last executing test programs: 1m28.362607985s ago: executing program 3 (id=593): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xd0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000240)={0x0, 0x0, 0x0, @raw}) 1m27.966733968s ago: executing program 3 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffffffff0e00000013000e001c"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x800) 1m27.602926122s ago: executing program 3 (id=604): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x68e, &(0x7f0000000980)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x100003) creat(&(0x7f0000000180)='./file1\x00', 0x84) 1m26.764073487s ago: executing program 3 (id=614): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f00000001c0)={[{@nogrpid}, {@nogrpid}, {@test_dummy_encryption}, {@debug}, {@nobarrier}, {@data_journal}]}, 0x1, 0x440, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10080, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m25.598577111s ago: executing program 3 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m22.969750954s ago: executing program 3 (id=651): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0xd, 0x80000001}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2, 0x0, 0x0, 0xf5b}) 1m22.294591263s ago: executing program 32 (id=651): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0xd, 0x80000001}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2, 0x0, 0x0, 0xf5b}) 6.065617881s ago: executing program 5 (id=1412): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 5.823217858s ago: executing program 5 (id=1415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000400)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 5.772044166s ago: executing program 2 (id=1416): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000100)={[{@nodiscard}, {@nocheckpoint_merge}, {@discard_unit_block}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x1f}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@discard_unit_block}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfdffff}}]}, 0x1, 0x5517, &(0x7f0000005880)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, 0x0, 0x0) 5.462657311s ago: executing program 5 (id=1418): prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 5.213754511s ago: executing program 5 (id=1420): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000056c0)='./file0\x00', 0x1008000, &(0x7f0000005800)=ANY=[@ANYBLOB='flush_merge,background_gc=sync,alloc_mode=default,inline_data,noflush_merge,disable_roll_forward,age_extent_cache,noacl,mode=fragment:segment,checkpoint=disable,noextent_cache,resuid=', @ANYRESHEX=0x0, @ANYBLOB="2c2c00000000000040a914f8b7469cafba30674c1157ae3e0000"], 0x1, 0x5532, &(0x7f0000005980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./file0\x00') 3.301742417s ago: executing program 1 (id=1436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 2.9950403s ago: executing program 1 (id=1440): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f0000000000)=0xa636, 0x9, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 2.897278163s ago: executing program 6 (id=1441): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0xfc}}, 0x0) 2.860418113s ago: executing program 2 (id=1442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) io_pgetevents(0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0) 2.710614369s ago: executing program 1 (id=1443): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) 2.52145395s ago: executing program 1 (id=1446): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000100), 0xff, 0x454, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB='#']) 2.509146185s ago: executing program 6 (id=1447): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x80000000000005a, 0x1) 2.421867298s ago: executing program 5 (id=1448): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000040)={[{@force}, {@nodecompose}, {@uid}, {@creator={'creator', 0x3d, "c6b763b8"}}, {@nobarrier}, {@part={'part', 0x3d, 0x5}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@creator={'creator', 0x3d, "1c4e53c5"}}]}, 0x1, 0x6b3, &(0x7f0000000780)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) 2.273486574s ago: executing program 6 (id=1451): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x10102, 0x0) 2.078105933s ago: executing program 6 (id=1452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) 2.036757943s ago: executing program 1 (id=1453): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b322b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.852103552s ago: executing program 0 (id=1455): unshare(0x400) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) 1.843179046s ago: executing program 6 (id=1456): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) 1.608304511s ago: executing program 6 (id=1458): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x38, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "768100"}]}}, 0x0}, 0x0) 1.562801767s ago: executing program 1 (id=1459): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.553637231s ago: executing program 0 (id=1460): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x24, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) 1.393256846s ago: executing program 4 (id=1461): r0 = socket$kcm(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f00000027c0)=""/4047, 0xfcf}, {&(0x7f00000037c0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000012c0)=""/148, 0x94}], 0x6}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046bf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe8600000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 1.302049122s ago: executing program 0 (id=1462): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x20c, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x1000000, 0x10000002000003, 0x0, 0x0, 0x300}) 1.184980682s ago: executing program 5 (id=1463): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7000, 0x0, 0x19) 1.060727862s ago: executing program 4 (id=1464): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) 1.035364088s ago: executing program 2 (id=1465): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000500)='./file0\x00', 0x4800, &(0x7f0000000040)=ANY=[], 0x1, 0x184, &(0x7f00000005c0)="$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") chdir(&(0x7f00000000c0)='./file0\x00') listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x100000) 858.063302ms ago: executing program 0 (id=1466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 816.257665ms ago: executing program 4 (id=1467): unshare(0x2040400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1, &(0x7f00000005c0)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x90) 648.738252ms ago: executing program 2 (id=1468): unshare(0x26020480) r0 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) 590.319925ms ago: executing program 4 (id=1469): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e0000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 530.656516ms ago: executing program 0 (id=1470): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x4, 0xe, 0x1ff}, 0x8) 424.173377ms ago: executing program 2 (id=1471): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) 307.616391ms ago: executing program 4 (id=1472): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./bus\x00', 0x4680, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0xfd, 0x2a1, &(0x7f0000000400)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194) creat(&(0x7f0000000040)='./bus\x00', 0x0) 230.012199ms ago: executing program 2 (id=1473): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.046981ms ago: executing program 0 (id=1474): mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000dcf000/0x2000)=nil, 0x2000, 0x14) 0s ago: executing program 4 (id=1475): syz_io_uring_setup(0x55f0, &(0x7f0000000180)={0x0, 0x2, 0x10, 0x1, 0x393}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): ed [ 151.734501][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.742618][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.750731][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.759429][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.775065][ T7245] loop3: detected capacity change from 0 to 2048 [ 151.779274][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.791144][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.802350][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.810425][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.818723][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.827075][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.835398][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.843478][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.851564][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.859694][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.873441][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.881680][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.889938][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.898011][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.906112][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.914226][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.922366][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.930371][ T9] usb 3-1: USB disconnect, device number 3 [ 151.936229][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 151.956928][ T7248] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.957465][ T7238] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 151.999504][ T7245] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 152.051275][ T7238] NILFS (loop4): mounting fs with errors [ 152.098785][ T7253] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.321541][ T7255] loop0: detected capacity change from 0 to 512 [ 152.468622][ T7255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.586360][ T7255] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 152.838083][ T5878] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.483944][ T7298] loop2: detected capacity change from 0 to 1024 [ 153.615883][ T7298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.755514][ T7309] loop3: detected capacity change from 0 to 128 [ 153.769872][ T30] audit: type=1800 audit(1758799905.734:42): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.501" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 153.844951][ T7309] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.906207][ T7309] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.318497][ T5873] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.548585][ T5877] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.591063][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 155.575522][ T7376] loop3: detected capacity change from 0 to 1024 [ 155.620776][ T7376] EXT4-fs: Ignoring removed nobh option [ 155.633936][ T7375] loop4: detected capacity change from 0 to 1024 [ 155.649233][ T7376] EXT4-fs: Ignoring removed bh option [ 155.733491][ T7376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.817932][ T30] audit: type=1326 audit(1758799907.784:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343038eec9 code=0x7ffc0000 [ 155.826456][ T7375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.897755][ T30] audit: type=1326 audit(1758799907.824:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f343038eec9 code=0x7ffc0000 [ 155.920141][ T30] audit: type=1326 audit(1758799907.824:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343038eec9 code=0x7ffc0000 [ 155.942303][ T30] audit: type=1326 audit(1758799907.824:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343038eec9 code=0x7ffc0000 [ 155.965929][ T30] audit: type=1326 audit(1758799907.824:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f343038eec9 code=0x7ffc0000 [ 156.039887][ T30] audit: type=1326 audit(1758799907.824:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343038eec9 code=0x7ffc0000 [ 156.203031][ T5873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.220998][ T30] audit: type=1326 audit(1758799907.824:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.1.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343038eec9 code=0x7ffc0000 [ 156.270025][ T5990] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.366461][ T30] audit: type=1800 audit(1758799908.094:50): pid=7375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.528" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 156.510712][ T5990] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.521470][ T5990] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 156.539927][ T5990] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 156.549017][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.609424][ T5990] usb 3-1: Product: syz [ 156.615966][ T5990] usb 3-1: Manufacturer: syz [ 156.634918][ T5990] usb 3-1: SerialNumber: syz [ 157.038971][ T5869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.401344][ T5990] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 157.607068][ T7434] loop1: detected capacity change from 0 to 64 [ 157.620809][ T5990] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.809074][ T7437] xt_time: unknown flags 0xf4 [ 157.893492][ T5990] usb 3-1: USB disconnect, device number 4 [ 157.955165][ T7440] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.298494][ T7446] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.324634][ T7446] block device autoloading is deprecated and will be removed. [ 158.612339][ T7457] loop1: detected capacity change from 0 to 16 [ 158.650587][ T7458] loop2: detected capacity change from 0 to 128 [ 158.657493][ T7457] erofs (device loop1): mounted with root inode @ nid 36. [ 158.799112][ T7463] loop5: detected capacity change from 0 to 512 [ 158.839246][ T7463] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 158.903855][ T7463] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.959423][ T7465] vxcan1: MTU too low for tipc bearer [ 158.975261][ T7463] EXT4-fs (loop5): 1 truncate cleaned up [ 158.979384][ T7465] tipc: Enabling of bearer rejected, failed to enable media [ 159.038165][ T7432] loop3: detected capacity change from 0 to 32768 [ 159.047663][ T7432] XFS: ikeep mount option is deprecated. [ 159.053621][ T7432] XFS: noikeep mount option is deprecated. [ 159.083351][ T7463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.097901][ T7473] loop2: detected capacity change from 0 to 1024 [ 159.174850][ T7432] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.283080][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.335283][ T7482] loop4: detected capacity change from 0 to 