last executing test programs: 5m49.353407747s ago: executing program 1 (id=8207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) 5m49.129872561s ago: executing program 1 (id=8210): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'veth0\x00', &(0x7f00000004c0)=@ethtool_rxfh={0x47, 0xf2f, 0x5, 0x6, 0x9, "84e3a4", 0x7}}) 5m48.797207048s ago: executing program 1 (id=8214): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 5m46.710035449s ago: executing program 1 (id=8241): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000001240)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x2}}, {@quota}, {@noquota}, {@discard}]}, 0x1, 0x6142, &(0x7f0000009100)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m45.237203278s ago: executing program 1 (id=8258): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000040)={0x20, 0x1f, 0x4, "42d73a72"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m44.138519577s ago: executing program 1 (id=8271): r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0xfffffffffffffe42) 5m43.641815167s ago: executing program 32 (id=8271): r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0xfffffffffffffe42) 4m39.728900551s ago: executing program 3 (id=9077): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x25, 0xc, 0x6, 0x3, 0xffffffffffffff6d, 0x7ff, &(0x7f0000000040)="f0e9eb78"}) 4m39.368988672s ago: executing program 3 (id=9083): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000dc0)={0x1, 0x1, 0x1}) 4m39.108856403s ago: executing program 3 (id=9088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 4m38.947397794s ago: executing program 3 (id=9090): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000009140)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x8}}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@errors_remount}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@namecase}, {@keep_last_dots}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 4m38.40598975s ago: executing program 3 (id=9101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 4m37.867199878s ago: executing program 3 (id=9111): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f00000000c0)=""/168, 0xa8) 4m37.389924031s ago: executing program 33 (id=9111): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f00000000c0)=""/168, 0xa8) 51.905719895s ago: executing program 7 (id=12642): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x71f43, 0x20b}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 51.400293972s ago: executing program 7 (id=12648): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x10) 51.043008128s ago: executing program 7 (id=12651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r1, 0x801, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) 50.77153402s ago: executing program 7 (id=12653): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 50.124041466s ago: executing program 7 (id=12659): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00}, 0x980) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000001880)=""/4107, &(0x7f0000000040), &(0x7f0000000100), 0x2, r0}, 0x38) 49.387985991s ago: executing program 7 (id=12668): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x0, "6457ecb7"}, @main=@item_4={0x3, 0x0, 0x8, "ce9abc16"}]}}, 0x0}, 0x0) 48.885598719s ago: executing program 34 (id=12668): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x0, "6457ecb7"}, @main=@item_4={0x3, 0x0, 0x8, "ce9abc16"}]}}, 0x0}, 0x0) 4.922396337s ago: executing program 2 (id=13135): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 2.674885109s ago: executing program 6 (id=13164): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f000000c680)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd26c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5cafe08a3ba61a32a14a220779926a7df8a0de70a50b2baf658b32d6d108efa8d3b6181762c8308a5b3351fd14516c9c33e6c6bd15e956f8401002717d37c8e53568186d0a3935603bc325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e000000000000000000a0", @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x1, 0x1da, &(0x7f0000004680)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 2.567991638s ago: executing program 5 (id=13165): unshare(0x22020400) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x25dfdbff, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x5, [{}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x80000000, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2.379980085s ago: executing program 5 (id=13168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) 2.333427153s ago: executing program 4 (id=13169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x111eb407a368b939}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2.182782817s ago: executing program 5 (id=13170): socket(0x40000000015, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 2.079960381s ago: executing program 4 (id=13171): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x0, 0x236, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8) 1.9155956s ago: executing program 5 (id=13172): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.746660409s ago: executing program 5 (id=13173): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000019200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000019240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xd2}, {0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, r1, 0x3}}, 0x48) 1.687289238s ago: executing program 4 (id=13174): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa04000a640400d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.636177931s ago: executing program 6 (id=13175): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x800, &(0x7f0000000600)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x5}}, {@utf8}, {@dmask={'dmask', 0x3d, 0xffffffff}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@discard}, {@uid={'uid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@discard}]}, 0x1, 0x1524, &(0x7f0000002280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.617496027s ago: executing program 5 (id=13176): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_ep_write(r0, 0x8d, 0x3, &(0x7f00000000c0)="d0be16") 1.583661972s ago: executing program 8 (id=13177): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2004f6937b8ccca534298", 0x21) 1.447282535s ago: executing program 2 (id=13178): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000380), 0x4) 1.329961007s ago: executing program 8 (id=13180): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$nfs4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x106c0e0, &(0x7f00000006c0)={[{'inode64'}]}) 1.328529496s ago: executing program 4 (id=13181): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x100000001, 0x0) readahead(r0, 0x7fffffff, 0x6) 1.231345693s ago: executing program 0 (id=13182): r0 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='/dev/null\x00', &(0x7f0000000080)='/dev/null\x00', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) 1.142547975s ago: executing program 6 (id=13183): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.142341518s ago: executing program 2 (id=13184): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x11}, {&(0x7f00000002c0)="d98d", 0x2}], 0x2}, 0x20008004) 1.141471303s ago: executing program 0 (id=13185): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000240)=0x1) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) 1.073577188s ago: executing program 4 (id=13186): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) 1.072695722s ago: executing program 8 (id=13187): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.023260856s ago: executing program 0 (id=13188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000e05000300200000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 874.756525ms ago: executing program 2 (id=13189): sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) 797.959048ms ago: executing program 8 (id=13190): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC, @ANYBLOB=',nostrict,\x00'], 0xfd, 0xc22, &(0x7f00000002c0)="$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") symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000280)='./file0\x00') lstat(&(0x7f0000000400)='./file0\x00', 0x0) 754.657483ms ago: executing program 0 (id=13191): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13) 637.295483ms ago: executing program 6 (id=13192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r0, 0x0, 0x1500}, 0x38) 602.186683ms ago: executing program 2 (id=13193): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x60242, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) close(r0) 431.650681ms ago: executing program 0 (id=13194): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) fstat(r0, &(0x7f0000000440)) 410.100066ms ago: executing program 6 (id=13195): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf457a000000", @ANYRES32=0x0, @ANYBLOB="0193050008c00000140012800b0001006272696467650000040002800500110002000000050010"], 0x44}, 0x1, 0x0, 0x0, 0x4040850}, 0x0) 355.603424ms ago: executing program 8 (id=13196): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffafb5020000140000008500000083000000bc0900000000000055090100000009007b00000000000000bf91000000000000b7020000000000008500000000000024b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 354.720059ms ago: executing program 2 (id=13197): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000003300)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x102) write$cgroup_subtree(r0, 0x0, 0x32600) 262.16409ms ago: executing program 0 (id=13198): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$eJzs3U1sHFcBAOA3a6/z22ZTHGrS0CYU2vJTu3FM+ImAVM2FqKm4Vaq4RElaIpyASCVI1UOSEzdaVeHK76mX8qNK5IKinrhUopG49FQ4cCAKUiUO0JC48vq99e7zbmbt2J6s9/uk2bdv3tt9b3ZnZmdn5r0XgKFVaz7OzEwUIVy+8saRfz32zy0hXBlfzNFoPo62xeohhCLGR7P3+2BkIbz14asnuoVFmG4+pnh47kbrtdtCCBfC3nA1NMLuy9def3f62WMXj17a996bh66vzdIDAMBw+c7VQzO7/v7Xh3Z+9NbDh8Om1vx0fN6I8e3xuP9wPPBPx/+10Bkv2qZ2Y1m+0TjVsnwjXfK1l1PP8o32KH8se996j3ybSsofaZvXbblhkKX1uBGK2mRHvFabnFz4Tx6a/+vHismzp2dfPFdRRYFV959HQgh7Taahny42N4jq67Gu09yOqvdAAAvy64VLXMjPLNyd1ruN9lf+jadr3V8Pq2C913/lD1b5v71oj8Pq2ahrU1qutB1tj/G26whnQpf7l/Ltby5/42z7T++XX4+o91nPXtcRBuX6Qq96jqxzPVaqV/3z9WKj+kYM0+fwzSy9ffvJv9NB+Y6B7v7r/L/JNLTTkuPbO8jvlQE2tvy+ubkopef39eXpm0rSN5ekbylJ39qRa2n6tpLXwzD748s/C68Vi//z8//0yz0fns6z3RfD+5dZn/x85HLLH7tDbD3Kd4zEIPnT8edPffXkC9cW7v8vWuv/7bi+743xRtyarsYM6Xxhfl69de9/o7OcWo98D2T1ua9L/ubz8c58xfji+4S2/cySekx0vm5Hr3x7OvM1snxb4rQ5q29+fLI1e106/kj71fR5jWbLW8+WYyyrR9qv7IxhXg9YibQ+9rr/P62fE6FevHh69tRTMZ7W07+M1DfNz99fXtTvVrvuwN3pt/3PROhs/7O9Nb9ea98v7FicX7TvFxrZ/Oke8w/EePqd+97Ilub8yRM/mD252gsPQ+7c+Ve+f3x29tSPPPHEE09aT6reMwFrberlMz+cOnf+lSdPnzn+0qmXTp09cPDggenpg187MDPVPK6faj+6BzaSxR/9qmsCAAAAAAAAAAAA9OvHR49c+9s7X3l/of3/Yvu/1P4/3fmb2v//tFho615rmx+6jAOY2gHu7JLezJN1sDqW5avH6RNZfcezcnZlr/tkDFvj+MX2/6m4vF/XVJ8Hs/l5/70pX9adwJL+UsayXkfy8QI/E8NLMfx1gAoVW7rPjmFZ/9ZpXU/9UyyjX4ruBVOJ9L2lLyX1Y5Laf/fq1ynt/3euQx1ZfevRnLDqZQS6+/cQ9//dPHZZw/f/zf3VL+Pm3mmbqq6bqfppbs4oHsC9oerxP9N5zxSe/fO3N89PKduNpzv3l3n/pXA37vXxJ5W/scb/bI1/19f+7+bS0RMaKyv3f7+4/n5bsWF3v/vffPlTP9DjeQl3PhP90Xz5NxcX5fHQX/lzv8rKzy8I9elmXP70+W/ts/wly7+nrKTzb3eb+/9YfvrYnni03/IXalzUOuuRnzdO1//y88bJrWz5T650+Vc4UOPtWD4Ms0EZZ3a5+hj/t6ls/N8lVnn8317y+zC+HONpR5juc8hHOFlm/VuR9DuwK3v/ouT3zfi/g+3rMSzbHtL4v2l9bHSJ19ri9S6f7Ubd18Cg+uDevf63+ENVfV1M/X5f1dfDtIxpbm5ubU9olai0cCr//Kv+n1B1+VV//mXy8X/zY/h8/N88PR//N0/Px//N0/Px9fL0rVl6/nnm4//m6Q9m75uPDzyR/cHO0z9V8vrdJekPlaTvKUn/dEn6vpL0h0vSHylJf6Ak/dGS9M+WpH+uJP2xkvQnStI/X5K+0aX2KMO6/DDM8vZ5tn8YHql9ba/tf7wkHRhcP39r/zMv/OG7jYX2/2Ot8yHpOt7hGK/H/84/ifH8undoi8+nvRPj/8jS7/XzHTBM8v4z8t/3x0vSgcGV7vOyfcMQKrq3k+i336pex/kMli/E8Isx/FIMn4zhZAynYrg/htPrVD/WxjO/f/vQa8Xi//0dWXq/95Pn7YHyfqIO9Fmf/PzAcu/Hz/vxW667LX+FzcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqU2s+zsxMFCFcvvLGkeePnZ6an/OtVo5G83G0LVZvvS6Ep2I4EsNfxie3Pnz1RHt4O4ZFmA5FKFrzw3M3WiVtCyFcCHvD1dAIuy9fe/3d6WePXTx6ad97bx66vnafAAAAAGx8HwcAAP//V88c0Q==") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x4, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x2401}) 55.677786ms ago: executing program 8 (id=13199): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000001000818804", 0x9}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x6d, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x0) 49.464285ms ago: executing program 4 (id=13200): r0 = timerfd_create(0x7, 0x80800) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) dup2(r1, r0) 0s ago: executing program 6 (id=13201): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): .12164'. [ 1059.619862][ T1174] loop6: detected capacity change from 0 to 4096 [ 1059.952519][ T1194] loop7: detected capacity change from 0 to 256 [ 1060.085756][ T1194] FAT-fs (loop7): Directory bread(block 64) failed [ 1060.125472][ T1194] FAT-fs (loop7): Directory bread(block 65) failed [ 1060.179758][ T1194] FAT-fs (loop7): Directory bread(block 66) failed [ 1060.225846][ T1194] FAT-fs (loop7): Directory bread(block 67) failed [ 1060.276786][ T1194] FAT-fs (loop7): Directory bread(block 68) failed [ 1060.299170][ T1194] FAT-fs (loop7): Directory bread(block 69) failed [ 1060.305924][ T1194] FAT-fs (loop7): Directory bread(block 70) failed [ 1060.353920][ T1194] FAT-fs (loop7): Directory bread(block 71) failed [ 1060.365954][ T1194] FAT-fs (loop7): Directory bread(block 72) failed [ 1060.401553][ T1194] FAT-fs (loop7): Directory bread(block 73) failed [ 1061.272119][ T1255] netlink: 'syz.7.12199': attribute type 30 has an invalid length. [ 1061.399484][ T1261] netlink: 'syz.2.12202': attribute type 27 has an invalid length. [ 1061.415934][ T1261] netlink: 'syz.2.12202': attribute type 3 has an invalid length. [ 1061.456843][ T1265] binder: 1262:1265 ioctl 40046210 0 returned -14 [ 1061.475925][ T1261] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12202'. [ 1062.144655][ T1296] tmpfs: Bad value for 'mpol' [ 1062.802580][ T1272] loop2: detected capacity change from 0 to 32768 [ 1062.900414][ T1272] JBD2: Ignoring recovery information on journal [ 1062.931478][ T1272] JBD2: Journal too short (blocks 2-2). [ 1062.968878][ T1272] JBD2: journal reset failed [ 1062.976888][ T1272] (syz.2.12208,1272,1):ocfs2_journal_load:1157 ERROR: Failed to load journal! [ 1062.986670][ T1272] (syz.2.12208,1272,1):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -22 [ 1063.006481][ T1272] (syz.2.12208,1272,1):ocfs2_check_volume:2432 ERROR: status = -22 [ 1063.018287][ T1272] (syz.2.12208,1272,1):ocfs2_mount_volume:1764 ERROR: status = -22 [ 1063.052264][ T1272] (syz.2.12208,1272,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1063.074200][ T1335] loop4: detected capacity change from 0 to 256 [ 1063.527262][ T1353] xt_NFQUEUE: number of total queues is 0 [ 1063.619408][ T1358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1063.853178][ T1366] sit0: left promiscuous mode [ 1064.074947][ T1366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1064.104317][ T1374] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1064.498622][ T1392] netlink: 'syz.6.12264': attribute type 10 has an invalid length. [ 1064.567500][ T1392] netlink: 224 bytes leftover after parsing attributes in process `syz.6.12264'. [ 1064.882009][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.891016][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.297766][ T5910] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1065.464607][ T5910] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 1065.504941][ T5910] usb 3-1: config 0 has no interface number 0 [ 1065.511200][ T5910] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1065.531064][ T1400] loop7: detected capacity change from 0 to 32768 [ 1065.544645][ T5910] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 43115, setting to 64 [ 1065.564074][ T1400] (syz.7.12268,1400,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1065.585692][ T5910] usb 3-1: config 0 interface 113 has no altsetting 0 [ 1065.625399][ T5910] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1065.648478][ T1400] (syz.7.12268,1400,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1065.675938][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.716198][ T5910] usb 3-1: Product: syz [ 1065.720417][ T5910] usb 3-1: Manufacturer: syz [ 1065.728636][ T1400] JBD2: Ignoring recovery information on journal [ 1065.742278][ T5817] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 1065.784497][ T5910] usb 3-1: SerialNumber: syz [ 1065.824683][ T1400] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1065.856088][ T5910] usb 3-1: config 0 descriptor?? [ 1065.863915][ T1416] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1065.879517][ C0] usb 3-1: NFC: Urb failure (status -71) [ 1065.908986][ T5817] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1065.914404][ C0] usb 3-1: NFC: Urb failure (status -71) [ 1065.928794][ T5910] usb 3-1: NFC: Unable to get FW version [ 1065.943428][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.952408][ T5910] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -71 [ 1066.001216][ T5817] usb 6-1: Product: syz [ 1066.017554][ T5817] usb 6-1: Manufacturer: syz [ 1066.045947][ T5817] usb 6-1: SerialNumber: syz [ 1066.066901][ T5817] usb 6-1: config 0 