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 289.774242][ T29] audit: type=1326 audit(1774359262.031:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10047 comm="syz.4.1112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f225ed9c799 code=0x0 [ 290.133635][T10035] loop6: detected capacity change from 0 to 40427 [ 290.159400][T10035] F2FS-fs (loop6): Wrong segment_count / block_count (31 > 0) [ 290.195542][T10035] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 290.247861][T10035] F2FS-fs (loop6): invalid crc value [ 290.297496][T10066] overlayfs: upper fs does not support file handles, falling back to index=off. [ 290.429706][T10035] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 290.449528][T10035] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 290.465025][T10035] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 290.619028][ T6837] syz-executor: attempt to access beyond end of device [ 290.619028][ T6837] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 290.723400][ T6837] CPU: 0 UID: 0 PID: 6837 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 290.723438][ T6837] Tainted: [L]=SOFTLOCKUP [ 290.723446][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.723458][ T6837] Call Trace: [ 290.723466][ T6837] [ 290.723475][ T6837] dump_stack_lvl+0xe8/0x150 [ 290.723512][ T6837] f2fs_handle_critical_error+0x37c/0x540 [ 290.723550][ T6837] f2fs_write_end_io+0x1274/0x1740 [ 290.723596][ T6837] __submit_merged_bio+0x256/0x6a0 [ 290.723633][ T6837] f2fs_submit_page_write+0xeaa/0x24f0 [ 290.723706][ T6837] ? __pfx_f2fs_submit_page_write+0x10/0x10 [ 290.723762][ T6837] do_write_page+0x40f/0xab0 [ 290.723788][ T6837] ? uplift_priority+0xdb/0x700 [ 290.723823][ T6837] f2fs_do_write_node_page+0x3b/0x60 [ 290.723851][ T6837] __write_node_folio+0x11bb/0x1a20 [ 290.723888][ T6837] ? mod_memcg_lruvec_state+0xe2/0x220 [ 290.723922][ T6837] ? __pfx___write_node_folio+0x10/0x10 [ 290.723960][ T6837] ? f2fs_inode_chksum_set+0x13e/0x640 [ 290.723997][ T6837] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 290.724025][ T6837] ? folio_clear_dirty_for_io+0x570/0x710 [ 290.724053][ T6837] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 290.724085][ T6837] f2fs_sync_node_pages+0xeb4/0x1680 [ 290.724137][ T6837] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 290.724215][ T6837] f2fs_write_checkpoint+0xeb8/0x26a0 [ 290.724239][ T6837] ? __lock_acquire+0x6b5/0x2cf0 [ 290.724306][ T6837] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 290.724389][ T6837] kill_f2fs_super+0x314/0x720 [ 290.724421][ T6837] ? __pfx_kill_f2fs_super+0x10/0x10 [ 290.724458][ T6837] ? lockdep_hardirqs_on+0x7a/0x110 [ 290.724507][ T6837] deactivate_locked_super+0xbc/0x130 [ 290.724542][ T6837] cleanup_mnt+0x437/0x4d0 [ 290.724563][ T6837] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.724605][ T6837] task_work_run+0x1d9/0x270 [ 290.724638][ T6837] ? __pfx_task_work_run+0x10/0x10 [ 290.724687][ T6837] exit_to_user_mode_loop+0xed/0x480 [ 290.724718][ T6837] ? rcu_is_watching+0x15/0xb0 [ 290.724745][ T6837] do_syscall_64+0x32d/0xf80 [ 290.724776][ T6837] ? trace_irq_disable+0x3b/0x140 [ 290.724801][ T6837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.724826][ T6837] ? clear_bhb_loop+0x40/0x90 [ 290.724851][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.724871][ T6837] RIP: 0033:0x7f34e2b9d9d7 [ 290.724893][ T6837] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 290.724912][ T6837] RSP: 002b:00007fffbf801ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 290.724935][ T6837] RAX: 0000000000000000 RBX: 00007f34e2c32050 RCX: 00007f34e2b9d9d7 [ 290.724949][ T6837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbf801f90 [ 290.724962][ T6837] RBP: 00007fffbf801f90 R08: 00007fffbf802f90 R09: 00000000ffffffff [ 290.724976][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffbf803020 [ 290.724990][ T6837] R13: 00007f34e2c32050 R14: 0000000000046e9f R15: 00007fffbf803060 [ 290.725025][ T6837] [ 291.113838][ T6837] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 291.166748][ T6837] syz-executor: attempt to access beyond end of device [ 291.166748][ T6837] loop6: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 291.258973][ T6837] CPU: 0 UID: 0 PID: 6837 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 291.259009][ T6837] Tainted: [L]=SOFTLOCKUP [ 291.259017][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.259030][ T6837] Call Trace: [ 291.259038][ T6837] [ 291.259048][ T6837] dump_stack_lvl+0xe8/0x150 [ 291.259098][ T6837] f2fs_handle_critical_error+0x37c/0x540 [ 291.259147][ T6837] f2fs_write_end_io+0x1274/0x1740 [ 291.259189][ T6837] __submit_merged_bio+0x256/0x6a0 [ 291.259227][ T6837] f2fs_submit_merged_write+0x284/0x390 [ 291.259262][ T6837] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 291.259297][ T6837] ? trace_lock_elapsed_time_end+0xf3/0xbc0 [ 291.259326][ T6837] ? f2fs_up_read_trace+0x1b/0x40 [ 291.259359][ T6837] ? folio_unlock+0x101/0x160 [ 291.259390][ T6837] __write_node_folio+0x14ce/0x1a20 [ 291.259425][ T6837] ? mod_memcg_lruvec_state+0xe2/0x220 [ 291.259461][ T6837] ? __pfx___write_node_folio+0x10/0x10 [ 291.259507][ T6837] ? f2fs_inode_chksum_set+0x13e/0x640 [ 291.259546][ T6837] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 291.259571][ T6837] ? folio_clear_dirty_for_io+0x570/0x710 [ 291.259599][ T6837] ? folio_clear_dirty_for_io+0x1d4/0x710 [ 291.259630][ T6837] f2fs_sync_node_pages+0xeb4/0x1680 [ 291.259678][ T6837] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 291.259748][ T6837] f2fs_write_checkpoint+0xeb8/0x26a0 [ 291.259771][ T6837] ? __lock_acquire+0x6b5/0x2cf0 [ 291.259842][ T6837] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 291.259924][ T6837] kill_f2fs_super+0x314/0x720 [ 291.259955][ T6837] ? __pfx_kill_f2fs_super+0x10/0x10 [ 291.259998][ T6837] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.260050][ T6837] deactivate_locked_super+0xbc/0x130 [ 291.260085][ T6837] cleanup_mnt+0x437/0x4d0 [ 291.260131][ T6837] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.260171][ T6837] task_work_run+0x1d9/0x270 [ 291.260210][ T6837] ? __pfx_task_work_run+0x10/0x10 [ 291.260251][ T6837] exit_to_user_mode_loop+0xed/0x480 [ 291.260279][ T6837] ? rcu_is_watching+0x15/0xb0 [ 291.260307][ T6837] do_syscall_64+0x32d/0xf80 [ 291.260336][ T6837] ? trace_irq_disable+0x3b/0x140 [ 291.260360][ T6837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.260382][ T6837] ? clear_bhb_loop+0x40/0x90 [ 291.260413][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.260434][ T6837] RIP: 0033:0x7f34e2b9d9d7 [ 291.260455][ T6837] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 291.260472][ T6837] RSP: 002b:00007fffbf801ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 291.260495][ T6837] RAX: 0000000000000000 RBX: 00007f34e2c32050 RCX: 00007f34e2b9d9d7 [ 291.260510][ T6837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbf801f90 [ 291.260522][ T6837] RBP: 00007fffbf801f90 R08: 00007fffbf802f90 R09: 00000000ffffffff [ 291.260536][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffbf803020 [ 291.260548][ T6837] R13: 00007f34e2c32050 R14: 0000000000046e9f R15: 00007fffbf803060 [ 291.260583][ T6837] [ 291.260593][ T6837] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 291.666323][ T29] audit: type=1326 audit(1774359263.961:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10080 comm="syz.0.1122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f020999c799 code=0x0 [ 292.098280][T10090] loop4: detected capacity change from 0 to 256 [ 292.148735][T10090] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 292.179827][T10070] loop3: detected capacity change from 0 to 32768 [ 292.287851][T10070] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 292.384339][T10070] XFS (loop3): Ending clean mount [ 292.471357][ T5849] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 293.205722][T10117] loop4: detected capacity change from 0 to 256 [ 293.235638][T10117] exfat: Deprecated parameter 'utf8' [ 293.268268][T10117] exfat: Deprecated parameter 'utf8' [ 293.370548][T10117] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 294.852449][ T8568] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 294.898282][ T8568] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 295.062026][T10170] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1146'. [ 295.579214][T10168] loop4: detected capacity change from 0 to 32768 [ 295.652662][T10168] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 295.661191][T10168] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 295.699186][T10167] fido_id[10167]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 295.742833][T10168] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 295.753696][ T865] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 295.780439][ T865] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 296.168448][ T5909] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 296.216013][ T865] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 435ms [ 296.240599][ T865] gfs2: fsid=syz:syz.0: jid=0: Done [ 296.260406][T10168] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 296.367173][ T5909] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 296.427696][ T5909] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.472619][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.492513][ T5909] usb 7-1: config 0 descriptor?? [ 296.538839][ T5909] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 296.727508][ T8567] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 296.914004][ T8567] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 296.925462][ T8567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.940328][ T8567] usb 1-1: Product: syz [ 296.959338][ T8567] usb 1-1: Manufacturer: syz [ 296.973998][ T8567] usb 1-1: SerialNumber: syz [ 297.024644][ T8567] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 297.232234][ T8568] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 297.703535][T10199] random: crng reseeded on system resumption [ 297.904971][ T8567] usb 1-1: USB disconnect, device number 8 [ 298.285649][ T8568] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 298.315850][ T8568] ath9k_htc: Failed to initialize the device [ 298.334660][ T8567] usb 1-1: ath9k_htc: USB layer deinitialized [ 298.929048][T10238] loop4: detected capacity change from 0 to 128 [ 298.983939][ T8568] usb 7-1: USB disconnect, device number 5 [ 298.998569][T10238] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 299.032112][T10238] hpfs: filesystem error: improperly stopped [ 299.050615][T10238] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 299.076315][T10238] hpfs: You really don't want any checks? You are crazy... [ 299.094449][T10238] hpfs: Code page index out of array [ 299.132380][T10238] hpfs: code page support is disabled [ 299.146579][T10238] hpfs: hpfs_map_4sectors(): unaligned read [ 299.168954][T10238] hpfs: hpfs_map_4sectors(): unaligned read [ 299.186183][T10238] hpfs: filesystem error: unable to find root dir [ 299.193210][T10243] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1173'. [ 300.196371][T10271] loop0: detected capacity change from 0 to 512 [ 300.223291][T10271] EXT4-fs: Ignoring removed orlov option [ 300.327011][T10265] loop4: detected capacity change from 0 to 256 [ 300.368644][T10271] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 300.791853][T10265] FAT-fs (loop4): Directory bread(block 64) failed [ 300.801306][T10265] FAT-fs (loop4): Directory bread(block 65) failed [ 300.808950][T10265] FAT-fs (loop4): Directory bread(block 66) failed [ 300.815879][T10265] FAT-fs (loop4): Directory bread(block 67) failed [ 300.825833][T10265] FAT-fs (loop4): Directory bread(block 68) failed [ 300.832652][T10265] FAT-fs (loop4): Directory bread(block 69) failed [ 300.840026][T10265] FAT-fs (loop4): Directory bread(block 70) failed [ 300.846884][T10265] FAT-fs (loop4): Directory bread(block 71) failed [ 300.855470][T10265] FAT-fs (loop4): Directory bread(block 72) failed [ 300.863695][T10265] FAT-fs (loop4): Directory bread(block 73) failed [ 301.671906][T10271] EXT4-fs (loop0): 1 truncate cleaned up [ 301.701467][T10271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.957703][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.373248][T10288] loop4: detected capacity change from 0 to 8 [ 302.596611][T10288] SQUASHFS