1764 [ 159.476181][ T7432] XFS (loop3): Ending clean mount [ 159.569710][ T7432] XFS (loop3): Quotacheck needed: Please wait. [ 159.683564][ T1322] hfsplus: b-tree write err: -5, ino 4 [ 159.692333][ T7432] XFS (loop3): Quotacheck: Done. [ 159.721544][ T30] audit: type=1800 audit(1758799911.684:51): pid=7432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.549" name="file2" dev="loop3" ino=4423 res=0 errno=0 [ 159.779858][ T5869] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 159.843544][ T7492] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 159.889092][ T5869] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 159.953297][ T5873] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.981306][ T7492] bond0: (slave 4): Enslaving as an active interface with an up link [ 160.095814][ T7491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.422038][ T7504] syz_tun: entered promiscuous mode [ 160.427393][ T7504] vlan2: entered promiscuous mode [ 160.531488][ T7508] warning: `syz.5.582' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 161.153569][ T7530] loop2: detected capacity change from 0 to 512 [ 161.210425][ T7530] EXT4-fs (loop2): Test dummy encryption mode enabled [ 161.259684][ T7530] EXT4-fs error (device loop2): __ext4_iget:5464: inode #11: block 1: comm syz.2.592: invalid block [ 161.302478][ T7530] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.592: couldn't read orphan inode 11 (err -117) [ 161.407661][ T7530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.679826][ T5877] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.028655][ T7557] loop3: detected capacity change from 0 to 1024 [ 162.317581][ T7512] loop0: detected capacity change from 0 to 32768 [ 162.347108][ T7564] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 162.439056][ T30] audit: type=1326 audit(1758799914.404:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c1d8eec9 code=0x7ffc0000 [ 162.481017][ T7512] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 162.489302][ T30] audit: type=1326 audit(1758799914.444:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c1d8eec9 code=0x7ffc0000 [ 162.539986][ T7512] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.642247][ T7579] loop2: detected capacity change from 0 to 64 [ 162.651070][ T30] audit: type=1326 audit(1758799914.444:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f98c1d8eec9 code=0x7ffc0000 [ 162.673451][ T30] audit: type=1326 audit(1758799914.444:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c1d8eec9 code=0x7ffc0000 [ 162.707711][ T30] audit: type=1326 audit(1758799914.444:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c1d8eec9 code=0x7ffc0000 [ 162.733888][ T30] audit: type=1326 audit(1758799914.444:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f98c1d8eec9 code=0x7ffc0000 [ 162.756544][ T30] audit: type=1326 audit(1758799914.444:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c1d8eec9 code=0x7ffc0000 [ 162.779074][ T30] audit: type=1326 audit(1758799914.444:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98c1d8eec9 code=0x7ffc0000 [ 162.851112][ T7512] XFS (loop0): Ending clean mount [ 162.884170][ T7586] loop1: detected capacity change from 0 to 4096 [ 162.927783][ T7512] XFS (loop0): Quotacheck needed: Please wait. [ 162.932035][ T7579] syz.2.610: attempt to access beyond end of device [ 162.932035][ T7579] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 162.945008][ T7586] NILFS (loop1): invalid segment: Checksum error in segment payload [ 163.001499][ T7512] XFS (loop0): Quotacheck: Done. [ 163.008836][ T7586] NILFS (loop1): trying rollback from an earlier position [ 163.036986][ T7590] loop3: detected capacity change from 0 to 512 [ 163.119128][ T7590] EXT4-fs (loop3): Test dummy encryption mode enabled [ 163.137964][ T7586] NILFS (loop1): recovery complete [ 163.171331][ T7590] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 163.188972][ T7591] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.226848][ T5878] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.259031][ T7590] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c018, mo2=0002] [ 163.338375][ T7590] System zones: 1-12 [ 163.363840][ T7590] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.614: corrupted in-inode xattr: e_name out of bounds [ 163.397620][ T7590] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.614: couldn't read orphan inode 15 (err -117) [ 163.460780][ T7590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.624704][ T7590] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 163.873288][ T5873] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /102/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 163.958705][ T5873] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 164.052583][ T5873] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /102/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 164.157387][ T7607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.616'. [ 164.159604][ T5873] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 164.248513][ T5873] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /102/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 164.287788][ T7610] loop4: detected capacity change from 0 to 256 [ 164.347819][ T5873] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 164.462804][ T5873] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /102/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 164.543358][ T5873] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 164.576059][ T7619] loop0: detected capacity change from 0 to 1024 [ 164.621115][ T5873] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /102/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 164.710057][ T5873] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 164.794284][ T7627] loop4: detected capacity change from 0 to 16 [ 164.821466][ T7627] erofs (device loop4): mounted with root inode @ nid 36. [ 164.882334][ T49] hfsplus: b-tree write err: -5, ino 4 [ 165.144165][ T7637] loop5: detected capacity change from 0 to 512 [ 165.247991][ T7637] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 165.404319][ T7644] loop0: detected capacity change from 0 to 512 [ 165.414081][ T7644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.430556][ T7637] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.637: invalid indirect mapped block 8 (level 2) [ 165.473571][ T7644] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 165.498078][ T7644] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 165.508385][ T7637] EXT4-fs (loop5): Remounting filesystem read-only [ 165.516476][ T7644] System zones: 0-1, 15-15, 18-18, 34-34 [ 165.526780][ T7644] EXT4-fs (loop0): orphan cleanup on readonly fs [ 165.546830][ T7637] EXT4-fs (loop5): 1 truncate cleaned up [ 165.554977][ T7637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.571746][ T7644] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.639: casefold flag without casefold feature [ 165.587049][ T7644] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.639: couldn't read orphan inode 16 (err -117) [ 165.613973][ T7644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.725971][ T7653] loop1: detected capacity change from 0 to 64 [ 165.771755][ T5878] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.781727][ T7637] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 165.844420][ T7637] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 166.082885][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.377564][ T5873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.517348][ T7665] loop5: detected capacity change from 0 to 1024 [ 166.559256][ T5990] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 166.692126][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 166.742167][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 166.779669][ T7669] netlink: 'syz.0.652': attribute type 7 has an invalid length. [ 166.787271][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.818773][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.833436][ T5990] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 166.862696][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.881404][ T12] hfsplus: b-tree write err: -5, ino 4 [ 166.884676][ T1322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.919774][ T5990] usb 5-1: config 0 descriptor?? [ 167.067274][ T1322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.217327][ T1322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.304159][ T7678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.346552][ T5990] samsung 0003:0419:0600.0007: unknown main item tag 0x3 [ 167.413148][ T5990] samsung 0003:0419:0600.0007: hidraw0: USB HID v0.80 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 167.459000][ T1322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.463685][ T7680] loop2: detected capacity change from 0 to 256 [ 167.560021][ T5990] usb 5-1: USB disconnect, device number 5 [ 167.821132][ T7683] fido_id[7683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 168.137829][ T1322] bridge_slave_1: left allmulticast mode [ 168.154983][ T1322] bridge_slave_1: left promiscuous mode [ 168.177579][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.310555][ T1322] bridge_slave_0: left allmulticast mode [ 168.350353][ T1322] bridge_slave_0: left promiscuous mode [ 168.356717][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.501133][ T5180] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.538623][ T5180] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.549937][ T5180] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.602961][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.611369][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.207066][ T7731] loop5: detected capacity change from 0 to 128 [ 169.265776][ T7731] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 169.302847][ T7731] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.334794][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.491756][ T5864] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.720776][ T7740] loop5: detected capacity change from 0 to 2048 [ 169.751433][ T7740] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 169.807207][ T7740] syz.5.685: attempt to access beyond end of device [ 169.807207][ T7740] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 169.822160][ T7741] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.968156][ T7740] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 170.002577][ T7740] Remounting filesystem read-only [ 170.008320][ T7740] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 170.024911][ T7740] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 170.051301][ T30] audit: type=1800 audit(1758799922.024:60): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.685" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 170.062503][ T7744] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 170.070715][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.097687][ T30] audit: type=1800 audit(1758799922.064:61): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.685" name="file3" dev="loop5" ino=16 res=0 errno=0 [ 170.171690][ T7740] syz.5.685 (7740) used greatest stack depth: 18808 bytes left [ 170.286552][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.320425][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.343616][ T1322] bond0 (unregistering): Released all slaves [ 170.348147][ T7738] loop4: detected capacity change from 0 to 32768 [ 170.420993][ T7746] team0: Device vlan2 is already an upper device of the team interface [ 170.430441][ T7738] XFS (loop4): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 170.690602][ T7710] hsr0 speed is unknown, defaulting to 1000 [ 170.749292][ T5882] Bluetooth: hci2: command tx timeout [ 170.782496][ T5869] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.972683][ T7768] loop1: detected capacity change from 0 to 512 [ 171.099847][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 171.121740][ T7768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.149680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.169545][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 171.191273][ T7768] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.398409][ T7768] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.694: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 171.460281][ T7768] EXT4-fs (loop1): Remounting filesystem read-only [ 171.540118][ T7788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.699'. [ 171.594901][ T7785] loop0: detected capacity change from 0 to 1024 [ 171.725175][ T7785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.105543][ T7763] loop5: detected capacity change from 0 to 32768 [ 172.106937][ T5878] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.187589][ T7763] [ 172.187589][ T7763] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.187589][ T7763] [ 172.237917][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.250856][ T7802] vivid-003: disconnect [ 172.290196][ T7800] vivid-003: reconnect [ 172.442307][ T7763] ERROR: (device loop5): diWrite: ixpxd invalid [ 172.442307][ T7763] [ 172.473612][ T7763] ERROR: (device loop5): remounting filesystem as read-only [ 172.499804][ T7808] loop1: detected capacity change from 0 to 256 [ 172.524692][ T7763] ERROR: (device loop5): txCommit: [ 172.524692][ T7763] [ 172.591368][ T7806] read_mapping_page failed! [ 172.596004][ T7806] diRead: read_metapage failed [ 172.631397][ T7806] jfs_lookup: iget failed on inum 32 [ 172.737689][ T1322] hsr_slave_0: left promiscuous mode [ 172.792659][ T1322] hsr_slave_1: left promiscuous mode [ 172.830516][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.839327][ T5882] Bluetooth: hci2: command tx timeout [ 172.889403][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.980679][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.988085][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.196028][ T1322] veth1_macvtap: left promiscuous mode [ 173.214660][ T1322] veth0_macvtap: left promiscuous mode [ 173.249443][ T1322] veth1_vlan: left promiscuous mode [ 173.535764][ T7830] netlink: 'syz.5.709': attribute type 3 has an invalid length. [ 173.660853][ T7803] loop2: detected capacity change from 0 to 32768 [ 173.681723][ T7803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.703 (7803) [ 173.726573][ T7803] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.743322][ T7803] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 173.763028][ T7832] netlink: 44 bytes leftover after parsing attributes in