last executing test programs: 1m51.427094805s ago: executing program 2 (id=390): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x840013, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) open(&(0x7f0000025d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64842, 0x22) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 1m51.287881821s ago: executing program 2 (id=391): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0xe0}, 0x4040) 1m50.983975469s ago: executing program 2 (id=394): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700", 0x15}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 1m50.744635277s ago: executing program 2 (id=396): socket(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000680)=ANY=[@ANYBLOB='iocharset=cp850,fmask=00000000000000000000236,errors=remount-ro,iocharset=iso8859-7,fmask=00000000000000000000005,dmask=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000001,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',hash,obj_role=,subj_role=iso8859-7,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c6673636f6e746578743d73797374656d5f752c00d6ff5c67f927e2994d04ce2d7fbbbf344b156bcd7abb5fd31af34cddf3c183668b1f0bb5722d38948008a63b157fdaccf14e"], 0xfd, 0x1549, &(0x7f0000002d80)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000140)='./file0\x00', 0x18a) 1m50.305374409s ago: executing program 2 (id=398): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002019d"], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x40040) 1m49.708577186s ago: executing program 2 (id=401): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f0000000500)={[{@uni_xlate}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@shortname_mixed}, {@shortname_lower}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_lower}, {@rodir}, {@uni_xlateno}, {@utf8no}, {@utf8no}]}, 0x1, 0x289, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1m48.953978966s ago: executing program 32 (id=401): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f0000000500)={[{@uni_xlate}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@shortname_mixed}, {@shortname_lower}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_lower}, {@rodir}, {@uni_xlateno}, {@utf8no}, {@utf8no}]}, 0x1, 0x289, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1m3.85146975s ago: executing program 5 (id=546): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m2.887334021s ago: executing program 5 (id=551): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='.\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES8], 0x1, 0x37c, &(0x7f0000001680)="$eJzs3c+LG2UYwPEnu7PZZEs3OYiiIPugF70Mu6tnJUgL4oJl24itIEy7Ew0Zk2UmRCLiriev4s1/QLD0WPBQUG+e9uKtXrx4ci+CoEXEkfnx5ldnN9k0JWn7/UCbJ3nfJ/O+ySQ8b9i8OX73y48atcCuOW1ZKqjkRETuiZRlSYxccpGXDIfy8rk/7z5/+eq1tyo7Oxd2VS9WrryyrarrG99//GnRSrrdWZWj8vvHUvjt6OmjZ4//u/JhPdB6oM1WWx293vq17Vz3XN2rBw1b9ZLnOoGr9Wbg+kl7K2mvea39/a46zb3za/u+GwTqNLvacLvabmnb76rzgVNvqm3ben4ta7iPscIUOdWbu7tOZcoD3pgyD7P2TxiGpzT7fsVZFrGL97VUbz7UcQEAgIU0Uv9/bWqEsiz1CspcuhbIx/HwMiCq/03ca+nX/7de+LF97p3b62n9fyffr/+lbOr/V39J0obq/+joM6//vx25fn9F9Mg7OEvnB6r/sRg2hl+Rv/dX7Kmo/o9eDb0V/efv3dqMA+p/AAAAAAAAAAAAAAAAAAAAAAAeBffCsBSGYclcmn/9rxCk18219IvGq/MZLmbshOe/992v3vmAx9Llq9ekEG/cYa2LeF90qp1qcpm2m46bUpJ/4/MhlWw4cRg3aqQsP3gHnepKmrAc/18RUfHElS0pSXkoP44vvrlzYUsTSX58/INONWetRfk1qcf521KSp7LztzPz8/LSiwP5tpTk5xvSEk/20vcxk//Zluobb++M5Bfjfllef7hPCQAAAAAAM2erFtLlc3l4/Zus321bNas9WsvL4Po8+XzgJ8lYn29mrs+t0nPWfOcOAAAAAMCTIsh/0nA8z/WD7olBUcb1MX8NNNJkyZh7jgJrgj5Dwd04WDmtz/LADCe953z6CxqTDsMPujLxmE3w16pkPphmC9foFrMpsVfIflQnDMz8J+hcOOtT4AdLZ5+76wcb0Xh0qukMBPHHRjlLTuojl6LAPKQPdqwkMDvnjuv8zFff/D3dIXLprr2DTa/dNmfAqem5kVsOx5y0f4Th2PGsZL9bfDfNj8wAAAAAWBCm6C8G8x4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPrlnsjjYumPccAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEXxfwAAAP//3RHskQ==") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000002440)=""/4098}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 58.150065069s ago: executing program 5 (id=570): openat$ppp(0xffffffffffffff9c, 0x0, 0x8000, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x75f, 0x4c042) ioctl$BLKROSET(r0, 0x125d, 0x0) 57.776429762s ago: executing program 5 (id=571): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) creat(0x0, 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5fa) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 54.096013441s ago: executing program 5 (id=583): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80890a, &(0x7f0000000200)={[{@debug}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x5, 0x7b5, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000480)={0x47, 0xffbf, 0x6, 0x8}) 50.886819134s ago: executing program 5 (id=594): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r4, 0x32d7, 0x0, 0x46, 0x0, 0x0) 35.086829573s ago: executing program 33 (id=594): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r4, 0x32d7, 0x0, 0x46, 0x0, 0x0) 21.118482542s ago: executing program 0 (id=662): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0400011904"], 0x7) 20.771901454s ago: executing program 0 (id=665): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x101, 0x147}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) 20.305362545s ago: executing program 0 (id=666): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYRES32=r0], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1f4, 0xd, 0x7, 0x4}, 0x9c) 17.027320086s ago: executing program 0 (id=672): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x5f61, &(0x7f0000009040)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) 15.369174664s ago: executing program 1 (id=677): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xa, 0x0) connect$can_bcm(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) io_getevents(0x0, 0xf4a, 0x0, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) socket(0x2a, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.942750733s ago: executing program 0 (id=678): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x24040000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 11.264766299s ago: executing program 1 (id=682): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000200)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@space_cache_v2}, {@compress_force}, {@nossd}, {@barrier}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x67, 0x37, 0x74, 0x65, 0x36, 0x38]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) 11.0522747s ago: executing program 0 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x7}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 11.041289586s ago: executing program 6 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x57ee}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) link(0x0, &(0x7f00000001c0)='./file0\x00') setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, 0x0) 9.584799146s ago: executing program 34 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x7}, 0x22120) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 9.543640634s ago: executing program 6 (id=687): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.543209497s ago: executing program 4 (id=688): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380), 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f0000000140)='mnt/encrypted_dir\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) 9.332581383s ago: executing program 6 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="02", 0x1}], 0x1}}], 0x1, 0x24005805) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.770458339s ago: executing program 4 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000080)) setpgid(r0, r0) getitimer(0x2, &(0x7f0000000040)) timerfd_create(0x0, 0x80800) 7.292753306s ago: executing program 3 (id=693): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x3, 0x12) 7.132204667s ago: executing program 3 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = dup3(r4, r5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) 7.026975008s ago: executing program 1 (id=695): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200"], 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r5, 0x1, r2, 0x6, 0x80000}) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040005, 0x0, 0x0) setns(r4, 0x40000000) 6.051833688s ago: executing program 3 (id=696): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000), 0x4) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000180)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c67635f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303131312c6261636b67726f756e645f67633d6f6e2c66617374626f6f742c646174615f666c7573682c70726a6a71756f742d762c6a71666d743d76667376312c8b75d8cad3b675b3bf6db88f44c2657874656e745f63617368652c66617374626f6f742c0081effa4716a39004fb2397a6b5eff1c3f1b6718e2e76dced34cfe0d59bb7457ab4d3f42b428468f8958df6d6c4e300000085359b192a1511"], 0x0, 0x5500, &(0x7f00000005c0)="$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") 5.23520978s ago: executing program 6 (id=697): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) syz_clone(0x1040000, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0) syz_clone(0x40108000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) write$cgroup_int(r6, &(0x7f0000000340)=0x1, 0x12) 4.275345338s ago: executing program 1 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x57ee}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) link(0x0, &(0x7f00000001c0)='./file0\x00') setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 3.023665677s ago: executing program 1 (id=699): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0xffffffff, 0x2}) 2.84576491s ago: executing program 3 (id=700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.709288889s ago: executing program 3 (id=701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.462085216s ago: executing program 4 (id=702): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) clock_adjtime(0xffc99a3b, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004", @ANYRES32, @ANYBLOB="c13585f5b800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) socket$key(0xf, 0x3, 0x2) 1.568817511s ago: executing program 3 (id=703): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000240)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1}}, {@ssd}, {}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") creat(0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x4090000, &(0x7f00000003c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6572656e63793d66756c6c2c6865617274626561743d6e6f66652c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f757365725f78617474722c00fcde43907503029b57044b65473818b8f44c93bbc3255cfcfe9235ee5ad7350220976827471c4adc0f08ff8c8f362d42f57044885d69aa33553b2a32bba9d3f02b1a082d536945299c4ec3d50fef475458cb2cd41b7db5d741887889763935b76657025321748d9ee138a2c1f06921176a4524bed48b184c7c44b98bfc0b9e31b65df1dff518063b17dd307fe8515a5d8e090b253e0254932a"], 0x3, 0x4453, &(0x7f00000111c0)="$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") r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x2, 0x3, 0x13, 0x5, "61fce678192bb3589187b027eaf0d4fdfae677e80f680eda9bbf7d1b0b67dcc2d26cef0b0e59d91144568d0da45854c70a1a05fb21d427099f2793ae3dbede80", "08e911c5da5318eaed2648768838506c64718cbe56cadf0dad8278b464fdf258", [0xe56, 0x5]}) r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000000c0)={0xb, 0x29, 0x1, {0x3}}, 0xb) sendfile(r1, r1, &(0x7f0000000240), 0x7f06) 1.397516753s ago: executing program 4 (id=704): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r3}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 808.334383ms ago: executing program 4 (id=705): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 759.666188ms ago: executing program 6 (id=706): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x1, 0x683, &(0x7f00000003c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 690.375259ms ago: executing program 4 (id=707): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 689.921734ms ago: executing program 1 (id=708): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x454500, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000019c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x9) r5 = msgget$private(0x0, 0x193) msgsnd(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001400010000000000fcdbdf25021f", @ANYRES32=r6, @ANYBLOB="08000200e0eeff00140003000000000000000000000000000000000008000400ffffff"], 0x3c}}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x183000, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22ffc0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f0000000180)={0x1f, @none}, 0x8) close(r0) read(r7, 0x0, 0x0) 0s ago: executing program 6 (id=709): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, &(0x7f0000000500)) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @any, 0x1}, 0xa) socket(0x2, 0x80805, 0x0) shutdown(r5, 0x1) kernel console output (not intermixed with test programs): be2-f6da-4727-8c75-0525a5b65a09. [ 159.326146][ T6745] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.242: mark_inode_dirty error [ 159.361889][ T6756] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.242: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 159.361889][ T6756] [ 159.475292][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.492194][ T6758] loop5: detected capacity change from 0 to 256 [ 159.509867][ T6760] loop4: detected capacity change from 0 to 256 [ 159.540348][ T6758] exfat: Invalid uid '0x00000000ffffffff' [ 159.667174][ T6760] FAT-fs (loop4): Directory bread(block 64) failed [ 159.682099][ T6760] FAT-fs (loop4): Directory bread(block 65) failed [ 159.705305][ T6760] FAT-fs (loop4): Directory bread(block 66) failed [ 159.714451][ T6760] FAT-fs (loop4): Directory bread(block 67) failed [ 159.724704][ T6760] FAT-fs (loop4): Directory bread(block 68) failed [ 159.732180][ T6760] FAT-fs (loop4): Directory bread(block 69) failed [ 159.739319][ T6760] FAT-fs (loop4): Directory bread(block 70) failed [ 159.746549][ T6760] FAT-fs (loop4): Directory bread(block 71) failed [ 159.762086][ T6764] loop3: detected capacity change from 0 to 256 [ 159.801442][ T6760] FAT-fs (loop4): Directory bread(block 72) failed [ 159.826093][ T6760] FAT-fs (loop4): Directory bread(block 73) failed [ 159.863096][ T6764] FAT-fs (loop3): Directory bread(block 64) failed [ 159.906587][ T6764] FAT-fs (loop3): Directory bread(block 65) failed [ 159.934578][ T6764] FAT-fs (loop3): Directory bread(block 66) failed [ 159.973330][ T6764] FAT-fs (loop3): Directory bread(block 67) failed [ 160.000493][ T6764] FAT-fs (loop3): Directory bread(block 68) failed [ 160.036498][ T6764] FAT-fs (loop3): Directory bread(block 69) failed [ 160.067437][ T6764] FAT-fs (loop3): Directory bread(block 70) failed [ 160.077949][ T6768] loop2: detected capacity change from 0 to 512 [ 160.091408][ T6764] FAT-fs (loop3): Directory bread(block 71) failed [ 160.102689][ T6764] FAT-fs (loop3): Directory bread(block 72) failed [ 160.112409][ T6764] FAT-fs (loop3): Directory bread(block 73) failed [ 160.118281][ T6768] EXT4-fs: Ignoring removed bh option [ 160.148333][ T6768] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.227386][ T6768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.378339][ T6768] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.487245][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.620368][ T5980] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 161.894825][ T6786] set_capacity_and_notify: 1 callbacks suppressed [ 161.894846][ T6786] loop2: detected capacity change from 0 to 1024 [ 161.908427][ T6786] EXT4-fs: inline encryption not supported [ 163.785365][ T6788] loop3: detected capacity change from 0 to 40427 [ 163.837706][ T6788] F2FS-fs (loop3): Unable to read 1th superblock [ 163.844296][ T6788] F2FS-fs (loop3): Unable to read 2th superblock [ 163.931335][ T6786] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 163.986169][ T5980] usb 5-1: device descriptor read/all, error -71 [ 165.246054][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.254644][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.269863][ T6797] loop2: detected capacity change from 0 to 512 [ 165.355588][ T6797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.476472][ T6797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.552406][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.564223][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.565233][ T6797] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.666198][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.729658][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.851470][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 