last executing test programs: 51.199189302s ago: executing program 1 (id=27): r0 = socket$inet(0x2, 0x3, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmmsg$inet(r0, &(0x7f0000005a00)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) 51.073223362s ago: executing program 1 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000cc00}, 0x0) 51.006492128s ago: executing program 1 (id=30): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) 50.975006803s ago: executing program 1 (id=31): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@usrjquota}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 50.618473452s ago: executing program 1 (id=33): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_procfs(0x0, &(0x7f0000000640)='stack\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/243, 0x13c}], 0x1, 0x4309, 0x0) 50.101660299s ago: executing program 1 (id=41): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x24000090}}], 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 49.90773487s ago: executing program 32 (id=41): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x24000090}}], 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 4.156104486s ago: executing program 0 (id=708): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 4.060509497s ago: executing program 0 (id=711): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) 3.989408051s ago: executing program 2 (id=712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c) 3.96420251s ago: executing program 0 (id=713): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) 3.863726987s ago: executing program 2 (id=716): close(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x8a, 0x31, 0x7c, 0x40, 0x545, 0x800d, 0x30a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x8e, 0xd1}}]}}]}}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)) 3.831013014s ago: executing program 0 (id=717): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) io_setup(0x8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3.674236849s ago: executing program 0 (id=721): syz_mount_image$jfs(&(0x7f0000005d40), &(0x7f0000000000)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@noquota}, {@nodiscard}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@nodiscard}, {@grpquota}]}, 0x1, 0x5d6e, &(0x7f0000005d80)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 2.974595241s ago: executing program 0 (id=723): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.495908087s ago: executing program 2 (id=727): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.657493534s ago: executing program 2 (id=740): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800280020a0002"], 0x48}}, 0x0) 1.568324988s ago: executing program 2 (id=742): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000001c0)=0xffffbf7f) 1.063025548s ago: executing program 5 (id=749): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x5, 0x2af, &(0x7f0000000340)="$eJzs3TFrE2EYAOC3SdpeO9jO4nDg4lTU2cEgFcRAoZJBXQxUQRIRkiXtYv6Ci/gb/EkO/gbp1C0S72xak7aIubtqngeSe3Nv8t17x+W+G74veXXrXffg/eDN+OvnSJI0GpFEnERsRy3qkVmZPCW/4rU4a1Q/9zLW82UjAIDran+/07woNyq3FBZi9s6r32+uRsTm+kym/aWkogAAAAAAAAAAAFiw2fH/MZo7/j8iavPG/5deMQDwty4b/8//od9vdjbz+7fzjP8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqnMyHm+NL3lUXR8AsHj6fwBYPvp/AFg+Z/r/iCv6/3p1ZQIAC/Ts+YunzVZrdz9Nk4jj0bA9bGfLLP/4SWv3bvrTdkTUsrXHw2G7fpq/l+XTaauT/Gps5vn7c/Nrced2lp/kHu21fsuvx0E5hwAAAAAAAAAAAAAAAAAAAAAqt5Oe2p6unc7v39nZ+/Tt7bx8FuW/D1CLmfn9jbjZKG03AAAAAAAAAAAAAAAAAAAA4J82ODzqdnq91/3ig4eDw6OViChoE408qBe3iU6vuJYnQRKFtDw56Iuv+WMWRHz/8Ocff/Ay4so3r3Q3Yia1Ue5JW3ww3sq+idelnhv52XLRFWOtxKsTAAAAAAAAAAAAAAAAAAAsl+ns36orAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDqTP//v7ig6n0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlsOPAAAA///TqITH") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/60, 0x3c) 923.340066ms ago: executing program 3 (id=750): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0xfea5, 0x200000000004}]) 873.169461ms ago: executing program 5 (id=752): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) poll(&(0x7f00000000c0)=[{r0, 0x1020}], 0x1, 0x3) 728.030806ms ago: executing program 3 (id=753): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) recvfrom$l2tp(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 706.005599ms ago: executing program 5 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 641.883464ms ago: executing program 4 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000f05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 554.155689ms ago: executing program 3 (id=756): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)={0x474283, 0x0, 0x14}, 0x18) 477.687181ms ago: executing program 5 (id=757): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xd1, 0x0, 0x0) 477.485297ms ago: executing program 4 (id=758): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="90da00ad", 0x4}], 0x1) 388.269819ms ago: executing program 4 (id=759): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x1d, 0x3, 0x2, 0x84000}) 380.361049ms ago: executing program 3 (id=760): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fd1010018000000000000000c00deff0b"], 0x0, 0x26}, 0x28) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) 380.144309ms ago: executing program 5 (id=761): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 305.35386ms ago: executing program 4 (id=762): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 244.931324ms ago: executing program 4 (id=763): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000140), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000640)={@id={0x2, 0x0, @a}}) 231.31369ms ago: executing program 3 (id=764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_free_batched\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 93.723227ms ago: executing program 3 (id=765): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 92.413072ms ago: executing program 2 (id=766): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setreuid(0xee01, 0xee01) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 56.446182ms ago: executing program 4 (id=767): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') r1 = socket(0x11, 0x2, 0x9b0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 0s ago: executing program 5 (id=768): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x56, 0x0, [{0xeeee8000, 0x0, &(0x7f0000000440)=""/154}]}) kernel console output (not intermixed with test programs): romiscuous mode [ 66.008802][ T5870] hsr_slave_1: entered promiscuous mode [ 66.014631][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 66.020483][ T5870] Cannot create hsr debugfs directory [ 66.026264][ T5878] Bluetooth: hci4: command tx timeout [ 66.026272][ T5871] Bluetooth: hci0: command tx timeout [ 66.036270][ T5871] Bluetooth: hci2: command tx timeout [ 66.117307][ T5871] Bluetooth: hci3: command tx timeout [ 66.210428][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.232213][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.259233][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.277985][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.324343][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.338724][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.358671][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.372914][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.405112][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.414719][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.428995][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.439383][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.493144][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.502920][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.514402][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.536431][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.595826][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.612494][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.621954][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.631548][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.654553][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.672893][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.693638][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.708092][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.715202][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.731558][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.738703][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.755764][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.766922][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.814729][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.824198][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.831430][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.841863][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.848988][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.872495][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.879800][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.913251][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.920502][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.943602][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.965085][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.988916][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.996072][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.025884][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.033257][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.090927][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.134994][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.182863][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.190004][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.259720][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.266931][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.335960][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.380169][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.411949][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.504443][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.524181][ T5864] veth0_vlan: entered promiscuous mode [ 67.569062][ T5860] veth0_vlan: entered promiscuous mode [ 67.581612][ T5864] veth1_vlan: entered promiscuous mode [ 67.623447][ T5860] veth1_vlan: entered promiscuous mode [ 67.647790][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.668410][ T5864] veth0_macvtap: entered promiscuous mode [ 67.688011][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.700387][ T5864] veth1_macvtap: entered promiscuous mode [ 67.743032][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.773313][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.799726][ T987] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.809197][ T987] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.829968][ T987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.839345][ T987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.861214][ T5860] veth0_macvtap: entered promiscuous mode [ 67.881619][ T5874] veth0_vlan: entered promiscuous mode [ 67.892458][ T5861] veth0_vlan: entered promiscuous mode [ 67.902406][ T5860] veth1_macvtap: entered promiscuous mode [ 67.915430][ T5870] veth0_vlan: entered promiscuous mode [ 67.924962][ T5874] veth1_vlan: entered promiscuous mode [ 67.941345][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.956846][ T5861] veth1_vlan: entered promiscuous mode [ 67.965539][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.995861][ T5870] veth1_vlan: entered promiscuous mode [ 68.014879][ T3544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.024142][ T3544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.027339][ T5871] Bluetooth: hci1: command tx timeout [ 68.045818][ T5861] veth0_macvtap: entered promiscuous mode [ 68.053138][ T3544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.062083][ T3544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.073439][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.083582][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.087687][ T5861] veth1_macvtap: entered promiscuous mode [ 68.113617][ T5871] Bluetooth: hci4: command tx timeout [ 68.119379][ T5871] Bluetooth: hci2: command tx timeout [ 68.124789][ T5871] Bluetooth: hci0: command tx timeout [ 68.139344][ T5874] veth0_macvtap: entered promiscuous mode [ 68.148910][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.156924][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.183616][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.187661][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.199070][ T5871] Bluetooth: hci3: command tx timeout [ 68.201348][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.209509][ T5870] veth0_macvtap: entered promiscuous mode [ 68.222829][ T5874] veth1_macvtap: entered promiscuous mode [ 68.239985][ T5870] veth1_macvtap: entered promiscuous mode [ 68.257508][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.268640][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.282845][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.293694][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.306902][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.307298][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.327549][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.329808][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.372890][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.381867][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.407674][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.439313][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.472950][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.500828][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.561536][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.587055][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.608372][ T5986] loop0: detected capacity change from 0 to 64 [ 68.641482][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.659274][ T5988] loop3: detected capacity change from 0 to 256 [ 68.673708][ T5986] hfs: unable to load codepage "ep" [ 68.685143][ T5988] exfat: Deprecated parameter 'utf8' [ 68.690120][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.712909][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.761829][ T5988] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 68.799837][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.807976][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.818714][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.892296][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.928997][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.968701][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.985362][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.991126][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.009144][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.038490][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.054869][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.114783][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.136068][ T5948] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.144803][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.289249][ T6008] loop1: detected capacity change from 0 to 256 [ 69.317264][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 69.355942][ T6008] FAT-fs (loop1): Directory bread(block 64) failed [ 69.366177][ T5948] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 69.371869][ T6008] FAT-fs (loop1): Directory bread(block 65) failed [ 69.396197][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.413459][ T6008] FAT-fs (loop1): Directory bread(block 66) failed [ 69.431496][ T6008] FAT-fs (loop1): Directory bread(block 67) failed [ 69.434943][ T5948] usb 4-1: config 0 descriptor?? [ 69.462744][ T6008] FAT-fs (loop1): Directory bread(block 68) failed [ 69.463698][ T5948] gspca_main: sq930x-2.14.0 probing 041e:403c [ 69.487904][ T6008] FAT-fs (loop1): Directory bread(block 69) failed [ 69.514866][ T6008] FAT-fs (loop1): Directory bread(block 70) failed [ 69.542935][ T6008] FAT-fs (loop1): Directory bread(block 71) failed [ 69.559879][ T6008] FAT-fs (loop1): Directory bread(block 72) failed [ 69.580056][ T6008] FAT-fs (loop1): Directory bread(block 73) failed [ 69.620976][ T6019] loop4: detected capacity change from 0 to 64 [ 69.709172][ T30] audit: type=1800 audit(1755265420.328:2): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 69.880044][ T6025] loop1: detected capacity change from 0 to 256 [ 69.915051][ T6025] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 70.107655][ T5948] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 70.113603][ T5871] Bluetooth: hci1: command tx timeout [ 70.126243][ T5948] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 70.141509][ T5948] usb 4-1: USB disconnect, device number 2 [ 70.186705][ T5871] Bluetooth: hci0: command tx timeout [ 70.192165][ T5871] Bluetooth: hci2: command tx timeout [ 70.192275][ T5878] Bluetooth: hci4: command tx timeout [ 70.235268][ T6037] raw_sendmsg: syz.1.27 forgot to set AF_INET. Fix it! [ 70.266465][ T5878] Bluetooth: hci3: command tx timeout [ 70.321048][ T6041] loop4: detected capacity change from 0 to 512 [ 70.328785][ T6041] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.377787][ T6041] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.406441][ T6047] loop1: detected capacity change from 0 to 512 [ 70.414893][ T6041] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 70.427357][ T6047] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.440040][ T6041] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.28: attempt to clear invalid blocks 2 len 1 [ 70.441052][ T6047] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.483535][ T6047] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.31: bad orphan inode 131083 [ 70.503921][ T6041] EXT4-fs (loop4): Remounting filesystem read-only [ 70.514888][ T6047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.524388][ T6041] EXT4-fs (loop4): 1 truncate cleaned up [ 70.559523][ T6041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.639677][ T6047] overlayfs: upper fs needs to support d_type. [ 70.662563][ T6021] loop2: detected capacity change from 0 to 32768 [ 70.695779][ T6041] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 70.770605][ T5861] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /7/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 70.793609][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.894203][ T6053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.914831][ T6055] loop4: detected capacity change from 0 to 1024 [ 70.991072][ T6055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.086365][ T6000] loop0: detected capacity change from 0 to 131072 [ 71.108066][ T6000] F2FS-fs (loop0): invalid crc value [ 71.130930][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.159553][ T5861] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.192644][ T987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.253071][ T6000] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 71.302499][ T6000] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 71.315303][ T987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.401808][ T987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.469386][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.475835][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.516046][ T5948] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.529277][ T987] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.667374][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 71.689018][ T5948] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 71.718455][ T5948] usb 5-1: config 0 has no interface number 0 [ 71.732423][ T5948] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 71.746139][ T987] bridge_slave_1: left allmulticast mode [ 71.751865][ T987] bridge_slave_1: left promiscuous mode [ 71.767835][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.775868][ T5948] usb 5-1: Product: syz [ 71.786976][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.799172][ T5948] usb 5-1: Manufacturer: syz [ 71.823881][ T5948] usb 5-1: SerialNumber: syz [ 71.830494][ T987] bridge_slave_0: left allmulticast mode [ 71.839392][ T5948] usb 5-1: config 0 descriptor?? [ 71.856063][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.859694][ T987] bridge_slave_0: left promiscuous mode [ 71.872876][ T5948] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 71.889750][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.941140][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.950787][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.962692][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.971255][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.981098][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.057733][ T5948] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 72.067802][ T24] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 72.087766][ T24] usb 3-1: config 0 has no interface number 0 [ 72.094016][ T24] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.105513][ T5948] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 72.121392][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 72.136032][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.144956][ T24] usb 3-1: Product: syz [ 72.149503][ T24] usb 3-1: Manufacturer: syz [ 72.154331][ T24] usb 3-1: SerialNumber: syz [ 72.169291][ T24] usb 3-1: config 0 descriptor?? [ 72.195140][ T24] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 72.267900][ T5871] Bluetooth: hci0: command tx timeout [ 72.275672][ T5871] Bluetooth: hci4: command tx timeout [ 72.281365][ T5878] Bluetooth: hci2: command tx timeout [ 72.343046][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.346599][ T5878] Bluetooth: hci3: command tx timeout [ 72.361146][ T6075] loop3: detected capacity change from 0 to 32768 [ 72.373077][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.421913][ T987] bond0 (unregistering): Released all slaves [ 72.428910][ T6075] read_mapping_page failed! [ 72.449467][ T6091] loop0: detected capacity change from 0 to 512 [ 72.470345][ T5934] usb 3-1: USB disconnect, device number 2 [ 72.492616][ T5934] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 72.502130][ T6091] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.43: casefold flag without casefold feature [ 72.517981][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 72.528407][ T5920] usb 5-1: USB disconnect, device number 2 [ 72.545304][ T6091] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.43: couldn't read orphan inode 15 (err -117) [ 72.550306][ T5920] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 72.595900][ T6091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.611386][ T112] read_mapping_page failed! [ 72.620454][ T5920] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 72.652986][ T5920] quatech2 5-1:0.51: device disconnected [ 72.689307][ T30] audit: type=1800 audit(1755265423.318:3): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.43" name="file0" dev="loop0" ino=18 res=0 errno=0 [ 72.749673][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.872882][ T987] hsr_slave_0: left promiscuous mode [ 72.883449][ T987] hsr_slave_1: left promiscuous mode [ 72.893057][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.902910][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.916907][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.930709][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.944856][ T6105] loop0: detected capacity change from 0 to 4096 [ 72.957727][ T987] veth1_macvtap: left promiscuous mode [ 72.963920][ T987] veth0_macvtap: left promiscuous mode [ 72.970883][ T987] veth1_vlan: left promiscuous mode [ 72.977567][ T987] veth0_vlan: left promiscuous mode [ 73.181661][ T6113] loop4: detected capacity change from 0 to 1024 [ 73.241549][ T6105] ntfs3(loop0): failed to convert "0000" to iso8859-1 [ 73.272192][ T6113] hfsplus: bad catalog entry type [ 73.275876][ T6105] ntfs3(loop0): failed to convert name for inode 1e. [ 73.290835][ T6105] ntfs3(loop0): ino=1f, mi_enum_attr [ 73.326292][ T6105] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 73.418896][ T13] hfsplus: b-tree write err: -5, ino 4 [ 73.675672][ T6126] loop3: detected capacity change from 0 to 4096 [ 73.740516][ T6126] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 73.753576][ T6142] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.773172][ T6126] NILFS (loop3): mounting fs with errors [ 73.837672][ T6140] loop0: detected capacity change from 0 to 4096 [ 73.892497][ T6140] ======================================================= [ 73.892497][ T6140] WARNING: The mand mount option has been deprecated and [ 73.892497][ T6140] and is ignored by this kernel. Remove the mand [ 73.892497][ T6140] option from the mount to silence this warning. [ 73.892497][ T6140] ======================================================= [ 74.018162][ T987] team0 (unregistering): Port device team_slave_1 removed [ 74.030113][ T5878] Bluetooth: hci1: command tx timeout [ 74.136951][ T987] team0 (unregistering): Port device team_slave_0 removed [ 74.332658][ T6166] loop0: detected capacity change from 0 to 256 [ 74.415724][ T6166] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 74.472249][ T6081] chnl_net:caif_netlink_parms(): no params data found [ 74.503620][ T6172] use of bytesused == 0 is deprecated and will be removed in the future, [ 74.527331][ T6172] use the actual size instead. [ 74.628310][ T6023] kernel write not supported for file /cpuinfo (pid: 6023 comm: kworker/0:6) [ 74.686064][ T5920] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.763145][ T6189] loop2: detected capacity change from 0 to 256 [ 74.853280][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.889495][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.901166][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 74.923005][ T6081] bridge_slave_0: entered allmulticast mode [ 74.929060][ T6198] mmap: syz.0.78 (6198): VmData 37470208 exceed data ulimit 2047. Update limits or use boot option ignore_rlimit_data. [ 74.930732][ T5920] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 74.949695][ T6081] bridge_slave_0: entered promiscuous mode [ 74.989624][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.999861][ T5920] usb 5-1: config 0 has no interface number 0 [ 75.009013][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.026210][ T6081] bridge_slave_1: entered allmulticast mode [ 75.039372][ T5920] usb 5-1: config 0 interface 12 has no altsetting 0 [ 75.043158][ T6081] bridge_slave_1: entered promiscuous mode [ 75.049046][ T6200] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.061600][ T6203] netlink: 260 bytes leftover after parsing attributes in process `syz.0.81'. [ 75.080193][ T5920] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 75.090359][ T5920] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 75.104623][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 75.114160][ T5920] usb 5-1: Product: syz [ 75.126703][ T5920] usb 5-1: Manufacturer: syz [ 75.131443][ T5920] usb 5-1: SerialNumber: syz [ 75.154954][ T5920] usb 5-1: config 0 descriptor?? [ 75.155617][ T6081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.186111][ T5934] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.202655][ T6081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.317654][ T6081] team0: Port device team_slave_0 added [ 75.335694][ T6081] team0: Port device team_slave_1 added [ 75.348647][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 75.366041][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 75.383321][ T5934] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 75.395633][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.408612][ T5934] usb 4-1: config 0 descriptor?? [ 75.440224][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.447317][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.475220][ T6081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.487765][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.495661][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.523678][ T6081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.647281][ T5934] usb 4-1: USB disconnect, device number 3 [ 75.653040][ T6081] hsr_slave_0: entered promiscuous mode [ 75.667908][ T6081] hsr_slave_1: entered promiscuous mode [ 75.679536][ T6081] debugfs: 'hsr0' already exists in 'hsr' [ 75.685376][ T6081] Cannot create hsr debugfs directory [ 75.777016][ T5920] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 75.794905][ T5920] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 75.805080][ T6211] loop2: detected capacity change from 0 to 32768 [ 75.820660][ T5920] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 75.829461][ T5920] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 75.838272][ T6211] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.83 (6211) [ 75.857948][ T5920] usb 5-1: USB disconnect, device number 3 [ 75.890091][ T6211] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 75.905132][ T6211] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 75.980985][ T6211] BTRFS info (device loop2): enabling ssd optimizations [ 75.997750][ T6081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.005387][ T6211] BTRFS info (device loop2): enabling free space tree [ 76.014977][ T6081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.016957][ T6211] BTRFS info (device loop2): enabling auto defrag [ 76.031508][ T6211] BTRFS info (device loop2): use lzo compression, level 0 [ 76.041350][ T6081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.050289][ T6211] BTRFS info (device loop2): max_inline set to 0 [ 76.062537][ T6081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.106161][ T5878] Bluetooth: hci1: command tx timeout [ 76.188044][ T5874] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 76.302938][ T6081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.384742][ T6081] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.419427][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.426644][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.467065][ T1211] cfg80211: failed to load regulatory.db [ 76.536657][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.543899][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.806058][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.961259][ T24] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.978423][ T6081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.992310][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 77.002377][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 77.012057][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.024028][ T24] usb 1-1: config 0 descriptor?? [ 77.103336][ T6258] loop2: detected capacity change from 0 to 40427 [ 77.154064][ T6258] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 77.267734][ T6258] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 77.278467][ T6276] loop3: detected capacity change from 0 to 32768 [ 77.302514][ T6258] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.366335][ T6276] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.460669][ T6276] XFS (loop3): Ending clean mount [ 77.476625][ T24] logitech 0003:046D:C283.0001: hidraw0: USB HID v0.04 Device [HID 046d:c283] on usb-dummy_hcd.0-1/input0 [ 77.481710][ T6081] veth0_vlan: entered promiscuous mode [ 77.496739][ T24] logitech 0003:046D:C283.0001: no inputs found [ 77.504226][ T6276] XFS (loop3): Quotacheck needed: Please wait. [ 77.541745][ T6276] XFS (loop3): Quotacheck: Done. [ 77.580062][ T6081] veth1_vlan: entered promiscuous mode [ 77.617615][ T6081] veth0_macvtap: entered promiscuous mode [ 77.628199][ T6081] veth1_macvtap: entered promiscuous mode [ 77.669340][ T5864] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.695144][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.704538][ T5920] usb 1-1: USB disconnect, device number 2 [ 77.729609][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.762861][ T78] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.790927][ T78] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.819265][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.858687][ T3544] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.909906][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.937885][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.995299][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.007959][ T6312] loop4: detected capacity change from 0 to 1024 [ 78.014574][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.024530][ T6312] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 78.096217][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 78.128795][ T6318] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 78.161023][ T6318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.189473][ T5878] Bluetooth: hci1: command tx timeout [ 78.449681][ T6336] loop2: detected capacity change from 0 to 1024 [ 78.610567][ T6346] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 79.329483][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.130'. [ 79.337946][ T6353] loop3: detected capacity change from 0 to 32768 [ 79.435385][ T6353] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.470959][ T6388] vlan2: entered promiscuous mode [ 79.509967][ T6357] loop0: detected capacity change from 0 to 32768 [ 79.517245][ T6388] ip6gretap0: entered promiscuous mode [ 79.538175][ T6365] loop4: detected capacity change from 0 to 32768 [ 79.554085][ T6365] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.123 (6365) [ 79.594658][ T6353] XFS (loop3): Ending clean mount [ 79.625331][ T6353] XFS (loop3): Quotacheck needed: Please wait. [ 79.641877][ T6357] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 79.675058][ T6365] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 79.680486][ T6353] XFS (loop3): Quotacheck: Done. [ 79.703345][ T6365] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 79.768479][ T6357] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 79.838871][ T6357] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30 [ 79.886057][ T6357] XFS (loop0): Ending clean mount [ 79.908294][ T6365] BTRFS info (device loop4): rebuilding free space tree [ 79.942201][ T5864] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.965874][ T6421] Zero length message leads to an empty skb [ 79.990701][ T6365] BTRFS info (device loop4): setting nodatasum [ 80.009055][ T6357] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1803 dinode [ 80.026649][ T6365] BTRFS info (device loop4): allowing degraded mounts [ 80.060098][ T6365] BTRFS info (device loop4): setting nodatacow [ 80.087346][ T6365] BTRFS info (device loop4): enabling ssd optimizations [ 80.088271][ T6357] XFS (loop0): Unmount and run xfs_repair [ 80.113277][ T6365] BTRFS info (device loop4): using spread ssd allocation scheme [ 80.140713][ T6357] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 80.159351][ T6365] BTRFS info (device loop4): turning off barriers [ 80.160656][ T6424] loop5: detected capacity change from 0 to 128 [ 80.176188][ T6357] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 80.182656][ T6365] BTRFS info (device loop4): enabling free space tree [ 80.194820][ T6357] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.255837][ T6365] BTRFS info (device loop4): force clearing of disk cache [ 80.255841][ T6357] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 80.255863][ T6357] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 80.286040][ T5878] Bluetooth: hci1: command tx timeout [ 80.286233][ T6357] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.377007][ T6357] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 80.429737][ T6357] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 80.453572][ T6357] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 80.463090][ T6429] warning: `syz.5.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.464527][ T6427] loop3: detected capacity change from 0 to 1764 [ 80.481655][ T6423] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1803 dinode [ 80.559881][ T6423] XFS (loop0): Unmount and run xfs_repair [ 80.582608][ T6423] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 80.598146][ T6423] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 80.640886][ T6423] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.669019][ T5870] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 80.679866][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'. [ 80.691408][ T6423] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 80.706264][ T6423] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 80.725088][ T6423] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 80.752171][ T6423] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 80.798696][ T6423] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 80.822944][ T6423] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 80.952124][ T5860] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 80.977801][ T6442] loop2: detected capacity change from 0 to 64 [ 81.019194][ T6442] hfs: request for non-existent node -129 in B*Tree [ 81.026724][ T6442] hfs: request for non-existent node -129 in B*Tree [ 81.301407][ T6452] loop0: detected capacity change from 0 to 2048 [ 81.316223][ T1211] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.371760][ T6439] loop5: detected capacity change from 0 to 32768 [ 81.373871][ T6452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.386079][ T6439] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.143 (6439) [ 81.415752][ T6439] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.446548][ T6439] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 81.517320][ T1211] usb 4-1: Using ep0 maxpacket: 16 [ 81.534673][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.553332][ T1211] usb 4-1: config 127 interface 0 has no altsetting 0 [ 81.562558][ T1211] usb 4-1: config 127 interface 1 has no altsetting 0 [ 81.573269][ T1211] usb 4-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 81.584458][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.605331][ T1211] usb 4-1: Product: syz [ 81.639019][ T6439] BTRFS info (device loop5): enabling ssd optimizations [ 81.647499][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.156'. [ 81.657310][ T1211] usb 4-1: Manufacturer: syz [ 81.659230][ T6439] BTRFS info (device loop5): turning on async discard [ 81.666313][ T1211] usb 4-1: SerialNumber: syz [ 81.675515][ T6439] BTRFS info (device loop5): enabling free space tree [ 81.690843][ T6480] netlink: 1348 bytes leftover after parsing attributes in process `syz.2.155'. [ 81.701035][ T6482] netlink: 152 bytes leftover after parsing attributes in process `syz.4.156'. [ 81.726215][ T6482] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 81.951918][ T1211] usb 4-1: unknown number of interfaces: 2 [ 81.978048][ T6081] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.992351][ T1211] usb 4-1: USB disconnect, device number 4 [ 82.110917][ T6499] tipc: Enabling of bearer rejected, failed to enable media [ 82.184144][ T6506] IPVS: Error joining to the multicast group [ 82.450729][ T6519] loop0: detected capacity change from 0 to 512 [ 82.466627][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 82.491530][ T6519] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.512726][ T6519] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 82.522041][ T6519] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 82.537754][ T6519] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.170: attempt to clear invalid blocks 2 len 1 [ 82.576213][ T6519] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.170: invalid indirect mapped block 1819239214 (level 0) [ 82.676067][ T6519] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.170: invalid indirect mapped block 1819239214 (level 1) [ 82.747474][ T6519] EXT4-fs (loop0): 1 truncate cleaned up [ 82.758192][ T6519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.765805][ T6528] loop2: detected capacity change from 0 to 2048 [ 82.799602][ T6530] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 82.807230][ T6530] [U] J"—E:ÀÆ" [ 82.846111][ T30] audit: type=1800 audit(2000000004.580:4): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.174" name="file0" dev="loop2" ino=834 res=0 errno=0 [ 82.907136][ T6519] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 82.921542][ T6519] EXT4-fs error (device loop0): __ext4_remount:6740: comm syz.0.170: Abort forced by user [ 82.983728][ T6519] EXT4-fs (loop0): Remounting filesystem read-only [ 83.003892][ T6519] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 83.012283][ T6511] loop4: detected capacity change from 0 to 32768 [ 83.039136][ T6511] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.208258][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.270020][ T6511] XFS (loop4): Ending clean mount [ 83.309768][ T6511] XFS (loop4): Quotacheck needed: Please wait. [ 83.354743][ T6511] XFS (loop4): Quotacheck: Done. [ 83.364642][ T6561] loop2: detected capacity change from 0 to 512 [ 83.393350][ T6564] loop3: detected capacity change from 0 to 1024 [ 83.407585][ T6565] loop5: detected capacity change from 0 to 1024 [ 83.444367][ T6561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.482791][ T6561] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.567946][ T6561] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.186: corrupted xattr block 33: invalid ea_ino [ 83.596709][ T5920] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 83.601940][ T5870] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.613439][ T3002] hfsplus: bad catalog file entry [ 83.629455][ T6561] EXT4-fs (loop2): Remounting filesystem read-only [ 83.664301][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.676362][ T3002] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.718241][ T3002] Quota error (device loop2): write_blk: dquota write failed [ 83.725845][ T3002] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 83.786947][ T3002] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 83.787981][ T5920] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 83.826030][ T3002] Quota error (device loop2): write_blk: dquota write failed [ 83.833451][ T3002] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 83.836476][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.874569][ T6575] loop3: detected capacity change from 0 to 4096 [ 83.882782][ T3002] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 83.887697][ T5920] usb 1-1: config 0 descriptor?? [ 83.897078][ T3002] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 83.908456][ T6575] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 83.922417][ T6577] loop5: detected capacity change from 0 to 1024 [ 83.948564][ T6575] ntfs3(loop3): ino=3, mi_enum_attr [ 84.073839][ T6575] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 84.115425][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 84.125562][ T6575] ntfs3(loop3): ino=1f, "file2" failed to open parent directory r=5 to update [ 84.153798][ T6586] tipc: Started in network mode [ 84.176765][ T6586] tipc: Node identity 3e63eb5c3fb4, cluster identity 4711 [ 84.216300][ T6586] tipc: Enabled bearer , priority 10 [ 84.229037][ T49] ntfs3(loop3): ino=1f, failed to open parent directory r=5 to update [ 84.332355][ T6593] loop3: detected capacity change from 0 to 256 [ 84.343661][ T5920] ath6kl: Unsupported hardware version: 0x0 [ 84.343941][ T5920] ath6kl: Failed to init ath6kl core: -22 [ 84.369482][ T5920] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 84.432570][ T6593] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 84.456020][ T6577] hfsplus: keylen 65060 too large [ 84.462887][ T6577] hfsplus: xattr searching failed [ 84.633020][ T6606] loop5: detected capacity change from 0 to 16 [ 84.638079][ T6605] loop3: detected capacity change from 0 to 64 [ 84.679517][ T6606] erofs (device loop5): mounted with root inode @ nid 36. [ 84.720587][ T5920] usb 1-1: USB disconnect, device number 3 [ 84.812906][ T6613] loop2: detected capacity change from 0 to 24 [ 84.823143][ T6613] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 84.840387][ T6613] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 85.071302][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.216'. [ 85.113667][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.216'. [ 85.223700][ T6636] loop3: detected capacity change from 0 to 2048 [ 85.244954][ T6640] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.284765][ T6636] overlayfs: upper fs does not support tmpfile. [ 85.294401][ T6636] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 85.304580][ T6636] overlayfs: failed to set xattr on upper [ 85.310849][ T6636] overlayfs: ...falling back to redirect_dir=nofollow. [ 85.319431][ T6636] overlayfs: ...falling back to index=off. [ 85.328869][ T6636] overlayfs: ...falling back to uuid=null. [ 85.336221][ T1211] tipc: Node number set to 30927708 [ 85.445150][ T6648] loop3: detected capacity change from 0 to 256 [ 85.456672][ T5948] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 85.472881][ T6648] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 85.638586][ T5948] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 85.656285][ T5948] usb 6-1: config 0 has no interface number 0 [ 85.664290][ T5948] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 85.676818][ T5948] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 85.688030][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 85.720002][ T5948] usb 6-1: Manufacturer: syz [ 85.726762][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 