process `syz.5.715'. [ 173.886575][ T7803] BTRFS info (device loop2): rebuilding free space tree [ 173.933029][ T7816] loop0: detected capacity change from 0 to 32768 [ 173.944874][ T7803] BTRFS info (device loop2): disabling free space tree [ 173.952034][ T7816] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.707 (7816) [ 173.966919][ T7803] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 174.018375][ T7816] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 174.021298][ T7803] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 174.067188][ T7816] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 174.115550][ T7803] BTRFS info (device loop2): setting nodatasum [ 174.136643][ T7803] BTRFS info (device loop2): enabling ssd optimizations [ 174.167327][ T7803] BTRFS info (device loop2): turning off barriers [ 174.186363][ T7803] BTRFS info (device loop2): turning on flush-on-commit [ 174.200308][ T7803] BTRFS info (device loop2): force clearing of disk cache [ 174.216933][ T7803] BTRFS info (device loop2): doing ref verification [ 174.235181][ T7816] BTRFS info (device loop0): enabling ssd optimizations [ 174.252644][ T7816] BTRFS info (device loop0): turning on sync discard [ 174.262237][ T7803] BTRFS info (device loop2): max_inline set to 0 [ 174.279122][ T7816] BTRFS info (device loop0): enabling free space tree [ 174.296662][ T7816] BTRFS info (device loop0): use lzo compression, level 1 [ 174.497729][ T5877] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.644497][ T5878] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 174.911783][ T5882] Bluetooth: hci2: command tx timeout [ 175.145932][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 175.193781][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 175.934558][ T7877] loop5: detected capacity change from 0 to 8 [ 176.359901][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 176.399281][ T5937] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 176.589284][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 176.656870][ T5937] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 176.702469][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.747498][ T5937] usb 3-1: Product: syz [ 176.799613][ T5937] usb 3-1: Manufacturer: syz [ 176.804251][ T5937] usb 3-1: SerialNumber: syz [ 176.891226][ T5937] usb 3-1: config 0 descriptor?? [ 176.927389][ T7915] loop1: detected capacity change from 0 to 8 [ 176.934786][ T5937] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 176.989311][ T5882] Bluetooth: hci2: command tx timeout [ 177.089865][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.097079][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.159682][ T7710] bridge_slave_0: entered allmulticast mode [ 177.167963][ T7710] bridge_slave_0: entered promiscuous mode [ 177.225074][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.276232][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.294835][ T7710] bridge_slave_1: entered allmulticast mode [ 177.329407][ T7710] bridge_slave_1: entered promiscuous mode [ 177.343123][ T7923] loop1: detected capacity change from 0 to 2048 [ 177.385709][ T7923] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 177.443532][ T7923] syz.1.734: attempt to access beyond end of device [ 177.443532][ T7923] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 177.469846][ T7929] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.524427][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.575733][ T5937] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 177.589820][ T7923] syz.1.734: attempt to access beyond end of device [ 177.589820][ T7923] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 177.593473][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.619951][ T5937] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 177.657241][ T5937] usb 3-1: USB disconnect, device number 5 [ 177.700168][ T7923] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 177.754238][ T7923] NILFS (loop1): error -5 reading inode: ino=15 [ 177.796396][ T7934] syz.1.734: attempt to access beyond end of device [ 177.796396][ T7934] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 177.835700][ T7934] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 177.889711][ T7934] NILFS (loop1): error -5 reading inode: ino=15 [ 177.978942][ T7710] team0: Port device team_slave_0 added [ 178.024587][ T7710] team0: Port device team_slave_1 added [ 178.188236][ T7944] loop1: detected capacity change from 0 to 128 [ 178.297870][ T7944] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.335355][ T7953] loop4: detected capacity change from 0 to 64 [ 178.351906][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.379719][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.414652][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.430712][ T5230] udevd[5230]: worker [6032] terminated by signal 33 (Unknown signal 33) [ 178.431863][ T7944] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.449742][ T5230] udevd[5230]: worker [6032] failed while handling '/devices/virtual/block/loop1' [ 178.462171][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.469109][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.512301][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.625878][ T5230] udevd[5230]: worker [5923] terminated by signal 33 (Unknown signal 33) [ 178.680559][ T5230] udevd[5230]: worker [5923] failed while handling '/devices/virtual/block/loop4' [ 178.705372][ T5876] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.867595][ T7710] hsr_slave_0: entered promiscuous mode [ 178.884547][ T7710] hsr_slave_1: entered promiscuous mode [ 178.918363][ T7710] debugfs: 'hsr0' already exists in 'hsr' [ 178.935557][ T7710] Cannot create hsr debugfs directory [ 179.165501][ T7971] netlink: 64 bytes leftover after parsing attributes in process `syz.4.753'. [ 179.204604][ T7972] xt_l2tp: missing protocol rule (udp|l2tpip) [ 179.417777][ T7978] loop0: detected capacity change from 0 to 512 [ 179.731759][ T7986] loop4: detected capacity change from 0 to 128 [ 179.738481][ T7988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.761'. [ 180.041765][ T7710] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.075353][ T7710] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.141486][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.5.766'. [ 180.151334][ T7998] loop4: detected capacity change from 0 to 256 [ 180.223260][ T7998] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 180.235932][ T7710] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.256617][ T7710] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 180.295445][ T8000] loop0: detected capacity change from 0 to 128 [ 180.353600][ T8000] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 180.387552][ T5866] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 180.423313][ T8000] hpfs: filesystem error: improperly stopped [ 180.444321][ T8000] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 180.464588][ T8000] hpfs: You really don't want any checks? You are crazy... [ 180.505132][ T8000] hpfs: hpfs_map_sector(): read error [ 180.535138][ T8000] hpfs: code page support is disabled [ 180.569834][ T8000] hpfs: hpfs_map_4sectors(): unaligned read [ 180.586715][ T5866] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 180.605777][ T8000] hpfs: hpfs_map_4sectors(): unaligned read [ 180.619902][ T5866] usb 3-1: config 0 has no interface number 0 [ 180.639560][ T8000] hpfs: filesystem error: unable to find root dir [ 180.661727][ T5866] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.682510][ T5866] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 180.698953][ T5866] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 180.731835][ T5866] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 180.750652][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.788393][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.798030][ T5866] usb 3-1: config 0 descriptor?? [ 180.832234][ T5866] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input9 [ 180.873999][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.909353][ T43] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 180.947501][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.954688][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.955932][ T7983] loop1: detected capacity change from 0 to 32768 [ 181.072488][ T7983] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 181.084502][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.086275][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.099684][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.103474][ T43] usb 5-1: config 0 has no interface number 0 [ 181.115325][ T43] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 181.126452][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.163307][ T43] usb 5-1: config 0 descriptor?? [ 181.179707][ T8023] hpfs: Bad magic ... probably not HPFS [ 181.191073][ T5866] usb 3-1: USB disconnect, device number 6 [ 181.204558][ T43] usb 5-1: selecting invalid altsetting 1 [ 181.225501][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 181.240190][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 181.245245][ T7983] XFS (loop1): Ending clean mount [ 181.509332][ T5876] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 181.562217][ T43] DVB: Unable to find symbol cx22700_attach() [ 181.767749][ T43] DVB: Unable to find symbol tda10046_attach() [ 181.784521][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 181.859458][ T43] usb 5-1: USB disconnect, device number 6 [ 182.243457][ T8046] loop1: detected capacity change from 0 to 2048 [ 182.344502][ T8046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.380577][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.683882][ T8060] loop2: detected capacity change from 0 to 1024 [ 182.944045][ T49] hfsplus: b-tree write err: -5, ino 4 [ 183.036979][ T8067] mmap: syz.1.788 (8067) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.339788][ T8076] loop1: detected capacity change from 0 to 512 [ 183.350276][ T8076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.367107][ T8033] loop5: detected capacity change from 0 to 40427 [ 183.379438][ T8076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.461341][ T8033] F2FS-fs (loop5): build fault injection rate: 690 [ 183.473727][ T8076] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 183.503049][ T8033] F2FS-fs (loop5): invalid crc value [ 183.584406][ T8076] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 183.600796][ T8077] syz.2.792 (8077) used greatest stack depth: 17864 bytes left [ 183.643407][ T7710] veth0_vlan: entered promiscuous mode [ 183.662833][ T8076] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 183.712202][ T7710] veth1_vlan: entered promiscuous mode [ 183.756575][ T8033] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 183.781393][ T8076] EXT4-fs (loop1): 1 truncate cleaned up [ 183.801821][ T8033] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 183.812473][ T8076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.826530][ T8090] Invalid source name [ 183.921856][ T7710] veth0_macvtap: entered promiscuous mode [ 183.943584][ T8076] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 4: comm syz.1.793: lblock 0 mapped to illegal pblock 4 (length 1) [ 183.958722][ T30] audit: type=1800 audit(1758799935.904:62): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.776" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 184.003820][ T7710] veth1_macvtap: entered promiscuous mode [ 184.048648][ T8076] EXT4-fs (loop1): Remounting filesystem read-only [ 184.115448][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.145768][ T5864] syz-executor: attempt to access beyond end of device [ 184.145768][ T5864] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.171990][ T8094] loop0: detected capacity change from 0 to 512 [ 184.196624][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.227369][ T5864] CPU: 1 UID: 0 PID: 5864 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 184.227401][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.227416][ T5864] Call Trace: [ 184.227427][ T5864] [ 184.227437][ T5864] dump_stack_lvl+0x189/0x250 [ 184.227477][ T5864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.227508][ T5864] ? __pfx_queue_work_on+0x10/0x10 [ 184.227532][ T5864] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 184.227572][ T5864] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 184.227629][ T5864] f2fs_handle_critical_error+0x37c/0x540 [ 184.227677][ T5864] f2fs_write_end_io+0x886/0xb60 [ 184.227730][ T5864] __submit_merged_bio+0x27a/0x6a0 [ 184.227782][ T5864] __submit_merged_write_cond+0x255/0x530 [ 184.227829][ T5864] f2fs_write_data_pages+0x261d/0x3000 [ 184.227904][ T5864] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.227926][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.228025][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.228082][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.228110][ T5864] ? __lock_acquire+0xab9/0xd20 [ 184.228158][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.228185][ T5864] ? do_raw_spin_lock+0x121/0x290 [ 184.228227][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.228261][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.228287][ T5864] ? do_raw_spin_unlock+0x122/0x240 [ 184.228317][ T5864] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.228344][ T5864] do_writepages+0x32e/0x550 [ 184.228385][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.228419][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.228445][ T5864] ? do_raw_spin_unlock+0x122/0x240 [ 184.228483][ T5864] filemap_fdatawrite+0x199/0x240 [ 184.228519][ T5864] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 184.228614][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.228648][ T5864] ? do_raw_spin_unlock+0x122/0x240 [ 184.228685][ T5864] f2fs_sync_dirty_inodes+0x31f/0x830 [ 184.228736][ T5864] f2fs_write_checkpoint+0x95a/0x1df0 [ 184.228798][ T5864] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 184.228884][ T5864] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 184.228910][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.228937][ T5864] ? kfree+0x18e/0x440 [ 184.228970][ T5864] ? kill_f2fs_super+0x298/0x6c0 [ 184.229004][ T5864] kill_f2fs_super+0x2c3/0x6c0 [ 184.229040][ T5864] ? __pfx_kill_f2fs_super+0x10/0x10 [ 184.229064][ T5864] ? radix_tree_delete_item+0x2b6/0x400 [ 184.229099][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.229126][ T5864] ? shrinker_free+0x2ce/0x3e0 [ 184.229163][ T5864] deactivate_locked_super+0xbc/0x130 [ 184.229198][ T5864] cleanup_mnt+0x425/0x4c0 [ 184.229233][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.229261][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.229292][ T5864] task_work_run+0x1d4/0x260 [ 184.229332][ T5864] ? __pfx_task_work_run+0x10/0x10 [ 184.229363][ T5864] ? __x64_sys_umount+0x122/0x160 [ 184.229405][ T5864] ? exit_to_user_mode_loop+0x40/0x110 [ 184.229448][ T5864] exit_to_user_mode_loop+0xec/0x110 [ 184.229485][ T5864] do_syscall_64+0x2bd/0x3b0 [ 184.229511][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.229536][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.229559][ T5864] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.229586][ T5864] ? exc_page_fault+0x9f/0xf0 [ 184.229615][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.229638][ T5864] RIP: 0033:0x7f9c2f3901f7 [ 184.229660][ T5864] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 184.229681][ T5864] RSP: 002b:00007fffc0183f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 184.229706][ T5864] RAX: 0000000000000000 RBX: 00007f9c2f411d7d RCX: 00007f9c2f3901f7 [ 184.229724][ T5864] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc0184000 [ 184.229739][ T5864] RBP: 00007fffc0184000 R08: 0000000000000000 R09: 0000000000000000 [ 184.229755][ T5864] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc0185090 [ 184.229772][ T5864] R13: 00007f9c2f411d7d R14: 000000000002ceac R15: 00007fffc01850d0 [ 184.229815][ T5864] [ 184.249322][ T8094] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.659052][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.668848][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.680510][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.690796][ T5864] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 184.726458][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.780759][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.798706][ T8094] EXT4-fs (loop0): 1 truncate cleaned up [ 184.816748][ T8094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.930227][ T8101] loop4: detected capacity change from 0 to 1024 [ 184.956573][ T8104] loop1: detected capacity change from 0 to 64 [ 185.000534][ T8101] EXT4-fs: Ignoring removed nobh option [ 185.042257][ T5878] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.083649][ T8101] EXT4-fs: Ignoring removed bh option [ 185.139029][ T5876] hfs: node 4:3 still has 2 user(s)! [ 185.192167][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.230051][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.246177][ T8101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.276630][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.344909][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.591203][ T5869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.785529][ T8122] xt_l2tp: missing protocol rule (udp|l2tpip) [ 185.969887][ T8131] loop5: detected capacity change from 0 to 22 [ 186.000473][ T8131] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 186.061580][ T8131] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 186.460568][ T8146] loop1: detected capacity change from 0 to 128 [ 186.503005][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'. [ 186.539953][ T8144] loop5: detected capacity change from 0 to 1024 [ 186.795569][ T3523] hfsplus: b-tree write err: -5, ino 4 [ 187.056762][ T8162] macvlan2: entered promiscuous mode [ 187.070576][ T8162] macvlan2: entered allmulticast mode [ 187.195175][ T8161] loop6: detected capacity change from 0 to 4096 [ 187.264640][ T8161] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 187.309480][ T8161] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 187.317382][ T8161] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 187.372521][ T8161] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00 [ 187.391074][ T8132] loop0: detected capacity change from 0 to 32768 [ 187.448052][ T8161] ntfs3(loop6): try to read out of volume at offset 0x3fffffc1c00 [ 187.519830][ T8161] ntfs3(loop6): try to read out of volume at offset 0x3fffffc2c00 [ 187.531754][ T8132] ERROR: (device loop0): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 187.531754][ T8132] [ 187.550277][ T8161] ntfs3(loop6): try to read out of volume at offset 0x3fffffc4c00 [ 187.558168][ T8161] ntfs3(loop6): try to read out of volume at offset 0x3fffffc8c00 [ 187.602870][ T8161] ntfs3(loop6): try to read out of volume at offset 0x3fffffd0c00 [ 187.614007][ T8132] ERROR: (device loop0): remounting filesystem as read-only [ 187.630035][ T8132] jfs_readdir: unexpected rc = -5 from dtReadNext [ 187.670499][ T8161] ntfs3(loop6): try to read out of volume at offset 0x3fffffe0c00 [ 187.829533][ T9] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 187.837722][ T5990] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 188.000711][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.029500][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 188.041538][ T5990] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.062442][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.082168][ T5990] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 188.104997][ T9] usb 5-1: config 0 descriptor?? [ 188.129429][ T5990] usb 3-1: config 1 has no interface number 0 [ 188.152661][ T5990] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.209661][ T5990] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 188.251607][ T8188] loop5: detected capacity change from 0 to 256 [ 188.282145][ T5990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.295010][ T8188] exfat: Deprecated parameter 'utf8' [ 188.302513][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.334717][ T5990] usb 3-1: Product: syz [ 188.338911][ T5990] usb 3-1: Manufacturer: syz [ 188.375570][ T5990] usb 3-1: SerialNumber: syz [ 188.440463][ T8188] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 188.574497][ T8196] loop1: detected capacity change from 0 to 128 [ 188.707578][ T8198] tipc: Enabled bearer , priority 10 [ 188.779764][ T9] usb 5-1: USB disconnect, device number 7 [ 188.786053][ T8196] syz.1.845: attempt to access beyond end of device [ 188.786053][ T8196] loop1: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 188.818162][ T8200] netlink: 'syz.6.847': attribute type 10 has an invalid length. [ 188.845247][ T8202] netlink: 'syz.6.847': attribute type 10 has an invalid length. [ 188.954783][ T8200] team0: Port device dummy0 added [ 189.028592][ T5990] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 189.048616][ T8202] team0: Port device dummy0 removed [ 189.055474][ T5990] cdc_ncm 3-1:1.1: bind() failure [ 189.110937][ T5990] usb 3-1: USB disconnect, device number 7 [ 189.118024][ T8202] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 189.405672][ T8209] loop5: detected capacity change from 0 to 40427 [ 189.437184][ T8209] F2FS-fs (loop5): invalid crc value [ 189.639450][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 189.699402][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 189.764207][ T8220] netlink: 'syz.1.854': attribute type 18 has an invalid length. [ 189.774741][ T8205] sctp: failed to load transform for md5: -2 [ 189.799642][ T8222] binder: 8221:8222 ioctl 4018620d 0 returned -22 [ 189.808777][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 189.832145][ T8222] binder: 8221:8222 ioctl c0306201 200000000240 returned -11 [ 190.295710][ T8242] loop0: detected capacity change from 0 to 128 [ 190.340886][ T8242] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.458550][ T8242] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.663021][ T5878] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.790361][ T8256] program syz.4.871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.861144][ T8260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.872'. [ 190.879682][ T8260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.872'. [ 190.925787][ T8262] loop6: detected capacity change from 0 to 1024 [ 191.041149][ T8262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.111851][ T8272] loop0: detected capacity change from 0 to 128 [ 191.167365][ T8272] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 191.279317][ T8272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.383689][ T8283] netlink: 'syz.4.882': attribute type 10 has an invalid length. [ 191.407391][ T8272] overlayfs: upper fs needs to support d_type. [ 191.436434][ T8272] overlayfs: upper fs does not support tmpfile. [ 191.471544][ T8283] team0: Port device dummy0 added [ 191.506668][ T8286] netlink: 'syz.4.882': attribute type 10 has an invalid length. [ 191.638483][ T8286] team0: Port device dummy0 removed [ 191.653781][ T8286] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 192.092730][ T8297] loop0: detected capacity change from 0 to 4096 [ 192.374677][ T8305] loop2: detected capacity change from 0 to 4096 [ 192.449544][ T8311] tmpfs: Bad value for 'nr_inodes' [ 192.616009][ T30] audit: type=1326 audit(1758799944.584:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.5.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2f38eec9 code=0x7fc00000 [ 192.675705][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.769719][ T30] audit: type=1800 audit(1758799944.684:64): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.893" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 193.153048][ T8324] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 193.188750][ T8327] loop5: detected capacity change from 0 to 1024 [ 193.208810][ T8324] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 193.286906][ T8327] EXT4-fs: Ignoring removed orlov option [ 193.295513][ T8333] netlink: 'syz.4.905': attribute type 29 has an invalid length. [ 193.338118][ T8333] netlink: 'syz.4.905': attribute type 29 has an invalid length. [ 193.338820][ T8327] EXT4-fs: Ignoring removed bh option [ 193.388822][ T8327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.497103][ T8327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.563847][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.570296][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.813547][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.862864][ T8350] loop1: detected capacity change from 0 to 1024 [ 194.030683][ T8354] loop2: detected capacity change from 0 to 2048 [ 194.102291][ T8359] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.138196][ T30] audit: type=1326 audit(1758799946.104:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.6.917" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda6e78eec9 code=0x0 [ 194.259353][ T5937] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 194.299421][ T8354] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 194.399379][ T8354] Remounting filesystem read-only [ 194.418305][ T8354] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 194.456752][ T8354] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 194.477105][ T5937] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 194.489487][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.513288][ T8354] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 194.525345][ T8368] loop1: detected capacity change from 0 to 65 [ 194.537363][ T5937] usb 5-1: config 0 descriptor?? [ 194.565039][ T8368] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 194.603952][ T8354] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 194.659459][ T8354] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 194.715183][ T8354] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 194.773353][ T8354] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 194.821610][ T30] audit: type=1800 audit(1758799946.794:66): pid=8354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.914" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 194.855180][ T8343] loop0: detected capacity change from 0 to 32768 [ 195.022157][ T5937] kye 0003:0458:5005.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 195.080142][ T5937] kye 0003:0458:5005.0009: unknown main item tag 0x0 [ 195.099502][ T8376] netlink: 'syz.1.923': attribute type 10 has an invalid length. [ 195.117830][ T5937] kye 0003:0458:5005.0009: unknown main item tag 0x0 [ 195.148679][ T5937] kye 0003:0458:5005.0009: unknown main item tag 0x0 [ 195.187916][ T5937] kye 0003:0458:5005.0009: unknown main item tag 0x0 [ 195.218048][ T5937] kye 0003:0458:5005.0009: unknown main item tag 0x0 [ 195.259648][ T5990] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 195.271481][ T5937] kye 0003:0458:5005.0009: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.4-1/input0 [ 195.369300][ T5937] kye 0003:0458:5005.0009: tablet-enabling feature report not found [ 195.421196][ T5937] kye 0003:0458:5005.0009: tablet enabling failed [ 195.487863][ T5990] usb 6-1: Using ep0 maxpacket: 32 [ 195.514319][ T8392] sg_write: data in/out 16514940/4 bytes for SCSI command 0x1c-- guessing data in; [ 195.514319][ T8392] program syz.1.929 not setting count and/or reply_len properly [ 195.515812][ T5937] usb 5-1: USB disconnect, device number 8 [ 195.579840][ T5990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.641893][ T5990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.697007][ T8387] fido_id[8387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 195.729639][ T5990] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 195.790741][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.863992][ T8399] raw_sendmsg: syz.6.932 forgot to set AF_INET. Fix it! [ 195.908948][ T5990] usb 6-1: config 0 descriptor?? [ 195.946960][ T7268] udevd[7268]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 195.966312][ T8401] loop2: detected capacity change from 0 to 256 [ 196.030171][ T8402] loop0: detected capacity change from 0 to 2048 [ 196.110772][ T8402] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.119471][ T8401] FAT-fs (loop2): Directory bread(block 64) failed [ 196.149475][ T8401] FAT-fs (loop2): Directory bread(block 65) failed [ 196.169394][ T8401] FAT-fs (loop2): Directory bread(block 66) failed [ 196.239951][ T8401] FAT-fs (loop2): Directory bread(block 67) failed [ 196.271698][ T8401] FAT-fs (loop2): Directory bread(block 68) failed [ 196.312271][ T8401] FAT-fs (loop2): Directory bread(block 69) failed [ 196.335779][ T8401] FAT-fs (loop2): Directory bread(block 70) failed [ 196.372776][ T8401] FAT-fs (loop2): Directory bread(block 71) failed [ 196.404682][ T8401] FAT-fs (loop2): Directory bread(block 72) failed [ 196.421786][ T5990] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 196.448369][ T8401] FAT-fs (loop2): Directory bread(block 73) failed [ 196.451681][ T5990] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 196.497484][ T5990] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 196.531141][ T5990] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 196.555291][ T5990] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 196.605332][ T5990] koneplus 0003:1E7D:2D51.