error: lzo decompression failed, data probably corrupt [ 302.658301][T10288] SQUASHFS error: Failed to read block 0x28d: -5 [ 302.705486][T10288] SQUASHFS error: Unable to read metadata cache entry [28b] [ 302.792516][T10288] SQUASHFS error: Unable to read inode 0x11f [ 302.859882][ T5842] Bluetooth: hci1: unexpected event for opcode 0x100c [ 303.269651][ T6880] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.316677][ T6880] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.607300][ T5161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.628839][ T5161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.640744][ T5161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.652443][ T5161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.663437][ T5161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.754972][ T8568] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 303.813379][ T6880] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.849096][ T6880] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.934968][ T8568] usb 7-1: Using ep0 maxpacket: 8 [ 303.951231][ T8568] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 303.989672][ T8568] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.021824][ T8568] usb 7-1: Product: syz [ 304.038778][ T8568] usb 7-1: Manufacturer: syz [ 304.038804][ T8568] usb 7-1: SerialNumber: syz [ 304.048770][ T8568] usb 7-1: config 0 descriptor?? [ 304.063166][ T6880] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.063230][ T6880] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.264278][ T8568] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 304.293894][ T6880] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.293930][ T6880] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.672888][ T8568] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 304.696273][ T8568] usb 7-1: USB disconnect, device number 6 [ 305.725769][ T5842] Bluetooth: hci0: command tx timeout [ 305.756013][T10306] chnl_net:caif_netlink_parms(): no params data found [ 305.885114][T10347] loop6: detected capacity change from 0 to 2048 [ 306.003982][ T6096] Alternate GPT is invalid, using primary GPT. [ 306.023403][ T6096] loop6: p2 p3 p7 [ 306.125095][ T5842] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 306.341562][T10347] Alternate GPT is invalid, using primary GPT. [ 306.405363][T10347] loop6: p2 p3 p7 [ 306.536797][ T13] Bluetooth: (null): Invalid header checksum [ 306.646914][ T1160] Bluetooth: (null): Too short H5 packet [ 306.656193][T10368] loop3: detected capacity change from 0 to 2048 [ 306.665696][ T1160] Bluetooth: (null): Invalid header checksum [ 306.684799][ T6880] bridge_slave_1: left allmulticast mode [ 306.710318][ T6880] bridge_slave_1: left promiscuous mode [ 306.737021][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.755409][ T1115] Bluetooth: (null): Invalid header checksum [ 306.832399][ T6880] bridge_slave_0: left allmulticast mode [ 306.848793][T10368] NILFS (loop3): invalid segment: Checksum error in segment payload [ 306.868566][ T6880] bridge_slave_0: left promiscuous mode [ 306.876009][ T6010] udevd[6010]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 306.889130][ T1160] Bluetooth: (null): Invalid header checksum [ 306.889327][T10368] NILFS (loop3): trying rollback from an earlier position [ 306.897003][ T6096] udevd[6096]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 306.911074][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 306.924400][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.977156][ T6886] Bluetooth: (null): Invalid header checksum [ 307.020265][T10368] NILFS (loop3): recovery complete [ 307.061378][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 307.066261][ T6096] udevd[6096]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 307.076896][ T5908] udevd[5908]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 307.100334][T10378] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.100939][ T13] Bluetooth: (null): Invalid header checksum [ 307.804993][ T5842] Bluetooth: hci0: command tx timeout [ 308.057085][T10362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.064752][T10362] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.074934][T10362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.081996][T10362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.094296][T10362] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.106453][T10362] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 308.134710][T10362] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 308.567322][ T6880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.596272][ T6880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.645800][ T6880] bond0 (unregistering): Released all slaves [ 308.673679][ T6880] bond1 (unregistering): Released all slaves [ 308.724585][T10306] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.743344][T10306] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.765465][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 308.775210][T10306] bridge_slave_0: entered allmulticast mode [ 308.809766][T10306] bridge_slave_0: entered promiscuous mode [ 308.864417][T10306] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.883554][T10306] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.898631][T10306] bridge_slave_1: entered allmulticast mode [ 308.915146][T10306] bridge_slave_1: entered promiscuous mode [ 309.184110][T10306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.300292][T10421] netlink: 'syz.6.1232': attribute type 1 has an invalid length. [ 309.308092][T10306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.345094][T10421] netlink: 'syz.6.1232': attribute type 4 has an invalid length. [ 309.354478][T10421] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1232'. [ 309.542644][T10306] team0: Port device team_slave_0 added [ 309.589163][T10306] team0: Port device team_slave_1 added [ 309.864571][ T6880] hsr_slave_0: left promiscuous mode [ 309.886335][ T8563] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 309.887369][ T6880] hsr_slave_1: left promiscuous mode [ 309.912848][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.931532][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.984553][ T6880] veth1_macvtap: left promiscuous mode [ 310.002867][ T6880] veth0_macvtap: left promiscuous mode [ 310.038434][ T6880] veth1_vlan: left promiscuous mode [ 310.058142][ T8563] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 310.068505][ T6880] veth0_vlan: left promiscuous mode [ 310.080545][ T8563] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.119459][ T8563] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.129808][ T5842] Bluetooth: hci0: command 0x0419 tx timeout [ 310.130048][ T5161] Bluetooth: hci4: command 0x0c1a tx timeout [ 310.142622][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 310.143226][ T5855] Bluetooth: hci2: command 0x0c1a tx timeout [ 310.193591][ T8563] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 310.277513][ T8563] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 310.327981][ T8563] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 310.372186][ T8563] usb 7-1: Manufacturer: syz [ 310.427435][ T8563] usb 7-1: config 0 descriptor?? [ 310.872675][ T6880] team0 (unregistering): Port device team_slave_1 removed [ 310.910176][ T8563] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 310.932273][ T6880] team0 (unregistering): Port device team_slave_0 removed [ 310.991752][ T8563] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 311.454989][ T8563] usb 7-1: USB disconnect, device number 7 [ 311.492481][T10306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.512451][T10306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.566560][T10306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.626338][T10306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.636918][T10306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.686628][T10306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.910158][T10306] hsr_slave_0: entered promiscuous mode [ 311.942240][T10306] hsr_slave_1: entered promiscuous mode [ 311.962467][T10306] debugfs: 'hsr0' already exists in 'hsr' [ 311.985602][T10306] Cannot create hsr debugfs directory [ 312.043728][T10482] overlayfs: upper fs does not support file handles, falling back to index=off. [ 312.307680][T10493] loop0: detected capacity change from 0 to 128 [ 312.894916][ T8568] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 313.080424][ T8568] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.113381][ T8568] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.157390][ T8568] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.182588][ T8568] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.432206][ T8568] usb 7-1: GET_CAPABILITIES returned 0 [ 313.447492][ T8568] usbtmc 7-1:16.0: can't read capabilities [ 313.634266][T10306] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 313.670136][T10306] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 313.742628][T10306] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 313.801250][T10306] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 314.053858][ T8563] usb 7-1: USB disconnect, device number 8 [ 314.159956][T10306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.256772][T10306] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.319183][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.326452][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.420111][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.427376][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.557951][T10306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.900003][T10306] veth0_vlan: entered promiscuous mode [ 316.941758][T10598] loop6: detected capacity change from 0 to 512 [ 316.977348][T10598] EXT4-fs: Ignoring removed orlov option [ 316.991040][T10306] veth1_vlan: entered promiscuous mode [ 317.039527][T10598] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 317.117645][T10598] EXT4-fs (loop6): 1 truncate cleaned up [ 317.171153][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.177772][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.203041][T10598] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.259365][T10601] loop3: detected capacity change from 0 to 1024 [ 317.323324][T10306] veth0_macvtap: entered promiscuous mode [ 317.413428][T10306] veth1_macvtap: entered promiscuous mode [ 317.558825][T10306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.655295][T10306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.692079][ T1160] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.703773][ T1160] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.737005][ T1160] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.768235][ T1160] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.854807][ T6837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.093426][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.130376][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.323617][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.378312][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.336872][T10638] loop2: detected capacity change from 0 to 7 [ 319.393894][T10638] Dev loop2: unable to read RDB block 7 [ 319.423157][T10638] loop2: AHDI p1 p2 p3 [ 319.446915][T10638] loop2: partition table partially beyond EOD, truncated [ 319.501653][T10638] loop2: p1 start 1818582900 is beyond EOD, truncated [ 319.530709][T10638] loop2: p3 start 335544320 is beyond EOD, truncated [ 319.968210][T10646] loop0: detected capacity change from 0 to 4096 [ 320.118361][T10646] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 320.240300][T10646] ntfs3(loop0): Failed to load $Extend (-22). [ 320.267175][T10646] ntfs3(loop0): Failed to initialize $Extend. [ 321.874976][T10678] random: crng reseeded on system resumption [ 323.210870][T10688] loop6: detected capacity change from 0 to 32768 [ 323.292111][T10688] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 323.300572][T10688] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 323.408046][T10691] loop8: detected capacity change from 0 to 256 [ 323.717178][T10688] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 323.861208][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 324.023071][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 