165.861062][ T24] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 165.869313][ T24] usb 1-1: config 2 has no interface number 0 [ 165.869538][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.883452][ T24] usb 1-1: config 2 interface 88 has no altsetting 0 [ 165.902419][ T24] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 165.930772][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.955496][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.970475][ T24] usb 1-1: Product: syz [ 165.974635][ T24] usb 1-1: Manufacturer: syz [ 165.989898][ T24] usb 1-1: SerialNumber: syz [ 166.004690][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.020446][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.200858][ T6813] loop1: detected capacity change from 0 to 128 [ 166.248420][ T6813] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.314331][ T6813] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.419633][ T6792] loop5: detected capacity change from 0 to 40427 [ 166.436679][ T6792] F2FS-fs (loop5): build fault injection rate: 771 [ 166.459233][ T6792] F2FS-fs (loop5): invalid crc value [ 166.623664][ T5831] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.682551][ T6792] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 166.711877][ T6792] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 166.765878][ T6792] syz.5.257: attempt to access beyond end of device [ 166.765878][ T6792] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.825926][ T5820] syz-executor: attempt to access beyond end of device [ 166.825926][ T5820] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 166.854707][ T24] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 166.868025][ T24] asix 1-1:2.88: probe with driver asix failed with error -71 [ 166.877635][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 166.877663][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 166.877678][ T5820] Call Trace: [ 166.877687][ T5820] [ 166.877697][ T5820] dump_stack_lvl+0xe8/0x150 [ 166.877738][ T5820] f2fs_handle_critical_error+0x37c/0x540 [ 166.877774][ T5820] f2fs_write_end_io+0xc1d/0xfd0 [ 166.877823][ T5820] __submit_merged_bio+0x256/0x650 [ 166.877857][ T5820] __submit_merged_write_cond+0x269/0x530 [ 166.877907][ T5820] f2fs_write_data_pages+0x280b/0x3360 [ 166.877974][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 166.878019][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.878049][ T5820] ? css_rstat_updated+0x23a/0x530 [ 166.878116][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.878145][ T5820] ? rcu_is_watching+0x15/0xb0 [ 166.878177][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.878207][ T5820] ? mod_memcg_lruvec_state+0x1b8/0x320 [ 166.878239][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.878268][ T5820] ? lru_gen_update_size+0x7c9/0xd10 [ 166.878308][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.878338][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 166.878414][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 166.878446][ T5820] do_writepages+0x32e/0x550 [ 166.878477][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.878509][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.878543][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.878572][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 166.878616][ T5820] filemap_fdatawrite+0x1e9/0x2f0 [ 166.878654][ T5820] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 166.878725][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.878757][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.878791][ T5820] ? do_raw_spin_unlock+0xf5/0x210 [ 166.878836][ T5820] f2fs_sync_dirty_inodes+0x30e/0x810 [ 166.878886][ T5820] f2fs_write_checkpoint+0x9c6/0x2490 [ 166.878918][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.878947][ T5820] ? stack_depot_save_flags+0x33/0x810 [ 166.879007][ T5820] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 166.879083][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.879113][ T5820] ? kfree+0x1c1/0x610 [ 166.879144][ T5820] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 166.879189][ T5820] kill_f2fs_super+0x308/0x710 [ 166.879229][ T5820] ? __pfx_kill_f2fs_super+0x10/0x10 [ 166.879286][ T5820] deactivate_locked_super+0xbc/0x130 [ 166.879321][ T5820] cleanup_mnt+0x437/0x4d0 [ 166.879356][ T5820] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.879389][ T5820] task_work_run+0x1d9/0x270 [ 166.879434][ T5820] ? __pfx_task_work_run+0x10/0x10 [ 166.879474][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.879514][ T5820] exit_to_user_mode_loop+0xed/0x480 [ 166.879540][ T5820] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.879569][ T5820] ? rcu_is_watching+0x15/0xb0 [ 166.879604][ T5820] do_syscall_64+0x32d/0xf80 [ 166.879642][ T5820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.879667][ T5820] ? trace_irq_disable+0x37/0x100 [ 166.879705][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.879730][ T5820] RIP: 0033:0x7f926199d1d7 [ 166.879752][ T5820] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 166.879772][ T5820] RSP: 002b:00007fff4816d9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 166.879797][ T5820] RAX: 0000000000000000 RBX: 00007f9261a31c3b RCX: 00007f926199d1d7 [ 166.879813][ T5820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4816da90 [ 166.879828][ T5820] RBP: 00007fff4816da90 R08: 00007fff4816ea90 R09: 00000000ffffffff [ 166.879845][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4816eb20 [ 166.879861][ T5820] R13: 00007f9261a31c3b R14: 0000000000028b6d R15: 00007fff4816eb60 [ 166.879899][ T5820] [ 166.879908][ T5820] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 167.260583][ T6837] binder: 6834:6837 ioctl c0306201 2000000003c0 returned -14 [ 167.282111][ T24] usb 1-1: USB disconnect, device number 5 [ 168.799740][ T6859] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 168.824350][ T6859] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.935421][ T6861] input: syz1 as /devices/virtual/input/input5 [ 168.952117][ T6858] loop3: detected capacity change from 0 to 4096 [ 169.033957][ T6858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.344315][ T6858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.012408][ T6889] loop1: detected capacity change from 0 to 512 [ 170.111743][ T6889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.181639][ T6889] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 170.222053][ T6889] EXT4-fs (loop1): 1 truncate cleaned up [ 170.236423][ T6889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.057989][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.173167][ T5980] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 171.283087][ T6902] loop3: detected capacity change from 0 to 1024 [ 171.315601][ T6902] EXT4-fs: inline encryption not supported [ 171.335259][ T6902] EXT4-fs: Ignoring removed oldalloc option [ 171.370662][ T5980] usb 6-1: Using ep0 maxpacket: 16 [ 171.386871][ T5980] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 171.406301][ T6902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.419013][ T5980] usb 6-1: config 1 has no interface number 0 [ 171.428179][ T5980] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 171.446734][ T5980] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 171.461821][ T6902] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 171.478321][ T5980] usb 6-1: config 1 interface 105 has no altsetting 0 [ 171.489123][ T5980] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 171.498667][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.506811][ T5980] usb 6-1: Product: syz [ 171.511515][ T5980] usb 6-1: Manufacturer: syz [ 171.516191][ T5980] usb 6-1: SerialNumber: syz [ 171.520302][ T6902] EXT4-fs (loop3): Remounting filesystem read-only [ 171.527806][ T6902] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.3.297: cleanup dec ref error -28 [ 171.557590][ T6894] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 171.565198][ T6894] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 171.624211][ T6916] loop1: detected capacity change from 0 to 512 [ 171.648987][ T6916] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 171.857741][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.255506][ T6894] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 172.565253][ T6894] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 173.455010][ T5995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 173.487820][ T5995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 173.498238][ T5980] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 173.517969][ T5980] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 173.538005][ T5995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 173.568696][ T5995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 173.595318][ T5995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 173.600835][ T5980] aqc111 6-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f8:29:70:c6:36:f5 [ 173.609363][ T6937] loop4: detected capacity change from 0 to 128 [ 173.624703][ T5995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 173.627007][ T6936] overlayfs: failed to resolve './file7/file0': -2 [ 173.635640][ T5995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 173.661856][ T6937] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.674986][ T5995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 173.685374][ T5995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 173.695423][ T6937] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.705914][ T5995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 173.708570][ T6936] loop0: detected capacity change from 0 to 256 [ 173.719636][ T5995] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 173.732088][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 173.752240][ T6936] exfat: Invalid uid '0x00000000ffffffff' [ 173.768153][ T6914] loop2: detected capacity change from 0 to 40427 [ 173.797076][ T24] usb 6-1: USB disconnect, device number 5 [ 173.818290][ T6914] F2FS-fs (loop2): invalid crc value [ 173.823303][ T24] aqc111 6-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 173.884181][ T5825] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.890288][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 173.945480][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 173.980330][ T10] usb 4-1: config 179 has no interface number 0 [ 173.986644][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 174.068287][ T6940] fido_id[6940]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.095010][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 174.134933][ T24] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 174.156905][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 174.202294][ T6944] loop4: detected capacity change from 0 to 1024 [ 174.208928][ T24] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 174.217058][ T6914] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 174.231592][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 174.252210][ T6944] EXT4-fs (loop4): Encoding requested by superblock is unknown [ 174.260006][ T24] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 174.280292][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 174.307125][ T6914] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 174.336263][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 174.394254][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.465562][ T6927] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 174.621090][ T6957] binder: BINDER_SET_CONTEXT_MGR already set [ 174.627370][ T6957] binder: 6956:6957 ioctl 4018620d 200000000040 returned -16 [ 174.654721][ T6955] loop0: detected capacity change from 0 to 512 [ 174.706595][ T6955] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.770669][ T6955] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 174.792949][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 174.809241][ T6955] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.312: attempt to clear invalid blocks 2 len 1 [ 174.883165][ T6955] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 174.890293][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 174.905898][ C0] EXT4-fs (loop0): initial error at time 1771012010: ext4_clear_blocks:876: inode 13 [ 174.915433][ C0] EXT4-fs (loop0): last error at time 1771012010: ext4_clear_blocks:876: inode 13 [ 174.943300][ T6955] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 174.980711][ T6955] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.312: invalid indirect mapped block 1819239214 (level 0) [ 175.032643][ T6955] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 175.034188][ T6955] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.312: invalid indirect mapped block 1819239214 (level 1) [ 175.055756][ T24] usb 4-1: USB disconnect, device number 4 [ 175.057393][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 175.071594][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 175.094663][ T6964] loop5: detected capacity change from 0 to 1024 [ 175.115320][ T6964] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 175.124667][ T6955] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 175.160056][ T6964] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 175.183964][ T6955] EXT4-fs (loop0): 1 truncate cleaned up [ 175.252994][ T6955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.299266][ T6964] EXT4-fs (loop5): orphan cleanup on readonly fs [ 175.354042][ T6964] EXT4-fs error (device loop5): ext4_free_blocks:6726: comm syz.5.316: Freeing blocks not in datazone - block = 0, count = 4096 [ 175.398413][ T6964] loop5: lost filesystem error report for type 5 error -117 [ 175.400461][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 175.414273][ C0] EXT4-fs (loop5): initial error at time 1771012010: ext4_free_blocks:6726 [ 175.422901][ C0] EXT4-fs (loop5): last error at time 1771012010: ext4_free_blocks:6726 [ 175.481401][ T6964] EXT4-fs (loop5): Remounting filesystem read-only [ 175.513528][ T6964] EXT4-fs (loop5): 1 orphan inode deleted [ 175.566164][ T6964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.197444][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.213477][ T6974] loop1: detected capacity change from 0 to 512 [ 176.244657][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.314024][ T6974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.446462][ T6974] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.575022][ T6985] loop2: detected capacity change from 0 to 512 [ 177.195318][ T6985] EXT4-fs error (device loop2): __ext4_fill_super:5565: inode #2: comm syz.2.315: iget: checksum invalid [ 177.206757][ T6985] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 177.209762][ T6985] EXT4-fs (loop2): get root inode failed [ 177.218776][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 177.218798][ C1] EXT4-fs (loop2): initial error at time 1771012012: __ext4_fill_super:5565: inode 2 [ 177.218837][ C1] EXT4-fs (loop2): last error at time 1771012012: __ext4_fill_super:5565: inode 2 [ 177.250486][ T6985] EXT4-fs (loop2): mount failed [ 177.699209][ T6995] loop0: detected capacity change from 0 to 128 [ 177.903026][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.045587][ T6999] loop5: detected capacity change from 0 to 128 [ 178.072816][ T6995] syz.0.322: attempt to access beyond end of device [ 178.072816][ T6995] loop0: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 178.121201][ T6995] syz.0.322: attempt to access beyond end of device [ 178.121201][ T6995] loop0: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 178.142150][ T6999] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 178.184659][ T6999] FAT-fs (loop5): Filesystem has been set read-only [ 178.325744][ T7010] overlayfs: missing 'lowerdir' [ 178.568110][ T7016] loop1: detected capacity change from 0 to 512 [ 178.599263][ T7016] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 178.651219][ T7016] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 178.726985][ T7019] loop5: detected capacity change from 0 to 512 [ 178.798120][ T7019] EXT4-fs (loop5): 1 truncate cleaned up [ 178.823766][ T7019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.028077][ T30] audit: type=1800 audit(1771012014.131:6): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.326" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 179.100385][ T7022] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 179.756588][ T7011] loop2: detected