descriptor?? [ 1066.211338][ T5910] usb 3-1: USB disconnect, device number 119 [ 1066.276533][T26912] ocfs2: Unmounting device (7,7) on (node local) [ 1066.517877][ T5817] airspy 6-1:0.0: usb_control_msg() failed -71 request 0a [ 1066.536812][ T5817] airspy 6-1:0.0: Could not detect board [ 1066.566906][ T5817] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 1066.615103][ T5817] usb 6-1: USB disconnect, device number 103 [ 1066.724318][ T30] audit: type=1326 audit(1828.192:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1467 comm="syz.7.12294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ca359c629 code=0x0 [ 1066.804539][ T1472] xt_HMARK: spi-set and port-set can't be combined [ 1066.856253][ T5910] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1067.027446][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 1067.042654][ T5910] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1067.064791][ T5910] usb 5-1: config 0 has no interface number 0 [ 1067.080779][ T1484] loop2: detected capacity change from 0 to 128 [ 1067.092991][ T5910] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1067.106391][ T1476] loop7: detected capacity change from 0 to 4096 [ 1067.132479][ T5910] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1067.142159][ T1484] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1067.166794][ T5910] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1067.182827][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.206008][ T1484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1067.227511][ T1487] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1067.239992][ T5910] usb 5-1: Product: syz [ 1067.244200][ T5910] usb 5-1: Manufacturer: syz [ 1067.262792][ T1476] syz.7.12305: attempt to access beyond end of device [ 1067.262792][ T1476] loop7: rw=8388608, sector=26388279066816, nr_sectors = 8 limit=4096 [ 1067.294426][ T5910] usb 5-1: SerialNumber: syz [ 1067.330872][ T5910] usb 5-1: config 0 descriptor?? [ 1067.350562][ T1476] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=1) [ 1067.374772][ T5910] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1067.376473][ T1489] loop6: detected capacity change from 0 to 1024 [ 1067.481672][ T1489] hfsplus: size 47, res 36, name_len 16 [ 1067.601546][ T5910] usb 5-1: USB disconnect, device number 117 [ 1067.738419][T15746] hfsplus: b-tree write err: -5, ino 25 [ 1067.772007][T15746] hfsplus: b-tree write err: -5, ino 4 [ 1067.805059][T15746] hfsplus: b-tree write err: -5, ino 2 [ 1067.834850][ T1502] udevd[1502]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.605384][ T1525] loop7: detected capacity change from 0 to 4096 [ 1068.642977][ T1525] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1068.775122][ T1525] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1068.826868][ T1525] ntfs3(loop7): Failed to load $Extend (-22). [ 1068.833038][ T1525] ntfs3(loop7): Failed to initialize $Extend. [ 1068.892531][ T1538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1069.401891][ T1552] Device name not specified. [ 1069.401891][ T1552] [ 1069.584044][ T1522] loop6: detected capacity change from 0 to 32768 [ 1069.596905][ T1557] loop7: detected capacity change from 0 to 4096 [ 1069.597308][ T1560] loop5: detected capacity change from 0 to 256 [ 1069.618464][ T1557] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 1069.692238][ T1522] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1069.821617][ T1560] FAT-fs (loop5): Directory bread(block 64) failed [ 1069.885808][ T1560] FAT-fs (loop5): Directory bread(block 65) failed [ 1069.926127][ T1560] FAT-fs (loop5): Directory bread(block 66) failed [ 1069.973674][ T1560] FAT-fs (loop5): Directory bread(block 67) failed [ 1069.984696][ T1560] FAT-fs (loop5): Directory bread(block 68) failed [ 1069.992818][ T1560] FAT-fs (loop5): Directory bread(block 69) failed [ 1070.006422][ T1560] FAT-fs (loop5): Directory bread(block 70) failed [ 1070.014044][ T1560] FAT-fs (loop5): Directory bread(block 71) failed [ 1070.020935][ T1560] FAT-fs (loop5): Directory bread(block 72) failed [ 1070.027665][ T1560] FAT-fs (loop5): Directory bread(block 73) failed [ 1070.051379][ T1522] XFS (loop6): Ending clean mount [ 1070.120958][ T1522] XFS (loop6): Quotacheck needed: Please wait. [ 1070.258286][ T1522] XFS (loop6): Quotacheck: Done. [ 1070.273448][ T1581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12353'. [ 1070.388626][ T5802] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1070.470138][T24902] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1070.574305][ T5802] usb 3-1: Using ep0 maxpacket: 16 [ 1070.604132][ T5802] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1070.606885][ T1593] CIFS: VFS: Malformed UNC in devname [ 1070.623462][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.664076][ T5802] usb 3-1: Product: syz [ 1070.669984][ T5802] usb 3-1: Manufacturer: syz [ 1070.688027][ T5802] usb 3-1: SerialNumber: syz [ 1070.709443][ T5802] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1070.752777][ T5802] r8152-cfgselector 3-1: config 0 descriptor?? [ 1070.948076][ T1601] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1070.996657][ T1604] loop5: detected capacity change from 0 to 256 [ 1071.186621][ T5802] r8152-cfgselector 3-1: USB disconnect, device number 120 [ 1071.228666][ T1604] FAT-fs (loop5): Directory bread(block 64) failed [ 1071.240891][ T1608] loop4: detected capacity change from 0 to 164 [ 1071.253786][ T1610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12366'. [ 1071.266893][ T1604] FAT-fs (loop5): Directory bread(block 65) failed [ 1071.282813][ T1610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12366'. [ 1071.300480][ T1604] FAT-fs (loop5): Directory bread(block 66) failed [ 1071.315179][ T1608] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1071.330771][ T1604] FAT-fs (loop5): Directory bread(block 67) failed [ 1071.359907][ T1604] FAT-fs (loop5): Directory bread(block 68) failed [ 1071.366777][ T1604] FAT-fs (loop5): Directory bread(block 69) failed [ 1071.414185][ T1604] FAT-fs (loop5): Directory bread(block 70) failed [ 1071.454500][ T1604] FAT-fs (loop5): Directory bread(block 71) failed [ 1071.476734][ T1604] FAT-fs (loop5): Directory bread(block 72) failed [ 1071.498987][ T1604] FAT-fs (loop5): Directory bread(block 73) failed [ 1071.722405][ T1624] loop4: detected capacity change from 0 to 8 [ 1071.745276][ T1624] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1071.789754][ T6375] udevd[6375]: incorrect cramfs checksum on /dev/loop4 [ 1071.823910][ T1624] cramfs: Error -3 while decompressing! [ 1071.864268][ T1624] cramfs: ffffffff9a3a6bf8(16)->ffff888075429000(4096) [ 1071.871224][ T1624] cramfs: Error -3 while decompressing! [ 1071.920778][ T1624] cramfs: ffffffff9a3a6bf8(16)->ffff888075429000(4096) [ 1071.961526][ T1631] loop2: detected capacity change from 0 to 1024 [ 1071.977123][ T6375] udevd[6375]: incorrect cramfs checksum on /dev/loop4 [ 1071.981664][ T30] audit: type=1800 audit(1833.707:442): pid=1624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12375" name="file0" dev="loop4" ino=244 res=0 errno=0 [ 1072.292646][ T1641] delete_channel: no stack [ 1072.311996][ T1639] delete_channel: no stack [ 1072.618153][ T1650] ieee802154 phy0 wpan0: encryption failed: -22 [ 1072.748353][ T1621] loop6: detected capacity change from 0 to 32768 [ 1072.795827][ T1621] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.12372 (1621) [ 1072.948840][ T1621] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1072.994117][ T1621] BTRFS info (device loop6): using sha256 checksum algorithm [ 1073.164110][ T1621] BTRFS info (device loop6): enabling ssd optimizations [ 1073.213876][ T1621] BTRFS info (device loop6): turning on async discard [ 1073.225513][ T1621] BTRFS info (device loop6): enabling free space tree [ 1073.266965][ T1683] vcan1: entered promiscuous mode [ 1073.466959][T24902] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1073.922758][ T1702] netlink: 'syz.2.12404': attribute type 21 has an invalid length. [ 1073.945429][ T1702] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12404'. [ 1074.139299][ T1706] loop4: detected capacity change from 0 to 256 [ 1074.177994][ T5910] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1074.369936][ T5910] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1074.386260][ T5910] usb 8-1: config 0 has no interface number 0 [ 1074.392538][ T5910] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1074.463865][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.501140][ T5910] usb 8-1: config 0 descriptor?? [ 1074.549864][ T5910] usb 8-1: selecting invalid altsetting 1 [ 1074.572874][ T5910] dvb_ttusb_budget: ttusb_init_controller: error [ 1074.606587][ T5910] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1074.729517][ T790] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1074.843278][ T5910] DVB: Unable to find symbol cx22700_attach() [ 1074.931709][ T790] usb 3-1: Using ep0 maxpacket: 16 [ 1074.959941][ T790] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1074.976553][ T5910] DVB: Unable to find symbol tda10046_attach() [ 1074.985398][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.004720][ T1729] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12415'. [ 1075.005438][ T5910] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1075.034051][T24184] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1075.047507][ T790] usb 3-1: Product: syz [ 1075.051765][ T790] usb 3-1: Manufacturer: syz [ 1075.066615][ T790] usb 3-1: SerialNumber: syz [ 1075.086513][ T5910] usb 8-1: USB disconnect, device number 9 [ 1075.101172][ T790] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1075.119049][ T790] r8152-cfgselector 3-1: config 0 descriptor?? [ 1075.228054][T24184] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1075.255307][T24184] usb 6-1: config 129 has an invalid interface number: 135 but max is 0 [ 1075.277445][T24184] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 1075.300991][ T1731] loop6: detected capacity change from 0 to 4096 [ 1075.314871][T24184] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1075.348188][T24184] usb 6-1: config 129 has no interface number 0 [ 1075.367930][ T790] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1075.376210][T24184] usb 6-1: config 129 has no interface number 1 [ 1075.385024][ T790] r8152-cfgselector 3-1: bad CDC descriptors [ 1075.401694][T24184] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1075.450751][T24184] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1075.468300][T24184] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1075.483495][T24184] usb 6-1: config 129 interface 135 has no altsetting 0 [ 1075.490647][T24184] usb 6-1: config 129 interface 5 has no altsetting 0 [ 1075.536371][ T1737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12419'. [ 1075.540516][T24184] usb 6-1: string descriptor 0 read error: -22 [ 1075.572318][T24184] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1075.589604][ T5802] r8152-cfgselector 3-1: USB disconnect, device number 121 [ 1075.595344][T24184] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.689150][T24184] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1075.731110][T24184] usb 6-1: MIDIStreaming interface descriptor not found [ 1076.038870][T24184] usb 6-1: USB disconnect, device number 104 [ 1076.065410][ T1752] tipc: Enabling of bearer rejected, failed to enable media [ 1076.312646][ T1758] loop6: detected capacity change from 0 to 1024 [ 1076.407487][ T1758] hfsplus: bad catalog entry type [ 1076.578462][T15771] hfsplus: b-tree write err: -5, ino 25 [ 1076.609060][T15771] hfsplus: b-tree write err: -5, ino 4 [ 1076.638165][T15771] hfsplus: b-tree write err: -5, ino 2 [ 1077.046297][ T1781] loop6: detected capacity change from 0 to 128 [ 1077.379994][ T1789] loop6: detected capacity change from 0 to 1024 [ 1077.443647][ T1789] hfsplus: bad catalog entry type [ 1077.524063][ T1764] loop4: detected capacity change from 0 to 32768 [ 1077.564504][ T85] hfsplus: b-tree write err: -5, ino 25 [ 1077.607603][ T85] hfsplus: b-tree write err: -5, ino 4 [ 1077.616878][ T85] hfsplus: b-tree write err: -5, ino 2 [ 1077.686613][ T1764] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1078.147501][ T5826] ocfs2: Unmounting device (7,4) on (node local) [ 1078.512466][ T1790] loop7: detected capacity change from 0 to 40427 [ 1078.551475][ T1790] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 1078.597329][ T1790] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1078.613964][ T1813] loop6: detected capacity change from 0 to 4096 [ 1078.643630][ T1790] F2FS-fs (loop7): build fault injection rate: 17008 [ 1078.678000][ T1790] F2FS-fs (loop7): invalid crc value [ 1078.691583][ T1822] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1079.075960][ T1790] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1079.137654][ T1790] F2FS-fs (loop7): Start checkpoint disabled! [ 1079.169927][ T1790] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1079.191100][ T1790] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1079.235253][ T1790] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1079.398616][T15771] kworker/u8:19: attempt to access beyond end of device [ 1079.398616][T15771] loop7: rw=1, sector=53248, nr_sectors = 16 limit=40427 [ 1079.472863][T15771] kworker/u8:19: attempt to access beyond end of device [ 1079.472863][T15771] loop7: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1079.512935][T15771] CPU: 0 UID: 0 PID: 15771 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 1079.512970][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1079.512988][T15771] Workqueue: writeback wb_workfn (flush-7:7) [ 1079.513028][T15771] Call Trace: [ 1079.513039][T15771] [ 1079.513052][T15771] dump_stack_lvl+0xe8/0x150 [ 1079.513091][T15771] f2fs_handle_critical_error+0x37c/0x540 [ 1079.513142][T15771] f2fs_write_end_io+0xcdb/0xff0 [ 1079.513194][T15771] __submit_merged_bio+0x256/0x700 [ 1079.513228][T15771] f2fs_submit_merged_write+0x284/0x390 [ 1079.513275][T15771] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 1079.513324][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.513364][T15771] f2fs_sync_node_pages+0x14bf/0x1680 [ 1079.513427][T15771] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1079.513467][T15771] ? __percpu_counter_sum+0x1c2/0x1e0 [ 1079.513528][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.513557][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.513585][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.513617][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.513647][T15771] ? blk_start_plug+0x51/0x1b0 [ 1079.513691][T15771] f2fs_write_node_pages+0x312/0x700 [ 1079.513738][T15771] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1079.513790][T15771] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1079.513830][T15771] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1079.513877][T15771] do_writepages+0x32e/0x550 [ 1079.513921][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.513950][T15771] ? reacquire_held_locks+0x104/0x190 [ 1079.513987][T15771] ? writeback_sb_inodes+0x43d/0x19a0 [ 1079.514027][T15771] __writeback_single_inode+0x133/0x11a0 [ 1079.514062][T15771] ? do_raw_spin_unlock+0xf5/0x210 [ 1079.514094][T15771] writeback_sb_inodes+0x944/0x19a0 [ 1079.514130][T15771] ? ret_from_fork_asm+0x1a/0x30 [ 1079.514172][T15771] ? __lock_acquire+0x6b5/0x2cf0 [ 1079.514212][T15771] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1079.514242][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.514314][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.514343][T15771] ? rcu_is_watching+0x15/0xb0 [ 1079.514379][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.514419][T15771] wb_writeback+0x456/0xb70 [ 1079.514455][T15771] ? queue_io+0x221/0x4a0 [ 1079.514496][T15771] ? __pfx_wb_writeback+0x10/0x10 [ 1079.514526][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.514571][T15771] wb_workfn+0x414/0xf50 [ 1079.514600][T15771] ? look_up_lock_class+0x57/0x110 [ 1079.514655][T15771] ? __pfx_wb_workfn+0x10/0x10 [ 1079.514685][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.514715][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.514744][T15771] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1079.514770][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.514807][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.514841][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.514878][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.514912][T15771] ? process_scheduled_works+0xa25/0x1830 [ 1079.514945][T15771] ? process_scheduled_works+0xa25/0x1830 [ 1079.514981][T15771] process_scheduled_works+0xb02/0x1830 [ 1079.515048][T15771] ? __pfx_process_scheduled_works+0x10/0x10 [ 1079.515089][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.515119][T15771] ? assign_work+0x3d5/0x5e0 [ 1079.515158][T15771] worker_thread+0xa50/0xfc0 [ 1079.515194][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.515242][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.515283][T15771] kthread+0x388/0x470 [ 1079.515309][T15771] ? __pfx_worker_thread+0x10/0x10 [ 