last executing test programs: 2m6.694277925s ago: executing program 2 (id=161): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x8081, &(0x7f0000000940)={[{}, {@type={'type', 0x3d, "0b4fb860"}}, {@force}, {@uid}, {@nobarrier}, {@force}, {@nls={'nls', 0x3d, 'iso8859-6'}}, {@force}, {@type={'type', 0x3d, "928fff1b"}}]}, 0x3d, 0x6e8, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2m5.833947121s ago: executing program 2 (id=171): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) write(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 2m5.401991839s ago: executing program 2 (id=177): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x201, 0x0, 0x0, 0x42, 0x5c}) 2m5.131986309s ago: executing program 2 (id=181): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f00000001c0)={[{@nogrpid}, {@nogrpid}, {@test_dummy_encryption}, {@debug}, {@nobarrier}, {@data_journal}]}, 0x1, 0x440, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10080, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m4.162414562s ago: executing program 2 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x48, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x48}}, 0x80) 2m2.32579934s ago: executing program 2 (id=211): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) 2m1.57686255s ago: executing program 32 (id=211): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0x90) 5.613664703s ago: executing program 6 (id=1380): unshare(0x2040400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140), 0x0}, 0x20) 5.221338739s ago: executing program 6 (id=1385): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) 4.989962016s ago: executing program 4 (id=1389): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0x21, 0xa, {0xa, 0x2, "4d973d897cce830b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.961820059s ago: executing program 6 (id=1390): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 4.57973319s ago: executing program 6 (id=1393): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xe931, 0x40000004, 0x0) 3.54933767s ago: executing program 3 (id=1403): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x40088d4) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) 3.505067708s ago: executing program 6 (id=1405): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x18, &(0x7f0000000180)={0x60, 0x11, 0x8, {0x8, 0xc, "2322a0483a36"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.169042928s ago: executing program 3 (id=1408): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000300)={[{@discard_size={'discard', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}]}, 0x1, 0x6255, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000180)=@random={'os2.', '@\x00'}, 0x0, 0x0) 2.598428623s ago: executing program 5 (id=1414): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) 2.340968663s ago: executing program 5 (id=1416): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 2.28179635s ago: executing program 0 (id=1417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x403}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.123692669s ago: executing program 5 (id=1418): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xe931, 0x40000004, 0x0) 2.08201962s ago: executing program 0 (id=1419): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 1.729551436s ago: executing program 4 (id=1421): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)=0x3) 1.621574031s ago: executing program 3 (id=1422): r0 = open(&(0x7f0000000300)='./file2\x00', 0x101042, 0xa3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r0, 0x0) syz_io_uring_setup(0xa6a, &(0x7f00000007c0)={0x0, 0x9bc1, 0x8000, 0x400}, &(0x7f0000001340), 0x0) 1.523272069s ago: executing program 1 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x0, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r0, 0x0, &(0x7f0000000000)=""/82}, 0x20) 1.502152524s ago: executing program 0 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x80, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.437951893s ago: executing program 4 (id=1425): rt_sigaction(0x1, &(0x7f0000000080)={0x0, 0x88000000, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f00000002c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='stat\x00') lseek(r0, 0x80000000457, 0x0) 1.354856726s ago: executing program 3 (id=1426): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) iopl(0x0) 1.225634782s ago: executing program 1 (id=1427): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 1.221073959s ago: executing program 4 (id=1428): unshare(0xa060400) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x1302}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) 1.069097738s ago: executing program 5 (id=1429): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.025875215s ago: executing program 3 (id=1430): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) 986.55488ms ago: executing program 0 (id=1431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 916.340834ms ago: executing program 1 (id=1432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x44}}, 0x0) 866.405881ms ago: executing program 4 (id=1433): syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x7800}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) 807.710019ms ago: executing program 5 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 677.815401ms ago: executing program 1 (id=1435): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1400"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x244b02) 541.667314ms ago: executing program 5 (id=1436): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) 473.872622ms ago: executing program 0 (id=1437): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) 365.690169ms ago: executing program 1 (id=1438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xb0b, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2004c080) 206.654649ms ago: executing program 6 (id=1439): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 142.420339ms ago: executing program 4 (id=1440): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b282f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4de517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1bdb58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000041dcc4cabfc4a21604f0b80da4ec5500000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae6e5c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace201020875c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2f95b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f65918192fb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435477faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b8085b0ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e07f9581b40470a7c2fa89cc3ef72a19760b89ded2e546f4966b51c2985101f2248f60ad8119e4db4ade09ebd23fdb750ffccba20bc0e0f52c3316767bb9f67f7e714df5e462bcfc35f3a79147f62f9227441cb3ffb35f4e4c69b04b1399efbeb4b682d6facea9fe1c456a1fb9173833107a38991abac8b0e616f11a2c3e265c484fbc6522e9894dc3b5989b7d585c56778c77c6595b7482dfa90bb818ebd3b0b352d3f48ab947a1240842d592fd9c2f13df205e8974919162421548357a8823bd322e6562fa3e7fb7c56ee00e246a98710b9a710103b3df69655b38dcc196156a16fcc14d8ddb4acf3506adc95c742919b83fd57c8b52956e93104cddd1226ca85a29542b9ea606c72d5339a7d30f23ffcd665b85e4c90d526b33ed854543c2a1d189cd6f319644146c5fe91639d50f2083d46fd82e41bc7d528f18be618904d683726e3eee93388cc78d0df624361bb80afc96b823971fcbbb859d4c2de31f03f884ea774e4abe011389557b2429c85cf795e0a82c94ffc11616d7c8b6939eed3f0e8df5dcc75984430b2a497d78824e539e8f7944b459ae45e7ce803495686984aa91745b8cfb1f80c07c194c4a4327e02cea5fd2ef6041cf053ee5f9829410d150"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffdab, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd4c6ce6b18987f7c57ee005000000000002", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.808444ms ago: executing program 1 (id=1441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc, 0x20}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 1.625786ms ago: executing program 3 (id=1442): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000053000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 0s ago: executing program 0 (id=1443): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) kernel console output (not intermixed with test programs): io) comm="syz.5.530" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 147.376120][ T7451] NILFS (loop5): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 147.420370][ T7451] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16) [ 147.448937][ T7451] Remounting filesystem read-only [ 147.535432][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 147.584203][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 147.611546][ T7458] netlink: 'syz.1.533': attribute type 11 has an invalid length. [ 147.623648][ T5861] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 147.698517][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 147.747994][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 147.961621][ T7465] hpfs: Bad magic ... probably not HPFS [ 147.987783][ T7447] loop4: detected capacity change from 0 to 32768 [ 148.003368][ T7449] loop3: detected capacity change from 0 to 32768 [ 148.037685][ T7449] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.529 (7449) [ 148.075160][ T7463] loop5: detected capacity change from 0 to 4096 [ 148.101316][ T7447] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.203127][ T7449] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.244460][ T7449] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 148.269668][ T7447] XFS (loop4): Ending clean mount [ 148.311962][ T7477] mmap: syz.1.538 (7477) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.362071][ T7447] XFS (loop4): Quotacheck needed: Please wait. [ 148.468411][ T7449] BTRFS info (device loop3): enabling ssd optimizations [ 148.486340][ T7449] BTRFS info (device loop3): enabling free space tree [ 148.529259][ T7497] loop1: detected capacity change from 0 to 512 [ 148.536586][ T7497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.537473][ T7447] XFS (loop4): Quotacheck: Done. [ 148.605568][ T7449] BTRFS info (device loop3): device stats zeroed by syz.3.529 (7449) [ 148.633566][ T7497] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 148.663267][ T7497] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 148.672363][ T7497] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.679070][ T7497] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 148.688399][ T7497] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 148.705366][ T7497] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 148.723412][ T7497] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.540: bg 0: block 40: padding at end of block bitmap is not set [ 148.820861][ T5878] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.834190][ T7497] EXT4-fs (loop1): Remounting filesystem read-only [ 148.859019][ T5865] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.903120][ T7497] EXT4-fs (loop1): 1 truncate cleaned up [ 148.948398][ T7497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.234136][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.088174][ C1] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.120031][ C1] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.134858][ T7535] hpfs: hpfs_map_sector(): read error [ 150.342505][ T7548] loop6: detected capacity change from 0 to 512 [ 150.409687][ T7548] EXT4-fs: Ignoring removed orlov option [ 150.441795][ T7548] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 150.548042][ T7548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 150.675399][ T7548] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.562: corrupted in-inode xattr: e_value size too large [ 150.697923][ T7557] loop4: detected capacity change from 0 to 16 [ 150.703759][ T7507] loop0: detected capacity change from 0 to 32768 [ 150.711295][ T7562] loop1: detected capacity change from 0 to 512 [ 150.725241][ T7507] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.546 (7507) [ 150.747147][ T7557] erofs (device loop4): mounted with root inode @ nid 36. [ 150.757106][ T7548] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.562: couldn't read orphan inode 15 (err -117) [ 150.769660][ T7562] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 150.809932][ T7507] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 150.812534][ T7548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.820705][ T7557] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 150.843327][ T7562] EXT4-fs (loop1): invalid journal inode [ 150.862767][ T7507] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 150.863607][ T7562] EXT4-fs (loop1): can't get journal size [ 150.919070][ T7557] erofs (device loop4): failed to decompress -10 in[58, 4038] out[1851] [ 150.927698][ T7562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 150.965852][ T7562] System zones: 1-12, 13-13 [ 151.005717][ T7562] EXT4-fs (loop1): 1 truncate cleaned up [ 151.014529][ T7557] erofs (device loop4): read error -117 @ 43 of nid 36 [ 151.094849][ T7562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.150735][ T7507] BTRFS info (device loop0): enabling ssd optimizations [ 151.158471][ T7507] BTRFS info (device loop0): enabling free space tree [ 151.289310][ T7562] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full [ 151.301641][ T6552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.532145][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.550637][ T5871] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 152.118374][ T7610] loop4: detected capacity change from 0 to 64 [ 152.281845][ T7614] dummy0: entered promiscuous mode [ 152.352085][ T7614] dummy0: left promiscuous mode [ 152.643723][ T7625] loop4: detected capacity change from 0 to 1024 [ 152.749104][ T7586] loop5: detected capacity change from 0 to 32768 [ 153.011050][ T7634] loop3: detected capacity change from 0 to 1024 [ 153.049242][ T30] audit: type=1800 audit(1758847835.984:12): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.588" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 153.134417][ T7630] loop6: detected capacity change from 0 to 32768 [ 153.210362][ T7634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.235278][ T7630] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.286001][ T30] audit: type=1800 audit(1758847836.204:13): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.590" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 153.367700][ T7630] XFS (loop6): Metadata CRC error detected at xfs_agi_read_verify+0x12f/0x1f0, xfs_agi block 0x2 [ 153.378819][ T7630] XFS (loop6): Unmount and run xfs_repair [ 153.384532][ T7630] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 153.392842][ T7630] 00000000: 58 41 47 49 00 00 00 01 00 00 00 00 00 00 10 00 XAGI............ [ 153.402080][ T7630] 00000010: 00 00 00 40 00 00 00 01 00 00 00 01 00 00 00 37 ...@...........7 [ 153.410978][ T7630] 00000020: 00 00 11 40 ff ff ff ff ff ff ff ff ff ff ff ff ...@............ [ 153.420050][ T7630] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 153.428961][ T7630] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 153.437803][ T7630] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 153.446719][ T7630] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 153.455646][ T7630] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 153.464728][ T7630] XFS (loop6): metadata I/O error in "xfs_read_agi+0x272/0x5b0" at daddr 0x2 len 1 error 74 [ 153.475058][ T7630] XFS (loop6): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 153.484334][ T7630] XFS (loop6): Failed to read root inode 0x1140, error 117 [ 153.491926][ T7630] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 153.543475][ T7586] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 153.543506][ T7586] allowing incompatible features above 0.0: (unknown version) [ 153.543521][ T7586] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 153.604092][ T7663] loop0: detected capacity change from 0 to 512 [ 153.635981][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.699668][ T7663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.699779][ T7663] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.833288][ T7586] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 153.841610][ T7586] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 153.850248][ T7586] bcachefs (loop5): Version upgrade required: [ 153.850248][ T7586] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 153.850248][ T7586] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 153.850248][ T7586] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 154.043909][ T7586] bcachefs (loop5): dropping and reconstructing all alloc info [ 154.136286][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.172073][ T7586] bcachefs (loop5): accounting_read... [ 154.204525][ T7678] loop4: detected capacity change from 0 to 256 [ 154.220487][ T7586] done [ 154.223318][ T7586] bcachefs (loop5): alloc_read... done [ 154.238457][ T7586] bcachefs (loop5): snapshots_read... done [ 154.305392][ T7586] bcachefs (loop5): check_allocations... [ 154.432939][ T7683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.455306][ T7586] done [ 154.470219][ T7586] bcachefs (loop5): going read-write [ 154.494821][ T7586] bcachefs (loop5): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 154.529417][ T7586] bcachefs (loop5): flushing journal and stopping allocators, journal seq 10 [ 154.587586][ T7586] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 10 [ 154.675906][ T7586] bcachefs (loop5): unclean shutdown complete, journal seq 11 [ 154.747689][ T7586] bcachefs (loop5): error in recovery: EINTR [ 154.747707][ T7586] emergency read only at seq 11 [ 154.821700][ T7586] bcachefs (loop5): bch2_fs_start(): error starting filesystem EINTR [ 154.882073][ T7586] bcachefs (loop5): shutting down [ 155.007183][ T7586] bcachefs (loop5): shutdown complete [ 155.041543][ T30] audit: type=1326 audit(1758847837.954:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 155.161581][ T30] audit: type=1326 audit(1758847837.974:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 155.238761][ T30] audit: type=1326 audit(1758847838.004:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 155.287524][ T30] audit: type=1326 audit(1758847838.004:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 155.334079][ T30] audit: type=1326 audit(1758847838.004:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 155.428751][ T30] audit: type=1326 audit(1758847838.004:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 155.520117][ T30] audit: type=1326 audit(1758847838.004:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 155.607631][ T30] audit: type=1326 audit(1758847838.004:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 155.633541][ T7718] loop4: detected capacity change from 0 to 256 [ 155.646131][ T7718] exfat: Deprecated parameter 'namecase' [ 155.657235][ T7718] exfat: Deprecated parameter 'utf8' [ 155.682377][ T7720] loop0: detected capacity change from 0 to 256 [ 155.759875][ T7718] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 155.773893][ T7720] exfat: Deprecated parameter 'utf8' [ 155.818789][ T7720] exfat: Deprecated parameter 'utf8' [ 155.834369][ T7725] loop1: detected capacity change from 0 to 128 [ 155.854394][ T7720] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 155.904780][ T7725] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 155.938777][ T7725] hpfs: filesystem error: improperly stopped [ 155.976081][ T7725] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 155.998735][ T7725] hpfs: You really don't want any checks? You are crazy... [ 156.037529][ T7725] hpfs: hpfs_map_sector(): read error [ 156.047485][ T7725] hpfs: code page support is disabled [ 156.068885][ T7725] hpfs: hpfs_map_4sectors(): unaligned read [ 156.075263][ T7725] hpfs: hpfs_map_4sectors(): unaligned read [ 156.103000][ T7725] hpfs: filesystem error: unable to find root dir [ 156.244400][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.617'. [ 156.467693][ T7739] loop1: detected capacity change from 0 to 256 [ 156.480126][ T7739] exfat: Deprecated parameter 'utf8' [ 156.551621][ T7739] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 156.899946][ T7753] loop4: detected capacity change from 0 to 2048 [ 156.987754][ T7753] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.997499][ T7757] dvmrp5: entered allmulticast mode [ 157.037623][ T7757] pimreg: entered allmulticast mode [ 157.093850][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'. [ 157.110685][ T7753] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry where CRC length (0) does not match entry length (44) [ 157.709868][ T7779] vim2m vim2m.0: vidioc_s_fmt queue busy [ 157.885691][ T7787] loop0: detected capacity change from 0 to 256 [ 157.910344][ T7788] loop1: detected capacity change from 0 to 1024 [ 157.957637][ T7787] exfat: Deprecated parameter 'utf8' [ 157.984563][ T7788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.130256][ T7787] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 158.221851][ T7586] bcachefs: bch2_fs_get_tree() error: EINTR [ 158.228463][ T7788] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.639: bg 0: block 88: padding at end of block bitmap is not set [ 158.322173][ T7805] loop6: detected capacity change from 0 to 128 [ 158.479217][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.978774][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.195924][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.260483][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 159.290016][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.330243][ T9] usb 2-1: config 0 descriptor?? [ 159.794226][ T7847] loop3: detected capacity change from 0 to 4096 [ 159.841029][ T9] lg-g15 0003:046D:C222.0007: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 159.859764][ T7847] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 159.926947][ T7856] loop6: detected capacity change from 0 to 512 [ 159.953985][ T7856] EXT4-fs: Ignoring removed nobh option [ 160.030571][ T7856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.043345][ T7847] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 160.080616][ T43] usb 2-1: USB disconnect, device number 5 [ 160.311736][ T7862] fido_id[7862]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 160.422113][ T6552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.507182][ T7824] loop0: detected capacity change from 0 to 32768 [ 160.652890][ T7824] [ 160.652890][ T7824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.652890][ T7824] [ 160.755773][ T7824] ERROR: (device loop0): diWrite: ixpxd invalid [ 160.755773][ T7824] [ 160.765282][ T7881] loop6: detected capacity change from 0 to 764 [ 160.850411][ T7881] Symlink component flag not implemented [ 160.872751][ T7824] ERROR: (device loop0): txCommit: [ 160.872751][ T7824] [ 160.911616][ T7881] Symlink component flag not implemented [ 160.982720][ T7881] Symlink component flag not implemented (128) [ 161.004428][ T7881] Symlink component flag not implemented (122) [ 161.191820][ T5871] [ 161.191820][ T5871] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.191820][ T5871] [ 161.227487][ T5871] [ 161.227487][ T5871] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.227487][ T5871] [ 161.784571][ T7909] loop5: detected capacity change from 0 to 16384 [ 161.807642][ T7912] netlink: 209588 bytes leftover after parsing attributes in process `syz.3.684'. [ 161.935859][ T7923] loop1: detected capacity change from 0 to 512 [ 161.966885][ T7920] loop0: detected capacity change from 0 to 256 [ 161.996226][ T7909] bcachefs (loop5): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=none,grpquota,degraded=yes,fsck,norecovery [ 161.996251][ T7909] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 162.027326][ T7909] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 162.035825][ T7909] bcachefs (loop5): invalid journal entry, version=1.13: inode_has_child_snapshots type=clock in superblock: bad size, fixing [ 162.043245][ T7920] exfat: Deprecated parameter 'utf8' [ 162.049523][ T7909] bcachefs (loop5): invalid journal entry, version=1.13: inode_has_child_snapshots type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, fixing [ 162.072083][ T7909] bcachefs (loop5): recovering from clean shutdown, journal seq 18 [ 162.080147][ T7909] bcachefs (loop5): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 162.080147][ T7909] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 162.120009][ T7909] bcachefs (loop5): btree node read error at btree alloc level 1/1 [ 162.120029][ T7909] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 6418e625a07b578f written 24 min_key POS_MIN durability: 1 ptr: 0:147:0 gen 0 [ 162.120048][ T7909] loop5 node offset 8/24 bset u64s 9: checksum error, type chacha20_poly1305_128: got 4f8984b2a9482b20a6858222464548fc should be 10e9a02dae2ac5c92967ce14957c4a14 [ 162.120069][ T7909] loop5 btree validate error [ 162.120081][ T7909] flagging btree alloc lost data [ 162.120093][ T7909] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 162.120108][ T7909] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 162.120123][ T7909] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 162.120140][ T7909] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 162.120155][ T7909] ret fsck_errors_not_fixed [ 162.214285][ T7909] bcachefs (loop5): error reading btree root btree=alloc level=1: btree_node_read_error, fixing [ 162.215074][ T7920] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 162.229735][ T7909] bcachefs (loop5): btree node read error at btree backpointers level 0/0 [ 162.240156][ T7923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 162.245307][ T7909] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq dd412662cf0a3cdb written 24 min_key POS_MIN durability: 1 ptr: 0:177:0 gen 0 [ 162.264484][ T7929] loop4: detected capacity change from 0 to 512 [ 162.271361][ T7909] loop5 node offset 8/24 bset u64s 58: checksum error, type chacha20_poly1305_128: got 078c2e72d1fb2cf9a69f9a587b7c18a1 should be a24fdb1e3b0c54e0ee0bce67b808f3ff [ 162.271385][ T7909] loop5 btree validate error [ 162.271404][ T7909] flagging btree backpointers lost data [ 162.271417][ T7909] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 162.271433][ T7909] ret fsck_errors_not_fixed [ 162.271612][ T7909] bcachefs (loop5): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 162.333980][ T7909] bcachefs (loop5): btree node read error at btree accounting level 0/0 [ 162.333997][ T7909] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bad08202889604e written 24 min_key POS_MIN durability: 1 ptr: 0:180:0 gen 0 [ 162.334016][ T7909] loop5 node offset 0/24 bset u64s 108: checksum error, type chacha20_poly1305_128: got 08a56e53c0fd4b6f990a549c8279701e should be dee540208f34c03154ca4fb261e5b32c [ 162.334036][ T7909] loop5 btree validate error [ 162.334048][ T7909] flagging btree accounting lost data [ 162.334060][ T7909] ret fsck_errors_not_fixed [ 162.388165][ T7909] bcachefs (loop5): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 162.396353][ T7929] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.399345][ T7909] bcachefs (loop5): check_topology... done [ 162.414946][ T7909] bcachefs (loop5): accounting_read... [ 162.433768][ T7923] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.450347][ T7909] done [ 162.453107][ T7909] bcachefs (loop5): alloc_read... done [ 162.459224][ T7909] bcachefs (loop5): snapshots_read... done [ 162.465546][ T7909] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 162.474883][ T7909] bcachefs (loop5): reading quotas [ 162.481980][ T7909] bcachefs (loop5): quotas done [ 162.487232][ T7909] bcachefs (loop5): done starting filesystem [ 162.502482][ T7929] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 162.564203][ T7929] System zones: 0-2, 18-18, 34-34 [ 162.639826][ T5861] bcachefs (loop5): shutting down [ 162.717391][ T7929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.732508][ T7923] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 162.764279][ T5861] bcachefs (loop5): shutdown complete [ 162.770198][ T7929] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.843267][ T7923] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 162.918826][ T7923] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.686: Failed to acquire dquot type 0 [ 163.056217][ T7945] loop0: detected capacity change from 0 to 512 [ 163.072915][ T7945] EXT4-fs: Ignoring removed nobh option [ 163.085706][ T7945] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.093436][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.109593][ T7948] loop6: detected capacity change from 0 to 512 [ 163.170762][ T7945] EXT4-fs error (device loop0): __ext4_iget:5464: inode #11: block 1: comm syz.0.695: invalid block [ 163.199731][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 163.228217][ T7945] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.695: couldn't read orphan inode 11 (err -117) [ 163.248609][ T7948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.307150][ T7945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.345364][ T7948] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.493255][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 163.539853][ T7959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.701'. [ 163.582354][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.611908][ T6552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.054734][ T7970] loop6: detected capacity change from 0 to 4096 [ 164.118720][ T7970] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 164.155278][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.710'. [ 164.328497][ T2149] kernel write not supported for file /sg0 (pid: 2149 comm: kworker/1:2) [ 164.856911][ T7999] loop1: detected capacity change from 0 to 512 [ 164.870780][ T7963] loop4: detected capacity change from 0 to 32768 [ 164.894131][ T7999] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.923809][ T7999] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 164.978108][ T8003] loop0: detected capacity change from 0 to 512 [ 164.995473][ T7999] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 165.025226][ T7999] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 165.088510][ T7999] System zones: 0-2, 18-18, 34-35 [ 165.106028][ T7999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.194966][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.404980][ T30] audit: type=1326 audit(1758847848.334:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5d8eec9 code=0x7ffc0000 [ 165.528726][ T30] audit: type=1326 audit(1758847848.334:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5d8eec9 code=0x7ffc0000 [ 165.603456][ T8020] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 165.664345][ T30] audit: type=1326 audit(1758847848.334:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5d8eec9 code=0x7ffc0000 [ 165.769580][ T8022] loop4: detected capacity change from 0 to 512 [ 165.797310][ T30] audit: type=1326 audit(1758847848.364:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8ff5d8eec9 code=0x7ffc0000 [ 165.846852][ T8022] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 165.915528][ T8022] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=00c2] [ 165.958737][ T30] audit: type=1326 audit(1758847848.364:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5d8eec9 code=0x7ffc0000 [ 165.981474][ T8022] System zones: 0-2, 18-18, 34-34 [ 165.986881][ T8022] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.987543][ T8033] loop5: detected capacity change from 0 to 256 [ 165.996498][ T8022] EXT4-fs error (device loop4): ext4_quota_enable:7128: inode #15: comm syz.4.730: iget: bad i_size value: 360287970189639690 [ 166.013091][ T8022] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.730: Bad quota inode: 15, type: 2 [ 166.027429][ T8022] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 166.042868][ T30] audit: type=1326 audit(1758847848.364:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5d8eec9 code=0x7ffc0000 [ 166.075061][ T8022] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 166.093881][ T8022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.116779][ T30] audit: type=1326 audit(1758847848.374:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ff5d8eec9 code=0x7ffc0000 [ 166.155613][ T30] audit: type=1326 audit(1758847848.374:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.1.