85.728692][ T5948] usb 6-1: SerialNumber: syz [ 85.770181][ T5948] usb 6-1: config 0 descriptor?? [ 85.959305][ T30] audit: type=1326 audit(2000000007.700:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6630 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a78f8ebe9 code=0x7fc00000 [ 86.119225][ T6684] capability: warning: `syz.2.242' uses deprecated v2 capabilities in a way that may be insecure [ 86.195766][ T5948] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 86.219456][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 86.236314][ T5948] usb 6-1: USB disconnect, device number 2 [ 86.266413][ T6686] nbd: socks must be embedded in a SOCK_ITEM attr [ 86.377711][ T6696] program syz.4.248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.696685][ T6676] loop3: detected capacity change from 0 to 32768 [ 86.743545][ T6676] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.240 (6676) [ 86.832538][ T6676] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 86.844422][ T6676] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 87.073192][ T6676] BTRFS info (device loop3): enabling ssd optimizations [ 87.109686][ T6676] BTRFS info (device loop3): enabling free space tree [ 87.415079][ T6676] BTRFS warning (device loop3): failed to trim 1 device(s), last error -512 [ 87.510832][ T5864] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 87.516233][ T6714] loop0: detected capacity change from 0 to 32768 [ 87.528822][ T5948] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 87.593121][ T6714] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.637799][ T6746] loop2: detected capacity change from 0 to 32768 [ 87.683025][ T6746] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 87.698913][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.773114][ T5948] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.803656][ T6746] XFS (loop2): Ending clean mount [ 87.809225][ T5948] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 87.845227][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.883029][ T6714] XFS (loop0): Ending clean mount [ 87.889545][ T5948] usb 6-1: config 0 descriptor?? [ 87.907623][ T6714] XFS (loop0): Quotacheck needed: Please wait. [ 87.977449][ T5874] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 88.004600][ T6714] XFS (loop0): Quotacheck: Done. [ 88.040668][ T6791] loop3: detected capacity change from 0 to 128 [ 88.079699][ T6791] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.155929][ T6791] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.164225][ T6796] tipc: Enabling of bearer rejected, failed to enable media [ 88.346564][ T5948] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 88.364489][ T5864] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.523166][ T5948] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 88.552054][ T6714] syz.0.255 (6714): drop_caches: 2 [ 88.560530][ T5948] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 88.595631][ T5948] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -71 [ 88.623252][ T5860] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.625364][ T6810] loop2: detected capacity change from 0 to 1024 [ 88.637293][ T5948] usb 6-1: USB disconnect, device number 3 [ 88.746271][ T1211] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.780254][ T987] hfsplus: b-tree write err: -5, ino 4 [ 88.906195][ T1211] usb 5-1: Using ep0 maxpacket: 8 [ 88.921194][ T1211] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 88.939856][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.972075][ T1211] usb 5-1: config 0 descriptor?? [ 89.189664][ T6831] loop2: detected capacity change from 0 to 4096 [ 89.351006][ T6831] ntfs3(loop2): failed to convert "0080" to macceltic [ 89.390210][ T6831] ntfs3(loop2): failed to convert name for inode 1e. [ 89.438445][ T1211] uclogic 0003:145F:0212.0003: interface is invalid, ignoring [ 89.446139][ T6831] ntfs3(loop2): ino=1f, mi_enum_attr [ 89.451470][ T6831] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 89.588360][ T6822] loop0: detected capacity change from 0 to 40427 [ 89.632657][ T6822] F2FS-fs (loop0): invalid crc value [ 89.645924][ T5948] usb 5-1: USB disconnect, device number 4 [ 89.715804][ T6822] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 89.750099][ T6822] F2FS-fs (loop0): Start checkpoint disabled! [ 89.758528][ T6822] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 89.883143][ T6860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.950639][ T987] kworker/u8:5: attempt to access beyond end of device [ 89.950639][ T987] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.004502][ T987] CPU: 0 UID: 0 PID: 987 Comm: kworker/u8:5 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 90.004531][ T987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.004542][ T987] Workqueue: writeback wb_workfn (flush-7:0) [ 90.004571][ T987] Call Trace: [ 90.004578][ T987] [ 90.004586][ T987] dump_stack_lvl+0x189/0x250 [ 90.004612][ T987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.004634][ T987] ? __pfx_queue_work_on+0x10/0x10 [ 90.004653][ T987] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 90.004679][ T987] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 90.004708][ T987] f2fs_handle_critical_error+0x37c/0x540 [ 90.004736][ T987] f2fs_write_end_io+0x886/0xb60 [ 90.004761][ T987] __submit_merged_bio+0x27a/0x6a0 [ 90.004788][ T987] __submit_merged_write_cond+0x255/0x530 [ 90.004815][ T987] f2fs_write_data_pages+0x261d/0x3000 [ 90.004857][ T987] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 90.004908][ T987] ? ret_from_fork_asm+0x1a/0x30 [ 90.004933][ T987] ? stack_trace_save+0x9c/0xe0 [ 90.004957][ T987] ? ret_from_fork_asm+0x1a/0x30 [ 90.004981][ T987] ? kasan_save_track+0x4f/0x80 [ 90.005002][ T987] ? __kasan_slab_alloc+0x6c/0x80 [ 90.005025][ T987] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 90.005047][ T987] ? __es_insert_extent+0x707/0x1790 [ 90.005069][ T987] ? ext4_es_insert_extent+0x5e3/0x3120 [ 90.005090][ T987] ? ext4_map_blocks+0xb47/0x1740 [ 90.005111][ T987] ? ext4_convert_unwritten_extents+0x2ae/0x5d0 [ 90.005131][ T987] ? ext4_convert_unwritten_io_end_vec+0xff/0x170 [ 90.005150][ T987] ? ext4_end_io_end+0xc7/0x410 [ 90.005173][ T987] ? ext4_end_io_rsv_work+0x262/0x330 [ 90.005202][ T987] ? unwind_next_frame+0xa5/0x2390 [ 90.005220][ T987] ? rcu_is_watching+0x15/0xb0 [ 90.005240][ T987] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 90.005264][ T987] do_writepages+0x32b/0x550 [ 90.005295][ T987] __writeback_single_inode+0x145/0xff0 [ 90.005316][ T987] ? do_raw_spin_unlock+0x122/0x240 [ 90.005351][ T987] writeback_sb_inodes+0x6c7/0x1010 [ 90.005385][ T987] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 90.005430][ T987] ? rcu_is_watching+0x15/0xb0 [ 90.005451][ T987] wb_writeback+0x43b/0xaf0 [ 90.005477][ T987] ? queue_io+0x3a1/0x590 [ 90.005500][ T987] ? __pfx_wb_writeback+0x10/0x10 [ 90.005526][ T987] ? rcu_is_watching+0x15/0xb0 [ 90.005546][ T987] wb_workfn+0x409/0xef0 [ 90.005570][ T987] ? __pfx_wb_workfn+0x10/0x10 [ 90.005588][ T987] ? rcu_is_watching+0x15/0xb0 [ 90.005607][ T987] ? rcu_is_watching+0x15/0xb0 [ 90.005627][ T987] ? process_scheduled_works+0x9ef/0x17b0 [ 90.005644][ T987] ? rcu_is_watching+0x15/0xb0 [ 90.005661][ T987] ? lock_acquire+0x5f/0x360 [ 90.005688][ T987] ? rcu_is_watching+0x15/0xb0 [ 90.005703][ T987] ? process_scheduled_works+0x9ef/0x17b0 [ 90.005720][ T987] ? process_scheduled_works+0x9ef/0x17b0 [ 90.005739][ T987] process_scheduled_works+0xae1/0x17b0 [ 90.005768][ T987] ? __pfx_process_scheduled_works+0x10/0x10 [ 90.005795][ T987] worker_thread+0x8a0/0xda0 [ 90.005815][ T987] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 90.005844][ T987] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 90.005870][ T987] ? __kthread_parkme+0x7b/0x200 [ 90.005893][ T987] kthread+0x711/0x8a0 [ 90.005917][ T987] ? __pfx_worker_thread+0x10/0x10 [ 90.005933][ T987] ? __pfx_kthread+0x10/0x10 [ 90.005961][ T987] ? rcu_is_watching+0x15/0xb0 [ 90.005977][ T987] ? __pfx_kthread+0x10/0x10 [ 90.005998][ T987] ret_from_fork+0x3f9/0x770 [ 90.006017][ T987] ? __pfx_ret_from_fork+0x10/0x10 [ 90.006037][ T987] ? __switch_to_asm+0x39/0x70 [ 90.006060][ T987] ? __switch_to_asm+0x33/0x70 [ 90.006081][ T987] ? __pfx_kthread+0x10/0x10 [ 90.006103][ T987] ret_from_fork_asm+0x1a/0x30 [ 90.006134][ T987] [ 90.458168][ T987] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 90.886088][ T5920] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.891174][ T6892] loop0: detected capacity change from 0 to 256 [ 90.963760][ T6895] autofs: Bad value for 'fd' [ 91.048772][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.062592][ T5920] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 91.113012][ T5920] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 91.140962][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.173295][ T5920] usb 5-1: config 0 descriptor?? [ 91.263391][ T6914] sp0: Synchronizing with TNC [ 91.595259][ T6926] loop0: detected capacity change from 0 to 1024 [ 91.603521][ T5920] ath6kl: Failed to read usb control message: -32 [ 91.614616][ T5920] ath6kl: Unable to read the bmi data from the device: -32 [ 91.623668][ T6926] EXT4-fs: Ignoring removed bh option [ 91.633821][ T5920] ath6kl: Unable to recv target info: -32 [ 91.652777][ T5920] ath6kl: Failed to init ath6kl core: -32 [ 91.666808][ T5920] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 91.690551][ T6926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.705059][ T5920] usb 5-1: USB disconnect, device number 5 [ 91.758213][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.892138][ T6937] xt_limit: Overflow, try lower: 604147548/4200216962 [ 92.081071][ T6944] loop3: detected capacity change from 0 to 256 [ 92.142846][ T6944] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 92.219538][ T6944] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 92.248069][ T6951] loop5: detected capacity change from 0 to 512 [ 92.311781][ T6951] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.329: casefold flag without casefold feature [ 92.333880][ T6951] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.329: couldn't read orphan inode 15 (err -117) [ 92.350339][ T6951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.429347][ T6081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.814982][ T6987] loop4: detected capacity change from 0 to 2048 [ 92.938377][ T30] audit: type=1800 audit(2000000014.670:6): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.347" name="file0" dev="loop4" ino=834 res=0 errno=0 [ 93.053193][ T7004] loop5: detected capacity change from 0 to 256 [ 93.158328][ T7010] netlink: 'syz.2.356': attribute type 11 has an invalid length. [ 93.380458][ T7021] loop2: detected capacity change from 0 to 64 [ 93.436128][ T5920] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 93.503275][ T6992] loop3: detected capacity change from 0 to 32768 [ 93.533705][ T6992] XFS: attr2 mount option is deprecated. [ 93.594647][ T6992] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.618934][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.637713][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.670570][ T5920] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 93.694940][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.747025][ T6992] XFS (loop3): Ending clean mount [ 93.756535][ T5920] usb 6-1: config 0 descriptor?? [ 93.762521][ T6992] XFS (loop3): Quotacheck needed: Please wait. [ 93.800617][ T6992] XFS (loop3): Quotacheck: Done. [ 93.808904][ T7024] loop4: detected capacity change from 0 to 32768 [ 93.819122][ T7024] btrfs: Deprecated parameter 'usebackuproot' [ 93.836176][ T7024] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 93.849514][ T7024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.365 (7024) [ 93.878950][ T7024] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.891654][ T7024] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 93.902820][ T5864] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.068244][ T7024] BTRFS info (device loop4): rebuilding free space tree [ 94.114007][ T7024] BTRFS info (device loop4): disabling free space tree [ 94.135169][ T7024] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.174858][ T7024] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.218933][ T7024] BTRFS info (device loop4): allowing degraded mounts [ 94.236068][ T7024] BTRFS info (device loop4): enabling ssd optimizations [ 94.253270][ T7024] BTRFS info (device loop4): turning on flush-on-commit [ 94.265482][ T7024] BTRFS info (device loop4): turning on sync discard [ 94.275818][ T7024] BTRFS info (device loop4): force clearing of disk cache [ 94.283578][ T7024] BTRFS info (device loop4): trying to use backup root at mount time [ 94.293643][ T7024] BTRFS info (device loop4): use lzo compression, level 0 [ 94.338766][ T7067] loop3: detected capacity change from 0 to 128 [ 94.373055][ T5920] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -71 [ 94.391859][ T5920] usb 6-1: USB disconnect, device number 4 [ 94.401200][ T7067] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.428967][ T7067] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.448921][ T5948] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 94.472524][ T5870] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.495310][ T5864] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.608853][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 94.620607][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 94.637772][ T5948] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 94.661553][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.687028][ T5948] usb 3-1: config 0 descriptor?? [ 94.694004][ T7062] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 94.784963][ T7082] loop4: detected capacity change from 0 to 256 [ 95.063180][ T7095] tipc: Started in network mode [ 95.069391][ T7095] tipc: Node identity 000000000000000000000f8fe474f275, cluster identity 4711 [ 95.079455][ T7095] tipc: Enabling of bearer rejected, failed to enable media [ 95.116924][ T5948] apple 0003:05AC:0264.0005: unbalanced delimiter at end of report description [ 95.151976][ T5948] apple 0003:05AC:0264.0005: parse failed [ 95.166506][ T5948] apple 0003:05AC:0264.0005: probe with driver apple failed with error -22 [ 95.178403][ T6023] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.224381][ T7104] loop4: detected capacity change from 0 to 512 [ 95.252505][ T7104] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 95.344383][ T5948] usb 3-1: USB disconnect, device number 3 [ 95.356632][ T6023] usb 4-1: Using ep0 maxpacket: 16 [ 95.363691][ T6023] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.372721][ T7108] loop4: detected capacity change from 0 to 256 [ 95.387467][ T6023] usb 4-1: config 8 has an invalid interface number: 93 but max is 0 [ 95.399229][ T6023] usb 4-1: config 8 has no interface number 0 [ 95.416070][ T6023] usb 4-1: config 8 interface 93 altsetting 3 bulk endpoint 0xD has invalid maxpacket 64 [ 95.419396][ T7108] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 95.436054][ T6023] usb 4-1: config 8 interface 93 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 95.467582][ T6023] usb 4-1: config 8 interface 93 altsetting 3 endpoint 