1079.515341][T15771] ? __pfx_kthread+0x10/0x10 [ 1079.515368][T15771] ret_from_fork+0x51e/0xb90 [ 1079.515406][T15771] ? __pfx_ret_from_fork+0x10/0x10 [ 1079.515438][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.515467][T15771] ? __switch_to+0xc7d/0x1450 [ 1079.515502][T15771] ? __pfx_kthread+0x10/0x10 [ 1079.515529][T15771] ret_from_fork_asm+0x1a/0x30 [ 1079.515587][T15771] [ 1079.515598][T15771] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1079.842078][ T1845] comedi comedi3: 8255: I/O port conflict (0x4f2a,4) [ 1079.928201][ T1828] loop2: detected capacity change from 0 to 32768 [ 1079.939969][T15771] CPU: 0 UID: 0 PID: 15771 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 1079.940003][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1079.940020][T15771] Workqueue: writeback wb_workfn (flush-7:7) [ 1079.940061][T15771] Call Trace: [ 1079.940072][T15771] [ 1079.940083][T15771] dump_stack_lvl+0xe8/0x150 [ 1079.940125][T15771] f2fs_handle_critical_error+0x37c/0x540 [ 1079.940182][T15771] f2fs_write_end_io+0xcdb/0xff0 [ 1079.940240][T15771] __submit_merged_bio+0x256/0x700 [ 1079.940276][T15771] f2fs_submit_merged_write+0x284/0x390 [ 1079.940327][T15771] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 1079.940380][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.940425][T15771] f2fs_sync_node_pages+0x14bf/0x1680 [ 1079.940491][T15771] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1079.940531][T15771] ? __percpu_counter_sum+0x1c2/0x1e0 [ 1079.940597][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.940625][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.940654][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.940687][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.940717][T15771] ? blk_start_plug+0x51/0x1b0 [ 1079.940760][T15771] f2fs_write_node_pages+0x312/0x700 [ 1079.940806][T15771] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1079.940861][T15771] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1079.940919][T15771] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1079.940961][T15771] do_writepages+0x32e/0x550 [ 1079.941007][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.941037][T15771] ? reacquire_held_locks+0x104/0x190 [ 1079.941074][T15771] ? writeback_sb_inodes+0x43d/0x19a0 [ 1079.941116][T15771] __writeback_single_inode+0x133/0x11a0 [ 1079.941152][T15771] ? do_raw_spin_unlock+0xf5/0x210 [ 1079.941186][T15771] writeback_sb_inodes+0x944/0x19a0 [ 1079.941226][T15771] ? ret_from_fork_asm+0x1a/0x30 [ 1079.941277][T15771] ? __lock_acquire+0x6b5/0x2cf0 [ 1079.941319][T15771] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1079.941350][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.941443][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.941474][T15771] ? rcu_is_watching+0x15/0xb0 [ 1079.941510][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.941551][T15771] wb_writeback+0x456/0xb70 [ 1079.941595][T15771] ? queue_io+0x221/0x4a0 [ 1079.941639][T15771] ? __pfx_wb_writeback+0x10/0x10 [ 1079.941668][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.941716][T15771] wb_workfn+0x414/0xf50 [ 1079.941747][T15771] ? look_up_lock_class+0x57/0x110 [ 1079.941806][T15771] ? __pfx_wb_workfn+0x10/0x10 [ 1079.941837][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.941866][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.941904][T15771] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1079.941930][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.941982][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.942017][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.942049][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.942084][T15771] ? process_scheduled_works+0xa25/0x1830 [ 1079.942117][T15771] ? process_scheduled_works+0xa25/0x1830 [ 1079.942155][T15771] process_scheduled_works+0xb02/0x1830 [ 1079.942231][T15771] ? __pfx_process_scheduled_works+0x10/0x10 [ 1079.942275][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.942305][T15771] ? assign_work+0x3d5/0x5e0 [ 1079.942347][T15771] worker_thread+0xa50/0xfc0 [ 1079.942385][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.942437][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.942481][T15771] kthread+0x388/0x470 [ 1079.942508][T15771] ? __pfx_worker_thread+0x10/0x10 [ 1079.942541][T15771] ? __pfx_kthread+0x10/0x10 [ 1079.942570][T15771] ret_from_fork+0x51e/0xb90 [ 1079.942609][T15771] ? __pfx_ret_from_fork+0x10/0x10 [ 1079.942641][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.942671][T15771] ? __switch_to+0xc7d/0x1450 [ 1079.942708][T15771] ? __pfx_kthread+0x10/0x10 [ 1079.942737][T15771] ret_from_fork_asm+0x1a/0x30 [ 1079.942800][T15771] [ 1079.942813][T15771] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1079.971926][ T1828] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12461 (1828) [ 1079.973233][T15771] CPU: 0 UID: 0 PID: 15771 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 1079.973265][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1079.973282][T15771] Workqueue: writeback wb_workfn (flush-7:7) [ 1079.973322][T15771] Call Trace: [ 1079.973333][T15771] [ 1079.973344][T15771] dump_stack_lvl+0xe8/0x150 [ 1079.973384][T15771] f2fs_handle_critical_error+0x37c/0x540 [ 1079.973436][T15771] f2fs_write_end_io+0xcdb/0xff0 [ 1079.973489][T15771] __submit_merged_bio+0x256/0x700 [ 1079.973523][T15771] f2fs_submit_merged_write+0x284/0x390 [ 1079.973579][T15771] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 1079.973628][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.973668][T15771] f2fs_sync_node_pages+0x14bf/0x1680 [ 1079.973731][T15771] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1079.973771][T15771] ? __percpu_counter_sum+0x1c2/0x1e0 [ 1079.973830][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.973860][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.973895][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.973928][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.973958][T15771] ? blk_start_plug+0x51/0x1b0 [ 1079.974000][T15771] f2fs_write_node_pages+0x312/0x700 [ 1079.974048][T15771] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1079.974099][T15771] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1079.974139][T15771] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1079.974181][T15771] do_writepages+0x32e/0x550 [ 1079.974225][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.974254][T15771] ? reacquire_held_locks+0x104/0x190 [ 1079.974291][T15771] ? writeback_sb_inodes+0x43d/0x19a0 [ 1079.974331][T15771] __writeback_single_inode+0x133/0x11a0 [ 1079.974367][T15771] ? do_raw_spin_unlock+0xf5/0x210 [ 1079.974398][T15771] writeback_sb_inodes+0x944/0x19a0 [ 1079.974436][T15771] ? ret_from_fork_asm+0x1a/0x30 [ 1079.974481][T15771] ? __lock_acquire+0x6b5/0x2cf0 [ 1079.974521][T15771] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1079.974551][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.974623][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.974652][T15771] ? rcu_is_watching+0x15/0xb0 [ 1079.974688][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.974733][T15771] wb_writeback+0x456/0xb70 [ 1079.974769][T15771] ? queue_io+0x221/0x4a0 [ 1079.974810][T15771] ? __pfx_wb_writeback+0x10/0x10 [ 1079.974839][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.974890][T15771] wb_workfn+0x414/0xf50 [ 1079.974921][T15771] ? look_up_lock_class+0x57/0x110 [ 1079.974977][T15771] ? __pfx_wb_workfn+0x10/0x10 [ 1079.975007][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.975035][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.975065][T15771] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1079.975090][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.975127][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.975160][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.975191][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.975224][T15771] ? process_scheduled_works+0xa25/0x1830 [ 1079.975258][T15771] ? process_scheduled_works+0xa25/0x1830 [ 1079.975294][T15771] process_scheduled_works+0xb02/0x1830 [ 1079.975360][T15771] ? __pfx_process_scheduled_works+0x10/0x10 [ 1079.975398][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.975428][T15771] ? assign_work+0x3d5/0x5e0 [ 1079.975469][T15771] worker_thread+0xa50/0xfc0 [ 1079.975505][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.975553][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.975593][T15771] kthread+0x388/0x470 [ 1079.975619][T15771] ? __pfx_worker_thread+0x10/0x10 [ 1079.975651][T15771] ? __pfx_kthread+0x10/0x10 [ 1079.975678][T15771] ret_from_fork+0x51e/0xb90 [ 1079.975716][T15771] ? __pfx_ret_from_fork+0x10/0x10 [ 1079.975747][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1079.975776][T15771] ? __switch_to+0xc7d/0x1450 [ 1079.975810][T15771] ? __pfx_kthread+0x10/0x10 [ 1079.975837][T15771] ret_from_fork_asm+0x1a/0x30 [ 1079.975902][T15771] [ 1079.975972][T15771] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1080.762077][ T1828] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1080.774424][ T1828] BTRFS info (device loop2): using sha256 checksum algorithm [ 1080.777426][T15771] CPU: 0 UID: 0 PID: 15771 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 1080.777460][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1080.777478][T15771] Workqueue: writeback wb_workfn (flush-7:7) [ 1080.777519][T15771] Call Trace: [ 1080.777530][T15771] [ 1080.777542][T15771] dump_stack_lvl+0xe8/0x150 [ 1080.777584][T15771] f2fs_handle_critical_error+0x37c/0x540 [ 1080.777637][T15771] f2fs_write_end_io+0xcdb/0xff0 [ 1080.777696][T15771] __submit_merged_bio+0x256/0x700 [ 1080.777733][T15771] f2fs_submit_merged_write+0x284/0x390 [ 1080.777784][T15771] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 1080.777836][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.777880][T15771] f2fs_sync_node_pages+0x14bf/0x1680 [ 1080.777950][T15771] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 1080.777991][T15771] ? __percpu_counter_sum+0x1c2/0x1e0 [ 1080.778060][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.778090][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1080.778127][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.778160][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.778190][T15771] ? blk_start_plug+0x51/0x1b0 [ 1080.778235][T15771] f2fs_write_node_pages+0x312/0x700 [ 1080.778285][T15771] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1080.778341][T15771] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1080.778382][T15771] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1080.778425][T15771] do_writepages+0x32e/0x550 [ 1080.778473][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.778502][T15771] ? reacquire_held_locks+0x104/0x190 [ 1080.778540][T15771] ? writeback_sb_inodes+0x43d/0x19a0 [ 1080.778582][T15771] __writeback_single_inode+0x133/0x11a0 [ 1080.778619][T15771] ? do_raw_spin_unlock+0xf5/0x210 [ 1080.778653][T15771] writeback_sb_inodes+0x944/0x19a0 [ 1080.778695][T15771] ? ret_from_fork_asm+0x1a/0x30 [ 1080.778747][T15771] ? __lock_acquire+0x6b5/0x2cf0 [ 1080.778790][T15771] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1080.778821][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1080.778905][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.778936][T15771] ? rcu_is_watching+0x15/0xb0 [ 1080.778972][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.779015][T15771] wb_writeback+0x456/0xb70 [ 1080.779053][T15771] ? queue_io+0x221/0x4a0 [ 1080.779098][T15771] ? __pfx_wb_writeback+0x10/0x10 [ 1080.779134][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1080.779186][T15771] wb_workfn+0x414/0xf50 [ 1080.779217][T15771] ? look_up_lock_class+0x57/0x110 [ 1080.779278][T15771] ? __pfx_wb_workfn+0x10/0x10 [ 1080.779310][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.779340][T15771] ? do_raw_spin_lock+0x12b/0x2f0 [ 1080.779371][T15771] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1080.779399][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.779438][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.779473][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.779505][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.779539][T15771] ? process_scheduled_works+0xa25/0x1830 [ 1080.779573][T15771] ? process_scheduled_works+0xa25/0x1830 [ 1080.779611][T15771] process_scheduled_works+0xb02/0x1830 [ 1080.779687][T15771] ? __pfx_process_scheduled_works+0x10/0x10 [ 1080.779730][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.779760][T15771] ? assign_work+0x3d5/0x5e0 [ 1080.779802][T15771] worker_thread+0xa50/0xfc0 [ 1080.779840][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.779891][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.779935][T15771] kthread+0x388/0x470 [ 1080.779963][T15771] ? __pfx_worker_thread+0x10/0x10 [ 1080.779995][T15771] ? __pfx_kthread+0x10/0x10 [ 1080.780024][T15771] ret_from_fork+0x51e/0xb90 [ 1080.780065][T15771] ? __pfx_ret_from_fork+0x10/0x10 [ 1080.780096][T15771] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1080.780132][T15771] ? __switch_to+0xc7d/0x1450 [ 1080.780169][T15771] ? __pfx_kthread+0x10/0x10 [ 1080.780198][T15771] ret_from_fork_asm+0x1a/0x30 [ 1080.780261][T15771] [ 1080.780273][T15771] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1081.146292][ T1865] loop6: detected capacity change from 0 to 512 [ 1081.262655][ T1865] EXT4-fs: Ignoring removed oldalloc option [ 1081.386363][ T1865] EXT4-fs (loop6): 1 truncate cleaned up [ 1081.451070][ T1865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1081.486382][ T1887] loop4: detected capacity change from 0 to 764 [ 1081.532670][ T1865] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.6.12474: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1081.557086][ T1828] BTRFS info (device loop2): enabling ssd optimizations [ 1081.561195][ T1865] EXT4-fs (loop6): Remounting filesystem read-only [ 1081.564909][ T1828] BTRFS info (device loop2): turning on async discard [ 1081.603892][ T1887] rock: directory entry would overflow storage [ 1081.620323][ T1887] rock: sig=0x5245, size=8, remaining=5 [ 1081.631653][ T1828] BTRFS info (device loop2): enabling free space tree [ 1081.723732][T24902] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.928863][ T5815] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1082.528325][ T1915] MPI: mpi too large (113288 bits) [ 1083.466803][ T1904] loop6: detected capacity change from 0 to 32768 [ 1083.516041][ T1904] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.12489 (1904) [ 1083.631595][ T1904] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1083.690362][ T1908] loop5: detected capacity change from 0 to 40427 [ 1083.697371][ T1904] BTRFS info (device loop6): using sha256 checksum algorithm [ 1083.744895][ T1908] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1083.775882][ T1908] F2FS-fs (loop5): invalid crc value [ 1083.958906][ T1904] BTRFS info (device loop6): enabling ssd optimizations [ 1083.986596][ T1904] BTRFS info (device loop6): turning on async discard [ 1083.994205][ T1904] BTRFS info (device loop6): enabling free space tree [ 1084.007366][ T5802] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1084.211912][T24902] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1084.237069][ T1908] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1084.248602][ T5802] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1084.265956][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.286823][ T1908] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1084.298561][ T5802] usb 5-1: Product: syz [ 1084.332174][ T5802] usb 5-1: Manufacturer: syz [ 1084.356865][ T5802] usb 5-1: SerialNumber: syz [ 1084.493693][ T5802] usb 5-1: config 0 descriptor?? [ 1084.515982][ T5802] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1084.576698][ T5802] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1084.587828][ T1983] tipc: Started in network mode [ 1084.600250][ T5802] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1084.620907][ T1983] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 1084.645882][ T5802] usb 5-1: media controller created [ 1084.665305][ T1983] tipc: Enabling of bearer rejected, failed to enable media [ 1084.785430][ T5802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1084.900325][ T1991] loop7: detected capacity change from 0 to 128 [ 1084.966623][ T1992] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 1085.032588][ T1991] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1085.050313][ T5802] DVB: Unable to find symbol mt352_attach() [ 1085.191873][ T1998] loop6: detected capacity change from 0 to 512 [ 1085.303443][ T1998] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.396188][T26912] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1085.432264][ T5802] DVB: Unable to find symbol nxt6000_attach() [ 1085.438568][ T5802] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1085.463306][ T2003] loop2: detected capacity change from 0 to 1024 [ 1085.488271][ T1998] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1085.513327][ T5802] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input65 [ 1085.578286][ T5802] dvb-usb: schedule remote query interval to 1000 msecs. [ 1085.617578][ T5802] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1085.690996][ T5802] dvb-usb: bulk message failed: -22 (7/0) [ 1085.734698][ T5802] dvb-usb: bulk message failed: -22 (7/0) [ 1085.798122][ T5802] usb 5-1: USB disconnect, device number 118 [ 1085.808526][T15742] hfsplus: b-tree write err: -5, ino 25 [ 1085.837420][T15742] hfsplus: b-tree write err: -5, ino 4 [ 1085.846102][T24902] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.869781][T15742] hfsplus: b-tree write err: -5, ino 2 [ 1085.914139][ T790] kernel read not supported for file /vcs (pid: 790 comm: kworker/0:2) [ 1086.068207][ T5802] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1086.373162][ T790] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1086.402769][ T2028] loop6: detected capacity change from 0 to 64 [ 1086.537281][ T790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.570352][ T790] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1086.605553][ T790] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1086.619778][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1086.640311][ T790] usb 3-1: SerialNumber: syz [ 1086.801294][ T2038] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12541'. [ 1086.843127][ T2040] @ÿ: renamed from bond_slave_0 (while UP) [ 1086.879409][ T790] usb 3-1: 0:2 : does not exist [ 1086.914597][ T2035] loop4: detected capacity change from 0 to 4096 [ 1086.993837][ T2035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.145272][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.147953][ T790] usb 3-1: USB disconnect, device number 122 [ 1087.363902][ T30] audit: type=1326 audit(1849.862:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2049 comm="syz.5.12547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278d19c629 code=0x7ffc0000 [ 1087.469974][ T30] audit: type=1326 audit(1849.862:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2049 comm="syz.5.12547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278d19c629 code=0x7ffc0000 [ 1087.508148][ T2056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12546'. [ 1087.562092][ T2056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12546'. [ 1087.565803][ T30] audit: type=1326 audit(1849.862:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2049 comm="syz.5.12547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f278d19c629 code=0x7ffc0000 [ 1087.710139][ T30] audit: type=1326 audit(1849.862:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2049 comm="syz.5.12547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278d19c629 code=0x7ffc0000 [ 1087.827965][ T30] audit: type=1326 audit(1849.862:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2049 comm="syz.5.12547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278d19c629 code=0x7ffc0000 [ 1087.832692][ T2064] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12553'. [ 1088.418106][ T2077] loop7: detected capacity change from 0 to 4096 [ 1088.452754][ T2077] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1088.586211][ T2086] loop6: detected capacity change from 0 to 512 [ 1088.599737][ T2077] ntfs3(loop7): ino=1a, mi_enum_attr [ 1088.626906][ T2077] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1088.671651][ T2077] ntfs3(loop7): ino=1a, mi_enum_attr [ 1088.677203][ T2077] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 1088.774464][ T2086] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1088.785477][ T2086] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1088.804885][ T2086] EXT4-fs (loop6): mount failed [ 1089.190358][ T2105] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1089.311312][ T2077] ntfs3: Cannot use different iocharset when remounting! [ 1089.316408][ T2107] loop4: detected capacity change from 0 to 512 [ 1089.410764][ T2110] loop5: detected capacity change from 0 to 256 [ 1089.491284][ T2110] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1090.227087][ T2132] pim6reg: entered allmulticast mode [ 1090.325643][ T2113] loop6: detected capacity change from 0 to 32768 [ 1090.345908][ T2113] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.12576 (2113) [ 1090.428372][ T2113] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1090.454676][ T2113] BTRFS info (device loop6): using sha256 checksum algorithm [ 1090.581147][ T2145] loop4: detected capacity change from 0 to 256 [ 1090.637235][ T2113] BTRFS info (device loop6): enabling ssd optimizations [ 1090.659780][ T2113] BTRFS info (device loop6): turning on async discard [ 1090.704313][ T2113] BTRFS info (device loop6): enabling free space tree [ 1090.775775][ T2145] FAT-fs (loop4): Directory bread(block 64) failed [ 1090.796334][ T2145] FAT-fs (loop4): Directory bread(block 65) failed [ 1090.820534][ T2145] FAT-fs (loop4): Directory bread(block 66) failed [ 1090.837110][ T2145] FAT-fs (loop4): Directory bread(block 67) failed [ 1090.857987][ T2145] FAT-fs (loop4): Directory bread(block 68) failed [ 1090.895378][ T2145] FAT-fs (loop4): Directory bread(block 69) failed [ 1090.908844][ T2145] FAT-fs (loop4): Directory bread(block 70) failed [ 1090.932939][ T2145] FAT-fs (loop4): Directory bread(block 71) failed [ 1090.953589][ T2145] FAT-fs (loop4): Directory bread(block 72) failed [ 1090.963897][ T2145] FAT-fs (loop4): Directory bread(block 73) failed [ 1090.988338][T24902] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1091.162615][ T2165] loop5: detected capacity change from 0 to 512 [ 1091.255786][ T2165] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1091.326692][ T2126] loop7: detected capacity change from 0 to 32768 [ 1091.342936][ T2165] EXT4-fs (loop5): 1 truncate cleaned up [ 1091.418777][ T2165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.431528][ T2126] read_mapping_page failed! [ 1091.479962][ T2126] ERROR: (device loop7): txCommit: [ 1091.479962][ T2126] [ 1091.646547][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.342468][ T2192] loop7: detected capacity change from 0 to 256 [ 1092.759336][ T2202] loop4: detected capacity change from 0 to 1764 [ 1092.896424][ T2209] sit0: entered promiscuous mode [ 1092.942801][ T2209] netlink: 'syz.7.12611': attribute type 1 has an invalid length. [ 1092.972055][ T2209] netlink: 1 bytes leftover after parsing attributes in process `syz.7.12611'. [ 1093.056538][ T2182] loop2: detected capacity change from 0 to 40427 [ 1093.131823][ T2182] F2FS-fs (loop2): invalid crc value [ 1093.156713][ T790] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1093.271473][ T2223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12617'. [ 1093.349064][ T2182] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1093.369178][ T2182] F2FS-fs (loop2): Start checkpoint disabled! [ 1093.375420][ T790] usb 7-1: Using ep0 maxpacket: 8 [ 1093.388641][ T2182] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1093.393961][ T790] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1093.413095][ T790] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.424435][ T2182] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1093.435268][ T790] usb 7-1: Product: syz [ 1093.458559][ T790] usb 7-1: Manufacturer: syz [ 1093.463803][ T30] audit: type=1800 audit(1855.569:448): pid=2182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12600" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 1093.485602][ T5910] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1093.498908][ T790] usb 7-1: SerialNumber: syz [ 1093.513376][ T790] usb 7-1: config 0 descriptor?? [ 1093.534513][ T790] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1093.552078][T15768] kworker/u8:17: attempt to access beyond end of device [ 1093.552078][T15768] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1093.552325][ T790] usb 7-1: setting power ON [ 1093.580792][T15768] CPU: 1 UID: 0 PID: 15768 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 1093.580834][T15768] Tainted: [L]=SOFTLOCKUP [ 1093.580845][T15768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1093.580863][T15768] Workqueue: writeback wb_workfn (flush-7:2) [ 1093.580915][T15768] Call Trace: [ 1093.580926][T15768] [ 1093.580939][T15768] dump_stack_lvl+0xe8/0x150 [ 1093.580980][T15768] f2fs_handle_critical_error+0x37c/0x540 [ 1093.581035][T15768] f2fs_write_end_io+0xcdb/0xff0 [ 1093.581095][T15768] __submit_merged_bio+0x256/0x700 [ 1093.581132][T15768] __submit_merged_write_cond+0x3c9/0x4e0 [ 1093.581188][T15768] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1093.581250][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.581294][T15768] f2fs_write_data_pages+0x2975/0x35e0 [ 1093.581374][T15768] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1093.581424][T15768] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1093.581507][T15768] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1093.581569][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.581627][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.581662][T15768] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1093.581696][T15768] do_writepages+0x32e/0x550 [ 1093.581742][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.581773][T15768] ? reacquire_held_locks+0x104/0x190 [ 1093.581809][T15768] ? writeback_sb_inodes+0x43d/0x19a0 [ 1093.581851][T15768] __writeback_single_inode+0x133/0x11a0 [ 1093.581893][T15768] ? do_raw_spin_unlock+0xf5/0x210 [ 1093.581927][T15768] writeback_sb_inodes+0x944/0x19a0 [ 1093.581968][T15768] ? ret_from_fork_asm+0x1a/0x30 [ 1093.582019][T15768] ? __lock_acquire+0x6b5/0x2cf0 [ 1093.582061][T15768] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1093.582091][T15768] ? do_raw_spin_lock+0x12b/0x2f0 [ 1093.582174][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.582205][T15768] ? rcu_is_watching+0x15/0xb0 [ 1093.582242][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.582284][T15768] wb_writeback+0x456/0xb70 [ 1093.582323][T15768] ? queue_io+0x221/0x4a0 [ 1093.582367][T15768] ? __pfx_wb_writeback+0x10/0x10 [ 1093.582396][T15768] ? do_raw_spin_lock+0x12b/0x2f0 [ 1093.582449][T15768] wb_workfn+0x414/0xf50 [ 1093.582481][T15768] ? look_up_lock_class+0x57/0x110 [ 1093.582542][T15768] ? __pfx_wb_workfn+0x10/0x10 [ 1093.582574][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.582604][T15768] ? do_raw_spin_lock+0x12b/0x2f0 [ 1093.582636][T15768] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1093.582663][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.582701][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.582734][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.582766][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.582801][T15768] ? process_scheduled_works+0xa25/0x1830 [ 1093.582840][T15768] ? process_scheduled_works+0xa25/0x1830 [ 1093.582876][T15768] process_scheduled_works+0xb02/0x1830 [ 1093.582958][T15768] ? __pfx_process_scheduled_works+0x10/0x10 [ 1093.583004][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.583034][T15768] ? assign_work+0x3d5/0x5e0 [ 1093.583076][T15768] worker_thread+0xa50/0xfc0 [ 1093.583136][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.583178][T15768] kthread+0x388/0x470 [ 1093.583205][T15768] ? __pfx_worker_thread+0x10/0x10 [ 1093.583236][T15768] ? __pfx_kthread+0x10/0x10 [ 1093.583265][T15768] ret_from_fork+0x51e/0xb90 [ 1093.583301][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.583336][T15768] ? __pfx_ret_from_fork+0x10/0x10 [ 1093.583367][T15768] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1093.583397][T15768] ? __switch_to+0xc7d/0x1450 [ 1093.583433][T15768] ? __pfx_kthread+0x10/0x10 [ 1093.583462][T15768] ret_from_fork_asm+0x1a/0x30 [ 1093.583524][T15768] [ 1093.588522][ T790] dvb-usb: bulk message failed: -22 (2/0) [ 1093.605414][T15768] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1093.639372][ T2232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12620'. [ 1093.977199][ T2232] tipc: Started in network mode [ 1093.983998][ T2232] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 1093.994185][ T790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1094.003494][ T5910] usb 8-1: Using ep0 maxpacket: 8 [ 1094.010100][ T790] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1094.026923][ T790] usb 7-1: media controller created [ 1094.044367][ T5910] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1094.053544][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.072861][ T2232] tipc: Enabling of bearer rejected, failed to enable media [ 1094.108291][ T5910] usb 8-1: Product: syz [ 1094.113502][ T790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1094.127752][ T5910] usb 8-1: Manufacturer: syz [ 1094.141230][ T5910] usb 8-1: SerialNumber: syz [ 1094.170981][ T5910] usb 8-1: config 0 descriptor?? [ 1094.204023][ T790] usb 7-1: selecting invalid altsetting 6 [ 1094.223333][ T790] usb 7-1: digital interface selection failed (-22) [ 1094.247439][ T790] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1094.281204][ T790] usb 7-1: setting power OFF [ 1094.297354][ T790] dvb-usb: bulk message failed: -22 (2/0) [ 1094.322725][ T790] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1094.332109][ T790] (NULL device *): no alternate interface [ 1094.423442][ T5910] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1094.499576][ T790] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1094.539974][ T790] usb 7-1: USB disconnect, device number 12 [ 1094.776663][ T2253] loop6: detected capacity change from 0 to 2048 [ 1094.796216][ T2253] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1094.823022][ T2253] UDF-fs: Scanning with blocksize 512 failed [ 1094.857803][ T2259] loop5: detected capacity change from 0 to 256 [ 1094.866104][ T5910] usb write operation failed. (-71) [ 1094.876921][ T2253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1094.887946][ T5910] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1094.898186][ T2259] exfat: Deprecated parameter 'namecase' [ 1094.940371][ T5910] dvbdev: DVB: registering new adapter (Terratec H7) [ 1094.963544][ T5910] usb 8-1: media controller created [ 1094.983382][ T5910] usb read operation failed. (-71) [ 1094.994306][ T2259] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfe5fe6b3, utbl_chksum : 0xe619d30d) [ 1095.027436][ T5910] usb write operation failed. (-71) [ 1095.048771][ T790] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1095.072463][ T5910] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1095.121790][ T5910] usb 8-1: USB disconnect, device number 10 [ 1095.265068][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.283847][ T790] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1095.337469][ T790] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1095.374661][ T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.409599][ T790] usb 5-1: config 0 descriptor?? [ 1095.748011][ T2278] syz_tun: entered promiscuous mode [ 1095.773854][ T2278] macsec1: entered allmulticast mode [ 1095.786269][ T2278] syz_tun: entered allmulticast mode [ 1095.814397][ T2278] syz_tun: left allmulticast mode [ 1095.829259][ T2278] syz_tun: left promiscuous mode [ 1095.873561][ T2282] netlink: 'syz.6.12643': attribute type 10 has an invalid length. [ 1095.883410][ T790] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 1095.890668][ T790] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 1095.915569][ T790] microsoft 0003:045E:00F9.0002: unknown main item tag 0x0 [ 1095.947794][ T5817] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1095.955038][ T790] microsoft 0003:045E:00F9.0002: hidraw0: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.4-1/input0 [ 1095.981698][ T790] microsoft 0003:045E:00F9.0002: no inputs found [ 1096.009524][ T790] microsoft 0003:045E:00F9.0002: could not initialize ff, continuing anyway [ 1096.051098][ T2287] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12646'. [ 1096.097158][ T790] usb 5-1: USB disconnect, device number 119 [ 1096.173998][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.216915][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.231569][ T2285] fido_id[2285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1096.241026][ T5817] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1096.310280][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.345639][ T5817] usb 3-1: config 0 descriptor?? [ 1096.366195][ T2293] loop6: detected capacity change from 0 to 256 [ 1096.670670][ T2299] loop6: detected capacity change from 0 to 256 [ 1096.737272][ T2299] exfat: Deprecated parameter 'namecase' [ 1096.758119][ T2299] exfat: Deprecated parameter 'utf8' [ 1096.826366][ T2301] loop7: detected capacity change from 0 to 2048 [ 1096.833202][ T2299] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1096.869849][ T2301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1096.951651][ T2301] overlayfs: upper fs needs to support d_type. [ 1096.986530][ T2301] overlayfs: cleanup of 'work/#1' failed (-2) [ 1097.035998][ T2301] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1097.077311][ T2301] overlayfs: failed to set xattr on upper [ 1097.108854][ T2301] overlayfs: ...falling back to redirect_dir=nofollow. [ 1097.136260][ T2301] overlayfs: ...falling back to