last executing test programs: 12m4.698055035s ago: executing program 32 (id=5204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28860}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}}, 0x48000) 11m48.646127898s ago: executing program 1 (id=5394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a0000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e00800000000000000009b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m48.258352639s ago: executing program 1 (id=5403): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x480, &(0x7f00000000c0)={[{@usrquota}, {@dioread_lock}]}, 0x2, 0x78c, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 11m47.814167674s ago: executing program 1 (id=5409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}}, 0xc000) 11m47.481941933s ago: executing program 1 (id=5412): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000400)={[{@zero_size_dir}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@umask={'umask', 0x3d, 0x5}}, {@errors_remount}, {}, {@keep_last_dots}, {@dmask={'dmask', 0x3d, 0x40000001}}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x808}}, {@zero_size_dir}]}, 0x1, 0x152b, &(0x7f0000000a00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 11m47.131245687s ago: executing program 1 (id=5416): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, 0x0, 0x0) 11m46.53320693s ago: executing program 1 (id=5422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c00000000020104000000000000000002000000240002801400018008000100ac1414bb08000200ac1e00010c0002800500010000000000300003802c0001800b0003000000000000000000000000000000000114000400fe80000000dfffffff00000000000016040001"], 0x6c}}, 0x0) 11m45.862377798s ago: executing program 33 (id=5422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c00000000020104000000000000000002000000240002801400018008000100ac1414bb08000200ac1e00010c0002800500010000000000300003802c0001800b0003000000000000000000000000000000000114000400fe80000000dfffffff00000000000016040001"], 0x6c}}, 0x0) 10m47.314569792s ago: executing program 5 (id=6240): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x15, &(0x7f0000001600)=[{0x22, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x1, @uvalue=0x2}, {0x2, @uvalue=0x2}, {0x3, @uvalue=0x9}]}, 0x3}]}) 10m47.155928424s ago: executing program 5 (id=6243): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 10m45.490649869s ago: executing program 5 (id=6274): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fallocate(r0, 0x11, 0x9, 0xfd) 10m45.221105884s ago: executing program 5 (id=6280): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000001bc0)={[{@keep_last_dots}, {@sys_tz}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@allow_utime={'allow_utime', 0x3d, 0x9}}, {@errors_remount}, {@gid}, {@namecase}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}, 0x1, 0x1529, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) 10m44.749206518s ago: executing program 5 (id=6287): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) 10m44.117963245s ago: executing program 5 (id=6298): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 10m43.696929565s ago: executing program 34 (id=6298): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 9m53.566431929s ago: executing program 3 (id=6974): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406100005240000000d2402", @ANYBLOB="31621f"], 0x0) 9m51.781140856s ago: executing program 3 (id=7008): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000001840)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x5, 'rose0\x00'}) 9m51.625937813s ago: executing program 3 (id=7013): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0xee00) 9m51.438100528s ago: executing program 3 (id=7017): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x2a10812, &(0x7f0000000580)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESDEC, @ANYRES32, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESOCT], 0x21, 0x1508, &(0x7f0000002080)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 9m50.989216082s ago: executing program 3 (id=7024): r0 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 9m50.621309234s ago: executing program 3 (id=7033): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x4c, 0x1a, 0x108, 0x73, 0x1e8, 0x258, 0x258, 0x1e8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, [0xff], [0x0, 0xff000000], 'wg2\x00', 'macvlan1\x00', {0xff}, {}, 0x32, 0x0, 0x2}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4e24, 0x4e22, 0x4e24, 0x4e24, 0x200, 0xfffe, 0x6, 0x800007, 0x9}}}, {{@ipv6={@private2, @private1, [0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xffffff00], 'ip6gretap0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x0, 0x99, 0x4, 0x70}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x4}, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 9m50.289184195s ago: executing program 35 (id=7033): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x4c, 0x1a, 0x108, 0x73, 0x1e8, 0x258, 0x258, 0x1e8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, [0xff], [0x0, 0xff000000], 'wg2\x00', 'macvlan1\x00', {0xff}, {}, 0x32, 0x0, 0x2}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4e24, 0x4e22, 0x4e24, 0x4e24, 0x200, 0xfffe, 0x6, 0x800007, 0x9}}}, {{@ipv6={@private2, @private1, [0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xffffff00], 'ip6gretap0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x0, 0x99, 0x4, 0x70}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x4}, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 4m43.917005846s ago: executing program 8 (id=11765): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0)=0x8000001, 0x4) 4m43.720611986s ago: executing program 8 (id=11767): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x27}, 0xfffffffd}) 4m43.624222477s ago: executing program 8 (id=11769): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001240)={'comedi_test\x00', [0x7, 0xc, 0x80000001, 0xffffdaea, 0x8, 0xff, 0x8, 0x5, 0x2, 0xf32, 0x8, 0x2, 0x401, 0x7fff, 0x8000, 0x5, 0x9, 0x0, 0x2b, 0x4, 0x8, 0x9, 0x5, 0xbfb, 0x5, 0xfff, 0x3116e960, 0x9, 0x8, 0x5, 0x72]}) 4m43.424195654s ago: executing program 8 (id=11774): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 4m43.272318873s ago: executing program 8 (id=11778): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0xa, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1, 0x5515, &(0x7f000000af40)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 4m42.861251486s ago: executing program 8 (id=11785): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) preadv2(r0, 0x0, 0x0, 0x8, 0x9, 0x0) 4m42.366755966s ago: executing program 36 (id=11785): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) preadv2(r0, 0x0, 0x0, 0x8, 0x9, 0x0) 1m1.069280793s ago: executing program 9 (id=15040): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x1c, 0x16, 0xa01, 0x0, 0x25dfdbfe, {0x14}, [@generic="697c4b3c2bca"]}, 0x1c}}, 0x0) 1m0.865704848s ago: executing program 9 (id=15046): unshare(0x6020400) r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x80}, 0x40) 1m0.733001496s ago: executing program 9 (id=15049): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x388, 0xa8, 0xa8, 0xffffffff, 0x0, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@multicast2, @multicast1, 0xff, 0xffffff00, 'ip6tnl0\x00', 'bond0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x65}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0x0, 'syzkaller1\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x8, 0x0, 0x20}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x12, @empty, @multicast1, @gre_key=0xd23b, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x3f4057640e92cba5, 0x5, 0x6, 0x1, 0x4], 0x3, 0x6}, {0x1, [0x0, 0x0, 0x4, 0x0, 0x3, 0x5], 0x6, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0xffffffff, 0xffffffff, 'rose0\x00', 'lo\x00', {0xff}, {0xff}, 0x5e, 0x2, 0x38}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x6, 0xe, [0x25, 0x36, 0x6, 0x1e, 0x13, 0x6, 0x2a, 0x1f, 0x12, 0x9, 0x2, 0xe, 0x10, 0x29, 0x34, 0x20], 0x0, 0x7, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40) 1m0.529843921s ago: executing program 9 (id=15054): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000080, &(0x7f0000000280)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@type={'type', 0x3d, "103683de"}}, {@umask={'umask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x9}}, {@barrier}, {@umask={'umask', 0x3d, 0x3}}, {@nobarrier}]}, 0x44, 0x70a, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m0.272738582s ago: executing program 9 (id=15058): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2901842, 0x0, 0x0, 0x0, &(0x7f0000000100)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) 58.974576693s ago: executing program 9 (id=15072): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote, @private0={0xfc, 0x0, '\x00', 0x80}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd, 0x40, 0x8, 0x0, 0xc5c1, 0x0, r1}) 42.587338346s ago: executing program 37 (id=15072): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote, @private0={0xfc, 0x0, '\x00', 0x80}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd, 0x40, 0x8, 0x0, 0xc5c1, 0x0, r1}) 2.557732414s ago: executing program 0 (id=15687): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/216, 0xd8}], 0x1, 0x6, 0xfffeeffa) 2.449879641s ago: executing program 0 (id=15690): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, 0x0) 2.318167087s ago: executing program 0 (id=15692): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000002c0)={[{@pquota}, {@discard}, {@swalloc}, {@grpid}, {@uquota}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000900)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0xffffffff, 0x205, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x8, 0x8, 0x100000000002}]}) 2.080457182s ago: executing program 2 (id=15695): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 1.922751985s ago: executing program 4 (id=15698): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000006cc5de072010ca2d"], 0x518) 1.730922248s ago: executing program 4 (id=15700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xdc) 1.580337734s ago: executing program 2 (id=15702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)={@val={0x6f01, 0x800}, @val={0x1, 0x3, 0x27, 0x8, 0x27, 0x3}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x28}, {"c3afe154"}}}}}, 0x3a) 1.46122622s ago: executing program 6 (id=15703): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 1.393001863s ago: executing program 7 (id=15704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0d0b27fa49005e02979b52"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) 1.274270274s ago: executing program 4 (id=15705): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x481, &(0x7f0000000180)={[{@creator={'creator', 0x3d, "4f8ebecd"}}, {@gid}, {@type={'type', 0x3d, "69759d7b"}}, {@nls={'nls', 0x3d, 'macinuit'}}, {@part={'part', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x3}}, {@type={'type', 0x3d, "f95979d7"}}, {@uid}, {@gid}]}, 0x81, 0x6f8, &(0x7f0000002440)="$eJzs3U9sW3cdAPDvc2wn7lDm/ek2EFKjVVSwQpvEjBYJiYIQymFClbjsatp0jeJkVeKhtELUYwyOcEI97FCEwmEntAPSEAfEOCMhcUW9V+JeccDoPT87tpM49po/Xfl8pJf3e+/9/nx/37z3Yj+3cgD/t5bejFIrklg6/8ZWuv1gu9Z4sF1b65YjYjoiChHFziqS9Yjkk4gr0Vni8+nOvLtsfX+PcV5/+PEH5+59WOtsFfMlq1/oaz9Cu2+EYa18ibmImMrXEyru19+1Pfq7O1HXSS/uNGFnu4mDk9bepTVJ8zGuW+BJdzdiqrTH/mrEqYiYyV8HRH53KBxzeIduorscAAAAPJmmDqrw7KN4FFsxezzhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNMh6XxnYJIvhW55LpLu9/+X832pcvmE4x3tqwccf//GMQUCAAAAAAAAAEfio/yD+zOP4lFsxWy+O2kl2Wf+r2ZbL2Y/n4l3YjOWYyMuxFbUoxnN2IiFiNJsX4flrXqzubGwu+VvIm3Zbrfv5i0XI6K6q+XiccwaAAAAAAAAAJ5aP4ulmD3pIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoF8SMdVZZcuL3XI1CsWImImIclqvFfHnbvmz7C8nHQAAAAAcvUq+nk3+2ym0k+w9/0vZ+/6ZeCfWoxkr0YxGLMf17FlA511/4R+tWuPBdm0tXXZ3/J1/TxRH1mNETMW7+4w8n9U43WuxFN+PH8b5mIursREr8eOoRzOWYy4q6SSiHklUK52nF9VunHvHe2Vg6+pwbGeGtl/JIqnEjVjJYrsQ18rReWySzSEd85W+0f5Yjhga8d00O8m3c2Pm6Hrf7+vX+XOZXPvZMfs4GtVs5qVeRubT3OfZeG507ic8T4ZHWohC7xnUizujpJvDI3Vz/qNJcn4qX6e5/sVgzg/bhI/ShjOxGIX87It4aTDnt7507/nBxl/551+v3iysr968sXn+CKd0pErdwnAman2ZeHn02ZdnopFmojV+JkrDO2YeYx6HqJxnI7sVjXm3/F5Wqserfafg23E9luNSzMdCXI75+GYsRm3gDDs9kNdibW0wJ9m1Vth9f6uMCP7sl/sq/fKAyscrzctzfXntv9NVs2P5niu/ivm+LD0/+uyb+K9AOv4X8nI6xnu9vzhPgoFMZPfm9z7XPfbC6Ez8tp3+3Gysr27crN8ac7xz+Tq9bN8fvDf/7hCm8xjS8yW94xazrSwnle75kh57oRftYL7K+ScunXaFXcdO945VYzZW4gf7Xqnl/DXc7p46x17uP/avnTtnOX990z028Con3o5G9ipkyNzxZBWAsZ167VS58rDy98r9ys8rNytvzHx3+vL0F8tR+lvxT1N/KPy+8K3ktbgfP43Zk44UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeBpu376zWG43ljV4hZob3PG6hvO9YowtROLDO9jPjdRjViNFjJXmhfLhzv31ntRiH3OFRFyoxduXud3WN1/NHETGiTvmxg08mPscmLqSzPZQOS/2pa09N0Lw4OuHF2JzZ7zc4vXMVRHW13vhPe6BOJfoumT1M+F2FwBPtYnPt1sXN23e+trJWf2v5reX1xcuXLl+qfWPh6xdvrDSW5zs/TzpK4Chs3r4zddIxAAAAAAAAAAAAAJPJ//V/81P/Z4biAXXKG5t7j3zmuKcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfEYtvRmlViSxMH9hPt1+sF1rpEu3vFOzGBGFiEh+EpF8EnElOktU+7pL9hvn9Ycff3Du3oe1nb6K3fqFUe3G08qXmIuIqXx9sOk9utnd37W+/lqfKrykN8M0YWe7iYOT9r8AAAD//4739gY=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x120800, 0x0) 1.179408765s ago: executing program 7 (id=15706): r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1) 1.097031977s ago: executing program 2 (id=15707): mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000e69000/0x4000)=nil) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000640)=0x1, 0x4) 912.856972ms ago: executing program 7 (id=15708): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) io_pgetevents(0x0, 0x8000000000000001, 0x0, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0) 849.457546ms ago: executing program 2 (id=15709): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0x1}}, @TCA_TBF_BURST={0xfef9, 0x6, 0x9}]}}]}, 0x60}}, 0x0) 716.877701ms ago: executing program 7 (id=15710): syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@data_writeback}, {@noquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 716.569127ms ago: executing program 0 (id=15711): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x71bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0xf7, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044804}, 0x840) 669.870127ms ago: executing program 6 (id=15712): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0) 669.713892ms ago: executing program 4 (id=15713): keyctl$clear(0x3, 0xfffffffffffffffd) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 513.28766ms ago: executing program 6 (id=15714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x40440c1}, 0x0) 476.131859ms ago: executing program 2 (id=15715): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, 0x0) 294.30523ms ago: executing program 6 (id=15716): setuid(0xee01) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c0000000400000004000000070007ff00000000", @ANYRES32=r0], 0x48) 294.160031ms ago: executing program 0 (id=15717): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000006800010003508c0da4ffff0200000000000000000c0002000100000015000000060007000800000006000300"], 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 293.937902ms ago: executing program 4 (id=15718): io_setup(0x4, &(0x7f0000000080)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_destroy(r0) 292.399018ms ago: executing program 7 (id=15719): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44880}, 0x5000) 143.385502ms ago: executing program 6 (id=15720): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x880) 102.661627ms ago: executing program 0 (id=15721): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x189642, 0x0) ioctl$TIOCMIWAIT(r0, 0x5453, 0x0) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000140)=""/135, 0x87}], 0x1) 95.736988ms ago: executing program 7 (id=15722): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x1, 0xff}, 0x8) 95.083335ms ago: executing program 2 (id=15723): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x300, 0x0, 0x0, r0, 0x0, 0x0, 0x7ff, 0x0, 0x2}]) 17.732036ms ago: executing program 4 (id=15724): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 0s ago: executing program 6 (id=15725): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0494c200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) kernel console output (not intermixed with test programs): to free block not in datazone [ 1223.558136][ T63] jfs_write_inode: jfs_commit_inode failed! [ 1223.564796][ T8326] Trying to free block not in datazone [ 1223.572141][T18740] [ 1223.572141][T18740] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1223.572141][T18740] [ 1223.583429][ T8326] Trying to free block not in datazone [ 1223.589035][ T8326] Trying to free block not in datazone [ 1223.595241][ T8326] Trying to free block not in datazone [ 1223.600831][ T8326] Trying to free block not in datazone [ 1223.606632][T18740] [ 1223.606632][T18740] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1223.606632][T18740] [ 1223.618533][ T8326] Trying to free block not in datazone [ 1223.637680][ T8326] Trying to free block not in datazone [ 1223.651802][ T8326] Trying to free block not in datazone [ 1223.663491][ T8326] Trying to free block not in datazone [ 1223.678674][ T8326] Trying to free block not in datazone [ 1223.692924][ T8326] Trying to free block not in datazone [ 1223.709834][ T8326] Trying to free block not in datazone [ 1223.716716][ T8326] Trying to free block not in datazone [ 1223.732336][ T8326] Trying to free block not in datazone [ 1223.752050][ T8326] Trying to free block not in datazone [ 1223.768308][ T8326] Trying to free block not in datazone [ 1223.781021][ T8326] Trying to free block not in datazone [ 1223.794353][ T8326] Trying to free block not in datazone [ 1223.819908][ T8326] Trying to free block not in datazone [ 1223.831465][ T8326] Trying to free block not in datazone [ 1223.844171][ T8326] Trying to free block not in datazone [ 1223.859449][ T8326] Trying to free block not in datazone [ 1223.877654][ T8326] Trying to free block not in datazone [ 1223.897878][ T8326] Trying to free block not in datazone [ 1223.923442][ T8326] Trying to free block not in datazone [ 1223.933654][ T8326] Trying to free block not in datazone [ 1223.940295][ T8326] Trying to free block not in datazone [ 1223.946000][ T8326] Trying to free block not in datazone [ 1223.952730][ T8326] Trying to free block not in datazone [ 1223.958457][ T8326] Trying to free block not in datazone [ 1223.965006][ T8326] Trying to free block not in datazone [ 1223.975737][ T8326] Trying to free block not in datazone [ 1223.984228][ T8326] Trying to free block not in datazone [ 1223.989939][ T8326] Trying to free block not in datazone [ 1223.996006][ T8326] Trying to free block not in datazone [ 1224.001725][ T8326] Trying to free block not in datazone [ 1224.010359][ T8326] Trying to free block not in datazone [ 1224.016369][ T8326] Trying to free block not in datazone [ 1224.022000][ T8326] Trying to free block not in datazone [ 1224.030344][ T8326] Trying to free block not in datazone [ 1224.036269][ T8326] Trying to free block not in datazone [ 1224.057932][ T8326] Trying to free block not in datazone [ 1224.068292][ T8326] Trying to free block not in datazone [ 1224.085544][ T8326] Trying to free block not in datazone [ 1224.109512][ T8326] Trying to free block not in datazone [ 1224.137382][ T8326] Trying to free block not in datazone [ 1224.142943][ T8326] Trying to free block not in datazone [ 1224.170787][ T8326] Trying to free block not in datazone [ 1224.187375][ T8326] Trying to free block not in datazone [ 1224.230874][ T8326] Trying to free block not in datazone [ 1224.255227][ T8326] Trying to free block not in datazone [ 1224.260741][ T8326] Trying to free block not in datazone [ 1224.301426][ T8326] Trying to free block not in datazone [ 1224.316772][ T8326] Trying to free block not in datazone [ 1224.327913][ T8326] Trying to free block not in datazone [ 1224.342883][ T8326] Trying to free block not in datazone [ 1224.359512][ T8326] Trying to free block not in datazone [ 1224.372955][ T8326] Trying to free block not in datazone [ 1224.414439][ T8326] Trying to free block not in datazone [ 1224.440494][ T8326] Trying to free block not in datazone [ 1224.455407][ T8326] Trying to free block not in datazone [ 1224.479951][ T8326] Trying to free block not in datazone [ 1224.501421][ T8326] Trying to free block not in datazone [ 1224.518054][ T8326] Trying to free block not in datazone [ 1224.538351][ T8326] Trying to free block not in datazone [ 1224.564155][ T8326] Trying to free block not in datazone [ 1224.670570][ T8447] nbd: couldn't find device at index 32769 [ 1225.502426][ T8481] loop4: detected capacity change from 0 to 256 [ 1225.548420][ T8449] loop9: detected capacity change from 0 to 32768 [ 1225.571446][ T8449] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.14732 (8449) [ 1225.587747][ T8481] FAT-fs (loop4): Directory bread(block 64) failed [ 1225.632169][ T8449] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1225.650829][ T8481] FAT-fs (loop4): Directory bread(block 65) failed [ 1225.663557][ T8449] BTRFS info (device loop9): using sha256 checksum algorithm [ 1225.684671][ T8481] FAT-fs (loop4): Directory bread(block 66) failed [ 1225.708037][ T8481] FAT-fs (loop4): Directory bread(block 67) failed [ 1225.727307][ T8481] FAT-fs (loop4): Directory bread(block 68) failed [ 1225.737323][ T8481] FAT-fs (loop4): Directory bread(block 69) failed [ 1225.759807][ T8481] FAT-fs (loop4): Directory bread(block 70) failed [ 1225.818768][ T8481] FAT-fs (loop4): Directory bread(block 71) failed [ 1225.840544][ T8449] BTRFS info (device loop9): rebuilding free space tree [ 1225.901382][ T8481] FAT-fs (loop4): Directory bread(block 72) failed [ 1225.919382][ T8449] BTRFS info (device loop9): disabling free space tree [ 1225.944797][ T8481] FAT-fs (loop4): Directory bread(block 73) failed [ 1225.947142][ T8449] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1226.003141][ T8449] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1226.055356][ T8449] BTRFS info (device loop9): enabling ssd optimizations [ 1226.073010][ T8449] BTRFS info (device loop9): turning on async discard [ 1226.105414][ T8449] BTRFS info (device loop9): force clearing of disk cache [ 1226.112593][ T8449] BTRFS info (device loop9): enabling auto defrag [ 1226.139673][ T8449] BTRFS info (device loop9): max_inline set to 4096 [ 1226.347992][ T1373] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1227.703091][ T8553] loop9: detected capacity change from 0 to 64 [ 1227.915522][ T8557] loop9: detected capacity change from 0 to 64 [ 1227.998223][ T8557] Trying to free block not in datazone [ 1228.244837][ T8564] loop7: detected capacity change from 0 to 2048 [ 1228.275563][ T8564] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1228.349352][ T8568] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1228.518410][ T8570] loop7: detected capacity change from 0 to 1024 [ 1228.604368][T17725] hfsplus: b-tree write err: -5, ino 25 [ 1228.612232][T17725] hfsplus: b-tree write err: -5, ino 4 [ 1228.618355][T17725] hfsplus: b-tree write err: -5, ino 2 [ 1228.660774][T17725] hfsplus: b-tree write err: -5, ino 17 [ 1228.753106][ T8575] loop6: detected capacity change from 0 to 1024 [ 1228.771217][ T5898] hid_parser_main: 150 callbacks suppressed [ 1228.771239][ T5898] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1228.795534][ T8575] EXT4-fs: inline encryption not supported [ 1228.828106][ T8575] EXT4-fs: Ignoring removed i_version option [ 1228.842290][ T5898] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1228.861045][ T8575] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1228.874195][ T144] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (34)(bond0) cookie=ffff888056470000 (7)(syzkaller1) start [ 1228.919219][ T144] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (34)(bond0) cookie=ffff888056470000 (3)(syzkaller1) end [ 1228.958390][ T8575] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.14785: lblock 2 mapped to illegal pblock 2 (length 1) [ 1228.994615][ T8577] fido_id[8577]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1229.008192][ T144] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff888056470000 (3)(syzkaller1) start [ 1229.008266][ T144] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff888056470000 (3)(syzkaller1) end [ 1229.049332][ T8575] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1229.050208][ T8575] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1229.059505][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1229.059529][ C1] EXT4-fs (loop6): initial error at time 1166: ext4_map_blocks:776: inode 3: block 2 [ 1229.059569][ C1] EXT4-fs (loop6): last error at time 1166: ext4_map_blocks:776: inode 3: block 2 [ 1229.136026][ T8575] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.14785: lblock 0 mapped to illegal pblock 48 (length 1) [ 1229.153590][ T8575] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1229.153886][ T8575] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1229.172638][ T8575] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.14785: Failed to acquire dquot type 0 [ 1229.186782][ T8575] loop6: lost filesystem error report for type 5 error -117 [ 1229.187100][ T8575] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1229.239437][ T8575] loop6: lost filesystem error report for type 5 error -117 [ 1229.239774][ T8575] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.14785: mark_inode_dirty error [ 1229.293439][ T8575] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1229.293730][ T8575] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1229.353109][ T8575] EXT4-fs (loop6): 1 orphan inode deleted [ 1229.368290][ T144] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1229.374239][ T8575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.437627][ T144] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1229.452185][ T8575] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.14785: Invalid inode table block 1 in block_group 0 [ 1229.475057][ T144] EXT4-fs error (device loop6): ext4_release_dquot:7039: comm kworker/u8:5: Failed to release dquot type 0 [ 1229.488944][ T8575] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1229.596550][T18740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.666288][T18740] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1229.691231][T18740] loop6: lost filesystem error report for type 5 error -117 [ 1229.711232][T18740] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1229.729132][T18740] loop6: lost filesystem error report for type 5 error -117 [ 1229.729501][T18740] EXT4-fs error (device loop6): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 1229.780183][T18740] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1229.981159][ T8604] loop9: detected capacity change from 0 to 512 [ 1230.046352][ T29] IPVS: starting estimator thread 0... [ 1230.061136][ T8610] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1230.143659][ T8604] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.179166][ T8611] IPVS: using max 32 ests per chain, 76800 per kthread [ 1230.309539][ T8604] EXT4-fs error (device loop9): ext4_empty_dir:3118: inode #12: block 32: comm syz.9.14797: bad entry in directory: directory entry overrun - offset=24, inode=16318477, rec_len=2048, size=2048 fake=0 [ 1230.453371][ T1373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.714211][ T8629] loop6: detected capacity change from 0 to 4096 [ 1230.745301][ T8629] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1230.855246][ T8629] ntfs3(loop6): ino=19, mi_enum_attr [ 1230.863049][ T8629] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1231.076173][ T8617] loop7: detected capacity change from 0 to 32768 [ 1231.163187][ T8617] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1231.356209][ T8617] XFS (loop7): Ending clean mount [ 1231.381078][ T8617] XFS (loop7): Quotacheck needed: Please wait. [ 1231.504770][ T8617] XFS (loop7): Quotacheck: Done. [ 1231.747806][T20974] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1231.821734][ T30] audit: type=1326 audit(1168.794:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.14819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1231.911704][ T30] audit: type=1326 audit(1168.822:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.14819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1231.965601][ T30] audit: type=1326 audit(1168.822:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.14819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1232.064298][ T30] audit: type=1326 audit(1168.831:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.14819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1232.116273][ T30] audit: type=1326 audit(1168.831:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.14819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1232.167529][ T30] audit: type=1326 audit(1168.831:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.14819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1232.189838][ T30] audit: type=1326 audit(1168.831:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.6.14819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1232.285689][ T8667] loop9: detected capacity change from 0 to 4096 [ 1232.292838][ T1655] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1232.471773][ T1655] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1232.507973][ T1655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.531224][ T1655] usb 5-1: Product: syz [ 1232.538577][ T1655] usb 5-1: Manufacturer: syz [ 1232.560117][ T1655] usb 5-1: SerialNumber: syz [ 1232.586850][ T1655] usb 5-1: config 0 descriptor?? [ 1232.678461][ T8680] loop6: detected capacity change from 0 to 1024 [ 1232.706354][ T8677] loop9: detected capacity change from 0 to 4096 [ 1232.765003][ T8680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.822828][ T1655] usb 5-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1232.845511][ T1655] f81604 5-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1232.857396][ T1655] f81604 5-1:0.0: probe with driver f81604 failed with error -121 [ 1233.010176][T18740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.255800][ T8688] syz.6.14830 (8688): drop_caches: 2 [ 1233.506135][ T8700] loop9: detected capacity change from 0 to 512 [ 1233.541904][ T8700] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1233.583743][ T8700] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1233.594400][ T8700] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1233.639488][ T8700] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 1233.674631][ T8700] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.14835: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1233.710850][ T8700] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1233.721851][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1233.737468][ C1] EXT4-fs (loop9): last error at time 1170: ext4_ext_check_inode:521: inode 13 [ 1233.780152][ T8700] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.14835: couldn't read orphan inode 13 (err -117) [ 1233.812266][ T8700] loop9: lost filesystem error report for type 5 error -117 [ 1233.814372][ T8700] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1233.968131][ T8700] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1234.023844][ T8700] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 1234.064778][ T8700] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2856c09c, mo2=0002] [ 1234.116467][ T8700] System zones: 0-2, 18-18, 34-34 [ 1234.142961][ T8700] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1234.228025][ T8719] syz.0.14844 (8719): drop_caches: 2 [ 1234.363669][ T1373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.627099][ T8734] loop6: detected capacity change from 0 to 4096 [ 1234.682833][ T8740] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1235.313265][ T5898] usb 5-1: USB disconnect, device number 30 [ 1235.447382][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14867'. [ 