325.604519][T10691] FAT-fs (loop8): Directory bread(block 64) failed [ 325.611847][T10691] FAT-fs (loop8): Directory bread(block 65) failed [ 325.619757][T10691] FAT-fs (loop8): Directory bread(block 66) failed [ 325.626819][T10691] FAT-fs (loop8): Directory bread(block 67) failed [ 325.634253][T10691] FAT-fs (loop8): Directory bread(block 68) failed [ 325.641856][T10691] FAT-fs (loop8): Directory bread(block 69) failed [ 325.650543][T10691] FAT-fs (loop8): Directory bread(block 70) failed [ 325.657412][T10691] FAT-fs (loop8): Directory bread(block 71) failed [ 325.664696][T10691] FAT-fs (loop8): Directory bread(block 72) failed [ 325.671696][T10691] FAT-fs (loop8): Directory bread(block 73) failed [ 326.694246][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2671ms [ 326.716760][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 326.729115][T10688] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 326.739287][T10688] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 327.598118][ T8574] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 327.778730][ T8574] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.831440][ T8574] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 327.852782][ T8574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 327.883813][ T8574] usb 4-1: Product: syz [ 327.899374][ T8574] usb 4-1: Manufacturer: syz [ 327.927373][ T8574] usb 4-1: SerialNumber: syz [ 328.179576][ T8574] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 328.209685][T10706] loop6: detected capacity change from 0 to 32768 [ 328.258045][T10706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1302 (10706) [ 328.343128][T10706] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.387366][T10706] BTRFS info (device loop6): using crc32c checksum algorithm [ 328.590872][T10706] BTRFS info (device loop6): enabling ssd optimizations [ 328.660038][T10706] BTRFS info (device loop6): turning on flush-on-commit [ 328.714203][T10706] BTRFS info (device loop6): enabling free space tree [ 328.761323][T10706] BTRFS info (device loop6): enabling auto defrag [ 328.798329][T10706] BTRFS info (device loop6): use lzo compression, level 1 [ 328.809179][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 328.845993][T10706] BTRFS info (device loop6): max_inline set to 4096 [ 328.853694][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.021250][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.062916][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.228641][T10764] loop0: detected capacity change from 0 to 256 [ 330.072559][T10764] FAT-fs (loop0): Directory bread(block 64) failed [ 330.079660][T10764] FAT-fs (loop0): Directory bread(block 65) failed [ 330.086947][T10764] FAT-fs (loop0): Directory bread(block 66) failed [ 330.093817][T10764] FAT-fs (loop0): Directory bread(block 67) failed [ 330.101533][T10764] FAT-fs (loop0): Directory bread(block 68) failed [ 330.108536][T10764] FAT-fs (loop0): Directory bread(block 69) failed [ 330.116336][T10764] FAT-fs (loop0): Directory bread(block 70) failed [ 330.123264][T10764] FAT-fs (loop0): Directory bread(block 71) failed [ 330.131356][T10764] FAT-fs (loop0): Directory bread(block 72) failed [ 330.138288][T10764] FAT-fs (loop0): Directory bread(block 73) failed [ 330.758769][ C0] usblp0: nonzero write bulk status received: -71 [ 330.975037][ T8566] usb 4-1: USB disconnect, device number 10 [ 331.154330][ T8566] usblp0: removed [ 331.475059][ T5931] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 331.537370][ T6837] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.685851][ T5931] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.709400][ T5931] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.770281][ T5931] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.818027][ T5931] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.880528][ T5931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.921384][ T5931] usb 9-1: config 0 descriptor?? [ 332.364942][ T42] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 332.446465][ T5931] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 332.584790][ T42] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 332.608902][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.649386][ T42] usb 4-1: Product: syz [ 332.673528][ T42] usb 4-1: Manufacturer: syz [ 332.703670][ T42] usb 4-1: SerialNumber: syz [ 332.741809][ T42] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 332.852189][ T6041] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 333.110487][ T10] usb 4-1: USB disconnect, device number 11 [ 333.237394][ T5931] usb 9-1: USB disconnect, device number 2 [ 333.965090][ T6041] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 334.048468][T10818] loop3: detected capacity change from 0 to 256 [ 334.492525][T10818] FAT-fs (loop3): Directory bread(block 64) failed [ 334.499282][T10818] FAT-fs (loop3): Directory bread(block 65) failed [ 334.506573][T10818] FAT-fs (loop3): Directory bread(block 66) failed [ 334.513751][T10818] FAT-fs (loop3): Directory bread(block 67) failed [ 334.521394][T10818] FAT-fs (loop3): Directory bread(block 68) failed [ 334.528249][T10818] FAT-fs (loop3): Directory bread(block 69) failed [ 334.535831][T10818] FAT-fs (loop3): Directory bread(block 70) failed [ 334.542519][T10818] FAT-fs (loop3): Directory bread(block 71) failed [ 334.549435][T10818] FAT-fs (loop3): Directory bread(block 72) failed [ 334.557125][T10818] FAT-fs (loop3): Directory bread(block 73) failed [ 334.775092][ T42] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 335.276710][ T6041] ath9k_htc: Failed to initialize the device [ 335.343575][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 335.373765][T10824] loop6: detected capacity change from 0 to 128 [ 335.381307][T10824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.403008][T10824] EXT4-fs (loop6): Test dummy encryption mode enabled [ 335.474943][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 335.486656][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 335.498444][ T42] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 335.513733][ T42] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 335.523349][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.531792][ T42] usb 5-1: Product: syz [ 335.536466][ T42] usb 5-1: Manufacturer: syz [ 335.541118][ T42] usb 5-1: SerialNumber: syz [ 335.695996][T10824] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.781205][T10824] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 335.929831][ T42] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 335.982501][T10843] netlink: 'syz.8.1329': attribute type 1 has an invalid length. [ 336.039418][ T42] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 336.063632][T10824] EXT4-fs (loop6): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.347873][ T42] usb 5-1: 2:1 : bogus bTerminalLink 6 [ 336.378850][ T6837] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.851129][T10866] loop8: detected capacity change from 0 to 128 [ 337.343855][T10866] syz.8.1334: attempt to access beyond end of device [ 337.343855][T10866] loop8: rw=2049, sector=145, nr_sectors = 5 limit=128 [ 337.484436][T10866] syz.8.1334: attempt to access beyond end of device [ 337.484436][T10866] loop8: rw=34817, sector=102, nr_sectors = 27 limit=128 [ 337.538807][T10866] syz.8.1334: attempt to access beyond end of device [ 337.538807][T10866] loop8: rw=34817, sector=145, nr_sectors = 5 limit=128 [ 338.011115][ T42] usb 5-1: USB disconnect, device number 15 [ 339.399066][T10907] loop0: detected capacity change from 0 to 32768 [ 339.477604][T10907] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1340 (10907) [ 339.543286][T10907] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.568707][T10907] BTRFS info (device loop0): using sha256 checksum algorithm [ 339.725902][T10907] BTRFS info (device loop0): enabling ssd optimizations [ 339.775966][T10907] BTRFS info (device loop0): turning on async discard [ 339.839599][T10907] BTRFS info (device loop0): enabling free space tree [ 339.932201][T10942] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 340.251916][ T5851] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 341.013535][T10939] loop3: detected capacity change from 0 to 131072 [ 341.043638][T10939] F2FS-fs (loop3): invalid crc value [ 341.250981][T10939] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 341.271033][T10939] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 341.689494][T10939] F2FS-fs (loop3): invalid namelen(0), ino:8, run fsck to fix. [ 342.058694][T10970] loop8: detected capacity change from 0 to 256 [ 342.112324][T10970] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 342.233831][T10966] loop4: detected capacity change from 0 to 32768 [ 342.289518][T10966] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 342.353666][T10966] XFS (loop4): Ending clean mount [ 344.177614][ T5845] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 344.961897][T10993] loop6: detected capacity change from 0 to 512 [ 345.055948][T10993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.080766][T10993] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.135674][T10993] EXT4-fs error (device loop6): ext4_do_update_inode:5572: inode #2: comm syz.6.1362: corrupted inode contents [ 345.161768][T10993] EXT4-fs error (device loop6): ext4_dirty_inode:6453: inode #2: comm syz.6.1362: mark_inode_dirty error [ 345.176807][T10993] EXT4-fs error (device loop6): ext4_do_update_inode:5572: inode #2: comm syz.6.1362: corrupted inode contents [ 345.202911][T10993] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1362: mark_inode_dirty error [ 345.322044][T10993] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.1362: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 345.322044][T10993] [ 345.436956][T11005] netlink: 'syz.4.1364': attribute type 13 has an invalid length. [ 345.445143][T10993] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 345.516495][ T6041] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 345.572625][ T6837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.686442][ T6041] usb 9-1: Using ep0 maxpacket: 8 [ 345.711231][ T6041] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 345.743737][ T6041] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.789879][ T6041] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.825531][ T6041] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 345.860461][ T6041] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 345.885056][ T6041] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 345.904388][ T6041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.918393][ T6041] usb 9-1: config 0 descriptor?? [ 345.983652][ T5161] Bluetooth: hci5: urb ffff888030dfe700 submission failed (90) [ 346.046526][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 346.168228][ T5909] usb 9-1: USB disconnect, device number 3 [ 346.235124][ T10] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 346.250347][T11007] loop0: detected capacity change from 0 to 32768 [ 346.264371][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.290533][T11007] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1366 (11007) [ 346.327181][ T10] usb 4-1: Product: syz [ 346.349542][ T10] usb 4-1: Manufacturer: syz [ 346.359155][ T10] usb 4-1: SerialNumber: syz [ 346.383617][ T10] usb 4-1: config 0 descriptor?? [ 346.392825][T11007] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.419215][ T10] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 012 [ 346.435278][T11007] BTRFS info (device loop0): using crc32c checksum algorithm [ 346.556471][T11007] BTRFS info (device loop0): enabling ssd optimizations [ 346.602507][T11007] BTRFS info (device loop0): turning on flush-on-commit [ 346.643042][T11007] BTRFS info (device loop0): enabling free space tree [ 346.698262][T11007] BTRFS info (device loop0): enabling auto defrag [ 346.732184][T11007] BTRFS info (device loop0): use lzo compression, level 1 [ 346.769164][T11007] BTRFS info (device loop0): max_inline set to 4096 [ 347.057207][ T10] i2c i2c-2: failure reading functionality [ 347.090689][ T10] i2c i2c-2: connected i2c-tiny-usb device [ 347.122188][ T10] usb 4-1: USB disconnect, device number 12 [ 347.570656][ T5851] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 347.775771][T11041] loop6: detected