0xA has invalid maxpacket 51373, setting to 64 [ 95.483113][ T6023] usb 4-1: config 8 interface 93 has no altsetting 0 [ 95.494687][ T6023] usb 4-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=f6.bc [ 95.504306][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.514923][ T6023] usb 4-1: Product: syz [ 95.519355][ T6023] usb 4-1: Manufacturer: syz [ 95.523972][ T6023] usb 4-1: SerialNumber: syz [ 95.537339][ T7088] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 95.587198][ T7110] capability: warning: `syz.4.392' uses 32-bit capabilities (legacy support in use) [ 95.623787][ T7106] loop5: detected capacity change from 0 to 32768 [ 95.670806][ T7106] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 95.681421][ T7106] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.755379][ T7106] XFS (loop5): Ending clean mount [ 95.768700][ T6023] sierra 4-1:8.93: Sierra USB modem converter detected [ 95.808252][ T6023] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 95.816499][ T6081] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.833947][ T6023] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 95.859791][ T6023] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 95.912747][ T6023] usb 4-1: USB disconnect, device number 5 [ 96.005116][ T7126] loop2: detected capacity change from 0 to 512 [ 96.005251][ T6023] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 96.024608][ T7126] EXT4-fs (loop2): Test dummy encryption mode enabled [ 96.048007][ T6023] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 96.057379][ T7126] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 96.069001][ T6023] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 96.079992][ T7126] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 96.098374][ T7126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.147721][ T6023] sierra 4-1:8.93: device disconnected [ 96.216719][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.422698][ T7144] loop3: detected capacity change from 0 to 512 [ 96.450829][ T7144] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.404: casefold flag without casefold feature [ 96.455143][ T7149] loop0: detected capacity change from 0 to 512 [ 96.476435][ T5920] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 96.489420][ T7144] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.404: couldn't read orphan inode 15 (err -117) [ 96.533385][ T7149] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 96.583519][ T7144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.606597][ T7149] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 96.637434][ T5920] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.649113][ T5920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.659489][ T5920] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.672422][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.679939][ T7149] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.406: iget: bad i_size value: 360287970189639680 [ 96.680794][ T5920] usb 6-1: SerialNumber: syz [ 96.701116][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.732893][ T7149] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.406: couldn't read orphan inode 15 (err -117) [ 96.757798][ T7149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.771037][ T7145] loop4: detected capacity change from 0 to 32768 [ 96.779809][ T7145] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.403 (7145) [ 96.823633][ T7145] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.835044][ T7145] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 96.871686][ T7149] EXT4-fs error (device loop0): ext4_readdir:264: inode #12: block 13: comm syz.0.406: path /67/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 96.925712][ T5920] usb 6-1: 0:2 : does not exist [ 96.956369][ T5947] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.969368][ T7145] BTRFS info (device loop4): rebuilding free space tree [ 96.988499][ T5920] usb 6-1: USB disconnect, device number 5 [ 97.003903][ T7145] BTRFS info (device loop4): allowing degraded mounts [ 97.017814][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.035287][ T7145] BTRFS info (device loop4): enabling ssd optimizations [ 97.076102][ T7145] BTRFS info (device loop4): enabling free space tree [ 97.083014][ T7145] BTRFS info (device loop4): force clearing of disk cache [ 97.112845][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.146212][ T5947] usb 3-1: Using ep0 maxpacket: 16 [ 97.151490][ T7145] BTRFS info (device loop4): use zstd compression, level 3 [ 97.174227][ T5947] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 97.183711][ T7145] BTRFS info (device loop4): max_inline set to 0 [ 97.196942][ T5947] usb 3-1: config 0 has no interface number 0 [ 97.221224][ T5947] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 97.253344][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 97.277861][ T5947] usb 3-1: Product: syz [ 97.287207][ T5947] usb 3-1: SerialNumber: syz [ 97.316883][ T5947] usb 3-1: config 0 descriptor?? [ 97.329206][ T5947] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input9 [ 97.359880][ T5870] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.483821][ T7184] loop3: detected capacity change from 0 to 8192 [ 97.552035][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 97.559340][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 97.572150][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 97.586044][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 97.593415][ T5947] usb 3-1: USB disconnect, device number 4 [ 97.599775][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 97.599798][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 97.651163][ T5947] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 97.843423][ T7194] loop3: detected capacity change from 0 to 1024 [ 97.998643][ T7179] loop0: detected capacity change from 0 to 40427 [ 98.042209][ T7179] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 98.058461][ T7179] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 98.142508][ T7196] loop5: detected capacity change from 0 to 2048 [ 98.152794][ T7186] loop4: detected capacity change from 0 to 32768 [ 98.243671][ T7206] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.276871][ T7186] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 98.296218][ T7196] CPU: 1 UID: 0 PID: 7196 Comm: syz.5.421 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 98.296248][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.296259][ T7196] Call Trace: [ 98.296266][ T7196] [ 98.296273][ T7196] dump_stack_lvl+0x189/0x250 [ 98.296300][ T7196] ? rcu_is_watching+0x15/0xb0 [ 98.296321][ T7196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.296341][ T7196] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 98.296367][ T7196] ? __asan_memset+0x22/0x50 [ 98.296388][ T7196] ? nilfs_btree_alloc_path+0x5e5/0x610 [ 98.296411][ T7196] nilfs_btree_last_key+0x491/0x620 [ 98.296434][ T7196] nilfs_bmap_last_key+0x7a/0x130 [ 98.296464][ T7196] nilfs_truncate_bmap+0xfe/0x340 [ 98.296495][ T7196] ? __pfx_nilfs_truncate_bmap+0x10/0x10 [ 98.296525][ T7196] ? nilfs_transaction_begin+0x52a/0x710 [ 98.296545][ T7196] ? __pfx_nilfs_get_block+0x10/0x10 [ 98.296570][ T7196] nilfs_truncate+0x279/0x4e0 [ 98.296597][ T7196] ? __pfx_nilfs_truncate+0x10/0x10 [ 98.296624][ T7196] ? truncate_setsize+0xcf/0xf0 [ 98.296649][ T7196] nilfs_setattr+0x206/0x2b0 [ 98.296677][ T7196] ? __pfx_nilfs_setattr+0x10/0x10 [ 98.296705][ T7196] ? try_break_deleg+0x79/0x130 [ 98.296727][ T7196] ? __pfx_nilfs_setattr+0x10/0x10 [ 98.296755][ T7196] notify_change+0xb36/0xe40 [ 98.296780][ T7196] do_truncate+0x1a4/0x220 [ 98.296806][ T7196] ? __pfx_do_truncate+0x10/0x10 [ 98.296829][ T7196] ? apparmor_file_truncate+0x23e/0x2d0 [ 98.296859][ T7196] path_openat+0x306c/0x3830 [ 98.296880][ T7196] ? arch_stack_walk+0xfc/0x150 [ 98.296915][ T7196] ? __pfx_path_openat+0x10/0x10 [ 98.296935][ T7196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.296961][ T7196] do_filp_open+0x1fa/0x410 [ 98.296983][ T7196] ? __pfx_do_filp_open+0x10/0x10 [ 98.297012][ T7196] ? _raw_spin_unlock+0x28/0x50 [ 98.297038][ T7196] ? alloc_fd+0x64c/0x6c0 [ 98.297073][ T7196] do_sys_openat2+0x121/0x1c0 [ 98.297092][ T7196] ? __se_sys_futex+0x36f/0x400 [ 98.297116][ T7196] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.297139][ T7196] ? rcu_is_watching+0x15/0xb0 [ 98.297159][ T7196] __x64_sys_creat+0x8f/0xc0 [ 98.297304][ T7196] do_syscall_64+0xfa/0x3b0 [ 98.297326][ T7196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.297344][ T7196] ? clear_bhb_loop+0x60/0xb0 [ 98.297366][ T7196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.297383][ T7196] RIP: 0033:0x7f0576b8ebe9 [ 98.297401][ T7196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.297417][ T7196] RSP: 002b:00007f0577acc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 98.297438][ T7196] RAX: ffffffffffffffda RBX: 00007f0576db5fa0 RCX: 00007f0576b8ebe9 [ 98.297450][ T7196] RDX: 0000000000000000 RSI: 0000000000000124 RDI: 0000200000000080 [ 98.297462][ T7196] RBP: 00007f0576c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 98.297474][ T7196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.297485][ T7196] R13: 00007f0576db6038 R14: 00007f0576db5fa0 R15: 00007fff5a5369f8 [ 98.297504][ T7196] [ 98.297538][ T7196] NILFS (loop5): btree level mismatch (ino=16): 1 != 3 [ 98.360931][ T7179] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 98.375900][ T7210] loop3: detected capacity change from 0 to 64 [ 98.437428][ T7196] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 98.588788][ T5870] (syz-executor,5870,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72 [ 98.642676][ T7179] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 98.663897][ T7196] Remounting filesystem read-only [ 98.665353][ T7179] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.696925][ T5870] ocfs2: Unmounting device (7,4) on (node local) [ 98.721679][ T7216] loop2: detected capacity change from 0 to 64 [ 98.736258][ T7196] NILFS (loop5): error -5 truncating bmap (ino=16) [ 98.779677][ T7216] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 98.835120][ T30] audit: type=1800 audit(2000000020.570:7): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.428" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 98.931905][ T6081] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 99.130246][ T7228] loop2: detected capacity change from 0 to 4096 [ 99.167879][ T7228] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 99.206862][ T7228] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 99.639507][ T7220] loop3: detected capacity change from 0 to 32768 [ 99.662344][ T7220] XFS: attr2 mount option is deprecated. [ 99.716087][ T7220] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 99.744621][ T7220] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.777702][ T7220] XFS (loop3): Ending clean mount [ 99.798441][ T7220] XFS (loop3): Quotacheck needed: Please wait. [ 99.855908][ T7220] XFS (loop3): Quotacheck: Done. [ 99.988871][ T5864] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.050717][ T7265] loop5: detected capacity change from 0 to 1024 [ 100.082538][ T7238] loop4: detected capacity change from 0 to 32768 [ 100.111798][ T7265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.138951][ T7241] loop2: detected capacity change from 0 to 32768 [ 100.161604][ T7238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.438 (7238) [ 100.208932][ T7241] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 100.209996][ T7238] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.261542][ T7238] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 100.294911][ T7241] XFS (loop2): Ending clean mount [ 100.322362][ T6081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.367767][ T7238] BTRFS info (device loop4): enabling ssd optimizations [ 100.438882][ T7238] BTRFS info (device loop4): enabling free space tree [ 100.457938][ T7300] netlink: 40 bytes leftover after parsing attributes in process `syz.0.452'. [ 100.515027][ T5874] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 100.638326][ T5870] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.926926][ T7319] trusted_key: encrypted_key: hex blob is missing [ 101.139219][ T7310] loop5: detected capacity change from 0 to 32768 [ 101.148106][ T7310] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.455 (7310) [ 101.196639][ T7310] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 101.227520][ T7310] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 101.381072][ T7310] BTRFS info (device loop5 state C): setting nodatasum [ 101.400873][ T7310] BTRFS info (device loop5 state C): setting nodatacow [ 101.421062][ T7310] BTRFS info (device loop5 state C): enabling ssd optimizations [ 101.436020][ T7310] BTRFS info (device loop5 state C): disabling log replay at mount time [ 101.454819][ T7310] BTRFS info (device loop5 state C): turning on flush-on-commit [ 101.474866][ T7310] BTRFS info (device loop5 state C): turning on async discard [ 101.498428][ T7310] BTRFS info (device loop5 state C): enabling free space tree [ 101.523916][ T7351] loop3: detected capacity change from 0 to 1024 [ 101.530354][ T7353] loop4: detected capacity change from 0 to 512 [ 101.536909][ T7310] BTRFS info (device loop5 state C): ignoring data csums [ 101.538453][ T7353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.590431][ T7351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.606294][ T7353] EXT4-fs (loop4): 1 truncate cleaned up [ 101.606843][ T7325] loop2: detected capacity change from 0 to 32768 [ 101.612663][ T7353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.681439][ T7351] EXT4-fs error (device loop3): ext4_lookup:1787: comm syz.3.468: inode #12: comm syz.3.468: iget: illegal inode # [ 101.727842][ T6081] BTRFS info (device loop5 state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 101.798630][ T7351] EXT4-fs (loop3): Remounting filesystem read-only [ 101.857977][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.947363][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.010022][ T7368] loop4: detected capacity change from 0 to 1024 [ 102.048109][ T7368] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 102.354669][ T7380] loop4: detected capacity change from 0 to 4096 [ 102.444408][ T7389] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.472903][ T7392] loop2: detected capacity change from 0 to 512 [ 102.492259][ T7392] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.484: inode #15: comm syz.2.484: iget: illegal inode # [ 102.545038][ T7392] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.484: couldn't read orphan inode 15 (err -117) [ 102.601037][ T7392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.646170][ T6023] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 102.660416][ T5874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.740085][ T7404] netlink: 6 bytes leftover after parsing attributes in process `syz.2.488'. [ 102.816136][ T6023] usb 6-1: Using ep0 maxpacket: 32 [ 102.825868][ T6023] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.844589][ T6023] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.855413][ T7412] loop4: detected capacity change from 0 to 47 [ 102.866143][ T6023] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 102.882505][ T6023] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 102.893686][ T6023] usb 6-1: Product: syz [ 102.898274][ T6023] usb 6-1: Manufacturer: syz [ 102.957182][ T6023] hub 6-1:4.0: USB hub found [ 103.175160][ T6023] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 103.270451][ T7430] loop4: detected capacity change from 0 to 2048 [ 103.302129][ T7430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.334083][ T7414] loop3: detected capacity change from 0 to 32768 [ 103.355319][ T7434] program syz.2.502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.389994][ T5870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.462119][ T7436] loop4: detected capacity change from 0 to 256 [ 103.517207][ T10] usb 6-1: USB disconnect, device number 6 [ 103.619777][ T7436] FAT-fs (loop4): Directory bread(block 64) failed [ 103.646555][ T7436] FAT-fs (loop4): Directory bread(block 65) failed [ 103.689176][ T7436] FAT-fs (loop4): Directory bread(block 66) failed [ 103.695759][ T7436] FAT-fs (loop4): Directory bread(block 67) failed [ 103.750804][ T7436] FAT-fs (loop4): Directory bread(block 68) failed [ 103.802414][ T7436] FAT-fs (loop4): Directory bread(block 69) failed [ 103.838282][ T7436] FAT-fs (loop4): Directory bread(block 70) failed [ 103.856125][ T7436] FAT-fs (loop4): Directory bread(block 71) failed [ 103.872325][ T7436] FAT-fs (loop4): Directory bread(block 72) failed [ 103.903406][ T7436] FAT-fs (loop4): Directory bread(block 73) failed [ 104.057891][ T7466] loop5: detected capacity change from 0 to 8 [ 104.092531][ T7466] SQUASHFS error: lzo decompression failed, data probably corrupt [ 104.103743][ T7466] SQUASHFS error: Failed to read block 0x91: -5 [ 104.145660][ T7466] SQUASHFS error: Unable to read metadata cache entry [8f] [ 104.182133][ T7466] SQUASHFS error: Unable to read inode 0x11f [ 104.248751][ T7466] loop5: detected capacity change from 0 to 8 [ 104.292891][ T7466] hpfs: hpfs_map_sector(): read error [ 104.381061][ T7478] loop3: detected capacity change from 0 to 2048 [ 104.401462][ T7482] loop4: detected capacity change from 0 to 256 [ 104.420549][ T7478] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 104.444893][ T7482] exfat: Deprecated parameter 'utf8' [ 104.495515][ T7478] syz.3.518: attempt to access beyond end of device [ 104.495515][ T7478] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 104.509614][ T7486] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.545497][ T7482] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6acc499, utbl_chksum : 0xe619d30d) [ 104.585078][ T7448] loop2: detected capacity change from 0 to 32768 [ 104.648550][ T7448] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 104.734304][ T7448] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 104.784816][ T7500] loop0: detected capacity change from 0 to 256 [ 105.008542][ T5874] ocfs2: Unmounting device (7,2) on (node local) [ 105.048854][ T7506] loop3: detected capacity change from 0 to 2048 [ 105.130653][ T7506] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 105.176516][ T7506] UDF-fs: Scanning with blocksize 512 failed [ 105.205778][ T7506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.381126][ T7526] loop4: detected capacity change from 0 to 256 [ 105.426848][ T7526] exfat: Deprecated parameter 'namecase' [ 105.477140][ T7526] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 105.691338][ T7540] loop5: detected capacity change from 0 to 1024 [ 105.793722][ T7540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.828806][ T7515] loop0: detected capacity change from 0 to 32768 [ 105.836810][ T7540] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.847369][ T7515] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.529 (7515) [ 105.871483][ T7515] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 105.907534][ T7540] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.539: lblock 3 mapped to illegal pblock 3 (length 1) [ 105.931653][ T7515] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 105.951949][ T7540] EXT4-fs (loop5): Remounting filesystem read-only [ 106.058972][ T7515] BTRFS info (device loop0): enabling ssd optimizations [ 106.072531][ T7570] loop2: detected capacity change from 0 to 64 [ 106.107599][ T7515] BTRFS info (device loop0): enabling free space tree [ 106.122652][ T6081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.190711][ T30] audit: type=1800 audit(2000000027.930:8): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.529" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 106.276766][ T5860] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 106.485598][ T7538] loop3: detected capacity change from 0 to 32768 [ 106.523152][ T7585] loop5: detected capacity change from 0 to 2048 [ 106.552852][ T7538] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.602845][ T7585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.660044][ T7592] loop4: detected capacity change from 0 to 4096 [ 106.712575][ T7538] XFS (loop3): Ending clean mount [ 106.783578][ T6081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.808919][ T7538] XFS (loop3): syz.3.538 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 106.972621][ T5864] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.129203][ T7615] program syz.4.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.256504][ T7619] loop0: detected capacity change from 0 to 4096 [ 107.265023][ T7623] loop3: detected capacity change from 0 to 256 [ 107.284365][ T7623] vfat: Unknown parameter '‰' [ 107.304151][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.558'. [ 107.309042][ T7619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.324677][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'. [ 107.509375][ T7619] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.563: corrupted inode contents [ 107.540271][ T7607] loop5: detected capacity change from 0 to 32768 [ 107.559087][ T7619] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.563: mark_inode_dirty error [ 107.580752][ T7607] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 107.613225][ T7619] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.563: corrupted inode contents [ 107.625531][ T7607] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 107.709576][ T7607] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 107.715854][ T7619] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.563: mark_inode_dirty error [ 107.732041][ T7619] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.563: corrupted inode contents [ 107.749697][ T6023] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 107.761026][ T6023] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 107.777022][ T7619] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.563: mark_inode_dirty error [ 107.810667][ T7619] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.563: corrupted inode contents [ 107.825042][ T6023] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 107.834787][ T6023] gfs2: fsid=syz:syz.0: jid=0: Done [ 107.854398][ T7619] EXT4-fs error (device loop0): ext4_truncate:4666: inode #15: comm syz.0.563: mark_inode_dirty error [ 107.866102][ T7607] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 107.881709][ T7619] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem [ 107.920817][ T7629] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.563: corrupted inode contents [ 107.971147][ T7643] loop3: detected capacity change from 0 to 2048 [ 107.989345][ T5860] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 108.005222][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.024238][ T7643] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.090182][ T7617] loop2: detected capacity change from 0 to 32768 [ 108.182000][ T7617] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.268530][ T7617] XFS (loop2): Ending clean mount [ 108.405798][ T5874] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.522066][ T7655] loop3: detected capacity change from 0 to 32768 [ 108.543476][ T7655] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.573 (7655) [ 108.589205][ T7655] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.641981][ T5867] kernel write not supported for file /dsp (pid: 5867 comm: kworker/0:3) [ 108.647379][ T7655] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 108.759014][ T7655] BTRFS info (device loop3): enabling ssd optimizations [ 108.789655][ T7655] BTRFS info (device loop3): enabling free space tree [ 108.806634][ T7638] loop4: detected capacity change from 0 to 40427 [ 108.833884][ T7638] F2FS-fs (loop4): invalid crc value [ 108.852480][ T7682] netlink: 60 bytes leftover after parsing attributes in process `syz.5.577'. [ 108.890691][ T7682] netlink: 35 bytes leftover after parsing attributes in process `syz.5.577'. [ 108.902218][ T5864] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.961109][ T7638] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 109.046577][ T7638] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 109.068099][ T7692] loop2: detected capacity change from 0 to 1024 [ 109.246669][ T5870] syz-executor: attempt to access beyond end of device [ 109.246669][ T5870] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.278880][ T49] hfsplus: b-tree write err: -5, ino 4 [ 109.303897][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: syz-executor Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 109.303927][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.303938][ T5870] Call Trace: [ 109.303945][ T5870] [ 109.303952][ T5870] dump_stack_lvl+0x189/0x250 [ 109.303982][ T5870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.304002][ T5870] ? __pfx_queue_work_on+0x10/0x10 [ 109.304022][ T5870] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 109.304049][ T5870] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.304079][ T5870] f2fs_handle_critical_error+0x37c/0x540 [ 109.304105][ T5870] f2fs_write_end_io+0x886/0xb60 [ 109.304127][ T5870] __submit_merged_bio+0x27a/0x6a0 [ 109.304153][ T5870] __submit_merged_write_cond+0x255/0x530 [ 109.304178][ T5870] f2fs_write_data_pages+0x261d/0x3000 [ 109.304215][ T5870] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.304258][ T5870] ? __mod_zone_page_state+0xd7/0x140 [ 109.304286][ T5870] ? folios_put_refs+0x560/0x640 [ 109.304310][ T5870] ? __pfx_folios_put_refs+0x10/0x10 [ 109.304337][ T5870] ? rcu_is_watching+0x15/0xb0 [ 109.304356][ T5870] ? lru_add+0xa2f/0xd80 [ 109.304374][ T5870] ? lru_add+0x198/0xd80 [ 109.304392][ T5870] ? do_raw_spin_lock+0x121/0x290 [ 109.304417][ T5870] ? do_raw_spin_unlock+0x122/0x240 [ 109.304439][ T5870] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.304466][ T5870] do_writepages+0x32b/0x550 [ 109.304488][ T5870] ? rcu_is_watching+0x15/0xb0 [ 109.304507][ T5870] ? do_raw_spin_unlock+0x122/0x240 [ 109.304530][ T5870] filemap_fdatawrite+0x199/0x240 [ 109.304553][ T5870] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 109.304590][ T5870] ? rcu_is_watching+0x15/0xb0 [ 109.304610][ T5870] ? do_raw_spin_unlock+0x122/0x240 [ 109.304633][ T5870] f2fs_sync_dirty_inodes+0x31f/0x830 [ 109.304656][ T5870] f2fs_write_checkpoint+0x95a/0x1df0 [ 109.304683][ T5870] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 109.304715][ T5870] ? kill_f2fs_super+0x298/0x6c0 [ 109.304732][ T5870] kill_f2fs_super+0x2c3/0x6c0 [ 109.304751][ T5870] ? __pfx_kill_f2fs_super+0x10/0x10 [ 109.304767][ T5870] ? radix_tree_delete_item+0x2b6/0x400 [ 109.304796][ T5870] ? shrinker_free+0x2ce/0x3e0 [ 109.304815][ T5870] deactivate_locked_super+0xbc/0x130 [ 109.304836][ T5870] cleanup_mnt+0x425/0x4c0 [ 109.304856][ T5870] task_work_run+0x1d4/0x260 [ 109.304881][ T5870] ? __pfx_task_work_run+0x10/0x10 [ 109.304908][ T5870] ? __x64_sys_umount+0x122/0x160 [ 109.304931][ T5870] ? __pfx___x64_sys_umount+0x10/0x10 [ 109.304955][ T5870] ? rcu_is_watching+0x15/0xb0 [ 109.304972][ T5870] exit_to_user_mode_loop+0xec/0x110 [ 109.304997][ T5870] do_syscall_64+0x2bd/0x3b0 [ 109.305016][ T5870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.305034][ T5870] ? clear_bhb_loop+0x60/0xb0 [ 109.305051][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.305066][ T5870] RIP: 0033:0x7fd42fd8ff17 [ 109.305082][ T5870] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 109.305096][ T5870] RSP: 002b:00007ffebe5cec38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 109.305116][ T5870] RAX: 0000000000000000 RBX: 00007fd42fe11c05 RCX: 00007fd42fd8ff17 [ 109.305130][ T5870] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebe5cecf0 [ 109.305141][ T5870] RBP: 00007ffebe5cecf0 R08: 0000000000000000 R09: 0000000000000000 [ 109.305153][ T5870] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffebe5cfd80 [ 109.305166][ T5870] R13: 00007fd42fe11c05 R14: 000000000001aa38 R15: 00007ffebe5cfdc0 [ 109.305186][ T5870] [ 109.305411][ T5870] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 109.385584][ T7707] loop2: detected capacity change from 0 to 128 [ 109.413868][ T7701] loop5: detected capacity change from 0 to 4096 [ 109.683269][ T7707] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 109.704550][ T7701] ntfs3(loop5): ino=b, mi_enum_attr [ 109.710386][ T7701] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 109.725590][ T7701] ntfs3(loop5): Failed to load $Extend (-22). [ 109.732166][ T7701] ntfs3(loop5): Failed to initialize $Extend. [ 109.970653][ T30] audit: type=1326 audit(2000000031.