last executing test programs: 1m51.441674472s ago: executing program 2 (id=719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141e42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000f1000040"]) 1m51.205380485s ago: executing program 2 (id=721): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0xa04016, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x1438c2, 0x19) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 1m50.453220331s ago: executing program 2 (id=723): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0x6}, {0x0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 1m50.186315728s ago: executing program 2 (id=724): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) getdents(r0, 0xfffffffffffffffd, 0x58) 1m49.445222912s ago: executing program 2 (id=729): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "39a59f", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) 1m48.491624153s ago: executing program 2 (id=737): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000100001002abd7004ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="104e0600016a030040001280110001006272696467655f736c61766500000000280005"], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x4882) 1m47.807362379s ago: executing program 32 (id=737): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000100001002abd7004ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="104e0600016a030040001280110001006272696467655f736c61766500000000280005"], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x4882) 44.156073474s ago: executing program 4 (id=1172): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 43.967411676s ago: executing program 4 (id=1175): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x2}, 0x0, [0x100, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0xfffffffd, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x3e, 0x0, 0xfffffffe, 0x3a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3ff, 0x2, 0x0, 0x10000000, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000005, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0xfffffffffffffffe) 43.596649332s ago: executing program 4 (id=1180): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 43.227318957s ago: executing program 4 (id=1185): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000400)='./file0\x00', 0x2000002, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@mode={'mode', 0x3d, 0x8}}, {@gid}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@gid}, {@uid}, {@nostrict}, {@anchor={'anchor', 0x3d, 0xf87a}}, {@umask={'umask', 0x3d, 0x70f0}}]}, 0x1, 0xc46, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) 42.71524722s ago: executing program 4 (id=1193): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x41, 0x5510, &(0x7f0000009680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242c2, 0x65) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) truncate(&(0x7f0000000080)='./file1\x00', 0x6) 42.22137844s ago: executing program 4 (id=1195): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 41.953856847s ago: executing program 33 (id=1195): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 8.798591974s ago: executing program 1 (id=1517): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f00000004c0)={0x0, 0x12, 0x49, "de51b0cfd9a1488174e39b61b45349114efcaf6486fd56acd9f4277bcd3ecb59828541620d7f9ac36c348c1e5d948f9e2488c731ca149c2c9e343ad6272306f35c2f31805c4ed3f566"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.881189949s ago: executing program 1 (id=1547): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000280)={0x0, 0x1, 0x8}) 6.694702693s ago: executing program 1 (id=1549): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x1, @remote}, {0x2, 0xfff9, 0xc00, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, r1, 0x5}}, 0x48) 6.469243087s ago: executing program 1 (id=1551): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f00000002c0)={[{@file_umask={'file_umask', 0x3d, 0x1}}, {@part={'part', 0x3d, 0x2}}, {@codepage={'codepage', 0x3d, 'cp866'}}, {@dir_umask={'dir_umask', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x1, 0x30e, &(0x7f0000000740)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 6.225498946s ago: executing program 1 (id=1552): setresuid(0x0, 0xee00, 0xee00) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f000032a000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1e0}, 0x0, 0x0, 0x0, 0x100000040000}) shmctl$SHM_UNLOCK(r0, 0xc) 5.766930495s ago: executing program 1 (id=1558): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f00000005c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xc) 5.335675089s ago: executing program 34 (id=1558): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f00000005c0)="$eJzs3ctvG9UaAPDPdpMmbe7t415dtb3SbaVeqfehxnkINQEkxApYVEJUYgNSCYkbSpw6ip3SRF2ksOuCBQKBhFiw5y9gQ1dUlRBrEFtWqBWUIAECychju83DTkNJbZr5/aSpz8y4/s6x+50en5nxBJBax2p/ZCIGIuLziNhXX137hGP1h5XblydrSyaq1TPfZpLn1dabT23+vb0RsRwRfRHx3FMRL2c2xi0vLs1MFIuF+cZ6vjI7ly8vLp08PzsxXZguXBgeOzU+PjY0OjK+bW29+uarV09//EzvRz++cfP6W59+UqvWQGPf6nZsp3rTe+LAqm27IuLxBxGsC3KN9vR3uyLcl9rn97eIOJ7k/77IJZ8mkAbVarX6a3V3u93LVWDHyiZj4Ex2MCLq5Wx2cLA+hv977MkWS+XK/8+VFi5M1cfK+6Mne+58sTDU+K6wP3oytfXhpHx3fWTd+mhEMgZ+O9efrA9OlopTne3qgHX2rsv/H3L1/AdSwld+SC/5D+kl/yG95D+kl/yH9JL/kF7yH9JL/kN6yX9IL/kP6bVZ/vd2sB5ARz17+nRtqTavf5+6uLgwU7p4cqpQnhmcXZgcnCzNzw1Ol0rTyTU7s/d6vWKpNDf8SCxcylcK5Uq+vLh0dra0cKFyNrmu/2yhpyOtArbiwNFrX2YiYvnR/mSJVf/ly1XY2arVTHT7GmSgO3Ld7oCArjH1D+n1O77jt/2RMODh1uInetfoa735iZh7ELUBOiG72c5fbnSuIkDHnTjs+B+klfl/SC/z/5BexvjAfc7/h/l/eHhtOv8P7GgDbe7/9ZdV9+4aioi/RsQXuZ7dzXt9ATtB9ptMY/x/Yt+/B9bv7c38lBwi6I2I194/8+6liUplfri2/bs72yvvNbaPdKP+QHtrZ/iaedrMYwAgvVZuX55sLp2Me+vJ+kkIG+PvasxN9iUjmD0rmTXnKmS26dyF5SsRcahV/Ezjfuf1Ix97VnIb4h9sPGbqL5HUd1dy3/TOxD+8Kv6/VsU/8offFUiHa7X+Z6hV/mWTnI47+be2/xnYpnMnmv1f85zr1fGb/V+uTf93dIsxXvng9baHd29diTjSsv9txutLYq2PX6vbiS3Gv/ni8/9ot6/6Yf11WsVvqpXyldm5fHlx6eT5Zi3GTo2Pjw2NjoznkznqfHOmeqPHDn12fbP2N7Rp/1ct21/b9t8ttv/nf9544dgm8f9zvPW/v4PJY+v3vz8i/rfF+N+PfP1Su321+FNt3v/sJvFr20a3GL/8ztOuHQaAP5Hy4tLMRLFYmFdQUFC4U7hXz7HcmQ4KeGDuJn23awIAAAAAAAAAAABsVSdOJ+52GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdoLfAgAA//8N/c3z") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xc) 3.694191701s ago: executing program 0 (id=1575): r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @loopback, 0x6}, 0x1c) socket$inet6(0xa, 0x3, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) 3.495936976s ago: executing program 0 (id=1577): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000529000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0x4000) ftruncate(r0, 0x81ff) ftruncate(r0, 0x9) 3.191631882s ago: executing program 0 (id=1579): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r0 = creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x160) ftruncate(r0, 0x81fd) creat(&(0x7f0000001cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) 3.139417818s ago: executing program 3 (id=1581): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000140)="d0b4163e96457321d877d01ac288fb", 0xf, 0x40000, &(0x7f00000001c0)={0x11, 0x1, r1, 0x1, 0x70, 0x6, @local}, 0x14) 2.914203935s ago: executing program 0 (id=1582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0xffffffffffffff00}]}) 2.669793584s ago: executing program 3 (id=1585): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200410, &(0x7f0000000680)={[{@nodiscard}, {}, {@acl}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@norecovery}]}, 0x5, 0x591, &(0x7f0000000f80)="$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") chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x105042, 0x1fe) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.493217574s ago: executing program 0 (id=1587): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) timerfd_gettime(r0, &(0x7f0000000000)) 2.399187874s ago: executing program 5 (id=1588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010"], 0xa8}}, 0x0) 2.385122571s ago: executing program 0 (id=1589): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020b11837000000000000010902240001000000000904004a0103000200092100000d0122030009058103"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="003905"], 0x0, 0x0, 0x0}, 0x0) 2.256426644s ago: executing program 6 (id=1590): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) fallocate(r0, 0x10, 0x1000, 0x5) 2.210430249s ago: executing program 3 (id=1591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)={[{@creator={'creator', 0x3d, "451ea2fd"}}]}, 0x1, 0x5d4, &(0x7f0000001980)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2.166573485s ago: executing program 6 (id=1592): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f00000000c0)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)="9d", 0x1, 0x8fff) write$UHID_CREATE2(r0, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x5, 0x2, 0x10000, 0x2, 0x1000}}, 0x118) 2.092705613s ago: executing program 5 (id=1593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001740), r0) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000001800)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xffffff42}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xf8c}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2400c800) 1.87964334s ago: executing program 5 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x14, r1, 0x1, 0x0, 0x25dfdbfd, {0x23}}, 0x14}}, 0x0) 1.872999064s ago: executing program 3 (id=1595): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x130a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, 0x0}}], 0x1, 0xd8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000040)) 1.749574799s ago: executing program 3 (id=1596): ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x400, 0xcf, 0x0, 0xfffe, 0x15, "4415264a88b81113fb235920b1a90a13bc040b"}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0xe6f99f962a21bf70, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x2, 0x6d, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xa, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.681890722s ago: executing program 5 (id=1597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000080)={0xaf, 0x0, 0x0}) 1.672490377s ago: executing program 6 (id=1598): r0 = syz_open_dev$video(&(0x7f0000000280), 0x80, 0x68c02) r1 = syz_io_uring_setup(0x1e20, &(0x7f0000000100)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0x3, &(0x7f00000000c0)="6980", 0x2, 0x4}) io_uring_enter(r1, 0x48ed, 0x0, 0x2, 0x0, 0x0) 1.425175414s ago: executing program 5 (id=1599): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000380)='./file0\x00', 0x220c800, &(0x7f0000000140), 0x2, 0x964a, &(0x7f0000009680)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4880, 0x0, 0x8, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0xff, 0x0, &(0x7f0000000d40)) 1.366002577s ago: executing program 6 (id=1600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) personality(0x500006) 1.171314805s ago: executing program 6 (id=1601): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 86.838579ms ago: executing program 5 (id=1602): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x2000, 0x0) 11.909275ms ago: executing program 3 (id=1603): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5, 0x30}, 0xc) 0s ago: executing program 6 (id=1604): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) ioctl$SIOCGETNODEID(r1, 0xc0189436, 0x0) kernel console output (not intermixed with test programs): e [ 192.950247][ T7875] loop0: detected capacity change from 0 to 512 [ 192.991336][ T7843] bcachefs (loop4): done starting filesystem [ 192.997765][ T7875] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 193.074612][ T7875] EXT4-fs (loop0): invalid journal inode [ 193.080442][ T7875] EXT4-fs (loop0): can't get journal size [ 193.136263][ T7875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 193.149507][ T7875] System zones: 1-12, 13-13 [ 193.163573][ T7875] EXT4-fs (loop0): 1 truncate cleaned up [ 193.169138][ T7877] loop3: detected capacity change from 0 to 4096 [ 193.177630][ T7875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.202082][ T7875] EXT4-fs (loop0): shut down requested (2) [ 193.263593][ T7877] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 193.288298][ T5836] bcachefs (loop4): shutting down [ 193.293796][ T5836] bcachefs (loop4): going read-only [ 193.303938][ T5836] bcachefs (loop4): finished waiting for writes to stop [ 193.328746][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.367560][ T5836] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 193.428234][ T7877] ntfs3(loop3): ino=19, mi_enum_attr [ 193.454595][ T7877] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 193.549209][ T5836] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 193.597982][ T5836] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 193.609936][ T7877] ntfs3(loop3): failed to convert "c46c" to iso8859-14 [ 193.611489][ T5836] bcachefs (loop4): marking filesystem clean [ 193.628824][ T7877] ntfs3(loop3): ino=20, mi_enum_attr [ 193.712126][ T5836] bcachefs (loop4): shutdown complete [ 193.805417][ T5931] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 193.976958][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.013767][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.025123][ T7896] loop0: detected capacity change from 0 to 512 [ 194.032511][ T7896] EXT4-fs: Ignoring removed bh option [ 194.038626][ T5931] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 194.049282][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.068824][ T7896] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 194.106200][ T7896] EXT4-fs (loop0): 1 truncate cleaned up [ 194.137140][ T7896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.148013][ T5931] usb 2-1: config 0 descriptor?? [ 194.239707][ T7896] EXT4-fs: Ignoring removed orlov option [ 194.254132][ T7896] EXT4-fs (loop0): can't enable nombcache during remount [ 194.315145][ T7896] EXT4-fs: Ignoring removed orlov option [ 194.346468][ T7896] EXT4-fs (loop0): can't enable nombcache during remount [ 194.456736][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.490203][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.497798][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.592610][ T5931] steelseries 0003:1038:12B6.0005: unknown main item tag 0x3 [ 194.613933][ T7907] loop2: detected capacity change from 0 to 128 [ 194.646712][ T5931] steelseries 0003:1038:12B6.0005: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 194.688167][ T7907] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 194.783242][ T7907] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.043238][ T5931] usb 2-1: USB disconnect, device number 5 [ 195.238101][ T7903] loop3: detected capacity change from 0 to 32768 [ 195.276641][ T7903] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.307903][ T5827] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.420194][ T7903] XFS (loop3): Ending clean mount [ 195.431408][ T7903] XFS (loop3): Quotacheck needed: Please wait. [ 195.499095][ T7927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.548919][ T7903] XFS (loop3): Quotacheck: Done. [ 195.710262][ T7929] loop2: detected capacity change from 0 to 1024 [ 195.828830][ T7932] loop1: detected capacity change from 0 to 1024 [ 195.838754][ T7929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.095624][ T5839] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.538162][ T5827] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 196.610054][ T5827] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 196.915888][ T7936] loop0: detected capacity change from 0 to 32768 [ 196.992548][ T7936] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 197.005676][ T5893] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 197.041753][ T7955] loop1: detected capacity change from 0 to 256 [ 197.096828][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.205859][ T7955] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 197.211138][ T5893] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 197.250308][ T5893] usb 4-1: config 0 has no interface number 0 [ 197.303927][ T5893] usb 4-1: config 0 