index=off. [ 1097.164441][ T2301] overlayfs: ...falling back to uuid=null. [ 1097.176968][ T5817] logitech-djreceiver 0003:046D:C534.0003: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.2-1/input0 [ 1097.311529][ T5817] usb 3-1: USB disconnect, device number 123 [ 1097.445832][T26912] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 1097.479163][T26912] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh [ 1097.610888][ T2313] fido_id[2313]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1098.150161][ T2325] bond6 (unregistering): Released all slaves [ 1098.530281][T15768] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.589696][ T2312] loop4: detected capacity change from 0 to 32768 [ 1098.643945][ T2312] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1098.756952][ T2312] XFS (loop4): Ending clean mount [ 1098.785486][T15768] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.012648][T29482] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1099.024610][T29482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1099.034587][T29482] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1099.044109][T29482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1099.056651][T29482] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1099.075357][ T5826] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1099.200946][T15768] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.429755][ T2366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12682'. [ 1099.654763][T15768] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.815347][ T2355] lo speed is unknown, defaulting to 1000 [ 1099.867860][ T2355] vxcan1 speed is unknown, defaulting to 1000 [ 1100.127237][ T2380] netlink: 'syz.5.12688': attribute type 5 has an invalid length. [ 1100.279875][T15768] bridge_slave_1: left allmulticast mode [ 1100.285675][T15768] bridge_slave_1: left promiscuous mode [ 1100.303308][T15768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.388756][T15768] bridge_slave_0: left allmulticast mode [ 1100.417236][ T2358] loop6: detected capacity change from 0 to 40427 [ 1100.421535][T15768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.442648][ T2358] F2FS-fs (loop6): Image doesn't support compression [ 1100.476431][ T2358] F2FS-fs (loop6): build fault injection rate: 684 [ 1100.509278][ T2358] F2FS-fs (loop6): build fault injection type: 0x35f7 [ 1100.535051][ T2358] F2FS-fs (loop6): invalid crc value [ 1100.859571][ T2358] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1100.891714][ T2358] F2FS-fs (loop6): Start checkpoint disabled! [ 1100.916767][ T2358] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1100.947633][ T2358] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1100.962165][ T2403] loop2: detected capacity change from 0 to 2048 [ 1100.998804][ T2403] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485 [ 1101.038325][ T2403] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1101.146374][ T2409] loop5: detected capacity change from 0 to 1024 [ 1101.208745][ T80] kworker/u8:5: attempt to access beyond end of device [ 1101.208745][ T80] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1101.235482][ T80] CPU: 1 UID: 0 PID: 80 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.235522][ T80] Tainted: [L]=SOFTLOCKUP [ 1101.235532][ T80] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1101.235550][ T80] Workqueue: writeback wb_workfn (flush-7:6) [ 1101.235591][ T80] Call Trace: [ 1101.235602][ T80] [ 1101.235614][ T80] dump_stack_lvl+0xe8/0x150 [ 1101.235661][ T80] f2fs_handle_critical_error+0x37c/0x540 [ 1101.235712][ T80] f2fs_write_end_io+0xcdb/0xff0 [ 1101.235770][ T80] __submit_merged_bio+0x256/0x700 [ 1101.235808][ T80] __submit_merged_write_cond+0x3c9/0x4e0 [ 1101.235863][ T80] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1101.235923][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.235967][ T80] f2fs_write_data_pages+0x2975/0x35e0 [ 1101.236004][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.236081][ T80] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1101.236172][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.236205][ T80] ? __lock_acquire+0x6b5/0x2cf0 [ 1101.236320][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.236358][ T80] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1101.236393][ T80] do_writepages+0x32e/0x550 [ 1101.236444][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.236475][ T80] ? reacquire_held_locks+0x104/0x190 [ 1101.236515][ T80] ? writeback_sb_inodes+0x43d/0x19a0 [ 1101.236561][ T80] __writeback_single_inode+0x133/0x11a0 [ 1101.236600][ T80] ? do_raw_spin_unlock+0xf5/0x210 [ 1101.236637][ T80] writeback_sb_inodes+0x944/0x19a0 [ 1101.236712][ T80] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1101.236744][ T80] ? do_raw_spin_lock+0x12b/0x2f0 [ 1101.236832][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.236865][ T80] ? rcu_is_watching+0x15/0xb0 [ 1101.236904][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.236948][ T80] wb_writeback+0x456/0xb70 [ 1101.236987][ T80] ? queue_io+0x221/0x4a0 [ 1101.237032][ T80] ? __pfx_wb_writeback+0x10/0x10 [ 1101.237062][ T80] ? do_raw_spin_lock+0x12b/0x2f0 [ 1101.237116][ T80] wb_workfn+0x414/0xf50 [ 1101.237147][ T80] ? look_up_lock_class+0x57/0x110 [ 1101.237212][ T80] ? __pfx_wb_workfn+0x10/0x10 [ 1101.237257][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.237287][ T80] ? do_raw_spin_lock+0x12b/0x2f0 [ 1101.237319][ T80] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1101.237346][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.237386][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.237421][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.237451][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.237487][ T80] ? process_scheduled_works+0xa25/0x1830 [ 1101.237523][ T80] ? process_scheduled_works+0xa25/0x1830 [ 1101.237561][ T80] process_scheduled_works+0xb02/0x1830 [ 1101.237635][ T80] ? __pfx_process_scheduled_works+0x10/0x10 [ 1101.237679][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.237710][ T80] ? assign_work+0x3d5/0x5e0 [ 1101.237754][ T80] worker_thread+0xa50/0xfc0 [ 1101.237814][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.237857][ T80] kthread+0x388/0x470 [ 1101.237885][ T80] ? __pfx_worker_thread+0x10/0x10 [ 1101.237917][ T80] ? __pfx_kthread+0x10/0x10 [ 1101.237945][ T80] ret_from_fork+0x51e/0xb90 [ 1101.237986][ T80] ? __pfx_ret_from_fork+0x10/0x10 [ 1101.238018][ T80] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1101.238047][ T80] ? __switch_to+0xc7d/0x1450 [ 1101.238085][ T80] ? __pfx_kthread+0x10/0x10 [ 1101.238114][ T80] ret_from_fork_asm+0x1a/0x30 [ 1101.238177][ T80] [ 1101.585582][T18817] Bluetooth: hci2: command tx timeout [ 1101.587006][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1101.597996][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1101.600475][ T80] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1101.603704][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1101.751472][T15768] bond0 (unregistering): (slave 1@ÿ): Releasing backup interface [ 1101.808978][T15768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.887713][T15768] bond0 (unregistering): Released all slaves [ 1101.899987][ T2416] loop5: detected capacity change from 0 to 128 [ 1101.976674][ T2416] FAT-fs (loop5): Directory bread(block 414) failed [ 1101.986219][ T2416] FAT-fs (loop5): Directory bread(block 415) failed [ 1101.992863][ T2416] FAT-fs (loop5): Directory bread(block 416) failed [ 1102.006059][T15768] bond1 (unregistering): Released all slaves [ 1102.024851][ T2416] FAT-fs (loop5): Directory bread(block 417) failed [ 1102.042774][ T2416] FAT-fs (loop5): Directory bread(block 418) failed [ 1102.049472][ T2416] FAT-fs (loop5): Directory bread(block 419) failed [ 1102.060748][ T2416] FAT-fs (loop5): Directory bread(block 420) failed [ 1102.085195][ T2355] virt_wifi0 speed is unknown, defaulting to 1000 [ 1102.093381][ T2416] FAT-fs (loop5): Directory bread(block 421) failed [ 1102.388502][ T2416] FAT-fs (loop5): FAT read failed (blocknr 128) [ 1102.400552][ T2432] Zero length message leads to an empty skb [ 1102.494058][ T2435] loop4: detected capacity change from 0 to 2048 [ 1102.513379][ T2435] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1102.618306][ T2435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1102.714250][ T2445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12708'. [ 1102.871118][ T2453] binder: 2448:2453 ioctl c018620b 200000000780 returned -14 [ 1102.971592][ T2447] pimreg: entered allmulticast mode [ 1103.023463][ T2452] pimreg: left allmulticast mode [ 1103.102423][ T2461] loop2: detected capacity change from 0 to 512 [ 1103.164318][ T2461] EXT4-fs: Ignoring removed mblk_io_submit option [ 1103.351069][ T2461] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 1103.379087][ T2464] loop5: detected capacity change from 0 to 32768 [ 1103.388845][ T2464] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 54afed05-3bf0-4bba-a625-8fded58ff47f [ 1103.399047][ T2464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.12715 (2464) [ 1103.426553][ T2461] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.12713: attempt to clear invalid blocks 2 len 1 [ 1103.489369][ T2464] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1103.499614][ T2464] BTRFS info (device loop5): using crc32c checksum algorithm [ 1103.557553][ T2461] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1103.558239][ T2461] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1103.582359][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1103.582395][ C0] EXT4-fs (loop2): initial error at time 1865: ext4_clear_blocks:876: inode 13 [ 1103.582437][ C0] EXT4-fs (loop2): last error at time 1865: ext4_clear_blocks:876: inode 13 [ 1103.615551][ T2461] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.12713: invalid indirect mapped block 1819239214 (level 0) [ 1103.630818][ T2461] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1103.652932][ T2461] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.12713: invalid indirect mapped block 1819239214 (level 1) [ 1103.685890][ T2461] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1103.697843][ T2461] EXT4-fs (loop2): 1 truncate cleaned up [ 1103.760644][T18817] Bluetooth: hci2: command tx timeout [ 1103.770569][T15771] BTRFS warning (device loop5): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x7bb8b196 level 0 [ 1103.810581][ T2461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.823722][ T2464] BTRFS error (device loop5): failed to read chunk root [ 1103.890656][ T2464] BTRFS error (device loop5): open_ctree failed: -5 [ 1103.911619][ T2461] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 1104.247043][ T2509] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1104.361130][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.612501][ T2355] chnl_net:caif_netlink_parms(): no params data found [ 1104.721413][ T2476] loop6: detected capacity change from 0 to 32768 [ 1104.773088][ T2476] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1104.794841][ T2526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12725'. [ 1104.851595][ T2476] JBD2: Ignoring recovery information on journal [ 1105.033027][ T2476] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1105.084255][ T2526] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 1105.130672][ T2526] ip6gretap3: entered allmulticast mode [ 1105.188996][ T2499] loop4: detected capacity change from 0 to 32768 [ 1105.259353][ T2499] xfs: Deprecated parameter 'ikeep' [ 1105.294554][ T2499] XFS: ikeep mount option is deprecated. [ 1105.440818][ T2499] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1105.457102][ T5910] IPVS: starting estimator thread 0... [ 1105.513720][T15768] hsr_slave_0: left promiscuous mode [ 1105.572584][T15768] hsr_slave_1: left promiscuous mode [ 1105.632262][T15768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.639820][T15768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.654174][ T2544] IPVS: using max 28 ests per chain, 67200 per kthread [ 1105.721563][ T2499] XFS (loop4): Ending clean mount [ 1105.736149][T15768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.753874][T24902] ocfs2: Unmounting device (7,6) on (node local) [ 1105.763257][ T2499] XFS (loop4): Quotacheck needed: Please wait. [ 1105.770289][T15768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.878244][ T2499] XFS (loop4): Quotacheck: Done. [ 1105.977521][T15768] veth1_macvtap: left promiscuous mode [ 1105.983161][T15768] veth0_macvtap: left promiscuous mode [ 1105.986953][T18817] Bluetooth: hci2: command tx timeout [ 1106.021540][T15768] veth1_vlan: left allmulticast mode [ 1106.070272][T15768] veth1_vlan: left promiscuous mode [ 1106.101805][T15768] veth0_vlan: left promiscuous mode [ 1106.121359][ T2569] loop5: detected capacity change from 0 to 1024 [ 1106.164602][ T2569] hfsplus: b-tree write err: -5, ino 2 [ 1106.188683][ T5826] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1106.327332][T15771] hfsplus: b-tree write err: -5, ino 25 [ 1106.333166][T15771] hfsplus: b-tree write err: -5, ino 4 [ 1106.446237][T15771] hfsplus: b-tree write err: -5, ino 2 [ 1106.454895][T15771] hfsplus: b-tree write err: -5, ino 26 [ 1107.137279][T15768] team0 (unregistering): Port device macvlan0 removed [ 1107.350474][T15768] team0 (unregistering): Port device team_slave_1 removed [ 1107.364756][ T5910] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1107.419493][T15768] team0 (unregistering): Port device team_slave_0 removed [ 1107.570764][ T2587] loop4: detected capacity change from 0 to 32768 [ 1107.576695][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 1107.588416][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.635360][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1107.649440][ T5910] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1107.651785][ T2587] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1107.660952][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.730402][ T5910] usb 3-1: config 0 descriptor?? [ 1107.758281][ T2587] XFS (loop4): Ending clean mount [ 1107.956338][ T2355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.964162][ T2355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.971690][ T2355] bridge_slave_0: entered allmulticast mode [ 1107.982323][ T2355] bridge_slave_0: entered promiscuous mode [ 1107.993437][ T2355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.000974][ T2355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.013785][ T2355] bridge_slave_1: entered allmulticast mode [ 1108.054993][ T2355] bridge_slave_1: entered promiscuous mode [ 1108.194356][ T2619] faux_driver vkms: [drm] Unknown color mode 2054; guessing buffer size. [ 1108.201707][ T2355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.207506][T18817] Bluetooth: hci2: command tx timeout [ 1108.211721][ T2355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.292374][ T5826] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1108.314034][ T2355] team0: Port device team_slave_0 added [ 1108.339838][ T2355] team0: Port device team_slave_1 added [ 1108.345140][ T5910] magicmouse 0003:05AC:0269.0004: hidraw0: USB HID v0.08 Device [HID 05ac:0269] on usb-dummy_hcd.2-1/input0 [ 1108.517811][ T5910] usb 3-1: USB disconnect, device number 124 [ 1108.609574][ T2355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.639411][ T2355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.678071][ T2627] loop5: detected capacity change from 0 to 512 [ 1108.710824][ T2627] EXT4-fs: Ignoring removed oldalloc option [ 1108.716833][ T2627] EXT4-fs: Ignoring removed bh option [ 1108.799469][ T2624] fido_id[2624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1108.827439][ T2355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.876904][ T2627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 1108.931860][ T2355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.952303][ T2627] System zones: 1-12 [ 1108.990112][ T2355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.001191][ T2639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12756'. [ 1109.018359][ T2627] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.12754: corrupted in-inode xattr: e_value size too large [ 1109.059281][ T2627] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1109.059622][ T2355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.069243][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1109.069270][ C0] EXT4-fs (loop5): initial error at time 1870: ext4_iget_extra_inode:5025: inode 15 [ 1109.069311][ C0] EXT4-fs (loop5): last error at time 1870: ext4_iget_extra_inode:5025: inode 15 [ 1109.122523][ T2627] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.12754: couldn't read orphan inode 15 (err -117) [ 1109.170274][ T2627] loop5: lost filesystem error report for type 5 error -117 [ 1109.193189][ T2627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.299331][ T2649] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1109.386181][ T2651] loop4: detected capacity change from 0 to 1024 [ 1109.466477][ T2651] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 