capacity change from 0 to 32768 [ 347.830272][T11051] loop3: detected capacity change from 0 to 128 [ 347.965922][T11051] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.979240][T11041] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 348.048630][T11051] ext4 filesystem being mounted at /285/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.169909][T11041] XFS (loop6): Ending clean mount [ 348.327414][T11051] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 348.377773][T11064] loop8: detected capacity change from 0 to 64 [ 348.682470][T11051] fscrypt (loop3): Error allocating 'essiv(cbc(aes),sha256)' transform: -4 [ 348.830771][ T5849] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.944142][ T6837] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 349.009281][T11064] nullb0: [POWERTEC] p1 p2 p3 [ 349.014345][T11064] nullb0: p1 start 1768304430 is beyond EOD, truncated [ 349.026006][T11064] nullb0: p2 start 1006851136 is beyond EOD, truncated [ 349.032983][T11064] nullb0: p3 start 1997718846 is beyond EOD, truncated [ 349.858445][T11100] loop6: detected capacity change from 0 to 1024 [ 349.896882][T11104] 8021q: VLANs not supported on lo [ 349.944240][T11100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 349.969299][T11100] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.142143][T11100] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.1388: Freeing blocks not in datazone - block = 0, count = 16 [ 350.385286][ T49] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 350.440020][ T49] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8191 with max blocks 1 with error 28 [ 350.467735][ T49] EXT4-fs (loop6): This should not happen!! Data will be lost [ 350.467735][ T49] [ 350.486943][ T49] EXT4-fs (loop6): Total free blocks count 0 [ 350.511267][ T49] EXT4-fs (loop6): Free/Dirty block details [ 350.534235][ T49] EXT4-fs (loop6): free_blocks=0 [ 350.540639][ T49] EXT4-fs (loop6): dirty_blocks=16 [ 350.547695][ T49] EXT4-fs (loop6): Block reservation details [ 350.557641][ T49] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 350.590651][ T6837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 351.196247][T11102] loop0: detected capacity change from 0 to 32768 [ 351.229614][T11120] netlink: 'syz.6.1398': attribute type 10 has an invalid length. [ 351.248886][T11120] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.260314][T11120] bond0: (slave team0): Enslaving as an active interface with an up link [ 351.285366][T11102] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 351.509775][T11102] XFS (loop0): Ending clean mount [ 351.575366][T11102] XFS (loop0): Quotacheck needed: Please wait. [ 351.764537][T11142] loop6: detected capacity change from 0 to 512 [ 351.821912][T11142] EXT4-fs: Ignoring removed nobh option [ 351.851513][T11142] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 351.955082][T11142] EXT4-fs (loop6): 1 truncate cleaned up [ 351.990940][T11142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.086530][T11150] loop8: detected capacity change from 0 to 256 [ 352.127110][T11102] XFS (loop0): Quotacheck: Done. [ 352.311784][ T6837] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.613654][T11153] binfmt_misc: register: failed to install interpreter file ./file1 [ 353.028480][T11173] loop8: detected capacity change from 0 to 128 [ 353.140209][ T5851] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 353.213339][T11173] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 353.284048][T11173] hpfs: filesystem error: improperly stopped [ 353.295381][T11173] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 353.332498][T11173] hpfs: You really don't want any checks? You are crazy... [ 353.378367][T11173] hpfs: Code page index out of array [ 353.431055][T11173] hpfs: code page support is disabled [ 353.488728][T11173] hpfs: hpfs_map_4sectors(): unaligned read [ 353.547523][T11173] hpfs: hpfs_map_4sectors(): unaligned read [ 353.576339][T11173] hpfs: filesystem error: unable to find root dir [ 353.934274][T11181] loop8: detected capacity change from 0 to 512 [ 353.961915][T11181] EXT4-fs: Ignoring removed nobh option [ 353.992043][T11181] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 354.032994][T11183] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1421'. [ 354.094654][T11181] EXT4-fs (loop8): 1 truncate cleaned up [ 354.163553][T11181] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.179495][T11185] loop4: detected capacity change from 0 to 1024 [ 354.461014][T11185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.474458][T10306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.869657][ T29] audit: type=1804 audit(1774359327.151:35): pid=11185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1420" name="/newroot/281/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 355.008105][T11177] loop6: detected capacity change from 0 to 32768 [ 355.121050][T11177] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 355.201444][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.253390][T11208] ipvlan2: entered promiscuous mode [ 355.295544][T11208] ipvlan2: entered allmulticast mode [ 355.339680][T11208] gretap0: entered allmulticast mode [ 355.372332][T11208] team0: Device ipvlan2 failed to register rx_handler [ 355.440871][T11177] XFS (loop6): Starting recovery (logdev: internal) [ 355.565306][T11177] XFS (loop6): Ending recovery (logdev: internal) [ 355.888651][ T6837] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 356.262684][T11228] xt_hashlimit: max too large, truncated to 1048576 [ 356.289686][T11228] xt_hashlimit: Unknown mode mask 20000, kernel too old? [ 356.549334][T11231] netlink: 'syz.4.1431': attribute type 1 has an invalid length. [ 356.871049][T11235] gretap1: entered allmulticast mode [ 356.956144][T11235] bond1: (slave gretap1): making interface the new active one [ 356.989626][T11235] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 357.595798][ T8566] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 357.778188][ T8566] usb 4-1: Using ep0 maxpacket: 32 [ 357.792232][ T8566] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 357.822634][ T8566] usb 4-1: config 0 has no interface number 0 [ 357.849554][ T8566] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.916271][ T8566] usb 4-1: config 0 interface 85 has no altsetting 0 [ 357.942907][ T8566] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 357.971756][ T8566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.004781][ T8566] usb 4-1: Product: syz [ 358.013004][ T8566] usb 4-1: Manufacturer: syz [ 358.025023][ T8566] usb 4-1: SerialNumber: syz [ 358.043108][ T8566] usb 4-1: config 0 descriptor?? [ 358.166860][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 358.225399][ T5931] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 358.337098][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.355483][ T10] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 358.375280][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.392348][ T5931] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 358.407018][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.417988][ T10] usb 9-1: config 0 descriptor?? [ 358.443019][ T5931] usb 7-1: Product: syz [ 358.456266][ T5931] usb 7-1: Manufacturer: syz [ 358.461066][ T5931] usb 7-1: SerialNumber: syz [ 358.483355][ T5931] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 358.502925][ T8574] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 358.647430][T11254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.657371][T11254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.675527][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 358.683339][ T8566] appletouch 4-1:0.85: Geyser mode initialized. [ 358.697346][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 358.712148][ T8566] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input16 [ 358.761145][ T10] usb 9-1: USB disconnect, device number 4 [ 358.945870][ T8566] usb 4-1: USB disconnect, device number 13 [ 358.974311][T11256] random: crng reseeded on system resumption [ 359.045144][ T5931] usb 7-1: USB disconnect, device number 9 [ 359.090182][ T8566] appletouch 4-1:0.85: input: appletouch disconnected [ 359.235222][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 359.395031][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 359.404207][ T10] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.422885][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 359.431472][ T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 359.442961][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.496692][ T10] usb 9-1: config 0 descriptor?? [ 359.570276][ T8574] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 359.615233][ T8574] ath9k_htc: Failed to initialize the device [ 359.642894][ T5931] usb 7-1: ath9k_htc: USB layer deinitialized [ 359.963371][ T10] mcp2221 0003:04D8:00DD.0011: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 360.398304][ T10] usb 9-1: USB disconnect, device number 5 [ 360.576867][T11274] loop0: detected capacity change from 0 to 40427 [ 360.821094][T11274] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 361.195349][ T5931] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 361.259214][T11274] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 361.354169][T11274] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 361.391612][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 361.469821][ T5931] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.581168][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.671579][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.746676][ T5931] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.781195][ T5931] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 361.854209][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.932092][ T5851] syz-executor: attempt to access beyond end of device [ 361.932092][ T5851] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 362.002099][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 362.002135][ T5851] Tainted: [L]=SOFTLOCKUP [ 362.002143][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 362.002156][ T5851] Call Trace: [ 362.002164][ T5851] [ 362.002173][ T5851] dump_stack_lvl+0xe8/0x150 [ 362.002310][ T5851] f2fs_handle_critical_error+0x37c/0x540 [ 362.002445][ T5851] f2fs_write_end_io+0x1274/0x1740 [ 362.002511][ T5851] __submit_merged_bio+0x256/0x6a0 [ 362.002574][ T5851] __submit_merged_write_cond+0x3c9/0x4e0 [ 362.002634][ T5851] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 362.002687][ T5851] f2fs_write_data_pages+0x287e/0x34f0 [ 362.002750][ T5851] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 362.002788][ T5851] ? __pfx_css_rstat_updated+0x10/0x10 [ 362.002844][ T5851] ? is_bpf_text_address+0x26/0x2b0 [ 362.002921][ T5851] ? mod_memcg_lruvec_state+0x208/0x220 [ 362.002979][ T5851] ? lru_gen_update_size+0x7c7/0xd10 [ 362.003033][ T5851] ? __lock_acquire+0x6b5/0x2cf0 [ 362.003116][ T5851] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 362.003140][ T5851] do_writepages+0x32e/0x550 [ 362.003179][ T5851] ? do_raw_spin_unlock+0xf5/0x210 [ 362.003212][ T5851] filemap_fdatawrite+0x1e9/0x2f0 [ 362.003243][ T5851] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 362.003322][ T5851] ? do_raw_spin_unlock+0xf5/0x210 [ 362.003355][ T5851] f2fs_sync_dirty_inodes+0x30e/0x830 [ 362.003396][ T5851] f2fs_write_checkpoint+0x9df/0x26a0 [ 362.003420][ T5851] ? __lock_acquire+0x6b5/0x2cf0 [ 362.003488][ T5851] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 362.003572][ T5851] kill_f2fs_super+0x314/0x720 [ 362.003603][ T5851] ? __pfx_kill_f2fs_super+0x10/0x10 [ 362.003638][ T5851] ? lockdep_hardirqs_on+0x7a/0x110 [ 362.003792][ T5851] deactivate_locked_super+0xbc/0x130 [ 362.003836][ T5851] cleanup_mnt+0x437/0x4d0 [ 362.003864][ T5851] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.003942][ T5851] task_work_run+0x1d9/0x270 [ 362.003981][ T5851] ? __pfx_task_work_run+0x10/0x10 [ 362.004038][ T5851] exit_to_user_mode_loop+0xed/0x480 [ 362.004082][ T5851] ? rcu_is_watching+0x15/0xb0 [ 362.004110][ T5851] do_syscall_64+0x32d/0xf80 [ 362.004141][ T5851] ? trace_irq_disable+0x3b/0x140 [ 362.004168][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.004207][ T5851] ? clear_bhb_loop+0x40/0x90 [ 362.004235][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.004257][ T5851] RIP: 0033:0x7f020999d9d7 [ 362.004278][ T5851] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 362.004298][ T5851] RSP: 002b:00007ffd3c89e7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 362.004322][ T5851] RAX: 0000000000000000 RBX: 00007f0209a32050 RCX: 00007f020999d9d7 [ 362.004336][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3c89e860 [ 362.004350][ T5851] RBP: 00007ffd3c89e860 R08: 00007ffd3c89f860 R09: 00000000ffffffff [ 362.004364][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3c89f8f0 [ 362.004378][ T5851] R13: 00007f0209a32050 R14: 0000000000058559 R15: 00007ffd3c89f930 [ 362.004414][ T5851] [ 362.066212][ T5851] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 362.350181][ T5931] usb 5-1: GET_CAPABILITIES returned 0 [ 362.355910][ T5931] usbtmc 5-1:16.0: can't read capabilities [ 362.581252][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.590795][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.599926][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.619549][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.628806][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.637923][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.647595][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.656814][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.665936][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.685477][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.694662][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.703794][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.716938][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.726097][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.735328][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.744537][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 362.760432][ T5931] usb 5-1: USB disconnect, device number 16 [ 363.045175][ T8574] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 363.117756][ T5909] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 363.226000][ T8574] usb 9-1: unable to get BOS descriptor or descriptor too short [ 363.251042][ T8574] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 363.265870][ T8574] usb 9-1: can't read configurations, error -71 [ 363.287569][ T5909] usb 7-1: Using ep0 maxpacket: 32 [ 363.299345][ T5909] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 363.313415][ T5909] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 363.323337][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 363.334215][ T5909] usb 7-1: Product: syz [ 363.339093][ T5909] usb 7-1: Manufacturer: syz [ 363.343960][ T5909] usb 7-1: SerialNumber: syz [ 363.360673][ T5909] usb 7-1: config 0 descriptor?? [ 363.379599][T11338] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 364.859482][T11382] loop8: detected capacity change from 0 to 512 [ 364.892762][T11382] EXT4-fs: Ignoring removed oldalloc option [ 364.983451][T11382] EXT4-fs (loop8): 1 truncate cleaned up [ 365.010315][T11382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.102262][ T29] audit: type=1800 audit(1774359337.391:36): pid=11382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1474" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 365.187798][T11394] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.1474: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 365.275518][T11394] EXT4-fs (loop8): Remounting filesystem read-only [ 365.742516][T10306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.029887][ T10] usb 7-1: USB disconnect, device number 10 [ 366.538198][T11426] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.545978][T11426] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.882585][T11436] loop3: detected capacity change from 0 to 4096 [ 366.893629][T11436] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 366.904381][T11436] ntfs3(loop3): ino=3, mi_enum_attr [ 366.961128][T11436] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 366.969037][T11436] ntfs3(loop3): ino=1a, mi_enum_attr [ 366.974577][T11436] ntfs3(loop3): ino=1a, mi_enum_attr [ 366.980027][T11436] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 367.021353][T11426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.029507][ T29] audit: type=1800 audit(1774359339.321:37): pid=11436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1488" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 367.078979][T11438] loop6: detected capacity change from 0 to 2640 [ 367.100327][T11426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.142126][T11438] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.253187][T11438] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.322304][T11438] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.421048][T11438] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.490406][T11438] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.571991][T11438] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.591296][T11438] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.645747][T11438] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.687661][T11438] ldm_validate_partition_table(): Disk read failed. [ 367.742465][T11438] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.782702][T11438] Buffer I/O error on dev loop6, logical block 0, async page read [ 367.843015][T11438] Dev loop6: unable to read RDB block 0 [ 367.849738][T11438] loop6: unable to read partition table [ 367.857410][T11438] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 368.033197][T11442] netlink: 'syz.4.1492': attribute type 1 has an invalid length. [ 368.264247][ T112] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.302865][ T112] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.476012][T11456] netlink: 'syz.0.1494': attribute type 10 has an invalid length. [ 368.575135][T11448] bond2: (slave bridge1): making interface the new active one [ 368.601958][T11448] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 368.627365][ T112] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.667996][ T112] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.855214][ T5909] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 369.025236][ T5909] usb 7-1: Using ep0 maxpacket: 32 [ 369.039257][ T5909] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 369.069115][ T5909] usb 7-1: config 0 has no interface number 0 [ 369.092150][ T5909] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 369.116089][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.132552][ T5909] usb 7-1: Product: syz [ 369.141447][ T5909] usb 7-1: Manufacturer: syz [ 369.151462][ T5909] usb 7-1: SerialNumber: syz [ 369.175560][ T5909] usb 7-1: config 0 descriptor?? [ 369.285005][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 369.498748][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 369.529161][ T10] usb 1-1: config 1 has no interface number 0 [ 369.542111][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 369.555179][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 369.569658][ T10] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 369.580168][T11480] loop3: detected capacity change from 0 to 128 [ 369.613128][ T5909] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 369.630628][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 369.641947][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 369.661619][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 369.675312][ T5909] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 369.685446][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.693983][ T10] usb 1-1: Product: syz [ 369.698848][ T10] usb 1-1: Manufacturer: syz [ 369.703510][ T10] usb 1-1: SerialNumber: syz [ 369.707167][T11480] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.737295][T11480] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.748402][T11476] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 369.932001][T11484] xt_hashlimit: max too large, truncated to 1048576 [ 369.940013][ T5849] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.955255][T11484] xt_hashlimit: Unknown mode mask 20000, kernel too old? [ 369.978831][T11476] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 370.195966][T11476] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 370.622967][T11476] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 370.631880][ T5909] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 370.643572][ T5909] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 370.653342][T11489] loop8: detected capacity change from 0 to 32768 [ 370.675209][ T5909] usb 7-1: USB disconnect, device number 11 [ 370.703049][T11489] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 370.711331][T11489] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 370.767800][T11489] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 370.773838][ T10] cdc_ncm 1-1:1.1: bind() failure [ 370.790818][ T6041] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 370.808079][ T6041] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 370.938564][ T10] usb 1-1: USB disconnect, device number 9 [ 371.111323][ T6041] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 303ms [ 371.141011][ T6041] gfs2: fsid=syz:syz.0: jid=0: Done [ 371.167359][T11489] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 371.421597][T11489] gfs2: fsid=syz:syz.0: found 1 quota changes [ 372.890278][T11508] loop3: detected capacity change from 0 to 32768 [ 372.975313][T11508] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 373.296283][T11508] XFS (loop3): Starting recovery (logdev: internal) [ 373.447059][T11508] XFS (loop3): Ending recovery (logdev: internal) [ 373.555640][T11546] loop0: detected capacity change from 0 to 1024 [ 373.564978][ T8574] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 373.595601][T11546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 373.611041][T11546] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.743441][ T5849] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 373.751171][ T8574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.763840][T11551] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.1526: Freeing blocks not in datazone - block = 0, count = 16 [ 373.786958][T11550] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 373.816045][ T8574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.857899][ T8574] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 373.876207][ T8574] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 373.884672][ T8574] usb 7-1: Manufacturer: syz [ 373.898483][ T8574] usb 7-1: config 0 descriptor?? [ 373.963614][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 374.951969][ T8574] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0012/input/input17 [ 375.181324][ T8574] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0012/input/input18 [ 375.238632][ T8574] uclogic 0003:256C:006D.0012: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.6-1/input0 [ 375.280320][ T8574] usb 7-1: USB disconnect, device number 12 [ 375.567152][T11566] fido_id[11566]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 376.119876][T11572] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.127665][T11572] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.411397][T11572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.459936][T11572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.987304][ T6884] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.019828][ T6884] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.048151][ T6884] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.084455][ T6884] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.192942][T11589] loop6: detected capacity change from 0 to 256 [ 377.218118][T11589] exfat: Deprecated parameter 'namecase' [ 377.247563][T11589] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 377.945326][ T5909] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 378.125079][ T5909] usb 7-1: Using ep0 maxpacket: 16 [ 378.147056][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.191130][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.228486][ T5909] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 378.269187][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.336250][ T5909] usb 7-1: config 0 descriptor?? [ 378.382175][T11608] sctp: [Deprecated]: syz.8.1548 (pid 11608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.382175][T11608] Use struct sctp_sack_info instead [ 378.625567][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.641219][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.782036][T11600] loop4: detected capacity change from 0 to 131072 [ 378.809402][ T5909] ntrig 0003:1B96:0008.0013: item fetching failed at offset 5/7 [ 378.822375][T11600] F2FS-fs (loop4): invalid crc value [ 378.856515][ T5909] ntrig 0003:1B96:0008.0013: parse failed [ 378.881154][ T5909] ntrig 0003:1B96:0008.0013: probe with driver ntrig failed with error -22 [ 378.968572][T11600] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 378.979365][T11600] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 379.021366][ T8574] usb 7-1: USB disconnect, device number 13 [ 379.177708][T11618] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1551'. [ 379.340823][T11622] netlink: 212344 bytes leftover after parsing attributes in process `syz.8.1552'. [ 380.749605][T11638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.897193][T11638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.721615][T11647] loop3: detected capacity change from 0 to 131072 [ 381.732397][T11647] F2FS-fs (loop3): Test dummy encryption mode enabled [ 381.744086][T11647] F2FS-fs (loop3): invalid crc value [ 381.860954][T11647] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 381.880434][T11647] F2FS-fs (loop3): Start checkpoint disabled! [ 381.898204][T11647] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 381.907828][T11647] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 381.951639][ T29] audit: type=1800 audit(1774359354.231:38): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1559" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 382.013472][T11656] loop6: detected capacity change from 0 to 4096 [ 382.142219][T11656] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 382.188153][T11656] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 382.279033][ T29] audit: type=1800 audit(1774359354.571:39): pid=11660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1559" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 382.929170][T11656] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 382.943191][T11667] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 382.956818][T11648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.994748][T11648] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.049180][T11648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.122388][ T1160] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.160373][ T1160] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.224918][ T1160] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.237787][ T1115] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 383.248224][ T1160] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.261690][ T6837] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 383.280539][ T6837] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 383.300526][ T1160] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.326333][ T1160] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.345075][ T6837] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 383.356829][ T1160] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.380431][ T1168] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 383.388623][ T1160] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.806647][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1582'. [ 384.176660][T11666] loop0: detected capacity change from 0 to 32768 [ 384.264217][T11666] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 384.293248][T11666] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 384.359023][T11666] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 384.376065][ T5909] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 384.384617][ T5909] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 384.444196][T11674] loop6: detected capacity change from 0 to 40427 [ 384.477605][T11674] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 384.508943][T11674] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 384.540169][T11674] F2FS-fs (loop6): invalid crc value [ 384.553569][ T5909] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 168ms [ 384.584155][ T5909] gfs2: fsid=syz:syz.0: jid=0: Done [ 384.594005][T11666] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 384.842132][T11674] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 384.879670][T11674] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 384.909613][T11674] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 384.968793][T11666] gfs2: fsid=syz:syz.0: found 1 quota changes [ 385.046635][T11681] loop8: detected capacity change from 0 to 32768 [ 385.143105][T11681] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 385.179609][ T5851] syz-executor: attempt to access beyond end of device [ 385.179609][ T5851] loop0: rw=2049, sector=68719479088, nr_sectors = 128 limit=32768 [ 385.213236][ T5909] loop0: writeback error on inode 8589934885, offset 0, sector 68719479088 [ 385.217128][ T5851] syz-executor: attempt to access beyond end of device [ 385.217128][ T5851] loop0: rw=2049, sector=68719479344, nr_sectors = 128 limit=32768 [ 385.248450][ T5909] loop0: writeback error on inode 8589934917, offset 0, sector 68719479344 [ 385.258384][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 385.292514][T11681] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 385.305201][ T5851] syz-executor: attempt to access beyond end of device [ 385.305201][ T5851] loop0: rw=12289, sector=68719479080, nr_sectors = 8 limit=32768 [ 385.320030][ T5851] buffer_io_error: 11 callbacks suppressed [ 385.320047][ T5851] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 385.336233][ T5851] syz-executor: attempt to access beyond end of device [ 385.336233][ T5851] loop0: rw=12289, sector=68719479336, nr_sectors = 8 limit=32768 [ 385.351224][ T5851] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 385.360664][ T5851] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 385.374505][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 385.374537][ T5851] Tainted: [L]=SOFTLOCKUP [ 385.374544][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.374562][ T5851] Call Trace: [ 385.374574][ T5851] [ 385.374585][ T5851] dump_stack_lvl+0xe8/0x150 [ 385.374624][ T5851] gfs2_withdraw+0xc3/0x1b0 [ 385.374729][ T5851] gfs2_ail1_flush+0x990/0xfd0 [ 385.374790][ T5851] ? finish_task_switch+0x41f/0xbe0 [ 385.374842][ T5851] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 385.374885][ T5851] empty_ail1_list+0x1b3/0x330 [ 385.374921][ T5851] ? __pfx_empty_ail1_list+0x10/0x10 [ 385.374998][ T5851] ? do_raw_spin_unlock+0xf5/0x210 [ 385.375032][ T5851] gfs2_log_flush+0x1d2e/0x2640 [ 385.375076][ T5851] ? __pfx_gfs2_log_flush+0x10/0x10 [ 385.375108][ T5851] ? call_rcu+0x644/0x890 [ 385.375129][ T5851] ? lockdep_hardirqs_on+0x7a/0x110 [ 385.375164][ T5851] gfs2_kill_sb+0x5c/0x430 [ 385.375235][ T5851] deactivate_locked_super+0xbc/0x130 [ 385.375269][ T5851] cleanup_mnt+0x437/0x4d0 [ 385.375289][ T5851] ? _raw_spin_unlock_irq+0x23/0x50 [ 385.375321][ T5851] task_work_run+0x1d9/0x270 [ 385.375351][ T5851] ? __pfx_task_work_run+0x10/0x10 [ 385.375401][ T5851] exit_to_user_mode_loop+0xed/0x480 [ 385.375430][ T5851] ? rcu_is_watching+0x15/0xb0 [ 385.375455][ T5851] do_syscall_64+0x32d/0xf80 [ 385.375484][ T5851] ? trace_irq_disable+0x3b/0x140 [ 385.375509][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.375530][ T5851] ? clear_bhb_loop+0x40/0x90 [ 385.375556][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.375576][ T5851] RIP: 0033:0x7f020999d9d7 [ 385.375597][ T5851] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 385.375614][ T5851] RSP: 002b:00007ffd3c89e7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 385.375636][ T5851] RAX: 0000000000000000 RBX: 00007f0209a32050 RCX: 00007f020999d9d7 [ 385.375650][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3c89e860 [ 385.375662][ T5851] RBP: 00007ffd3c89e860 R08: 00007ffd3c89f860 R09: 00000000ffffffff [ 385.375676][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3c89f8f0 [ 385.375690][ T5851] R13: 00007f0209a32050 R14: 000000000005e041 R15: 00007ffd3c89f930 [ 385.375723][ T5851] [ 385.608642][ T5851] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 385.621966][ T5851] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 385.629982][T11681] XFS (loop8): Starting recovery (logdev: internal) [ 385.637701][ T5851] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 385.686971][ T5851] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 385.712773][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 385.729453][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 385.740769][T11681] XFS (loop8): Ending recovery (logdev: internal) [ 385.748967][ T10] usb 4-1: config 0 has no interface number 0 [ 385.760809][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 385.775470][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 385.785830][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.794002][ T10] usb 4-1: Product: syz [ 385.816588][ T10] usb 4-1: Manufacturer: syz [ 385.821591][ T10] usb 4-1: SerialNumber: syz [ 385.853380][ T10] usb 4-1: config 0 descriptor?? [ 385.893048][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 385.903121][ T29] audit: type=1800 audit(1774359358.191:40): pid=11706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1573" name="file1" dev="loop8" ino=4422 res=0 errno=0 [ 385.938564][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 386.122081][T10306] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 386.271317][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 386.838479][T11708] loop4: detected capacity change from 0 to 40427 [ 386.891927][T11708] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 386.901002][ T10] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 386.911639][ T10] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 386.948721][T11720] loop8: detected capacity change from 0 to 512 [ 386.974980][T11720] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 387.025443][T11720] EXT4-fs (loop8): 1 truncate cleaned up [ 387.063425][T11720] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.112840][T11708] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 387.123941][ T29] audit: type=1800 audit(1774359359.401:41): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1581" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 387.150566][T11708] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 387.155321][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 387.166481][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 387.175579][ T8574] em28xx 4-1:0.132: Registering V4L2 extension [ 387.205546][ T10] usb 4-1: USB disconnect, device number 14 [ 387.229607][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 387.351080][T11708] syz.4.1579: attempt to access beyond end of device [ 387.351080][T11708] loop4: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 387.367012][T10306] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.423575][T11708] syz.4.1579: attempt to access beyond end of device [ 387.423575][T11708] loop4: rw=34817, sector=53344, nr_sectors = 40 limit=40427 [ 387.537223][ T5845] syz-executor: attempt to access beyond end of device [ 387.537223][ T5845] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 387.562606][ T8574] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 387.574126][ T8574] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 387.591674][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 387.591712][ T5845] Tainted: [L]=SOFTLOCKUP [ 387.591719][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.591732][ T5845] Call Trace: [ 387.591740][ T5845] [ 387.591750][ T5845] dump_stack_lvl+0xe8/0x150 [ 387.591788][ T5845] f2fs_handle_critical_error+0x37c/0x540 [ 387.591827][ T5845] f2fs_write_end_io+0x1274/0x1740 [ 387.591870][ T5845] __submit_merged_bio+0x256/0x6a0 [ 387.591907][ T5845] __submit_merged_write_cond+0x3c9/0x4e0 [ 387.591946][ T5845] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 387.591999][ T5845] f2fs_write_data_pages+0x287e/0x34f0 [ 387.592019][ T5845] ? __lock_acquire+0x6b5/0x2cf0 [ 387.592084][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 