1235.487524][ T8767] loop4: detected capacity change from 0 to 2048 [ 1235.497655][ T8773] loop6: detected capacity change from 0 to 256 [ 1235.528971][ T8767] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1235.541358][ T8773] exfat: Deprecated parameter 'utf8' [ 1235.547168][ T8773] exfat: Deprecated parameter 'namecase' [ 1235.553211][ T8773] exfat: Deprecated parameter 'namecase' [ 1235.559171][ T8773] exfat: Deprecated parameter 'utf8' [ 1235.573795][ T8773] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1235.589798][ T8773] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 1235.598361][ T8767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1235.875699][ T8778] vcan1: entered promiscuous mode [ 1235.934819][ T8778] team0: Device vcan1 is up. Set it down before adding it as a team port [ 1236.124000][ T8789] loop4: detected capacity change from 0 to 512 [ 1236.171857][ T8789] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1236.216911][ T8789] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1236.282083][ T8775] loop7: detected capacity change from 0 to 32768 [ 1236.282891][ T8789] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1236.322476][ T8789] System zones: 0-2, 18-18, 34-34 [ 1236.328278][ T8789] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.14877: inode #15: comm syz.4.14877: iget: illegal inode # [ 1236.342587][ T8789] loop4: lost filesystem error report for type 5 error -117 [ 1236.343239][ T8775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.14870 (8775) [ 1236.354612][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1236.370515][ C1] EXT4-fs (loop4): initial error at time 1172: ext4_orphan_get:1391 [ 1236.378586][ C1] EXT4-fs (loop4): last error at time 1172: ext4_orphan_get:1391 [ 1236.398195][ T8789] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.14877: couldn't read orphan inode 15 (err -117) [ 1236.429350][ T8789] loop4: lost filesystem error report for type 5 error -117 [ 1236.442817][ T8789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.491359][ T8775] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1236.535542][ T8775] BTRFS info (device loop7): using sha256 checksum algorithm [ 1236.585207][ T8789] EXT4-fs error (device loop4): ext4_readdir:265: inode #12: block 13: comm syz.4.14877: path /3056/file0/file0: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=12, rec_len=4096, size=4096 fake=1 [ 1236.603022][ T8796] syz.9.14880 (8796): drop_caches: 2 [ 1236.780636][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.810531][ T8775] BTRFS info (device loop7): rebuilding free space tree [ 1236.844297][ T8775] BTRFS info (device loop7): disabling free space tree [ 1236.855222][ T8775] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1236.866155][ T8821] loop9: detected capacity change from 0 to 16 [ 1236.881544][ T8775] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1236.930101][ T8821] erofs (device loop9): mounted with root inode @ nid 36. [ 1236.978299][ T8775] BTRFS info (device loop7): enabling ssd optimizations [ 1237.018914][ T8775] BTRFS info (device loop7): force clearing of disk cache [ 1237.026116][ T8775] BTRFS info (device loop7): enabling auto defrag [ 1237.054879][ T8825] loop6: detected capacity change from 0 to 256 [ 1237.061375][ T8775] BTRFS info (device loop7): max_inline set to 4096 [ 1237.178710][ T8825] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1237.232007][ T8829] loop9: detected capacity change from 0 to 512 [ 1237.329403][T20974] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1237.346572][ T8829] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1237.625609][ T1373] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.837256][ T8841] loop4: detected capacity change from 0 to 128 [ 1238.090176][ T8846] loop9: detected capacity change from 0 to 64 [ 1238.350335][ T1661] kernel read not supported for file /usbmon0 (pid: 1661 comm: kworker/0:9) [ 1238.534419][ T8838] loop7: detected capacity change from 0 to 32768 [ 1238.640656][ T1655] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 1238.812467][ T1655] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1238.821908][ T1655] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.863116][ T1655] usb 10-1: Product: syz [ 1238.867460][ T1655] usb 10-1: Manufacturer: syz [ 1238.900874][ T1655] usb 10-1: SerialNumber: syz [ 1238.923308][ T1655] usb 10-1: config 0 descriptor?? [ 1239.373833][ T1655] airspy 10-1:0.0: Board ID: 00 [ 1239.380476][ T1655] airspy 10-1:0.0: Firmware version: [ 1239.591937][ T1655] airspy 10-1:0.0: usb_control_msg() failed -71 request 11 [ 1239.626957][ T1655] airspy 10-1:0.0: Registered as swradio24 [ 1239.645360][ T1655] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1239.677897][ T1655] usb 10-1: USB disconnect, device number 15 [ 1240.236427][ T8879] loop6: detected capacity change from 0 to 40427 [ 1240.264528][ T8879] F2FS-fs (loop6): invalid crc value [ 1240.435672][ T8911] loop9: detected capacity change from 0 to 4096 [ 1240.465426][ T8914] loop4: detected capacity change from 0 to 256 [ 1240.502560][ T8914] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1240.543650][ T8911] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1240.596139][ T8879] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1240.643118][ T8879] F2FS-fs (loop6): Start checkpoint disabled! [ 1240.674664][ T8879] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1240.705046][ T8879] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1240.740555][ T13] ntfs3(loop9): ino=5, mi_enum_attr [ 1241.163898][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.612837][ T8920] loop4: detected capacity change from 0 to 32768 [ 1241.637820][ T8920] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.14926 (8920) [ 1241.724180][ T8920] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1241.762134][ T8920] BTRFS info (device loop4): using sha256 checksum algorithm [ 1241.935500][ T8920] BTRFS info (device loop4): enabling ssd optimizations [ 1241.988500][ T8920] BTRFS info (device loop4): turning on async discard [ 1242.008562][ T8920] BTRFS info (device loop4): enabling free space tree [ 1242.107766][ T8931] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1242.230152][ T8931] XFS (loop7): Ending clean mount [ 1242.333432][ T5843] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1242.403430][T20974] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1242.420663][ T8933] set_capacity_and_notify: 1 callbacks suppressed [ 1242.420685][ T8933] loop6: detected capacity change from 0 to 32768 [ 1242.467948][ T8933] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.14928 (8933) [ 1242.544207][ T8933] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1242.617357][ T8933] BTRFS info (device loop6): using crc32c checksum algorithm [ 1242.887935][ T8933] BTRFS info (device loop6): turning off barriers [ 1242.894534][ T8933] BTRFS info (device loop6): enabling free space tree [ 1242.942233][ T8933] BTRFS info (device loop6): use zstd compression, level 3 [ 1243.034276][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14939'. [ 1243.170606][ T8991] loop7: detected capacity change from 0 to 2048 [ 1243.213996][ T8991] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1243.283057][ T8994] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1243.317461][T18740] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1243.364886][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14944'. [ 1243.792619][ T8984] loop9: detected capacity change from 0 to 32768 [ 1243.856114][ T8984] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.14940 (8984) [ 1243.958479][ T8984] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1244.049745][ T9012] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1244.072364][ T9012] [U] J"—E:ÀÆ" [ 1244.076059][ T9012] [U] [ 1244.090360][ T8984] BTRFS info (device loop9): using crc32c checksum algorithm [ 1244.108914][ T8984] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1244.605898][ T8984] BTRFS info (device loop9): rebuilding free space tree [ 1244.659608][ T8984] BTRFS info (device loop9): disabling free space tree [ 1244.701087][ T8984] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1244.735045][ T8984] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1244.788421][ T8984] BTRFS info (device loop9): checking UUID tree [ 1244.809452][ T8984] BTRFS info (device loop9): enabling ssd optimizations [ 1244.849570][ T8984] BTRFS info (device loop9): turning off barriers [ 1244.856068][ T8984] BTRFS info (device loop9): disabling tree log [ 1244.915421][ T8984] BTRFS info (device loop9): turning on flush-on-commit [ 1244.957148][ T8984] BTRFS info (device loop9): enabling disk space caching [ 1244.964240][ T8984] BTRFS info (device loop9): force clearing of disk cache [ 1245.011193][ T8984] BTRFS info (device loop9): use zstd compression, level 3 [ 1245.032358][ T8984] BTRFS info (device loop9): max_inline set to 0 [ 1245.333428][ T1373] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1245.630097][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1245.630115][ T30] audit: type=1326 audit(1181.522:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9053 comm="syz.7.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607619bf79 code=0x7ffc0000 [ 1245.726627][ T30] audit: type=1326 audit(1181.522:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9053 comm="syz.7.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607619bf79 code=0x7ffc0000 [ 1245.817862][ T30] audit: type=1326 audit(1181.578:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9053 comm="syz.7.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f607619bf79 code=0x7ffc0000 [ 1245.917949][ T30] audit: type=1326 audit(1181.578:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9053 comm="syz.7.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607619bf79 code=0x7ffc0000 [ 1245.986614][ T30] audit: type=1326 audit(1181.578:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9053 comm="syz.7.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607619bf79 code=0x7ffc0000 [ 1246.075380][ T9063] tipc: Started in network mode [ 1246.080327][ T9063] tipc: Node identity 050000000000000005, cluster identity 2 [ 1246.089494][ T30] audit: type=1326 audit(1181.578:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9053 comm="syz.7.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f607619bf79 code=0x7ffc0000 [ 1246.171117][ T30] audit: type=1326 audit(1181.578:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9053 comm="syz.7.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607619bf79 code=0x7ffc0000 [ 1246.200842][ T30] audit: type=1326 audit(1181.578:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9053 comm="syz.7.