interface 41 has no altsetting 0 [ 197.314972][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.349020][ T5893] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 197.368695][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.399036][ T5893] usb 4-1: Product: syz [ 197.407534][ T5893] usb 4-1: Manufacturer: syz [ 197.417653][ T5893] usb 4-1: SerialNumber: syz [ 197.449741][ T5893] usb 4-1: config 0 descriptor?? [ 197.478296][ T5843] ocfs2: Unmounting device (7,0) on (node local) [ 197.637189][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.832034][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.948496][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.026500][ T7965] netlink: 'syz.0.739': attribute type 15 has an invalid length. [ 198.111476][ T5893] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 198.155041][ T5893] usb 4-1: USB disconnect, device number 8 [ 198.285566][ T7968] random: crng reseeded on system resumption [ 198.353992][ T7966] loop1: detected capacity change from 0 to 4096 [ 198.436443][ T7966] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 198.534742][ T13] bridge_slave_1: left allmulticast mode [ 198.540790][ T13] bridge_slave_1: left promiscuous mode [ 198.586036][ T7966] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 198.609311][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.636266][ T7966] ntfs3(loop1): ino=1a, mi_enum_attr [ 198.646941][ T7960] loop4: detected capacity change from 0 to 40427 [ 198.655061][ T7966] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 198.688324][ T7960] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 198.705017][ T13] bridge_slave_0: left allmulticast mode [ 198.710725][ T13] bridge_slave_0: left promiscuous mode [ 198.719715][ T7960] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 198.754195][ T7960] F2FS-fs (loop4): build fault injection rate: 17008 [ 198.781214][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.805353][ T7960] F2FS-fs (loop4): build fault injection type: 0x1f8 [ 198.857015][ T7960] F2FS-fs (loop4): invalid crc value [ 199.182452][ T7984] loop1: detected capacity change from 0 to 512 [ 199.249529][ T7984] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.275292][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 199.390303][ T7984] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.744: iget: bad i_size value: 360287970189639690 [ 199.478897][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.493695][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.496220][ T7984] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.744: couldn't read orphan inode 15 (err -117) [ 199.503850][ T7960] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 199.520306][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.539541][ T7960] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 199.550521][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.560055][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.605885][ T5892] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 199.632001][ T7960] syz.4.736: attempt to access beyond end of device [ 199.632001][ T7960] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 199.672401][ T7984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.789461][ T7984] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 199.808442][ T7984] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 199.822409][ T5836] syz-executor: attempt to access beyond end of device [ 199.822409][ T5836] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 199.832211][ T7984] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.744: Failed to acquire dquot type 0 [ 199.843215][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 199.843248][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.843259][ T5836] Call Trace: [ 199.843267][ T5836] [ 199.843275][ T5836] dump_stack_lvl+0x189/0x250 [ 199.843311][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.843335][ T5836] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 199.843357][ T5836] ? __pfx_queue_work_on+0x10/0x10 [ 199.843386][ T5836] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 199.843406][ T5836] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.843428][ T5836] ? f2fs_hw_is_readonly+0x39b/0x470 [ 199.843459][ T5836] f2fs_handle_critical_error+0x37c/0x540 [ 199.843492][ T5836] f2fs_write_end_io+0x495/0x810 [ 199.843516][ T5836] ? blkg_put+0x22/0x240 [ 199.843560][ T5836] __submit_merged_bio+0x27a/0x6a0 [ 199.843593][ T5836] __submit_merged_write_cond+0x255/0x530 [ 199.843626][ T5836] f2fs_write_data_pages+0x261d/0x3000 [ 199.843649][ T5836] ? __lock_acquire+0xab9/0xd20 [ 199.843715][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 199.843803][ T5836] ? stack_depot_save_flags+0x40/0x900 [ 199.843849][ T5836] ? kthread_stop+0x194/0x5f0 [ 199.843872][ T5836] ? kill_f2fs_super+0x137/0x6c0 [ 199.843896][ T5836] ? deactivate_locked_super+0xb9/0x130 [ 199.843939][ T5836] ? __lock_acquire+0xab9/0xd20 [ 199.843984][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 199.844011][ T5836] do_writepages+0x32b/0x550 [ 199.844051][ T5836] ? do_raw_spin_unlock+0x122/0x240 [ 199.844077][ T5836] filemap_fdatawrite+0x199/0x240 [ 199.844103][ T5836] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 199.844190][ T5836] ? do_raw_spin_unlock+0x122/0x240 [ 199.844215][ T5836] f2fs_sync_dirty_inodes+0x31f/0x830 [ 199.844263][ T5836] f2fs_write_checkpoint+0x95a/0x1df0 [ 199.844322][ T5836] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 199.844398][ T5836] ? try_to_wake_up+0x7e5/0x1290 [ 199.844426][ T5836] ? kill_f2fs_super+0x298/0x6c0 [ 199.844461][ T5836] kill_f2fs_super+0x2c3/0x6c0 [ 199.844496][ T5836] ? __pfx_kill_f2fs_super+0x10/0x10 [ 199.844520][ T5836] ? radix_tree_delete_item+0x2b6/0x400 [ 199.844552][ T5836] ? shrinker_free+0x2ce/0x3e0 [ 199.844576][ T5836] deactivate_locked_super+0xb9/0x130 [ 199.844601][ T5836] cleanup_mnt+0x425/0x4c0 [ 199.844623][ T5836] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.844648][ T5836] task_work_run+0x1d4/0x260 [ 199.844673][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 199.844691][ T5836] ? __x64_sys_umount+0x122/0x160 [ 199.844724][ T5836] ? exit_to_user_mode_loop+0x40/0x110 [ 199.844753][ T5836] exit_to_user_mode_loop+0xec/0x110 [ 199.844776][ T5836] do_syscall_64+0x2bd/0x3b0 [ 199.844798][ T5836] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.844819][ T5836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.844837][ T5836] ? clear_bhb_loop+0x60/0xb0 [ 199.844860][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.844877][ T5836] RIP: 0033:0x7ff07f58fc57 [ 199.844895][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 199.844917][ T5836] RSP: 002b:00007ffd68ccfcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 199.844938][ T5836] RAX: 0000000000000000 RBX: 00007ff07f610925 RCX: 00007ff07f58fc57 [ 199.844950][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd68ccfdb0 [ 199.844961][ T5836] RBP: 00007ffd68ccfdb0 R08: 0000000000000000 R09: 0000000000000000 [ 199.844972][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd68cd0e40 [ 199.844984][ T5836] R13: 00007ff07f610925 R14: 0000000000030c1d R15: 00007ffd68cd0e80 [ 199.845019][ T5836] [ 199.854171][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.876369][ T8003] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 199.905347][ T5836] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 199.923983][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 199.942422][ T8003] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 199.972660][ T5892] usb 4-1: can't read configurations, error -71 [ 200.051999][ T8003] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.744: Failed to acquire dquot type 0 [ 200.351745][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.891708][ T8015] loop4: detected capacity change from 0 to 128 [ 200.988166][ T8015] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.024374][ T8015] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.120771][ T5836] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.332314][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.342558][ T8024] loop1: detected capacity change from 0 to 2048 [ 201.355012][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.372569][ T8024] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 201.373511][ T13] bond0 (unregistering): Released all slaves [ 201.394129][ T8024] NILFS (loop1): mounting unchecked fs [ 201.432846][ T5964] udevd[5964]: incorrect nilfs2 checksum on /dev/loop1 [ 201.555374][ T8024] NILFS (loop1): recovery complete [ 201.607221][ T5833] Bluetooth: hci0: command tx timeout [ 201.672025][ T8027] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.843836][ T8030] loop3: detected capacity change from 0 to 4096 [ 201.936132][ T8030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.196416][ T8030] EXT4-fs (loop3): shut down requested (2) [ 202.328700][ T49] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.362565][ T49] Quota error (device loop3): write_blk: dquota write failed [ 202.374332][ T49] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 202.393349][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.931403][ T13] hsr_slave_0: left promiscuous mode [ 202.996655][ T13] hsr_slave_1: left promiscuous mode [ 203.012863][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.022436][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.043861][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.074734][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.228936][ T13] veth1_macvtap: left promiscuous mode [ 203.248881][ T13] veth0_macvtap: left promiscuous mode [ 203.264892][ T13] veth1_vlan: left promiscuous mode [ 203.297471][ T13] veth0_vlan: left promiscuous mode [ 203.315048][ T5893] hid-generic 0005:0C45:1010.0006: item fetching failed at offset 0/2 [ 203.324238][ T5893] hid-generic 0005:0C45:1010.0006: probe with driver hid-generic failed with error -22 [ 203.684709][ T5833] Bluetooth: hci0: command tx timeout [ 204.108316][ T8060] loop4: detected capacity change from 0 to 32768 [ 204.188969][ T8060] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 204.228826][ T8060] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 204.293050][ T8060] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 204.325144][ T1207] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 204.342272][ T1207] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 204.548114][ T1207] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 205ms [ 204.569650][ T1207] gfs2: fsid=syz:syz.0: jid=0: Done [ 204.579563][ T8060] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 204.679203][ T8097] binder: 8096:8097 ioctl c018620c 200000000240 returned -1 [ 204.782707][ T8060] gfs2: fsid=syz:syz.0: found 1 quota changes [ 204.928434][ T13] team0 (unregistering): Port device team_slave_1 removed [ 205.008443][ T13] team0 (unregistering): Port device team_slave_0 removed [ 205.619029][ T8105] loop4: detected capacity change from 0 to 128 [ 205.663075][ T8105] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.683110][ T8105] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.768110][ T5833] Bluetooth: hci0: command tx timeout [ 205.830772][ T5836] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.397948][ T8120] tun0: tun_chr_ioctl cmd 1074025677 [ 206.430942][ T8120] tun0: linktype set to 1 [ 206.621852][ T8123] loop1: detected capacity change from 0 to 8192 [ 206.676595][ T8123] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.747197][ T8125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.786'. [ 207.016451][ T7994] chnl_net:caif_netlink_parms(): no params data found [ 207.394777][ T8143] loop0: detected capacity change from 0 to 512 [ 207.475604][ T8143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.589944][ T8143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 207.648209][ T8143] System zones: 1-12 [ 207.678323][ T8143] EXT4-fs (loop0): 1 truncate cleaned up [ 207.720093][ T8143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.801655][ T8143] EXT4-fs (loop0): shut down requested (2) [ 207.823033][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.843906][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.851945][ T5833] Bluetooth: hci0: command tx timeout [ 207.872038][ T7994] bridge_slave_0: entered allmulticast mode [ 207.891464][ T7994] bridge_slave_0: entered promiscuous mode [ 207.907763][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.915160][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.922404][ T7994] bridge_slave_1: entered allmulticast mode [ 207.930901][ T7994] bridge_slave_1: entered promiscuous mode [ 207.956234][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.159310][ T7994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.209048][ T7994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.451552][ T7994] team0: Port device team_slave_0 added [ 208.488643][ T7994] team0: Port device team_slave_1 added [ 208.539302][ T8140] loop1: detected capacity change from 0 to 32768 [ 208.585669][ T8175] loop3: detected capacity change from 0 to 64 [ 208.633442][ T8140] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.904370][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.958752][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.008929][ T8140] XFS (loop1): Ending clean mount [ 209.038239][ T7994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.111507][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.133838][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.167801][ T5828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.168062][ T7994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.840767][ T8198] loop3: detected capacity change from 0 to 128 [ 209.896202][ T8198] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.932352][ T7994] hsr_slave_0: entered promiscuous mode [ 209.969663][ T7994] hsr_slave_1: entered promiscuous mode [ 210.010078][ T8198] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.077969][ T8203] loop0: detected capacity change from 0 to 2048 [ 210.240573][ T8203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.388401][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.438419][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.900496][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.813'. [ 211.433579][ T7994] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.505007][ T7994] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.560122][ T7994] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.611006][ T7994] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.703225][ T8249] netlink: 56 bytes leftover after parsing attributes in process `syz.1.819'. [ 211.832699][ T8255] loop3: detected capacity change from 0 to 64 [ 212.209209][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.306654][ T7994] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.338556][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.347085][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.418328][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.425816][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.021182][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 213.432672][ T7994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.747303][ T8311] input: syz0 as /devices/virtual/input/input11 [ 214.182462][ T8324] loop1: detected capacity change from 0 to 64 [ 214.537316][ T5833] block nbd0: Receive control failed (result -32) [ 214.731834][ T7994] veth0_vlan: entered promiscuous mode [ 214.815206][ T7994] veth1_vlan: entered promiscuous mode [ 214.852081][ T8336] loop4: detected capacity change from 0 to 1024 [ 214.927845][ T8300] loop0: detected capacity change from 0 to 32768 [ 214.953963][ T7994] veth0_macvtap: entered promiscuous mode [ 215.040955][ T3485] hfsplus: b-tree write err: -5, ino 8 [ 215.067335][ T7994] veth1_macvtap: entered promiscuous mode [ 215.089609][ T8300] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 