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 196.656524][ T5990] koneplus 0003:1E7D:2D51.000A: couldn't init struct koneplus_device [ 196.692495][ T5990] koneplus 0003:1E7D:2D51.000A: couldn't install mouse [ 196.728785][ T5990] koneplus 0003:1E7D:2D51.000A: probe with driver koneplus failed with error -71 [ 196.776968][ T5990] usb 6-1: USB disconnect, device number 4 [ 196.792762][ T8420] loop0: detected capacity change from 0 to 1024 [ 196.845345][ T8418] fido_id[8418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 196.904172][ T8420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.957207][ T8420] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.059986][ T5878] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.625611][ T8443] netlink: 'syz.6.952': attribute type 3 has an invalid length. [ 197.696785][ T8445] loop1: detected capacity change from 0 to 256 [ 197.806126][ T8445] FAT-fs (loop1): Directory bread(block 64) failed [ 197.830849][ T8445] FAT-fs (loop1): Directory bread(block 65) failed [ 197.869887][ T8445] FAT-fs (loop1): Directory bread(block 66) failed [ 197.876465][ T8445] FAT-fs (loop1): Directory bread(block 67) failed [ 197.902021][ T8450] Zero length message leads to an empty skb [ 197.945416][ T8445] FAT-fs (loop1): Directory bread(block 68) failed [ 197.953495][ T8417] loop4: detected capacity change from 0 to 32768 [ 197.969642][ T8445] FAT-fs (loop1): Directory bread(block 69) failed [ 197.987192][ T8445] FAT-fs (loop1): Directory bread(block 70) failed [ 198.002671][ T8445] FAT-fs (loop1): Directory bread(block 71) failed [ 198.059519][ T8445] FAT-fs (loop1): Directory bread(block 72) failed [ 198.109048][ T8445] FAT-fs (loop1): Directory bread(block 73) failed [ 198.239003][ T8468] loop0: detected capacity change from 0 to 512 [ 198.297303][ T8468] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.361470][ T8468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=00c2] [ 198.394495][ T8417] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 198.394531][ T8417] allowing incompatible features above 0.0: (unknown version) [ 198.394546][ T8417] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 198.405641][ T8468] System zones: [ 198.453228][ T8417] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 198.509506][ T8468] 0-2, 18-18, 34-34 [ 198.513746][ T8468] EXT4-fs (loop0): orphan cleanup on readonly fs [ 198.530660][ T8468] EXT4-fs error (device loop0): ext4_quota_enable:7128: inode #15: comm syz.0.957: iget: bad i_size value: 360287970189639690 [ 198.534693][ T8417] bcachefs (loop4): initializing new filesystem [ 198.594133][ T8468] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.957: Bad quota inode: 15, type: 2 [ 198.645666][ T8417] bcachefs (loop4): going read-write [ 198.660266][ T8468] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 198.767450][ T8417] bcachefs (loop4): marking superblocks [ 198.794356][ T8468] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 198.841178][ T8468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.873734][ T8476] loop1: detected capacity change from 0 to 4096 [ 198.990408][ T8417] bcachefs (loop4): initializing freespace [ 199.015612][ T8417] bcachefs (loop4): done initializing freespace [ 199.094647][ T8417] bcachefs (loop4): reading snapshots table [ 199.109831][ T8417] bcachefs (loop4): reading snapshots done [ 199.214553][ T8417] bcachefs (loop4): done starting filesystem [ 199.291367][ T5878] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.569967][ T8417] syz.4.941 (8417) used greatest stack depth: 15768 bytes left [ 199.613933][ T5869] bcachefs (loop4): shutting down [ 199.628042][ T5869] bcachefs (loop4): going read-only [ 199.646343][ T5869] bcachefs (loop4): finished waiting for writes to stop [ 199.684893][ T5869] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 199.823197][ T8496] loop0: detected capacity change from 0 to 1024 [ 199.877168][ T5869] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 199.968373][ T5869] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 200.000436][ T5869] bcachefs (loop4): marking filesystem clean [ 200.186399][ T5869] bcachefs (loop4): shutdown complete [ 200.222365][ T8485] loop5: detected capacity change from 0 to 32768 [ 200.243902][ T30] audit: type=1326 audit(1758799952.204:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8501 comm="syz.1.975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f343038eec9 code=0x0 [ 200.265459][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.342059][ T8485] find_entry called with index >= next_index [ 200.369547][ T8485] find_entry called with index >= next_index [ 200.384970][ T8485] find_entry called with index >= next_index [ 200.509910][ T8487] loop2: detected capacity change from 0 to 32768 [ 200.537236][ T8487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.967 (8487) [ 200.600979][ T8487] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.628730][ T8487] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 200.743073][ T8487] BTRFS info (device loop2): enabling ssd optimizations [ 200.759559][ T8487] BTRFS info (device loop2): enabling free space tree [ 200.916701][ T5877] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.001738][ T8529] loop0: detected capacity change from 0 to 4096 [ 201.057547][ T8529] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 201.087397][ T8531] loop6: detected capacity change from 0 to 2048 [ 201.215096][ T8531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0600-000000000000 r/w without journal. Quota mode: none. [ 201.228151][ T8529] ntfs3(loop0): Failed to load $Extend (-22). [ 201.269357][ T8529] ntfs3(loop0): Failed to initialize $Extend. [ 201.278184][ T8531] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.478761][ T8531] EXT4-fs warning (device loop6): ext4_empty_dir:3099: inode #12: comm syz.6.982: directory missing '..' [ 201.654508][ T8541] loop2: detected capacity change from 0 to 1024 [ 201.750907][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0600-000000000000. [ 201.790271][ T8541] hfsplus: xattr searching failed [ 201.979388][ T8547] loop5: detected capacity change from 0 to 512 [ 202.024660][ T8547] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 202.123000][ T1162] hfsplus: b-tree write err: -5, ino 4 [ 202.128772][ T8547] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.987: bg 0: block 104: invalid block bitmap [ 202.271704][ T8547] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 202.309131][ T5230] udevd[5230]: worker [8383] terminated by signal 33 (Unknown signal 33) [ 202.337143][ T8547] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.987: invalid indirect mapped block 1 (level 1) [ 202.344474][ T5230] udevd[5230]: worker [8383] failed while handling '/devices/virtual/block/loop0' [ 202.375916][ T8538] loop1: detected capacity change from 0 to 32768 [ 202.451914][ T8547] EXT4-fs (loop5): 1 truncate cleaned up [ 202.474562][ T8547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.499542][ T8538] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 202.520992][ T8538] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 202.901668][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.973070][ T5876] ocfs2: Unmounting device (7,1) on (node local) [ 202.987281][ T8572] loop6: detected capacity change from 0 to 1024 [ 203.263458][ T1162] hfsplus: b-tree write err: -5, ino 4 [ 203.308214][ T30] audit: type=1326 audit(1758799955.274:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.0.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadeb18eec9 code=0x7ffc0000 [ 203.488214][ T30] audit: type=1326 audit(1758799955.274:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.0.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fadeb18eec9 code=0x7ffc0000 [ 203.689252][ T30] audit: type=1326 audit(1758799955.274:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.0.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadeb18eec9 code=0x7ffc0000 [ 203.811067][ T30] audit: type=1326 audit(1758799955.274:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.0.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadeb18eec9 code=0x7ffc0000 [ 204.474671][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 204.578519][ T9] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 204.772307][ T8626] loop0: detected capacity change from 0 to 512 [ 204.800059][ T8626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.832664][ T8622] fido_id[8622]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 204.851761][ T8626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.858396][ T8629] loop1: detected capacity change from 0 to 22 [ 204.888188][ T8626] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 204.900431][ T8629] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 204.974556][ T8629] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 205.003631][ T8626] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 205.038375][ T8631] team0: Device gtp0 is of different type [ 205.065672][ T8626] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 205.141115][ T8626] EXT4-fs (loop0): 1 truncate cleaned up [ 205.161538][ T8626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.470489][ T8626] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 205.488616][ T8605] loop4: detected capacity change from 0 to 32768 [ 205.535622][ T8605] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 205.549440][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1027'. [ 205.679003][ T5878] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.714596][ T8605] XFS (loop4): Ending clean mount [ 205.759717][ T8605] XFS (loop4): Quotacheck needed: Please wait. [ 205.884846][ T8605] XFS (loop4): Quotacheck: Done. [ 206.141089][ T5869] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 206.210235][ T5990] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 206.414772][ T5990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.456079][ T5990] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.499990][ T5990] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 206.509048][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.631762][ T5990] usb 2-1: config 0 descriptor?? [ 207.007514][ T8669] loop5: detected capacity change from 0 to 32768 [ 207.050523][ T5990] hid (null): invalid report_count -160948754 [ 207.084771][ T5990] megaworld 0003:07B5:0312.000C: invalid report_count -160948754 [ 207.093478][ T5990] megaworld 0003:07B5:0312.000C: item 0 4 1 9 parsing failed [ 207.096729][ T8669] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.101664][ T5990] megaworld 0003:07B5:0312.000C: parse failed [ 207.116022][ T5990] megaworld 0003:07B5:0312.000C: probe with driver megaworld failed with error -22 [ 207.307754][ T8669] XFS (loop5): Ending clean mount [ 207.347985][ T8669] XFS (loop5): Quotacheck needed: Please wait. [ 207.375927][ T5990] usb 2-1: USB disconnect, device number 4 [ 207.484064][ T8669] XFS (loop5): Quotacheck: Done. [ 207.727882][ T5864] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.869686][ T8724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1059'. [ 208.085036][ T5990] IPVS: starting estimator thread 0... [ 208.229513][ T8729] IPVS: using max 25 ests per chain, 60000 per kthread [ 208.339570][ T8735] netlink: 'syz.4.1063': attribute type 83 has an invalid length. [ 208.626494][ T8743] loop2: detected capacity change from 0 to 512 [ 208.689471][ T8743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.697912][ T8743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.760027][ T8743] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 208.806100][ T8743] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 208.840761][ T8743] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 208.888247][ T8722] loop0: detected capacity change from 0 to 32768 [ 208.892140][ T8743] EXT4-fs (loop2): 1 truncate cleaned up [ 208.962183][ T8743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.017214][ T8753] loop4: detected capacity change from 0 to 256 [ 209.066801][ T8753] exfat: Deprecated parameter 'utf8' [ 209.072647][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 209.136745][ T8743] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 209.221482][ T8753] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 209.263312][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 209.306953][ T24] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 209.327106][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.335999][ T5877] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.357579][ T24] usb 6-1: config 0 has no interface number 0 [ 209.400350][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 209.429859][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.471080][ T24] usb 6-1: Product: syz [ 209.475245][ T24] usb 6-1: Manufacturer: syz [ 209.504389][ T24] usb 6-1: SerialNumber: syz [ 209.545964][ T24] usb 6-1: config 0 descriptor?? [ 209.586272][ T8734] loop1: detected capacity change from 0 to 32768 [ 209.592160][ T24] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 209.645475][ T24] usb 6-1: No valid video chain found. [ 209.693308][ T8734] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 209.785010][ T24] usb 6-1: USB disconnect, device number 5 [ 209.820000][ T8734] XFS (loop1): Ending clean mount [ 209.891846][ T8734] XFS (loop1): Quotacheck needed: Please wait. [ 209.969551][ T8734] XFS (loop1): Quotacheck: Done. [ 210.246507][ T5876] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 210.621808][ T8788] loop6: detected capacity change from 0 to 512 [ 210.674838][ T8788] EXT4-fs: Ignoring removed oldalloc option [ 210.709466][ T8788] EXT4-fs: Ignoring removed bh option [ 210.766535][ T8792] netlink: 'syz.0.1086': attribute type 8 has an invalid length. [ 210.867316][ T8788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 210.929512][ T8788] System zones: 1-12 [ 210.933770][ T8788] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.1085: corrupted in-inode xattr: e_value size too large [ 210.999875][ T8788] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1085: couldn't read orphan inode 15 (err -117) [ 211.117998][ T8788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.283240][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.452332][ T8778] loop4: detected capacity change from 0 to 32768 [ 212.126883][ T8819] loop4: detected capacity change from 0 to 256 [ 212.315998][ T8819] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 212.461864][ T8802] loop5: detected capacity change from 0 to 32768 [ 212.531543][ T8802] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 212.630311][ T8802] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 212.894289][ T5864] ocfs2: Unmounting device (7,5) on (node local) [ 212.967661][ T8835] loop1: detected capacity change from 0 to 2048 [ 213.001223][ T8809] loop0: detected capacity change from 0 to 32768 [ 213.019324][ T8809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1093 (8809) [ 213.065434][ T8835] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 213.065456][ T8835] UDF-fs: Scanning with blocksize 512 failed [ 213.069392][ T5882] Bluetooth: hci5: command tx timeout [ 213.074718][ T8809] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.074803][ T8809] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 213.109256][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 213.139413][ T8835] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.259296][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 213.290551][ T24] usb 5-1: config 4 has an invalid interface number: 8 but max is 0 [ 213.301066][ T8809] BTRFS info (device loop0): setting nodatasum [ 213.318985][ T24] usb 5-1: config 4 has no interface number 0 [ 213.328902][ T24] usb 5-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 213.351006][ T8809] BTRFS info (device loop0): setting nodatacow [ 213.357211][ T8809] BTRFS info (device loop0): enabling free space tree [ 213.369354][ T24] usb 5-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 213.412842][ T24] usb 5-1: config 4 interface 8 has no altsetting 0 [ 213.439315][ T8809] BTRFS info (device loop0): max_inline set to 0 [ 213.461978][ T24] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 213.491609][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.542121][ T24] usb 5-1: Product: syz [ 213.559033][ T24] usb 5-1: Manufacturer: syz [ 213.574210][ T24] usb 5-1: SerialNumber: syz [ 213.880848][ T24] opticon 5-1:4.8: opticon converter detected [ 213.960023][ T5878] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.987927][ T8864] loop6: detected capacity change from 0 to 128 [ 213.995074][ T24] usb 5-1: opticon converter now attached to ttyUSB0 [ 214.058099][ T24] usb 5-1: USB disconnect, device number 9 [ 214.155859][ T24] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 214.201348][ T24] opticon 5-1:4.8: device disconnected [ 214.328766][ T8831] loop2: detected capacity change from 0 to 32768 [ 214.469852][ T8831] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.644633][ T8831] XFS (loop2): Ending clean mount [ 214.714274][ T8831] XFS (loop2): Quotacheck needed: Please wait. [ 214.825064][ T8831] XFS (loop2): Quotacheck: Done. [ 214.973838][ T5877] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 215.503593][ T8906] loop1: detected capacity change from 0 to 256 [ 215.602534][ T8906] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 215.701552][ T8906] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 215.766909][ T8906] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 215.808647][ T8906] UDF-fs: Scanning with blocksize 512 failed [ 215.819590][ T8910] netlink: 'syz.5.1129': attribute type 1 has an invalid length. [ 215.878904][ T8906] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 215.927150][ T8906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.064741][ T8912] loop6: detected capacity change from 0 to 4096 [ 216.113077][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 216.119290][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 216.123904][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 216.147262][ T8912] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 216.156860][ T8919] syz.5.1132 uses obsolete (PF_INET,SOCK_PACKET) [ 216.188761][ T8920] mkiss: ax0: crc mode is auto. [ 216.302441][ T8912] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 216.323266][ T8924] loop1: detected capacity change from 0 to 256 [ 216.345725][ T8912] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 216.483911][ T8912] ntfs3(loop6): ino=1b, mi_enum_attr [ 216.535970][ T8893] loop4: detected capacity change from 0 to 32768 [ 216.663974][ T8893] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 216.771624][ T5869] ocfs2: Unmounting device (7,4) on (node local) [ 217.571637][ T8944] loop5: detected capacity change from 0 to 4096 [ 217.621621][ T8944] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 217.841503][ T8962] loop0: detected capacity change from 0 to 164 [ 217.943842][ T8962] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 217.987328][ T8958] loop2: detected capacity change from 0 to 4096 [ 218.014516][ T8962] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 218.061041][ T8962] rock: directory entry would overflow storage [ 218.071963][ T8962] rock: sig=0x4f50, size=4, remaining=3 [ 218.083986][ T8962] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 218.116672][ T8968] loop6: detected capacity change from 0 to 1024 [ 218.138521][ T8958] ntfs3(loop2): ino=b, mi_enum_attr [ 218.171533][ T8958] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 218.229688][ T8958] ntfs3(loop2): Failed to load $Extend (-22). [ 218.273000][ T8958] ntfs3(loop2): Failed to initialize $Extend. [ 218.367697][ T8972] loop5: detected capacity change from 0 to 512 [ 218.462410][ T8972] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 218.636970][ T8972] EXT4-fs (loop5): 1 truncate cleaned up [ 218.691182][ T8972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.093112][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.237315][ T8996] loop2: detected capacity change from 0 to 1024 [ 219.550690][ T43] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 219.741660][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.769294][ T43] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 219.778352][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.848887][ T9017] loop0: detected capacity change from 0 to 256 [ 219.860623][ T43] usb 6-1: config 0 descriptor?? [ 219.886642][ T9021] loop4: detected capacity change from 0 to 128 [ 219.949033][ T9021] FAT-fs (loop4): Directory bread(block 162) failed [ 220.000598][ T9021] FAT-fs (loop4): Directory bread(block 163) failed [ 220.027642][ T9021] FAT-fs (loop4): Directory bread(block 164) failed [ 220.042356][ T9017] FAT-fs (loop0): Directory bread(block 64) failed [ 220.057635][ T9021] FAT-fs (loop4): Directory bread(block 165) failed [ 220.068467][ T9017] FAT-fs (loop0): Directory bread(block 65) failed [ 220.079701][ T5866] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 220.112886][ T9017] FAT-fs (loop0): Directory bread(block 66) failed [ 220.119992][ T9021] FAT-fs (loop4): Directory bread(block 166) failed [ 220.120050][ T9021] FAT-fs (loop4): Directory bread(block 167) failed [ 220.120086][ T9021] FAT-fs (loop4): Directory bread(block 168) failed [ 220.120115][ T9021] FAT-fs (loop4): Directory bread(block 169) failed [ 220.188989][ T8989] loop6: detected capacity change from 0 to 32768 [ 220.249569][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 220.254968][ T9017] FAT-fs (loop0): Directory bread(block 67) failed [ 220.255085][ T9017] FAT-fs (loop0): Directory bread(block 68) failed [ 220.255114][ T9017] FAT-fs (loop0): Directory bread(block 69) failed [ 220.255204][ T9017] FAT-fs (loop0): Directory bread(block 70) failed [ 220.281449][ T5866] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 220.293931][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.305810][ T8989] add_index: next_index = 0. Resetting! [ 220.308934][ T9017] FAT-fs (loop0): Directory bread(block 71) failed [ 220.321528][ T43] hid_mf 0003:0079:1846.000D: unknown main item tag 0x1 [ 220.356382][ T9017] FAT-fs (loop0): Directory bread(block 72) failed [ 220.366043][ T5866] usb 3-1: config 0 descriptor?? [ 220.383503][ T9017] FAT-fs (loop0): Directory bread(block 73) failed [ 220.405324][ T43] hid_mf 0003:0079:1846.000D: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0 [ 220.453346][ T9026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1181'. [ 220.479758][ T43] hid_mf 0003:0079:1846.000D: Invalid report, this should never happen! [ 220.527187][ T9026] IPVS: Error connecting to the multicast addr [ 220.550006][ T43] hid_mf 0003:0079:1846.000D: Force feedback init failed. [ 220.602087][ T43] usb 6-1: USB disconnect, device number 6 [ 220.706166][ T9027] fido_id[9027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 220.847484][ T5866] redragon 0003:0C45:760B.000E: item fetching failed at offset 0/3 [ 220.873129][ T5866] redragon 0003:0C45:760B.000E: probe with driver redragon failed with error -22 [ 221.159956][ T5937] usb 3-1: USB disconnect, device number 8 [ 221.227571][ T9041] loop1: detected capacity change from 0 to 16 [ 221.286221][ T9041] erofs (device loop1): mounted with root inode @ nid 36. [ 221.619037][ T9053] loop6: detected capacity change from 0 to 256 [ 221.676742][ T9059] loop1: detected capacity change from 0 to 24 [ 221.804355][ T9053] FAT-fs (loop6): Directory bread(block 64) failed [ 221.843543][ T9053] FAT-fs (loop6): Directory bread(block 65) failed [ 221.893739][ T9053] FAT-fs (loop6): Directory bread(block 66) failed [ 221.943303][ T9053] FAT-fs (loop6): Directory bread(block 67) failed [ 221.974028][ T9053] FAT-fs (loop6): Directory bread(block 68) failed [ 222.012028][ T9053] FAT-fs (loop6): Directory bread(block 69) failed [ 222.043164][ T9053] FAT-fs (loop6): Directory bread(block 70) failed [ 222.073025][ T9053] FAT-fs (loop6): Directory bread(block 71) failed [ 222.129240][ T9053] FAT-fs (loop6): Directory bread(block 72) failed [ 222.146033][ T9053] FAT-fs (loop6): Directory bread(block 73) failed [ 222.671748][ T9069] loop5: detected capacity change from 0 to 65536 [ 222.743299][ T9083] loop4: detected capacity change from 0 to 1024 [ 222.754479][ T9069] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 222.824027][ T9094] loop2: detected capacity change from 0 to 256 [ 222.852204][ T9069] XFS (loop5): Metadata corruption detected at __xfs_buf_ioend+0x342/0x6f0, xfs_inode block 0x40 xfs_inode_buf_verify [ 222.864948][ T9069] XFS (loop5): Unmount and run xfs_repair [ 222.870735][ T9069] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 222.878109][ T9069] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 222.889224][ T9069] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 222.898083][ T9069] 00000020: 34 f7 58 68 a7 8d ff 64 34 f7 58 68 a7 8d ff 64 4.Xh...d4.Xh...d [ 222.907838][ T9069] 00000030: 34 f7 58 68 a7 8d ff 64 00 00 00 00 00 00 00 64 4.Xh...d.......d [ 222.916951][ T9069] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 222.925858][ T9069] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 80 cb a1 b3 ................ [ 222.936815][ T9069] 00000060: ff ff 08 00 22 aa 56 03 00 00 00 00 00 00 00 05 ....".V......... [ 222.945744][ T9069] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 222.954882][ T9069] XFS (loop5): metadata I/O error in "xfs_imap_to_bp+0x127/0x2f0" at daddr 0x40 len 32 error 117 [ 222.960944][ T9094] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 222.965609][ T9069] XFS (loop5): Failed to read root inode 0x40, error 117 [ 222.985042][ T9069] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 223.314744][ T12] hfsplus: b-tree write err: -5, ino 4 [ 223.986329][ T9079] loop1: detected capacity change from 0 to 32768 [ 224.142107][ T9079] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 224.207548][ T9079] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.224891][ T9128] loop0: detected capacity change from 0 to 256 [ 224.262059][ T9128] exfat: Deprecated parameter 'namecase' [ 224.267769][ T9128] exfat: Deprecated parameter 'namecase' [ 224.422508][ T9128] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 224.583831][ T9079] XFS (loop1): Ending clean mount [ 224.639059][ T9107] loop6: detected capacity change from 0 to 32768 [ 224.891429][ T5876] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.061638][ T9146] loop2: detected capacity change from 0 to 1024 [ 225.117564][ T9149] loop4: detected capacity change from 0 to 1024 [ 225.245097][ T9149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.372289][ T9149] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.1234: missing EA_INODE flag [ 225.501469][ T9149] EXT4-fs (loop4): Remounting filesystem read-only [ 225.536291][ T49] hfsplus: b-tree write err: -5, ino 8 [ 225.666698][ T9158] loop2: detected capacity change from 0 to 256 [ 225.694923][ T9158] exfat: Deprecated parameter 'utf8' [ 225.725178][ T9158] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d) [ 225.819782][ T5869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.272705][ T9172] loop5: detected capacity change from 0 to 1024 [ 226.354053][ T9172] hfsplus: bad catalog entry type [ 226.519955][ T995] hfsplus: b-tree write err: -5, ino 4 [ 226.773102][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1250'. [ 227.027256][ T9160] loop1: detected capacity change from 0 to 40427 [ 227.052458][ T9160] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 227.079421][ T9160] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 227.114831][ T9199] loop2: detected capacity change from 0 to 1024 [ 227.117096][ T9160] F2FS-fs (loop1): invalid crc value [ 227.134476][ T9199] ext3: Bad value for 'mb_optimize_scan' [ 227.502241][ T9160] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 227.527461][ T9160] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 227.527488][ T9160] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 227.719315][ T5866] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 227.878287][ T5866] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.878776][ T5866] usb 5-1: not running at top speed; connect to a high speed hub [ 227.942112][ T5866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.983961][ T5866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.006731][ T5866] usb 5-1: string descriptor 0 read error: -22 [ 228.023913][ T5866] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.053361][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.104977][ T5866] usb 5-1: 0:2 : does not exist [ 228.188361][ T9215] netlink: 'syz.2.1262': attribute type 1 has an invalid length. [ 228.461290][ T30] audit: type=1326 audit(1758799980.434:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadeb18eec9 code=0x7ffc0000 [ 228.567864][ T30] audit: type=1326 audit(1758799980.434:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadeb18eec9 code=0x7ffc0000 [ 228.656094][ T30] audit: type=1326 audit(1758799980.454:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fadeb18eec9 code=0x7ffc0000 [ 228.678278][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.704690][ T9225] loop2: detected capacity change from 0 to 16 [ 228.740401][ T5866] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 228.768408][ T30] audit: type=1326 audit(1758799980.454:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadeb18eec9 code=0x7ffc0000 [ 228.788840][ T9225] erofs (device loop2): mounted with root inode @ nid 36. [ 228.822862][ T5866] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 228.836948][ T5866] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 228.869417][ T30] audit: type=1326 audit(1758799980.454:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.0.