1109.479426][ T5817] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1109.488486][ T2355] hsr_slave_0: entered promiscuous mode [ 1109.500305][ T2355] hsr_slave_1: entered promiscuous mode [ 1109.532957][ T2651] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1109.597705][ T2651] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.12758: Failed to acquire dquot type 0 [ 1109.652589][ T5817] usb 7-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 1109.674928][ T2651] loop4: lost filesystem error report for type 5 error -117 [ 1109.676257][ T2651] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, [ 1109.683910][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1109.683941][ C0] EXT4-fs (loop4): initial error at time 1870: ext4_acquire_dquot:7001 [ 1109.683974][ C0] EXT4-fs (loop4): last error at time 1870: ext4_acquire_dquot:7001 [ 1109.694272][ T5817] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1109.698640][ T2651] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 1109.774247][ T5817] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.786019][ T2651] EXT4-fs (loop4): 1 truncate cleaned up [ 1109.797181][ T2651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1109.811112][ T5817] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1109.864177][ T5817] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1109.881905][ T5817] usb 7-1: New USB device found, idVendor=056a, idProduct=0725, bcdDevice= 0.00 [ 1109.896302][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.926673][ T2651] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 1109.949829][ T2651] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1109.956573][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.971996][ T2651] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.12758: Failed to acquire dquot type 0 [ 1110.001864][ T5817] usb 7-1: config 0 descriptor?? [ 1110.162795][ T2669] netlink: 216 bytes leftover after parsing attributes in process `syz.0.12763'. [ 1110.167582][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.525133][ T5817] wacom 0003:056A:0725.0005: unknown main item tag 0x0 [ 1110.562215][ T5817] wacom 0003:056A:0725.0005: Unknown device_type for 'HID 056a:0725'. Ignoring. [ 1110.726665][ T5962] usb 7-1: USB disconnect, device number 13 [ 1110.886468][ T2355] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1110.934880][ T2355] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1110.991423][ T2355] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1111.033758][ T2355] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1111.408828][ T2355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.472188][ T2355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.482505][ T2682] loop5: detected capacity change from 0 to 32768 [ 1111.511640][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.518907][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.566758][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.574119][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.734951][ T5910] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1111.907589][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 1111.948810][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.968481][ T5910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.037368][ T5910] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1112.068231][ T5910] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1112.095893][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.139657][ T5910] usb 7-1: config 0 descriptor?? [ 1112.552164][ T2355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.653787][ T5910] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0006/input/input69 [ 1112.681313][ T2765] loop2: detected capacity change from 0 to 256 [ 1112.739157][ T5910] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1112.787939][ T2765] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5658fca8, utbl_chksum : 0xe619d30d) [ 1112.905183][ T5802] usb 7-1: USB disconnect, device number 14 [ 1112.938866][ T2774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12788'. [ 1113.058811][ T2772] fido_id[2772]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1113.461423][ T2789] netlink: 'syz.2.12791': attribute type 5 has an invalid length. [ 1113.516312][ T30] audit: type=1326 audit(1874.326:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2792 comm="syz.5.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278d19c629 code=0x7ffc0000 [ 1113.529418][ T2794] loop4: detected capacity change from 0 to 1024 [ 1113.624193][ T30] audit: type=1326 audit(1874.326:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2792 comm="syz.5.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278d19c629 code=0x7ffc0000 [ 1113.630925][ T2794] EXT4-fs: Ignoring removed nobh option [ 1113.712680][ T2794] EXT4-fs: inline encryption not supported [ 1113.746540][ T30] audit: type=1326 audit(1874.336:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2792 comm="syz.5.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f278d19c629 code=0x7ffc0000 [ 1113.770814][ T2801] loop2: detected capacity change from 0 to 8 [ 1113.858788][ T2801] SQUASHFS error: Unable to read directory block [249:c] [ 1113.880392][ T30] audit: type=1326 audit(1874.336:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2792 comm="syz.5.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278d19c629 code=0x7ffc0000 [ 1113.919421][ T2355] veth0_vlan: entered promiscuous mode [ 1113.938011][ T2794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1113.993602][ T2355] veth1_vlan: entered promiscuous mode [ 1114.029088][ T30] audit: type=1326 audit(1874.336:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2792 comm="syz.5.12793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278d19c629 code=0x7ffc0000 [ 1114.142120][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.227069][ T2355] veth0_macvtap: entered promiscuous mode [ 1114.287559][ T2355] veth1_macvtap: entered promiscuous mode [ 1114.330104][ T2355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.404166][ T2355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.486225][T15768] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.545467][T15768] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.606270][T15768] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.649542][T15768] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.057957][T15746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.127930][T15746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.318735][T15768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.373384][T15768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.401521][ T5802] IPVS: starting estimator thread 0... [ 1115.518975][ T2878] IPVS: using max 31 ests per chain, 74400 per kthread [ 1115.525799][ T2880] tc_dump_action: action bad kind [ 1115.804373][ T2891] syz.6.12821 (2891): /proc/2890/oom_adj is deprecated, please use /proc/2890/oom_score_adj instead. [ 1115.978999][ T5817] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1116.192476][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1116.238870][ T5817] usb 9-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 1116.282699][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.319585][ T5817] usb 9-1: config 0 descriptor?? [ 1116.397629][ T2875] loop5: detected capacity change from 0 to 32768 [ 1116.458126][ T2875] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1116.544058][ T2919] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 1116.641864][ T2875] XFS (loop5): Ending clean mount [ 1116.686352][ T2875] XFS (loop5): Quotacheck needed: Please wait. [ 1116.780577][ T2875] XFS (loop5): Quotacheck: Done. [ 1116.835738][ T5817] wacom 0003:056A:0018.0007: unbalanced collection at end of report description [ 1116.885280][ T5817] wacom 0003:056A:0018.0007: parse failed [ 1116.906479][ T5817] wacom 0003:056A:0018.0007: probe with driver wacom failed with error -22 [ 1117.023714][ T5833] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1117.050704][T26930] usb 9-1: USB disconnect, device number 2 [ 1117.253606][ T2934] ALSA: mixer_oss: invalid OSS volume '' [ 1117.517914][T26930] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1117.725531][T26930] usb 5-1: Using ep0 maxpacket: 16 [ 1117.755159][T26930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.787621][T26930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1117.814110][T26930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1117.833651][T26930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.881335][T26930] usb 5-1: Product: syz [ 1117.896482][T26930] usb 5-1: Manufacturer: syz [ 1117.901129][T26930] usb 5-1: SerialNumber: syz [ 1118.170900][T26930] usb 5-1: 0:2 : does not exist [ 1118.179121][ T2931] loop2: detected capacity change from 0 to 32768 [ 1118.195300][T26930] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1118.260842][ T2931] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1118.296759][ T2963] loop8: detected capacity change from 0 to 4096 [ 1118.455038][ T2963] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.494747][ T2981] vlan2: entered allmulticast mode [ 1118.500030][T26930] usb 5-1: USB disconnect, device number 120 [ 1118.508376][ T2981] team0: entered allmulticast mode [ 1118.513022][ T2931] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 1118.515209][ T2981] team_slave_0: entered allmulticast mode [ 1118.530690][ T2981] team_slave_1: entered allmulticast mode [ 1118.537362][ T2931] XFS (loop2): Unmount and run xfs_repair [ 1118.546825][ T2931] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1118.555007][ T2931] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 1118.599989][ T2931] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 1118.632752][ T2931] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1118.658754][ T2931] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 1118.679684][ T2931] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1118.692173][ T2355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.722158][ T6375] udevd[6375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.736464][ T2931] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 1118.781360][ T2931] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1118.838611][ T2931] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1118.876375][ T2931] XFS (loop2): metadata I/O error in "xfs_read_agf+0x289/0x5f0" at daddr 0x1 len 1 error 74 [ 1118.966125][ T2931] loop2: lost filesystem error report for type 5 error -117 [ 1118.966162][ T2931] XFS (loop2): Error -117 reserving per-AG metadata reserve pool. [ 1119.031997][ T2931] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1f0/0x240 (fs/xfs/xfs_fsops.c:572). Shutting down filesystem. [ 1119.058268][ T2989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12858'. [ 1119.077316][ T2931] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 1119.102011][ T2931] loop2: lost filesystem error report for type 5 error -108 [ 1119.102052][ T2931] XFS (loop2): Ending clean mount [ 1119.107459][ T2991] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 1119.114143][ T2931] XFS (loop2): Failed to initialize disk quotas, err -5. [ 1119.444341][ T5815] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1120.357317][ T3038] loop2: detected capacity change from 0 to 256 [ 1120.624832][ T3038] FAT-fs (loop2): Directory bread(block 64) failed [ 1120.654106][ T3038] FAT-fs (loop2): Directory bread(block 65) failed [ 1120.697569][ T3038] FAT-fs (loop2): Directory bread(block 66) failed [ 1120.733555][ T3038] FAT-fs (loop2): Directory bread(block 67) failed [ 1120.778315][ T3038] FAT-fs (loop2): Directory bread(block 68) failed [ 1120.795809][ T3038] FAT-fs (loop2): Directory bread(block 69) failed [ 1120.817545][ T3038] FAT-fs (loop2): Directory bread(block 70) failed [ 1120.840359][ T3038] FAT-fs (loop2): Directory bread(block 71) failed [ 1120.850783][ T3038] FAT-fs (loop2): Directory bread(block 72) failed [ 1120.894057][ T3038] FAT-fs (loop2): Directory bread(block 73) failed [ 1121.117368][ T3065] loop6: detected capacity change from 0 to 128 [ 1121.169965][ T3065] EXT4-fs: Ignoring removed nobh option [ 1121.174565][ T3066] ipvlan2: entered promiscuous mode [ 1121.327040][ T3065] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1121.502110][ T3075] loop8: detected capacity change from 0 to 256 [ 1121.551803][ T3075] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1121.644695][T24902] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1121.850960][ T3087] comedi comedi3: pcl816: I/O port conflict (0x8001,16) [ 1121.869854][ T790] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1121.923045][ T3063] loop4: detected capacity change from 0 to 32768 [ 1121.984137][ T3063] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.12890 (3063) [ 1121.999949][ T3090] netlink: 64 bytes leftover after parsing attributes in process `syz.8.12902'. [ 1122.060584][ T3063] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1122.092912][ T790] usb 3-1: Using ep0 maxpacket: 16 [ 1122.115009][ T790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.135706][ T3063] BTRFS info (device loop4): using blake2b checksum algorithm [ 1122.152460][T29482] Bluetooth: hci2: command 0x0405 tx timeout [ 1122.166893][ T790] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1122.201197][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.308075][ T790] usb 3-1: config 0 descriptor?? [ 1122.423492][ T3063] BTRFS info (device loop4): enabling ssd optimizations [ 1122.456557][ T3063] BTRFS info (device loop4): turning on async discard [ 1122.483026][ T3063] BTRFS info (device loop4): enabling free space tree [ 1122.513013][ T3063] BTRFS info (device loop4): use lzo compression, level 1 [ 1122.532750][ T3063] BTRFS info (device loop4): max_inline set to 0 [ 1122.736721][ T30] audit: type=1800 audit(1882.952:454): pid=3063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12890" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=263 res=0 errno=0 [ 1122.754777][ T3063] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4) [ 1122.819405][ T790] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x3 [ 1122.870955][ T790] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 1122.907202][ T3129] IPVS: stopping backup sync thread 2649 ... [ 1123.021830][ T5911] usb 3-1: USB disconnect, device number 125 [ 1123.200283][ T3130] fido_id[3130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1123.222855][ T5826] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1123.533295][ T3140] sp0: Synchronizing with TNC [ 1123.709065][ T3122] loop6: detected capacity change from 0 to 32768 [ 1123.765151][ T3122] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1124.009183][ T3122] XFS (loop6): Ending clean mount [ 1124.031078][ T3122] XFS (loop6): Quotacheck needed: Please wait. [ 1124.219844][ T3122] XFS (loop6): Quotacheck: Done. [ 1124.247985][ T3161] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:4096x16 (0x30314742, 3, 0, 0, 0) [ 1124.387536][T24902] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1124.530402][T26930] IPVS: starting estimator thread 0... [ 1124.641494][ T3170] IPVS: using max 26 ests per chain, 62400 per kthread [ 1124.722575][T26930] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1124.726115][ T3179] loop5: detected capacity change from 0 to 256 [ 1124.733303][ T30] audit: type=1326 audit(1884.813:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3174 comm="syz.6.12927" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f081a19c629 code=0x0 [ 1124.760119][ T3179] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1124.839056][ T3184] netlink: 296 bytes leftover after parsing attributes in process `syz.0.12931'. [ 1124.867771][ T3179] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1124.990175][T26930] usb 9-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1125.022763][T26930] usb 9-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1125.068770][T26930] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1125.090511][ T3188] netlink: 'syz.0.12934': attribute type 5 has an invalid length. [ 1125.097496][ T3186] loop4: detected capacity change from 0 to 256 [ 1125.101408][T26930] usb 9-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1125.142570][ T3186] exfat: Deprecated parameter 'utf8' [ 1125.150974][T26930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.185822][ T3186] exfat: Deprecated parameter 'namecase' [ 1125.219578][T26930] usb 9-1: config 0 descriptor?? [ 1125.246578][ T3186] exfat: Deprecated parameter 'namecase' [ 1125.261858][ T3186] exfat: Deprecated parameter 'utf8' [ 1125.267731][ T3169] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1125.337723][ T3186] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x151dac50) [ 1125.362859][ T3186] exFAT-fs (loop4): invalid boot region [ 1125.387360][ T3186] exFAT-fs (loop4): failed to recognize exfat type [ 1125.486449][ T3154] loop2: detected capacity change from 0 to 32768 [ 1125.535647][ T3154] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1125.667816][ T3154] XFS (loop2): Ending