387.592119][ T5845] ? __pfx_css_rstat_updated+0x10/0x10 [ 387.592186][ T5845] ? mod_memcg_lruvec_state+0x208/0x220 [ 387.592217][ T5845] ? lru_gen_update_size+0x7c7/0xd10 [ 387.592252][ T5845] ? __lock_acquire+0x6b5/0x2cf0 [ 387.592309][ T5845] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 387.592330][ T5845] do_writepages+0x32e/0x550 [ 387.592367][ T5845] ? do_raw_spin_unlock+0xf5/0x210 [ 387.592398][ T5845] filemap_fdatawrite+0x1e9/0x2f0 [ 387.592427][ T5845] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 387.592498][ T5845] ? do_raw_spin_unlock+0xf5/0x210 [ 387.592546][ T5845] f2fs_sync_dirty_inodes+0x30e/0x830 [ 387.592589][ T5845] f2fs_write_checkpoint+0x9df/0x26a0 [ 387.592611][ T5845] ? __lock_acquire+0x6b5/0x2cf0 [ 387.592675][ T5845] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 387.592755][ T5845] kill_f2fs_super+0x314/0x720 [ 387.592786][ T5845] ? __pfx_kill_f2fs_super+0x10/0x10 [ 387.592822][ T5845] ? lockdep_hardirqs_on+0x7a/0x110 [ 387.592868][ T5845] deactivate_locked_super+0xbc/0x130 [ 387.592903][ T5845] cleanup_mnt+0x437/0x4d0 [ 387.592923][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.592956][ T5845] task_work_run+0x1d9/0x270 [ 387.592987][ T5845] ? __pfx_task_work_run+0x10/0x10 [ 387.593027][ T5845] exit_to_user_mode_loop+0xed/0x480 [ 387.593056][ T5845] ? rcu_is_watching+0x15/0xb0 [ 387.593083][ T5845] do_syscall_64+0x32d/0xf80 [ 387.593112][ T5845] ? trace_irq_disable+0x3b/0x140 [ 387.593138][ T5845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.593166][ T5845] ? clear_bhb_loop+0x40/0x90 [ 387.593193][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.593213][ T5845] RIP: 0033:0x7f225ed9d9d7 [ 387.593234][ T5845] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 387.593252][ T5845] RSP: 002b:00007ffcf8e84a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 387.593275][ T5845] RAX: 0000000000000000 RBX: 00007f225ee32050 RCX: 00007f225ed9d9d7 [ 387.593290][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf8e84b00 [ 387.593303][ T5845] RBP: 00007ffcf8e84b00 R08: 00007ffcf8e85b00 R09: 00000000ffffffff [ 387.593318][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8e85b90 [ 387.593331][ T5845] R13: 00007f225ee32050 R14: 000000000005e94b R15: 00007ffcf8e85bd0 [ 387.593365][ T5845] [ 387.593400][ T5845] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 388.038217][T11734] loop8: detected capacity change from 0 to 32768 [ 388.052396][ T8574] em28xx 4-1:0.132: No AC97 audio processor [ 388.177787][T11734] JBD2: Ignoring recovery information on journal [ 388.234624][T11734] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 388.245938][ T8574] usb 4-1: Decoder not found [ 388.253223][ T8574] em28xx 4-1:0.132: failed to create media graph [ 388.262693][ T8574] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 388.286869][ T8574] em28xx 4-1:0.132: Remote control support is not available for this card. [ 388.295935][ T10] em28xx 4-1:0.132: Closing input extension [ 388.543557][ T10] em28xx 4-1:0.132: Freeing device [ 388.716479][T10306] ocfs2: Unmounting device (7,8) on (node local) [ 388.904296][T11752] loop3: detected capacity change from 0 to 512 [ 388.941238][T11752] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1593: inode has both inline data and extents flags [ 388.984884][T11752] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 388.985310][T11752] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1593: couldn't read orphan inode 15 (err -117) [ 389.006463][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 389.006486][ C0] EXT4-fs (loop3): initial error at time 1774359361: ext4_orphan_get:1391: inode 15 [ 389.006520][ C0] EXT4-fs (loop3): last error at time 1774359361: ext4_orphan_get:1391: inode 15 [ 389.097052][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 389.136467][T11752] loop3: lost filesystem error report for type 5 error -117 [ 389.146250][T11752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.231338][T11758] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.1586'. [ 389.275283][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 389.283295][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.288497][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.292766][ T10] usb 7-1: config 0 has no interface number 0 [ 389.306940][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.319852][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 389.333425][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.348111][ T10] usb 7-1: config 0 descriptor?? [ 389.391595][ T10] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 389.621295][T11768] loop2: detected capacity change from 0 to 7 [ 389.637558][T11768] loop2: [ 389.641124][T11768] loop2: partition table partially beyond EOD, truncated [ 389.850250][T11780] netlink: 'syz.3.1601': attribute type 10 has an invalid length. [ 390.468155][T11792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.695465][ T5909] usb 7-1: USB disconnect, device number 14 [ 390.765234][ T5851] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 390.792296][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 390.792331][ T5851] Tainted: [L]=SOFTLOCKUP [ 390.792351][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.792365][ T5851] Call Trace: [ 390.792374][ T5851] [ 390.792383][ T5851] dump_stack_lvl+0xe8/0x150 [ 390.792422][ T5851] gfs2_assert_warn_i+0x194/0x2c0 [ 390.792461][ T5851] gfs2_make_fs_ro+0x30d/0x320 [ 390.792497][ T5851] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 390.792526][ T5851] ? do_raw_spin_lock+0x12b/0x2f0 [ 390.792554][ T5851] ? __pfx_autoremove_wake_function+0x10/0x10 [ 390.792618][ T5851] ? do_raw_spin_unlock+0xf5/0x210 [ 390.792649][ T5851] gfs2_put_super+0x220/0x890 [ 390.792687][ T5851] ? __pfx_gfs2_put_super+0x10/0x10 [ 390.792718][ T5851] generic_shutdown_super+0x13d/0x2d0 [ 390.792754][ T5851] kill_block_super+0x44/0x90 [ 390.792778][ T5851] deactivate_locked_super+0xbc/0x130 [ 390.792814][ T5851] cleanup_mnt+0x437/0x4d0 [ 390.792834][ T5851] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.792869][ T5851] task_work_run+0x1d9/0x270 [ 390.792901][ T5851] ? __pfx_task_work_run+0x10/0x10 [ 390.792941][ T5851] exit_to_user_mode_loop+0xed/0x480 [ 390.792972][ T5851] ? rcu_is_watching+0x15/0xb0 [ 390.792999][ T5851] do_syscall_64+0x32d/0xf80 [ 390.793030][ T5851] ? trace_irq_disable+0x3b/0x140 [ 390.793061][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.793083][ T5851] ? clear_bhb_loop+0x40/0x90 [ 390.793110][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.793132][ T5851] RIP: 0033:0x7f020999d9d7 [ 390.793152][ T5851] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 390.793170][ T5851] RSP: 002b:00007ffd3c89e7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 390.793192][ T5851] RAX: 0000000000000000 RBX: 00007f0209a32050 RCX: 00007f020999d9d7 [ 390.793207][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3c89e860 [ 390.793220][ T5851] RBP: 00007ffd3c89e860 R08: 00007ffd3c89f860 R09: 00000000ffffffff [ 390.793234][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3c89f8f0 [ 390.793247][ T5851] R13: 00007f0209a32050 R14: 000000000005e041 R15: 00007ffd3c89f930 [ 390.793281][ T5851] [ 390.833153][T11805] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1611'. [ 391.066679][ T5851] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 391.365836][ T5851] ============================================================================= [ 391.367427][ T5851] [ 391.367437][ T5851] ====================================================== [ 391.367447][ T5851] WARNING: possible circular locking dependency detected [ 391.367472][ T5851] syzkaller #0 Tainted: G L [ 391.367494][ T5851] ------------------------------------------------------ [ 391.367502][ T5851] syz-executor/5851 is trying to acquire lock: [ 391.367514][ T5851] ffffffff8e74fae0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x123/0xb20 [ 391.367572][ T5851] [ 391.367572][ T5851] but task is already holding lock: [ 391.367579][ T5851] ffff88803381a258 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10e/0x2a0 [ 391.367656][ T5851] [ 391.367656][ T5851] which lock already depends on the new lock. [ 391.367656][ T5851] [ 391.367664][ T5851] [ 391.367664][ T5851] the existing dependency chain (in reverse order) is: [ 391.367671][ T5851] [ 391.367671][ T5851] -> #3 (&n->list_lock){-.-.}-{3:3}: [ 391.367700][ T5851] _raw_spin_lock_irqsave+0x40/0x60 [ 391.367728][ T5851] __refill_objects_node+0x84/0x5c0 [ 391.367753][ T5851] refill_objects+0x62/0x3d0 [ 391.367775][ T5851] __pcs_replace_empty_main+0x321/0x720 [ 391.367802][ T5851] __kmalloc_noprof+0x474/0x760 [ 391.367819][ T5851] __tty_buffer_request_room+0x1c8/0x520 [ 391.367953][ T5851] __tty_insert_flip_string_flags+0xb8/0x430 [ 391.367981][ T5851] tty_insert_flip_string_and_push_buffer+0xa9/0x230 [ 391.368009][ T5851] pty_write+0xa7/0xe0 [ 391.368052][ T5851] n_tty_write+0x5e8/0x1220 [ 391.368082][ T5851] file_tty_write+0x558/0xa10 [ 391.368104][ T5851] vfs_write+0x61d/0xb90 [ 391.368122][ T5851] ksys_write+0x150/0x270 [ 391.368140][ T5851] do_syscall_64+0x14d/0xf80 [ 391.368168][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.368188][ T5851] [ 391.368188][ T5851] -> #2 (&port->lock#2){-.-.}-{3:3}: [ 391.368221][ T5851] _raw_spin_lock_irqsave+0x40/0x60 [ 391.368247][ T5851] tty_port_default_wakeup+0x21/0x130 [ 391.368273][ T5851] serial8250_tx_chars+0x72e/0x970 [ 391.368354][ T5851] serial8250_handle_irq+0x15f/0x570 [ 391.368378][ T5851] serial8250_default_handle_irq+0xbf/0x1f0 [ 391.368408][ T5851] serial8250_interrupt+0x8d/0x170 [ 391.368430][ T5851] __handle_irq_event_percpu+0x216/0x9a0 [ 391.368454][ T5851] handle_irq_event+0x8b/0x1e0 [ 391.368478][ T5851] handle_edge_irq+0x23b/0x9f0 [ 391.368508][ T5851] __common_interrupt+0x141/0x1f0 [ 391.368549][ T5851] common_interrupt+0xb6/0xe0 [ 391.368570][ T5851] asm_common_interrupt+0x26/0x40 [ 391.368588][ T5851] pv_native_safe_halt+0xf/0x20 [ 391.368613][ T5851] default_idle+0x9/0x20 [ 391.368630][ T5851] default_idle_call+0x72/0xb0 [ 391.368647][ T5851] do_idle+0x36a/0x5f0 [ 391.368664][ T5851] cpu_startup_entry+0x43/0x60 [ 391.368681][ T5851] rest_init+0x2de/0x300 [ 391.368700][ T5851] start_kernel+0x38a/0x3e0 [ 391.368820][ T5851] x86_64_start_reservations+0x24/0x30 [ 391.368868][ T5851] x86_64_start_kernel+0x143/0x1c0 [ 391.368891][ T5851] common_startup_64+0x13e/0x147 [ 391.368913][ T5851] [ 391.368913][ T5851] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 391.368943][ T5851] _raw_spin_lock_irqsave+0x40/0x60 [ 391.368968][ T5851] serial8250_console_write+0x150/0x1ba0 [ 391.368994][ T5851] console_flush_all+0x718/0xb20 [ 391.369015][ T5851] console_unlock+0xd1/0x1c0 [ 391.369035][ T5851] vprintk_emit+0x485/0x560 [ 391.369055][ T5851] _printk+0xdd/0x130 [ 391.369088][ T5851] register_console+0xbc2/0xfa0 [ 391.369111][ T5851] univ8250_console_init+0x3a/0x70 [ 391.369196][ T5851] console_init+0x10b/0x4a0 [ 391.369251][ T5851] start_kernel+0x230/0x3e0 [ 391.369279][ T5851] x86_64_start_reservations+0x24/0x30 [ 391.369303][ T5851] x86_64_start_kernel+0x143/0x1c0 [ 391.369326][ T5851] common_startup_64+0x13e/0x147 [ 391.369347][ T5851] [ 391.369347][ T5851] -> #0 (console_owner){-.-.}-{0:0}: [ 391.369376][ T5851] __lock_acquire+0x15a5/0x2cf0 [ 391.369405][ T5851] lock_acquire+0x106/0x350 [ 391.369433][ T5851] console_flush_all+0x6c1/0xb20 [ 391.369455][ T5851] console_unlock+0xd1/0x1c0 [ 391.369475][ T5851] vprintk_emit+0x485/0x560 [ 391.369503][ T5851] _printk+0xdd/0x130 [ 391.369521][ T5851] __slab_bug+0x6e/0xd0 [ 391.369544][ T5851] slab_bug+0x57/0x80 [ 391.369565][ T5851] list_slab_objects+0x35/0x1b0 [ 391.369590][ T5851] __kmem_cache_shutdown+0x13b/0x2a0 [ 391.369612][ T5851] kmem_cache_destroy+0x8e/0x170 [ 391.369646][ T5851] gfs2_put_super+0x83f/0x890 [ 391.369675][ T5851] generic_shutdown_super+0x13d/0x2d0 [ 391.369703][ T5851] kill_block_super+0x44/0x90 [ 391.369721][ T5851] deactivate_locked_super+0xbc/0x130 [ 391.369749][ T5851] cleanup_mnt+0x437/0x4d0 [ 391.369767][ T5851] task_work_run+0x1d9/0x270 [ 391.369792][ T5851] exit_to_user_mode_loop+0xed/0x480 [ 391.369819][ T5851] do_syscall_64+0x32d/0xf80 [ 391.369846][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.369866][ T5851] [ 391.369866][ T5851] other info that might help us debug this: [ 391.369866][ T5851] [ 391.369874][ T5851] Chain exists of: [ 391.369874][ T5851] console_owner --> &port->lock#2 --> &n->list_lock [ 391.369874][ T5851] [ 391.369913][ T5851] Possible unsafe locking scenario: [ 391.369913][ T5851] [ 391.369919][ T5851] CPU0 CPU1 [ 391.369926][ T5851] ---- ---- [ 391.369933][ T5851] lock(&n->list_lock); [ 391.369947][ T5851] lock(&port->lock#2); [ 391.369967][ T5851] lock(&n->list_lock); [ 391.369983][ T5851] lock(console_owner); [ 391.369997][ T5851] [ 391.369997][ T5851] *** DEADLOCK *** [ 391.369997][ T5851] [ 391.370003][ T5851] 6 locks held by syz-executor/5851: [ 391.370015][ T5851] #0: ffff888034cba0d8 (&type->s_umount_key#74){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 391.370079][ T5851] #1: ffffffff8e5ec390 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x56/0x170 [ 391.370135][ T5851] #2: ffffffff8e866888 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x64/0x170 [ 391.370191][ T5851] #3: ffff88803381a258 (&n->list_lock){-.