215.182812][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.211285][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.261049][ T8300] XFS (loop0): Ending clean mount [ 215.313673][ T3485] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.361780][ T3485] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.509465][ T3485] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.528949][ T3485] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.547642][ T5843] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 215.767916][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.804626][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.021910][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.088706][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.273019][ T8369] loop4: detected capacity change from 0 to 256 [ 216.695473][ T8373] loop0: detected capacity change from 0 to 4096 [ 216.807457][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 217.927739][ T8376] loop5: detected capacity change from 0 to 32768 [ 217.956314][ T8405] loop0: detected capacity change from 0 to 1024 [ 217.985232][ T8405] EXT4-fs: Ignoring removed oldalloc option [ 218.040743][ T8376] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 218.062735][ T8405] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 218.222219][ T8376] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 218.265935][ T8405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.626892][ T7994] ocfs2: Unmounting device (7,5) on (node local) [ 218.679455][ T8427] loop1: detected capacity change from 0 to 256 [ 218.770560][ T8427] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 218.917567][ T8427] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 218.990870][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.064038][ T8434] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 219.412877][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.5.870'. [ 219.464000][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.870'. [ 219.808351][ T8451] loop0: detected capacity change from 0 to 4096 [ 219.884726][ T8460] loop5: detected capacity change from 0 to 64 [ 219.909057][ T8462] loop3: detected capacity change from 0 to 256 [ 220.501509][ T8474] loop4: detected capacity change from 0 to 128 [ 220.656854][ T8474] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.803879][ T8474] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.894572][ T5893] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 220.944466][ T8474] fscrypt (loop4, inode 12): Mutually exclusive encryption flags (0x1e) [ 221.073805][ T5893] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 221.093444][ T5836] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.122964][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.161416][ T5893] usb 2-1: Product: syz [ 221.194560][ T5893] usb 2-1: Manufacturer: syz [ 221.214603][ T5893] usb 2-1: SerialNumber: syz [ 221.247434][ T5893] usb 2-1: config 0 descriptor?? [ 221.470957][ T5893] usb 2-1: USB disconnect, device number 6 [ 221.671947][ T7429] udevd[7429]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.949269][ T8508] loop4: detected capacity change from 0 to 2048 [ 221.982826][ T8473] loop3: detected capacity change from 0 to 32768 [ 222.010513][ T8508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.122968][ T8473] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 222.195209][ T8473] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.215949][ T8488] loop5: detected capacity change from 0 to 32768 [ 222.347858][ T8473] XFS (loop3): Ending clean mount [ 222.391972][ T8473] XFS (loop3): Quotacheck needed: Please wait. [ 222.479361][ T8521] loop0: detected capacity change from 0 to 4096 [ 222.486462][ T8488] JBD2: Ignoring recovery information on journal [ 222.541162][ T8521] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 222.594286][ T8516] loop1: detected capacity change from 0 to 8192 [ 222.622577][ T8488] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 222.724777][ T8473] XFS (loop3): Quotacheck: Done. [ 223.121577][ T5839] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.235345][ T7994] ocfs2: Unmounting device (7,5) on (node local) [ 224.043962][ T8552] loop3: detected capacity change from 0 to 256 [ 224.465595][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'. [ 224.664291][ T8568] loop3: detected capacity change from 0 to 256 [ 224.728981][ T8572] loop1: detected capacity change from 0 to 256 [ 225.186077][ T8580] syz.0.917: attempt to access beyond end of device [ 225.186077][ T8580] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 225.203505][ T8580] XFS (loop0): SB validate failed with error -5. [ 225.254582][ T6662] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 226.144319][ T8612] can0: slcan on ptm0. [ 226.218382][ T8611] can0 (unregistered): slcan off ptm0. [ 226.637923][ T8606] loop4: detected capacity change from 0 to 32768 [ 226.746749][ T8606] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 227.051894][ T8638] loop0: detected capacity change from 0 to 256 [ 227.088062][ T8638] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 227.158960][ T8641] loop3: detected capacity change from 0 to 256 [ 227.217018][ T8606] XFS (loop4): Tail block (0x40) overwrite detected. Updated to 0x80 [ 227.252934][ T8606] XFS (loop4): Starting recovery (logdev: internal) [ 227.302641][ T8641] FAT-fs (loop3): Directory bread(block 64) failed [ 227.330058][ T8606] XFS (loop4): Ending recovery (logdev: internal) [ 227.344794][ T8641] FAT-fs (loop3): Directory bread(block 65) failed [ 227.362047][ T8641] FAT-fs (loop3): Directory bread(block 66) failed [ 227.404261][ T8641] FAT-fs (loop3): Directory bread(block 67) failed [ 227.414558][ T8641] FAT-fs (loop3): Directory bread(block 68) failed [ 227.436463][ T8641] FAT-fs (loop3): Directory bread(block 69) failed [ 227.460633][ T8641] FAT-fs (loop3): Directory bread(block 70) failed [ 227.497765][ T8641] FAT-fs (loop3): Directory bread(block 71) failed [ 227.505153][ T8641] FAT-fs (loop3): Directory bread(block 72) failed [ 227.516214][ T8641] FAT-fs (loop3): Directory bread(block 73) failed [ 227.535363][ T5836] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 228.560185][ T8654] loop5: detected capacity change from 0 to 32768 [ 228.589652][ T8654] XFS: noikeep mount option is deprecated. [ 228.683214][ T8654] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.902667][ T8654] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 228.962295][ T8654] XFS (loop5): Starting recovery (logdev: internal) [ 228.995080][ T43] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 229.057011][ T8654] XFS (loop5): Ending recovery (logdev: internal) [ 229.108573][ T8659] loop4: detected capacity change from 0 to 32768 [ 229.158944][ T8659] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 229.198097][ T43] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 229.214933][ T43] usb 1-1: config 0 has no interface number 0 [ 229.221123][ T43] usb 1-1: config 0 interface 160 has no altsetting 0 [ 229.246814][ T43] usb 1-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 229.254865][ T8659] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 229.256416][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.324503][ T43] usb 1-1: Product: syz [ 229.336771][ T5893] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 229.345766][ T43] usb 1-1: Manufacturer: syz [ 229.360133][ T43] usb 1-1: SerialNumber: syz [ 229.389014][ T7994] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 229.406196][ T43] usb 1-1: config 0 descriptor?? [ 229.416680][ T43] usb-storage 1-1:0.160: USB Mass Storage device detected [ 229.544719][ T5893] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 229.556803][ T8659] overlayfs: upper fs does not support tmpfile. [ 229.586692][ T5893] usb 2-1: New USB device strings: Mfr=223, Product=2, SerialNumber=3 [ 229.597341][ T8693] loop3: detected capacity change from 0 to 512 [ 229.620721][ T5893] usb 2-1: Product: syz [ 229.629443][ T8693] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.630482][ T8659] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 229.647301][ T5893] usb 2-1: Manufacturer: syz [ 229.654368][ T5913] usb 1-1: USB disconnect, device number 4 [ 229.664847][ T8693] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.665196][ T5893] usb 2-1: SerialNumber: syz [ 229.676244][ T8659] overlayfs: failed to set xattr on upper [ 229.702282][ T8693] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 229.745258][ T8659] overlayfs: ...falling back to redirect_dir=nofollow. [ 229.755474][ T5893] usb 2-1: config 0 descriptor?? [ 229.761892][ T8659] overlayfs: ...falling back to index=off. [ 229.778666][ T5893] ch341 2-1:0.0: ch341-uart converter detected [ 229.826298][ T8693] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 229.834756][ T8693] System zones: 1-12 [ 229.853894][ T8659] overlayfs: ...falling back to uuid=null. [ 229.872677][ T8693] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.953: corrupted in-inode xattr: e_value size too large [ 229.905554][ T8659] overlayfs: upper fs missing required features. [ 229.917033][ T8693] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.953: couldn't read orphan inode 15 (err -117) [ 229.981634][ T8693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.005391][ T5836] ocfs2: Unmounting device (7,4) on (node local) [ 230.166722][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.537803][ T8704] loop3: detected capacity change from 0 to 4096 [ 230.588115][ T5893] usb 2-1: failed to send control message: -71 [ 230.615625][ T5893] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 230.669404][ T5893] usb 2-1: USB disconnect, device number 7 [ 230.709009][ T5893] ch341 2-1:0.0: device disconnected [ 232.571434][ T5893] hid-generic 0005:10CF:05DF.0007: item fetching failed at offset 0/1 [ 232.589334][ T8755] loop5: detected capacity change from 0 to 4096 [ 232.661529][ T5893] hid-generic 0005:10CF:05DF.0007: probe with driver hid-generic failed with error -22 [ 232.906151][ T8766] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.121163][ T8750] loop4: detected capacity change from 0 to 131072 [ 233.138886][ T8750] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 233.147242][ T8750] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 233.279533][ T8750] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 233.287076][ T8750] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 233.634847][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.982'. [ 234.019878][ T8782] loop4: detected capacity change from 0 to 4096 [ 234.410725][ T30] audit: type=1800 audit(1750783062.748:1762): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.981" name="dmabuf" dev="dmabuf" ino=3 res=0 errno=0 [ 235.648662][ T8777] loop0: detected capacity change from 0 to 40427 [ 235.750019][ T8777] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 235.816984][ T8777] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 235.922177][ T8799] loop3: detected capacity change from 0 to 131072 [ 235.939948][ T8799] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 235.949497][ T8799] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 235.965422][ T8799] F2FS-fs (loop3): invalid crc value [ 236.107979][ T8799] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 236.115385][ T8799] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 236.130110][ T8824] loop1: detected capacity change from 0 to 512 [ 236.160535][ T8824] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 236.259117][ T8824] EXT4-fs (loop1): 1 truncate cleaned up [ 236.335931][ T8824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.511387][ T8777] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 236.578897][ T8777] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 236.752482][ T8832] loop5: detected capacity change from 0 to 1024 [ 237.294278][ T30] audit: type=1800 audit(1750783065.618:1763): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.989" name="file2" dev="loop5" ino=26 res=0 errno=0 [ 237.365437][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.850967][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.999'. [ 237.908747][ T59] hfsplus: b-tree write err: -5, ino 4 [ 238.238433][ T8857] loop0: detected capacity change from 0 to 512 [ 238.335860][ T8857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.364547][ T8857] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.700612][ T8867] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1004'. [ 238.725651][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.269055][ T8882] netlink: 71 bytes leftover after parsing attributes in process `syz.5.1008'. [ 239.839619][ T8890] loop5: detected capacity change from 0 to 1024 [ 239.940100][ T8890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.954798][ T8890] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.302725][ T7994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.427187][ T8936] loop1: detected capacity change from 0 to 1024 [ 241.579075][ T8936] syz.1.1023: attempt to access beyond end of device [ 241.579075][ T8936] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 241.669391][ T8936] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 241.734742][ T8936] syz.1.1023: attempt to access beyond end of device [ 241.734742][ T8936] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 241.819638][ T8936] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 241.907690][ T8910] loop3: detected capacity change from 0 to 40427 [ 242.006672][ T8910] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 242.060166][ T8910] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 242.209139][ T8910] F2FS-fs (loop3): invalid crc value [ 242.297785][ T8952] loop4: detected capacity change from 0 to 2048 [ 242.640408][ T8913] loop5: detected capacity change from 0 to 32768 [ 242.702595][ T8910] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 242.719165][ T8913] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 242.754622][ T8913] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 242.756163][ T8952] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.777459][ T8910] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 242.855002][ T8913] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 242.881739][ T43] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 242.904214][ T43] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 243.052760][ T30] audit: type=1800 audit(1750783071.378:1764): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1015" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 243.089191][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 243.263075][ T43] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 358ms [ 243.293621][ T43] gfs2: fsid=syz:syz.0: jid=0: Done [ 243.331394][ T8913] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 243.691820][ T8913] gfs2: fsid=syz:syz.0: found 1 quota changes [ 243.869964][ T8998] loop0: detected capacity change from 0 to 1024 [ 243.885409][ T8997] loop1: detected capacity change from 0 to 1024 [ 243.970367][ T8998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.040673][ T30] audit: type=1800 audit(1750783072.368:1765): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1039" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 244.246983][ T9005] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.362968][ T9005] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.374304][ T9005] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.419479][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.996260][ T9020] sp0: Synchronizing with TNC [ 245.085529][ T9028] input: syz1 as /devices/virtual/input/input13 [ 245.258326][ T9026] Falling back ldisc for ttyprintk. [ 245.267869][ T9019] [U] è [ 245.631934][ T9042] loop3: detected capacity change from 0 to 512 [ 245.724523][ T1207] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 245.782877][ T9042] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 245.822206][ T9042] EXT4-fs (loop3): mount failed [ 245.915003][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 