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f8ff5d8eec9 code=0x7ffc0000 [ 166.190728][ T8033] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.211916][ T8037] loop1: detected capacity change from 0 to 1024 [ 166.303214][ T8033] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 166.337149][ T8037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.377417][ T8033] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 166.422727][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.694302][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.168739][ T5952] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 167.182662][ T8062] loop3: detected capacity change from 0 to 256 [ 167.314035][ T8062] FAT-fs (loop3): Directory bread(block 64) failed [ 167.350621][ T8062] FAT-fs (loop3): Directory bread(block 65) failed [ 167.357257][ T8062] FAT-fs (loop3): Directory bread(block 66) failed [ 167.372207][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.373275][ T8028] loop0: detected capacity change from 0 to 32768 [ 167.403515][ T5952] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 167.438806][ T8062] FAT-fs (loop3): Directory bread(block 67) failed [ 167.445398][ T8062] FAT-fs (loop3): Directory bread(block 68) failed [ 167.448729][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.474825][ T8028] [ 167.474825][ T8028] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.474825][ T8028] [ 167.490692][ T8062] FAT-fs (loop3): Directory bread(block 69) failed [ 167.513882][ T5952] usb 5-1: config 0 descriptor?? [ 167.518289][ T8062] FAT-fs (loop3): Directory bread(block 70) failed [ 167.532599][ T8028] ERROR: (device loop0): diWrite: ixpxd invalid [ 167.532599][ T8028] [ 167.546089][ T8062] FAT-fs (loop3): Directory bread(block 71) failed [ 167.559090][ T8062] FAT-fs (loop3): Directory bread(block 72) failed [ 167.597304][ T8028] ERROR: (device loop0): remounting filesystem as read-only [ 167.615016][ T8062] FAT-fs (loop3): Directory bread(block 73) failed [ 167.622279][ T8028] ERROR: (device loop0): txCommit: [ 167.622279][ T8028] [ 167.852650][ T8079] loop5: detected capacity change from 0 to 128 [ 167.895813][ T8079] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 167.961854][ T5952] hid (null): unknown global tag 0xd [ 168.038798][ T8068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.061030][ T5952] itetech 0003:06CB:73F4.0008: ignoring exceeding usage max [ 168.100213][ T5952] itetech 0003:06CB:73F4.0008: unknown global tag 0xd [ 168.106983][ T5952] itetech 0003:06CB:73F4.0008: item 0 2 1 13 parsing failed [ 168.153837][ T5952] itetech 0003:06CB:73F4.0008: probe with driver itetech failed with error -22 [ 168.217819][ T5952] usb 5-1: USB disconnect, device number 2 [ 168.524634][ T8091] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 168.561028][ T8088] loop6: detected capacity change from 0 to 4096 [ 168.594788][ T8091] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 168.635261][ T8091] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 168.699165][ T8091] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 168.766060][ T8091] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 168.818986][ T8091] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 168.847909][ T8091] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 168.892655][ T8091] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 168.924916][ T8091] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 168.950866][ T8091] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 169.039178][ T8091] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 169.069448][ T8091] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 169.110999][ T8091] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 169.156349][ T8091] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 169.255315][ T8091] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 169.267454][ T8091] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 169.789024][ T8118] loop0: detected capacity change from 0 to 2048 [ 169.871646][ T8118] NILFS (loop0): invalid segment: Inconsistency found [ 169.878581][ T8118] NILFS (loop0): trying rollback from an earlier position [ 169.958148][ T8118] NILFS (loop0): recovery complete [ 170.006822][ T8120] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.240222][ T8098] loop1: detected capacity change from 0 to 32768 [ 170.342173][ T8128] loop4: detected capacity change from 0 to 256 [ 170.369100][ T8098] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 170.478215][ T8128] FAT-fs (loop4): Directory bread(block 64) failed [ 170.525696][ T8098] XFS (loop1): Ending clean mount [ 170.574134][ T8128] FAT-fs (loop4): Directory bread(block 65) failed [ 170.595306][ T8098] XFS (loop1): Quotacheck needed: Please wait. [ 170.622020][ T8128] FAT-fs (loop4): Directory bread(block 66) failed [ 170.644764][ T8106] loop3: detected capacity change from 0 to 32768 [ 170.653793][ T8128] FAT-fs (loop4): Directory bread(block 67) failed [ 170.709194][ T8128] FAT-fs (loop4): Directory bread(block 68) failed [ 170.752917][ T8098] XFS (loop1): Quotacheck: Done. [ 170.780222][ T8128] FAT-fs (loop4): Directory bread(block 69) failed [ 170.813775][ T8106] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.829542][ T8128] FAT-fs (loop4): Directory bread(block 70) failed [ 170.836756][ T8128] FAT-fs (loop4): Directory bread(block 71) failed [ 170.885321][ T8128] FAT-fs (loop4): Directory bread(block 72) failed [ 170.923942][ T8128] FAT-fs (loop4): Directory bread(block 73) failed [ 170.976848][ T5857] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 171.050009][ T8106] XFS (loop3): Ending clean mount [ 171.106905][ T8106] XFS (loop3): Quotacheck needed: Please wait. [ 171.187382][ T8106] XFS (loop3): Quotacheck: Done. [ 171.229883][ T8149] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 171.229883][ T8149] The task syz.5.779 (8149) triggered the difference, watch for misbehavior. [ 171.446012][ T8153] loop4: detected capacity change from 0 to 256 [ 171.456861][ T5865] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 171.569658][ T8153] FAT-fs (loop4): Directory bread(block 64) failed [ 171.617573][ T8153] FAT-fs (loop4): Directory bread(block 65) failed [ 171.651067][ T8153] FAT-fs (loop4): Directory bread(block 66) failed [ 171.684667][ T8153] FAT-fs (loop4): Directory bread(block 67) failed [ 171.721095][ T8153] FAT-fs (loop4): Directory bread(block 68) failed [ 171.758087][ T8153] FAT-fs (loop4): Directory bread(block 69) failed [ 171.785224][ T8153] FAT-fs (loop4): Directory bread(block 70) failed [ 171.825712][ T8153] FAT-fs (loop4): Directory bread(block 71) failed [ 171.839019][ T8153] FAT-fs (loop4): Directory bread(block 72) failed [ 171.863810][ T8153] FAT-fs (loop4): Directory bread(block 73) failed [ 172.295803][ T8173] netlink: 44 bytes leftover after parsing attributes in process `syz.3.790'. [ 172.330475][ T8169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.790'. [ 172.374048][ T8174] loop5: detected capacity change from 0 to 2048 [ 172.438705][ T8174] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 172.525843][ T8179] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.526970][ T6030] udevd[6030]: incorrect nilfs2 checksum on /dev/loop5 [ 172.871906][ T8186] loop5: detected capacity change from 0 to 1024 [ 172.982099][ T8186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.138831][ T5952] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 173.164646][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 173.164662][ T30] audit: type=1800 audit(1758847856.094:35): pid=8186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.796" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 173.281363][ T8186] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 173.322216][ T5952] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.353677][ T5952] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 173.397467][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.459962][ T5952] usb 4-1: config 0 descriptor?? [ 173.485845][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.822039][ T8217] rdma_op ffff888030d129f0 conn xmit_rdma 0000000000000000 [ 173.889329][ T5952] ath6kl: Unsupported hardware version: 0x0 [ 173.930291][ T5952] ath6kl: Failed to init ath6kl core: -22 [ 173.936864][ T5952] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 174.047453][ T8223] loop4: detected capacity change from 0 to 64 [ 174.121307][ T5952] usb 4-1: USB disconnect, device number 4 [ 174.245218][ T8227] loop1: detected capacity change from 0 to 2048 [ 174.292737][ T8227] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 174.398743][ T8234] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.835476][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 175.102843][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.830'. [ 175.219158][ T8265] loop5: detected capacity change from 0 to 512 [ 175.286945][ T8265] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.832: casefold flag without casefold feature [ 175.316515][ T8265] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.832: couldn't read orphan inode 15 (err -117) [ 175.356317][ T8265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.430240][ T8265] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #2: comm syz.5.832: invalid size [ 175.790428][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.874547][ T8276] sctp: [Deprecated]: syz.0.837 (pid 8276) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.874547][ T8276] Use struct sctp_sack_info instead [ 176.121351][ T8278] loop3: detected capacity change from 0 to 4096 [ 176.227911][ T8278] ntfs3(loop3): ino=b, mi_enum_attr [ 176.251391][ T8278] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 176.298963][ T8278] ntfs3(loop3): Failed to load $Extend (-22). [ 176.305042][ T8278] ntfs3(loop3): Failed to initialize $Extend. [ 176.572382][ T8296] xt_l2tp: missing protocol rule (udp|l2tpip) [ 176.584686][ T5228] udevd[5228]: worker [6030] terminated by signal 33 (Unknown signal 33) [ 176.620675][ T5228] udevd[5228]: worker [6030] failed while handling '/devices/virtual/block/loop3' [ 176.836232][ T8304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.928916][ T8308] netlink: 16 bytes leftover after parsing attributes in process `syz.5.851'. [ 176.991541][ T8311] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.089836][ T8303] loop3: detected capacity change from 0 to 8192 [ 177.524315][ T8323] Zero length message leads to an empty skb [ 177.666780][ T8329] loop5: detected capacity change from 0 to 256 [ 177.760955][ T8334] loop1: detected capacity change from 0 to 64 [ 177.879642][ T8334] Trying to free block not in datazone [ 177.905629][ T8337] loop3: detected capacity change from 0 to 1024 [ 177.989621][ T8337] hfsplus: bad catalog entry type [ 178.005633][ T8339] loop5: detected capacity change from 0 to 512 [ 178.070457][ T8339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.113116][ T8339] EXT4-fs (loop5): orphan cleanup on readonly fs [ 178.163240][ T8339] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.866: bg 0: block 248: padding at end of block bitmap is not set [ 178.214606][ T8348] loop1: detected capacity change from 0 to 256 [ 178.238403][ T8348] exfat: Deprecated parameter 'namecase' [ 178.282693][ T8339] Quota error (device loop5): write_blk: dquota write failed [ 178.308883][ T8348] exfat: Deprecated parameter 'utf8' [ 178.316550][ T8348] exfat: Deprecated parameter 'utf8' [ 178.341465][ T8339] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 178.373716][ T8348] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012c3e, chksum : 0x472b995e, utbl_chksum : 0xe619d30d) [ 178.409306][ T8339] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.866: Failed to acquire dquot type 1 [ 178.463412][ T8339] EXT4-fs (loop5): 1 truncate cleaned up [ 178.521538][ T8339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.538180][ T8356] loop3: detected capacity change from 0 to 16 [ 178.575985][ T8356] erofs (device loop3): mounted with root inode @ nid 36. [ 178.637780][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.876'. [ 178.668678][ T30] audit: type=1800 audit(1758847861.594:36): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.874" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 178.718017][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.876'. [ 178.753788][ T8339] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 178.988374][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.037178][ T8368] loop1: detected capacity change from 0 to 256 [ 179.229241][ T8370] loop3: detected capacity change from 0 to 512 [ 179.307077][ T8370] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.882: corrupted in-inode xattr: invalid ea_ino [ 179.373496][ T8376] loop1: detected capacity change from 0 to 1024 [ 179.434358][ T8370] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.882: couldn't read orphan inode 15 (err -117) [ 179.476755][ T8360] loop0: detected capacity change from 0 to 32768 [ 179.493570][ T8370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.536729][ T8360] [ 179.536729][ T8360] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.536729][ T8360] [ 179.835452][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.850107][ T8385] loop1: detected capacity change from 0 to 512 [ 179.876733][ T5871] [ 179.876733][ T5871] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.876733][ T5871] [ 179.919709][ T5871] [ 179.919709][ T5871] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 179.919709][ T5871] [ 179.942378][ T8385] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.041486][ T8385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.124019][ T8385] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.185539][ T8396] loop6: detected capacity change from 0 to 512 [ 180.218512][ T8396] EXT4-fs (loop6): Test dummy encryption mode enabled [ 180.230042][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.258754][ T8396] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 180.297133][ T8396] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.893: bad orphan inode 131083 [ 180.438214][ T8396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.514482][ T8408] loop0: detected capacity change from 0 to 64 [ 180.517535][ T8406] loop3: detected capacity change from 0 to 128 [ 180.590562][ T8396] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.893: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 180.624291][ T8406] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 180.667255][ T8406] hpfs: filesystem error: improperly stopped [ 180.690008][ T8406] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 180.703386][ T8406] hpfs: You really don't want any checks? You are crazy... [ 180.719941][ T8411] loop5: detected capacity change from 0 to 2048 [ 180.773731][ T8411] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.785619][ T8406] hpfs: hpfs_map_sector(): read error [ 180.815604][ T8406] hpfs: code page support is disabled [ 180.838004][ T8406] hpfs: hpfs_map_4sectors(): unaligned read [ 180.874884][ T6552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.877619][ T8413] loop1: detected capacity change from 0 to 1024 [ 180.884105][ T8406] hpfs: hpfs_map_4sectors(): unaligned read [ 180.902383][ T8406] hpfs: filesystem error: unable to find root dir [ 181.029924][ T8406] hpfs: hpfs_map_4sectors(): unaligned read [ 181.081067][ T8413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.133074][ T8413] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.236704][ T8413] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.899: Freeing blocks not in datazone - block = 0, count = 16 [ 181.327905][ T8413] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 181.366079][ T8429] loop0: detected capacity change from 0 to 2048 [ 181.458043][ T8429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.525956][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.570544][ T8438] loop6: detected capacity change from 0 to 8192 [ 181.680342][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 181.746541][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.772366][ T8440] loop5: detected capacity change from 0 to 256 [ 181.808416][ T8440] exfat: Unknown parameter 'disc' [ 181.879232][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 181.902760][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 181.946552][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.079583][ T9] usb 4-1: config 0 descriptor?? [ 182.413421][ T8456] loop5: detected capacity change from 0 to 8 [ 182.499958][ T8456] SQUASHFS error: Failed to read block 0x2d7: -5 [ 182.536848][ T8456] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 182.565457][ T9] logitech 0003:046D:C294.0009: unknown main item tag 0x0 [ 182.595508][ T9] logitech 0003:046D:C294.0009: item fetching failed at offset 3/5 [ 182.632138][ T9] logitech 0003:046D:C294.0009: parse failed [ 182.648382][ T9] logitech 0003:046D:C294.0009: probe with driver logitech failed with error -22 [ 182.768337][ T5952] usb 4-1: USB disconnect, device number 5 [ 183.063538][ T8444] loop6: detected capacity change from 0 to 32768 [ 183.266653][ T8448] loop1: detected capacity change from 0 to 32768 [ 183.479280][ T8448] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 183.686835][ T8476] sp0: Synchronizing with TNC [ 183.855460][ T5857] ocfs2: Unmounting device (7,1) on (node local) [ 183.925284][ T8460] loop4: detected capacity change from 0 to 32768 [ 183.978844][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'. [ 184.069464][ T8462] loop5: detected capacity change from 0 to 32768 [ 184.237384][ T8462] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 184.327690][ T8462] XFS (loop5): Ending clean mount [ 184.424746][ T8462] XFS (loop5): Quotacheck needed: Please wait. [ 184.548564][ T8462] XFS (loop5): Quotacheck: Done. [ 184.901146][ T5861] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 185.081430][ T8519] loop6: detected capacity change from 0 to 2048 [ 185.130522][ T8519] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 185.352997][ T8525] loop1: detected capacity change from 0 to 4096 [ 185.385426][ T8525] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 185.529948][ T8525] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 186.243523][ T8551] netlink: 64 bytes leftover after parsing attributes in process `syz.6.955'. [ 186.575738][ T8566] loop3: detected capacity change from 0 to 64 [ 186.735947][ T8520] loop0: detected capacity change from 0 to 40427 [ 186.789641][ T8520] F2FS-fs: heap/no_heap options were deprecated [ 186.839512][ T8520] F2FS-fs (loop0): invalid crc value [ 186.902200][ T8575] loop3: detected capacity change from 0 to 1024 [ 186.994874][ T8575] hfsplus: catalog searching failed [ 187.172511][ T8520] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 187.243472][ T8520] F2FS-fs (loop0): Start checkpoint disabled! [ 187.312155][ T8520] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 187.534645][ T1165] kworker/u8:7: attempt to access beyond end of device [ 187.534645][ T1165] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.607014][ T1165] CPU: 0 UID: 0 PID: 1165 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 187.607046][ T1165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.607062][ T1165] Workqueue: writeback wb_workfn (flush-7:0) [ 187.607097][ T1165] Call Trace: [ 187.607107][ T1165] [ 187.607117][ T1165] dump_stack_lvl+0x189/0x250 [ 187.607155][ T1165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.607186][ T1165] ? __pfx_queue_work_on+0x10/0x10 [ 187.607211][ T1165] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 187.607236][ T1165] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 187.607279][ T1165] f2fs_handle_critical_error+0x37c/0x540 [ 187.607328][ T1165] f2fs_write_end_io+0x886/0xb60 [ 187.607381][ T1165] __submit_merged_bio+0x27a/0x6a0 [ 187.607429][ T1165] __submit_merged_write_cond+0x255/0x530 [ 187.607477][ T1165] f2fs_write_data_pages+0x261d/0x3000 [ 187.607553][ T1165] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 187.607576][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.607628][ T1165] ? unwind_next_frame+0xa5/0x2390 [ 187.607700][ T1165] ? ret_from_fork_asm+0x1a/0x30 [ 187.607743][ T1165] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 187.607774][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.607827][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.607854][ T1165] ? __lock_acquire+0xab9/0xd20 [ 187.607903][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.607944][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.607984][ T1165] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 187.608012][ T1165] do_writepages+0x32e/0x550 [ 187.608053][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.608081][ T1165] ? reacquire_held_locks+0x127/0x1d0 [ 187.608105][ T1165] ? writeback_sb_inodes+0x384/0x1010 [ 187.608153][ T1165] __writeback_single_inode+0x145/0xff0 [ 187.608185][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.608212][ T1165] ? do_raw_spin_unlock+0x122/0x240 [ 187.608251][ T1165] writeback_sb_inodes+0x6c7/0x1010 [ 187.608286][ T1165] ? __lock_acquire+0xab9/0xd20 [ 187.608357][ T1165] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 187.608453][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.608480][ T1165] ? rcu_is_watching+0x15/0xb0 [ 187.608505][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.608546][ T1165] wb_writeback+0x43b/0xaf0 [ 187.608592][ T1165] ? queue_io+0x331/0x590 [ 187.608632][ T1165] ? __pfx_wb_writeback+0x10/0x10 [ 187.608685][ T1165] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.608717][ T1165] wb_workfn+0x409/0xef0 [ 187.608768][ T1165] ? __pfx_wb_workfn+0x10/0x10 [ 187.608801][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.608828][ T1165] ? __lock_acquire+0xab9/0xd20 [ 187.608881][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.608913][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.608946][ T1165] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.608968][ T1165] ? process_scheduled_works+0x9ef/0x17b0 [ 187.608991][ T1165] ? process_scheduled_works+0x9ef/0x17b0 [ 187.609019][ T1165] process_scheduled_works+0xae1/0x17b0 [ 187.609089][ T1165] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.609126][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.609167][ T1165] worker_thread+0x8a0/0xda0 [ 187.609197][ T1165] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 187.609234][ T1165] ? __kthread_parkme+0x7b/0x200 [ 187.609277][ T1165] kthread+0x711/0x8a0 [ 187.609314][ T1165] ? __pfx_worker_thread+0x10/0x10 [ 187.609339][ T1165] ? __pfx_kthread+0x10/0x10 [ 187.609368][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.609402][ T1165] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.609424][ T1165] ? srso_alias_return_thunk+0x5/0xfbef5 [ 187.609451][ T1165] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.609474][ T1165] ? __pfx_kthread+0x10/0x10 [ 187.609507][ T1165] ret_from_fork+0x439/0x7d0 [ 187.609538][ T1165] ? __pfx_ret_from_fork+0x10/0x10 [ 187.609574][ T1165] ? __switch_to_asm+0x39/0x70 [ 187.609604][ T1165] ? __switch_to_asm+0x33/0x70 [ 187.609634][ T1165] ? __pfx_kthread+0x10/0x10 [ 187.609671][ T1165] ret_from_fork_asm+0x1a/0x30 [ 187.609729][ T1165] [ 187.993760][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.022738][ T8591] support for the xor transformation has been removed. [ 188.082100][ T8564] loop5: detected capacity change from 0 to 32768 [ 188.089971][ T1165] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 188.099322][ T8564] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.964 (8564) [ 188.184004][ T8564] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 188.215418][ T8564] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 188.434369][ T8597] loop3: detected capacity change from 0 to 2048 [ 188.513037][ T8595] loop6: detected capacity change from 0 to 4096 [ 188.541138][ T5860] Bluetooth: hci2: command tx timeout [ 188.643419][ T8614] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.682446][ T8564] BTRFS info (device loop5): enabling ssd optimizations [ 188.708785][ T8564] BTRFS info (device loop5): enabling free space tree [ 188.752770][ T8619] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.018014][ T8621] loop4: detected capacity change from 0 to 512 [ 189.055375][ T8623] new mount options do not match the existing superblock, will be ignored [ 189.093436][ T8623] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 189.105770][ T5861] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 189.109481][ T8621] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.120398][ T8583] loop1: detected capacity change from 0 to 32768 [ 189.217950][ T8621] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 189.290450][ T8621] System zones: 0-2, 18-18, 34-34 [ 189.315095][ T8621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.479205][ T8621] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.551467][ T8633] loop0: detected capacity change from 0 to 512 [ 189.644725][ T8633] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 189.743494][ T8633] EXT4-fs (loop0): 1 truncate cleaned up [ 189.768433][ T8633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.802315][ T8640] netlink: 'syz.6.988': attribute type 1 has an invalid length. [ 189.859590][ T8640] netlink: 'syz.6.988': attribute type 2 has an invalid length. [ 189.867249][ T8640] netlink: 1180 bytes leftover after parsing attributes in process `syz.6.988'. [ 189.997709][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.625843][ T8656] loop3: detected capacity change from 0 to 1024 [ 190.639579][ T8656] EXT4-fs: Ignoring removed oldalloc option [ 190.761711][ T8656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.767617][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.801391][ T8660] loop4: detected capacity change from 0 to 128 [ 191.011452][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.178254][ T8635] loop5: detected capacity change from 0 to 32768 [ 191.186488][ T8644] loop1: detected capacity change from 0 to 40427 [ 191.203973][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 191.213877][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 191.239913][ T8666] tc_dump_action: action bad kind [ 191.246020][ T8644] F2FS-fs: heap/no_heap options were deprecated [ 191.268976][ T8644] F2FS-fs: heap/no_heap options were deprecated [ 191.306032][ T8644] F2FS-fs (loop1): invalid crc value [ 191.400798][ T30] audit: type=1326 audit(1758847874.334:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8672 comm="syz.6.1000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b9038eec9 code=0x0 [ 191.428943][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 191.437197][ T9] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 191.498867][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 191.536517][ T9] usb 1-1: config 220 has no interface number 2 [ 191.608817][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 191.649463][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 191.675349][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 191.703381][ T8644] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 191.712644][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 191.739257][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 191.749229][ T8644] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.759115][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.794852][ T9] usb 1-1: Product: syz [ 191.803720][ T9] usb 1-1: Manufacturer: syz [ 191.818250][ T9] usb 1-1: SerialNumber: syz [ 191.861299][ T30] audit: type=1800 audit(1758847874.774:38): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.989" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 191.967456][ T8644] syz.1.989: attempt to access beyond end of device [ 191.967456][ T8644] loop1: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 192.000406][ T30] audit: type=1326 audit(1758847874.934:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cac38eec9 code=0x7ffc0000 [ 192.001767][ T8686] loop5: detected capacity change from 0 to 128 [ 192.078404][ T9] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 192.087676][ T9] usb 1-1: No valid video chain found. [ 192.104273][ T30] audit: type=1326 audit(1758847874.964:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cac38eec9 code=0x7ffc0000 [ 192.136237][ T9] usb 1-1: selecting invalid altsetting 0 [ 192.166640][ T30] audit: type=1326 audit(1758847874.964:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6cac38eec9 code=0x7ffc0000 [ 192.189205][ T30] audit: type=1326 audit(1758847874.964:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cac38eec9 code=0x7ffc0000 [ 192.211819][ T30] audit: type=1326 audit(1758847874.964:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cac38eec9 code=0x7ffc0000 [ 192.237497][ T30] audit: type=1326 audit(1758847874.964:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f6cac38eec9 code=0x7ffc0000 [ 192.240752][ T8686] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.267387][ T9] usb 1-1: selecting invalid altsetting 0 [ 192.277829][ T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 192.286669][ T30] audit: type=1326 audit(1758847874.964:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cac38eec9 code=0x7ffc0000 [ 192.317091][ T5857] syz-executor: attempt to access beyond end of device [ 192.317091][ T5857] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 192.319391][ T9] usb 1-1: USB disconnect, device number 5 [ 192.357189][ T5857] CPU: 1 UID: 0 PID: 5857 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 192.357219][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.357234][ T5857] Call Trace: [ 192.357243][ T5857] [ 192.357253][ T5857] dump_stack_lvl+0x189/0x250 [ 192.357291][ T5857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.357321][ T5857] ? __pfx_queue_work_on+0x10/0x10 [ 192.357345][ T5857] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 192.357370][ T5857] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.357407][ T5857] f2fs_handle_critical_error+0x37c/0x540 [ 192.357452][ T5857] f2fs_write_end_io+0x886/0xb60 [ 192.357498][ T5857] __submit_merged_bio+0x27a/0x6a0 [ 192.357542][ T5857] __submit_merged_write_cond+0x255/0x530 [ 192.357586][ T5857] f2fs_write_data_pages+0x261d/0x3000 [ 192.357608][ T5857] ? is_bpf_text_address+0x26/0x2b0 [ 192.357688][ T5857] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 192.357768][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.357823][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.357849][ T5857] ? __lock_acquire+0xab9/0xd20 [ 192.357894][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.357921][ T5857] ? do_raw_spin_lock+0x121/0x290 [ 192.357957][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.357990][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.358019][ T5857] ? do_raw_spin_unlock+0x122/0x240 [ 192.358051][ T5857] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 192.358077][ T5857] do_writepages+0x32e/0x550 [ 192.358117][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.358149][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.358177][ T5857] ? do_raw_spin_unlock+0x122/0x240 [ 192.358212][ T5857] filemap_fdatawrite+0x199/0x240 [ 192.358248][ T5857] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 192.358331][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.358365][ T5857] ? do_raw_spin_unlock+0x122/0x240 [ 192.358401][ T5857] f2fs_sync_dirty_inodes+0x31f/0x830 [ 192.358446][ T5857] f2fs_write_checkpoint+0x95a/0x1df0 [ 192.358502][ T5857] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 192.358584][ T5857] ? kill_f2fs_super+0x298/0x6c0 [ 192.358621][ T5857] kill_f2fs_super+0x2c3/0x6c0 [ 192.358656][ T5857] ? __pfx_kill_f2fs_super+0x10/0x10 [ 192.358684][ T5857] ? radix_tree_delete_item+0x2b6/0x400 [ 192.358717][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.358744][ T5857] ? shrinker_free+0x2ce/0x3e0 [ 192.358775][ T5857] deactivate_locked_super+0xbc/0x130 [ 192.358807][ T5857] cleanup_mnt+0x425/0x4c0 [ 192.358834][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.358861][ T5857] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.358891][ T5857] task_work_run+0x1d4/0x260 [ 192.358928][ T5857] ? __pfx_task_work_run+0x10/0x10 [ 192.358959][ T5857] ? __x64_sys_umount+0x122/0x160 [ 192.358999][ T5857] ? exit_to_user_mode_loop+0x40/0x110 [ 192.359040][ T5857] exit_to_user_mode_loop+0xec/0x110 [ 192.359076][ T5857] do_syscall_64+0x2bd/0x3b0 [ 192.359103][ T5857] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.359128][ T5857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.359150][ T5857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 192.359177][ T5857] ? exc_page_fault+0x9f/0xf0 [ 192.359206][ T5857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.359229][ T5857] RIP: 0033:0x7f8ff5d901f7 [ 192.359249][ T5857] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 192.359270][ T5857] RSP: 002b:00007ffc88a82bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 192.359295][ T5857] RAX: 0000000000000000 RBX: 00007f8ff5e11d7d RCX: 00007f8ff5d901f7 [ 192.359311][ T5857] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc88a82c70 [ 192.359327][ T5857] RBP: 00007ffc88a82c70 R08: 0000000000000000 R09: 0000000000000000 [ 192.359343][ T5857] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc88a83d00 [ 192.359359][ T5857] R13: 00007f8ff5e11d7d R14: 000000000002ee3b R15: 00007ffc88a83d40 [ 192.359397][ T5857] [ 192.747308][ T8686] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.803636][ T5857] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 192.908851][ T5861] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.222217][ T8705] loop3: detected capacity change from 0 to 512 [ 193.223123][ T8705] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.255237][ T8705] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 193.255594][ T8705] EXT4-fs (loop3): orphan cleanup on readonly fs [ 193.256181][ T8705] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 193.256361][ T8705] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 193.257165][ T8705] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 193.267954][ T8705] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1015: bg 0: block 40: padding at end of block bitmap is not set [ 193.268514][ T8705] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 193.320440][ T8705] EXT4-fs (loop3): 1 truncate cleaned up [ 193.322368][ T8705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.347588][ T8705] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1015: bad symlink. [ 193.348578][ T8705] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1015: bad symlink. [ 193.457677][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.550018][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.772775][ T8711] loop3: detected capacity change from 0 to 256 [ 193.860992][ T8713] loop4: detected capacity change from 0 to 512 [ 194.173163][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 194.226726][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 194.249538][ T8717] netlink: 'syz.1.1010': attribute type 12 has an invalid length. [ 194.269791][ T8717] netlink: 'syz.1.1010': attribute type 13 has an invalid length. [ 194.450103][ T8701] loop6: detected capacity change from 0 to 32768 [ 194.505823][ T8728] loop1: detected capacity change from 0 to 64 [ 194.543912][ T8701] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 194.637234][ T8709] loop0: detected capacity change from 0 to 32768 [ 194.754514][ T8701] XFS (loop6): Ending clean mount [ 194.850509][ T8701] XFS (loop6): Quotacheck needed: Please wait. [ 195.156122][ T8701] XFS (loop6): Quotacheck: Done. [ 195.234761][ T8743] loop1: detected capacity change from 0 to 1024 [ 195.297228][ T8743] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 195.339727][ T8743] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 195.373567][ T8743] EXT4-fs error (device loop1): ext4_get_journal_inode:5800: inode #32: comm syz.1.1027: iget: special inode unallocated [ 195.406625][ T6552] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 195.438694][ T8743] EXT4-fs (loop1): Remounting filesystem read-only [ 195.458103][ T8743] EXT4-fs (loop1): no journal found [ 195.499469][ T8743] EXT4-fs (loop1): can't get journal size [ 195.529687][ T8743] EXT4-fs (loop1): filesystem is read-only [ 195.624305][ T8743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 195.919529][ T8757] loop0: detected capacity change from 0 to 512 [ 195.981091][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.009333][ T8757] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 196.169118][ T8757] EXT4-fs (loop0): 1 truncate cleaned up [ 196.176629][ T8757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.329527][ T8757] EXT4-fs error (device loop0): ext4_get_parent:1838: comm syz.0.1034: inode #2: comm syz.0.1034: iget: illegal inode # [ 196.527883][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 196.585159][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.594994][ T8772] loop5: detected capacity change from 0 to 256 [ 196.690917][ T9] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 196.708202][ T8720] syz.4.1021 (8720): drop_caches: 2 [ 196.730308][ T9] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 196.766809][ T9] usb 4-1: config 0 has no interface number 0 [ 196.803166][ T9] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 64 [ 196.838823][ T9] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.878717][ T9] usb 4-1: config 0 interface 52 has no altsetting 0 [ 196.903248][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 196.920743][ T9] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 196.965421][ T9] usb 4-1: Product: syz [ 196.988773][ T9] usb 4-1: SerialNumber: syz [ 197.025144][ T9] usb 4-1: config 0 descriptor?? [ 197.047576][ T8775] loop0: detected capacity change from 0 to 4096 [ 197.088936][ T8775] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 197.274510][ T9] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input7 [ 197.488996][ T2149] usb 4-1: USB disconnect, device number 6 [ 197.489113][ C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 197.679068][ T8768] loop6: detected capacity change from 0 to 32768 [ 197.730464][ T8768] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 197.783646][ T8768] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 197.865967][ T8791] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.878500][ T8791] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 197.907258][ T8791] bridge_slave_0: default FDB implementation only supports local addresses [ 198.078891][ T6552] ocfs2: Unmounting device (7,6) on (node local) [ 198.199939][ T8777] loop5: detected capacity change from 0 to 40427 [ 198.231257][ T8777] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 198.262403][ T8777] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 198.304473][ T8777] F2FS-fs (loop5): invalid crc value [ 198.534402][ T8777] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 198.582442][ T8777] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 198.596824][ T8777] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 198.779932][ T8771] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 199.235243][ T8793] loop0: detected capacity change from 0 to 32768 [ 199.285018][ T8797] loop3: detected capacity change from 0 to 32768 [ 199.332524][ T8797] non-latin1 character 0xffff found in JFS file name [ 199.357952][ T8793] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 199.390159][ T8797] mount with iocharset=utf8 to access [ 199.443900][ T8805] loop6: detected capacity change from 0 to 32768 [ 199.566993][ T8793] XFS (loop0): Ending clean mount [ 199.646144][ T8822] loop1: detected capacity change from 0 to 1024 [ 199.743930][ T8822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.835867][ T30] audit: type=1400 audit(1758847882.764:46): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8827 comm="syz.3.1060" [ 199.861514][ T8822] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 199.959180][ T8822] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 44 with max blocks 1 with error 28 [ 200.009543][ T5871] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 200.048030][ T8822] EXT4-fs (loop1): This should not happen!! Data will be lost [ 200.048030][ T8822] [ 200.128285][ T8822] EXT4-fs (loop1): Total free blocks count 0 [ 200.152749][ T8822] EXT4-fs (loop1): Free/Dirty block details [ 200.199745][ T8822] EXT4-fs (loop1): free_blocks=68451041280 [ 200.205587][ T8822] EXT4-fs (loop1): dirty_blocks=32 [ 200.279804][ T8822] EXT4-fs (loop1): Block reservation details [ 200.285807][ T8822] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 200.553813][ T5987] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 200.608297][ T8843] loop3: detected capacity change from 0 to 64 [ 200.686798][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1068'. [ 201.065610][ T8854] loop5: detected capacity change from 0 to 1024 [ 201.117242][ T8857] loop1: detected capacity change from 0 to 2048 [ 201.194444][ T8854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.237052][ T8857] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.341314][ T30] audit: type=1800 audit(1758847884.274:47): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1073" name="file2" dev="loop1" ino=1347 res=0 errno=0 [ 201.436312][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.640759][ T8847] orangefs_mount: mount request failed with -4 [ 201.929259][ T8868] [U] +ìÆH [ 202.291242][ T8849] loop0: detected capacity change from 0 to 40427 [ 202.303319][ T8849] F2FS-fs (loop0): build fault injection rate: 771 [ 202.365438][ T8849] F2FS-fs (loop0): invalid crc value [ 202.431216][ T8883] loop4: detected capacity change from 0 to 256 [ 202.591546][ T8883] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 202.686360][ T8861] loop3: detected capacity change from 0 to 40427 [ 202.739120][ T8849] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 202.794115][ T8861] F2FS-fs (loop3): invalid crc value [ 202.816129][ T8849] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 203.007623][ T8893] ptrace attach of "./syz-executor exec"[5861] was attempted by ""[8893] [ 203.117753][ T5871] syz-executor: attempt to access beyond end of device [ 203.117753][ T5871] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.197721][ T8861] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 203.233448][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 203.233476][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.233491][ T5871] Call Trace: [ 203.233500][ T5871] [ 203.233510][ T5871] dump_stack_lvl+0x189/0x250 [ 203.233548][ T5871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.233578][ T5871] ? __pfx_queue_work_on+0x10/0x10 [ 203.233602][ T5871] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 203.233627][ T5871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 203.233664][ T5871] f2fs_handle_critical_error+0x37c/0x540 [ 203.233710][ T5871] f2fs_write_end_io+0x886/0xb60 [ 203.233756][ T5871] __submit_merged_bio+0x27a/0x6a0 [ 203.233801][ T5871] __submit_merged_write_cond+0x255/0x530 [ 203.233845][ T5871] f2fs_write_data_pages+0x261d/0x3000 [ 203.233870][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.233935][ T5871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 203.233957][ T5871] ? is_bpf_text_address+0x26/0x2b0 [ 203.234008][ T5871] ? arch_stack_walk+0xfc/0x150 [ 203.234073][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.234100][ T5871] ? __lock_acquire+0xab9/0xd20 [ 203.234142][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.234169][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.234196][ T5871] ? css_rstat_updated+0x23a/0x4f0 [ 203.234234][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.234261][ T5871] ? __lock_acquire+0xab9/0xd20 [ 203.234307][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.234333][ T5871] ? do_raw_spin_lock+0x121/0x290 [ 203.234369][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.234400][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.234434][ T5871] ? do_raw_spin_unlock+0x122/0x240 [ 203.234465][ T5871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 203.234490][ T5871] do_writepages+0x32e/0x550 [ 203.234530][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.234563][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.234589][ T5871] ? do_raw_spin_unlock+0x122/0x240 [ 203.234625][ T5871] filemap_fdatawrite+0x199/0x240 [ 203.234661][ T5871] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 203.234743][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.234776][ T5871] ? do_raw_spin_unlock+0x122/0x240 [ 203.234811][ T5871] f2fs_sync_dirty_inodes+0x31f/0x830 [ 203.234857][ T5871] f2fs_write_checkpoint+0x95a/0x1df0 [ 203.234911][ T5871] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 203.234986][ T5871] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 203.235012][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.235039][ T5871] ? kfree+0x18e/0x440 [ 203.235072][ T5871] ? kill_f2fs_super+0x298/0x6c0 [ 203.235105][ T5871] kill_f2fs_super+0x2c3/0x6c0 [ 203.235138][ T5871] ? __pfx_kill_f2fs_super+0x10/0x10 [ 203.235162][ T5871] ? radix_tree_delete_item+0x2b6/0x400 [ 203.235194][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.235221][ T5871] ? shrinker_free+0x2ce/0x3e0 [ 203.235252][ T5871] deactivate_locked_super+0xbc/0x130 [ 203.235284][ T5871] cleanup_mnt+0x425/0x4c0 [ 203.235311][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.235338][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.235367][ T5871] task_work_run+0x1d4/0x260 [ 203.235405][ T5871] ? __pfx_task_work_run+0x10/0x10 [ 203.235441][ T5871] ? __x64_sys_umount+0x122/0x160 [ 203.235481][ T5871] ? exit_to_user_mode_loop+0x40/0x110 [ 203.235522][ T5871] exit_to_user_mode_loop+0xec/0x110 [ 203.235558][ T5871] do_syscall_64+0x2bd/0x3b0 [ 203.235584][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.235609][ T5871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.235631][ T5871] ? srso_alias_return_thunk+0x5/0xfbef5 [ 203.235658][ T5871] ? exc_page_fault+0x9f/0xf0 [ 203.235685][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.235708][ T5871] RIP: 0033:0x7f40231901f7 [ 203.235730][ T5871] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 203.235750][ T5871] RSP: 002b:00007fff87b417d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 203.235775][ T5871] RAX: 0000000000000000 RBX: 00007f4023211d7d RCX: 00007f40231901f7 [ 203.235792][ T5871] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff87b41890 [ 203.235807][ T5871] RBP: 00007fff87b41890 R08: 0000000000000000 R09: 0000000000000000 [ 203.235823][ T5871] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff87b42920 [ 203.235839][ T5871] R13: 00007f4023211d7d R14: 00000000000318c3 R15: 00007fff87b42960 [ 203.235877][ T5871] [ 203.235886][ T5871] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 203.432100][ T8872] loop1: detected capacity change from 0 to 32768 [ 203.634257][ T8861] F2FS-fs (loop3): Start checkpoint disabled! [ 203.784670][ T8872] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.827453][ T8914] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1096'. [ 203.836905][ T8861] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 203.886986][ T8872] XFS (loop1): Ending clean mount [ 203.937634][ T8872] XFS (loop1): Quotacheck needed: Please wait. [ 203.984842][ T8918] loop6: detected capacity change from 0 to 128 [ 204.011603][ T5952] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 204.022184][ T8918] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 204.034500][ T8872] XFS (loop1): Quotacheck: Done. [ 204.067028][ T8918] hpfs: filesystem error: improperly stopped [ 204.074271][ T8918] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 204.082945][ T8918] hpfs: You really don't want any checks? You are crazy... [ 204.092030][ T8918] hpfs: hpfs_map_sector(): read error [ 204.097397][ T8918] hpfs: code page support is disabled [ 204.113536][ T8918] hpfs: hpfs_map_4sectors(): unaligned read [ 204.132163][ T8918] hpfs: hpfs_map_4sectors(): unaligned read [ 204.141288][ T8920] netlink: 'syz.4.1098': attribute type 29 has an invalid length. [ 204.160163][ T8918] hpfs: filesystem error: unable to find root dir [ 204.171219][ T5987] kworker/u8:8: attempt to access beyond end of device [ 204.171219][ T5987] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.177009][ T8920] netlink: 'syz.4.1098': attribute type 29 has an invalid length. [ 204.206470][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.227254][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 204.227288][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.227304][ T5987] Workqueue: writeback wb_workfn (flush-7:3) [ 204.227338][ T5987] Call Trace: [ 204.227347][ T5987] [ 204.227357][ T5987] dump_stack_lvl+0x189/0x250 [ 204.227393][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.227430][ T5987] ? __pfx_queue_work_on+0x10/0x10 [ 204.227455][ T5987] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 204.227480][ T5987] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 204.227518][ T5987] f2fs_handle_critical_error+0x37c/0x540 [ 204.227563][ T5987] f2fs_write_end_io+0x886/0xb60 [ 204.227610][ T5987] __submit_merged_bio+0x27a/0x6a0 [ 204.227654][ T5987] __submit_merged_write_cond+0x255/0x530 [ 204.227698][ T5987] f2fs_write_data_pages+0x261d/0x3000 [ 204.227762][ T5987] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 204.227784][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.227830][ T5987] ? unwind_next_frame+0xa5/0x2390 [ 204.227887][ T5987] ? ret_from_fork_asm+0x1a/0x30 [ 204.227926][ T5987] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 204.227957][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.228005][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.228032][ T5987] ? __lock_acquire+0xab9/0xd20 [ 204.228081][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.228119][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.228156][ T5987] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 204.228182][ T5987] do_writepages+0x32e/0x550 [ 204.228221][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.228246][ T5987] ? reacquire_held_locks+0x127/0x1d0 [ 204.228271][ T5987] ? writeback_sb_inodes+0x384/0x1010 [ 204.228313][ T5987] __writeback_single_inode+0x145/0xff0 [ 204.228345][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.228372][ T5987] ? do_raw_spin_unlock+0x122/0x240 [ 204.228408][ T5987] writeback_sb_inodes+0x6c7/0x1010 [ 204.228449][ T5987] ? __lock_acquire+0xab9/0xd20 [ 204.228511][ T5987] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 204.228593][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.228619][ T5987] ? rcu_is_watching+0x15/0xb0 [ 204.228645][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.228683][ T5987] wb_writeback+0x43b/0xaf0 [ 204.228725][ T5987] ? queue_io+0x331/0x590 [ 204.228760][ T5987] ? __pfx_wb_writeback+0x10/0x10 [ 204.228803][ T5987] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.228832][ T5987] wb_workfn+0x409/0xef0 [ 204.228876][ T5987] ? __pfx_wb_workfn+0x10/0x10 [ 204.228907][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.228934][ T5987] ? __lock_acquire+0xab9/0xd20 [ 204.228983][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.229014][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.229046][ T5987] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.229067][ T5987] ? process_scheduled_works+0x9ef/0x17b0 [ 204.229090][ T5987] ? process_scheduled_works+0x9ef/0x17b0 [ 204.229117][ T5987] process_scheduled_works+0xae1/0x17b0 [ 204.229177][ T5987] ? __pfx_process_scheduled_works+0x10/0x10 [ 204.229211][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.229249][ T5987] worker_thread+0x8a0/0xda0 [ 204.229278][ T5987] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 204.229311][ T5987] ? __kthread_parkme+0x7b/0x200 [ 204.229349][ T5987] kthread+0x711/0x8a0 [ 204.229385][ T5987] ? __pfx_worker_thread+0x10/0x10 [ 204.229409][ T5987] ? __pfx_kthread+0x10/0x10 [ 204.229446][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.229477][ T5987] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.229499][ T5987] ? srso_alias_return_thunk+0x5/0xfbef5 [ 204.229526][ T5987] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.229550][ T5987] ? __pfx_kthread+0x10/0x10 [ 204.229582][ T5987] ret_from_fork+0x439/0x7d0 [ 204.229611][ T5987] ? __pfx_ret_from_fork+0x10/0x10 [ 204.229644][ T5987] ? __switch_to_asm+0x39/0x70 [ 204.229674][ T5987] ? __switch_to_asm+0x33/0x70 [ 204.229704][ T5987] ? __pfx_kthread+0x10/0x10 [ 204.229736][ T5987] ret_from_fork_asm+0x1a/0x30 [ 204.229788][ T5987] [ 204.244005][ T5952] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.290854][ T5857] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 204.435946][ T5987] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 204.660143][ T5952] usb 6-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 204.670204][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.689779][ T5952] usb 6-1: config 0 descriptor?? [ 204.740797][ T8924] loop0: detected capacity change from 0 to 2048 [ 204.757132][ T8924] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 204.765191][ T8924] UDF-fs: Scanning with blocksize 512 failed [ 204.834020][ T8924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.863529][ T8928] loop6: detected capacity change from 0 to 256 [ 204.894990][ T8926] loop4: detected capacity change from 0 to 512 [ 204.989163][ T8926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.014451][ T8928] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 205.040363][ T8926] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.147598][ T5952] hid (null): invalid report_count -160948754 [ 205.229996][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.247152][ T5952] megaworld 0003:07B5:0312.000A: invalid report_count -160948754 [ 205.295552][ T5952] megaworld 0003:07B5:0312.000A: item 0 4 1 9 parsing failed [ 205.329549][ T5952] megaworld 0003:07B5:0312.000A: parse failed [ 205.345854][ T5952] megaworld 0003:07B5:0312.000A: probe with driver megaworld failed with error -22 [ 205.484149][ T5952] usb 6-1: USB disconnect, device number 5 [ 205.727015][ T8945] loop4: detected capacity change from 0 to 512 [ 205.780559][ T8947] loop0: detected capacity change from 0 to 64 [ 205.893959][ T8945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.956689][ T8945] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.139874][ T8957] loop1: detected capacity change from 0 to 1024 [ 206.157603][ T8959] loop6: detected capacity change from 0 to 1024 [ 206.176113][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.205225][ T8957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 206.255462][ T8957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.469150][ T8957] EXT4-fs: can't change dax mount option while remounting [ 206.581700][ T8970] loop5: detected capacity change from 0 to 4096 [ 206.663788][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.685475][ T1138] hfsplus: b-tree write err: -5, ino 4 [ 206.692564][ T8976] loop4: detected capacity change from 0 to 1764 [ 206.851784][ T5938] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 206.918760][ T5938] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 206.926150][ T5938] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 206.998759][ T5938] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 207.049914][ T5938] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 207.057302][ T5938] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 207.138671][ T5938] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 207.178687][ T5938] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 207.185266][ T8981] loop6: detected capacity change from 0 to 8192 [ 207.212288][ T5938] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 207.245191][ T5938] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 207.344208][ T5938] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.43 Device [syz1] on syz1 [ 207.763447][ T8995] fido_id[8995]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.040802][ T9009] loop6: detected capacity change from 0 to 256 [ 208.064843][ T9011] trusted_key: encrypted_key: key user:syz not found [ 208.115223][ T9009] FAT-fs (loop6): Directory bread(block 64) failed [ 208.115261][ T9009] FAT-fs (loop6): Directory bread(block 65) failed [ 208.115350][ T9009] FAT-fs (loop6): Directory bread(block 66) failed [ 208.115378][ T9009] FAT-fs (loop6): Directory bread(block 67) failed [ 208.115462][ T9009] FAT-fs (loop6): Directory bread(block 68) failed [ 208.115491][ T9009] FAT-fs (loop6): Directory bread(block 69) failed [ 208.115577][ T9009] FAT-fs (loop6): Directory bread(block 70) failed [ 208.115605][ T9009] FAT-fs (loop6): Directory bread(block 71) failed [ 208.115694][ T9009] FAT-fs (loop6): Directory bread(block 72) failed [ 208.115722][ T9009] FAT-fs (loop6): Directory bread(block 73) failed [ 208.508130][ T9019] loop3: detected capacity change from 0 to 256 [ 208.539677][ T9019] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5658fca8, utbl_chksum : 0xe619d30d) [ 208.558384][ T8986] loop1: detected capacity change from 0 to 32768 [ 208.565471][ T9021] loop6: detected capacity change from 0 to 8 [ 208.652434][ T8986] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.841044][ T8986] XFS (loop1): Ending clean mount [ 208.845253][ T8986] XFS (loop1): Quotacheck needed: Please wait. [ 208.928104][ T8986] XFS (loop1): Quotacheck: Done. [ 209.123161][ T5857] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.529001][ T9046] loop4: detected capacity change from 0 to 1024 [ 209.680551][ T9046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.811920][ T30] audit: type=1800 audit(1758847892.744:48): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1149" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 209.825286][ T9054] syz.6.1152 uses obsolete (PF_INET,SOCK_PACKET) [ 210.210539][ T9013] loop0: detected capacity change from 0 to 40427 [ 210.268691][ T9013] F2FS-fs (loop0): build fault injection rate: 14 [ 210.269923][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.298708][ T9013] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 210.346156][ T9013] F2FS-fs (loop0): invalid crc value [ 210.393109][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 210.430934][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 210.732968][ T9067] loop1: detected capacity change from 0 to 4096 [ 210.746502][ T9013] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 210.788975][ T9013] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 210.846459][ T9073] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.868138][ T9013] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 210.920551][ T9013] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 210.942127][ T5868] Bluetooth: hci5: command 0x0405 tx timeout [ 210.948217][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 210.948802][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 210.954484][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 211.001878][ T9044] loop5: detected capacity change from 0 to 32768 [ 211.023045][ T9013] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0 [ 211.075447][ T9013] F2FS-fs (loop0): inconsistent node block, node_type:0, nid:12, node_footer[nid:12,ino:3,ofs:431041,cpver:0,blkaddr:0] [ 211.229536][ T9013] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x6a/0x1d0 [ 211.682365][ T9094] loop1: detected capacity change from 0 to 164 [ 211.767585][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 212.907675][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 213.070446][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 213.098925][ T9147] loop0: detected capacity change from 0 to 1024 [ 213.130063][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.167848][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 213.197875][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.266053][ T9153] loop5: detected capacity change from 0 to 1024 [ 213.293074][ T9] usb 2-1: config 0 descriptor?? [ 213.327695][ T9147] hfsplus: bad catalog entry type [ 213.417921][ T9155] loop6: detected capacity change from 0 to 512 [ 213.468962][ T9155] EXT4-fs (loop6): orphan cleanup on readonly fs [ 213.479243][ T9155] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 213.503635][ T1138] hfsplus: b-tree write err: -5, ino 4 [ 213.513017][ T9155] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 213.524658][ T9155] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1197: Corrupt directory, running e2fsck is recommended [ 213.617659][ T9155] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 213.690722][ T9155] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.1197: corrupted in-inode xattr: invalid ea_ino [ 213.770536][ T9155] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1197: couldn't read orphan inode 15 (err -117) [ 213.813421][ T9] elan 0003:04F3:0755.000C: failed to start in urb: -90 [ 213.851092][ T9] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 213.903679][ T9155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.058289][ T43] usb 2-1: USB disconnect, device number 6 [ 214.113544][ T9174] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1205'. [ 214.166457][ T6552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.195032][ T9168] fido_id[9168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 214.396719][ T9181] loop0: detected capacity change from 0 to 256 [ 214.438499][ T9185] syz.5.1211 (9185): /proc/9182/oom_adj is deprecated, please use /proc/9182/oom_score_adj instead. [ 214.466504][ T30] audit: type=1326 audit(1758847897.394:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 214.472597][ T9181] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 214.567194][ T30] audit: type=1326 audit(1758847897.424:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 214.605839][ T9181] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 214.681564][ T30] audit: type=1326 audit(1758847897.424:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 214.784178][ T9194] loop4: detected capacity change from 0 to 128 [ 214.808554][ T9193] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1216'. [ 214.817698][ T30] audit: type=1326 audit(1758847897.424:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 214.840043][ T9194] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 214.881527][ T9194] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 214.885811][ T30] audit: type=1326 audit(1758847897.424:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 214.958407][ T30] audit: type=1326 audit(1758847897.424:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 214.981636][ T30] audit: type=1326 audit(1758847897.424:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 215.004188][ T30] audit: type=1326 audit(1758847897.424:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9186 comm="syz.4.