capacity change from 0 to 40427 [ 179.787238][ T7011] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 179.819320][ T7011] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 179.859208][ T7020] loop0: detected capacity change from 0 to 40427 [ 179.911469][ T7020] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 179.954216][ T7020] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 179.970068][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.986517][ T7020] F2FS-fs (loop0): invalid crc value [ 180.160921][ T7011] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 180.192011][ T7011] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 180.210852][ T7011] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 180.315833][ T7020] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 180.359365][ T7054] loop5: detected capacity change from 0 to 256 [ 180.367164][ T7020] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 180.406192][ T7020] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 180.483348][ T7054] FAT-fs (loop5): Directory bread(block 64) failed [ 180.500432][ T7054] FAT-fs (loop5): Directory bread(block 65) failed [ 180.518805][ T7054] FAT-fs (loop5): Directory bread(block 66) failed [ 180.535649][ T7054] FAT-fs (loop5): Directory bread(block 67) failed [ 180.553248][ T7054] FAT-fs (loop5): Directory bread(block 68) failed [ 180.556610][ T7020] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 180.570018][ T7054] FAT-fs (loop5): Directory bread(block 69) failed [ 180.593030][ T7054] FAT-fs (loop5): Directory bread(block 70) failed [ 180.599569][ T7054] FAT-fs (loop5): Directory bread(block 71) failed [ 180.610384][ T7054] FAT-fs (loop5): Directory bread(block 72) failed [ 180.619071][ T7054] FAT-fs (loop5): Directory bread(block 73) failed [ 180.692559][ T5821] syz-executor: attempt to access beyond end of device [ 180.692559][ T5821] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.721792][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 180.721825][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.721840][ T5821] Call Trace: [ 180.721849][ T5821] [ 180.721859][ T5821] dump_stack_lvl+0xe8/0x150 [ 180.721901][ T5821] f2fs_handle_critical_error+0x37c/0x540 [ 180.721939][ T5821] f2fs_write_end_io+0xc1d/0xfd0 [ 180.721993][ T5821] __submit_merged_bio+0x256/0x650 [ 180.722029][ T5821] __submit_merged_write_cond+0x269/0x530 [ 180.722082][ T5821] f2fs_write_data_pages+0x280b/0x3360 [ 180.722157][ T5821] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 180.722206][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.722237][ T5821] ? css_rstat_updated+0x23a/0x530 [ 180.722311][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.722340][ T5821] ? rcu_is_watching+0x15/0xb0 [ 180.722373][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.722403][ T5821] ? mod_memcg_lruvec_state+0x1b8/0x320 [ 180.722438][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.722468][ T5821] ? lru_gen_update_size+0x7c9/0xd10 [ 180.722511][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.722542][ T5821] ? __lock_acquire+0x6b5/0x2cf0 [ 180.722610][ T5821] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 180.722644][ T5821] do_writepages+0x32e/0x550 [ 180.722686][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.722719][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.722754][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.722784][ T5821] ? do_raw_spin_unlock+0xf5/0x210 [ 180.722831][ T5821] filemap_fdatawrite+0x1e9/0x2f0 [ 180.722867][ T5821] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 180.722949][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.722981][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.723018][ T5821] ? do_raw_spin_unlock+0xf5/0x210 [ 180.723063][ T5821] f2fs_sync_dirty_inodes+0x30e/0x810 [ 180.723117][ T5821] f2fs_write_checkpoint+0x9c6/0x2490 [ 180.723149][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.723179][ T5821] ? is_bpf_text_address+0x292/0x2b0 [ 180.723214][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.723283][ T5821] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 180.723314][ T5821] ? stack_trace_save+0xa9/0x100 [ 180.723426][ T5821] kill_f2fs_super+0x308/0x710 [ 180.723468][ T5821] ? __pfx_kill_f2fs_super+0x10/0x10 [ 180.723534][ T5821] deactivate_locked_super+0xbc/0x130 [ 180.723570][ T5821] cleanup_mnt+0x437/0x4d0 [ 180.723606][ T5821] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.723641][ T5821] task_work_run+0x1d9/0x270 [ 180.723692][ T5821] ? __pfx_task_work_run+0x10/0x10 [ 180.723733][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.723776][ T5821] exit_to_user_mode_loop+0xed/0x480 [ 180.723802][ T5821] ? srso_alias_return_thunk+0x5/0xfbef5 [ 180.723833][ T5821] ? rcu_is_watching+0x15/0xb0 [ 180.723869][ T5821] do_syscall_64+0x32d/0xf80 [ 180.723901][ T5821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.723926][ T5821] ? trace_irq_disable+0x37/0x100 [ 180.723966][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.723991][ T5821] RIP: 0033:0x7f8e09f9d1d7 [ 180.724014][ T5821] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 180.724034][ T5821] RSP: 002b:00007ffd8be384d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 180.724059][ T5821] RAX: 0000000000000000 RBX: 00007f8e0a031c3b RCX: 00007f8e09f9d1d7 [ 180.724076][ T5821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8be38590 [ 180.724092][ T5821] RBP: 00007ffd8be38590 R08: 00007ffd8be39590 R09: 00000000ffffffff [ 180.724109][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8be39620 [ 180.724125][ T5821] R13: 00007f8e0a031c3b R14: 000000000002c147 R15: 00007ffd8be39660 [ 180.724168][ T5821] [ 180.728628][ T5821] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 181.393437][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 181.549926][ T7070] loop4: detected capacity change from 0 to 256 [ 181.562767][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 181.584922][ T24] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 181.604450][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.630055][ T24] usb 1-1: config 0 descriptor?? [ 181.657816][ T7061] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.110752][ T24] aquacomputer_d5next 0003:0C70:F00D.0009: item fetching failed at offset 0/5 [ 182.141084][ T24] aquacomputer_d5next 0003:0C70:F00D.0009: probe with driver aquacomputer_d5next failed with error -22 [ 182.171724][ T5995] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.233568][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.346'. [ 182.307817][ T10] usb 1-1: USB disconnect, device number 6 [ 182.352251][ T5995] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 182.365082][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.378214][ T5995] usb 5-1: config 0 descriptor?? [ 183.230309][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 183.393743][ T7102] overlayfs: missing 'lowerdir' [ 183.562338][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.573878][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.584771][ T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.594145][ T24] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 183.603791][ T24] usb 6-1: Manufacturer: syz [ 183.610500][ T5995] usb 5-1: Cannot set autoneg [ 183.621384][ T24] usb 6-1: config 0 descriptor?? [ 183.627382][ T5995] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 183.675875][ T5995] usb 5-1: USB disconnect, device number 6 [ 183.862374][ T7105] loop1: detected capacity change from 0 to 256 [ 184.453810][ T24] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 186.200321][ T24] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 186.208405][ T24] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 186.281251][ T24] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 186.320439][ T24] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 186.387412][ T24] usb 6-1: USB disconnect, device number 6 [ 189.281188][ T7118] loop3: detected capacity change from 0 to 40427 [ 189.569930][ T7149] loop0: detected capacity change from 0 to 256 [ 189.604747][ T7149] exfat: Deprecated parameter 'utf8' [ 189.670298][ T7149] exfat: Deprecated parameter 'namecase' [ 189.812358][ T7149] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 189.860933][ T7157] loop4: detected capacity change from 0 to 512 [ 189.947693][ T7157] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.000378][ T7157] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 190.052165][ T7157] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 190.132173][ T7157] System zones: 0-2, 18-18, 34-35 [ 190.191221][ T7157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.314798][ T7165] loop1: detected capacity change from 0 to 1024 [ 190.326772][ T7166] overlayfs: missing 'lowerdir' [ 190.366330][ T7165] EXT4-fs: Ignoring removed orlov option [ 190.441103][ T7165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.757616][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.015252][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.226963][ T7181] loop0: detected capacity change from 0 to 1024 [ 191.257991][ T7183] loop3: detected capacity change from 0 to 128 [ 191.309188][ T7181] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 191.346176][ T7181] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 191.360807][ T7183] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.449327][ T7183] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.559608][ T7183] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.381: bg 0: bad block bitmap checksum [ 191.599671][ T7190] loop5: detected capacity change from 0 to 128 [ 191.768560][ T5822] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.931541][ T7201] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 191.938195][ T7201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.970518][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 191.997714][ T7201] vhci_hcd vhci_hcd.0: Device attached [ 192.038036][ T7209] overlayfs: conflicting lowerdir path [ 192.081133][ T7211] loop2: detected capacity change from 0 to 256 [ 192.106633][ T30] audit: type=1800 audit(1771012027.221:7): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.390" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048640 res=0 errno=0 [ 192.150641][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 192.173335][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.220271][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.240453][ T5995] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 192.276241][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.307400][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.326721][ T10] usb 2-1: Product: syz [ 192.332337][ T10] usb 2-1: Manufacturer: syz [ 192.346206][ T10] usb 2-1: SerialNumber: syz [ 192.522394][ T7220] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 192.530575][ T7220] netlink: 64475 bytes leftover after parsing attributes in process `syz.2.394'. [ 192.602187][ T10] usb 2-1: 0:2 : does not exist [ 192.607781][ T10] usb 2-1: unit 9 not found! [ 192.746819][ T10] usb 2-1: USB disconnect, device number 7 [ 192.816440][ T7225] loop2: detected capacity change from 0 to 256 [ 192.827038][ T6090] udevd[6090]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.833641][ T7202] vhci_hcd: connection reset by peer [ 192.869669][ T7225] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x28b7239b, utbl_chksum : 0xe619d30d) [ 192.901442][ T12] vhci_hcd vhci_hcd.5: stop threads [ 192.906953][ T12] vhci_hcd vhci_hcd.5: release socket [ 192.943639][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 193.347088][ T7232] loop1: detected capacity change from 0 to 128 [ 193.367907][ T7232] EXT4-fs: Ignoring removed nobh option [ 193.425939][ T7232] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.500538][ T7232] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.580041][ T7238] overlayfs: missing 'lowerdir' [ 193.644480][ T7232] overlayfs: upper fs does not support tmpfile. [ 193.900892][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.956195][ T5831] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.062201][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.242902][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.556623][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.557429][ T7234] loop0: detected capacity change from 0 to 40427 [ 194.613882][ T7248] loop4: detected capacity change from 0 to 128 [ 194.623640][ T7246] loop1: detected capacity change from 0 to 512 [ 194.649343][ T7234] F2FS-fs (loop0): build fault injection rate: 19 [ 194.663771][ T7246] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 194.676133][ T7248] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.754124][ T7234] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 194.761837][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.770651][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.779595][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.800556][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.813387][ T7248] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.826818][ T7234] F2FS-fs (loop0): invalid crc value [ 194.844073][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.918865][ T7234] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x756/0x1260 [ 195.017850][ T7248] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.042478][ T36] bridge_slave_1: left allmulticast mode [ 195.048328][ T36] bridge_slave_1: left promiscuous mode [ 195.076081][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.145912][ T36] bridge_slave_0: left allmulticast mode [ 195.157686][ T36] bridge_slave_0: left promiscuous mode [ 195.177253][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.209728][ T7234] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 195.258807][ T7234] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 195.288176][ T7234] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 195.653696][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.687302][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.698578][ T36] bond0 (unregistering): Released all slaves [ 196.079413][ T7288] loop4: detected capacity change from 0 to 1024 [ 196.117379][ T7288] EXT4-fs: Ignoring removed bh option [ 197.065867][ T5833] Bluetooth: hci1: command tx timeout [ 197.130323][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 197.191156][ T7288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.231789][ T5995] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 198.315835][ T7290] loop1: detected capacity change from 0 to 40427 [ 198.358292][ T7290] F2FS-fs (loop1): build fault injection rate: 771 [ 198.368978][ T7290] F2FS-fs (loop1): invalid crc value [ 198.405728][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.620270][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 198.647928][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.657259][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.693957][ T7290] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 198.702169][ T7301] loop3: detected capacity change from 0 to 512 [ 198.735355][ T7290] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 198.746255][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 198.841948][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 198.845441][ T7301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 198.857496][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.880986][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.888977][ T10] usb 1-1: Product: syz [ 198.893185][ T10] usb 1-1: Manufacturer: syz [ 198.897778][ T10] usb 1-1: SerialNumber: syz [ 198.908071][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.911203][ T7283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.940874][ T7301] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.079610][ T10] usb 1-1: can't set config #1, error -71 [ 199.120326][ T5833] Bluetooth: hci1: command tx timeout [ 199.220658][ T10] usb 1-1: USB disconnect, device number 7 [ 199.281806][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 199.460591][ T36] hsr_slave_0: left promiscuous mode [ 199.502630][ T36] hsr_slave_1: left promiscuous mode [ 199.508841][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.237232][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.287457][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.304279][ T5831] syz-executor: attempt to access beyond end of device [ 200.304279][ T5831] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.380501][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 