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadeb18eec9 code=0x7ffc0000 [ 228.891591][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.029406][ T5866] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 229.069006][ T5866] usb 5-1: USB disconnect, device number 10 [ 229.079769][ T9213] loop5: detected capacity change from 0 to 32768 [ 229.269458][ T9213] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 229.480288][ T9244] loop4: detected capacity change from 0 to 128 [ 229.539678][ T9244] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 229.556151][ T9241] sp0: Synchronizing with TNC [ 229.583156][ T9244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.591484][ T9246] sp0: Found TNC [ 229.598835][ T9239] loop1: detected capacity change from 0 to 4096 [ 229.657603][ T5864] ocfs2: Unmounting device (7,5) on (node local) [ 229.825384][ T9250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.506438][ T9268] loop2: detected capacity change from 0 to 512 [ 230.568756][ T9268] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.639905][ T9268] EXT4-fs (loop2): orphan cleanup on readonly fs [ 230.660235][ T9268] EXT4-fs (loop2): 1 truncate cleaned up [ 230.671825][ T9268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 230.774807][ T9281] bpf: Bad value for 'uid' [ 230.909269][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 231.043604][ T5877] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.124425][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 231.147297][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 231.197445][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 231.231383][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 231.251696][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.299263][ T24] usb 2-1: Product: syz [ 231.319878][ T24] usb 2-1: Manufacturer: syz [ 231.339572][ T24] usb 2-1: SerialNumber: syz [ 231.377213][ T24] usb 2-1: config 0 descriptor?? [ 231.394165][ T9278] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.402861][ T9278] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.421810][ T24] usb 2-1: ucan: probing device on interface #0 [ 231.679886][ T5937] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 231.863676][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 231.887447][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.952151][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.989275][ T5937] usb 5-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 231.999634][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.038272][ T5937] usb 5-1: config 0 descriptor?? [ 232.060507][ T9313] loop5: detected capacity change from 0 to 4096 [ 232.065175][ T24] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 232.092749][ T9313] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 232.131196][ T24] usb 2-1: USB disconnect, device number 5 [ 232.204955][ T9313] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 232.242380][ T9313] ntfs3(loop5): ino=1a, mi_enum_attr [ 232.249620][ T9313] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 232.320681][ T9313] ntfs3(loop5): ino=5, "/" ntfs_readdir [ 232.518469][ T5937] topre 0003:0853:0313.000F: unknown main item tag 0x0 [ 232.566730][ T5937] topre 0003:0853:0313.000F: hidraw0: USB HID v0.05 Device [HID 0853:0313] on usb-dummy_hcd.4-1/input0 [ 232.707974][ T9304] loop6: detected capacity change from 0 to 32768 [ 232.747192][ T9306] loop2: detected capacity change from 0 to 32768 [ 232.754130][ T43] usb 5-1: USB disconnect, device number 11 [ 232.770272][ T9304] (syz.6.1300,9304,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.825237][ T9322] fido_id[9322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 232.845828][ T9324] Bluetooth: MGMT ver 1.23 [ 232.865087][ T9304] (syz.6.1300,9304,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.894899][ T9306] find_entry called with index = 0 [ 232.899762][ T9326] tipc: Started in network mode [ 232.916786][ T9326] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 232.936966][ T9306] read_mapping_page failed! [ 232.947348][ T9326] tipc: Enabled bearer , priority 10 [ 232.974776][ T9306] ERROR: (device loop2): txCommit: [ 232.974776][ T9306] [ 232.991899][ T9304] (syz.6.1300,9304,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 233.099006][ T9304] JBD2: Ignoring recovery information on journal [ 233.183874][ T9304] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 233.343716][ T9337] loop5: detected capacity change from 0 to 1024 [ 233.448588][ T9337] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 233.526279][ T9337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.611696][ T9348] loop4: detected capacity change from 0 to 64 [ 233.627323][ T9304] (syz.6.1300,9304,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 233.688874][ T9337] EXT4-fs: can't change dax mount option while remounting [ 233.770238][ T9304] (syz.6.1300,9304,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 233.834194][ T9304] (syz.6.1300,9304,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 233.877805][ T9304] (syz.6.1300,9304,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 233.911635][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.977886][ T9304] (syz.6.1300,9304,1):ocfs2_quota_read:201 ERROR: status = -5 [ 234.025776][ T9304] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 5 [ 234.046950][ T9359] loop0: detected capacity change from 0 to 128 [ 234.060318][ T5954] tipc: Node number set to 11578026 [ 234.088300][ T9304] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 234.145327][ T9304] (syz.6.1300,9304,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 234.179913][ T9304] (syz.6.1300,9304,0):ocfs2_mknod:317 ERROR: status = -5 [ 234.186995][ T9304] (syz.6.1300,9304,0):ocfs2_mknod:505 ERROR: status = -5 [ 234.239472][ T9304] (syz.6.1300,9304,1):ocfs2_mkdir:661 ERROR: status = -5 [ 234.487385][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 234.500230][ T9367] loop2: detected capacity change from 0 to 64 [ 234.588801][ T7710] ocfs2: Unmounting device (7,6) on (node local) [ 235.026533][ T9381] loop5: detected capacity change from 0 to 256 [ 235.096517][ T9378] loop0: detected capacity change from 0 to 2048 [ 235.171557][ T9381] FAT-fs (loop5): Directory bread(block 64) failed [ 235.205651][ T9381] FAT-fs (loop5): Directory bread(block 65) failed [ 235.224370][ T9386] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.272520][ T9389] loop6: detected capacity change from 0 to 8 [ 235.290047][ T9381] FAT-fs (loop5): Directory bread(block 66) failed [ 235.296589][ T9381] FAT-fs (loop5): Directory bread(block 67) failed [ 235.353284][ T9389] cramfs: empty filesystem [ 235.386020][ T6492] udevd[6492]: incorrect cramfs checksum on /dev/loop6 [ 235.405596][ T9381] FAT-fs (loop5): Directory bread(block 68) failed [ 235.445439][ T9381] FAT-fs (loop5): Directory bread(block 69) failed [ 235.477450][ T9381] FAT-fs (loop5): Directory bread(block 70) failed [ 235.501807][ T9381] FAT-fs (loop5): Directory bread(block 71) failed [ 235.525856][ T9381] FAT-fs (loop5): Directory bread(block 72) failed [ 235.539441][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 235.559631][ T6056] udevd[6056]: incorrect cramfs checksum on /dev/loop6 [ 235.578432][ T9381] FAT-fs (loop5): Directory bread(block 73) failed [ 235.729758][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 235.766607][ T43] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 235.804785][ T43] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.874241][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.883788][ T43] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 235.909346][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.967445][ T43] usb 3-1: config 0 descriptor?? [ 236.099699][ T9409] loop4: detected capacity change from 0 to 256 [ 236.196985][ T9409] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 236.246838][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1350'. [ 236.316004][ T9414] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1352'. [ 236.420173][ T43] corsair 0003:1B1C:1B09.0010: hidraw0: USB HID v0.02 Device [HID 1b1c:1b09] on usb-dummy_hcd.2-1/input0 [ 236.498434][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1354'. [ 236.565734][ T9421] loop4: detected capacity change from 0 to 512 [ 236.618912][ T5954] usb 3-1: USB disconnect, device number 9 [ 236.628088][ T9421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.715455][ T9421] EXT4-fs (loop4): 1 truncate cleaned up [ 236.782068][ T9421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.815573][ T9422] loop1: detected capacity change from 0 to 4096 [ 237.645653][ T5869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.675129][ T9408] loop6: detected capacity change from 0 to 32768 [ 237.685464][ T9408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1347 (9408) [ 237.753783][ T9408] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.814454][ T9408] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 237.931817][ T9438] loop1: detected capacity change from 0 to 1024 [ 237.974566][ T9438] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.989499][ T9438] EXT4-fs: inline encryption not supported [ 238.075225][ T9438] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 238.121993][ T9458] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 238.136217][ T9458] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1367'. [ 238.139440][ T9408] BTRFS info (device loop6): setting nodatasum [ 238.149118][ T9458] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 238.173961][ T9438] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000] [ 238.200721][ T9438] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1358: bad orphan inode 11 [ 238.229069][ T9408] BTRFS info (device loop6): setting nodatacow [ 238.274987][ T9408] BTRFS info (device loop6): enabling free space tree [ 238.354302][ T9438] ext4_test_bit(bit=10, block=4) = 1 [ 238.369267][ T9408] BTRFS info (device loop6): max_inline set to 0 [ 238.420240][ T9438] is_bad_inode(inode)=0 [ 238.424446][ T9438] NEXT_ORPHAN(inode)=3254779904 [ 238.466320][ T9438] max_ino=32 [ 238.482865][ T9438] i_nlink=0 [ 238.560568][ T9438] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1358: lblock 2 mapped to illegal pblock 2 (length 1) [ 238.632511][ T9438] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 238.675803][ T9438] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1358: lblock 0 mapped to illegal pblock 48 (length 1) [ 238.762571][ T9438] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 238.787095][ T7710] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.808529][ T9438] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1358: Failed to acquire dquot type 0 [ 238.833090][ T9438] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 238.854599][ T9475] loop5: detected capacity change from 0 to 1024 [ 238.872601][ T9438] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1358: mark_inode_dirty error [ 238.885064][ T9475] EXT4-fs: Ignoring removed bh option [ 238.905211][ T9475] EXT4-fs: inline encryption not supported [ 238.939410][ T9475] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 238.964488][ T9438] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 239.031525][ T9475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 239.060985][ T9438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.110817][ T9475] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1373: lblock 2 mapped to illegal pblock 2 (length 1) [ 239.173182][ T9486] loop6: detected capacity change from 0 to 1024 [ 239.214251][ T9475] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 239.250114][ T9475] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1373: lblock 0 mapped to illegal pblock 48 (length 1) [ 239.289690][ T9438] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.1358: Invalid inode table block 1 in block_group 0 [ 239.343659][ T9475] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 239.356592][ T9475] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1373: Failed to acquire dquot type 0 [ 239.377087][ T9486] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 239.389401][ T9438] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 239.423369][ T9475] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 239.434975][ T9486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.451392][ T9475] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1373: mark_inode_dirty error [ 239.507243][ T9475] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 239.546110][ T9475] EXT4-fs (loop5): 1 orphan inode deleted [ 239.560485][ T9493] loop2: detected capacity change from 0 to 2048 [ 239.597533][ T49] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 239.611292][ T9475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.643123][ T9493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.671890][ T9486] EXT4-fs: can't change dax mount option while remounting [ 239.676326][ T9497] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 239.725137][ T49] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 239.749389][ T49] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 239.825828][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.857328][ T5876] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 239.915804][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.916879][ T5876] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 239.986808][ T5876] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 240.079747][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 240.108040][ T9475] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1373: lblock 0 mapped to illegal pblock 48 (length 1) [ 240.173269][ T9475] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 240.259862][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 240.302306][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.316143][ T43] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 240.328711][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 240.342054][ T43] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.354427][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.373738][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 240.407721][ T43] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 240.421433][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 240.453689][ T43] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.478680][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.560129][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 240.608578][ T43] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 240.648502][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 240.696850][ T43] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.749804][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.809587][ T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 240.855587][ T43] usb 5-1: string descriptor 0 read error: -22 [ 240.872311][ T43] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 240.877807][ T9521] loop1: detected capacity change from 0 to 2048 [ 240.908131][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.964516][ T43] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 240.985480][ T9522] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.038101][ T9526] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1393'. [ 241.085450][ T9526] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1393'. [ 241.095405][ T9522] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 241.161323][ T9522] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 241.209620][ T9522] Remounting filesystem read-only [ 241.216194][ T9521] NILFS (loop1): mounting fs with errors [ 241.399499][ T9522] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 241.425374][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1395'. [ 241.429292][ T9522] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 241.463779][ T9529] tipc: Started in network mode [ 241.463895][ T9522] Remounting filesystem read-only [ 241.484887][ T5876] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 241.485691][ T9502] loop2: detected capacity change from 0 to 32768 [ 241.500639][ T9529] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 241.510750][ T9529] tipc: Enabling of bearer rejected, failed to enable media [ 241.599811][ T9502] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 241.744985][ T9513] loop5: detected capacity change from 0 to 32768 [ 241.752545][ T9502] XFS (loop2): Ending clean mount [ 241.776737][ T9513] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1386 (9513) [ 241.784706][ T9502] XFS (loop2): Quotacheck needed: Please wait. [ 241.842720][ T9513] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.905627][ T9502] XFS (loop2): Quotacheck: Done. [ 241.911089][ T9513] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 242.138198][ T9513] BTRFS info (device loop5): setting nodatasum [ 242.149381][ T9513] BTRFS info (device loop5): setting nodatacow [ 242.180224][ T9513] BTRFS info (device loop5): enabling free space tree [ 242.187020][ T9513] BTRFS info (device loop5): max_inline set to 0 [ 242.219741][ T5877] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.524697][ T5864] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.909386][ T9545] loop1: detected capacity change from 0 to 32768 [ 243.026632][ T9545] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 243.199911][ T9545] XFS (loop1): Ending clean mount [ 243.233487][ T9545] XFS (loop1): Quotacheck needed: Please wait. [ 243.324824][ T9545] XFS (loop1): Quotacheck: Done. [ 243.354474][ T43] usb 5-1: USB disconnect, device number 12 [ 243.519779][ T9595] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 243.588258][ T5876] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.213259][ T9612] loop1: detected capacity change from 0 to 2048 [ 244.254707][ T9612] EXT4-fs: Ignoring removed nobh option [ 244.326736][ T9612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.343811][ T9612] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.469600][ T9619] loop4: detected capacity change from 0 to 4096 [ 244.472064][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.515185][ T9619] NILFS (loop4): invalid segment: Checksum error in segment payload [ 244.550424][ T9619] NILFS (loop4): trying rollback from an earlier position [ 244.626359][ T9619] NILFS (loop4): recovery complete [ 244.689438][ T9620] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.725583][ T9622] loop1: detected capacity change from 0 to 256 [ 245.140574][ T9626] loop1: detected capacity change from 0 to 1024 [ 245.184859][ T9626] EXT4-fs: Ignoring removed bh option [ 245.256547][ T9626] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 245.425703][ T9626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.582819][ T9626] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.1424: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 245.615627][ T9603] loop2: detected capacity change from 0 to 40427 [ 245.635068][ T9603] F2FS-fs (loop2): build fault injection rate: 25 [ 245.643612][ T9603] F2FS-fs (loop2): build fault injection type: 0x7698c [ 245.655420][ T9626] EXT4-fs (loop1): Remounting filesystem read-only [ 245.672289][ T9603] F2FS-fs (loop2): invalid crc value [ 245.693571][ T9603] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970 [ 245.768474][ T9603] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 245.805577][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.859961][ T9645] program syz.6.1432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.874068][ T9640] loop4: detected capacity change from 0 to 4096 [ 245.929328][ T9640] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 246.142585][ T9603] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 246.174046][ T9640] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 246.177891][ T9617] loop5: detected capacity change from 0 to 40427 [ 246.199870][ T9603] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 246.220636][ T9617] F2FS-fs (loop5): invalid crc value [ 246.233204][ T9640] ntfs3(loop4): ino=5, mi_enum_attr [ 246.359894][ T9603] syz.2.1416: attempt to access beyond end of device [ 246.359894][ T9603] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 246.528193][ T9617] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 246.622490][ T49] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_get_node_info+0x38f/0x1480 [ 246.633751][ T9617] F2FS-fs (loop5): Start checkpoint disabled! [ 246.677291][ T49] F2FS-fs (loop2): f2fs_get_node_info of __write_node_folio+0x59c/0x1550: inconsistent nat entry, ino:3, nid:3, blkaddr:4097, ver:0, flag:0 [ 246.734294][ T9617] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 246.743407][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1441'. [ 246.898573][ T5877] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4ef/0x21b0 [ 246.963890][ T5877] F2FS-fs (loop2): invalid blkaddr: 512, type: 10, run fsck to fix. [ 247.083121][ T9676] loop1: detected capacity change from 0 to 512 [ 247.142665][ T9676] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 247.235764][ T9676] EXT4-fs (loop1): 1 truncate cleaned up [ 247.270143][ T9676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.358196][ T5180] Bluetooth: hci3: unexpected cc 0x0809 length: 31 > 4 [ 247.368991][ T5180] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 247.470776][ T9682] can: request_module (can-proto-5) failed. [ 247.477193][ T5876] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.100484][ T9707] loop5: detected capacity change from 0 to 1024 [ 248.219323][ T5937] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 248.231752][ T9712] loop0: detected capacity change from 0 to 16 [ 248.252225][ T9714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1461'. [ 248.262425][ T1162] hfsplus: b-tree write err: -5, ino 4 [ 248.278489][ T9709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1461'. [ 248.280632][ T9712] erofs (device loop0): mounted with root inode @ nid 36. [ 248.401078][ T5937] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 248.443448][ T5937] usb 2-1: config 0 has no interface number 0 [ 248.472635][ T5937] usb 2-1: too many endpoints for config 0 interface 76 altsetting 1: 52, using maximum allowed: 30 [ 248.514490][ T9719] loop2: detected capacity change from 0 to 8 [ 248.514976][ T5937] usb 2-1: config 0 interface 76 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 248.581750][ T5937] usb 2-1: config 0 interface 76 has no altsetting 0 [ 248.590180][ T9719] SQUASHFS error: Failed to read block 0x2d7: -5 [ 248.596510][ T9719] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 248.618877][ T5937] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.644600][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.687689][ T5937] usb 2-1: config 0 descriptor?? [ 248.711730][ T5937] cp210x 2-1:0.76: cp210x converter detected [ 249.124375][ T5937] cp210x 2-1:0.76: failed to get vendor val 0x000e size 3: -71 [ 249.152238][ T5937] usb 2-1: cp210x converter now attached to ttyUSB0 [ 249.205749][ T5937] usb 2-1: USB disconnect, device number 6 [ 249.227733][ T5937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.263170][ T9735] loop4: detected capacity change from 0 to 64 [ 249.272465][ T5937] cp210x 2-1:0.76: device disconnected [ 249.454046][ T9716] loop5: detected capacity change from 0 to 32768 [ 249.475285][ T12] ------------[ cut here ]------------ [ 249.481211][ T12] kernel BUG at fs/hfs/inode.c:444! [ 249.502000][ T12] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 249.508419][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 249.517694][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.527732][ T12] Workqueue: writeback wb_workfn (flush-7:4) [ 249.533716][ T12] RIP: 0010:hfs_write_inode+0x7c8/0x7d0 [ 249.539249][ T12] Code: c1 40 72 b0 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 40 72 b0 99 e8 93 0e 88 ff e9 6c fe ff ff e8 29 91 24 ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 249.558841][ T12] RSP: 0018:ffffc90000117180 EFLAGS: 00010293 [ 249.564896][ T12] RAX: ffffffff829b1c67 RBX: ffff8880766c5c98 RCX: ffff88801caf5a00 [ 249.572853][ T12] RDX: 0000000000000000 RSI: ffffffff8e360240 RDI: 0000000000000000 [ 249.580807][ T12] RBP: ffffc90000117310 R08: ffff88801caf5a00 R09: 0000000000000003 [ 249.588761][ T12] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 249.596713][ T12] R13: 1ffff92000022e34 R14: ffff8880766c5c58 R15: 0000000000000000 [ 249.604670][ T12] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 249.613583][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.620150][ T12] CR2: 00007fadeb3e7dac CR3: 0000000027982000 CR4: 0000000000350ef0 [ 249.628107][ T12] Call Trace: [ 249.631368][ T12] [ 249.634285][ T12] ? __pfx_hfs_write_inode+0x10/0x10 [ 249.639569][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.645192][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.650815][ T12] __writeback_single_inode+0x6f1/0xff0 [ 249.656362][ T12] writeback_sb_inodes+0x6c7/0x1010 [ 249.661573][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 249.667217][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.672837][ T12] ? rcu_is_watching+0x15/0xb0 [ 249.677588][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.683217][ T12] wb_writeback+0x43b/0xaf0 [ 249.687720][ T12] ? queue_io+0x361/0x590 [ 249.692043][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 249.697061][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.702259][ T12] wb_workfn+0x409/0xef0 [ 249.706497][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 249.711245][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.716867][ T12] ? __lock_acquire+0xab9/0xd20 [ 249.721719][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.727341][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.732966][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 249.738670][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 249.744372][ T12] process_scheduled_works+0xae1/0x17b0 [ 249.749924][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.755890][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.761515][ T12] worker_thread+0x8a0/0xda0 [ 249.766106][ T12] kthread+0x711/0x8a0 [ 249.770166][ T12] ? __pfx_worker_thread+0x10/0x10 [ 249.775261][ T12] ? __pfx_kthread+0x10/0x10 [ 249.779839][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.785461][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.790655][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.796275][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.801458][ T12] ? __pfx_kthread+0x10/0x10 [ 249.806039][ T12] ret_from_fork+0x439/0x7d0 [ 249.810619][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 249.815718][ T12] ? __switch_to_asm+0x39/0x70 [ 249.820473][ T12] ? __switch_to_asm+0x33/0x70 [ 249.825227][ T12] ? __pfx_kthread+0x10/0x10 [ 249.829805][ T12] ret_from_fork_asm+0x1a/0x30 [ 249.834569][ T12] [ 249.837569][ T12] Modules linked in: [ 249.842444][ T12] ---[ end trace 0000000000000000 ]--- [ 249.871044][ T12] RIP: 0010:hfs_write_inode+0x7c8/0x7d0 [ 249.876885][ T12] Code: c1 40 72 b0 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 40 72 b0 99 e8 93 0e 88 ff e9 6c fe ff ff e8 29 91 24 ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 249.897185][ T12] RSP: 0018:ffffc90000117180 EFLAGS: 00010293 [ 249.903818][ T12] RAX: ffffffff829b1c67 RBX: ffff8880766c5c98 RCX: ffff88801caf5a00 [ 249.912839][ T12] RDX: 0000000000000000 RSI: ffffffff8e360240 RDI: 0000000000000000 [ 249.921028][ T12] RBP: ffffc90000117310 R08: ffff88801caf5a00 R09: 0000000000000003 [ 249.929620][ T12] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 249.931921][ T9716] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 249.937628][ T12] R13: 1ffff92000022e34 R14: ffff8880766c5c58 R15: 0000000000000000 [ 249.972338][ T12] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 249.981317][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.987902][ T12] CR2: 0000001b33213ff8 CR3: 000000000df36000 CR4: 0000000000350ef0 [ 249.995964][ T12] Kernel panic - not syncing: Fatal exception [ 250.002101][ T12] Kernel Offset: disabled [ 250.006407][ T12] Rebooting in 86400 seconds..