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3338eec9 code=0x7ffc0000 [ 215.088567][ T9197] loop5: detected capacity change from 0 to 4096 [ 215.138692][ T9197] NILFS (loop5): invalid segment: Checksum error in segment payload [ 215.179615][ T9197] NILFS (loop5): trying rollback from an earlier position [ 215.188113][ T9205] loop1: detected capacity change from 0 to 64 [ 215.274835][ T77] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.307255][ T9197] NILFS (loop5): recovery complete [ 215.320501][ T2149] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 215.331897][ T9210] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.507841][ T2149] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.558725][ T2149] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.588437][ T2149] usb 4-1: config 0 interface 0 has no altsetting 0 [ 215.628040][ T2149] usb 4-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 215.659649][ T2149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.705437][ T2149] usb 4-1: config 0 descriptor?? [ 215.940864][ T9225] loop0: detected capacity change from 0 to 512 [ 215.958552][ T9225] EXT4-fs: Ignoring removed orlov option [ 215.982838][ T9225] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 216.051552][ T9225] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1228: corrupted in-inode xattr: e_value size too large [ 216.074944][ T9225] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1228: couldn't read orphan inode 15 (err -117) [ 216.142382][ T2149] hid_parser_main: 73 callbacks suppressed [ 216.142404][ T2149] logitech 0003:046D:C283.000D: unknown main item tag 0x0 [ 216.158928][ T2149] logitech 0003:046D:C283.000D: unknown main item tag 0x0 [ 216.189314][ T2149] logitech 0003:046D:C283.000D: hidraw0: USB HID v0.00 Device [HID 046d:c283] on usb-dummy_hcd.3-1/input0 [ 216.210148][ T9225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.226060][ T2149] logitech 0003:046D:C283.000D: no inputs found [ 216.334338][ T30] audit: type=1800 audit(1758847899.254:57): pid=9225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1228" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 216.385928][ T2149] usb 4-1: USB disconnect, device number 7 [ 216.414302][ T9238] loop1: detected capacity change from 0 to 64 [ 216.512337][ T9233] fido_id[9233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 216.533281][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.602619][ T9207] loop6: detected capacity change from 0 to 32768 [ 216.701128][ T9207] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 216.812057][ T9256] loop4: detected capacity change from 0 to 1024 [ 216.856976][ T9207] XFS (loop6): Ending clean mount [ 216.947430][ T9207] XFS (loop6): Quotacheck needed: Please wait. [ 217.043620][ T9207] XFS (loop6): Quotacheck: Done. [ 217.052308][ T77] hfsplus: b-tree write err: -5, ino 4 [ 217.224622][ T9270] loop4: detected capacity change from 0 to 128 [ 217.314577][ T6552] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 217.342412][ T9270] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 217.451534][ T9273] loop1: detected capacity change from 0 to 512 [ 217.498420][ T9273] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.605329][ T9273] EXT4-fs (loop1): 1 truncate cleaned up [ 217.694207][ T9273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.742734][ T9281] loop4: detected capacity change from 0 to 164 [ 217.809345][ T9281] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 217.850059][ T9281] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 217.890044][ T9281] rock: directory entry would overflow storage [ 217.890061][ T9281] rock: sig=0x4f50, size=4, remaining=3 [ 217.890079][ T9281] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 218.620909][ T9297] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1256'. [ 218.743971][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.777707][ T9300] loop3: detected capacity change from 0 to 1764 [ 218.855205][ T30] audit: type=1800 audit(1758847901.774:58): pid=9302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1259" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 218.933668][ T9300] loop3: detected capacity change from 0 to 128 [ 218.979540][ T9300] omfs: Bad value for 'dmask' [ 219.027285][ T9306] loop0: detected capacity change from 0 to 512 [ 219.030775][ T9300] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 219.063332][ T9274] loop5: detected capacity change from 0 to 32768 [ 219.119143][ T9274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1248 (9274) [ 219.124305][ T9312] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 219.138718][ T9300] CIFS mount error: No usable UNC path provided in device string! [ 219.138718][ T9300] [ 219.159068][ T9300] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 219.193475][ T9306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.215295][ T9274] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.256474][ T9274] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 219.319394][ T9306] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.522593][ T9274] BTRFS info (device loop5): enabling ssd optimizations [ 219.548479][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.549039][ T9274] BTRFS info (device loop5): enabling free space tree [ 219.636444][ T5952] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 219.757543][ T9337] netlink: 'syz.1.1267': attribute type 1 has an invalid length. [ 219.810807][ T5952] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.819271][ T5952] usb 4-1: config 0 has no interface number 0 [ 219.825368][ T5952] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 219.868774][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.908296][ T5952] usb 4-1: config 0 descriptor?? [ 219.946900][ T5952] usb 4-1: selecting invalid altsetting 1 [ 219.964925][ T5952] dvb_ttusb_budget: ttusb_init_controller: error [ 219.984448][ T5952] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 220.191359][ T5952] DVB: Unable to find symbol cx22700_attach() [ 220.307448][ T9349] loop1: detected capacity change from 0 to 1024 [ 220.339170][ T5952] DVB: Unable to find symbol tda10046_attach() [ 220.369458][ T5952] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 220.433888][ T5952] usb 4-1: USB disconnect, device number 8 [ 220.561744][ T1138] hfsplus: bad catalog file entry [ 220.693647][ T5861] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.819508][ T9354] loop4: detected capacity change from 0 to 64 [ 220.889377][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'. [ 220.953791][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 221.003988][ T9356] netlink: 'syz.3.1274': attribute type 6 has an invalid length. [ 221.034979][ T9356] netlink: 'syz.3.1274': attribute type 5 has an invalid length. [ 221.403496][ T9368] loop1: detected capacity change from 0 to 1024 [ 221.474515][ T9368] hfsplus: bad catalog entry type [ 221.616928][ T1086] hfsplus: b-tree write err: -5, ino 4 [ 222.008741][ T2149] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 222.033559][ T9389] loop0: detected capacity change from 0 to 1024 [ 222.088767][ T5952] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 222.208099][ T2149] usb 2-1: Using ep0 maxpacket: 16 [ 222.241017][ T2149] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 222.254942][ T9389] syz.0.1289: attempt to access beyond end of device [ 222.254942][ T9389] loop0: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 222.278688][ T2149] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 222.289098][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 222.307403][ T2149] usb 2-1: Product: syz [ 222.318302][ T2149] usb 2-1: SerialNumber: syz [ 222.327637][ T5952] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.348462][ T9389] Buffer I/O error on dev loop0, logical block 2889, lost async page write [ 222.357585][ T5952] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 222.380091][ T2149] usb 2-1: config 0 descriptor?? [ 222.394340][ T5952] usb 4-1: config 0 interface 0 has no altsetting 0 [ 222.417502][ T5952] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 222.450665][ T2149] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 222.458398][ T2149] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 222.478401][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.483744][ T9365] loop4: detected capacity change from 0 to 40427 [ 222.493061][ T43] IPVS: starting estimator thread 0... [ 222.518109][ T5952] usb 4-1: config 0 descriptor?? [ 222.524201][ T2149] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 222.524570][ T9365] F2FS-fs (loop4): build fault injection rate: 690 [ 222.552130][ T2149] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 222.611559][ T9398] IPVS: using max 28 ests per chain, 67200 per kthread [ 222.621010][ T2149] usb 2-1: USB disconnect, device number 7 [ 222.655467][ T9365] F2FS-fs (loop4): invalid crc value [ 222.933470][ T9408] loop5: detected capacity change from 0 to 256 [ 222.960223][ T9408] exfat: Deprecated parameter 'utf8' [ 222.961354][ T9365] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 222.981006][ T9365] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.983754][ T5952] betop 0003:20BC:5500.000E: unbalanced collection at end of report description [ 223.000498][ T9408] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 223.040103][ T5952] betop 0003:20BC:5500.000E: parse failed [ 223.045936][ T5952] betop 0003:20BC:5500.000E: probe with driver betop failed with error -22 [ 223.226626][ T5938] usb 4-1: USB disconnect, device number 9 [ 223.324222][ T9419] autofs: Bad value for 'fd' [ 223.929986][ T5938] kernel write not supported for file /uhid (pid: 5938 comm: kworker/0:4) [ 224.099784][ T9436] random: crng reseeded on system resumption [ 224.133817][ T9438] loop4: detected capacity change from 0 to 512 [ 224.187147][ T9438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.314109][ T9438] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1302: invalid indirect mapped block 4294967295 (level 1) [ 224.343152][ T9423] loop0: detected capacity change from 0 to 32768 [ 224.394597][ T9423] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 224.437996][ T9438] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1302: invalid indirect mapped block 4294967295 (level 1) [ 224.482058][ T9427] loop1: detected capacity change from 0 to 32768 [ 224.520150][ T9438] EXT4-fs (loop4): 2 truncates cleaned up [ 224.525991][ T9423] XFS (loop0): Ending clean mount [ 224.535576][ T9438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.576947][ T9427] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 224.643496][ T9438] EXT4-fs error (device loop4): ext4_get_parent:1834: inode #11: comm syz.4.1302: bad parent inode number: 3 [ 224.687298][ T5871] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 224.757968][ T5857] ocfs2: Unmounting device (7,1) on (node local) [ 224.827457][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.689377][ T9453] loop5: detected capacity change from 0 to 32768 [ 225.743784][ T30] audit: type=1800 audit(1758847908.674:59): pid=9453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1313" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 225.978899][ T5938] IPVS: starting estimator thread 0... [ 226.098799][ T9484] IPVS: using max 27 ests per chain, 64800 per kthread [ 226.206058][ T9492] loop6: detected capacity change from 0 to 64 [ 227.117951][ T9486] loop0: detected capacity change from 0 to 32768 [ 227.146203][ T9511] loop3: detected capacity change from 0 to 256 [ 227.189825][ T9515] process 'syz.4.1342' launched './file0' with NULL argv: empty string added [ 227.203508][ T9511] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.275550][ T9486] read_mapping_page failed! [ 227.314852][ T9486] ERROR: (device loop0): txCommit: [ 227.314852][ T9486] [ 227.357772][ T9486] ERROR: (device loop0): remounting filesystem as read-only [ 227.378718][ T9486] ERROR: (device loop0): diFree: numfree > numinos [ 227.378718][ T9486] [ 227.639923][ T9517] loop5: detected capacity change from 0 to 32768 [ 227.720957][ T9517] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 227.724442][ T9519] loop1: detected capacity change from 0 to 2048 [ 227.827001][ T9531] loop3: detected capacity change from 0 to 1024 [ 227.842296][ T9517] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 [ 227.853011][ T9517] XFS (loop5): Unmount and run xfs_repair [ 227.858976][ T9517] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 227.866367][ T9517] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 20 00 XAGF.......... . [ 227.876132][ T9517] 00000010: 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 ................ [ 227.885015][ T9517] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 227.893885][ T9517] 00000030: 00 00 00 06 00 00 13 e3 00 00 13 e0 00 00 00 00 ................ [ 227.902911][ T9517] 00000040: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 227.911802][ T9517] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 227.920717][ T9517] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.929612][ T9517] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 227.938458][ T9517] XFS (loop5): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74 [ 227.948718][ T9517] XFS (loop5): Error -117 reserving per-AG metadata reserve pool. [ 227.956851][ T9517] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1f0/0x240 (fs/xfs/xfs_fsops.c:566). Shutting down filesystem. [ 227.968713][ T9519] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 227.973407][ T9517] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 227.990193][ T9517] XFS (loop5): Ending clean mount [ 227.995713][ T9517] XFS (loop5): Failed to initialize disk quotas, err -5. [ 228.033127][ T9531] hfsplus: bad catalog entry type [ 228.038784][ T9519] NILFS (loop1): mounting unchecked fs [ 228.084527][ T9519] NILFS (loop1): recovery complete [ 228.119006][ T9534] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.219642][ T6735] hfsplus: b-tree write err: -5, ino 4 [ 228.238087][ T9504] loop6: detected capacity change from 0 to 32768 [ 228.268189][ T5861] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 228.703307][ T9546] xt_policy: neither incoming nor outgoing policy selected [ 228.936739][ T9552] loop3: detected capacity change from 0 to 256 [ 229.073417][ T9552] FAT-fs (loop3): Directory bread(block 64) failed [ 229.105539][ T9552] FAT-fs (loop3): Directory bread(block 65) failed [ 229.135294][ T9552] FAT-fs (loop3): Directory bread(block 66) failed [ 229.166264][ T9552] FAT-fs (loop3): Directory bread(block 67) failed [ 229.219453][ T9552] FAT-fs (loop3): Directory bread(block 68) failed [ 229.227854][ T9552] FAT-fs (loop3): Directory bread(block 69) failed [ 229.269087][ T9552] FAT-fs (loop3): Directory bread(block 70) failed [ 229.275608][ T9552] FAT-fs (loop3): Directory bread(block 71) failed [ 229.305740][ T9561] loop4: detected capacity change from 0 to 512 [ 229.358477][ T9552] FAT-fs (loop3): Directory bread(block 72) failed [ 229.360675][ T9564] loop6: detected capacity change from 0 to 64 [ 229.372350][ T9561] EXT4-fs: Ignoring removed bh option [ 229.381771][ T9552] FAT-fs (loop3): Directory bread(block 73) failed [ 229.392827][ T9561] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 229.469251][ T9561] EXT4-fs (loop4): 1 truncate cleaned up [ 229.501127][ T9561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.638967][ T9561] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 229.802919][ T5878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.410121][ T9602] program syz.1.1378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.466698][ T9604] loop5: detected capacity change from 0 to 512 [ 230.531853][ T9604] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.628412][ T9604] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 230.671401][ T9610] loop0: detected capacity change from 0 to 64 [ 230.702769][ T9604] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 230.751136][ T9604] System zones: 0-2, 18-18, 34-34 [ 230.765060][ T9613] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 230.829917][ T9604] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.1379: inode #15: comm syz.5.1379: iget: illegal inode # [ 230.851404][ T9613] [U] J"—E:ÀÆ" [ 230.865177][ T9613] [U] ª‡Ó [ 230.910461][ T9604] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1379: couldn't read orphan inode 15 (err -117) [ 230.994238][ T9604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.143516][ T9624] loop6: detected capacity change from 0 to 256 [ 231.147888][ T9625] loop0: detected capacity change from 0 to 64 [ 231.245587][ T5861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.242259][ T9647] loop3: detected capacity change from 0 to 4096 [ 232.260949][ T9647] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 232.306200][ T9631] loop5: detected capacity change from 0 to 32768 [ 232.326503][ T9647] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 232.343517][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 232.380416][ T9631] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 232.561973][ T9631] XFS (loop5): Ending clean mount [ 232.732159][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 232.913035][ T5861] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 233.357117][ T9690] loop0: detected capacity change from 0 to 2048 [ 233.407234][ T9690] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 233.441561][ T9690] UDF-fs: Scanning with blocksize 512 failed [ 233.506065][ T9690] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.580109][ T30] audit: type=1800 audit(1758847916.514:60): pid=9690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1413" name="file2" dev="loop0" ino=819 res=0 errno=0 [ 234.047313][ T9710] loop0: detected capacity change from 0 to 128 [ 234.102065][ T9710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 234.116930][ T9710] System zones: 1-3, 19-19, 35-36 [ 234.130174][ T9710] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 234.157284][ T9710] ext4 filesystem being mounted at /257/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.195761][ T9677] loop3: detected capacity change from 0 to 32768 [ 234.245326][ T9715] sp0: Synchronizing with TNC [ 234.273535][ T9713] binder: 9711:9713 ioctl c018620c 200000000000 returned -22 [ 234.526947][ T5871] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.252533][ T5874] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 235.261969][ T5874] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 235.464320][ T9754] loop1: detected capacity change from 0 to 512 [ 235.636481][ T9758] loop0: detected capacity change from 0 to 2048 [ 235.672109][ T9758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.784382][ T9758] UDF-fs: error (device loop0): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 236.528007][ T9757] loop5: detected capacity change from 0 to 32768 [ 236.613774][ T9757] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 236.656211][ T9757] [ 236.658549][ T9757] ====================================================== [ 236.665556][ T9757] WARNING: possible circular locking dependency detected [ 236.672554][ T9757] syzkaller #0 Not tainted [ 236.676950][ T9757] ------------------------------------------------------ [ 236.683946][ T9757] syz.5.1436/9757 is trying to acquire lock: [ 236.689904][ T9757] ffff8880588abff8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720 [ 236.699217][ T9757] [ 236.699217][ T9757] but task is already holding lock: [ 236.706553][ T9757] ffff88802f8be950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 [ 236.715780][ T9757] [ 236.715780][ T9757] which lock already depends on the new lock. [ 236.715780][ T9757] [ 236.726168][ T9757] [ 236.726168][ T9757] the existing dependency chain (in reverse order) is: [ 236.735156][ T9757] [ 236.735156][ T9757] -> #4 (jbd2_handle){++++}-{0:0}: [ 236.742445][ T9757] lock_acquire+0x120/0x360 [ 236.747466][ T9757] start_this_handle+0x1fa7/0x21c0 [ 236.753089][ T9757] jbd2__journal_start+0x2c1/0x5b0 [ 236.758714][ T9757] jbd2_journal_start+0x2a/0x40 [ 236.764078][ T9757] ocfs2_start_trans+0x376/0x6d0 [ 236.769523][ T9757] ocfs2_reserve_suballoc_bits+0x711/0x4640 [ 236.775924][ T9757] ocfs2_reserve_new_metadata_blocks+0x403/0x940 [ 236.782759][ T9757] ocfs2_extend_dir+0xc76/0x4870 [ 236.788210][ T9757] ocfs2_prepare_dir_for_insert+0x2fe8/0x5450 [ 236.794788][ T9757] ocfs2_mknod+0x819/0x2050 [ 236.799798][ T9757] ocfs2_mkdir+0x191/0x440 [ 236.804722][ T9757] vfs_mkdir+0x306/0x510 [ 236.809473][ T9757] do_mkdirat+0x247/0x590 [ 236.814312][ T9757] __x64_sys_mkdirat+0x87/0xa0 [ 236.819590][ T9757] do_syscall_64+0xfa/0x3b0 [ 236.824611][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.831012][ T9757] [ 236.831012][ T9757] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 236.839518][ T9757] lock_acquire+0x120/0x360 [ 236.844538][ T9757] down_read+0x46/0x2e0 [ 236.849202][ T9757] ocfs2_start_trans+0x36a/0x6d0 [ 236.854649][ T9757] ocfs2_reserve_suballoc_bits+0x711/0x4640 [ 236.861051][ T9757] ocfs2_reserve_new_metadata_blocks+0x403/0x940 [ 236.867889][ T9757] ocfs2_extend_dir+0xc76/0x4870 [ 236.873338][ T9757] ocfs2_prepare_dir_for_insert+0x2fe8/0x5450 [ 236.879921][ T9757] ocfs2_mknod+0x819/0x2050 [ 236.884933][ T9757] ocfs2_mkdir+0x191/0x440 [ 236.889854][ T9757] vfs_mkdir+0x306/0x510 [ 236.894607][ T9757] do_mkdirat+0x247/0x590 [ 236.899445][ T9757] __x64_sys_mkdirat+0x87/0xa0 [ 236.904719][ T9757] do_syscall_64+0xfa/0x3b0 [ 236.909729][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.916127][ T9757] [ 236.916127][ T9757] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 236.923600][ T9757] lock_acquire+0x120/0x360 [ 236.928619][ T9757] ocfs2_start_trans+0x26b/0x6d0 [ 236.934065][ T9757] ocfs2_xattr_set+0xd69/0x11f0 [ 236.939426][ T9757] __vfs_setxattr+0x43c/0x480 [ 236.944616][ T9757] __vfs_setxattr_noperm+0x12d/0x660 [ 236.950413][ T9757] vfs_setxattr+0x16b/0x2f0 [ 236.955430][ T9757] filename_setxattr+0x274/0x600 [ 236.960868][ T9757] path_setxattrat+0x364/0x3a0 [ 236.966137][ T9757] __x64_sys_setxattr+0xbc/0xe0 [ 236.971488][ T9757] do_syscall_64+0xfa/0x3b0 [ 236.976497][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.982893][ T9757] [ 236.982893][ T9757] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 236.993572][ T9757] lock_acquire+0x120/0x360 [ 236.998592][ T9757] down_write+0x96/0x1f0 [ 237.003350][ T9757] ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 237.009754][ T9757] ocfs2_reserve_new_metadata_blocks+0x403/0x940 [ 237.016593][ T9757] ocfs2_init_xattr_set_ctxt+0x307/0x700 [ 237.022737][ T9757] ocfs2_xattr_set+0xb70/0x11f0 [ 237.028098][ T9757] __vfs_setxattr+0x43c/0x480 [ 237.033290][ T9757] __vfs_setxattr_noperm+0x12d/0x660 [ 237.039087][ T9757] vfs_setxattr+0x16b/0x2f0 [ 237.044104][ T9757] filename_setxattr+0x274/0x600 [ 237.049544][ T9757] path_setxattrat+0x364/0x3a0 [ 237.054816][ T9757] __x64_sys_setxattr+0xbc/0xe0 [ 237.060169][ T9757] do_syscall_64+0xfa/0x3b0 [ 237.065185][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.071582][ T9757] [ 237.071582][ T9757] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 237.079394][ T9757] validate_chain+0xb9b/0x2140 [ 237.084665][ T9757] __lock_acquire+0xab9/0xd20 [ 237.089865][ T9757] lock_acquire+0x120/0x360 [ 237.094885][ T9757] down_read+0x46/0x2e0 [ 237.099550][ T9757] ocfs2_init_acl+0x2f9/0x720 [ 237.104738][ T9757] ocfs2_mknod+0x1321/0x2050 [ 237.109833][ T9757] ocfs2_create+0x1a5/0x440 [ 237.114841][ T9757] path_openat+0x14f4/0x3830 [ 237.119942][ T9757] do_filp_open+0x1fa/0x410 [ 237.124955][ T9757] do_sys_openat2+0x121/0x1c0 [ 237.130137][ T9757] __x64_sys_openat+0x138/0x170 [ 237.135494][ T9757] do_syscall_64+0xfa/0x3b0 [ 237.140506][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.146902][ T9757] [ 237.146902][ T9757] other info that might help us debug this: [ 237.146902][ T9757] [ 237.157105][ T9757] Chain exists of: [ 237.157105][ T9757] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 237.157105][ T9757] [ 237.170832][ T9757] Possible unsafe locking scenario: [ 237.170832][ T9757] [ 237.178257][ T9757] CPU0 CPU1 [ 237.183598][ T9757] ---- ---- [ 237.188941][ T9757] rlock(jbd2_handle); [ 237.193086][ T9757] lock(&journal->j_trans_barrier); [ 237.200880][ T9757] lock(jbd2_handle); [ 237.207460][ T9757] rlock(&oi->ip_xattr_sem); [ 237.212126][ T9757] [ 237.212126][ T9757] *** DEADLOCK *** [ 237.212126][ T9757] [ 237.220247][ T9757] 8 locks held by syz.5.1436/9757: [ 237.225333][ T9757] #0: ffff8880295da428 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 237.234573][ T9757] #1: ffff8880588ac2c0 (&type->i_mutex_dir_key#13){+.+.}-{4:4}, at: path_openat+0x8da/0x3830 [ 237.244857][ T9757] #2: ffff8880500e89c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 237.258605][ T9757] #3: ffff8880588adf40 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640 [ 237.272453][ T9757] #4: ffff8880500ea640 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0 [ 237.286454][ T9757] #5: ffff8880295da618 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050 [ 237.295694][ T9757] #6: ffff8880587f00e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0 [ 237.306405][ T9757] #7: ffff88802f8be950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 [ 237.316075][ T9757] [ 237.316075][ T9757] stack backtrace: [ 237.321945][ T9757] CPU: 1 UID: 0 PID: 9757 Comm: syz.5.1436 Not tainted syzkaller #0 PREEMPT(full) [ 237.321969][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.321983][ T9757] Call Trace: [ 237.321991][ T9757] [ 237.322000][ T9757] dump_stack_lvl+0x189/0x250 [ 237.322029][ T9757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.322054][ T9757] ? __pfx__printk+0x10/0x10 [ 237.322082][ T9757] ? stack_trace_save+0x9c/0xe0 [ 237.322109][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.322139][ T9757] print_circular_bug+0x2ee/0x310 [ 237.322165][ T9757] check_noncircular+0x134/0x160 [ 237.322192][ T9757] validate_chain+0xb9b/0x2140 [ 237.322215][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.322243][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.322271][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.322298][ T9757] __lock_acquire+0xab9/0xd20 [ 237.322333][ T9757] ? ocfs2_init_acl+0x2f9/0x720 [ 237.322358][ T9757] lock_acquire+0x120/0x360 [ 237.322389][ T9757] ? ocfs2_init_acl+0x2f9/0x720 [ 237.322416][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.322442][ T9757] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 237.322478][ T9757] down_read+0x46/0x2e0 [ 237.322503][ T9757] ? ocfs2_init_acl+0x2f9/0x720 [ 237.322529][ T9757] ocfs2_init_acl+0x2f9/0x720 [ 237.322554][ T9757] ? ocfs2_mknod_locked+0x148/0x250 [ 237.322580][ T9757] ? __pfx_ocfs2_init_acl+0x10/0x10 [ 237.322604][ T9757] ? dquot_alloc_inode+0x216/0xa50 [ 237.322628][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.322652][ T9757] ? ocfs2_block_signals+0x94/0xe0 [ 237.322671][ T9757] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 237.322699][ T9757] ? ocfs2_init_security_get+0x139/0x1a0 [ 237.322731][ T9757] ocfs2_mknod+0x1321/0x2050 [ 237.322762][ T9757] ? __pfx_ocfs2_mknod+0x10/0x10 [ 237.322783][ T9757] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 237.322812][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.322836][ T9757] ? __lock_acquire+0xab9/0xd20 [ 237.322878][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.322903][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.322927][ T9757] ? look_up_lock_class+0x74/0x170 [ 237.322950][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.322974][ T9757] ? register_lock_class+0x51/0x320 [ 237.323008][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323032][ T9757] ? __lock_acquire+0xab9/0xd20 [ 237.323066][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323090][ T9757] ? __lock_acquire+0xab9/0xd20 [ 237.323125][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323149][ T9757] ? do_raw_spin_lock+0x121/0x290 [ 237.323177][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323203][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323227][ T9757] ? do_raw_spin_unlock+0x122/0x240 [ 237.323254][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323280][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323304][ T9757] ? rcu_is_watching+0x15/0xb0 [ 237.323324][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323348][ T9757] ? ocfs2_lookup+0x5b9/0x9b0 [ 237.323372][ T9757] ocfs2_create+0x1a5/0x440 [ 237.323393][ T9757] ? __pfx_ocfs2_lookup+0x10/0x10 [ 237.323413][ T9757] ? from_kgid+0x1b0/0x650 [ 237.323442][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323467][ T9757] ? __pfx_ocfs2_create+0x10/0x10 [ 237.323487][ T9757] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 237.323509][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323533][ T9757] ? inode_permission+0x149/0x470 [ 237.323553][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323577][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323601][ T9757] ? __pfx_ocfs2_create+0x10/0x10 [ 237.323622][ T9757] path_openat+0x14f4/0x3830 [ 237.323648][ T9757] ? arch_stack_walk+0xfc/0x150 [ 237.323695][ T9757] ? __pfx_path_openat+0x10/0x10 [ 237.323719][ T9757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.323751][ T9757] do_filp_open+0x1fa/0x410 [ 237.323775][ T9757] ? __lock_acquire+0xab9/0xd20 [ 237.323807][ T9757] ? __pfx_do_filp_open+0x10/0x10 [ 237.323845][ T9757] ? _raw_spin_unlock+0x28/0x50 [ 237.323862][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323886][ T9757] ? alloc_fd+0x64c/0x6c0 [ 237.323923][ T9757] do_sys_openat2+0x121/0x1c0 [ 237.323945][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.323969][ T9757] ? __se_sys_futex+0x36f/0x400 [ 237.323996][ T9757] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.324022][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.324046][ T9757] ? rcu_is_watching+0x15/0xb0 [ 237.324068][ T9757] __x64_sys_openat+0x138/0x170 [ 237.324094][ T9757] do_syscall_64+0xfa/0x3b0 [ 237.324117][ T9757] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.324139][ T9757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.324159][ T9757] ? srso_alias_return_thunk+0x5/0xfbef5 [ 237.324183][ T9757] ? exc_page_fault+0x9f/0xf0 [ 237.324204][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.324225][ T9757] RIP: 0033:0x7f05e358eec9 [ 237.324243][ T9757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.324261][ T9757] RSP: 002b:00007f05e44da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.324282][ T9757] RAX: ffffffffffffffda RBX: 00007f05e37e5fa0 RCX: 00007f05e358eec9 [ 237.324298][ T9757] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 237.324313][ T9757] RBP: 00007f05e3611f91 R08: 0000000000000000 R09: 0000000000000000 [ 237.324326][ T9757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.324339][ T9757] R13: 00007f05e37e6038 R14: 00007f05e37e5fa0 R15: 00007ffe462682e8 [ 237.324363][ T9757] [ 238.083173][ T5861] ocfs2: Unmounting device (7,5) on (node local) [ 239.338774][ T5874] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 239.347052][ T5874] Bluetooth: hci5: Injecting HCI hardware error event [ 239.354210][ T5874] Bluetooth: hci5: hardware error 0x00 [ 241.418718][ T5874] Bluetooth: hci5: Opcode 0x0c03 failed: -110