clean mount [ 1125.715482][ T3205] loop5: detected capacity change from 0 to 64 [ 1125.742410][T26930] dragonrise 0003:0079:0006.0009: ignoring exceeding usage max [ 1125.751385][ T3154] XFS (loop2): Quotacheck needed: Please wait. [ 1125.785585][T26930] dragonrise 0003:0079:0006.0009: hidraw0: USB HID v0.04 Device [HID 0079:0006] on usb-dummy_hcd.8-1/input0 [ 1125.862022][T26930] dragonrise 0003:0079:0006.0009: no inputs found [ 1125.869502][ T3154] XFS (loop2): Quotacheck: Done. [ 1125.903770][T26930] dragonrise 0003:0079:0006.0009: force feedback init failed [ 1126.002019][T26930] usb 9-1: USB disconnect, device number 3 [ 1126.087023][ T5815] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1126.285733][ T3212] fido_id[3212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1126.477510][T26930] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1126.700333][T26930] usb 7-1: Using ep0 maxpacket: 32 [ 1126.735065][T26930] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1126.775627][T26930] usb 7-1: config 0 has no interface number 0 [ 1126.801867][T26930] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1126.837716][T26930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.866152][T26930] usb 7-1: Product: syz [ 1126.881514][T26930] usb 7-1: Manufacturer: syz [ 1126.903268][T26930] usb 7-1: SerialNumber: syz [ 1126.933679][T26930] usb 7-1: config 0 descriptor?? [ 1126.976614][ T3233] loop5: detected capacity change from 0 to 4096 [ 1126.989146][T24184] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1127.026570][ T3233] NILFS (loop5): mounting unchecked fs [ 1127.043124][ T3233] NILFS (loop5): invalid segment: Sequence number mismatch [ 1127.050513][ T3233] NILFS (loop5): trying rollback from an earlier position [ 1127.134462][ T3233] NILFS (loop5): recovery complete [ 1127.164759][ T3243] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1127.187026][T24184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.226033][T24184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.245229][T24184] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1127.254304][T24184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.301301][ T5911] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1127.334938][T24184] usb 5-1: config 0 descriptor?? [ 1127.502726][ T5911] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.541006][ T5911] usb 9-1: config 0 has no interfaces? [ 1127.555382][ T5911] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1127.586936][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.633046][T26930] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1127.645873][ T5911] usb 9-1: config 0 descriptor?? [ 1127.675338][T26930] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1127.718128][T26930] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1127.751288][T26930] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1127.785528][T24184] arvo 0003:1E7D:30D4.000A: item fetching failed at offset 5/7 [ 1127.797614][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1127.804152][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.819748][T26930] usb 7-1: USB disconnect, device number 15 [ 1127.823184][T24184] arvo 0003:1E7D:30D4.000A: parse failed [ 1127.885413][T24184] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -22 [ 1127.898746][ T24] usb 9-1: USB disconnect, device number 4 [ 1128.019073][T24184] usb 5-1: USB disconnect, device number 121 [ 1128.090337][ T3238] loop2: detected capacity change from 0 to 32768 [ 1128.119883][ T3238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus (7:2) scanned by syz.2.12945 (3238) [ 1128.206224][ T3238] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1128.223264][ T6375] udevd[6375]: incorrect btrfs checksum on /dev/loop2 [ 1128.230242][ T3238] BTRFS info (device loop2): using sha256 checksum algorithm [ 1128.263392][ T3238] BTRFS error (device loop2): superblock checksum mismatch [ 1128.274505][ T3238] BTRFS error (device loop2): open_ctree failed: -22 [ 1128.402361][ T3260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12957'. [ 1128.473858][ T3260] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1128.518762][ T3260] team0: Device ipvlan3 is already an upper device of the team interface [ 1128.868993][ T3276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12962'. [ 1129.076435][T26930] kernel read not supported for file /4255/attr/keycreate (pid: 26930 comm: kworker/1:1) [ 1130.456110][ T3335] netlink: 'syz.2.12985': attribute type 5 has an invalid length. [ 1131.186852][ T3361] netlink: 'syz.6.12995': attribute type 2 has an invalid length. [ 1131.356715][ T3368] loop5: detected capacity change from 0 to 512 [ 1131.428392][ T3368] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.12997: bg 0: block 104: invalid block bitmap [ 1131.478336][ T3368] loop5: lost filesystem error report for type 5 error -117 [ 1131.488838][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1131.503213][ C1] EXT4-fs (loop5): initial error at time 1891: ext4_validate_block_bitmap:432 [ 1131.512399][ C1] EXT4-fs (loop5): last error at time 1891: ext4_validate_block_bitmap:432 [ 1131.542638][ T3368] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6686: Corrupt filesystem [ 1131.551478][ T3368] loop5: lost filesystem error report for type 5 error -117 [ 1131.572758][ T3368] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.12997: invalid indirect mapped block 1 (level 1) [ 1131.653046][ T3368] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1131.653723][ T3368] EXT4-fs (loop5): 1 truncate cleaned up [ 1131.673323][ T3368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1131.688340][ T3378] loop8: detected capacity change from 0 to 1024 [ 1131.769705][ T3378] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1131.881388][ T3378] hfsplus: catalog name length corrupted [ 1131.937975][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.706843][ T3382] loop4: detected capacity change from 0 to 32768 [ 1132.779179][ T3382] JBD2: Ignoring recovery information on journal [ 1132.798924][ T3422] loop8: detected capacity change from 0 to 512 [ 1132.806653][ T3422] EXT4-fs: Ignoring removed bh option [ 1132.817556][ T3422] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1132.854370][ T3422] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e028, mo2=0002] [ 1132.975178][ T3422] System zones: 1-12 [ 1133.018204][ T3422] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1133.042031][ T3382] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1133.063279][ T3422] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.13012: invalid indirect mapped block 1023 (level 0) [ 1133.068531][ T3431] loop6: detected capacity change from 0 to 128 [ 1133.146573][ T3422] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1133.156371][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1133.172327][ C0] EXT4-fs (loop8): initial error at time 1892: ext4_free_branches:1023: inode 11 [ 1133.181600][ C0] EXT4-fs (loop8): last error at time 1892: ext4_free_branches:1023: inode 11 [ 1133.199320][ T3422] EXT4-fs (loop8): Remounting filesystem read-only [ 1133.231523][ T3422] EXT4-fs (loop8): 1 truncate cleaned up [ 1133.256005][ T3422] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1133.264259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.406690][ T5826] ocfs2: Unmounting device (7,4) on (node local) [ 1133.551640][ T2355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1134.137257][ T3457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13024'. [ 1134.733165][ T3479] loop8: detected capacity change from 0 to 512 [ 1134.803888][ T3485] ptrace attach of "./syz-executor exec"[24902] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[3485] [ 1134.856602][ T3479] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #12: comm syz.8.13034: corrupted in-inode xattr: bad e_name length [ 1134.908740][ T3479] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1134.920114][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1134.936353][ C0] EXT4-fs (loop8): initial error at time 1894: ext4_iget_extra_inode:5025: inode 12 [ 1134.945968][ C0] EXT4-fs (loop8): last error at time 1894: ext4_iget_extra_inode:5025: inode 12 [ 1134.973655][ T3479] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.13034: couldn't read orphan inode 12 (err -117) [ 1135.059354][ T3479] loop8: lost filesystem error report for type 5 error -117 [ 1135.064938][ T3479] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1135.184149][ T3497] loop6: detected capacity change from 0 to 128 [ 1135.191649][ T3495] gretap0: entered promiscuous mode [ 1135.220127][ T3495] vlan4: entered promiscuous mode [ 1135.225697][ T3499] loop2: detected capacity change from 0 to 64 [ 1135.255950][ T3497] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1135.298482][ T2355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.317553][ T3497] hpfs: filesystem error: improperly stopped [ 1135.331438][ T3497] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1135.332418][ T3499] syz.2.13043: attempt to access beyond end of device [ 1135.332418][ T3499] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1135.342420][ T3497] hpfs: You really don't want any checks? You are crazy... [ 1135.388791][ T3497] hpfs: hpfs_map_sector(): read error [ 1135.395012][ T3497] hpfs: code page support is disabled [ 1135.401468][ T3497] hpfs: hpfs_map_4sectors(): unaligned read [ 1135.407937][ T3497] hpfs: hpfs_map_4sectors(): unaligned read [ 1135.415375][ T3497] hpfs: filesystem error: unable to find root dir [ 1135.741827][ T3504] loop8: detected capacity change from 0 to 2048 [ 1135.856549][ T3504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.034040][ T3504] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.13045: bg 0: block 345: padding at end of block bitmap is not set [ 1136.094030][ T3504] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6686: Corrupt filesystem [ 1136.306430][ T2355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.631509][ T3535] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13057'. [ 1136.683688][ T3535] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13057'. [ 1136.740578][ T24] kernel read not supported for file /vga_arbiter (pid: 24 comm: kworker/1:0) [ 1136.855225][T24184] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1136.897302][ T3509] loop6: detected capacity change from 0 to 32768 [ 1136.916925][ T3509] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.13047 (3509) [ 1136.963605][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13063'. [ 1136.992520][ T3509] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1137.029901][ T3509] BTRFS info (device loop6): using sha256 checksum algorithm [ 1137.038739][T24184] usb 3-1: Using ep0 maxpacket: 32 [ 1137.081644][T24184] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1137.113877][T24184] usb 3-1: config 0 has no interface number 0 [ 1137.131235][T24184] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1137.157512][T24184] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1137.173638][T24184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.241142][T24184] usb 3-1: Product: syz [ 1137.246017][T24184] usb 3-1: Manufacturer: syz [ 1137.255598][T24184] usb 3-1: SerialNumber: syz [ 1137.263803][T24184] usb 3-1: config 0 descriptor?? [ 1137.275605][T24184] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1137.285959][T24184] em28xx 3-1:0.132: Video interface 132 found: [ 1137.323325][ T3562] loop8: detected capacity change from 0 to 1024 [ 1137.339817][ T3509] BTRFS info (device loop6): enabling ssd optimizations [ 1137.376657][ T3509] BTRFS info (device loop6): turning on async discard [ 1137.384132][ T3509] BTRFS info (device loop6): enabling free space tree [ 1137.427122][ T3562] hfsplus: bad catalog entry type [ 1137.616350][T15771] hfsplus: b-tree write err: -5, ino 25 [ 1137.622154][T15771] hfsplus: b-tree write err: -5, ino 4 [ 1137.667893][T15771] hfsplus: b-tree write err: -5, ino 2 [ 1137.694015][T24902] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1137.705946][T24184] em28xx 3-1:0.132: chip ID is em2765 [ 1138.010077][T24184] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1138.042832][T24184] em28xx 3-1:0.132: board has no eeprom [ 1138.122879][ T3582] loop8: detected capacity change from 0 to 512 [ 1138.139631][T24184] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1138.181993][ T3582] EXT4-fs: Ignoring removed oldalloc option [ 1138.188550][T24184] em28xx 3-1:0.132: analog set to bulk mode. [ 1138.221158][ T3582] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.13075: Parent and EA inode have the same ino 15 [ 1138.283155][ T3582] loop8: lost filesystem error report for type 5 error -117 [ 1138.283873][ T3582] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.13075: Parent and EA inode have the same ino 15 [ 1138.288432][ T790] em28xx 3-1:0.132: Registering V4L2 extension [ 1138.291497][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1138.316926][ C1] EXT4-fs (loop8): initial error at time 1897: ext4_xattr_inode_iget:437 [ 1138.325478][ C1] EXT4-fs (loop8): last error at time 1897: ext4_xattr_inode_iget:437 [ 1138.355739][ T3582] loop8: lost filesystem error report for type 5 error -117 [ 1138.358362][ T3582] EXT4-fs (loop8): 1 orphan inode deleted [ 1138.383389][T24184] usb 3-1: USB disconnect, device number 126 [ 1138.443661][ T3582] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1138.458870][T24184] em28xx 3-1:0.132: Disconnecting em28xx [ 1138.616120][ T3582] EXT4-fs error (device loop8): ext4_rename:3810: inode #15: comm syz.8.13075: target of rename is already freed [ 1138.890901][ T2355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.950378][ T5911] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1138.981607][ T790] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1139.000311][ T790] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1139.003810][ T3601] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1139.049844][ T790] em28xx 3-1:0.132: No AC97 audio processor [ 1139.101753][ T790] usb 3-1: Decoder not found [ 1139.106791][ T790] em28xx 3-1:0.132: failed to create media graph [ 1139.121148][ T790] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1139.188432][ T5911] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1139.195411][ T790] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1139.199528][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1139.226020][T24184] em28xx 3-1:0.132: Closing input extension [ 1139.279512][ T5911] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1139.293459][T24184] em28xx 3-1:0.132: Freeing device [ 1139.336456][ T5911] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1139.358544][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.366704][ T5911] usb 5-1: Product: syz [ 1139.405006][ T5911] usb 5-1: Manufacturer: syz [ 1139.425918][ T5911] usb 5-1: SerialNumber: syz [ 1139.455496][ T5911] usb 5-1: config 0 descriptor?? [ 1139.466677][ T3594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1139.484767][ T3594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1139.509003][ T5911] usb 5-1: ucan: probing device on interface #0 [ 1139.968247][ T5911] usb 5-1: ucan: failed to retrieve device info [ 1139.974650][ T5911] usb 5-1: ucan: probe failed; try to update the device firmware [ 1140.035188][ T5911] usb 5-1: USB disconnect, device number 122 [ 1140.041579][ T30] audit: type=1326 audit(1899.145:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3627 comm="syz.2.13095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ec099c629 code=0x0 [ 1140.139195][ T3596] loop5: detected capacity change from 0 to 32768 [ 1140.175702][ T30] audit: type=1800 audit(1899.276:457): pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13080" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 1140.775319][ T3653] netlink: 116 bytes leftover after parsing attributes in process `syz.0.13106'. [ 1140.801279][ T3655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13105'. [ 1141.034599][T24184] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1141.108848][ T3663] Bluetooth: MGMT ver 1.23 [ 1141.121332][ T3666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13111'. [ 1141.157530][ T3667] loop8: detected capacity change from 0 to 1024 [ 1141.171549][ T3666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13111'. [ 1141.223774][T24184] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1141.260895][T24184] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1141.293321][T24184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.324198][T24184] usb 6-1: config 0 descriptor?? [ 1141.340813][T15746] hfsplus: b-tree write err: -5, ino 25 [ 1141.367193][T15746] hfsplus: b-tree write err: -5, ino 4 [ 1141.372994][T15746] hfsplus: b-tree write err: -5, ino 2 [ 1141.417109][T15746] hfsplus: b-tree write err: -5, ino 17 [ 1141.521485][ T3675] loop2: detected capacity change from 0 to 128 [ 1141.614123][ T3679] netlink: 256 bytes leftover after parsing attributes in process `syz.8.13116'. [ 1141.635000][ T3679] netlink: 56 bytes leftover after parsing attributes in process `syz.8.13116'. [ 1141.649172][ T3675] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1141.715182][ T3686] netlink: 'syz.6.13121': attribute type 1 has an invalid length. [ 1141.723484][ T3686] netlink: 236 bytes leftover after parsing attributes in process `syz.6.13121'. [ 1141.794761][T24184] megaworld 0003:07B5:0312.000B: unbalanced collection at end of report description [ 1141.823758][T24184] megaworld 0003:07B5:0312.000B: parse failed [ 1141.833031][T24184] megaworld 0003:07B5:0312.000B: probe with driver megaworld failed with error -22 [ 1141.950383][ T5815] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1142.030295][ T24] usb 6-1: USB disconnect, device number 105 [ 1142.112494][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13125'. [ 1142.200579][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13125'. [ 1142.310610][ T3700] loop8: detected capacity change from 0 to 2048 [ 1142.345204][ T3700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1142.956294][ T3725] vivid-000: disconnect [ 1142.972282][ T3721] vivid-000: reconnect [ 1143.320229][ T3739] loop8: detected capacity change from 0 to 128 [ 1143.375812][ T30] audit: type=1326 audit(1902.261:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3741 comm="syz.6.