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.0.593" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbaf6f8ebe9 code=0x0 [ 110.373111][ T7735] loop4: detected capacity change from 0 to 4096 [ 110.406128][ T5947] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 110.426222][ T5878] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 110.428106][ T7740] process 'syz.3.602' launched '/dev/fd/3' with NULL argv: empty string added [ 110.434606][ T5878] Bluetooth: hci3: Injecting HCI hardware error event [ 110.451447][ T5871] Bluetooth: hci3: hardware error 0x00 [ 110.453476][ T7741] loop2: detected capacity change from 0 to 1024 [ 110.586329][ T5947] usb 6-1: Using ep0 maxpacket: 8 [ 110.594002][ T5947] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 110.619405][ T5947] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 110.638429][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.647817][ T5947] usb 6-1: Product: syz [ 110.678869][ T5947] usb 6-1: Manufacturer: syz [ 110.695769][ T5947] usb 6-1: SerialNumber: syz [ 110.715459][ T5947] usb 6-1: config 0 descriptor?? [ 110.729253][ T5947] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 110.740067][ T5947] usb 6-1: setting power ON [ 110.745435][ T5947] dvb-usb: bulk message failed: -22 (2/0) [ 110.774545][ T5947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.812541][ T5947] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 110.838837][ T5947] usb 6-1: media controller created [ 110.877065][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.916231][ T5947] usb 6-1: selecting invalid altsetting 6 [ 110.945126][ T5947] usb 6-1: digital interface selection failed (-22) [ 110.959023][ T7729] dvb-usb: bulk message failed: -22 (3/0) [ 110.966136][ T5920] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.966398][ T7729] dvb-usb: bulk message failed: -22 (5/0) [ 110.973691][ T5947] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 111.019846][ T5947] usb 6-1: setting power OFF [ 111.032815][ T5947] dvb-usb: bulk message failed: -22 (2/0) [ 111.045345][ T5947] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 111.069735][ T5947] (NULL device *): no alternate interface [ 111.096574][ T7767] tipc: Enabling not permitted [ 111.113730][ T5947] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 111.124066][ T7767] tipc: Enabling of bearer rejected, failed to enable media [ 111.135787][ T5947] usb 6-1: USB disconnect, device number 7 [ 111.146534][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 111.155843][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.176271][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.198269][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.216162][ T5920] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.235544][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.254356][ T5920] usb 3-1: config 0 descriptor?? [ 111.323067][ T7772] loop4: detected capacity change from 0 to 256 [ 111.435109][ T30] audit: type=1326 audit(2000000033.170:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42fd8ebe9 code=0x7ffc0000 [ 111.461928][ T30] audit: type=1326 audit(2000000033.200:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42fd8ebe9 code=0x7ffc0000 [ 111.486934][ T30] audit: type=1326 audit(2000000033.230:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd42fd8ebe9 code=0x7ffc0000 [ 111.510108][ T30] audit: type=1326 audit(2000000033.230:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42fd8ebe9 code=0x7ffc0000 [ 111.572663][ T30] audit: type=1326 audit(2000000033.230:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42fd8ebe9 code=0x7ffc0000 [ 111.598685][ T30] audit: type=1326 audit(2000000033.270:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fd42fd8ebe9 code=0x7ffc0000 [ 111.615433][ T7770] loop0: detected capacity change from 0 to 32768 [ 111.642659][ T30] audit: type=1326 audit(2000000033.270:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42fd8ebe9 code=0x7ffc0000 [ 111.669136][ T30] audit: type=1326 audit(2000000033.270:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.4.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42fd8ebe9 code=0x7ffc0000 [ 111.673189][ T5920] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.708138][ T7770] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.617 (7770) [ 111.769766][ T5920] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.791378][ T5920] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 111.798984][ T7770] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.831254][ T5920] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 111.850547][ T7770] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 111.880567][ T5920] microsoft 0003:045E:07DA.0006: no inputs found [ 111.910596][ T5920] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 111.935582][ T5920] usb 3-1: USB disconnect, device number 5 [ 111.989551][ T7786] fido_id[7786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 112.062043][ T7770] BTRFS info (device loop0): turning off barriers [ 112.077249][ T7770] BTRFS info (device loop0): enabling free space tree [ 112.084281][ T7770] BTRFS info (device loop0): use zstd compression, level 3 [ 112.172538][ T7805] loop3: detected capacity change from 0 to 4096 [ 112.228642][ T7805] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 112.290581][ T7805] ntfs3(loop3): ino=19, mi_enum_attr [ 112.303407][ T30] audit: type=1400 audit(2000000034.040:18): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7812 comm="syz.4.630" [ 112.334547][ T7805] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 112.514201][ T5871] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 112.684091][ T7829] xt_limit: Overflow, try lower: 604147548/4200216962 [ 112.789727][ T7835] loop4: detected capacity change from 0 to 128 [ 112.801787][ T7835] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 112.837834][ T7835] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.885904][ T7842] loop3: detected capacity change from 0 to 128 [ 112.941302][ T7835] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 112.982295][ T7770] BTRFS info (device loop0 state M): resize thread pool 4 -> 2097158 [ 112.990838][ T7770] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 113.002272][ T7770] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 113.014192][ T7770] BTRFS warning (device loop0 state M): remount supports changing free space tree only from RO to RW [ 113.025689][ T7770] BTRFS info (device loop0 state M): disabling log replay at mount time [ 113.028738][ T5870] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.034328][ T7770] BTRFS info (device loop0 state M): force clearing of disk cache [ 113.051212][ T7770] BTRFS info (device loop0 state M): ignoring bad roots [ 113.058881][ T7770] BTRFS info (device loop0 state M): ignoring data csums [ 113.086103][ T5920] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 113.101189][ T7770] BTRFS info (device loop0 state M): ignoring meta csums [ 113.118483][ T7770] BTRFS info (device loop0 state M): ignoring unknown super block flags [ 113.224874][ T5860] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.257546][ T5920] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 113.272732][ T5920] usb 3-1: config 0 has no interface number 0 [ 113.289757][ T5920] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 113.320554][ T5920] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 113.337334][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 113.363634][ T5920] usb 3-1: Manufacturer: syz [ 113.368751][ T5920] usb 3-1: SerialNumber: syz [ 113.387642][ T5920] usb 3-1: config 0 descriptor?? [ 113.606384][ T7854] program syz.0.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.620679][ T7844] loop4: detected capacity change from 0 to 32768 [ 113.644056][ T7844] XFS: ikeep mount option is deprecated. [ 113.693132][ T7844] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.753480][ T7844] XFS (loop4): Ending clean mount [ 113.805560][ T7870] loop3: detected capacity change from 0 to 64 [ 113.825036][ T7844] XFS (loop4): Quotacheck needed: Please wait. [ 113.827406][ T5920] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 113.836160][ T7870] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 113.846160][ T5920] usb 3-1: USB disconnect, device number 6 [ 113.865879][ T7846] loop5: detected capacity change from 0 to 40427 [ 113.900100][ T30] audit: type=1800 audit(2000000035.640:19): pid=7870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.653" name="bus" dev="loop3" ino=2 res=0 errno=0 [ 113.941441][ T7846] F2FS-fs (loop5): invalid crc value [ 113.952710][ T7844] XFS (loop4): Quotacheck: Done. [ 114.041281][ T5870] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.117087][ T7846] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 114.166650][ T7846] F2FS-fs (loop5): Start checkpoint disabled! [ 114.203313][ T7846] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 114.350421][ T13] kworker/u8:1: attempt to access beyond end of device [ 114.350421][ T13] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.385502][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 114.385533][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.385547][ T13] Workqueue: writeback wb_workfn (flush-7:5) [ 114.385579][ T13] Call Trace: [ 114.385586][ T13] [ 114.385594][ T13] dump_stack_lvl+0x189/0x250 [ 114.385623][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.385646][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 114.385666][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 114.385695][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 114.385729][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 114.385758][ T13] f2fs_write_end_io+0x886/0xb60 [ 114.385784][ T13] __submit_merged_bio+0x27a/0x6a0 [ 114.385812][ T13] __submit_merged_write_cond+0x255/0x530 [ 114.385840][ T13] f2fs_write_data_pages+0x261d/0x3000 [ 114.385884][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 114.385919][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 114.385961][ T13] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 114.385990][ T13] ? unwind_next_frame+0xa5/0x2390 [ 114.386013][ T13] ? unwind_next_frame+0xa5/0x2390 [ 114.386030][ T13] ? rcu_is_watching+0x15/0xb0 [ 114.386060][ T13] ? unwind_next_frame+0xa5/0x2390 [ 114.386084][ T13] ? unwind_next_frame+0xa5/0x2390 [ 114.386102][ T13] ? rcu_is_watching+0x15/0xb0 [ 114.386118][ T13] ? unwind_next_frame+0xa5/0x2390 [ 114.386137][ T13] ? lock_release+0x4b/0x3e0 [ 114.386161][ T13] ? unwind_next_frame+0x19ae/0x2390 [ 114.386181][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 114.386208][ T13] do_writepages+0x32b/0x550 [ 114.386232][ T13] ? unwind_next_frame+0x19ae/0x2390 [ 114.386257][ T13] __writeback_single_inode+0x145/0xff0 [ 114.386280][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 114.386303][ T13] writeback_sb_inodes+0x6c7/0x1010 [ 114.386328][ T13] ? stack_trace_save+0x9c/0xe0 [ 114.386352][ T13] ? batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 114.386384][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 114.386426][ T13] ? rcu_is_watching+0x15/0xb0 [ 114.386449][ T13] wb_writeback+0x43b/0xaf0 [ 114.386476][ T13] ? queue_io+0x3a1/0x590 [ 114.386498][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 114.386522][ T13] ? rcu_is_watching+0x15/0xb0 [ 114.386542][ T13] wb_workfn+0x409/0xef0 [ 114.386566][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 114.386584][ T13] ? rcu_is_watching+0x15/0xb0 [ 114.386601][ T13] ? rcu_is_watching+0x15/0xb0 [ 114.386620][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 114.386637][ T13] ? rcu_is_watching+0x15/0xb0 [ 114.386654][ T13] ? lock_acquire+0x5f/0x360 [ 114.386681][ T13] ? rcu_is_watching+0x15/0xb0 [ 114.386698][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 114.386715][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 114.386732][ T13] process_scheduled_works+0xae1/0x17b0 [ 114.386763][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 114.386790][ T13] worker_thread+0x8a0/0xda0 [ 114.386823][ T13] kthread+0x711/0x8a0 [ 114.386848][ T13] ? __pfx_worker_thread+0x10/0x10 [ 114.386864][ T13] ? __pfx_kthread+0x10/0x10 [ 114.386886][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.386911][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.386926][ T13] ? __pfx_kthread+0x10/0x10 [ 114.386946][ T13] ret_from_fork+0x3f9/0x770 [ 114.386965][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 114.386986][ T13] ? __switch_to_asm+0x39/0x70 [ 114.387007][ T13] ? __switch_to_asm+0x33/0x70 [ 114.387028][ T13] ? __pfx_kthread+0x10/0x10 [ 114.387058][ T13] ret_from_fork_asm+0x1a/0x30 [ 114.387086][ T13] [ 114.509692][ T7877] loop3: detected capacity change from 0 to 32768 [ 114.641230][ T7879] loop0: detected capacity change from 0 to 32768 [ 114.745325][ T13] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 114.828696][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 114.836857][ T7879] non-latin1 character 0xffff found in JFS file name [ 114.838111][ T7894] netlink: 5 bytes leftover after parsing attributes in process `syz.2.663'. [ 114.859010][ T7879] mount with iocharset=utf8 to access [ 114.873190][ T7877] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 115.117920][ T5864] ocfs2: Unmounting device (7,3) on (node local) [ 115.138412][ T7903] Bluetooth: MGMT ver 1.23 [ 115.174816][ T7897] loop2: detected capacity change from 0 to 4096 [ 115.260022][ T7897] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 115.543739][ T7917] comedi comedi3: pcmmio: a I/O base address must be specified [ 115.646153][ T5947] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.806444][ T5867] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.807640][ T5947] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 115.820378][ T7935] loop5: detected capacity change from 0 to 1024 [ 115.836850][ T5947] usb 5-1: config 0 has no interface number 0 [ 115.843041][ T5947] usb 5-1: config 0 interface 56 altsetting 114 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.856917][ T5947] usb 5-1: config 0 interface 56 altsetting 114 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.886952][ T5947] usb 5-1: config 0 interface 56 has no altsetting 0 [ 115.916073][ T5947] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 115.935492][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.961048][ T5947] usb 5-1: config 0 descriptor?? [ 115.987047][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 116.004277][ T5867] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 116.026524][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.052830][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.053087][ T7942] tipc: Enabling of bearer rejected, failed to enable media [ 116.072926][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 116.102602][ T5867] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 116.125734][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.150420][ T5867] usb 3-1: config 0 descriptor?? [ 116.158161][ T7927] loop0: detected capacity change from 0 to 32768 [ 116.191800][ T7927] syz.0.679: attempt to access beyond end of device [ 116.191800][ T7927] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 116.208961][ T7927] metapage_write_end_io: I/O error [ 116.214333][ T7927] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 116.214333][ T7927] [ 116.232101][ T7927] ERROR: (device loop0): remounting filesystem as read-only [ 116.242048][ T7927] blkno = 8ed2c, nblocks = 1 [ 116.252641][ T7927] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 116.252641][ T7927] [ 116.267078][ T7927] UFO tlock:0xffffc900028ea120 [ 116.286237][ T7927] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 116.286237][ T7927] [ 116.296882][ T7927] jfs_lookup: dtSearch returned -5 [ 116.352149][ T112] blkno = 8ed2c, nblocks = 4 [ 116.365327][ T112] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 116.365327][ T112] [ 116.379143][ T5860] syz-executor: attempt to access beyond end of device [ 116.379143][ T5860] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 116.389976][ T5947] uclogic 0003:28BD:0933.0007: interface is invalid, ignoring [ 116.395285][ T5860] metapage_write_end_io: I/O error [ 116.407012][ T5860] JFS: metapage_get_blocks failed [ 116.412146][ T5860] JFS: metapage_get_blocks failed [ 116.418071][ T5860] JFS: metapage_get_blocks failed [ 116.423192][ T5860] JFS: metapage_get_blocks failed [ 116.571518][ T5867] elecom 0003:056E:011C.0008: hidraw0: USB HID v0.00 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0 [ 116.660559][ T5947] usb 5-1: USB disconnect, device number 6 [ 116.738586][ T7962] loop3: detected capacity change from 0 to 128 [ 116.798529][ T5867] usb 3-1: USB disconnect, device number 7 [ 116.925593][ T7971] loop5: detected capacity change from 0 to 1024 [ 117.002366][ T3002] hfsplus: b-tree write err: -5, ino 4 [ 117.239922][ T7985] loop5: detected capacity change from 0 to 1024 [ 117.249686][ T7989] : entered promiscuous mode [ 117.323532][ T7985] hfsplus: bad catalog entry type [ 117.415862][ T3002] hfsplus: b-tree write err: -5, ino 4 [ 117.808332][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 117.977483][ T24] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 117.988512][ T7995] loop3: detected capacity change from 0 to 40427 [ 118.006016][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.014499][ T7995] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 118.027480][ T24] usb 3-1: config 0 descriptor?? [ 118.036505][ T7995] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 118.038311][ T24] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 118.065162][ T7995] F2FS-fs (loop3): invalid crc value [ 118.089529][ T24] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 118.211418][ T7995] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 118.255329][ T8017] loop0: detected capacity change from 0 to 32768 [ 118.265730][ T7995] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 118.289559][ T8013] loop5: detected capacity change from 0 to 32768 [ 118.313142][ T24] usb 3-1: USB disconnect, device number 8 [ 118.326338][ T7995] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 118.405860][ T8016] loop4: detected capacity change from 0 to 32768 [ 118.500642][ T8016] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.561520][ T8016] XFS (loop4): Ending clean mount [ 118.585575][ T8016] XFS (loop4): Quotacheck needed: Please wait. [ 118.614628][ T8016] XFS (loop4): Quotacheck: Done. [ 118.700590][ T5870] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.986460][ T8042] cifs: Bad value for 'port' [ 119.353370][ T8060] loop4: detected capacity change from 0 to 736 [ 119.364378][ T8053] loop5: detected capacity change from 0 to 4096 [ 119.388552][ T8053] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 119.450130][ T8053] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 119.482695][ T8053] ntfs3(loop5): Failed to load $BadClus (-22). [ 119.675252][ T8055] loop3: detected capacity change from 0 to 32768 [ 119.689346][ T8055] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.734 (8055) [ 119.735067][ T8055] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.755433][ T8068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.740'. [ 119.764243][ T8055] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 119.773476][ T8070] loop5: detected capacity change from 0 to 1024 [ 119.841197][ T8070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.883109][ T8070] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.899517][ T8055] BTRFS info (device loop3): enabling ssd optimizations [ 119.916486][ T8055] BTRFS info (device loop3): enabling free space tree [ 119.933757][ T8055] BTRFS info (device loop3): max_inline set to 4096 [ 119.972087][ T6081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.984298][ T5864] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.031997][ T8093] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 120.116615][ T6023] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 120.252458][ T8101] loop3: detected capacity change from 0 to 4096 [ 120.278881][ T8101] NILFS (loop3): invalid segment: Checksum error in segment payload [ 120.294815][ T8101] NILFS (loop3): trying rollback from an earlier position [ 120.313213][ T6023] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 120.333717][ T8105] loop5: detected capacity change from 0 to 512 [ 120.334440][ T6023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.354877][ T6023] usb 3-1: Product: syz [ 120.356045][ T8101] NILFS (loop3): recovery complete [ 120.360364][ T6023] usb 3-1: Manufacturer: syz [ 120.371350][ T8105] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 120.371616][ T6023] usb 3-1: SerialNumber: syz [ 120.384489][ T8105] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.399734][ T6023] usb 3-1: config 0 descriptor?? [ 120.575223][ T8109] loop4: detected capacity change from 0 to 2048 [ 120.590715][ T8109] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.613151][ T8112] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.722466][ T5947] usb 3-1: USB disconnect, device number 9 [ 120.728613][ T8114] dummy0: entered promiscuous mode [ 120.735339][ T8114] dummy0: left promiscuous mode [ 120.749379][ T8116] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 120.793991][ T8118] loop3: detected capacity change from 0 to 2048 [ 120.844954][ T8118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.872933][ T8118] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.933507][ T8118] EXT4-fs error (device loop3): ext4_lookup:1787: inode #13: comm syz.3.756: unexpected EA_INODE flag [ 120.990944][ T5864] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.050021][ T8130] loop5: detected capacity change from 0 to 512 [ 121.077120][ T8130] EXT4-fs: Ignoring removed i_version option [ 121.107650][ T8130] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 121.152544][ T8138] loop4: detected capacity change from 0 to 128 [ 121.156831][ T8130] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.189461][ T8130] EXT4-fs (loop5): 1 truncate cleaned up [ 121.197848][ T8130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.212610][ T8138] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.228092][ T8138] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.315743][ T8142] loop2: detected capacity change from 0 to 512 [ 121.318004][ T5870] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.332872][ T8142] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.351379][ T6081] EXT4-fs warning (device loop5): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting [ 121.366136][ T6081] ------------[ cut here ]------------ [ 121.371646][ T6081] WARNING: fs/ext4/xattr.c:1470 at ext4_xattr_inode_lookup_create+0xa85/0x1c20, CPU#0: syz-executor/6081 [ 121.377580][ T8142] EXT4-fs (loop2): 1 truncate cleaned up [ 121.384373][ T6081] Modules linked in: [ 121.392907][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz-executor Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 121.404836][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.415648][ T6081] RIP: 0010:ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 121.418341][ T8142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.423145][ T6081] Code: 8b 74 24 10 e9 d4 03 00 00 e8 87 7f 3a ff 48 89 df 48 c7 c6 d8 07 98 8d ba bd 05 00 00 48 c7 c1 80 e8 9f 8b e8 fc 25 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d [ 121.455481][ T6081] RSP: 0018:ffffc9000a92f3e0 EFLAGS: 00010246 [ 121.462083][ T6081] RAX: 51cd5d82290a3200 RBX: ffff8880799e2000 RCX: 51cd5d82290a3200 [ 121.471555][ T6081] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 121.480795][ T6081] RBP: ffffc9000a92f570 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 121.489188][ T6081] R10: dffffc0000000000 R11: ffffed10170c484b R12: 1ffff92001525e90 [ 121.497623][ T6081] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805a3fd8d0 [ 121.505629][ T6081] FS: 0000555587732500(0000) GS:ffff888125c0f000(0000) knlGS:0000000000000000 [ 121.514715][ T6081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.521351][ T6081] CR2: 00007f405870e762 CR3: 00000000291ce000 CR4: 00000000003526f0 [ 121.529434][ T6081] Call Trace: [ 121.532744][ T6081] [ 121.535703][ T6081] ? __pfx___might_resched+0x10/0x10 [ 121.541512][ T6081] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 121.548742][ T6081] ? __filemap_get_folio+0x79f/0xaf0 [ 121.554067][ T6081] ? rcu_is_watching+0x15/0xb0 [ 121.559234][ T6081] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 121.564640][ T6081] ext4_xattr_block_set+0x223/0x2ac0 [ 121.570354][ T6081] ? fs_reclaim_acquire+0x7d/0x100 [ 121.575487][ T6081] ? __pfx___might_resched+0x10/0x10 [ 121.581502][ T6081] ? __pfx_check_xattrs+0x10/0x10 [ 121.587619][ T6081] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 121.593377][ T6081] ? ext4_xattr_block_find+0x2d4/0x350 [ 121.599200][ T6081] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 121.605107][ T6081] __ext4_expand_extra_isize+0x30d/0x400 [ 121.611104][ T6081] __ext4_mark_inode_dirty+0x46c/0x700 [ 121.616906][ T6081] ext4_dirty_inode+0xd0/0x110 [ 121.621685][ T6081] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 121.627720][ T6081] __mark_inode_dirty+0x2e9/0xe10 [ 121.632770][ T6081] iput+0x1ee/0x9d0 [ 121.637111][ T6081] __dentry_kill+0x209/0x660 [ 121.641727][ T6081] ? shrink_kill+0x8d/0x2c0 [ 121.646702][ T6081] shrink_kill+0xa9/0x2c0 [ 121.651068][ T6081] shrink_dentry_list+0x2e0/0x5e0 [ 121.656447][ T6081] shrink_dcache_parent+0xa1/0x2c0 [ 121.661589][ T6081] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 121.667696][ T6081] ? rcu_is_watching+0x15/0xb0 [ 121.673297][ T6081] do_one_tree+0x23/0xe0 [ 121.678685][ T6081] shrink_dcache_for_umount+0xa0/0x170 [ 121.684171][ T6081] generic_shutdown_super+0x67/0x2c0 [ 121.689957][ T6081] kill_block_super+0x44/0x90 [ 121.694703][ T6081] ext4_kill_sb+0x68/0xb0 [ 121.699441][ T6081] deactivate_locked_super+0xbc/0x130 [ 121.704933][ T6081] cleanup_mnt+0x425/0x4c0 [ 121.709837][ T6081] task_work_run+0x1d4/0x260 [ 121.714643][ T6081] ? __pfx_task_work_run+0x10/0x10 [ 121.720121][ T6081] ? __x64_sys_umount+0x122/0x160 [ 121.725158][ T6081] ? __pfx___x64_sys_umount+0x10/0x10 [ 121.730943][ T6081] ? rcu_is_watching+0x15/0xb0 [ 121.735806][ T6081] exit_to_user_mode_loop+0xec/0x110 [ 121.741463][ T6081] do_syscall_64+0x2bd/0x3b0 [ 121.746477][ T6081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.752651][ T6081] ? clear_bhb_loop+0x60/0xb0 [ 121.757676][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.763577][ T6081] RIP: 0033:0x7f0576b8ff17 [ 121.768405][ T6081] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 121.789370][ T6081] RSP: 002b:00007fff5a535c88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 121.799047][ T6081] RAX: 0000000000000000 RBX: 00007f0576c11c05 RCX: 00007f0576b8ff17 [ 121.807524][ T6081] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5a535d40 [ 121.815524][ T6081] RBP: 00007fff5a535d40 R08: 0000000000000000 R09: 0000000000000000 [ 121.823598][ T6081] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5a536dd0 [ 121.831647][ T6081] R13: 00007f0576c11c05 R14: 000000000001d997 R15: 00007fff5a536e10 [ 121.839679][ T6081] [ 121.842718][ T6081] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.850000][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz-executor Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 121.861630][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 121.871682][ T6081] Call Trace: [ 121.874991][ T6081] [ 121.877936][ T6081] dump_stack_lvl+0x99/0x250 [ 121.882557][ T6081] ? __asan_memcpy+0x40/0x70 [ 121.887164][ T6081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.892376][ T6081] ? __pfx__printk+0x10/0x10 [ 121.896997][ T6081] vpanic+0x281/0x750 [ 121.901029][ T6081] ? __pfx_vpanic+0x10/0x10 [ 121.905548][ T6081] ? is_bpf_text_address+0x292/0x2b0 [ 121.910841][ T6081] ? is_bpf_text_address+0x26/0x2b0 [ 121.916053][ T6081] panic+0xb9/0xc0 [ 121.919813][ T6081] ? __pfx_panic+0x10/0x10 [ 121.924241][ T6081] __warn+0x334/0x4c0 [ 121.928232][ T6081] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 121.934576][ T6081] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 121.940919][ T6081] report_bug+0x2be/0x4f0 [ 121.945265][ T6081] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 121.951705][ T6081] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 121.958061][ T6081] ? ext4_xattr_inode_lookup_create+0xa87/0x1c20 [ 121.964420][ T6081] handle_bug+0x84/0x160 [ 121.968687][ T6081] exc_invalid_op+0x1a/0x50 [ 121.973282][ T6081] asm_exc_invalid_op+0x1a/0x20 [ 121.978135][ T6081] RIP: 0010:ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 121.985172][ T6081] Code: 8b 74 24 10 e9 d4 03 00 00 e8 87 7f 3a ff 48 89 df 48 c7 c6 d8 07 98 8d ba bd 05 00 00 48 c7 c1 80 e8 9f 8b e8 fc 25 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d [ 122.004785][ T6081] RSP: 0018:ffffc9000a92f3e0 EFLAGS: 00010246 [ 122.010892][ T6081] RAX: 51cd5d82290a3200 RBX: ffff8880799e2000 RCX: 51cd5d82290a3200 [ 122.018862][ T6081] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 122.026839][ T6081] RBP: ffffc9000a92f570 R08: ffff8880b8624253 R09: 1ffff110170c484a [ 122.034810][ T6081] R10: dffffc0000000000 R11: ffffed10170c484b R12: 1ffff92001525e90 [ 122.043055][ T6081] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805a3fd8d0 [ 122.051039][ T6081] ? __pfx___might_resched+0x10/0x10 [ 122.056326][ T6081] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 122.062923][ T6081] ? __filemap_get_folio+0x79f/0xaf0 [ 122.068304][ T6081] ? rcu_is_watching+0x15/0xb0 [ 122.073074][ T6081] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 122.078451][ T6081] ext4_xattr_block_set+0x223/0x2ac0 [ 122.083740][ T6081] ? fs_reclaim_acquire+0x7d/0x100 [ 122.088895][ T6081] ? __pfx___might_resched+0x10/0x10 [ 122.094192][ T6081] ? __pfx_check_xattrs+0x10/0x10 [ 122.099227][ T6081] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 122.105043][ T6081] ? ext4_xattr_block_find+0x2d4/0x350 [ 122.110512][ T6081] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 122.116447][ T6081] __ext4_expand_extra_isize+0x30d/0x400 [ 122.122083][ T6081] __ext4_mark_inode_dirty+0x46c/0x700 [ 122.127566][ T6081] ext4_dirty_inode+0xd0/0x110 [ 122.132330][ T6081] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 122.137699][ T6081] __mark_inode_dirty+0x2e9/0xe10 [ 122.142725][ T6081] iput+0x1ee/0x9d0 [ 122.146714][ T6081] __dentry_kill+0x209/0x660 [ 122.151300][ T6081] ? shrink_kill+0x8d/0x2c0 [ 122.155797][ T6081] shrink_kill+0xa9/0x2c0 [ 122.160132][ T6081] shrink_dentry_list+0x2e0/0x5e0 [ 122.165181][ T6081] shrink_dcache_parent+0xa1/0x2c0 [ 122.170296][ T6081] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 122.176100][ T6081] ? rcu_is_watching+0x15/0xb0 [ 122.180873][ T6081] do_one_tree+0x23/0xe0 [ 122.185115][ T6081] shrink_dcache_for_umount+0xa0/0x170 [ 122.190592][ T6081] generic_shutdown_super+0x67/0x2c0 [ 122.195880][ T6081] kill_block_super+0x44/0x90 [ 122.200561][ T6081] ext4_kill_sb+0x68/0xb0 [ 122.204982][ T6081] deactivate_locked_super+0xbc/0x130 [ 122.210445][ T6081] cleanup_mnt+0x425/0x4c0 [ 122.214970][ T6081] task_work_run+0x1d4/0x260 [ 122.219575][ T6081] ? __pfx_task_work_run+0x10/0x10 [ 122.224694][ T6081] ? __x64_sys_umount+0x122/0x160 [ 122.229718][ T6081] ? __pfx___x64_sys_umount+0x10/0x10 [ 122.235099][ T6081] ? rcu_is_watching+0x15/0xb0 [ 122.239864][ T6081] exit_to_user_mode_loop+0xec/0x110 [ 122.245155][ T6081] do_syscall_64+0x2bd/0x3b0 [ 122.249749][ T6081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.255811][ T6081] ? clear_bhb_loop+0x60/0xb0 [ 122.260489][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.266379][ T6081] RIP: 0033:0x7f0576b8ff17 [ 122.270797][ T6081] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 122.290574][ T6081] RSP: 002b:00007fff5a535c88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 122.299024][ T6081] RAX: 0000000000000000 RBX: 00007f0576c11c05 RCX: 00007f0576b8ff17 [ 122.307086][ T6081] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5a535d40 [ 122.315056][ T6081] RBP: 00007fff5a535d40 R08: 0000000000000000 R09: 0000000000000000 [ 122.323551][ T6081] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5a536dd0 [ 122.331526][ T6081] R13: 00007f0576c11c05 R14: 000000000001d997 R15: 00007fff5a536e10 [ 122.339507][ T6081] [ 122.342755][ T6081] Kernel Offset: disabled [ 122.347089][ T6081] Rebooting in 86400 seconds..