200.380535][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 200.380551][ T5831] Call Trace: [ 200.380560][ T5831] [ 200.380571][ T5831] dump_stack_lvl+0xe8/0x150 [ 200.380613][ T5831] f2fs_handle_critical_error+0x37c/0x540 [ 200.380650][ T5831] f2fs_write_end_io+0xc1d/0xfd0 [ 200.380706][ T5831] __submit_merged_bio+0x256/0x650 [ 200.380740][ T5831] __submit_merged_write_cond+0x269/0x530 [ 200.380791][ T5831] f2fs_write_data_pages+0x280b/0x3360 [ 200.380859][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 200.380905][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.380935][ T5831] ? css_rstat_updated+0x23a/0x530 [ 200.381002][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381036][ T5831] ? rcu_is_watching+0x15/0xb0 [ 200.381071][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381101][ T5831] ? __lock_acquire+0x6b5/0x2cf0 [ 200.381151][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381181][ T5831] ? __lock_acquire+0x6b5/0x2cf0 [ 200.381220][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381249][ T5831] ? do_raw_spin_lock+0x12b/0x2f0 [ 200.381295][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381329][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381359][ T5831] ? do_raw_spin_unlock+0xf5/0x210 [ 200.381399][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 200.381431][ T5831] do_writepages+0x32e/0x550 [ 200.381462][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381495][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381529][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381559][ T5831] ? do_raw_spin_unlock+0xf5/0x210 [ 200.381603][ T5831] filemap_fdatawrite+0x1e9/0x2f0 [ 200.381638][ T5831] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 200.381714][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381746][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381781][ T5831] ? do_raw_spin_unlock+0xf5/0x210 [ 200.381825][ T5831] f2fs_sync_dirty_inodes+0x30e/0x810 [ 200.381875][ T5831] f2fs_write_checkpoint+0x9c6/0x2490 [ 200.381908][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.381937][ T5831] ? stack_depot_save_flags+0x33/0x810 [ 200.381997][ T5831] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 200.382073][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.382102][ T5831] ? kfree+0x1c1/0x610 [ 200.382134][ T5831] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 200.382179][ T5831] kill_f2fs_super+0x308/0x710 [ 200.382219][ T5831] ? __pfx_kill_f2fs_super+0x10/0x10 [ 200.382277][ T5831] deactivate_locked_super+0xbc/0x130 [ 200.382312][ T5831] cleanup_mnt+0x437/0x4d0 [ 200.382348][ T5831] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.382381][ T5831] task_work_run+0x1d9/0x270 [ 200.382426][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 200.382466][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.382507][ T5831] exit_to_user_mode_loop+0xed/0x480 [ 200.382533][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 200.382563][ T5831] ? rcu_is_watching+0x15/0xb0 [ 200.382598][ T5831] do_syscall_64+0x32d/0xf80 [ 200.382630][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.382656][ T5831] ? trace_irq_disable+0x37/0x100 [ 200.382698][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.382724][ T5831] RIP: 0033:0x7f6c5c79d1d7 [ 200.382747][ T5831] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 200.382769][ T5831] RSP: 002b:00007ffdcd91b628 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 200.382794][ T5831] RAX: 0000000000000000 RBX: 00007f6c5c831c3b RCX: 00007f6c5c79d1d7 [ 200.382812][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcd91b6e0 [ 200.382828][ T5831] RBP: 00007ffdcd91b6e0 R08: 00007ffdcd91c6e0 R09: 00000000ffffffff [ 200.382846][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdcd91c770 [ 200.382862][ T5831] R13: 00007f6c5c831c3b R14: 00000000000309e5 R15: 00007ffdcd91c7b0 [ 200.382900][ T5831] [ 200.383189][ T5831] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 200.608902][ T7336] loop5: detected capacity change from 0 to 256 [ 200.611756][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.707112][ T7336] FAT-fs (loop5): Directory bread(block 64) failed [ 200.820383][ T7336] FAT-fs (loop5): Directory bread(block 65) failed [ 200.827428][ T7336] FAT-fs (loop5): Directory bread(block 66) failed [ 200.881172][ T7336] FAT-fs (loop5): Directory bread(block 67) failed [ 201.095748][ T7339] overlayfs: missing 'lowerdir' [ 201.151822][ T7331] loop3: detected capacity change from 0 to 4096 [ 201.190678][ T5833] Bluetooth: hci1: command tx timeout [ 201.208396][ T36] veth1_macvtap: left promiscuous mode [ 201.222944][ T7331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.277234][ T36] veth0_macvtap: left promiscuous mode [ 201.306007][ T36] veth1_vlan: left promiscuous mode [ 201.307334][ T7336] FAT-fs (loop5): Directory bread(block 68) failed [ 201.357804][ T36] veth0_vlan: left promiscuous mode [ 201.410338][ T7336] FAT-fs (loop5): Directory bread(block 69) failed [ 201.416979][ T7336] FAT-fs (loop5): Directory bread(block 70) failed [ 201.450356][ T7336] FAT-fs (loop5): Directory bread(block 71) failed [ 201.458389][ T7336] FAT-fs (loop5): Directory bread(block 72) failed [ 201.476579][ T7336] FAT-fs (loop5): Directory bread(block 73) failed [ 201.846372][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.165145][ T7361] loop4: detected capacity change from 0 to 256 [ 202.601286][ T7365] : Can't lookup blockdev [ 203.395661][ T7368] overlayfs: failed to resolve './file0': -2 [ 203.701560][ T7361] FAT-fs (loop4): Directory bread(block 64) failed [ 203.708112][ T7361] FAT-fs (loop4): Directory bread(block 65) failed [ 204.200105][ T5835] Bluetooth: hci1: command tx timeout [ 204.210083][ T7361] FAT-fs (loop4): Directory bread(block 66) failed [ 204.221915][ T7361] FAT-fs (loop4): Directory bread(block 67) failed [ 204.228685][ T7361] FAT-fs (loop4): Directory bread(block 68) failed [ 204.230750][ T7369] loop5: detected capacity change from 0 to 1024 [ 204.242502][ T7369] EXT4-fs: Ignoring removed orlov option [ 205.196281][ T7361] FAT-fs (loop4): Directory bread(block 69) failed [ 205.218065][ T7361] FAT-fs (loop4): Directory bread(block 70) failed [ 205.320400][ T7369] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 205.352056][ T7361] FAT-fs (loop4): Directory bread(block 71) failed [ 206.220488][ T7361] FAT-fs (loop4): Directory bread(block 72) failed [ 206.240497][ T7361] FAT-fs (loop4): Directory bread(block 73) failed [ 207.417330][ T36] team0 (unregistering): Port device team_slave_1 removed [ 207.447286][ T36] team0 (unregistering): Port device team_slave_0 removed [ 208.478857][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 208.661373][ T7252] chnl_net:caif_netlink_parms(): no params data found [ 209.133064][ T7401] overlayfs: missing 'lowerdir' [ 209.740332][ T5925] IPVS: starting estimator thread 0... [ 209.748818][ T7398] IPVS: fo: FWM 3 0x00000003 - no destination available [ 209.840414][ T7403] IPVS: using max 25 ests per chain, 60000 per kthread [ 210.799819][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.807099][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.814719][ T7252] bridge_slave_0: entered allmulticast mode [ 210.844286][ T7252] bridge_slave_0: entered promiscuous mode [ 210.880175][ T7421] loop3: detected capacity change from 0 to 256 [ 210.889311][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.950523][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.957781][ T7252] bridge_slave_1: entered allmulticast mode [ 211.006658][ T7421] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 211.090876][ T7252] bridge_slave_1: entered promiscuous mode [ 211.229740][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'. [ 211.425620][ T7252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.505477][ T7252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.520560][ T7436] loop1: detected capacity change from 0 to 16 [ 211.558654][ T7436] erofs (device loop1): mounted with root inode @ nid 36. [ 211.764199][ T7252] team0: Port device team_slave_0 added [ 211.794831][ T7252] team0: Port device team_slave_1 added [ 211.813978][ T7443] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 211.820505][ T7443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.884950][ T7443] vhci_hcd vhci_hcd.0: Device attached [ 211.978385][ T7252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.004327][ T7252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.053131][ T7449] loop3: detected capacity change from 0 to 512 [ 212.106373][ T7449] EXT4-fs: Ignoring removed bh option [ 212.131490][ T7444] vhci_hcd: connection closed [ 212.133224][ T13] vhci_hcd vhci_hcd.0: stop threads [ 212.164983][ T7252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.169050][ T5980] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 212.180610][ T7252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.213863][ T7252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.215454][ T7449] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 212.241968][ T13] vhci_hcd vhci_hcd.0: release socket [ 212.299095][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 212.356941][ T7252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.386157][ T7449] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.451: corrupted in-inode xattr: e_value size too large [ 212.410698][ T7449] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.420274][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 212.435869][ C0] EXT4-fs (loop3): initial error at time 1771012047: ext4_iget_extra_inode:5025: inode 15 [ 212.445914][ C0] EXT4-fs (loop3): last error at time 1771012047: ext4_iget_extra_inode:5025: inode 15 [ 212.472360][ T7449] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.451: couldn't read orphan inode 15 (err -117) [ 212.502786][ T7449] loop3: lost filesystem error report for type 5 error -117 [ 212.537661][ T7449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.617293][ T7252] hsr_slave_0: entered promiscuous mode [ 212.631614][ T7252] hsr_slave_1: entered promiscuous mode [ 212.638090][ T7252] debugfs: 'hsr0' already exists in 'hsr' [ 212.664871][ T7449] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.451: corrupted in-inode xattr: e_value size too large [ 212.710374][ T7252] Cannot create hsr debugfs directory [ 213.350736][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 213.860302][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 213.881434][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.900292][ T5925] usb 1-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 214.114473][ T7252] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.136767][ T5925] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 214.147795][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.181567][ T5925] usb 1-1: config 1 interface 0 has no altsetting 0 [ 214.185252][ T7252] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.189593][ T5925] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=ad.f4 [ 214.267468][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 214.475136][ T5925] usb 1-1: SerialNumber: syz [ 214.867717][ T7486] loop3: detected capacity change from 0 to 2048 [ 214.888578][ T7486] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 214.905735][ T7486] UDF-fs: Scanning with blocksize 512 failed [ 214.919859][ T7486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.083725][ T7252] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 215.821662][ T7252] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.864202][ T5925] usb 1-1: USB disconnect, device number 8 [ 215.890377][ T5995] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 215.956084][ T7502] loop1: detected capacity change from 0 to 8 [ 215.986314][ T7503] loop5: detected capacity change from 0 to 128 [ 216.066452][ T7503] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.095009][ T7503] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.107414][ T5995] usb 4-1: config 0 has no interfaces? [ 216.122785][ T5995] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.146346][ T5995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.155056][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 216.155515][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 216.166167][ T5838] Bluetooth: hci5: command 0x0405 tx timeout [ 216.167056][ T5135] Bluetooth: hci2: command 0x0406 tx timeout [ 216.173072][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 216.180859][ T5995] usb 4-1: Product: syz [ 216.190115][ T5995] usb 4-1: Manufacturer: syz [ 217.550352][ T5980] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 217.643308][ T5995] usb 4-1: SerialNumber: syz [ 218.021183][ T5995] usb 4-1: config 0 descriptor?? [ 218.139540][ T5995] usb 4-1: can't set config #0, error -71 [ 218.151173][ T5995] usb 4-1: USB disconnect, device number 5 [ 218.374673][ T7252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.497569][ T7252] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.573049][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.580280][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.580855][ T7528] trusted_key: encrypted_key: insufficient parameters specified [ 218.647241][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.654448][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.714080][ T7534] netlink: 'syz.0.469': attribute type 1 has an invalid length. [ 218.768760][ T7534] netlink: 64475 bytes leftover after parsing attributes in process `syz.0.469'. [ 218.847092][ T7252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.012927][ T7552] loop1: detected capacity change from 0 to 128 [ 221.075969][ T7552] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 221.502051][ T7563] loop0: detected capacity change from 0 to 512 [ 221.516140][ T7563] EXT4-fs (loop0): Test dummy encryption mode enabled [ 221.523115][ T7563] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 221.764674][ T7552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.778955][ T7563] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 221.787186][ T7563] EXT4-fs (loop0): orphan cleanup on readonly fs [ 221.795202][ T7563] EXT4-fs (loop0): 1 orphan inode deleted [ 221.807096][ T7563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 221.902080][ T7252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.106194][ T7573] loop3: detected capacity change from 0 to 1024 [ 222.235267][ T7567] loop4: detected capacity change from 0 to 8192 [ 222.530886][ T5888] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 222.691617][ T7567] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 223.413311][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 223.429835][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.442568][ T5888] usb 2-1: config 0 has no interfaces? [ 223.456541][ T5888] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 223.490299][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.577248][ T5888] usb 2-1: config 0 descriptor?? [ 223.707042][ T5820] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.753318][ T7252] veth0_vlan: entered promiscuous mode [ 223.774696][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.818343][ T7252] veth1_vlan: entered promiscuous mode [ 223.904322][ T5995] usb 2-1: USB disconnect, device number 8 [ 223.946936][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 223.947602][ T7252] veth0_macvtap: entered promiscuous mode [ 224.023540][ T7600] syz.0.483 uses obsolete (PF_INET,SOCK_PACKET) [ 224.042080][ T7599] loop5: detected capacity change from 0 to 256 [ 224.049851][ T7252] veth1_macvtap: entered promiscuous mode [ 224.146704][ T7252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.219151][ T7252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.260354][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 224.283357][ T3445] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.322656][ T3445] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.381765][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.390637][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 224.409357][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.418956][ T7604] loop5: detected capacity change from 0 to 1024 [ 224.458535][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.492487][ T7604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.511829][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.524176][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.537786][ T5888] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.547426][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.559206][ T5888] usb 5-1: config 0 descriptor?? [ 224.723545][ T7610] loop0: detected capacity change from 0 to 1024 [ 224.782707][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.809610][ T7610] EXT4-fs: inline encryption not supported [ 224.861165][ T7610] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 224.883356][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.900404][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.071865][ T7610] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.486: lblock 2 mapped to illegal pblock 2 (length 1) [ 225.089697][ T7610] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 225.090260][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 225.105867][ C0] EXT4-fs (loop0): initial error at time 1771012060: ext4_map_blocks:776: inode 3: block 2 [ 225.115905][ C0] EXT4-fs (loop0): last error at time 1771012060: ext4_map_blocks:776: inode 3: block 2 [ 225.144406][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.154319][ T7610] EXT4-fs (loop0): Remounting filesystem read-only [ 225.173043][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.203812][ T7610] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 225.231166][ T5888] usbhid 5-1:0.0: can't add hid device: -71 [ 225.268224][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 225.288614][ T7610] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 225.325852][ T5888] usb 5-1: USB disconnect, device number 7 [ 225.355231][ T7610] EXT4-fs (loop0): 1 orphan inode deleted [ 225.409373][ T7621] loop5: detected capacity change from 0 to 1024 [ 225.418782][ T7610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.436329][ T5889] IPVS: starting estimator thread 0... [ 225.445014][ T7620] IPVS: fo: FWM 3 0x00000003 - no destination available [ 225.490922][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 225.590877][ T7622] IPVS: using max 24 ests per chain, 57600 per kthread [ 226.838079][ T3445] hfsplus: b-tree write err: -5, ino 8 [ 226.879013][ T7635] loop1: detected capacity change from 0 to 512 [ 226.951610][ T7635] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.490: bad orphan inode 13 [ 227.007912][ T7639] loop4: detected capacity change from 0 to 512 [ 227.016130][ T7635] loop1: lost filesystem error report for type 5 error -117 [ 227.030258][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 227.043980][ C0] EXT4-fs (loop1): initial error at time 1771012062: ext4_orphan_get:1417 [ 227.052542][ C0] EXT4-fs (loop1): last error at time 1771012062: ext4_orphan_get:1417 [ 227.060120][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.063205][ T7635] ext4_test_bit(bit=12, block=4) = 1 [ 227.102080][ T7635] is_bad_inode(inode)=0 [ 227.106356][ T7635] NEXT_ORPHAN(inode)=0 [ 227.112544][ T7639] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61410000 (sector = 1) [ 227.141032][ T7639] FAT-fs (loop4): Directory bread(block 199916) failed [ 227.150459][ T7635] max_ino=32 [ 227.157494][ T7635] i_nlink=1 [ 227.164288][ T7635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.180598][ T7639] FAT-fs (loop4): Directory bread(block 199917) failed [ 227.198153][ T7639] FAT-fs (loop4): Directory bread(block 199918) failed [ 227.238712][ T7639] FAT-fs (loop4): Directory bread(block 199919) failed [ 227.269601][ T7635] EXT4-fs warning (device loop1): dx_probe:813: inode #2: comm syz.1.490: Hash code is SIPHASH, but hash not in dirent [ 227.303210][ T7639] FAT-fs (loop4): Directory bread(block 199920) failed [ 227.330971][ T7639] FAT-fs (loop4): Directory bread(block 199921) failed [ 227.338929][ T7635] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.490: Corrupt directory, running e2fsck is recommended [ 227.360096][ T7639] FAT-fs (loop4): Directory bread(block 199922) failed [ 227.373743][ T7639] FAT-fs (loop4): Directory bread(block 199923) failed [ 227.390611][ T7635] EXT4-fs warning (device loop1): dx_probe:813: inode #2: comm syz.1.490: Hash code is SIPHASH, but hash not in dirent [ 227.422065][ T7635] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.490: Corrupt directory, running e2fsck is recommended [ 227.445506][ T7639] FAT-fs (loop4): Directory bread(block 199916) failed [ 227.638938][ T7639] FAT-fs (loop4): Directory bread(block 199917) failed [ 227.651584][ T7635] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.490: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 229.505969][ T33] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61410000 (sector = 1) [ 230.049660][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.091656][ T7691] Bluetooth: MGMT ver 1.23 [ 231.210646][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 231.359630][ T7709] loop6: detected capacity change from 0 to 2048 [ 231.415278][ T7709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.519287][ T7722] loop3: detected capacity change from 0 to 1024 [ 232.822620][ T7722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.131250][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.510'. [ 234.928836][ T7722] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4224: comm syz.3.506: Allocating blocks 497-513 which overlap fs metadata [ 234.952684][ T7741] loop5: detected capacity change from 0 to 512 [ 235.259714][ T7722] EXT4-fs (loop3): pa ffff888035d38740: logic 256, phys. 385, len 8 [ 235.268159][ T7722] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5467: group 0, free 0, pa_free 1 [ 235.381973][ T7754] loop4: detected capacity change from 0 to 8192 [ 235.496064][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.313489][ T7802] loop3: detected capacity change from 0 to 2048 [ 236.500396][ T7802] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.630512][ T7813] loop5: detected capacity change from 0 to 128 [ 236.633392][ T7810] warning: `syz.0.522' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 236.687557][ T7813] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 236.908260][ T7742] IPVS: fo: FWM 3 0x00000003 - no destination available [ 236.916657][ T5925] IPVS: starting estimator thread 0... [ 236.980456][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 237.020388][ T7821] IPVS: using max 25 ests per chain, 60000 per kthread [ 237.196472][ T7828] devpts: Bad value for 'max' [ 237.243010][ T7830] netlink: 'syz.5.528': attribute type 1 has an invalid length. [ 237.277373][ T7830] netlink: 64475 bytes leftover after parsing attributes in process `syz.5.528'. [ 237.758635][ T7848] loop5: detected capacity change from 0 to 128 [ 238.273629][ T7856] loop0: detected capacity change from 0 to 256 [ 238.303246][ T7856] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.339910][ T7856] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 238.705900][ T7872] loop5: detected capacity change from 0 to 256 [ 238.730486][ T7856] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 238.783190][ T7876] loop6: detected capacity change from 0 to 1024 [ 238.851227][ T7856] exFAT-fs (loop0): failed to load alloc-bitmap [ 238.890414][ T5925] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 238.909590][ T7856] exFAT-fs (loop0): failed to recognize exfat type [ 238.922467][ T7876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 239.042453][ T7876] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.054592][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.077349][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 239.111600][ T7882] loop1: detected capacity change from 0 to 1024 [ 239.118824][ T7882] EXT4-fs: inline encryption not supported [ 239.144871][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 239.154745][ T7882] EXT4-fs: Ignoring removed i_version option [ 239.192267][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.215662][ T7882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.279112][ T5925] usb 5-1: config 0 descriptor?? [ 239.287902][ T7870] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.392783][ T7876] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.540: bg 0: block 112: padding at end of block bitmap is not set [ 239.486012][ T7882] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 239.552154][ T7876] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 117 [ 239.567765][ T7898] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.540: lblock 0 mapped to illegal pblock 0 (length 6) [ 239.625809][ T7876] EXT4-fs (loop6): This should not happen!! Data will be lost [ 239.625809][ T7876] [ 239.726298][ T7895] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.540: lblock 0 mapped to illegal pblock 0 (length 1) [ 239.825817][ T7904] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm syz.6.540: lblock 3 mapped to illegal pblock 3 (length 1) [ 239.844696][ T5925] logitech 0003:046D:C50C.000B: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.4-1/input0 [ 239.866255][ T7905] loop5: detected capacity change from 0 to 512 [ 239.923741][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.090162][ T5925] usb 5-1: USB disconnect, device number 8 [ 240.107627][ T7905] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 240.210068][ T7905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.225235][ T7905] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.350022][ T7918] loop0: detected capacity change from 0 to 512 [ 240.358455][ T7918] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 240.368390][ T7918] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 241.363353][ T7252] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 241.437228][ T7912] fido_id[7912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 241.531232][ T7924] loop3: detected capacity change from 0 to 164 [ 241.550212][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.560958][ T49] Quota error (device loop5): remove_tree: Cycle in quota tree detected: block 5 index 0 [ 241.693998][ T49] EXT4-fs error (device loop5): ext4_release_dquot:7039: comm kworker/u8:3: Failed to release dquot type 1 [ 241.756822][ T49] loop5: lost filesystem error report for type 5 error -5 [ 241.762863][ T7928] loop4: detected capacity change from 0 to 128 [ 241.908961][ T7928] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 242.023083][ T7928] FAT-fs (loop4): Filesystem has been set read-only [ 242.085971][ T7936] loop0: detected capacity change from 0 to 8 [ 242.689121][ T7936] SQUASHFS error: lzo decompression failed, data probably corrupt [ 242.930472][ T7936] SQUASHFS error: Failed to read block 0x144: -5 [ 242.979111][ T7936] SQUASHFS error: Unable to read metadata cache entry [142] [ 243.203065][ T7936] SQUASHFS error: Unable to read inode 0x11f [ 243.241245][ T7952] loop5: detected capacity change from 0 to 128 [ 243.255923][ T7956] loop3: detected capacity change from 0 to 1024 [ 243.341465][ T7959] loop4: detected capacity change from 0 to 512 [ 243.399597][ T7960] loop1: detected capacity change from 0 to 2048 [ 243.420312][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 243.420972][ T7952] vfat: Unknown parameter '18446744073709551615' [ 243.473554][ T7959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.523044][ T7956] hfsplus: xattr search failed [ 243.596006][ T7959] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.638671][ T7960] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.702145][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.760278][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.770042][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.870404][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.925831][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.988835][ T10] usb 7-1: config 0 descriptor?? [ 244.033805][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.973742][ T7979] loop1: detected capacity change from 0 to 512 [ 244.974408][ T10] hid_parser_main: 33 callbacks suppressed [ 244.974428][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 244.995582][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 245.007163][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 245.025031][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 245.052998][ T7979] EXT4-fs (loop1): Test dummy encryption mode enabled [ 245.060282][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 245.068531][ T7979] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.091901][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 245.237828][ T7979] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.566: bad orphan inode 131083 [ 245.290762][ T7979] loop1: lost filesystem error report for type 5 error -117 [ 245.299812][ T7979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.340449][ T7987] loop4: detected capacity change from 0 to 512 [ 245.364097][ T10] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 245.403536][ T7987] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.421574][ T7989] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 245.467326][ T10] usb 7-1: USB disconnect, device number 2 [ 245.487084][ T7989] netlink: 64475 bytes leftover after parsing attributes in process `syz.3.568'. [ 245.523043][ T7987] EXT4-fs (loop4): 1 truncate cleaned up [ 245.548221][ T7987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.735135][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.843237][ T7996] fido_id[7996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 245.918190][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.947183][ T8011] netlink: 104 bytes leftover after parsing attributes in process `syz.3.575'. [ 245.992967][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.573'. [ 247.138044][ T8024] loop6: detected capacity change from 0 to 256 [ 247.345675][ T8024] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 247.437438][ T8034] loop4: detected capacity change from 0 to 512 [ 247.883277][ T8034] EXT4-fs: Ignoring removed i_version option [ 248.103434][ T8034] EXT4-fs error (device loop4): ext4_get_journal_inode:5865: comm syz.4.580: inode #196608: comm syz.4.580: iget: illegal inode # [ 248.252501][ T8034] loop4: lost filesystem error report for type 5 error -117 [ 248.257479][ T8034] EXT4-fs (loop4): no journal found [ 248.264886][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 248.264908][ C1] EXT4-fs (loop4): initial error at time 1771012083: ext4_get_journal_inode:5865 [ 248.264941][ C1] EXT4-fs (loop4): last error at time 1771012083: ext4_get_journal_inode:5865 [ 248.290558][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 248.404269][ T8034] EXT4-fs (loop4): can't get journal size [ 248.466383][ T8034] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 248.557797][ T8034] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 248.576211][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.590579][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.274549][ T8034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.333056][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.390425][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.398576][ T10] usb 4-1: SerialNumber: syz [ 249.578982][ T8076] loop0: detected capacity change from 0 to 128 [ 250.347983][ T10] usb 4-1: 0:2 : does not exist [ 250.748518][ T10] usb 4-1: USB disconnect, device number 6 [ 250.806472][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.813783][ T7264] udevd[7264]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.947865][ T8095] loop0: detected capacity change from 0 to 512 [ 251.057263][ T8085] loop5: detected capacity change from 0 to 2048 [ 251.092293][ T8095] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 251.108804][ T8085] EXT4-fs: Ignoring removed oldalloc option [ 251.119509][ T8095] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.587: corrupted inode contents [ 251.131432][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 251.131457][ C1] EXT4-fs (loop0): initial error at time 1771012086: mb_free_blocks:2047: inode 11: block 64 [ 251.131507][ C1] EXT4-fs (loop0): last error at time 1771012086: mb_free_blocks:2047: inode 11: block 64 [ 251.180618][ T8095] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 251.187147][ T8095] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #11: comm syz.0.587: mark_inode_dirty error [ 251.804072][ T8095] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 251.821516][ T8095] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.587: invalid indirect mapped block 1 (level 1) [ 251.891900][ T8101] loop4: detected capacity change from 0 to 128 [ 251.911855][ T8104] loop6: detected capacity change from 0 to 8 [ 251.923731][ T8095] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 251.929127][ T8095] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.587: corrupted inode contents [ 251.935665][ T8106] loop3: detected capacity change from 0 to 128 [ 251.960295][ T8085] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 251.960359][ T8095] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 252.002072][ T8101] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 252.061112][ T8101] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.075408][ T8095] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 252.094168][ T8085] System zones: 0-7 [ 252.102876][ T8104] SQUASHFS error: Failed to read block 0x2d7: -5 [ 252.137242][ T8095] loop0: lost filesystem error report for type 5 error -117 [ 252.141615][ T8101] ext2 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.167515][ T8095] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #11: comm syz.0.587: corrupted inode contents [ 252.194762][ T8104] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 252.213198][ T8085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.223872][ T30] audit: type=1804 audit(1771012087.321:8): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.589" name="/newroot/99/file0/bus" dev="loop3" ino=1048666 res=1 errno=0 [ 252.237323][ T8095] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 252.291937][ T8095] EXT4-fs error (device loop0): ext4_truncate:4587: inode #11: comm syz.0.587: mark_inode_dirty error [ 252.334526][ T8085] EXT4-fs (loop5): shut down requested (1) [ 252.365208][ T8106] syz.3.589: attempt to access beyond end of device [ 252.365208][ T8106] loop3: rw=8390657, sector=162, nr_sectors = 1 limit=128 [ 252.424404][ T8095] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 252.430394][ T8095] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 252.435642][ T8117] loop1: detected capacity change from 0 to 1764 [ 252.439542][ T8095] loop0: lost filesystem error report for type 5 error -117 [ 252.460525][ T8106] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 252.477069][ T5825] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.511700][ T8106] syz.3.589: attempt to access beyond end of device [ 252.511700][ T8106] loop3: rw=8390657, sector=162, nr_sectors = 1 limit=128 [ 252.525464][ T8095] EXT4-fs (loop0): 1 truncate cleaned up [ 252.561819][ T8117] iso9660: Bad value for 'gid' [ 252.566614][ T8117] iso9660: Bad value for 'gid' [ 252.591640][ T8106] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 252.626920][ T8095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.642488][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.668665][ T8095] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.587: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 252.764304][ T8125] loop4: detected capacity change from 0 to 128 [ 252.817860][ T8124] loop1: detected capacity change from 0 to 1024 [ 252.818815][ T8124] EXT4-fs: Ignoring removed i_version option [ 252.852827][ T8124] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 252.935224][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.988249][ T8124] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (40000) [ 256.614722][ T8155] loop1: detected capacity change from 0 to 1024 [ 256.675983][ T8158] loop3: detected capacity change from 0 to 128 [ 256.687636][ T8158] vfat: Unknown parameter '18446744073709551615' [ 256.746867][ T8155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.998260][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.340409][ T6022] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 257.670721][ T30] audit: type=1107 audit(1771012092.731:9): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JF4 07VC0/"XHO92_=$/ԧcD>Fd'ۇOz|`DY=nXBuї6;kћhfp9ONx}}gfƲ9՚gZ91p݈As(rw'm}.ʺxU [ 257.670721][ T30] *宥BOiPV"' [ 258.840313][ T6022] usb 7-1: Using ep0 maxpacket: 32 [ 259.021056][ T6022] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 259.029807][ T6022] usb 7-1: config 0 has no interface number 0 [ 259.079076][ T6022] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 259.085802][ T8181] loop1: detected capacity change from 0 to 128 [ 259.135667][ T6022] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 259.151577][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.152164][ T8181] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.174032][ T8181] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.191657][ T6022] usb 7-1: Product: syz [ 259.195826][ T6022] usb 7-1: Manufacturer: syz [ 259.225443][ T6022] usb 7-1: SerialNumber: syz [ 259.242266][ T6022] usb 7-1: config 0 descriptor?? [ 259.248059][ T8171] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 259.686484][ T8171] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 259.716553][ T5831] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.727743][ T8186] loop3: detected capacity change from 0 to 1024 [ 260.076166][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.082887][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.521782][ T6022] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 260.543652][ T6022] asix 7-1:0.188: probe with driver asix failed with error -32 [ 260.602083][ T8186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.654168][ T8195] loop4: detected capacity change from 0 to 256 [ 260.834150][ T8197] overlayfs: missing 'lowerdir' [ 261.136786][ T8195] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 261.838584][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.987530][ T5995] usb 7-1: USB disconnect, device number 3 [ 263.468824][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 263.478886][ T8217] netlink: 'syz.0.617': attribute type 2 has an invalid length. [ 264.486193][ T8214] loop3: detected capacity change from 0 to 128 [ 265.470209][ T8214] syzkaller0: entered promiscuous mode [ 265.640728][ T8214] syzkaller0: entered allmulticast mode [ 268.324063][ T8237] loop0: detected capacity change from 0 to 4096 [ 268.381720][ T8237] EXT4-fs: Ignoring removed oldalloc option [ 268.465494][ T8237] EXT4-fs (loop0): Test dummy encryption mode enabled [ 268.531089][ T8237] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 268.700385][ T8237] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 268.877226][ T8251] loop0: detected capacity change from 0 to 512 [ 268.957675][ T8249] loop1: detected capacity change from 0 to 512 [ 269.034647][ T8255] loop3: detected capacity change from 0 to 1024 [ 269.049342][ T8249] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 269.105108][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.116087][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.124318][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.142949][ T8249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.159672][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.183880][ T8249] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.184519][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.240890][ T8255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 269.255317][ T8251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.280483][ T8251] ext4 filesystem being mounted at /85/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.294916][ T8255] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.343854][ T30] audit: type=1800 audit(1771012104.451:10): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.623" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 269.434172][ T8255] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.629: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.490721][ T8261] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 269.522577][ T8255] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 269.560459][ T8255] EXT4-fs (loop3): This should not happen!! Data will be lost [ 269.560459][ T8255] [ 269.602253][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.602369][ T8267] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.629: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.648966][ T8267] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 4: comm syz.3.629: lblock 4 mapped to illegal pblock 4 (length 1) [ 269.731310][ T8267] EXT4-fs error (device loop3): ext4_ext_remove_space:2956: inode #15: comm syz.3.629: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 269.796322][ T8267] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 3: comm syz.3.629: lblock 3 mapped to illegal pblock 3 (length 1) [ 269.813227][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.919041][ T8273] netlink: 'syz.4.632': attribute type 1 has an invalid length. [ 269.930425][ T8273] netlink: 64475 bytes leftover after parsing attributes in process `syz.4.632'. [ 270.028308][ T8267] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 270.079195][ T8267] EXT4-fs (loop3): This should not happen!! Data will be lost [ 270.079195][ T8267] [ 271.091843][ T8283] openvswitch: netlink: Duplicate or invalid key (type 0). [ 271.110419][ T8283] openvswitch: netlink: Actions may not be safe on all matching packets [ 271.274477][ T51] Bluetooth: hci6: command tx timeout [ 271.399346][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 272.393205][ T8279] batman_adv: batadv0: Adding interface: dummy0 [ 272.399481][ T8279] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.485570][ T8279] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 273.162359][ T5889] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 273.353184][ T51] Bluetooth: hci6: command tx timeout [ 273.358750][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.387177][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.410839][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.446503][ T5889] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.680438][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.712499][ T5889] usb 2-1: config 0 descriptor?? [ 274.163890][ T5889] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 274.417774][ T5889] usb 2-1: USB disconnect, device number 9 [ 274.612707][ T8308] fido_id[8308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 274.929852][ T7676] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.110666][ T8322] netlink: 'syz.1.644': attribute type 1 has an invalid length. [ 275.161218][ T8322] netlink: 64475 bytes leftover after parsing attributes in process `syz.1.644'. [ 275.241378][ T8258] chnl_net:caif_netlink_parms(): no params data found [ 275.388183][ T7676] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.390464][ T8329] netlink: 'syz.1.647': attribute type 2 has an invalid length. [ 275.431938][ T51] Bluetooth: hci6: command tx timeout [ 275.574644][ T8316] loop0: detected capacity change from 0 to 256 [ 275.632449][ T7676] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.847536][ T7676] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.861193][ T8340] netlink: 'syz.6.648': attribute type 4 has an invalid length. [ 276.089116][ T8258] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.140566][ T8258] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.147829][ T8258] bridge_slave_0: entered allmulticast mode [ 276.418173][ T8258] bridge_slave_0: entered promiscuous mode [ 277.389272][ T8258] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.396680][ T8258] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.410638][ T8258] bridge_slave_1: entered allmulticast mode [ 277.510397][ T51] Bluetooth: hci6: command tx timeout [ 278.180545][ T8258] bridge_slave_1: entered promiscuous mode [ 278.381746][ T8353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 278.548759][ T8258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.620074][ T8258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.672363][ T7676] bridge_slave_1: left allmulticast mode [ 278.687783][ T7676] bridge_slave_1: left promiscuous mode [ 278.706497][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.736811][ T7676] bridge_slave_0: left allmulticast mode [ 278.750285][ T7676] bridge_slave_0: left promiscuous mode [ 278.780381][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.923199][ T8343] loop6: detected capacity change from 0 to 32768 [ 278.976940][ T8343] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.650 (8343) [ 279.042528][ T8343] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 279.061090][ T8345] loop1: detected capacity change from 0 to 32768 [ 279.070518][ T8343] BTRFS info (device loop6): using blake2b checksum algorithm [ 279.090384][ T8345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.651 (8345) [ 279.151755][ T8345] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 279.200326][ T8343] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 279.206660][ T8343] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 279.222736][ T8345] BTRFS info (device loop1): using crc32c checksum algorithm [ 279.277312][ T8343] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 279.277735][ T8343] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 279.380667][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 279.381121][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 279.381430][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 279.381735][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 279.382028][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 279.382307][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 279.382576][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 279.382852][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 279.383142][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 279.383470][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 279.383775][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 279.384069][ T8345] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 279.385644][ T8345] BTRFS error (device loop1): open_ctree failed: -12 [ 279.533580][ T8343] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 279.652244][ T8343] BTRFS error (device loop6): open_ctree failed: -12 [ 279.947122][ T8392] trusted_key: syz.1.656 sent an empty control message without MSG_MORE. [ 280.019071][ T8356] loop3: detected capacity change from 0 to 32768 [ 280.036950][ T7676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.046585][ T8356] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.654 (8356) [ 280.091051][ T7676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.120174][ T7676] bond0 (unregistering): Released all slaves [ 280.192531][ T8356] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.205059][ T8356] BTRFS info (device loop3): using sha256 checksum algorithm [ 280.270897][ T8396] loop6: detected capacity change from 0 to 164 [ 280.422693][ T8396] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 280.541826][ T8356] BTRFS info (device loop3): enabling ssd optimizations [ 280.621418][ T8258] team0: Port device team_slave_0 added [ 280.624116][ T8356] BTRFS info (device loop3): turning on async discard [ 280.800918][ T8356] BTRFS info (device loop3): enabling free space tree [ 280.915934][ T8258] team0: Port device team_slave_1 added [ 281.454332][ T8258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.497120][ T8258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.598612][ T8258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.631956][ T8258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.638912][ T8258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.709492][ T8258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.286903][ T8414] loop1: detected capacity change from 0 to 32768 [ 282.290136][ T7676] hsr_slave_0: left promiscuous mode [ 282.355790][ T7676] hsr_slave_1: left promiscuous mode [ 282.358633][ T8414] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 282.392398][ T7676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.448429][ T8414] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 282.450276][ T7676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.514817][ T7676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.568350][ T7676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.602520][ T5822] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.760428][ T8414] XFS (loop1): Ending clean mount [ 282.793802][ T7676] veth1_macvtap: left promiscuous mode [ 282.799347][ T7676] veth0_macvtap: left promiscuous mode [ 282.850037][ T8414] XFS (loop1): Quotacheck needed: Please wait. [ 282.859504][ T7676] veth1_vlan: left promiscuous mode [ 282.906894][ T7676] veth0_vlan: left promiscuous mode [ 282.959410][ T8414] XFS (loop1): Quotacheck: Done. [ 284.096452][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.666'. [ 