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1143.442249][ T3744] loop5: detected capacity change from 0 to 128 [ 1143.451748][ T30] audit: type=1326 audit(1902.261:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3741 comm="syz.6.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1143.495703][ T3744] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1143.513870][ T30] audit: type=1326 audit(1902.307:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3741 comm="syz.6.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1143.548628][ T3744] hpfs: filesystem error: improperly stopped [ 1143.569454][ T3744] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1143.577961][ T30] audit: type=1326 audit(1902.307:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3741 comm="syz.6.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1143.607672][ T3749] loop8: detected capacity change from 0 to 64 [ 1143.618555][ T3744] hpfs: You really don't want any checks? You are crazy... [ 1143.618686][ T30] audit: type=1326 audit(1902.307:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3741 comm="syz.6.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1143.634070][ T3744] hpfs: Code page index out of array [ 1143.654701][ T3744] hpfs: code page support is disabled [ 1143.660272][ T3744] hpfs: hpfs_map_4sectors(): unaligned read [ 1143.728512][ T30] audit: type=1326 audit(1902.307:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3741 comm="syz.6.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1143.751597][ T3744] hpfs: hpfs_map_4sectors(): unaligned read [ 1143.751619][ T3744] hpfs: filesystem error: unable to find root dir [ 1143.821538][ T30] audit: type=1326 audit(1902.307:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3741 comm="syz.6.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1143.859261][ T3744] hpfs: hpfs_map_4sectors(): unaligned read [ 1143.877164][ T30] audit: type=1326 audit(1902.307:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3741 comm="syz.6.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1144.112082][ T3761] loop8: detected capacity change from 0 to 64 [ 1144.355376][ T3763] loop5: detected capacity change from 0 to 2048 [ 1144.413426][ T3766] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1144.504042][ T3750] loop6: detected capacity change from 0 to 32768 [ 1144.591009][ T3750] find_entry called with index = 0 [ 1144.610729][ T3750] find_entry called with index = 0 [ 1144.643565][ T3767] find_entry called with index = 0 [ 1144.668220][ T3767] find_entry called with index = 0 [ 1144.963007][ T3777] netlink: 'syz.5.13165': attribute type 5 has an invalid length. [ 1145.514785][ T3791] loop6: detected capacity change from 0 to 64 [ 1145.577039][ T3792] loop4: detected capacity change from 0 to 128 [ 1145.666670][ T3792] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1145.666774][ T3791] syz.6.13164: attempt to access beyond end of device [ 1145.666774][ T3791] loop6: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1145.820388][ T5826] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1146.015509][ T3801] loop6: detected capacity change from 0 to 256 [ 1146.071253][ T3801] exfat: Deprecated parameter 'utf8' [ 1146.077378][ T3801] exfat: Deprecated parameter 'utf8' [ 1146.120619][ T3801] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1146.272389][ T790] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1146.467419][ T790] usb 6-1: Using ep0 maxpacket: 8 [ 1146.500554][ T790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1146.534409][ T790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1146.578808][ T790] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1146.598832][ T790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1146.646450][ T790] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1146.698585][ T790] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1146.741136][ T790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.766825][ T790] usb 6-1: config 0 descriptor?? [ 1146.805731][ T3804] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1146.934072][ T3834] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1146.981352][ T3834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1147.314249][T18817] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 1147.340411][ T790] usb 6-1: USB disconnect, device number 106 [ 1147.367750][ T3845] EXT4-fs (loop2): 1 truncate cleaned up [ 1147.412545][ T3845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.460152][ T30] audit: type=1800 audit(1906.096:466): pid=3845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13197" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1147.628563][ T13] [ 1147.631030][ T13] ====================================================== [ 1147.638495][ T13] WARNING: possible circular locking dependency detected [ 1147.645700][ T13] syzkaller #0 Tainted: G L [ 1147.651727][ T13] ------------------------------------------------------ [ 1147.658893][ T13] kworker/u8:1/13 is trying to acquire lock: [ 1147.665735][ T13] ffff88803649e0b8 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0 [ 1147.675620][ T13] [ 1147.675620][ T13] but task is already holding lock: [ 1147.683774][ T13] ffff88807a954b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1147.694025][ T13] [ 1147.694025][ T13] which lock already depends on the new lock. [ 1147.694025][ T13] [ 1147.704510][ T13] [ 1147.704510][ T13] the existing dependency chain (in reverse order) is: [ 1147.713520][ T13] [ 1147.713520][ T13] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1147.722086][ T13] percpu_down_read_internal+0x48/0x1c0 [ 1147.728166][ T13] ext4_writepages+0x205/0x3b0 [ 1147.733454][ T13] do_writepages+0x32e/0x550 [ 1147.738572][ T13] __writeback_single_inode+0x133/0x11a0 [ 1147.744816][ T13] writeback_single_inode+0x4ac/0xdc0 [ 1147.750786][ T13] write_inode_now+0x1c2/0x290 [ 1147.756066][ T13] iput+0x8c1/0xe80 [ 1147.760398][ T13] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 1147.766293][ T13] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 1147.772716][ T13] __ext4_expand_extra_isize+0x30d/0x400 [ 1147.778999][ T13] __ext4_mark_inode_dirty+0x45c/0x730 [ 1147.785166][ T13] ext4_evict_inode+0x7a1/0xeb0 [ 1147.790640][ T13] evict+0x61e/0xb10 [ 1147.795321][ T13] ext4_orphan_cleanup+0xc38/0x1470 [ 1147.801047][ T13] ext4_fill_super+0x59ff/0x6320 [ 1147.806511][ T13] get_tree_bdev_flags+0x431/0x4f0 [ 1147.812156][ T13] vfs_get_tree+0x92/0x2a0 [ 1147.817180][ T13] do_new_mount+0x341/0xd30 [ 1147.822292][ T13] __se_sys_mount+0x31d/0x420 [ 1147.827498][ T13] do_syscall_64+0x14d/0xf80 [ 1147.832704][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.839320][ T13] [ 1147.839320][ T13] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 1147.846916][ T13] __lock_acquire+0x15a5/0x2cf0 [ 1147.852398][ T13] lock_acquire+0xf0/0x2e0 [ 1147.857534][ T13] down_write+0x96/0x200 [ 1147.862476][ T13] ext4_destroy_inline_data+0x28/0xe0 [ 1147.868379][ T13] ext4_do_writepages+0x51e/0x46e0 [ 1147.874013][ T13] ext4_writepages+0x241/0x3b0 [ 1147.879419][ T13] do_writepages+0x32e/0x550 [ 1147.884538][ T13] __writeback_single_inode+0x133/0x11a0 [ 1147.890819][ T13] writeback_sb_inodes+0x944/0x19a0 [ 1147.896546][ T13] wb_writeback+0x456/0xb70 [ 1147.901571][ T13] wb_workfn+0x414/0xf50 [ 1147.906367][ T13] process_scheduled_works+0xb02/0x1830 [ 1147.912450][ T13] worker_thread+0xa50/0xfc0 [ 1147.917575][ T13] kthread+0x388/0x470 [ 1147.922162][ T13] ret_from_fork+0x51e/0xb90 [ 1147.927298][ T13] ret_from_fork_asm+0x1a/0x30 [ 1147.932678][ T13] [ 1147.932678][ T13] other info that might help us debug this: [ 1147.932678][ T13] [ 1147.942905][ T13] Possible unsafe locking scenario: [ 1147.942905][ T13] [ 1147.950442][ T13] CPU0 CPU1 [ 1147.955991][ T13] ---- ---- [ 1147.961436][ T13] rlock(&sbi->s_writepages_rwsem); [ 1147.966828][ T13] lock(&ei->xattr_sem); [ 1147.973721][ T13] lock(&sbi->s_writepages_rwsem); [ 1147.981537][ T13] lock(&ei->xattr_sem); [ 1147.986141][ T13] [ 1147.986141][ T13] *** DEADLOCK *** [ 1147.986141][ T13] [ 1147.994663][ T13] 3 locks held by kworker/u8:1/13: [ 1147.999769][ T13] #0: ffff88801f2de148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1148.011040][ T13] #1: ffffc90000127c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1148.023786][ T13] #2: ffff88807a954b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1148.034298][ T13] [ 1148.034298][ T13] stack backtrace: [ 1148.040455][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1148.040486][ T13] Tainted: [L]=SOFTLOCKUP [ 1148.040495][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1148.040512][ T13] Workqueue: writeback wb_workfn (flush-7:2) [ 1148.040547][ T13] Call Trace: [ 1148.040560][ T13] [ 1148.040572][ T13] dump_stack_lvl+0xe8/0x150 [ 1148.040606][ T13] print_circular_bug+0x2e1/0x300 [ 1148.040643][ T13] check_noncircular+0x12e/0x150 [ 1148.040680][ T13] __lock_acquire+0x15a5/0x2cf0 [ 1148.040712][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.040740][ T13] ? kasan_save_track+0x4f/0x80 [ 1148.040762][ T13] ? kasan_save_track+0x3e/0x80 [ 1148.040782][ T13] ? kasan_save_free_info+0x46/0x50 [ 1148.040811][ T13] ? __kasan_slab_free+0x5c/0x80 [ 1148.040832][ T13] ? kfree+0x1c1/0x630 [ 1148.040863][ T13] ? ieee80211_inform_bss+0xc75/0x1160 [ 1148.040889][ T13] ? cfg80211_inform_single_bss_data+0xd08/0x1b70 [ 1148.040913][ T13] ? cfg80211_inform_bss_data+0x266/0x3c40 [ 1148.040934][ T13] ? cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 1148.040957][ T13] ? ieee80211_bss_info_update+0x794/0xa40 [ 1148.040980][ T13] ? ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cd0 [ 1148.041005][ T13] ? ieee80211_iface_work+0x84e/0x1340 [ 1148.041031][ T13] ? cfg80211_wiphy_work+0x2ab/0x4a0 [ 1148.041058][ T13] ? process_scheduled_works+0xb02/0x1830 [ 1148.041086][ T13] ? worker_thread+0xa50/0xfc0 [ 1148.041117][ T13] lock_acquire+0xf0/0x2e0 [ 1148.041143][ T13] ? ext4_destroy_inline_data+0x28/0xe0 [ 1148.041178][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041207][ T13] down_write+0x96/0x200 [ 1148.041231][ T13] ? ext4_destroy_inline_data+0x28/0xe0 [ 1148.041266][ T13] ? __pfx_down_write+0x10/0x10 [ 1148.041289][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041318][ T13] ext4_destroy_inline_data+0x28/0xe0 [ 1148.041351][ T13] ext4_do_writepages+0x51e/0x46e0 [ 1148.041372][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041399][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041424][ T13] ? rt6_score_route+0x165/0x380 [ 1148.041449][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041474][ T13] ? find_match+0x9a9/0xb40 [ 1148.041512][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041538][ T13] ? __find_rr_leaf+0x5f0/0x760 [ 1148.041577][ T13] ? __pfx___find_rr_leaf+0x10/0x10 [ 1148.041611][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041636][ T13] ? look_up_lock_class+0x57/0x110 [ 1148.041674][ T13] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1148.041697][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041724][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 1148.041756][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041787][ T13] ? unwind_next_frame+0xa5/0x23c0 [ 1148.041825][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041855][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041884][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.041913][ T13] ext4_writepages+0x241/0x3b0 [ 1148.041943][ T13] ? __pfx_ext4_writepages+0x10/0x10 [ 1148.041977][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.042007][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.042032][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 1148.042055][ T13] ? __pfx_ext4_writepages+0x10/0x10 [ 1148.042084][ T13] do_writepages+0x32e/0x550 [ 1148.042118][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.042145][ T13] ? reacquire_held_locks+0x104/0x190 [ 1148.042177][ T13] ? writeback_sb_inodes+0x43d/0x19a0 [ 1148.042208][ T13] __writeback_single_inode+0x133/0x11a0 [ 1148.042247][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 1148.042271][ T13] writeback_sb_inodes+0x944/0x19a0 [ 1148.042308][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 1148.042345][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1148.042372][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 1148.042414][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.042441][ T13] ? rcu_is_watching+0x15/0xb0 [ 1148.042472][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.042503][ T13] wb_writeback+0x456/0xb70 [ 1148.042532][ T13] ? queue_io+0x221/0x4a0 [ 1148.042562][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 1148.042588][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 1148.042618][ T13] wb_workfn+0x414/0xf50 [ 1148.042641][ T13] ? look_up_lock_class+0x57/0x110 [ 1148.042682][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 1148.042705][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.042732][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 1148.042755][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1148.042777][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.042806][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.042833][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.042859][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.042886][ T13] ? process_scheduled_works+0xa25/0x1830 [ 1148.042913][ T13] ? process_scheduled_works+0xa25/0x1830 [ 1148.042942][ T13] process_scheduled_works+0xb02/0x1830 [ 1148.042984][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 1148.043017][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.043043][ T13] ? assign_work+0x3d5/0x5e0 [ 1148.043072][ T13] worker_thread+0xa50/0xfc0 [ 1148.043109][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.043139][ T13] kthread+0x388/0x470 [ 1148.043161][ T13] ? __pfx_worker_thread+0x10/0x10 [ 1148.043188][ T13] ? __pfx_kthread+0x10/0x10 [ 1148.043209][ T13] ret_from_fork+0x51e/0xb90 [ 1148.043245][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 1148.043272][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1148.043297][ T13] ? __switch_to+0xc7d/0x1450 [ 1148.043323][ T13] ? __pfx_kthread+0x10/0x10 [ 1148.043344][ T13] ret_from_fork_asm+0x1a/0x30 [ 1148.043385][ T13] [ 1148.059949][ T30] audit: type=1326 audit(1906.657:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3854 comm="syz.6.13201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1148.130474][ T13] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 465: padding at end of block bitmap is not set [ 1148.144579][ T30] audit: type=1326 audit(1906.657:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3854 comm="syz.6.13201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1148.187320][ T13] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1148.187357][ T13] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1148.187357][ T13] [ 1148.187374][ T13] EXT4-fs (loop2): Total free blocks count 0 [ 1148.187392][ T13] EXT4-fs (loop2): Free/Dirty block details [ 1148.187407][ T13] EXT4-fs (loop2): free_blocks=0 [ 1148.187424][ T13] EXT4-fs (loop2): dirty_blocks=4 [ 1148.187440][ T13] EXT4-fs (loop2): Block reservation details [ 1148.187456][ T13] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 1148.194685][ T30] audit: type=1326 audit(1906.742:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3854 comm="syz.6.13201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1148.219820][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.258531][ T30] audit: type=1326 audit(1906.742:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3854 comm="syz.6.13201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081a19c629 code=0x7ffc0000 [ 1148.777812][ T30] audit: type=1326 audit(1906.742:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3854 comm="syz.6.13201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081a19c629 code=0x7ffc0000