-.}-{3:3}, at: __kmem_cache_shutdown+0x10e/0x2a0 [ 391.370241][ T5851] #4: ffffffff8e74fb40 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 391.370286][ T5851] #5: ffffffff8e637418 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xb20 [ 391.370336][ T5851] [ 391.370336][ T5851] stack backtrace: [ 391.370349][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 391.370375][ T5851] Tainted: [L]=SOFTLOCKUP [ 391.370382][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.370395][ T5851] Call Trace: [ 391.370403][ T5851] [ 391.370411][ T5851] dump_stack_lvl+0xe8/0x150 [ 391.370443][ T5851] print_circular_bug+0x2e1/0x300 [ 391.370469][ T5851] check_noncircular+0x12e/0x150 [ 391.370505][ T5851] __lock_acquire+0x15a5/0x2cf0 [ 391.370547][ T5851] ? console_flush_all+0x123/0xb20 [ 391.370572][ T5851] lock_acquire+0x106/0x350 [ 391.370601][ T5851] ? console_flush_all+0x123/0xb20 [ 391.370631][ T5851] ? do_raw_spin_unlock+0xf5/0x210 [ 391.370657][ T5851] ? console_flush_all+0x123/0xb20 [ 391.370683][ T5851] console_flush_all+0x6c1/0xb20 [ 391.370707][ T5851] ? console_flush_all+0x123/0xb20 [ 391.370733][ T5851] ? console_flush_all+0x123/0xb20 [ 391.370761][ T5851] ? __pfx_console_flush_all+0x10/0x10 [ 391.370789][ T5851] ? is_printk_cpu_sync_owner+0x32/0x40 [ 391.370818][ T5851] console_unlock+0xd1/0x1c0 [ 391.370842][ T5851] ? __pfx_console_unlock+0x10/0x10 [ 391.370864][ T5851] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 391.370893][ T5851] ? _printk+0xdd/0x130 [ 391.370917][ T5851] vprintk_emit+0x485/0x560 [ 391.370941][ T5851] ? __pfx_vprintk_emit+0x10/0x10 [ 391.370969][ T5851] _printk+0xdd/0x130 [ 391.370988][ T5851] ? __lock_acquire+0x6b5/0x2cf0 [ 391.371021][ T5851] ? __pfx__printk+0x10/0x10 [ 391.371044][ T5851] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.371072][ T5851] __slab_bug+0x6e/0xd0 [ 391.371100][ T5851] slab_bug+0x57/0x80 [ 391.371128][ T5851] list_slab_objects+0x35/0x1b0 [ 391.371157][ T5851] __kmem_cache_shutdown+0x13b/0x2a0 [ 391.371183][ T5851] ? gfs2_put_super+0x83f/0x890 [ 391.371212][ T5851] kmem_cache_destroy+0x8e/0x170 [ 391.371241][ T5851] gfs2_put_super+0x83f/0x890 [ 391.371273][ T5851] ? __pfx_gfs2_put_super+0x10/0x10 [ 391.371301][ T5851] generic_shutdown_super+0x13d/0x2d0 [ 391.371333][ T5851] kill_block_super+0x44/0x90 [ 391.371354][ T5851] deactivate_locked_super+0xbc/0x130 [ 391.371386][ T5851] cleanup_mnt+0x437/0x4d0 [ 391.371405][ T5851] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.371433][ T5851] task_work_run+0x1d9/0x270 [ 391.371461][ T5851] ? __pfx_task_work_run+0x10/0x10 [ 391.371502][ T5851] exit_to_user_mode_loop+0xed/0x480 [ 391.371530][ T5851] ? rcu_is_watching+0x15/0xb0 [ 391.371553][ T5851] do_syscall_64+0x32d/0xf80 [ 391.371582][ T5851] ? trace_irq_disable+0x3b/0x140 [ 391.371608][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.371629][ T5851] ? clear_bhb_loop+0x40/0x90 [ 391.371652][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.371673][ T5851] RIP: 0033:0x7f020999d9d7 [ 391.371692][ T5851] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 391.371711][ T5851] RSP: 002b:00007ffd3c89e7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 391.371732][ T5851] RAX: 0000000000000000 RBX: 00007f0209a32050 RCX: 00007f020999d9d7 [ 391.371747][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3c89e860 [ 391.371761][ T5851] RBP: 00007ffd3c89e860 R08: 00007ffd3c89f860 R09: 00000000ffffffff [ 391.371776][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3c89f8f0 [ 391.371788][ T5851] R13: 00007f0209a32050 R14: 000000000005e041 R15: 00007ffd3c89f930 [ 391.371812][ T5851] [ 392.348034][ T5851] BUG gfs2-bufdata/syz:syz (Tainted: G L ): Objects remaining on __kmem_cache_shutdown() [ 392.359421][ T5851] ----------------------------------------------------------------------------- [ 392.359421][ T5851] [ 392.370665][ T5851] Object 0xffff88805db5b8c0 @offset=2240 [ 392.376320][ T5851] Object 0xffff88805db5b9a0 @offset=2464 [ 392.381981][ T5851] Object 0xffff88805db5ba10 @offset=2576 [ 392.387637][ T5851] Slab 0xffffea000176d6c0 objects=36 used=3 fp=0xffff88805db5ba80 flags=0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 392.401508][ T5851] ------------[ cut here ]------------ [ 392.406982][ T5851] 1 [ 392.407005][ T5851] WARNING: mm/slub.c:1231 at __slab_err+0x15/0x20, CPU#1: syz-executor/5851 [ 392.418169][ T5851] Modules linked in: [ 392.422107][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz-executor Tainted: G B L syzkaller #0 PREEMPT(full) [ 392.433166][ T5851] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 392.438730][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.448896][ T5851] RIP: 0010:__slab_err+0x15/0x20 [ 392.453869][ T5851] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b 01 00 00 bf 05 00 00 00 be 01 00 00 00 e8 0c cf 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 [ 392.473580][ T5851] RSP: 0018:ffffc900043b7bf8 EFLAGS: 00010093 [ 392.479665][ T5851] RAX: ffffffff81870b9a RBX: ffffc900043b7c20 RCX: ffff88803574db80 [ 392.487667][ T5851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.495668][ T5851] RBP: ffffc900043b7c20 R08: ffffffff932410a7 R09: 1ffffffff2648214 [ 392.503753][ T5851] R10: dffffc0000000000 R11: fffffbfff2648215 R12: ffff88803381a288 [ 392.511748][ T5851] R13: ffffea000176d6c0 R14: ffffea00013e1390 R15: ffff88803381a240 [ 392.519738][ T5851] FS: 000055559425f500(0000) GS:ffff888125548000(0000) knlGS:0000000000000000 [ 392.528684][ T5851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.535278][ T5851] CR2: 0000200000000480 CR3: 000000007bbba000 CR4: 00000000003526f0 [ 392.543267][ T5851] Call Trace: [ 392.546564][ T5851] [ 392.549523][ T5851] __kmem_cache_shutdown+0x13b/0x2a0 [ 392.554858][ T5851] ? gfs2_put_super+0x83f/0x890 [ 392.559756][ T5851] kmem_cache_destroy+0x8e/0x170 [ 392.564730][ T5851] gfs2_put_super+0x83f/0x890 [ 392.569438][ T5851] ? __pfx_gfs2_put_super+0x10/0x10 [ 392.574665][ T5851] generic_shutdown_super+0x13d/0x2d0 [ 392.580078][ T5851] kill_block_super+0x44/0x90 [ 392.584780][ T5851] deactivate_locked_super+0xbc/0x130 [ 392.590189][ T5851] cleanup_mnt+0x437/0x4d0 [ 392.594623][ T5851] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.599846][ T5851] task_work_run+0x1d9/0x270 [ 392.604464][ T5851] ? __pfx_task_work_run+0x10/0x10 [ 392.609605][ T5851] exit_to_user_mode_loop+0xed/0x480 [ 392.615044][ T5851] ? rcu_is_watching+0x15/0xb0 [ 392.619827][ T5851] do_syscall_64+0x32d/0xf80 [ 392.624442][ T5851] ? trace_irq_disable+0x3b/0x140 [ 392.629488][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.635655][ T5851] ? clear_bhb_loop+0x40/0x90 [ 392.640362][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.646273][ T5851] RIP: 0033:0x7f020999d9d7 [ 392.650704][ T5851] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 392.670329][ T5851] RSP: 002b:00007ffd3c89e7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 392.678771][ T5851] RAX: 0000000000000000 RBX: 00007f0209a32050 RCX: 00007f020999d9d7 [ 392.686760][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3c89e860 [ 392.694742][ T5851] RBP: 00007ffd3c89e860 R08: 00007ffd3c89f860 R09: 00000000ffffffff [ 392.702731][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3c89f8f0 [ 392.710716][ T5851] R13: 00007f0209a32050 R14: 000000000005e041 R15: 00007ffd3c89f930 [ 392.718714][ T5851] [ 392.721764][ T5851] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 392.729062][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz-executor Tainted: G B L syzkaller #0 PREEMPT(full) [ 392.740124][ T5851] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 392.745706][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.755868][ T5851] Call Trace: [ 392.759170][ T5851] [ 392.762120][ T5851] vpanic+0x56c/0xa60 [ 392.766163][ T5851] ? __pfx__printk+0x10/0x10 [ 392.770773][ T5851] ? __pfx_vpanic+0x10/0x10 [ 392.775328][ T5851] ? is_bpf_text_address+0x292/0x2b0 [ 392.780636][ T5851] ? is_bpf_text_address+0x26/0x2b0 [ 392.785864][ T5851] panic+0xc5/0xd0 [ 392.789608][ T5851] ? __pfx_panic+0x10/0x10 [ 392.794055][ T5851] __warn+0x315/0x4c0 [ 392.798064][ T5851] ? __slab_err+0x15/0x20 [ 392.802417][ T5851] ? __slab_err+0x15/0x20 [ 392.806764][ T5851] __report_bug+0x29a/0x540 [ 392.811398][ T5851] ? do_raw_spin_unlock+0xf5/0x210 [ 392.816528][ T5851] ? __slab_err+0x15/0x20 [ 392.820883][ T5851] ? __pfx___report_bug+0x10/0x10 [ 392.825930][ T5851] ? __wake_up_klogd+0xe6/0x120 [ 392.830825][ T5851] ? vprintk_emit+0x4eb/0x560 [ 392.835522][ T5851] ? __pfx_vprintk_emit+0x10/0x10 [ 392.840565][ T5851] ? _printk+0xdd/0x130 [ 392.844736][ T5851] ? __slab_err+0x15/0x20 [ 392.849109][ T5851] report_bug+0x16a/0x220 [ 392.853465][ T5851] ? __slab_err+0x15/0x20 [ 392.857818][ T5851] ? __slab_err+0x17/0x20 [ 392.862165][ T5851] handle_bug+0x9c/0x200 [ 392.866429][ T5851] exc_invalid_op+0x1a/0x50 [ 392.870953][ T5851] asm_exc_invalid_op+0x1a/0x20 [ 392.875822][ T5851] RIP: 0010:__slab_err+0x15/0x20 [ 392.880779][ T5851] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e8 5b 01 00 00 bf 05 00 00 00 be 01 00 00 00 e8 0c cf 5e 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 [ 392.900576][ T5851] RSP: 0018:ffffc900043b7bf8 EFLAGS: 00010093 [ 392.906670][ T5851] RAX: ffffffff81870b9a RBX: ffffc900043b7c20 RCX: ffff88803574db80 [ 392.914659][ T5851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.922735][ T5851] RBP: ffffc900043b7c20 R08: ffffffff932410a7 R09: 1ffffffff2648214 [ 392.930722][ T5851] R10: dffffc0000000000 R11: fffffbfff2648215 R12: ffff88803381a288 [ 392.938711][ T5851] R13: ffffea000176d6c0 R14: ffffea00013e1390 R15: ffff88803381a240 [ 392.946705][ T5851] ? add_taint+0x9a/0xe0 [ 392.950981][ T5851] ? __slab_err+0x14/0x20 [ 392.955328][ T5851] __kmem_cache_shutdown+0x13b/0x2a0 [ 392.960652][ T5851] ? gfs2_put_super+0x83f/0x890 [ 392.965533][ T5851] kmem_cache_destroy+0x8e/0x170 [ 392.970497][ T5851] gfs2_put_super+0x83f/0x890 [ 392.975296][ T5851] ? __pfx_gfs2_put_super+0x10/0x10 [ 392.980518][ T5851] generic_shutdown_super+0x13d/0x2d0 [ 392.985918][ T5851] kill_block_super+0x44/0x90 [ 392.990704][ T5851] deactivate_locked_super+0xbc/0x130 [ 392.996099][ T5851] cleanup_mnt+0x437/0x4d0 [ 393.000530][ T5851] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.005754][ T5851] task_work_run+0x1d9/0x270 [ 393.010467][ T5851] ? __pfx_task_work_run+0x10/0x10 [ 393.015606][ T5851] exit_to_user_mode_loop+0xed/0x480 [ 393.020922][ T5851] ? rcu_is_watching+0x15/0xb0 [ 393.025706][ T5851] do_syscall_64+0x32d/0xf80 [ 393.030325][ T5851] ? trace_irq_disable+0x3b/0x140 [ 393.035371][ T5851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.041453][ T5851] ? clear_bhb_loop+0x40/0x90 [ 393.046178][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.052213][ T5851] RIP: 0033:0x7f020999d9d7 [ 393.056658][ T5851] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 393.076296][ T5851] RSP: 002b:00007ffd3c89e7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 393.084739][ T5851] RAX: 0000000000000000 RBX: 00007f0209a32050 RCX: 00007f020999d9d7 [ 393.092738][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3c89e860 [ 393.100725][ T5851] RBP: 00007ffd3c89e860 R08: 00007ffd3c89f860 R09: 00000000ffffffff [ 393.108740][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3c89f8f0 [ 393.116732][ T5851] R13: 00007f0209a32050 R14: 000000000005e041 R15: 00007ffd3c89f930 [ 393.124820][ T5851] [ 393.128473][ T5851] Kernel Offset: disabled [ 393.132801][ T5851] Rebooting in 86400 seconds..