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607619bf79 code=0x7ffc0000 [ 1246.325357][ T9046] loop4: detected capacity change from 0 to 32768 [ 1246.402335][ T9046] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 1246.402335][ T9046] [ 1246.447767][ T9046] ERROR: (device loop4): remounting filesystem as read-only [ 1246.783067][ T9085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1247.291812][ T9112] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 1247.295558][ T9103] loop9: detected capacity change from 0 to 4096 [ 1247.370576][ T9103] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1247.474179][ T30] audit: type=1800 audit(1183.239:411): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.14985" name="file2" dev="loop9" ino=31 res=0 errno=0 [ 1247.574086][ T9116] loop6: detected capacity change from 0 to 4096 [ 1247.593145][ T9116] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1247.637835][ T9116] ntfs3(loop6): ino=3, mi_enum_attr [ 1247.863704][ T9122] loop7: detected capacity change from 0 to 128 [ 1247.946359][ T9122] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1248.038405][ T9128] loop6: detected capacity change from 0 to 256 [ 1248.110435][ T9122] EXT4-fs (loop7): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1248.214192][T20974] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1248.475765][ T9136] loop9: detected capacity change from 0 to 256 [ 1248.699405][ T9115] loop4: detected capacity change from 0 to 32768 [ 1248.812973][ T9115] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1249.021825][ T9132] loop6: detected capacity change from 0 to 40427 [ 1249.042429][ T9115] XFS (loop4): Ending clean mount [ 1249.084140][ T9132] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 1249.138305][ T9132] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1249.181029][ T9132] F2FS-fs (loop6): invalid crc value [ 1249.210168][ T5843] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1249.467732][ T9132] F2FS-fs (loop6): access invalid blkaddr:67112961 [ 1249.474453][ T9132] CPU: 0 UID: 0 PID: 9132 Comm: syz.6.14999 Not tainted syzkaller #0 PREEMPT(full) [ 1249.474483][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1249.474504][ T9132] Call Trace: [ 1249.474513][ T9132] [ 1249.474524][ T9132] dump_stack_lvl+0xe8/0x150 [ 1249.474561][ T9132] __f2fs_is_valid_blkaddr+0xe52/0x14f0 [ 1249.474595][ T9132] f2fs_get_node_info+0x607/0x1e30 [ 1249.474642][ T9132] read_node_folio+0x221/0x410 [ 1249.474680][ T9132] ? __pfx_read_node_folio+0x10/0x10 [ 1249.474723][ T9132] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 1249.474761][ T9132] __get_node_folio+0x3cb/0xe90 [ 1249.474804][ T9132] ? __pfx___get_node_folio+0x10/0x10 [ 1249.474834][ T9132] ? do_raw_spin_unlock+0xf5/0x210 [ 1249.474859][ T9132] ? _raw_spin_unlock+0x28/0x50 [ 1249.474895][ T9132] f2fs_iget+0x814/0x5dc0 [ 1249.474941][ T9132] ? do_raw_spin_unlock+0xf5/0x210 [ 1249.474967][ T9132] ? _raw_spin_unlock+0x28/0x50 [ 1249.474993][ T9132] ? f2fs_build_stats+0xb2f/0x1220 [ 1249.475021][ T9132] ? f2fs_fill_super+0x4ce1/0x7660 [ 1249.475049][ T9132] f2fs_fill_super+0x4dd0/0x7660 [ 1249.475124][ T9132] get_tree_bdev_flags+0x431/0x4f0 [ 1249.475149][ T9132] ? __pfx_f2fs_fill_super+0x10/0x10 [ 1249.475174][ T9132] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1249.475211][ T9132] vfs_get_tree+0x92/0x2a0 [ 1249.475236][ T9132] do_new_mount+0x341/0xd30 [ 1249.475262][ T9132] ? apparmor_capable+0x126/0x170 [ 1249.475296][ T9132] ? __pfx_do_new_mount+0x10/0x10 [ 1249.475325][ T9132] ? ns_capable+0x89/0xe0 [ 1249.475362][ T9132] ? user_path_at+0xd4/0x160 [ 1249.475385][ T9132] __se_sys_mount+0x31d/0x420 [ 1249.475419][ T9132] ? __pfx___se_sys_mount+0x10/0x10 [ 1249.475454][ T9132] ? __x64_sys_mount+0x20/0xc0 [ 1249.475484][ T9132] do_syscall_64+0x14d/0xf80 [ 1249.475657][ T9132] ? trace_irq_disable+0x3b/0x150 [ 1249.475689][ T9132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.475713][ T9132] ? clear_bhb_loop+0x40/0x90 [ 1249.475740][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.475763][ T9132] RIP: 0033:0x7fa3b7d9d20a [ 1249.475787][ T9132] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.475806][ T9132] RSP: 002b:00007fa3b8bb2e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1249.475831][ T9132] RAX: ffffffffffffffda RBX: 00007fa3b8bb2ee0 RCX: 00007fa3b7d9d20a [ 1249.475849][ T9132] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 00007fa3b8bb2ea0 [ 1249.475866][ T9132] RBP: 0000200000000000 R08: 00007fa3b8bb2ee0 R09: 0000000000000000 [ 1249.475881][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080 [ 1249.475895][ T9132] R13: 00007fa3b8bb2ea0 R14: 0000000000005541 R15: 0000200000000280 [ 1249.475930][ T9132] [ 1249.563987][ T9164] openvswitch: netlink: Message has 572 unknown bytes. [ 1249.756652][ T9164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1249.765869][ T9132] F2FS-fs (loop6): f2fs_get_node_info of read_node_folio+0x221/0x410: inconsistent nat entry, ino:3, nid:3, blkaddr:67112961, ver:0, flag:0 [ 1249.811167][ T9132] F2FS-fs (loop6): Failed to read root inode [ 1249.971482][ T9139] loop7: detected capacity change from 0 to 40427 [ 1250.023685][ T9139] F2FS-fs: heap/no_heap options were deprecated [ 1250.074930][ T9139] F2FS-fs (loop7): build fault injection rate: 19 [ 1250.081449][ T9139] F2FS-fs (loop7): build fault injection type: 0x77e8c [ 1250.127210][ T9139] F2FS-fs (loop7): invalid crc value [ 1250.140638][ T9139] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21c/0xd60 [ 1250.277135][ T9139] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x18f/0xaa0 [ 1250.300703][ C0] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 1250.403931][ T9179] loop4: detected capacity change from 0 to 128 [ 1250.442024][ T9179] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1250.524402][ T9139] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1250.551054][ T9179] hpfs: filesystem error: improperly stopped [ 1250.557146][ T9179] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1250.566917][ T9179] hpfs: You really don't want any checks? You are crazy... [ 1250.576741][ T9179] hpfs: hpfs_map_sector(): read error [ 1250.582445][ T9139] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1250.601130][ T9179] hpfs: code page support is disabled [ 1250.625305][ T9179] hpfs: hpfs_map_4sectors(): unaligned read [ 1250.645220][ T9179] hpfs: hpfs_map_4sectors(): unaligned read [ 1250.659146][ T9179] hpfs: filesystem error: unable to find root dir [ 1250.675321][ T9139] F2FS-fs (loop7): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x525/0xff0 [ 1250.750999][ T29] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1250.791604][ T29] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1250.801923][ C0] F2FS-fs (loop7): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60 [ 1250.813626][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 1250.813656][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1250.813670][ C0] Call Trace: [ 1250.813679][ C0] [ 1250.813688][ C0] dump_stack_lvl+0xe8/0x150 [ 1250.813725][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 1250.813766][ C0] f2fs_write_end_io+0xcdb/0xff0 [ 1250.813791][ C0] ? blk_update_request+0x57e/0xe60 [ 1250.813835][ C0] blk_update_request+0x57e/0xe60 [ 1250.813875][ C0] blk_mq_end_request+0x3e/0x70 [ 1250.813902][ C0] blk_flush_complete_seq+0x678/0xcc0 [ 1250.813939][ C0] flush_end_io+0xbaa/0xe60 [ 1250.813980][ C0] __blk_mq_end_request+0x4f8/0x630 [ 1250.814012][ C0] blk_done_softirq+0x10a/0x160 [ 1250.814037][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1250.814068][ C0] handle_softirqs+0x22a/0x870 [ 1250.814098][ C0] ? schedule+0x90/0x360 [ 1250.814136][ C0] ? run_ksoftirqd+0x36/0x60 [ 1250.814173][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1250.814202][ C0] run_ksoftirqd+0x36/0x60 [ 1250.814231][ C0] smpboot_thread_fn+0x541/0xa50 [ 1250.814263][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1250.814302][ C0] kthread+0x388/0x470 [ 1250.814324][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1250.814353][ C0] ? __pfx_kthread+0x10/0x10 [ 1250.814375][ C0] ret_from_fork+0x51e/0xb90 [ 1250.814407][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1250.814434][ C0] ? __switch_to+0xc7d/0x1450 [ 1250.814462][ C0] ? __pfx_kthread+0x10/0x10 [ 1250.814502][ C0] ret_from_fork_asm+0x1a/0x30 [ 1250.814551][ C0] [ 1250.814560][ C0] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1251.016348][T20974] F2FS-fs (loop7): do_checkpoint failed err:-5, stop checkpoint [ 1251.062876][ T9189] fido_id[9189]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1252.152006][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15040'. [ 1252.225825][ T9244] netlink: 68 bytes leftover after parsing attributes in process `syz.0.15043'. [ 1252.637778][ T9264] loop9: detected capacity change from 0 to 1024 [ 1252.697020][ T9264] hfsplus: bad catalog entry type [ 1252.784447][ T9269] loop7: detected capacity change from 0 to 128 [ 1252.821043][ T9269] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1252.834120][ T9269] hpfs: filesystem error: improperly stopped [ 1252.840255][ T9269] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1252.861639][ T63] hfsplus: b-tree write err: -5, ino 25 [ 1252.872626][ T9269] hpfs: You really don't want any checks? You are crazy... [ 1252.880636][ T63] hfsplus: b-tree write err: -5, ino 4 [ 1252.891913][ T63] hfsplus: b-tree write err: -5, ino 2 [ 1252.914829][ T9269] hpfs: hpfs_map_sector(): read error [ 1252.941037][ T9269] hpfs: code page support is disabled [ 1252.963786][ T9269] hpfs: hpfs_map_4sectors(): unaligned read [ 1252.969904][ T9269] hpfs: hpfs_map_4sectors(): unaligned read [ 1253.004422][ T9269] hpfs: filesystem error: unable to find root dir [ 1253.087737][ T9269] hpfs: hpfs_map_4sectors(): unaligned read [ 1253.111705][ T9269] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1253.290349][ T9286] loop7: detected capacity change from 0 to 256 [ 1253.297755][ T9286] exfat: Deprecated parameter 'utf8' [ 1253.350921][ T9286] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1253.375883][ T5898] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1253.559429][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 1253.566849][ T5898] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1253.566885][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.566907][ T5898] usb 5-1: Product: syz [ 1253.566923][ T5898] usb 5-1: Manufacturer: syz [ 1253.566940][ T5898] usb 5-1: SerialNumber: syz [ 1253.593126][ T5898] usb 5-1: config 0 descriptor?? [ 1253.629642][ T5898] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 1253.664640][ T9277] loop9: detected capacity change from 0 to 32768 [ 1253.741490][ T9277] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt [ 1253.741490][ T9277] [ 1253.776333][ T9277] ERROR: (device loop9): remounting filesystem as read-only [ 1253.794975][ T9277] xtLookup: xtSearch returned -5 [ 1253.805998][ T9277] free_index: error reading directory table [ 1253.827060][ T9277] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt [ 1253.827060][ T9277] [ 1253.845556][ T9277] xtLookup: xtSearch returned -5 [ 1253.853251][ T9277] free_index: error reading directory table [ 1253.867947][ T9277] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt [ 1253.867947][ T9277] [ 1253.873458][ T5898] usb 5-1: USB disconnect, device number 31 [ 1253.888518][ T9277] xtLookup: xtSearch returned -5 [ 1253.893628][ T9277] free_index: error reading directory table [ 1253.904472][ T9277] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt [ 1253.904472][ T9277] [ 1253.914678][ T9277] xtLookup: xtSearch returned -5 [ 1253.919817][ T9277] free_index: error reading directory table [ 1253.925873][ T9277] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt [ 1253.925873][ T9277] [ 1253.936137][ T9277] xtLookup: xtSearch returned -5 [ 1253.968298][ T9277] free_index: error reading directory table [ 1253.979619][ T9277] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt [ 1253.979619][ T9277] [ 1253.991265][ T9277] xtLookup: xtSearch returned -5 [ 1253.996506][ T9277] add_index: get/read_metapage failed! [ 1254.002227][ T9277] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt [ 1254.002227][ T9277] [ 1254.016920][ T9277] xtLookup: xtSearch returned -5 [ 1254.022010][ T9277] free_index: error reading directory table [ 1254.028148][ T9277] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt [ 1254.028148][ T9277] [ 1254.038532][ T9277] xtLookup: xtSearch returned -5 [ 1254.043783][ T9277] free_index: error reading directory table [ 1254.050961][ T9277] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt [ 1254.050961][ T9277] [ 1254.061846][ T9277] xtLookup: xtSearch returned -5 [ 1254.066933][ T9277] free_index: error reading directory table [ 1254.077338][ T9277] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt [ 1254.077338][ T9277] [ 1254.087860][ T9277] xtLookup: xtSearch returned -5 [ 1254.093172][ T9277] free_index: error reading directory table [ 1254.099245][ T9277] ERROR: (device loop9): xtSearch: xt_getpage: xtree page corrupt [ 1254.099245][ T9277] [ 1254.109853][ T9277] xtLookup: xtSearch returned -5 [ 1254.115178][ T9277] free_index: error reading directory table [ 1254.477708][ T9306] loop4: detected capacity change from 0 to 512 [ 1254.486815][ T9306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1254.518367][ T9306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1254.582659][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1254.950636][ T9311] loop4: detected capacity change from 0 to 32768 [ 1254.968082][ T30] audit: type=1326 audit(1190.152:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.6.15078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1255.023594][ T30] audit: type=1326 audit(1190.161:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.6.15078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1255.046428][ T30] audit: type=1326 audit(1190.180:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.6.15078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1255.070655][ T30] audit: type=1326 audit(1190.180:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.6.15078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1255.103869][ T30] audit: type=1326 audit(1190.180:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.6.15078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1255.162890][ T30] audit: type=1326 audit(1190.180:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.6.15078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1255.203364][ T30] audit: type=1326 audit(1190.180:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.6.15078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1255.261208][ T30] audit: type=1326 audit(1190.180:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.6.15078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b7d9bf79 code=0x7ffc0000 [ 1256.194390][ T9354] loop6: detected capacity change from 0 to 512 [ 1256.210498][ T9354] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1257.009755][ T9369] loop4: detected capacity change from 0 to 40427 [ 1257.017497][ T9369] F2FS-fs: heap/no_heap options were deprecated [ 1257.024906][ T9369] F2FS-fs (loop4): build fault injection rate: 19 [ 1257.042224][ T9369] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 1257.053883][ T9369] F2FS-fs (loop4): invalid crc value [ 1257.079733][ T9369] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 1257.225282][ T9369] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410 [ 1257.241671][ T9369] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1257.253383][ T9369] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1258.422431][ T9397] loop7: detected capacity change from 0 to 32768 [ 1258.432099][ T9397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.15115 (9397) [ 1258.455244][ T9397] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1258.473854][ T9397] BTRFS info (device loop7): using crc32c checksum algorithm [ 1258.530872][ T9397] BTRFS info (device loop7): setting nodatasum [ 1258.545554][ T9397] BTRFS info (device loop7): setting nodatacow [ 1258.555905][ T9397] BTRFS info (device loop7): turning on async discard [ 1258.573174][ T9397] BTRFS info (device loop7): enabling free space tree [ 1258.595111][ T9397] BTRFS info (device loop7): enabling auto defrag [ 1258.615062][ T9397] BTRFS info (device loop7): max_inline set to 0 [ 1258.734977][T20974] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1259.284907][ T9440] netlink: 'syz.4.15128': attribute type 11 has an invalid length. [ 1259.300508][ T9440] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.15128'. [ 1259.521178][ T9436] loop7: detected capacity change from 0 to 32768 [ 1259.557320][ T9436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.15126 (9436) [ 1259.586434][ T9448] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15132'. [ 1259.614576][ T9436] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1259.648500][ T9436] BTRFS info (device loop7): using crc32c checksum algorithm [ 1259.777978][ T9462] loop4: detected capacity change from 0 to 64 [ 1259.876376][ T9436] BTRFS info (device loop7): enabling ssd optimizations [ 1259.883379][ T9436] BTRFS info (device loop7): turning on async discard [ 1259.903199][ T9436] BTRFS info (device loop7): enabling free space tree [ 1259.968635][ T30] audit: type=1800 audit(1194.776:420): pid=9436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.15126" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 1260.093279][ T9473] loop4: detected capacity change from 0 to 512 [ 1260.175640][T20974] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1260.211919][ T9473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 1260.219987][ T9473] System zones: 1-20 [ 1260.252487][ T9473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1260.640835][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.995721][ T9502] loop7: detected capacity change from 0 to 2048 [ 1261.026052][ T9502] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1261.087800][ T9511] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1261.683136][ T9523] loop7: detected capacity change from 0 to 32768 [ 1261.696317][ T9523] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus (7:7) scanned by syz.7.15156 (9523) [ 1261.747428][ T9523] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1261.782515][ T9523] BTRFS info (device loop7): using sha256 checksum algorithm [ 1261.790238][ T9523] BTRFS error (device loop7): superblock checksum mismatch [ 1261.812441][ T9523] BTRFS error (device loop7): open_ctree failed: -22 [ 1261.831630][ T6078] udevd[6078]: incorrect btrfs checksum on /dev/loop7 [ 1261.863384][ T9537] loop6: detected capacity change from 0 to 512 [ 1261.892520][ T9537] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1261.931901][ T9537] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1262.022967][ T30] audit: type=1800 audit(1196.678:421): pid=9537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15164" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1262.165992][T18740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.002837][ T9553] loop6: detected capacity change from 0 to 32768 [ 1263.052188][ T9553] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1263.223703][ T9553] XFS (loop6): Ending clean mount [ 1263.254735][ T9553] XFS (loop6): Quotacheck needed: Please wait. [ 1263.350780][ T9553] XFS (loop6): Quotacheck: Done. [ 1263.466271][T18740] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1263.620539][ T9572] loop7: detected capacity change from 0 to 32768 [ 1263.720990][ T9572] read_mapping_page failed! [ 1263.744378][ T9572] ERROR: (device loop7): txCommit: [ 1263.744378][ T9572] [ 1263.875332][T17734] read_mapping_page failed! [ 1263.880439][T17734] ERROR: (device loop7): txCommit: [ 1263.880439][T17734] [ 1263.896984][T17734] jfs_write_inode: jfs_commit_inode failed! [ 1263.960887][ T9586] loop4: detected capacity change from 0 to 40427 [ 1263.977229][ T9586] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(918016) [ 1264.006076][ T9586] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1264.044365][ T9586] F2FS-fs (loop4): invalid crc value [ 1264.240593][ T9586] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1264.300926][ T9586] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1264.313679][ T9586] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1264.439571][ T5843] syz-executor: attempt to access beyond end of device [ 1264.439571][ T5843] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1264.491710][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1264.491755][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1264.491767][ T5843] Call Trace: [ 1264.491775][ T5843] [ 1264.491785][ T5843] dump_stack_lvl+0xe8/0x150 [ 1264.491819][ T5843] f2fs_handle_critical_error+0x37c/0x540 [ 1264.491860][ T5843] f2fs_write_end_io+0xcdb/0xff0 [ 1264.491905][ T5843] __submit_merged_bio+0x256/0x700 [ 1264.491943][ T5843] __submit_merged_write_cond+0x3c3/0x4e0 [ 1264.491983][ T5843] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1264.492055][ T5843] f2fs_write_data_pages+0x2975/0x35e0 [ 