245.944834][ T9054] netem: change failed [ 245.966786][ T1207] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.990483][ T1207] usb 2-1: config 0 has no interface number 0 [ 246.032859][ T1207] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 246.058942][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.101206][ T1207] usb 2-1: Product: syz [ 246.128919][ T1207] usb 2-1: Manufacturer: syz [ 246.133596][ T1207] usb 2-1: SerialNumber: syz [ 246.174845][ T9059] tipc: Started in network mode [ 246.195704][ T1207] usb 2-1: config 0 descriptor?? [ 246.214662][ T9059] tipc: Node identity ac14140f, cluster identity 4711 [ 246.233373][ T1207] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 246.247877][ T9059] tipc: New replicast peer: 255.255.255.255 [ 246.268904][ T9059] tipc: Enabled bearer , priority 10 [ 246.289430][ T1207] usb 2-1: selecting invalid altsetting 1 [ 246.295290][ T1207] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 246.315004][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 246.327867][ T1207] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 246.349123][ T9063] tipc: Disabling bearer [ 246.365038][ T1207] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 246.408404][ T9039] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 246.423496][ T1207] usb 2-1: media controller created [ 246.541123][ T1207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.677088][ T1207] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 246.694521][ T1207] zl10353_read_register: readreg error (reg=127, ret==-71) [ 246.715646][ T1207] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 246.934940][ T1207] usb 2-1: USB disconnect, device number 8 [ 247.387107][ T9049] loop0: detected capacity change from 0 to 32768 [ 247.545919][ T9049] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 247.675455][ T9049] XFS (loop0): Ending clean mount [ 247.739159][ T9049] XFS (loop0): Quotacheck needed: Please wait. [ 247.777230][ T9104] IPVS: persistence engine module ip_vs_pe_ not found [ 247.939184][ T9049] XFS (loop0): Quotacheck: Done. [ 248.174816][ T5843] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 249.053228][ T9147] ALSA: mixer_oss: invalid index 40000 [ 249.496584][ T30] audit: type=1326 audit(1750783077.818:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6768f8e929 code=0x7ffc0000 [ 249.554536][ T30] audit: type=1326 audit(1750783077.818:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6768f8e929 code=0x7ffc0000 [ 249.578886][ T30] audit: type=1326 audit(1750783077.858:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6768f8e929 code=0x7ffc0000 [ 249.611597][ T30] audit: type=1326 audit(1750783077.868:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6768f8e929 code=0x7ffc0000 [ 249.684232][ T30] audit: type=1326 audit(1750783077.868:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6768f8e929 code=0x7ffc0000 [ 249.767879][ T30] audit: type=1326 audit(1750783077.868:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6768f8e929 code=0x7ffc0000 [ 249.881046][ T30] audit: type=1326 audit(1750783077.868:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6768f8e929 code=0x7ffc0000 [ 249.956861][ T30] audit: type=1326 audit(1750783077.868:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6768f858e7 code=0x7ffc0000 [ 250.028972][ T30] audit: type=1326 audit(1750783077.868:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6768f2ab19 code=0x7ffc0000 [ 250.088588][ T30] audit: type=1326 audit(1750783077.868:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.0.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6768f858e7 code=0x7ffc0000 [ 250.781906][ T9184] loop0: detected capacity change from 0 to 256 [ 250.826754][ T9165] loop3: detected capacity change from 0 to 32768 [ 250.880323][ T9184] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 250.984875][ T9165] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 251.142300][ T9165] XFS (loop3): Ending clean mount [ 251.148610][ T9151] loop4: detected capacity change from 0 to 32768 [ 251.170277][ T9165] XFS (loop3): Quotacheck needed: Please wait. [ 251.290399][ T9151] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 251.378368][ T9165] XFS (loop3): Quotacheck: Done. [ 251.473019][ T5839] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 251.957059][ T5836] ocfs2: Unmounting device (7,4) on (node local) [ 252.270558][ T9219] loop3: detected capacity change from 0 to 1024 [ 252.296755][ T9219] EXT4-fs (loop3): Test dummy encryption mode enabled [ 252.344336][ T9219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.372069][ T9223] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 252.517509][ T9219] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 252.571122][ T9227] can0: slcan on ttyS3. [ 252.664804][ T9228] can0 (unregistered): slcan off ttyS3. [ 252.674634][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 252.824539][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 252.832270][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 252.858346][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 252.872084][ T43] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.897662][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 252.907481][ T43] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 252.934625][ T43] usb 1-1: Product: syz [ 252.944518][ T43] usb 1-1: Manufacturer: syz [ 252.956995][ T43] usb 1-1: SerialNumber: syz [ 253.001152][ T43] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input14 [ 253.358537][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.378670][ T5893] usb 1-1: USB disconnect, device number 5 [ 253.378736][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 253.610034][ T5893] appletouch 1-1:1.0: input: appletouch disconnected [ 253.635014][ T9252] loop3: detected capacity change from 0 to 512 [ 253.780147][ T9252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.860484][ T9252] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.076605][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.149457][ T9258] loop1: detected capacity change from 0 to 8192 [ 254.416608][ T9271] loop4: detected capacity change from 0 to 512 [ 254.537135][ T9271] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 254.732901][ T9271] EXT4-fs (loop4): 1 truncate cleaned up [ 254.771194][ T9271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.436759][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.978545][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.990702][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.111871][ T9296] loop0: detected capacity change from 0 to 4096 [ 256.320459][ T9301] loop4: detected capacity change from 0 to 512 [ 256.486876][ T9301] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 256.797742][ T9296] ntfs3(loop0): ino=1a, mi_enum_attr [ 256.803115][ T9296] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 257.049711][ T9311] loop5: detected capacity change from 0 to 64 [ 257.084817][ T9301] EXT4-fs (loop4): 1 truncate cleaned up [ 257.091854][ T9279] loop3: detected capacity change from 0 to 262144 [ 257.165827][ T9279] F2FS-fs (loop3): invalid crc value [ 257.190970][ T9301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.294616][ T9279] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 257.475080][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.088980][ T9332] loop5: detected capacity change from 0 to 64 [ 258.102038][ T9329] usb usb1: usbfs: process 9329 (syz.0.1139) did not claim interface 0 before use [ 258.133892][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 258.133914][ T30] audit: type=1804 audit(1750783086.468:1800): pid=9332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1141" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=21 res=1 errno=0 [ 258.256081][ T30] audit: type=1804 audit(1750783086.558:1801): pid=9332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1141" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=21 res=1 errno=0 [ 258.376097][ T9306] loop1: detected capacity change from 0 to 40427 [ 258.587716][ T9344] syzkaller0: tun_chr_ioctl cmd 35108 [ 258.654489][ T9306] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 258.818533][ T43] kernel write not supported for file /128/loginuid (pid: 43 comm: kworker/1:1) [ 258.835077][ T5828] syz-executor: attempt to access beyond end of device [ 258.835077][ T5828] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 258.883082][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 258.883115][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.883127][ T5828] Call Trace: [ 258.883135][ T5828] [ 258.883144][ T5828] dump_stack_lvl+0x189/0x250 [ 258.883184][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.883212][ T5828] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 258.883237][ T5828] ? __pfx_queue_work_on+0x10/0x10 [ 258.883267][ T5828] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 258.883290][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.883316][ T5828] ? f2fs_hw_is_readonly+0x39b/0x470 [ 258.883350][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 258.883386][ T5828] f2fs_write_end_io+0x495/0x810 [ 258.883413][ T5828] ? blkg_put+0x22/0x240 [ 258.883459][ T5828] __submit_merged_bio+0x27a/0x6a0 [ 258.883494][ T5828] __submit_merged_write_cond+0x255/0x530 [ 258.883538][ T5828] f2fs_write_data_pages+0x261d/0x3000 [ 258.883610][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 258.883694][ T5828] ? __mod_zone_page_state+0xd7/0x140 [ 258.883734][ T5828] ? unwind_next_frame+0xa5/0x2390 [ 258.883761][ T5828] ? rcu_is_watching+0x15/0xb0 [ 258.883787][ T5828] ? __kasan_check_byte+0x12/0x40 [ 258.883833][ T5828] ? __lock_acquire+0xab9/0xd20 [ 258.883870][ T5828] ? do_raw_spin_lock+0x121/0x290 [ 258.883905][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 258.883928][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 258.883959][ T5828] do_writepages+0x32b/0x550 [ 258.884006][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 258.884033][ T5828] filemap_fdatawrite+0x199/0x240 [ 258.884062][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 258.884149][ T5828] ? do_raw_spin_unlock+0x122/0x240 [ 258.884176][ T5828] f2fs_sync_dirty_inodes+0x31f/0x830 [ 258.884226][ T5828] f2fs_write_checkpoint+0x95a/0x1df0 [ 258.884285][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 258.884362][ T5828] ? try_to_wake_up+0x7e5/0x1290 [ 258.884388][ T5828] ? kill_f2fs_super+0x298/0x6c0 [ 258.884422][ T5828] kill_f2fs_super+0x2c3/0x6c0 [ 258.884458][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 258.884484][ T5828] ? radix_tree_delete_item+0x2b6/0x400 [ 258.884523][ T5828] ? shrinker_free+0x2ce/0x3e0 [ 258.884547][ T5828] deactivate_locked_super+0xb9/0x130 [ 258.884574][ T5828] cleanup_mnt+0x425/0x4c0 [ 258.884598][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.884625][ T5828] task_work_run+0x1d4/0x260 [ 258.884650][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 258.884669][ T5828] ? __x64_sys_umount+0x122/0x160 [ 258.884703][ T5828] ? exit_to_user_mode_loop+0x40/0x110 [ 258.884733][ T5828] exit_to_user_mode_loop+0xec/0x110 [ 258.884760][ T5828] do_syscall_64+0x2bd/0x3b0 [ 258.884784][ T5828] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.884807][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.884827][ T5828] ? clear_bhb_loop+0x60/0xb0 [ 258.884852][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.884871][ T5828] RIP: 0033:0x7f11d5b8fc57 [ 258.884890][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 258.884908][ T5828] RSP: 002b:00007ffee2d2c1a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 258.884930][ T5828] RAX: 0000000000000000 RBX: 00007f11d5c10925 RCX: 00007f11d5b8fc57 [ 258.884944][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee2d2c260 [ 258.884956][ T5828] RBP: 00007ffee2d2c260 R08: 0000000000000000 R09: 0000000000000000 [ 258.884968][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffee2d2d2f0 [ 258.884981][ T5828] R13: 00007f11d5c10925 R14: 000000000003f2a1 R15: 00007ffee2d2d330 [ 258.885017][ T5828] [ 259.334895][ T5828] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 259.894894][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 259.953491][ T9367] loop0: detected capacity change from 0 to 2048 [ 259.989769][ T9367] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 260.018439][ T9370] loop3: detected capacity change from 0 to 128 [ 260.032168][ T9370] EXT4-fs (loop3): Test dummy encryption mode enabled [ 260.047903][ T9371] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.064069][ T9368] loop5: detected capacity change from 0 to 4096 [ 260.081061][ T9370] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.099140][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 260.106982][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.107600][ T9370] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 260.121677][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.155896][ T9367] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 260.180629][ T9367] Remounting filesystem read-only [ 260.191226][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 260.210956][ T9367] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952 [ 260.214200][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.231216][ T9367] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 260.234325][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.273771][ T43] usb 5-1: config 0 descriptor?? [ 260.277595][ T9367] NILFS (loop0): error -5 truncating bmap (ino=15) [ 260.335768][ T5843] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 260.431763][ T59] ntfs3(loop5): ino=5, mi_enum_attr [ 260.719905][ T43] HID 045e:07da: Invalid code 65791 type 1 [ 260.758171][ T43] HID 045e:07da: Invalid code 768 type 1 [ 260.763890][ T43] HID 045e:07da: Invalid code 769 type 1 [ 260.789331][ T43] HID 045e:07da: Invalid code 770 type 1 [ 260.795985][ T43] HID 045e:07da: Invalid code 771 type 1 [ 260.824211][ T43] HID 045e:07da: Invalid code 772 type 1 [ 260.830303][ T43] HID 045e:07da: Invalid code 773 type 1 [ 260.838633][ T43] HID 045e:07da: Invalid code 774 type 1 [ 260.846471][ T43] HID 045e:07da: Invalid code 775 type 1 [ 260.852246][ T43] HID 045e:07da: Invalid code 776 type 1 [ 260.876971][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input15 [ 260.995929][ T43] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 261.047438][ T43] usb 5-1: USB disconnect, device number 5 [ 261.160428][ T9393] loop1: detected capacity change from 0 to 1024 [ 261.164931][ T9378] loop0: detected capacity change from 0 to 32768 [ 261.248753][ T9393] hfsplus: xattr searching failed [ 261.659899][ T9407] loop1: detected capacity change from 0 to 2048 [ 261.767674][ T9412] loop5: detected capacity change from 0 to 2048 [ 261.807691][ T9412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.950093][ T9420] input: syz0 as /devices/virtual/input/input16 [ 262.068103][ T7994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.104054][ T9424] overlayfs: workdir and upperdir must be separate subtrees [ 262.244111][ T9430] loop3: detected capacity change from 0 to 512 [ 262.350660][ T9432] ip6gretap0: entered promiscuous mode [ 262.365881][ T9432] macsec1: entered allmulticast mode [ 262.392753][ T9432] ip6gretap0: entered allmulticast mode [ 262.455496][ T9432] ip6gretap0: left allmulticast mode [ 262.484737][ T9432] ip6gretap0: left promiscuous mode [ 262.528482][ T9418] loop0: detected capacity change from 0 to 32768 [ 262.581836][ T9418] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 262.619582][ T9442] loop4: detected capacity change from 0 to 2048 [ 262.630276][ T9442] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=26504, location=26504 [ 262.672106][ T9442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.738014][ T9418] XFS (loop0): Ending clean mount [ 262.747872][ T9418] XFS (loop0): Quotacheck needed: Please wait. [ 262.801598][ T9442] overlayfs: upper fs needs to support d_type. [ 262.817718][ T9442] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 262.826277][ T9418] XFS (loop0): Quotacheck: Done. [ 262.865852][ T9442] overlayfs: failed to set xattr on upper [ 262.873562][ T9454] loop5: detected capacity change from 0 to 256 [ 262.881759][ T9442] overlayfs: ...falling back to redirect_dir=nofollow. [ 262.898184][ T9442] overlayfs: ...falling back to index=off. [ 262.917552][ T9442] overlayfs: ...falling back to uuid=null. [ 262.944761][ T5913] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 263.020370][ T5843] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 263.031007][ T5836] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 263.039360][ T9458] loop1: detected capacity change from 0 to 256 [ 263.040214][ T9458] exfat: Deprecated parameter 'utf8' [ 263.050167][ T5836] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 263.066723][ T9458] exfat: Deprecated parameter 'namecase' [ 263.073513][ T9458] exfat: Deprecated parameter 'namecase' [ 263.084772][ T9458] exfat: Deprecated parameter 'utf8' [ 263.105321][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 263.116255][ T5913] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.124626][ T5913] usb 4-1: config 0 has no interface number 0 [ 263.154086][ T5913] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.177839][ T9458] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d) [ 263.207341][ T5913] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.245129][ T5913] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 263.254230][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.313095][ T5913] usb 4-1: config 0 descriptor?? [ 263.404767][ T9463] loop5: detected capacity change from 0 to 128 [ 263.963801][ T5913] uclogic 0003:28BD:0071.0009: pen parameters not found [ 263.986787][ T5913] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 264.200875][ T5913] usb 4-1: USB disconnect, device number 11 [ 264.277511][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.289930][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.303139][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.318555][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.328337][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.848440][ T9479] loop1: detected capacity change from 0 to 32768 [ 264.868347][ T9480] chnl_net:caif_netlink_parms(): no params data found [ 264.911780][ T9479] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 265.070503][ T9479] XFS (loop1): Ending clean mount [ 265.091866][ T9479] XFS (loop1): Quotacheck needed: Please wait. [ 265.106277][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 265.114339][ T9483] loop5: detected capacity change from 0 to 32768 [ 265.151739][ T9483] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 265.183560][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.191733][ T9479] XFS (loop1): Quotacheck: Done. [ 265.196724][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.196932][ T9480] bridge_slave_0: entered allmulticast mode [ 265.198861][ T9480] bridge_slave_0: entered promiscuous mode [ 265.242180][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.280568][ T43] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 265.293717][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.321742][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 265.330988][ T9480] bridge_slave_1: entered allmulticast mode [ 265.349716][ T5828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 265.381505][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 265.391101][ T9480] bridge_slave_1: entered promiscuous mode [ 265.410069][ T43] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 265.419222][ T9483] XFS (loop5): Ending clean mount [ 265.445058][ T43] usb 4-1: Product: syz [ 265.452568][ T9483] XFS (loop5): Quotacheck needed: Please wait. [ 265.455668][ T43] usb 4-1: Manufacturer: syz [ 265.501393][ T43] usb 4-1: SerialNumber: syz [ 265.544338][ T43] usb 4-1: config 0 descriptor?? [ 265.576864][ T43] usb 4-1: selecting invalid altsetting 0 [ 265.591934][ T9483] XFS (loop5): Quotacheck: Done. [ 265.650550][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.699744][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.785953][ T7994] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 265.895343][ T9515] loop0: detected capacity change from 0 to 32768 [ 265.937773][ T9480] team0: Port device team_slave_0 added [ 265.947414][ T9480] team0: Port device team_slave_1 added [ 265.976295][ T43] usb 4-1: USB disconnect, device number 12 [ 266.049965][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.077378][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.117932][ T9515] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 266.155345][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.192517][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.217860][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.313035][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.374683][ T9515] XFS (loop0): Ending clean mount [ 266.404697][ T51] Bluetooth: hci2: command tx timeout [ 266.495266][ T9515] XFS (loop0): Quotacheck needed: Please wait. [ 266.593996][ T9480] hsr_slave_0: entered promiscuous mode [ 266.616000][ T9480] hsr_slave_1: entered promiscuous mode [ 266.631511][ T9480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.644645][ T9480] Cannot create hsr debugfs directory [ 266.804083][ T9528] loop5: detected capacity change from 0 to 64 [ 266.903621][ T9515] XFS (loop0): Quotacheck: Done. [ 267.030557][ T9517] loop1: detected capacity change from 0 to 131072 [ 267.130398][ T5843] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 267.150067][ T9517] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 267.231375][ T9517] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 267.358491][ T9538] netlink: 'syz.5.1212': attribute type 10 has an invalid length. [ 267.364741][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1214'. [ 267.413423][ T9538] team0: Device dummy0 is up. Set it down before adding it as a team port [ 267.414983][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'. [ 267.543391][ T9480] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.584340][ T9480] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.609382][ T9480] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.669860][ T9480] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.833026][ T9552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.998041][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.083193][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.111287][ T9557] loop0: detected capacity change from 0 to 4096 [ 268.134870][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.142025][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.175773][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.183010][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.373261][ T9565] netlink: 'syz.3.1223': attribute type 5 has an invalid length. [ 268.488587][ T51] Bluetooth: hci2: command tx timeout [ 268.907823][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.922911][ T9580] random: crng reseeded on system resumption [ 269.079396][ T9584] loop5: detected capacity change from 0 to 2048 [ 269.147006][ T9584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.181212][ T9584] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.208751][ T30] audit: type=1326 audit(1750783097.548:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.3.1232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c1b18e929 code=0x0 [ 269.331936][ T9584] overlayfs: failed to create directory ./file0/index (errno: 28); mounting read-only [ 269.361564][ T9584] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 269.554029][ T7994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.812678][ T9480] veth0_vlan: entered promiscuous mode [ 269.863778][ T9480] veth1_vlan: entered promiscuous mode [ 269.905993][ T9610] netlink: 'syz.5.1238': attribute type 10 has an invalid length. [ 269.941644][ T9610] syz_tun: entered promiscuous mode [ 269.982203][ T9610] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 270.024934][ T9480] veth0_macvtap: entered promiscuous mode [ 270.038913][ T9480] veth1_macvtap: entered promiscuous mode [ 270.065278][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.131490][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.178377][ T3530] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.216332][ T3530] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.256949][ T3530] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.297194][ T3530] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.526701][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.554581][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.566070][ T51] Bluetooth: hci2: command tx timeout [ 270.579122][ T9606] loop0: detected capacity change from 0 to 32768 [ 270.622256][ T9606] JBD2: Ignoring recovery information on journal [ 270.629620][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.671027][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.794261][ T9606] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 271.076875][ T5843] ocfs2: Unmounting device (7,0) on (node local) [ 271.273867][ T9621] loop3: detected capacity change from 0 to 40427 [ 271.323248][ T9621] F2FS-fs (loop3): invalid crc value [ 271.638836][ T9621] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 271.743918][ T9650] loop1: detected capacity change from 0 to 16 [ 271.791428][ T9650] erofs (device loop1): mounted with root inode @ nid 36. [ 271.846384][ T9650] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 271.894616][ T9650] erofs (device loop1): failed to decompress -43 in[46, 4050] out[1851] [ 271.941142][ T9650] erofs (device loop1): read error -117 @ 43 of nid 36 [ 271.949202][ T5839] syz-executor: attempt to access beyond end of device [ 271.949202][ T5839] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 271.973728][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 271.973760][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.973772][ T5839] Call Trace: [ 271.973780][ T5839] [ 271.973789][ T5839] dump_stack_lvl+0x189/0x250 [ 271.973830][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.973857][ T5839] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 271.973882][ T5839] ? __pfx_queue_work_on+0x10/0x10 [ 271.973914][ T5839] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 271.973937][ T5839] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 271.973971][ T5839] ? f2fs_hw_is_readonly+0x39b/0x470 [ 271.974004][ T5839] f2fs_handle_critical_error+0x37c/0x540 [ 271.974039][ T5839] f2fs_write_end_io+0x495/0x810 [ 271.974068][ T5839] ? blkg_put+0x22/0x240 [ 271.974114][ T5839] __submit_merged_bio+0x27a/0x6a0 [ 271.974148][ T5839] __submit_merged_write_cond+0x255/0x530 [ 271.974184][ T5839] f2fs_write_data_pages+0x261d/0x3000 [ 271.974275][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 271.974333][ T5839] ? arch_stack_walk+0xfc/0x150 [ 271.974431][ T5839] ? __mod_zone_page_state+0xd7/0x140 [ 271.974471][ T5839] ? folios_put_refs+0x560/0x640 [ 271.974509][ T5839] ? __lock_acquire+0xab9/0xd20 [ 271.974546][ T5839] ? do_raw_spin_lock+0x121/0x290 [ 271.974582][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 271.974602][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 271.974633][ T5839] do_writepages+0x32b/0x550 [ 271.974674][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 271.974701][ T5839] filemap_fdatawrite+0x199/0x240 [ 271.974731][ T5839] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 271.974818][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 271.974853][ T5839] f2fs_sync_dirty_inodes+0x31f/0x830 [ 271.974900][ T5839] f2fs_write_checkpoint+0x95a/0x1df0 [ 271.974961][ T5839] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 271.975031][ T5839] ? try_to_wake_up+0x7e5/0x1290 [ 271.975060][ T5839] ? kill_f2fs_super+0x298/0x6c0 [ 271.975097][ T5839] kill_f2fs_super+0x2c3/0x6c0 [ 271.975136][ T5839] ? __pfx_kill_f2fs_super+0x10/0x10 [ 271.975163][ T5839] ? radix_tree_delete_item+0x2b6/0x400 [ 271.975197][ T5839] ? shrinker_free+0x2ce/0x3e0 [ 271.975223][ T5839] deactivate_locked_super+0xb9/0x130 [ 271.975251][ T5839] cleanup_mnt+0x425/0x4c0 [ 271.975275][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.975304][ T5839] task_work_run+0x1d4/0x260 [ 271.975331][ T5839] ? __pfx_task_work_run+0x10/0x10 [ 271.975351][ T5839] ? __x64_sys_umount+0x122/0x160 [ 271.975386][ T5839] ? exit_to_user_mode_loop+0x40/0x110 [ 271.975425][ T5839] exit_to_user_mode_loop+0xec/0x110 [ 271.975452][ T5839] do_syscall_64+0x2bd/0x3b0 [ 271.975477][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.975502][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.975523][ T5839] ? clear_bhb_loop+0x60/0xb0 [ 271.975550][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.975569][ T5839] RIP: 0033:0x7f7c1b18fc57 [ 271.975589][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 271.975607][ T5839] RSP: 002b:00007ffc69733dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 271.975630][ T5839] RAX: 0000000000000000 RBX: 00007f7c1b210925 RCX: 00007f7c1b18fc57 [ 271.975644][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc69733e80 [ 271.975656][ T5839] RBP: 00007ffc69733e80 R08: 0000000000000000 R09: 0000000000000000 [ 271.975668][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc69734f10 [ 271.975681][ T5839] R13: 00007f7c1b210925 R14: 00000000000425c2 R15: 00007ffc69734f50 [ 271.975717][ T5839] [ 272.394439][ T9655] loop5: detected capacity change from 0 to 4096 [ 272.424588][ T5839] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 272.626684][ T9655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.644628][ T51] Bluetooth: hci2: command tx timeout [ 272.657022][ T9633] loop6: detected capacity change from 0 to 32768 [ 272.937088][ T7994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.362531][ T9675] loop5: detected capacity change from 0 to 128 [ 273.386276][ T9677] vivid-006: disconnect [ 273.405754][ T9670] vivid-006: reconnect [ 273.651343][ T9684] loop3: detected capacity change from 0 to 2048 [ 273.733956][ T9684] loop3: p1 < > p3 [ 273.747941][ T9684] loop3: p3 size 134217728 extends beyond EOD, truncated [ 273.909907][ T9669] loop1: detected capacity change from 0 to 32768 [ 273.941197][ T9669] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 273.962182][ T9669] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 274.000348][ T9692] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1269'. [ 274.127190][ T5828] ocfs2: Unmounting device (7,1) on (node local) [ 274.448767][ T9707] loop5: detected capacity change from 0 to 64 [ 274.474750][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1277'. [ 274.534763][ T30] audit: type=1800 audit(1750783102.868:1803): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1276" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 274.574312][ T9710] loop3: detected capacity change from 0 to 512 [ 274.595843][ T9710] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.612247][ T9710] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 274.655775][ T9710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0102] [ 274.663885][ T9710] System zones: 1-12 [ 274.684914][ T9710] EXT4-fs (loop3): orphan cleanup on readonly fs [ 274.710090][ T9710] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1278: invalid indirect mapped block 12 (level 1) [ 274.808408][ T9710] EXT4-fs (loop3): Remounting filesystem read-only [ 274.825471][ T9710] EXT4-fs (loop3): 1 truncate cleaned up [ 274.833182][ T9710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 274.876431][ T9719] loop0: detected capacity change from 0 to 8 [ 275.008419][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 275.063638][ T9721] loop5: detected capacity change from 0 to 4096 [ 275.072060][ T9721] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 275.135603][ T9721] ntfs3(loop5): ino=1a, mi_enum_attr [ 275.141081][ T9721] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 275.167526][ T9721] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 276.028015][ T9753] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 276.055219][ T9753] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 276.139039][ T9733] loop0: detected capacity change from 0 to 32768 [ 276.215458][ T9733] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.311585][ T9733] XFS (loop0): Ending clean mount [ 276.458450][ T5843] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.729180][ T9784] loop1: detected capacity change from 0 to 256 [ 276.860429][ T9778] loop6: detected capacity change from 0 to 4096 [ 276.916126][ T9778] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 276.981706][ T9778] ntfs3(loop6): ino=1a, mi_enum_attr [ 277.024474][ T9778] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 277.032767][ T30] audit: type=1326 audit(1750783105.368:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9793 comm="syz.1.1314" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11d5b8e929 code=0x0 [ 277.262551][ T9802] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1317'. [ 277.297395][ T9802] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1317'. [ 277.326388][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1317'. [ 277.344980][ T9802] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1317'. [ 277.358030][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1317'. [ 277.391330][ T9808] loop0: detected capacity change from 0 to 64 [ 277.460515][ T9810] loop6: detected capacity change from 0 to 512 [ 277.469567][ T9810] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 277.504325][ T9810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 277.535149][ T9810] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.615907][ T9480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 278.004675][ T51] Bluetooth: hci2: command tx timeout [ 278.556933][ T9833] loop1: detected capacity change from 0 to 32768 [ 278.830343][ T9833] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=/dev/loop1,noinodes_use_key_cache,fsck,fix_errors=yes,norecovery,nojournal_transaction_names [ 278.830372][ T9833] allowing incompatible features above 0.0: (unknown version) [ 278.830395][ T9833] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 278.876659][ T9833] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 278.886386][ T9833] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 278.895230][ T9833] bcachefs (loop1): Version upgrade required: [ 278.895230][ T9833] Version upgrade from 0.32: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 278.895230][ T9833] Doing incompatible version upgrade from 0.32: (unknown version) to 1.28: inode_has_case_insensitive [ 278.895230][ T9833] running recovery passes: check_allocations,check_extents_to_backpointers,check_snapshots,check_subvols,check_inodes,check_dirents,set_fs_needs_rebalance [ 278.937034][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.000910][ T9833] bcachefs (loop1): accounting_read... done [ 279.036594][ T9833] bcachefs (loop1): alloc_read... done [ 279.037903][ T9835] loop5: detected capacity change from 0 to 32768 [ 279.073873][ T9833] bcachefs (loop1): snapshots_read... done [ 279.080917][ T9833] bcachefs (loop1): done starting filesystem [ 279.129235][ T9835] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 279.154466][ T9837] loop3: detected capacity change from 0 to 40427 [ 279.165456][ T9837] F2FS-fs (loop3): build fault injection type: 0x7 [ 279.209749][ T9837] F2FS-fs (loop3): invalid crc value [ 279.380425][ T9835] XFS (loop5): Ending clean mount [ 279.391346][ T9828] loop6: detected capacity change from 0 to 40427 [ 279.434464][ T9828] F2FS-fs (loop6): Invalid segment/section count (24 != 1 * 1) [ 279.442320][ T9828] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 279.475231][ T5828] bcachefs (loop1): shutting down [ 279.483595][ T9828] F2FS-fs (loop6): invalid crc value [ 279.501245][ T9837] F2FS-fs (loop3): Start checkpoint disabled! [ 279.542006][ T5828] bcachefs (loop1): shutdown complete [ 279.559485][ T9837] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 279.766837][ T7994] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 279.769588][ T9828] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 279.783487][ T9828] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 279.810847][ T9849] loop0: detected capacity change from 0 to 40427 [ 279.829564][ T9849] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 279.831659][ T59] kworker/u8:4: attempt to access beyond end of device [ 279.831659][ T59] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 279.855567][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 279.855599][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.855612][ T59] Workqueue: writeback wb_workfn (flush-7:3) [ 279.855647][ T59] Call Trace: [ 279.855656][ T59] [ 279.855666][ T59] dump_stack_lvl+0x189/0x250 [ 279.855705][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.855732][ T59] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 279.855756][ T59] ? __pfx_queue_work_on+0x10/0x10 [ 279.855788][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 279.855811][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 279.855837][ T59] ? f2fs_hw_is_readonly+0x39b/0x470 [ 279.855873][ T59] f2fs_handle_critical_error+0x37c/0x540 [ 279.855911][ T59] f2fs_write_end_io+0x495/0x810 [ 279.855939][ T59] ? blkg_put+0x22/0x240 [ 279.855990][ T59] __submit_merged_bio+0x27a/0x6a0 [ 279.856026][ T59] __submit_merged_write_cond+0x255/0x530 [ 279.856063][ T59] f2fs_write_data_pages+0x261d/0x3000 [ 279.856145][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 279.856194][ T59] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 279.856305][ T59] ? folio_try_get+0x1c/0x340 [ 279.856367][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 279.856410][ T59] do_writepages+0x32b/0x550 [ 279.856447][ T59] ? reacquire_held_locks+0x127/0x1d0 [ 279.856475][ T59] ? writeback_sb_inodes+0x384/0x1010 [ 279.856516][ T59] __writeback_single_inode+0x145/0xff0 [ 279.856542][ T59] ? do_raw_spin_unlock+0x122/0x240 [ 279.856569][ T59] writeback_sb_inodes+0x6c7/0x1010 [ 279.856635][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 279.856725][ T59] ? rcu_is_watching+0x15/0xb0 [ 279.856770][ T59] wb_writeback+0x43b/0xaf0 [ 279.856810][ T59] ? queue_io+0x351/0x590 [ 279.856842][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 279.856883][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.856914][ T59] wb_workfn+0x409/0xef0 [ 279.856961][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 279.856993][ T59] ? __lock_acquire+0xab9/0xd20 [ 279.857036][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 279.857074][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.857095][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 279.857120][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 279.857150][ T59] process_scheduled_works+0xade/0x17b0 [ 279.857223][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.857278][ T59] worker_thread+0x8a0/0xda0 [ 279.857349][ T59] kthread+0x711/0x8a0 [ 279.857376][ T59] ? __pfx_worker_thread+0x10/0x10 [ 279.857412][ T59] ? __pfx_kthread+0x10/0x10 [ 279.857437][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.857460][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.857482][ T59] ? __pfx_kthread+0x10/0x10 [ 279.857506][ T59] ret_from_fork+0x3fc/0x770 [ 279.857538][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 279.857575][ T59] ? __switch_to_asm+0x39/0x70 [ 279.857593][ T59] ? __switch_to_asm+0x33/0x70 [ 279.857610][ T59] ? __pfx_kthread+0x10/0x10 [ 279.857634][ T59] ret_from_fork_asm+0x1a/0x30 [ 279.857679][ T59] [ 279.857688][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 279.871289][ T9849] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 280.188756][ T9480] syz-executor: attempt to access beyond end of device [ 280.188756][ T9480] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 280.239330][ T9480] CPU: 0 UID: 0 PID: 9480 Comm: syz-executor Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 280.239370][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.239383][ T9480] Call Trace: [ 280.239391][ T9480] [ 280.239401][ T9480] dump_stack_lvl+0x189/0x250 [ 280.239442][ T9480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.239469][ T9480] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 280.239494][ T9480] ? __pfx_queue_work_on+0x10/0x10 [ 280.239526][ T9480] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 280.239550][ T9480] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.239577][ T9480] ? f2fs_hw_is_readonly+0x39b/0x470 [ 280.239613][ T9480] f2fs_handle_critical_error+0x37c/0x540 [ 280.239650][ T9480] f2fs_write_end_io+0x495/0x810 [ 280.239677][ T9480] ? blkg_put+0x22/0x240 [ 280.239728][ T9480] __submit_merged_bio+0x27a/0x6a0 [ 280.239765][ T9480] __submit_merged_write_cond+0x255/0x530 [ 280.239803][ T9480] f2fs_write_data_pages+0x261d/0x3000 [ 280.239829][ T9480] ? __lock_acquire+0xab9/0xd20 [ 280.239906][ T9480] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 280.240008][ T9480] ? stack_depot_save_flags+0x40/0x900 [ 280.240061][ T9480] ? kthread_stop+0x194/0x5f0 [ 280.240088][ T9480] ? kill_f2fs_super+0x137/0x6c0 [ 280.240114][ T9480] ? deactivate_locked_super+0xb9/0x130 [ 280.240152][ T9480] ? __lock_acquire+0xab9/0xd20 [ 280.240202][ T9480] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 280.240233][ T9480] do_writepages+0x32b/0x550 [ 280.240279][ T9480] ? do_raw_spin_unlock+0x122/0x240 [ 280.240308][ T9480] filemap_fdatawrite+0x199/0x240 [ 280.240338][ T9480] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 280.240445][ T9480] ? do_raw_spin_unlock+0x122/0x240 [ 280.240474][ T9480] f2fs_sync_dirty_inodes+0x31f/0x830 [ 280.240529][ T9480] f2fs_write_checkpoint+0x95a/0x1df0 [ 280.240596][ T9480] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 280.240684][ T9480] ? try_to_wake_up+0x7e5/0x1290 [ 280.240717][ T9480] ? kill_f2fs_super+0x298/0x6c0 [ 280.240756][ T9480] kill_f2fs_super+0x2c3/0x6c0 [ 280.240798][ T9480] ? __pfx_kill_f2fs_super+0x10/0x10 [ 280.240825][ T9480] ? radix_tree_delete_item+0x2b6/0x400 [ 280.240859][ T9480] ? shrinker_free+0x2ce/0x3e0 [ 280.240887][ T9480] deactivate_locked_super+0xb9/0x130 [ 280.240915][ T9480] cleanup_mnt+0x425/0x4c0 [ 280.240940][ T9480] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.240971][ T9480] task_work_run+0x1d4/0x260 [ 280.240999][ T9480] ? __pfx_task_work_run+0x10/0x10 [ 280.241019][ T9480] ? __x64_sys_umount+0x122/0x160 [ 280.241056][ T9480] ? exit_to_user_mode_loop+0x40/0x110 [ 280.241089][ T9480] exit_to_user_mode_loop+0xec/0x110 [ 280.241115][ T9480] do_syscall_64+0x2bd/0x3b0 [ 280.241139][ T9480] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.241163][ T9480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.241183][ T9480] ? clear_bhb_loop+0x60/0xb0 [ 280.241210][ T9480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.241230][ T9480] RIP: 0033:0x7fa1b938fc57 [ 280.241250][ T9480] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 280.241267][ T9480] RSP: 002b:00007ffd21ecc918 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 280.241290][ T9480] RAX: 0000000000000000 RBX: 00007fa1b9410925 RCX: 00007fa1b938fc57 [ 280.241303][ T9480] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd21ecc9d0 [ 280.241315][ T9480] RBP: 00007ffd21ecc9d0 R08: 0000000000000000 R09: 0000000000000000 [ 280.241328][ T9480] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd21ecda60 [ 280.241341][ T9480] R13: 00007fa1b9410925 R14: 00000000000445b0 R15: 00007ffd21ecdaa0 [ 280.241390][ T9480] [ 280.241399][ T9480] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 280.400196][ T9849] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 280.561066][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.646683][ T9849] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 280.968987][ T9873] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1341'. [ 281.024754][ T9873] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1341'. [ 281.033886][ T9873] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1341'. [ 281.276870][ T9868] loop5: detected capacity change from 0 to 32768 [ 281.310769][ T9868] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 281.383343][ T9868] XFS (loop5): Ending clean mount [ 281.569431][ T7994] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 281.712777][ T9893] loop6: detected capacity change from 0 to 512 [ 281.814184][ T9893] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.1345: casefold flag without casefold feature [ 281.849304][ T9893] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1345: couldn't read orphan inode 15 (err -117) [ 281.870446][ T9893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.212072][ T9480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.809160][ T5892] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 282.992096][ T9919] [U] [ 282.994795][ T5892] usb 7-1: Using ep0 maxpacket: 16 [ 282.995292][ T9919] [U] [ 283.002342][ T5892] usb 7-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 283.003102][ T9919] [U] [ 283.014387][ T9919] [U] [ 283.014416][ T5892] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 283.055318][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.069720][ T9919] [U] [ 283.072485][ T9919] [U] [ 283.075213][ T9919] [U] [ 283.077941][ T9919] [U] [ 283.084889][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.104742][ T9919] [U] [ 283.107499][ T9919] [U] [ 283.110240][ T9919] [U] [ 283.112270][ T5892] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 283.112953][ T9919] [U] [ 283.142831][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.158042][ T9919] [U] [ 283.160814][ T9919] [U] [ 283.163541][ T9919] [U] [ 283.166269][ T9919] [U] [ 283.167230][ T5892] usb 7-1: config 0 descriptor?? [ 283.208086][ T9919] [U] [ 283.210857][ T9919] [U] [ 283.213581][ T9919] [U] [ 283.216300][ T9919] [U] [ 283.234652][ T9919] [U] [ 283.237417][ T9919] [U] [ 283.240144][ T9919] [U] [ 283.242862][ T9919] [U] [ 283.261882][ T9919] [U] [ 283.264648][ T9919] [U] [ 283.267370][ T9919] [U] [ 283.270102][ T9919] [U] [ 283.310548][ T9919] [U] [ 283.313321][ T9919] [U] [ 283.316134][ T9919] [U] [ 283.318858][ T9919] [U] [ 283.352255][ T9919] [U] [ 283.355022][ T9919] [U] [ 283.357758][ T9919] [U] [ 283.360477][ T9919] [U] [ 283.393812][ T9919] [U] [ 283.396657][ T9919] [U] [ 283.399356][ T9919] [U] [ 283.402068][ T9919] [U] [ 283.424697][ T9919] [U] [ 283.427470][ T9919] [U] [ 283.430181][ T9919] [U] [ 283.432888][ T9919] [U] [ 283.444150][ T9919] [U] [ 283.446916][ T9919] [U] [ 283.449639][ T9919] [U] [ 283.452360][ T9919] [U] [ 283.487337][ T9919] [U] [ 283.490116][ T9919] [U] [ 283.492859][ T9919] [U] [ 283.495584][ T9919] [U] [ 283.510869][ T9919] [U] [ 283.513633][ T9919] [U] [ 283.516358][ T9919] [U] [ 283.519087][ T9919] [U] [ 283.531543][ T9909] loop5: detected capacity change from 0 to 40427 [ 283.554584][ T9909] F2FS-fs (loop5): build fault injection rate: 690 [ 283.564541][ T9909] F2FS-fs (loop5): heap/no_heap options were deprecated [ 283.574515][ T9919] [U] [ 283.577255][ T9919] [U] [ 283.579955][ T9919] [U] [ 283.582649][ T9919] [U] [ 283.609980][ T5892] playstation 0003:054C:05C4.000A: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.6-1/input0 [ 283.621749][ T9909] F2FS-fs (loop5): invalid crc value [ 283.631884][ T9919] [U] [ 283.634634][ T9919] [U] [ 283.637355][ T9919] [U] [ 283.640085][ T9919] [U] [ 283.667418][ T9919] [U] [ 283.670186][ T9919] [U] [ 283.672903][ T9919] [U] [ 283.675711][ T9919] [U] [ 283.692764][ T9930] netlink: 'syz.0.1358': attribute type 9 has an invalid length. [ 283.704511][ T9919] [U] [ 283.707246][ T9919] [U] [ 283.709949][ T9919] [U] [ 283.712641][ T9919] [U] [ 283.754578][ T9919] [U] [ 283.757349][ T9919] [U] [ 283.760072][ T9919] [U] [ 283.762805][ T9919] [U] [ 283.786688][ T9919] [U] [ 283.789454][ T9919] [U] [ 283.792183][ T9919] [U] [ 283.794905][ T9919] [U] [ 283.801781][ T5892] playstation 0003:054C:05C4.000A: Invalid byte count transferred, expected 16 got 0 [ 283.824591][ T5892] playstation 0003:054C:05C4.000A: Failed to retrieve DualShock4 pairing info: -22 [ 283.834004][ T5892] playstation 0003:054C:05C4.000A: Failed to get MAC address from DualShock4 [ 283.863266][ T9919] [U] [ 283.866028][ T9919] [U] [ 283.868852][ T9919] [U] [ 283.871573][ T9919] [U] [ 283.885915][ T9909] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 283.900637][ T9919] [U] [ 283.904488][ T5892] playstation 0003:054C:05C4.000A: Failed to create dualshock4. [ 283.932893][ T5892] playstation 0003:054C:05C4.000A: probe with driver playstation failed with error -22 [ 283.960989][ T9933] loop3: detected capacity change from 0 to 512 [ 283.998800][ T9909] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 284.025486][ T9933] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 284.039176][ T5892] usb 7-1: USB disconnect, device number 2 [ 284.046130][ T9933] System zones: 0-2, 18-18, 34-35 [ 284.094154][ T9933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.112318][ T9933] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.213499][ T9942] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1362'. [ 284.251656][ T9942] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1362'. [ 284.300148][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.559544][ T9963] loop1: detected capacity change from 0 to 32768 [ 285.614079][ T9963] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 285.751591][ T9963] XFS (loop1): Ending clean mount [ 285.781413][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 285.784022][ T9963] XFS (loop1): Quotacheck needed: Please wait. [ 285.790766][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 285.808428][T10003] netlink: 'syz.3.1388': attribute type 11 has an invalid length. [ 285.878190][ T9963] XFS (loop1): Quotacheck: Done. [ 286.008818][T10008] loop6: detected capacity change from 0 to 1024 [ 286.048242][ T5828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.058094][T10008] hfsplus: request for non-existent node 134217728 in B*Tree [ 286.084671][T10008] hfsplus: request for non-existent node 134217728 in B*Tree [ 286.117815][T10012] hfsplus: hfsplus: Invalid key length: 30878 [ 286.776402][T10015] loop3: detected capacity change from 0 to 32768 [ 286.799497][T10015] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 286.811934][T10015] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 286.890180][T10015] XFS (loop3): Ending clean mount [ 286.905212][T10015] XFS (loop3): Quotacheck needed: Please wait. [ 286.984686][T10015] XFS (loop3): Quotacheck: Done. [ 287.119547][ T5839] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 288.092506][T10069] loop1: detected capacity change from 0 to 512 [ 288.134083][T10069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.148911][T10069] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.200382][T10069] capability: warning: `syz.1.1415' uses 32-bit capabilities (legacy support in use) [ 288.217596][T10060] loop3: detected capacity change from 0 to 32768 [ 288.293369][T10060] ialloc: diAlloc returned -28! [ 288.304066][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.603224][T10085] loop6: detected capacity change from 0 to 256 [ 288.615756][T10085] exfat: Bad value for 'uid' [ 288.620499][T10085] exfat: Bad value for 'uid' [ 288.638114][T10085] bpf: Bad value for 'uid' [ 288.910806][T10094] loop1: detected capacity change from 0 to 1764 [ 289.165788][T10103] mmap: syz.1.1429 (10103): VmData 39563264 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 289.430375][T10113] loop6: detected capacity change from 0 to 128 [ 289.476684][T10113] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.477975][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 289.490731][T10109] loop3: detected capacity change from 0 to 4096 [ 289.510396][T10113] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.521796][T10109] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 289.662628][T10087] loop5: detected capacity change from 0 to 40427 [ 289.672598][T10087] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 289.692027][T10087] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 289.732203][ T9480] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.734235][T10087] F2FS-fs (loop5): invalid crc value [ 290.116011][T10087] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 290.135031][T10087] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 290.327013][T10146] loop1: detected capacity change from 0 to 2048 [ 290.352427][T10146] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 290.373277][T10151] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 290.373277][T10151] The task syz.0.1448 (10151) triggered the difference, watch for misbehavior. [ 290.427095][ T7994] syz-executor: attempt to access beyond end of device [ 290.427095][ T7994] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 290.449856][T10153] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.456612][ T7994] CPU: 0 UID: 0 PID: 7994 Comm: syz-executor Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 290.456642][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.456653][ T7994] Call Trace: [ 290.456661][ T7994] [ 290.456669][ T7994] dump_stack_lvl+0x189/0x250 [ 290.456707][ T7994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.456731][ T7994] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 290.456754][ T7994] ? __pfx_queue_work_on+0x10/0x10 [ 290.456782][ T7994] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 290.456803][ T7994] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.456826][ T7994] ? f2fs_hw_is_readonly+0x39b/0x470 [ 290.456858][ T7994] f2fs_handle_critical_error+0x37c/0x540 [ 290.456890][ T7994] f2fs_write_end_io+0x495/0x810 [ 290.456915][ T7994] ? blkg_put+0x22/0x240 [ 290.456959][ T7994] __submit_merged_bio+0x27a/0x6a0 [ 290.456991][ T7994] __submit_merged_write_cond+0x255/0x530 [ 290.457032][ T7994] f2fs_write_data_pages+0x261d/0x3000 [ 290.457056][ T7994] ? __lock_acquire+0xab9/0xd20 [ 290.457122][ T7994] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 290.457211][ T7994] ? stack_depot_save_flags+0x40/0x900 [ 290.457258][ T7994] ? kthread_stop+0x194/0x5f0 [ 290.457282][ T7994] ? kill_f2fs_super+0x137/0x6c0 [ 290.457306][ T7994] ? deactivate_locked_super+0xb9/0x130 [ 290.457339][ T7994] ? __lock_acquire+0xab9/0xd20 [ 290.457384][ T7994] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 290.457416][ T7994] do_writepages+0x32b/0x550 [ 290.457456][ T7994] ? do_raw_spin_unlock+0x122/0x240 [ 290.457481][ T7994] filemap_fdatawrite+0x199/0x240 [ 290.457508][ T7994] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 290.457595][ T7994] ? do_raw_spin_unlock+0x122/0x240 [ 290.457620][ T7994] f2fs_sync_dirty_inodes+0x31f/0x830 [ 290.457668][ T7994] f2fs_write_checkpoint+0x95a/0x1df0 [ 290.457726][ T7994] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 290.457803][ T7994] ? try_to_wake_up+0x7e5/0x1290 [ 290.457831][ T7994] ? kill_f2fs_super+0x298/0x6c0 [ 290.457864][ T7994] kill_f2fs_super+0x2c3/0x6c0 [ 290.457900][ T7994] ? __pfx_kill_f2fs_super+0x10/0x10 [ 290.457925][ T7994] ? radix_tree_delete_item+0x2b6/0x400 [ 290.457957][ T7994] ? shrinker_free+0x2ce/0x3e0 [ 290.457981][ T7994] deactivate_locked_super+0xb9/0x130 [ 290.458013][ T7994] cleanup_mnt+0x425/0x4c0 [ 290.458035][ T7994] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.458062][ T7994] task_work_run+0x1d4/0x260 [ 290.458087][ T7994] ? __pfx_task_work_run+0x10/0x10 [ 290.458104][ T7994] ? __x64_sys_umount+0x122/0x160 [ 290.458137][ T7994] ? exit_to_user_mode_loop+0x40/0x110 [ 290.458166][ T7994] exit_to_user_mode_loop+0xec/0x110 [ 290.458190][ T7994] do_syscall_64+0x2bd/0x3b0 [ 290.458212][ T7994] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.458234][ T7994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.458251][ T7994] ? clear_bhb_loop+0x60/0xb0 [ 290.458275][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.458293][ T7994] RIP: 0033:0x7fc6ca38fc57 [ 290.458311][ T7994] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 290.458327][ T7994] RSP: 002b:00007ffd9f5fe568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 290.458348][ T7994] RAX: 0000000000000000 RBX: 00007fc6ca410925 RCX: 00007fc6ca38fc57 [ 290.458361][ T7994] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9f5fe620 [ 290.458372][ T7994] RBP: 00007ffd9f5fe620 R08: 0000000000000000 R09: 0000000000000000 [ 290.458383][ T7994] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9f5ff6b0 [ 290.458394][ T7994] R13: 00007fc6ca410925 R14: 0000000000046d86 R15: 00007ffd9f5ff6f0 [ 290.458430][ T7994] [ 290.464018][ T7994] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 290.751191][T10157] loop6: detected capacity change from 0 to 256 [ 290.918548][T10157] exfat: Deprecated parameter 'namecase' [ 290.944618][T10157] exfat: Deprecated parameter 'utf8' [ 290.975629][T10157] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 291.275890][T10171] loop0: detected capacity change from 0 to 64 [ 291.326651][ T30] audit: type=1800 audit(1750783119.668:1805): pid=10171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1459" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 291.703886][T10179] loop3: detected capacity change from 0 to 256 [ 291.762144][T10179] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0xd8e97c99, utbl_chksum : 0xe619d30d) [ 291.838219][T10165] loop1: detected capacity change from 0 to 32768 [ 291.864107][ T30] audit: type=1800 audit(1750783120.188:1806): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1463" name="file2" dev="loop3" ino=1048678 res=0 errno=0 [ 291.907656][ T30] audit: type=1800 audit(1750783120.188:1807): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1463" name="file2" dev="loop3" ino=1048678 res=0 errno=0 [ 292.169975][T10165] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 292.170007][T10165] allowing incompatible features above 0.0: (unknown version) [ 292.170020][T10165] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 292.215905][T10165] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 292.224725][T10165] bcachefs (loop1): initializing new filesystem [ 292.242288][T10165] bcachefs (loop1): going read-write [ 292.303677][T10165] bcachefs (loop1): marking superblocks [ 292.365040][T10165] bcachefs (loop1): initializing freespace [ 292.417970][T10165] bcachefs (loop1): done initializing freespace [ 292.476236][T10165] bcachefs (loop1): reading snapshots table [ 292.513095][T10165] bcachefs (loop1): reading snapshots done [ 292.640699][T10165] bcachefs (loop1): done starting filesystem [ 292.821637][T10183] loop6: detected capacity change from 0 to 32768 [ 292.874296][ T5828] bcachefs (loop1): shutting down [ 292.897714][T10183] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 292.914489][ T5828] bcachefs (loop1): going read-only [ 292.934999][T10228] loop5: detected capacity change from 0 to 2048 [ 292.938965][ T5828] bcachefs (loop1): finished waiting for writes to stop [ 292.978364][ T5828] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 293.037930][T10228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.051070][T10183] XFS (loop6): Ending clean mount [ 293.089420][T10183] XFS (loop6): Quotacheck needed: Please wait. [ 293.104329][ T5828] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 293.154114][ T5828] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 293.166640][T10228] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 293.190318][ T5828] bcachefs (loop1): marking filesystem clean [ 293.224215][T10183] XFS (loop6): Quotacheck: Done. [ 293.224287][T10228] EXT4-fs (loop5): Remounting filesystem read-only [ 293.306193][ T5828] bcachefs (loop1): shutdown complete [ 293.426807][ T7994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.492424][ T9480] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 294.480231][T10245] loop3: detected capacity change from 0 to 131072 [ 294.518148][T10258] netlink: 'syz.5.1486': attribute type 83 has an invalid length. [ 294.634539][T10245] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.699647][T10268] loop6: detected capacity change from 0 to 64 [ 294.761996][T10268] hfs: request for non-existent node 131072 in B*Tree [ 294.764460][ T30] audit: type=1800 audit(1750783123.098:1808): pid=10268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1493" name="file2" dev="loop6" ino=21 res=0 errno=0 [ 294.769373][T10268] hfs: request for non-existent node 131072 in B*Tree [ 295.056990][T10274] loop5: detected capacity change from 0 to 4096 [ 295.095147][T10277] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1497'. [ 295.137961][T10276] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1497'. [ 295.150963][T10278] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1497'. [ 295.759461][T10289] loop6: detected capacity change from 0 to 256 [ 295.770079][T10289] exfat: Deprecated parameter 'namecase' [ 295.815585][T10289] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 296.239284][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 296.496217][T10309] loop1: detected capacity change from 0 to 256 [ 296.606610][T10314] syz.1.1509: attempt to access beyond end of device [ 296.606610][T10314] loop1: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 296.630791][T10314] syz.1.1509: attempt to access beyond end of device [ 296.630791][T10314] loop1: rw=2049, sector=608, nr_sectors = 176 limit=256 [ 296.790151][T10309] syz.1.1509: attempt to access beyond end of device [ 296.790151][T10309] loop1: rw=2049, sector=784, nr_sectors = 16 limit=256 [ 296.822787][T10309] syz.1.1509: attempt to access beyond end of device [ 296.822787][T10309] loop1: rw=2049, sector=832, nr_sectors = 192 limit=256 [ 296.841575][T10309] syz.1.1509: attempt to access beyond end of device [ 296.841575][T10309] loop1: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 297.220149][T10337] loop0: detected capacity change from 0 to 64 [ 297.352865][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1524'. [ 297.365704][ T5892] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 297.536846][ T5892] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 297.557046][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.583128][ T5892] usb 2-1: config 0 descriptor?? [ 297.604236][ T5892] cp210x 2-1:0.0: cp210x converter detected [ 297.652391][T10350] loop6: detected capacity change from 0 to 2048 [ 297.680498][ T3485] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.690716][ T3485] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.699547][ T3485] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.709561][ T3485] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.726408][T10350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.745064][T10350] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.923655][ T9480] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.024651][ T5892] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 298.052197][ T5892] usb 2-1: cp210x converter now attached to ttyUSB0 [ 298.181964][ T5892] kernel write not supported for file /amidi2 (pid: 5892 comm: kworker/0:3) [ 298.244138][ T5931] usb 2-1: USB disconnect, device number 9 [ 298.276002][ T5931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 298.277764][T10373] loop6: detected capacity change from 0 to 1764 [ 298.301000][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1538'. [ 298.329945][ T5931] cp210x 2-1:0.0: device disconnected [ 298.631553][T10384] bridge1: entered promiscuous mode [ 298.637408][T10384] bridge1: entered allmulticast mode [ 298.650494][T10365] loop0: detected capacity change from 0 to 32768 [ 298.714754][ T1207] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 298.889266][ T1207] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.928448][ T1207] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 298.947836][ T1207] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 298.966866][ T1207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.975686][T10393] binder: 10392:10393 ioctl 400c620e 200000000280 returned -22 [ 299.007766][ T1207] usb 7-1: config 0 descriptor?? [ 299.023607][T10391] loop3: detected capacity change from 0 to 2048 [ 