284.489228][ T5831] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 285.112742][ T7676] team0 (unregistering): Port device team_slave_1 removed [ 285.213736][ T7676] team0 (unregistering): Port device team_slave_0 removed [ 285.607453][ T8476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.719203][ T8477] netlink: 'syz.1.667': attribute type 10 has an invalid length. [ 285.926559][ T8476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.277238][ T8258] hsr_slave_0: entered promiscuous mode [ 286.292566][ T8481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.303781][ T8258] hsr_slave_1: entered promiscuous mode [ 286.334385][ T8258] debugfs: 'hsr0' already exists in 'hsr' [ 286.340150][ T8258] Cannot create hsr debugfs directory [ 286.394889][ T8465] netlink: 6 bytes leftover after parsing attributes in process `syz.3.663'. [ 286.416348][ T8465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.457929][ T8477] syz_tun: entered promiscuous mode [ 286.480646][ T8477] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 286.492609][ T7520] bond0: (slave bond_slave_0): interface is now down [ 286.511275][ T7520] bond0: (slave bond_slave_1): interface is now down [ 286.523062][ T7520] bond0: (slave syz_tun): interface is now down [ 286.561470][ T7799] bond0: (slave bond_slave_0): interface is now down [ 286.590289][ T7799] bond0: (slave bond_slave_1): interface is now down [ 286.596995][ T7799] bond0: (slave syz_tun): interface is now down [ 286.640506][ T7799] bond0: (slave bond_slave_0): interface is now down [ 286.657750][ T7799] bond0: (slave bond_slave_1): interface is now down [ 286.674734][ T7799] bond0: (slave syz_tun): interface is now down [ 286.710530][ T7799] bond0: (slave bond_slave_0): interface is now down [ 286.719653][ T7799] bond0: (slave bond_slave_1): interface is now down [ 286.736359][ T7799] bond0: (slave syz_tun): interface is now down [ 286.777967][ T7799] bond0: (slave bond_slave_0): interface is now down [ 286.803679][ T7799] bond0: (slave bond_slave_1): interface is now down [ 286.827116][ T7799] bond0: (slave syz_tun): interface is now down [ 286.860369][ T7799] bond0: (slave bond_slave_0): interface is now down [ 286.889416][ T7799] bond0: (slave bond_slave_1): interface is now down [ 286.918955][ T7799] bond0: (slave syz_tun): interface is now down [ 286.962554][ T7799] bond0: (slave bond_slave_0): interface is now down [ 286.975969][ T7799] bond0: (slave bond_slave_1): interface is now down [ 287.003772][ T7799] bond0: (slave syz_tun): interface is now down [ 287.028215][ T7799] bond0: now running without any active interface! [ 287.154588][ T8258] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 287.216450][ T8258] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 287.237565][ T30] audit: type=1800 audit(1771012122.351:11): pid=8485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.671" name="/" dev="fuse" ino=4 res=0 errno=0 [ 287.344213][ T8502] loop1: detected capacity change from 0 to 2048 [ 287.375908][ T8487] loop0: detected capacity change from 0 to 32768 [ 287.386056][ T8258] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 287.444884][ T8502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.502205][ T8258] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 287.646420][ T8489] loop3: detected capacity change from 0 to 40427 [ 287.682264][ T8487] loop0: detected capacity change from 32768 to 0 [ 287.684905][ C0] I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 287.708451][ T8489] F2FS-fs: heap/no_heap options were deprecated [ 287.730083][ T8517] metapage_write_end_io: I/O error [ 287.776118][ T8517] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 287.776118][ T8517] [ 287.795254][ T8489] F2FS-fs (loop3): build fault injection rate: 19 [ 287.852034][ T8520] loop6: detected capacity change from 0 to 164 [ 287.858461][ T8489] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 287.885871][ T8517] ERROR: (device loop0): remounting filesystem as read-only [ 287.911088][ T8489] F2FS-fs (loop3): invalid crc value [ 287.918643][ T8517] lbmIODone: I/O error in JFS log [ 287.927155][ T8520] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 287.943975][ T8517] lbmIODone: I/O error in JFS log [ 287.949396][ T8517] metapage_write_end_io: I/O error [ 287.998620][ T8258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.036894][ T8258] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.044937][ T8517] ERROR: (device loop0): force_metapage: metapage_write_one() failed [ 288.044937][ T8517] [ 288.067977][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.075536][ T7520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.086524][ T8517] Read error 10 at 0x1a000 [ 288.092014][ T8489] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x756/0x1260 [ 288.103615][ T8517] read_mapping_page failed! [ 288.108413][ T8517] metapage_write_end_io: I/O error [ 288.118415][ T7520] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.125520][ T7520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.145289][ T8517] metapage_write_end_io: I/O error [ 288.182427][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.684196][ T8489] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 288.774144][ T8489] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 288.813731][ T8489] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 288.879663][ T5829] lbmIODone: I/O error in JFS log [ 288.906008][ T5829] metapage_write_end_io: I/O error [ 288.928191][ T8489] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x361/0xd80 [ 288.957556][ T5829] metapage_write_end_io: I/O error [ 288.983126][ T5829] metapage_write_end_io: I/O error [ 288.992014][ T8489] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80 [ 289.005484][ T5829] metapage_write_end_io: I/O error [ 289.022876][ T5829] metapage_write_end_io: I/O error [ 289.034997][ T5829] metapage_write_end_io: I/O error [ 289.052995][ T8489] syz.3.673: attempt to access beyond end of device [ 289.052995][ T8489] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 289.068657][ T5829] metapage_write_end_io: I/O error [ 289.078808][ T5829] metapage_write_end_io: I/O error [ 289.079738][ T7520] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.107482][ T5829] metapage_write_end_io: I/O error [ 289.130675][ T5829] metapage_write_end_io: I/O error [ 289.144625][ T8489] syz.3.673: attempt to access beyond end of device [ 289.144625][ T8489] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 289.145126][ T5829] metapage_write_end_io: I/O error [ 289.230429][ T8489] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of f2fs_get_read_data_folio+0x7dc/0x8d0 [ 289.241665][ T5829] metapage_write_end_io: I/O error [ 289.247390][ T5829] metapage_write_end_io: I/O error [ 289.291695][ T5829] metapage_write_end_io: I/O error [ 289.313303][ T7520] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.324338][ T5829] metapage_write_end_io: I/O error [ 289.362633][ T5829] metapage_write_end_io: I/O error [ 289.380043][ T5829] metapage_write_end_io: I/O error [ 289.416283][ T5822] syz-executor: attempt to access beyond end of device [ 289.416283][ T5822] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 289.448463][ T5829] lbmIODone: I/O error in JFS log [ 289.471708][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 289.471740][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 289.471756][ T5822] Call Trace: [ 289.471765][ T5822] [ 289.471775][ T5822] dump_stack_lvl+0xe8/0x150 [ 289.471816][ T5822] f2fs_handle_critical_error+0x37c/0x540 [ 289.471859][ T5822] f2fs_write_end_io+0xc1d/0xfd0 [ 289.471909][ T5822] __submit_merged_bio+0x256/0x650 [ 289.471943][ T5822] __submit_merged_write_cond+0x269/0x530 [ 289.471993][ T5822] f2fs_write_data_pages+0x280b/0x3360 [ 289.472061][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 289.472109][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472169][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472199][ T5822] ? kernel_text_address+0xa5/0xe0 [ 289.472228][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472258][ T5822] ? __lock_acquire+0x6b5/0x2cf0 [ 289.472304][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472334][ T5822] ? __lock_acquire+0x6b5/0x2cf0 [ 289.472372][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472402][ T5822] ? do_raw_spin_lock+0x12b/0x2f0 [ 289.472447][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472482][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472512][ T5822] ? do_raw_spin_unlock+0xf5/0x210 [ 289.472542][ T5829] lbmIODone: I/O error in JFS log [ 289.472551][ T5822] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 289.472582][ T5822] do_writepages+0x32e/0x550 [ 289.472613][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472646][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472680][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472709][ T5822] ? do_raw_spin_unlock+0xf5/0x210 [ 289.472752][ T5822] filemap_fdatawrite+0x1e9/0x2f0 [ 289.472788][ T5822] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 289.472865][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472897][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.472932][ T5822] ? do_raw_spin_unlock+0xf5/0x210 [ 289.472976][ T5822] f2fs_sync_dirty_inodes+0x30e/0x810 [ 289.473025][ T5822] f2fs_write_checkpoint+0x9c6/0x2490 [ 289.473092][ T5822] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 289.473123][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.473213][ T5822] kill_f2fs_super+0x308/0x710 [ 289.473254][ T5822] ? __pfx_kill_f2fs_super+0x10/0x10 [ 289.473312][ T5822] deactivate_locked_super+0xbc/0x130 [ 289.473347][ T5822] cleanup_mnt+0x437/0x4d0 [ 289.473382][ T5822] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.473415][ T5822] task_work_run+0x1d9/0x270 [ 289.473459][ T5822] ? __pfx_task_work_run+0x10/0x10 [ 289.473499][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.473539][ T5822] exit_to_user_mode_loop+0xed/0x480 [ 289.473566][ T5822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 289.473594][ T5822] ? rcu_is_watching+0x15/0xb0 [ 289.473630][ T5822] do_syscall_64+0x32d/0xf80 [ 289.473661][ T5822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.473686][ T5822] ? trace_irq_disable+0x37/0x100 [ 289.473724][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.473749][ T5822] RIP: 0033:0x7f80c439d1d7 [ 289.473772][ T5822] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 289.473792][ T5822] RSP: 002b:00007ffc085b5c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 289.473818][ T5822] RAX: 0000000000000000 RBX: 00007f80c4431c3b RCX: 00007f80c439d1d7 [ 289.473835][ T5822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc085b5d10 [ 289.473855][ T5822] RBP: 00007ffc085b5d10 R08: 00007ffc085b6d10 R09: 00000000ffffffff [ 289.473872][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc085b6da0 [ 289.473888][ T5822] R13: 00007f80c4431c3b R14: 00000000000469b5 R15: 00007ffc085b6de0 [ 289.473927][ T5822] [ 289.473936][ T5822] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 289.512782][ T5829] lbmIODone: I/O error in JFS log [ 289.986893][ T5829] lmLogShutdown: exit(-5) [ 290.096622][ T5829] jfs_umount failed with return code -5 [ 290.299583][ T7520] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.022992][ T8548] loop4: detected capacity change from 0 to 1024 [ 292.142199][ T7520] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.248589][ T8258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.062616][ T7520] bridge_slave_1: left allmulticast mode [ 293.179289][ T7520] bridge_slave_1: left promiscuous mode [ 293.404769][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.587151][ T8563] loop3: detected capacity change from 0 to 2048 [ 293.638768][ T8563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.690744][ T7520] bridge_slave_0: left allmulticast mode [ 293.719998][ T7520] bridge_slave_0: left promiscuous mode [ 293.726239][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.974138][ T8578] loop4: detected capacity change from 0 to 128 [ 294.082506][ T8578] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.111740][ T8578] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.112969][ T8551] loop1: detected capacity change from 0 to 32768 [ 294.154014][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.178705][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.196695][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.197772][ T8551] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.682 (8551) [ 294.263376][ T8586] loop3: detected capacity change from 0 to 2048 [ 294.331283][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.339146][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.409925][ T8586] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.803565][ T8590] fscrypt (loop4, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 294.816112][ T8590] fscrypt (loop4, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 295.394120][ T8551] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 295.710448][ T8551] BTRFS info (device loop1): using crc32c checksum algorithm [ 295.731782][ T8551] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 295.733421][ T8551] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 295.780353][ T5826] Bluetooth: hci6: command 0x0405 tx timeout [ 295.855050][ T8551] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 295.855361][ T8551] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 295.906607][ T8551] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 295.971116][ T8551] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 295.997172][ T8551] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 296.023130][ T8551] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 296.071842][ T8551] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 296.110716][ T8551] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 296.162886][ T8551] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 296.220754][ T8551] BTRFS error (device loop1): open_ctree failed: -12 [ 296.340955][ T7520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.393076][ T7520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.435708][ T7520] bond0 (unregistering): Released all slaves [ 296.565560][ T51] Bluetooth: hci0: command tx timeout [ 297.998475][ T5825] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.113357][ T8258] veth0_vlan: entered promiscuous mode [ 298.407804][ T7520] hsr_slave_0: left promiscuous mode [ 298.428799][ T7520] hsr_slave_1: left promiscuous mode [ 298.443009][ T30] audit: type=1326 audit(1771012133.561:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8630 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5c79bf79 code=0x7fc00000 [ 298.446086][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.644284][ T51] Bluetooth: hci0: command tx timeout [ 299.422845][ T7520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.491927][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.499334][ T7520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.433463][ T8628] loop3: detected capacity change from 0 to 40427 [ 300.491637][ T8628] f2fs: Unknown parameter 'prjjquot-v' [ 300.720349][ T51] Bluetooth: hci0: command tx timeout [ 300.736828][ T7520] veth1_macvtap: left promiscuous mode [ 300.793161][ T7520] veth0_macvtap: left promiscuous mode [ 300.799004][ T7520] veth1_vlan: left promiscuous mode [ 300.804289][ T7520] veth0_vlan: left promiscuous mode [ 301.062508][ T6022] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 301.144556][ T8668] loop4: detected capacity change from 0 to 512 [ 301.155037][ T8668] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.179763][ T8668] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 301.213243][ T8668] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.702: attempt to clear invalid blocks 2 len 1 [ 301.231989][ T8668] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 301.232517][ T8668] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, [ 301.241704][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 301.241728][ C0] EXT4-fs (loop4): initial error at time 1771012136: ext4_clear_blocks:876: inode 13 [ 301.241766][ C0] EXT4-fs (loop4): last error at time 1771012136: ext4_clear_blocks:876: inode 13 [ 301.277788][ T8668] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 301.293069][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.293189][ T8668] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.702: invalid indirect mapped block 1819239214 (level 0) [ 301.321692][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.326666][ T8668] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 301.333398][ T8668] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.702: invalid indirect mapped block 1819239214 (level 1) [ 301.353792][ T6022] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 301.382031][ T8668] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 301.383370][ T6022] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.386719][ T8668] EXT4-fs (loop4): 1 truncate cleaned up [ 301.395752][ T6022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.439060][ T8668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.444842][ T6022] usb 2-1: config 0 descriptor?? [ 301.593163][ T7520] team0 (unregistering): Port device team_slave_1 removed [ 301.623107][ T7520] team0 (unregistering): Port device team_slave_0 removed [ 301.825367][ T8662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.913888][ T6022] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 301.957466][ T6022] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 302.053100][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.084274][ T6022] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 302.115868][ T8258] veth1_vlan: entered promiscuous mode [ 302.126316][ T6022] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 302.200403][ T6022] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 302.207840][ T6022] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 302.228027][ T8258] veth0_macvtap: entered promiscuous mode [ 302.237084][ T6022] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 302.267310][ T6022] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 302.284203][ T6022] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 302.294880][ T8258] veth1_macvtap: entered promiscuous mode [ 302.327027][ T8583] chnl_net:caif_netlink_parms(): no params data found [ 302.346854][ T6022] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 302.391663][ T6022] usb 2-1: USB disconnect, device number 10 [ 302.508672][ T8258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.690351][ T8680] fido_id[8680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 302.790336][ T51] Bluetooth: hci0: command tx timeout [ 302.871370][ T8258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.872228][ T8688] loop6: detected capacity change from 0 to 1024 [ 302.977361][ T30] audit: type=1800 audit(1771012138.081:13): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.706" name="bus" dev="loop6" ino=0 res=0 errno=0 [ 303.049415][ T8677] loop3: detected capacity change from 0 to 32768 [ 303.082407][ T7799] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.161189][ T8688] Trying to write to read-only block-device loop6 [ 303.174097][ T8677] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.703 (8677) [ 303.179930][ T7799] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.329968][ T8693] loop4: detected capacity change from 0 to 8192 [ 303.451865][ T7252] [ 303.454222][ T7252] ====================================================== [ 303.461224][ T7252] WARNING: possible circular locking dependency detected [ 303.468232][ T7252] syzkaller #0 Not tainted [ 303.472637][ T7252] ------------------------------------------------------ [ 303.479654][ T7252] syz-executor/7252 is trying to acquire lock: [ 303.485798][ T7252] ffff888024ab00b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 303.495511][ T7252] [ 303.495511][ T7252] but task is already holding lock: [ 303.502869][ T7252] ffff88801bb222c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x2b3/0xc30 [ 303.514222][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.514287][ T7252] [ 303.514287][ T7252] which lock already depends on the new lock. [ 303.514287][ T7252] [ 303.514298][ T7252] [ 303.514298][ T7252] the existing dependency chain (in reverse order) is: [ 303.540647][ T7252] [ 303.540647][ T7252] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 303.549681][ T7252] __mutex_lock+0x19f/0x1300 [ 303.554790][ T7252] hfsplus_file_extend+0x215/0x1d70 [ 303.560501][ T7252] hfsplus_bmap_reserve+0x125/0x510 [ 303.566212][ T7252] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 303.572439][ T7252] __hfsplus_ext_cache_extent+0x89/0xe30 [ 303.578591][ T7252] hfsplus_file_extend+0x4af/0x1d70 [ 303.584310][ T7252] hfsplus_get_block+0x42c/0x1670 [ 303.589841][ T7252] __block_write_begin_int+0x6c6/0x1910 [ 303.595909][ T7252] cont_write_begin+0x737/0xae0 [ 303.601280][ T7252] hfsplus_write_begin+0x66/0xb0 [ 303.606724][ T7252] generic_perform_write+0x2e2/0x8f0 [ 303.612512][ T7252] generic_file_write_iter+0x14a/0x680 [ 303.618473][ T7252] vfs_write+0x61d/0xb90 [ 303.623226][ T7252] ksys_write+0x150/0x270 [ 303.628067][ T7252] do_syscall_64+0x14d/0xf80 [ 303.633170][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.639568][ T7252] [ 303.639568][ T7252] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 303.647475][ T7252] __lock_acquire+0x15a5/0x2cf0 [ 303.652835][ T7252] lock_acquire+0x106/0x330 [ 303.657851][ T7252] __mutex_lock+0x19f/0x1300 [ 303.662955][ T7252] hfsplus_find_init+0x168/0x2d0 [ 303.668409][ T7252] hfsplus_file_truncate+0x39b/0xc30 [ 303.674200][ T7252] hfsplus_delete_inode+0x180/0x230 [ 303.679905][ T7252] hfsplus_unlink+0x4ee/0x930 [ 303.685092][ T7252] vfs_unlink+0x272/0x6c0 [ 303.689922][ T7252] filename_unlinkat+0x3cd/0x610 [ 303.695361][ T7252] __se_sys_unlink+0x2e/0x140 [ 303.700543][ T7252] do_syscall_64+0x14d/0xf80 [ 303.705643][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.712044][ T7252] [ 303.712044][ T7252] other info that might help us debug this: [ 303.712044][ T7252] [ 303.722253][ T7252] Possible unsafe locking scenario: [ 303.722253][ T7252] [ 303.729677][ T7252] CPU0 CPU1 [ 303.735018][ T7252] ---- ---- [ 303.740359][ T7252] lock(&HFSPLUS_I(inode)->extents_lock); [ 303.746153][ T7252] lock(&tree->tree_lock/1); [ 303.753342][ T7252] lock(&HFSPLUS_I(inode)->extents_lock); [ 303.761654][ T7252] lock(&tree->tree_lock/1); [ 303.766325][ T7252] [ 303.766325][ T7252] *** DEADLOCK *** [ 303.766325][ T7252] [ 303.774442][ T7252] 5 locks held by syz-executor/7252: [ 303.779706][ T7252] #0: ffff888032840420 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 303.788955][ T7252] #1: ffff88801bb23238 (&type->i_mutex_dir_key#17/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 303.799852][ T7252] #2: ffff88801bb224b8 (&sb->s_type->i_mutex_key#36){+.+.}-{4:4}, at: vfs_unlink+0xed/0x6c0 [ 303.810047][ T7252] #3: ffff888032ad1198 (&sbi->vh_mutex){+.+.}-{4:4}, at: hfsplus_unlink+0x182/0x930 [ 303.819627][ T7252] #4: ffff88801bb222c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x2b3/0xc30 [ 303.831204][ T7252] [ 303.831204][ T7252] stack backtrace: [ 303.837075][ T7252] CPU: 0 UID: 0 PID: 7252 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 303.837100][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 303.837113][ T7252] Call Trace: [ 303.837122][ T7252] [ 303.837130][ T7252] dump_stack_lvl+0xe8/0x150 [ 303.837162][ T7252] print_circular_bug+0x2e1/0x300 [ 303.837196][ T7252] check_noncircular+0x12e/0x150 [ 303.837230][ T7252] __lock_acquire+0x15a5/0x2cf0 [ 303.837256][ T7252] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 303.837281][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.837308][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.837334][ T7252] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 303.837357][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.837383][ T7252] ? stack_depot_save_flags+0x3f3/0x810 [ 303.837412][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.837438][ T7252] ? kasan_save_track+0x4f/0x80 [ 303.837468][ T7252] ? kasan_save_track+0x3e/0x80 [ 303.837499][ T7252] ? hfsplus_find_init+0x168/0x2d0 [ 303.837532][ T7252] lock_acquire+0x106/0x330 [ 303.837556][ T7252] ? hfsplus_find_init+0x168/0x2d0 [ 303.837592][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.837622][ T7252] __mutex_lock+0x19f/0x1300 [ 303.837650][ T7252] ? hfsplus_find_init+0x168/0x2d0 [ 303.837689][ T7252] ? hfsplus_find_init+0x168/0x2d0 [ 303.837723][ T7252] ? __pfx___mutex_lock+0x10/0x10 [ 303.837754][ T7252] ? rcu_is_watching+0x15/0xb0 [ 303.837781][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.837807][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.837832][ T7252] ? __kmalloc_noprof+0x37d/0x760 [ 303.837869][ T7252] ? hfsplus_find_init+0x8c/0x2d0 [ 303.837901][ T7252] ? __kmalloc_noprof+0x1b8/0x760 [ 303.837933][ T7252] hfsplus_find_init+0x168/0x2d0 [ 303.837969][ T7252] hfsplus_file_truncate+0x39b/0xc30 [ 303.837997][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.838024][ T7252] ? hfsplus_delete_cat+0x860/0xe80 [ 303.838051][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.838080][ T7252] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 303.838110][ T7252] ? __pfx___mutex_lock+0x10/0x10 [ 303.838136][ T7252] ? hfsplus_compare_dentry+0xde6/0xea0 [ 303.838164][ T7252] hfsplus_delete_inode+0x180/0x230 [ 303.838190][ T7252] hfsplus_unlink+0x4ee/0x930 [ 303.838221][ T7252] ? __pfx_hfsplus_unlink+0x10/0x10 [ 303.838252][ T7252] ? __pfx_down_write+0x10/0x10 [ 303.838283][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.838309][ T7252] ? try_break_deleg+0x5b/0x180 [ 303.838340][ T7252] vfs_unlink+0x272/0x6c0 [ 303.838364][ T7252] filename_unlinkat+0x3cd/0x610 [ 303.838387][ T7252] ? __pfx_filename_unlinkat+0x10/0x10 [ 303.838410][ T7252] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.838435][ T7252] ? do_getname+0x151/0x250 [ 303.838458][ T7252] __se_sys_unlink+0x2e/0x140 [ 303.838480][ T7252] do_syscall_64+0x14d/0xf80 [ 303.838507][ T7252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.838529][ T7252] ? trace_irq_disable+0x37/0x100 [ 303.838560][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.838582][ T7252] RIP: 0033:0x7f301259b067 [ 303.838601][ T7252] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 303.838635][ T7252] RSP: 002b:00007ffc6f109a08 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 303.838656][ T7252] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f301259b067 [ 303.838671][ T7252] RDX: 00007ffc6f109a30 RSI: 00007ffc6f109ac0 RDI: 00007ffc6f109ac0 [ 303.838687][ T7252] RBP: 00007ffc6f109ac0 R08: 00007ffc6f10aac0 R09: 00000000ffffffff [ 303.838702][ T7252] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc6f10abb0 [ 303.838716][ T7252] R13: 00007f3012631c3b R14: 000000000004a0e8 R15: 00007ffc6f10bc80 [ 303.838741][ T7252] [ 303.840533][ T8703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.708'. [ 303.884045][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.237012][ T8583] bridge_slave_0: entered allmulticast mode [ 304.244527][ T8583] bridge_slave_0: entered promiscuous mode [ 304.275908][ T8677] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 304.287625][ T8677] BTRFS info (device loop3): using crc32c checksum algorithm [ 304.387956][ T7799] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.413582][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.421194][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.431948][ T8583] bridge_slave_1: entered allmulticast mode [ 304.449834][ T8583] bridge_slave_1: entered promiscuous mode [ 304.481727][ T8677] BTRFS info (device loop3): allowing degraded mounts [ 304.530419][ T8677] BTRFS info (device loop3): enabling ssd optimizations [ 304.537377][ T8677] BTRFS info (device loop3): enabling free space tree [ 304.548036][ T8677] BTRFS info (device loop3): force zlib compression, level 3 [ 304.559185][ T7799] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.626679][ T8583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.654871][ T8583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.675407][ T8258] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 304.703031][ T8583] team0: Port device team_slave_0 added [ 304.729685][ T8583] team0: Port device team_slave_1 added [ 304.754894][ T7790] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.781159][ T7799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.794892][ T7799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.830982][ T8258] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 304.852520][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.860655][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.920369][ T8583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.954899][ T7790] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.004815][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.028710][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.082778][ T8583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.118096][ T7790] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.180776][ T7790] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.272680][ T7799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.284182][ T7799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.324537][ T8583] hsr_slave_0: entered promiscuous mode [ 305.336397][ T8583] hsr_slave_1: entered promiscuous mode [ 305.343323][ T8583] debugfs: 'hsr0' already exists in 'hsr' [ 305.349149][ T8583] Cannot create hsr debugfs directory [ 305.354443][ T5822] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 305.587321][ T7790] bridge_slave_1: left allmulticast mode [ 305.600080][ T7790] bridge_slave_1: left promiscuous mode [ 305.612669][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.630632][ T7790] bridge_slave_0: left allmulticast mode [ 305.636323][ T7790] bridge_slave_0: left promiscuous mode [ 305.642805][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.767058][ T7790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.777658][ T7790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.787871][ T7790] bond0 (unregistering): Released all slaves [ 305.846516][ T8583] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 305.859395][ T8583] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 305.876306][ T8583] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 305.887129][ T8583] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 305.990601][ T5826] Bluetooth: hci0: command 0x0405 tx timeout [ 305.998134][ T7790] hsr_slave_0: left promiscuous mode [ 306.004073][ T7790] hsr_slave_1: left promiscuous mode [ 306.009823][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.017562][ T7790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.025349][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.033403][ T7790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.046700][ T7790] veth1_macvtap: left promiscuous mode [ 306.052215][ T7790] veth0_macvtap: left promiscuous mode [ 306.057752][ T7790] veth1_vlan: left promiscuous mode [ 306.063161][ T7790] veth0_vlan: left promiscuous mode [ 306.224936][ T7790] team0 (unregistering): Port device team_slave_1 removed [ 306.238898][ T7790] team0 (unregistering): Port device team_slave_0 removed [ 306.334233][ T8583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.357340][ T8583] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.373158][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.380251][ T7799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.389766][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.396867][ T7799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.450451][ T8583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.548909][ T7790] IPVS: stop unused estimator thread 0... [ 306.691483][ T8583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.915081][ T8583] veth0_vlan: entered promiscuous mode [ 306.926645][ T8583] veth1_vlan: entered promiscuous mode [ 306.950678][ T8583] veth0_macvtap: entered promiscuous mode [ 306.962687][ T8583] veth1_macvtap: entered promiscuous mode [ 306.977808][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.992510][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.004925][ T3445] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.022799][ T3445] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.032505][ T3445] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.042889][ T3445] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.067125][ T8583] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 307.094234][ T7798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.104368][ T8583] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 307.117428][ T7798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.146044][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.154730][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50