299.070501][T10391] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 299.124779][T10394] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.368991][T10399] loop1: detected capacity change from 0 to 64 [ 299.440575][T10401] misc userio: The device must be registered before sending interrupts [ 299.460617][ T1207] Bluetooth: Can't get state to change to load configuration err [ 299.488887][ T1207] Bluetooth: Loading sysconfig file failed [ 299.525545][ T1207] ath3k 7-1:0.0: probe with driver ath3k failed with error -16 [ 299.676184][ T5893] usb 7-1: USB disconnect, device number 3 [ 299.919913][T10413] loop5: detected capacity change from 0 to 8 [ 300.108050][ T3530] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.121203][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1559'. [ 300.288837][ T3530] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.349534][ T3530] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.432046][ T3530] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.733439][T10427] loop5: detected capacity change from 0 to 8192 [ 300.829059][T10427] loop5: p1 p3 p4 [ 300.832867][T10427] loop5: partition table partially beyond EOD, truncated [ 300.859901][ T3530] bridge_slave_1: left allmulticast mode [ 300.878708][ T3530] bridge_slave_1: left promiscuous mode [ 300.884243][T10427] loop5: p1 size 3506438656 extends beyond EOD, truncated [ 300.892874][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.905817][ T3530] bridge_slave_0: left allmulticast mode [ 300.911713][ T3530] bridge_slave_0: left promiscuous mode [ 300.917682][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.927843][T10427] loop5: p3 start 218103808 is beyond EOD, truncated [ 300.946135][T10427] loop5: p4 size 50331648 extends beyond EOD, truncated [ 301.155774][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.176507][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.186515][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.198154][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.206230][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.843409][ T3530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.856130][ T3530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.867719][ T3530] bond0 (unregistering): Released all slaves [ 301.887434][T10434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1568'. [ 302.042635][T10452] netlink: 'syz.6.1574': attribute type 1 has an invalid length. [ 302.051171][T10452] netlink: 'syz.6.1574': attribute type 2 has an invalid length. [ 302.625494][T10464] loop0: detected capacity change from 0 to 128 [ 302.842041][T10437] chnl_net:caif_netlink_parms(): no params data found [ 302.922171][T10470] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.929313][T10470] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 303.216497][T10478] loop3: detected capacity change from 0 to 1024 [ 303.238735][T10478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.298248][ T5833] Bluetooth: hci1: command tx timeout [ 303.359828][T10478] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.435626][ T30] audit: type=1800 audit(1750783131.778:1809): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1585" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 303.561266][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 303.692753][T10500] loop3: detected capacity change from 0 to 1024 [ 303.742204][ T3530] hsr_slave_0: left promiscuous mode [ 303.756820][ T3530] hsr_slave_1: left promiscuous mode [ 303.766253][ T3530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.779667][T10498] loop6: detected capacity change from 0 to 4096 [ 303.786536][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.798676][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.853767][T10503] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.857039][ T3530] veth1_macvtap: left promiscuous mode [ 303.884575][ T3530] veth0_macvtap: left promiscuous mode [ 303.890394][ T3530] veth1_vlan: left promiscuous mode [ 303.916289][ T3530] veth0_vlan: left promiscuous mode [ 303.935379][ T30] audit: type=1800 audit(1750783132.268:1810): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1592" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 304.417464][ T5892] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 304.614259][ T5892] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 304.624428][ T5892] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 304.641129][ T5892] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 304.666242][ T5892] usb 4-1: config 220 has no interface number 2 [ 304.674469][ T5892] usb 4-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 32 [ 304.690428][ T5892] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 304.739047][ T5892] usb 4-1: config 220 interface 0 has no altsetting 0 [ 304.773060][ T5892] usb 4-1: config 220 interface 76 has no altsetting 0 [ 304.780606][ T5892] usb 4-1: config 220 interface 1 has no altsetting 0 [ 304.829653][ T5892] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 304.841509][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.854555][ T5892] usb 4-1: Product: syz [ 304.858767][ T5892] usb 4-1: Manufacturer: syz [ 304.863386][ T5892] usb 4-1: SerialNumber: syz [ 304.971836][T10516] loop5: detected capacity change from 0 to 32768 [ 305.013881][T10516] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.127836][ T5892] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 305.148473][ T5892] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 305.157051][ T5892] usb 4-1: No valid video chain found. [ 305.162647][ T5892] usb 4-1: selecting invalid altsetting 0 [ 305.191044][ T5892] usb 4-1: selecting invalid altsetting 0 [ 305.212992][ T5892] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 305.244547][T10516] XFS (loop5): Ending clean mount [ 305.254967][ T5892] usb 4-1: USB disconnect, device number 13 [ 305.335629][T10516] XFS (loop5): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 305.363153][T10516] XFS (loop5): Unmount and run xfs_repair [ 305.371434][ T5833] Bluetooth: hci1: command tx timeout [ 305.374937][T10516] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 305.384318][T10516] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 305.414570][T10516] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 305.428493][T10516] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 305.437510][T10516] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 305.447403][T10516] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 305.458161][T10516] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 305.467222][T10516] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 305.476276][T10516] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 305.485473][T10516] XFS (loop5): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 305.531309][T10516] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 305.547047][ T3530] team0 (unregistering): Port device team_slave_1 removed [ 305.547288][T10516] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 305.692367][ T7994] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.703473][ T3530] team0 (unregistering): Port device team_slave_0 removed [ 305.744083][T10528] ================================================================== [ 305.752490][T10528] BUG: KASAN: slab-use-after-free in xfs_inode_item_push+0x28f/0x2e0 [ 305.760593][T10528] Read of size 8 at addr ffff8880565f2bb8 by task xfsaild/loop5/10528 [ 305.768777][T10528] [ 305.771214][T10528] CPU: 0 UID: 0 PID: 10528 Comm: xfsaild/loop5 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 305.771241][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.771254][T10528] Call Trace: [ 305.771262][T10528] [ 305.771270][T10528] dump_stack_lvl+0x189/0x250 [ 305.771303][T10528] ? __virt_addr_valid+0x1c8/0x5c0 [ 305.771322][T10528] ? rcu_is_watching+0x15/0xb0 [ 305.771349][T10528] ? __kasan_check_byte+0x12/0x40 [ 305.771378][T10528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.771406][T10528] ? rcu_is_watching+0x15/0xb0 [ 305.771434][T10528] ? lock_release+0x4b/0x3e0 [ 305.771460][T10528] ? __virt_addr_valid+0x1c8/0x5c0 [ 305.771479][T10528] ? __virt_addr_valid+0x4a5/0x5c0 [ 305.771499][T10528] print_report+0xd2/0x2b0 [ 305.771526][T10528] ? xfs_inode_item_push+0x28f/0x2e0 [ 305.771550][T10528] kasan_report+0x118/0x150 [ 305.771580][T10528] ? xfs_inode_item_push+0x28f/0x2e0 [ 305.771609][T10528] xfs_inode_item_push+0x28f/0x2e0 [ 305.771636][T10528] xfsaild+0xd92/0x2940 [ 305.771677][T10528] ? xfsaild+0x237/0x2940 [ 305.771702][T10528] ? __pfx_xfsaild+0x10/0x10 [ 305.771728][T10528] ? __kthread_parkme+0x7b/0x200 [ 305.771757][T10528] ? __kthread_parkme+0x1a1/0x200 [ 305.771788][T10528] kthread+0x711/0x8a0 [ 305.771809][T10528] ? __pfx_xfsaild+0x10/0x10 [ 305.771834][T10528] ? __pfx_kthread+0x10/0x10 [ 305.771853][T10528] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.771875][T10528] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.771897][T10528] ? __pfx_kthread+0x10/0x10 [ 305.771917][T10528] ret_from_fork+0x3fc/0x770 [ 305.771944][T10528] ? __pfx_ret_from_fork+0x10/0x10 [ 305.771972][T10528] ? __switch_to_asm+0x39/0x70 [ 305.771991][T10528] ? __switch_to_asm+0x33/0x70 [ 305.772009][T10528] ? __pfx_kthread+0x10/0x10 [ 305.772029][T10528] ret_from_fork_asm+0x1a/0x30 [ 305.772056][T10528] [ 305.772063][T10528] [ 305.955151][T10528] Allocated by task 10516: [ 305.959577][T10528] kasan_save_track+0x3e/0x80 [ 305.964263][T10528] __kasan_slab_alloc+0x6c/0x80 [ 305.969116][T10528] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 305.974595][T10528] xfs_inode_item_init+0x33/0xc0 [ 305.979547][T10528] xfs_trans_ijoin+0xe5/0x130 [ 305.984236][T10528] xfs_create+0x656/0xad0 [ 305.988583][T10528] xfs_generic_create+0x3c9/0xad0 [ 305.993874][T10528] xfs_vn_mkdir+0x37/0x50 [ 305.998227][T10528] vfs_mkdir+0x306/0x510 [ 306.002511][T10528] do_mkdirat+0x247/0x590 [ 306.006841][T10528] __x64_sys_mkdirat+0x87/0xa0 [ 306.011610][T10528] do_syscall_64+0xfa/0x3b0 [ 306.016119][T10528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.022021][T10528] [ 306.024349][T10528] Freed by task 1338: [ 306.028333][T10528] kasan_save_track+0x3e/0x80 [ 306.033025][T10528] kasan_save_free_info+0x46/0x50 [ 306.038047][T10528] __kasan_slab_free+0x62/0x70 [ 306.042814][T10528] kmem_cache_free+0x18f/0x400 [ 306.047584][T10528] xfs_inode_free_callback+0x14f/0x1c0 [ 306.053155][T10528] rcu_core+0xca8/0x1710 [ 306.057579][T10528] handle_softirqs+0x286/0x870 [ 306.062347][T10528] __irq_exit_rcu+0xca/0x1f0 [ 306.066951][T10528] irq_exit_rcu+0x9/0x30 [ 306.071293][T10528] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 306.076937][T10528] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.083047][T10528] [ 306.085372][T10528] The buggy address belongs to the object at ffff8880565f2b88 [ 306.085372][T10528] which belongs to the cache xfs_ili of size 264 [ 306.099078][T10528] The buggy address is located 48 bytes inside of [ 306.099078][T10528] freed 264-byte region [ffff8880565f2b88, ffff8880565f2c90) [ 306.112785][T10528] [ 306.115112][T10528] The buggy address belongs to the physical page: [ 306.121520][T10528] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880565f2668 pfn:0x565f2 [ 306.131580][T10528] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 306.138688][T10528] page_type: f5(slab) [ 306.142671][T10528] raw: 00fff00000000000 ffff888143ef6140 dead000000000122 0000000000000000 [ 306.151256][T10528] raw: ffff8880565f2668 00000000800c000b 00000000f5000000 0000000000000000 [ 306.159840][T10528] page dumped because: kasan: bad access detected [ 306.166336][T10528] page_owner tracks the page as allocated [ 306.172049][T10528] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x52c50(GFP_NOFS|__GFP_RECLAIMABLE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6488, tgid 6487 (syz.3.213), ts 120649623364, free_ts 27881462385 [ 306.192715][T10528] post_alloc_hook+0x240/0x2a0 [ 306.197491][T10528] get_page_from_freelist+0x21e4/0x22c0 [ 306.203036][T10528] __alloc_frozen_pages_noprof+0x181/0x370 [ 306.208837][T10528] alloc_pages_mpol+0x232/0x4a0 [ 306.213690][T10528] allocate_slab+0x8a/0x370 [ 306.218189][T10528] ___slab_alloc+0xbeb/0x1410 [ 306.222893][T10528] kmem_cache_alloc_noprof+0x283/0x3c0 [ 306.228354][T10528] xfs_inode_item_init+0x33/0xc0 [ 306.233291][T10528] xfs_trans_ijoin+0xe5/0x130 [ 306.238053][T10528] xfs_icreate+0xe4/0x160 [ 306.242384][T10528] xfs_qm_qino_alloc+0x232/0x6a0 [ 306.247418][T10528] xfs_qm_init_quotainos+0x48a/0x6b0 [ 306.252724][T10528] xfs_qm_init_quotainfo+0x181/0x1160 [ 306.258103][T10528] xfs_qm_mount_quotas+0xa6/0x670 [ 306.263176][T10528] xfs_mountfs+0x1b6f/0x2330 [ 306.267864][T10528] xfs_fs_fill_super+0x11b3/0x1600 [ 306.272999][T10528] page last free pid 1 tgid 1 stack trace: [ 306.278902][T10528] __free_frozen_pages+0xb80/0xd80 [ 306.284027][T10528] free_contig_range+0x1bd/0x4a0 [ 306.288968][T10528] destroy_args+0x7e/0x5d0 [ 306.293386][T10528] debug_vm_pgtable+0x3fa/0x430 [ 306.298231][T10528] do_one_initcall+0x233/0x820 [ 306.302995][T10528] do_initcall_level+0x137/0x1f0 [ 306.307944][T10528] do_initcalls+0x69/0xd0 [ 306.312276][T10528] kernel_init_freeable+0x3d9/0x570 [ 306.317475][T10528] kernel_init+0x1d/0x1d0 [ 306.321809][T10528] ret_from_fork+0x3fc/0x770 [ 306.326410][T10528] ret_from_fork_asm+0x1a/0x30 [ 306.331171][T10528] [ 306.333493][T10528] Memory state around the buggy address: [ 306.339120][T10528] ffff8880565f2a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 306.347177][T10528] ffff8880565f2b00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 306.355245][T10528] >ffff8880565f2b80: fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.363303][T10528] ^ [ 306.369191][T10528] ffff8880565f2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.377336][T10528] ffff8880565f2c80: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 306.385392][T10528] ================================================================== [ 306.406788][T10528] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 306.414037][T10528] CPU: 1 UID: 0 PID: 10528 Comm: xfsaild/loop5 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 306.425863][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.435947][T10528] Call Trace: [ 306.439262][T10528] [ 306.442224][T10528] dump_stack_lvl+0x99/0x250 [ 306.446864][T10528] ? __asan_memcpy+0x40/0x70 [ 306.451482][T10528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.456710][T10528] ? __pfx__printk+0x10/0x10 [ 306.461341][T10528] panic+0x2db/0x790 [ 306.465276][T10528] ? __pfx_panic+0x10/0x10 [ 306.469736][T10528] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 306.475660][T10528] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 306.482023][T10528] ? print_memory_metadata+0x314/0x400 [ 306.487536][T10528] ? xfs_inode_item_push+0x28f/0x2e0 [ 306.492867][T10528] check_panic_on_warn+0x89/0xb0 [ 306.497841][T10528] ? xfs_inode_item_push+0x28f/0x2e0 [ 306.503175][T10528] end_report+0x78/0x160 [ 306.507459][T10528] kasan_report+0x129/0x150 [ 306.512012][T10528] ? xfs_inode_item_push+0x28f/0x2e0 [ 306.517662][T10528] xfs_inode_item_push+0x28f/0x2e0 [ 306.522872][T10528] xfsaild+0xd92/0x2940 [ 306.527046][T10528] ? xfsaild+0x237/0x2940 [ 306.531469][T10528] ? __pfx_xfsaild+0x10/0x10 [ 306.536076][T10528] ? __kthread_parkme+0x7b/0x200 [ 306.541048][T10528] ? __kthread_parkme+0x1a1/0x200 [ 306.546101][T10528] kthread+0x711/0x8a0 [ 306.550188][T10528] ? __pfx_xfsaild+0x10/0x10 [ 306.554786][T10528] ? __pfx_kthread+0x10/0x10 [ 306.559386][T10528] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.564596][T10528] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.569810][T10528] ? __pfx_kthread+0x10/0x10 [ 306.574406][T10528] ret_from_fork+0x3fc/0x770 [ 306.579005][T10528] ? __pfx_ret_from_fork+0x10/0x10 [ 306.584137][T10528] ? __switch_to_asm+0x39/0x70 [ 306.588909][T10528] ? __switch_to_asm+0x33/0x70 [ 306.593673][T10528] ? __pfx_kthread+0x10/0x10 [ 306.598263][T10528] ret_from_fork_asm+0x1a/0x30 [ 306.603037][T10528] [ 306.606202][T10528] Kernel Offset: disabled [ 306.610519][T10528] Rebooting in 86400 seconds..