1264.492122][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1264.492163][ T5843] ? css_rstat_updated+0x23a/0x530 [ 1264.492217][ T5843] ? rcu_is_watching+0x15/0xb0 [ 1264.492246][ T5843] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 1264.492279][ T5843] ? __lock_acquire+0x6b5/0x2cf0 [ 1264.492323][ T5843] ? __lock_acquire+0x6b5/0x2cf0 [ 1264.492356][ T5843] ? do_raw_spin_lock+0x12b/0x2f0 [ 1264.492392][ T5843] ? do_raw_spin_unlock+0xf5/0x210 [ 1264.492414][ T5843] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1264.492439][ T5843] do_writepages+0x32e/0x550 [ 1264.492478][ T5843] ? do_raw_spin_unlock+0xf5/0x210 [ 1264.492506][ T5843] filemap_fdatawrite+0x1e9/0x2f0 [ 1264.492539][ T5843] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1264.492615][ T5843] ? do_raw_spin_unlock+0xf5/0x210 [ 1264.492642][ T5843] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1264.492684][ T5843] f2fs_write_checkpoint+0x9cf/0x2680 [ 1264.492755][ T5843] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1264.492820][ T5843] kill_f2fs_super+0x314/0x720 [ 1264.492844][ T5843] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1264.492874][ T5843] ? lockdep_hardirqs_on+0x7a/0x110 [ 1264.492910][ T5843] deactivate_locked_super+0xbc/0x130 [ 1264.492935][ T5843] cleanup_mnt+0x437/0x4d0 [ 1264.492952][ T5843] ? _raw_spin_unlock_irq+0x23/0x50 [ 1264.492976][ T5843] task_work_run+0x1d9/0x270 [ 1264.493002][ T5843] ? __pfx_task_work_run+0x10/0x10 [ 1264.493029][ T5843] exit_to_user_mode_loop+0xed/0x480 [ 1264.493046][ T5843] ? rcu_is_watching+0x15/0xb0 [ 1264.493072][ T5843] do_syscall_64+0x32d/0xf80 [ 1264.493094][ T5843] ? trace_irq_disable+0x3b/0x150 [ 1264.493116][ T5843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.493132][ T5843] ? clear_bhb_loop+0x40/0x90 [ 1264.493163][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.493177][ T5843] RIP: 0033:0x7f885ed9d1d7 [ 1264.493192][ T5843] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1264.493204][ T5843] RSP: 002b:00007ffe33cd25b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1264.493220][ T5843] RAX: 0000000000000000 RBX: 00007f885ee31c3b RCX: 00007f885ed9d1d7 [ 1264.493230][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe33cd2670 [ 1264.493239][ T5843] RBP: 00007ffe33cd2670 R08: 00007ffe33cd3670 R09: 00000000ffffffff [ 1264.493251][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe33cd3700 [ 1264.493261][ T5843] R13: 00007f885ee31c3b R14: 0000000000124b17 R15: 00007ffe33cd3740 [ 1264.493286][ T5843] [ 1264.493847][ T5843] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1264.833696][ T9610] loop6: detected capacity change from 0 to 2048 [ 1264.915863][ T9612] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1264.995043][ T9612] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1265.010585][ T9598] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 1265.010585][ T9598] [ 1265.021013][ T9612] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1265.064401][ T9612] Remounting filesystem read-only [ 1265.142022][T18740] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 1265.562627][ T9627] set_capacity_and_notify: 1 callbacks suppressed [ 1265.562647][ T9627] loop6: detected capacity change from 0 to 256 [ 1265.654783][ T9627] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1265.971510][ T5898] kernel write not supported for file /input/event2 (pid: 5898 comm: kworker/0:4) [ 1266.414081][ T63] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (34)(bond0) cookie=ffff88805ad8c000 (11)(pimreg) start [ 1266.461907][ T9662] loop7: detected capacity change from 0 to 1024 [ 1266.463878][ T63] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (34)(bond0) cookie=ffff88805ad8c000 (4)(pimreg) end [ 1266.493956][ T9662] hfsplus: invalid length 32517 has been corrected to 255 [ 1266.498609][ T63] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff88805ad8c000 (4)(pimreg) start [ 1266.559567][ T9662] hfsplus: b-tree write err: -5, ino 2 [ 1266.576169][ T9662] hfsplus: invalid length 32517 has been corrected to 255 [ 1266.587987][ T63] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff88805ad8c000 (3)(pimreg) end [ 1266.588279][ T9662] hfsplus: invalid length 32517 has been corrected to 255 [ 1266.719077][ T144] hfsplus: b-tree write err: -5, ino 25 [ 1266.728732][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1266.747583][ T144] hfsplus: b-tree write err: -5, ino 2 [ 1267.056151][ T9682] netlink: 'syz.7.15215': attribute type 2 has an invalid length. [ 1267.380802][ T9700] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1267.532042][ T9708] loop7: detected capacity change from 0 to 128 [ 1267.553455][ T9709] [U]  [ 1267.556399][ T9709] [U] K{‘ [ 1267.567447][ T9709] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖÆ¯¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 1267.586678][ T9709] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 1267.665801][ T9709] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 1267.679208][ T9709] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)޹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 1267.727916][ T9709] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-ɿ߿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 1267.774295][ T9709] [U] MÜ+ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 1267.841643][ T9709] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 1267.905682][ T9709] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE\ [ 1268.101475][ T9725] loop4: detected capacity change from 0 to 64 [ 1268.163315][ T9709] [U] `ƦM¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆÈ½ [ 1268.192191][ T9709] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 1268.212921][ T9709] [U] 22½“Æ©ÐÛ©X?0;3U± [ 1268.218224][ T9709] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 1268.245345][ T9709] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 1268.255118][ T9709] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 1268.264226][ T9709] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 1268.270735][ T9709] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 1268.291934][ T9709] [U] ¹ EC [ 1268.296478][ T9709] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙ߯Ë,ÎLÂ,Õ [ 1268.398256][ T9707] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 1269.036580][ T9764] usb usb1: usbfs: process 9764 (syz.4.15249) did not claim interface 0 before use [ 1269.350498][ T9775] netlink: 'syz.6.15253': attribute type 1 has an invalid length. [ 1269.393750][ T9775] netlink: 96 bytes leftover after parsing attributes in process `syz.6.15253'. [ 1269.439930][ T9775] netlink: 1 bytes leftover after parsing attributes in process `syz.6.15253'. [ 1269.449209][ T9775] netlink: 'syz.6.15253': attribute type 1 has an invalid length. [ 1269.466705][ T9775] netlink: 634 bytes leftover after parsing attributes in process `syz.6.15253'. [ 1270.006433][ T9800] netlink: 504 bytes leftover after parsing attributes in process `syz.0.15261'. [ 1270.041778][ T9772] loop4: detected capacity change from 0 to 32768 [ 1270.075555][ T9772] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1270.087028][ T9772] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1270.201792][ T9772] XFS (loop4): Ending clean mount [ 1270.223959][ T9772] XFS (loop4): Quotacheck needed: Please wait. [ 1270.282432][ T9772] XFS (loop4): Quotacheck: Done. [ 1270.413688][ T5843] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1270.855638][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1270.877619][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1270.887617][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1270.899023][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1270.908660][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1270.935734][T30313] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1270.943342][T30313] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1270.952060][T30313] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1270.960652][T30313] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1270.968301][T30313] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1271.107455][ T9834] wg1 speed is unknown, defaulting to 1000 [ 1271.190189][ T9830] loop6: detected capacity change from 0 to 32768 [ 1271.208465][ T9830] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.15273 (9830) [ 1271.234822][ T9830] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1271.248243][ T9830] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 1271.410379][ T9830] BTRFS info (device loop6): enabling ssd optimizations [ 1271.429300][ T9830] BTRFS info (device loop6): turning on flush-on-commit [ 1271.456203][ T9830] BTRFS info (device loop6): turning on async discard [ 1271.479955][ T9830] BTRFS info (device loop6): enabling free space tree [ 1271.495828][ T9830] BTRFS info (device loop6): force zlib compression, level 3 [ 1271.514128][ T9830] BTRFS info (device loop6): max_inline set to 0 [ 1271.620580][T18740] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1271.811934][ T9866] netlink: 'syz.6.15279': attribute type 29 has an invalid length. [ 1271.859144][ T9866] netlink: 'syz.6.15279': attribute type 29 has an invalid length. [ 1272.595251][ T1661] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1272.641325][ T9834] chnl_net:caif_netlink_parms(): no params data found [ 1272.770612][ T1661] usb 5-1: Using ep0 maxpacket: 8 [ 1272.788730][ T1661] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.800790][ T1661] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1272.814404][ T1661] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1272.815120][ T9897] macsec2: entered promiscuous mode [ 1272.825974][ T1661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.849560][ T1661] usb 5-1: config 0 descriptor?? [ 1272.864733][ T9893] loop6: detected capacity change from 0 to 4096 [ 1272.876968][ T9897] bridge0: port 3(macsec2) entered blocking state [ 1272.883668][ T9897] bridge0: port 3(macsec2) entered disabled state [ 1272.920549][ T9897] macsec2: entered allmulticast mode [ 1272.925892][ T9897] bridge0: entered allmulticast mode [ 1272.949518][ T9897] macsec2: left allmulticast mode [ 1272.999547][ T9897] bridge0: left allmulticast mode [ 1273.058281][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (35)(bond0) cookie=ffff888086b88000 (13)(macsec2) start [ 1273.100851][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (35)(bond0) cookie=ffff888086b88000 (12)(macsec2) end [ 1273.150022][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff888086b88000 (3)(macsec2) start [ 1273.178080][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff888086b88000 (3)(macsec2) end [ 1273.207047][ T5848] Bluetooth: hci5: command tx timeout [ 1273.222429][ T9834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.230990][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.243440][ T9834] bridge_slave_0: entered allmulticast mode [ 1273.257112][ T9834] bridge_slave_0: entered promiscuous mode [ 1273.267830][ T9834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.275206][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.283168][ T9834] bridge_slave_1: entered allmulticast mode [ 1273.292040][ T9834] bridge_slave_1: entered promiscuous mode [ 1273.332402][ T1661] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 1273.339560][ T1661] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 1273.379135][ T1661] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 1273.391043][ T1661] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 1273.430862][ T9834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.447338][ T1661] uclogic 0003:5543:0522.000B: unknown main item tag 0x0 [ 1273.464926][ T9834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.500763][ T1661] uclogic 0003:5543:0522.000B: hidraw0: USB HID v0.01 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input0 [ 1273.535018][ T1661] usb 5-1: USB disconnect, device number 32 [ 1273.552880][ T9911] netlink: 'syz.0.15296': attribute type 27 has an invalid length. [ 1273.590060][ T9911] netlink: 'syz.0.15296': attribute type 4 has an invalid length. [ 1273.613579][ T9911] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15296'. [ 1273.646712][ T9910] fido_id[9910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1273.674200][ T9834] team0: Port device team_slave_0 added [ 1273.689174][ T9834] team0: Port device team_slave_1 added [ 1273.761047][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.771266][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.798473][ T9834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.815950][ T9834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.826948][ T9834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1273.853399][ T9834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.984144][ T9922] netlink: 72 bytes leftover after parsing attributes in process `syz.7.15302'. [ 1273.996276][ T9834] hsr_slave_0: entered promiscuous mode [ 1274.006885][ T9834] hsr_slave_1: entered promiscuous mode [ 1274.014695][ T9834] debugfs: 'hsr0' already exists in 'hsr' [ 1274.020570][ T9834] Cannot create hsr debugfs directory [ 1274.256713][ T9931] loop7: detected capacity change from 0 to 512 [ 1274.296519][ T9931] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1274.339948][ T9931] EXT4-fs (loop7): 1 truncate cleaned up [ 1274.347562][ T9931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1274.441163][ T9939] loop4: detected capacity change from 0 to 256 [ 1274.453427][ T9941] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 1274.482837][ T9939] exfat: Deprecated parameter 'namecase' [ 1274.513593][ T9939] exfat: Deprecated parameter 'namecase' [ 1274.528183][T20974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.544978][ T9939] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1274.573192][ T9939] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1274.786583][T17734] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (35)(bond0) cookie=ffff8880563a0000 (16)(eth4) start [ 1274.836265][T17734] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (35)(bond0) cookie=ffff8880563a0000 (10)(eth4) end [ 1274.861388][T17734] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff8880563a0000 (6)(eth4) start [ 1274.933500][T17734] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff8880563a0000 (4)(eth4) end [ 1274.961642][ T9958] loop7: detected capacity change from 0 to 512 [ 1274.981803][ T9958] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1275.012574][ T9958] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1275.040543][ T9958] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.15316: bad orphan inode 15 [ 1275.072268][ T9958] loop7: lost filesystem error report for type 5 error -117 [ 1275.072652][ T9958] ext4_test_bit(bit=14, block=18) = 1 [ 1275.080040][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1275.080060][ C1] EXT4-fs (loop7): initial error at time 1208: ext4_orphan_get:1417 [ 1275.080084][ C1] EXT4-fs (loop7): last error at time 1208: ext4_orphan_get:1417 [ 1275.146291][T17734] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (35)(bond0) cookie=ffff88807b640000 (10)(eth3) start [ 1275.188204][T17734] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (35)(bond0) cookie=ffff88807b640000 (6)(eth3) end [ 1275.217360][ T9958] is_bad_inode(inode)=0 [ 1275.221562][ T9958] NEXT_ORPHAN(inode)=1023 [ 1275.225911][ T9958] max_ino=32 [ 1275.260434][ T9958] i_nlink=0 [ 1275.264282][T17734] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff88807b640000 (5)(eth3) start [ 1275.283950][ T9958] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.15316: bg 0: block 161: padding at end of block bitmap is not set [ 1275.290051][T17734] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff88807b640000 (5)(eth3) end [ 1275.318834][ T9958] loop7: lost filesystem error report for type 5 error -117 [ 1275.319293][ T9958] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 1275.345144][ T9958] loop7: lost filesystem error report for type 5 error -117 [ 1275.348087][ T9958] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1275.386507][T17736] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (35)(bond0) cookie=ffff888040c24000 (23)(eth2) start [ 1275.419710][T17736] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (35)(bond0) cookie=ffff888040c24000 (8)(eth2) end [ 1275.452742][T17736] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff888040c24000 (5)(eth2) start [ 1275.470134][ T5848] Bluetooth: hci5: command tx timeout [ 1275.479029][T20974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.488527][T17736] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff888040c24000 (5)(eth2) end [ 1275.497092][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.538519][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.592392][T17725] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (35)(bond0) cookie=ffff88807b644000 (23)(eth1) start [ 1275.634516][T17725] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (35)(bond0) cookie=ffff88807b644000 (8)(eth1) end [ 1275.691128][T17725] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff88807b644000 (5)(eth1) start [ 1275.700817][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.741438][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.765288][T17725] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff88807b644000 (4)(eth1) end [ 1276.221691][ T9834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1276.263696][ T9834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1276.295831][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15327'. [ 1276.315469][ T9834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1276.340377][ T9834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1276.606522][T10013] loop4: detected capacity change from 0 to 4096 [ 1276.674917][ T9834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.760625][ T9834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.778049][ T30] audit: type=1800 audit(1210.283:422): pid=10013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15330" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 1276.851815][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.859073][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.919580][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.926844][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.516788][ T9834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.559505][T10021] loop6: detected capacity change from 0 to 32768 [ 1277.710380][ T5848] Bluetooth: hci5: command tx timeout [ 1277.745073][ T9834] veth0_vlan: entered promiscuous mode [ 1277.787167][ T9834] veth1_vlan: entered promiscuous mode [ 1277.953935][ T9834] veth0_macvtap: entered promiscuous mode [ 1278.000926][ T9834] veth1_macvtap: entered promiscuous mode [ 1278.133013][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.210125][ T9834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.288751][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.326912][ T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.335710][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.383260][T10062] loop6: detected capacity change from 0 to 128 [ 1278.409631][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.541267][T10043] loop4: detected capacity change from 0 to 32768 [ 1278.598708][T10043] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15336 (10043) [ 1278.673748][T10043] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1278.742857][T10043] BTRFS info (device loop4): using sha256 checksum algorithm [ 1278.781919][T10043] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1278.899059][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.929378][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.063500][T10043] BTRFS info (device loop4): rebuilding free space tree [ 1279.095974][T17725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.103935][T17725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.175895][T10043] BTRFS info (device loop4): disabling free space tree [ 1279.225716][T10043] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1279.272454][T10043] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1279.376116][T10043] BTRFS info (device loop4): enabling ssd optimizations [ 1279.427721][T10043] BTRFS info (device loop4): enabling disk space caching [ 1279.473042][T10043] BTRFS info (device loop4): force clearing of disk cache [ 1279.505915][T10043] BTRFS info (device loop4): enabling auto defrag [ 1279.557326][T10043] BTRFS info (device loop4): max_inline set to 0 [ 1279.803165][T17734] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 1279.908338][ T5843] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1279.963165][ T5848] Bluetooth: hci5: command tx timeout [ 1280.141334][T10089] loop6: detected capacity change from 0 to 32768 [ 1280.159970][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15355'. [ 1280.185403][T10089] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.15346 (10089) [ 1280.246885][T10089] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1280.292107][T10089] BTRFS info (device loop6): using blake2b checksum algorithm [ 1280.647666][T10089] BTRFS info (device loop6): enabling ssd optimizations [ 1280.674225][T10089] BTRFS info (device loop6): turning on async discard [ 1280.698418][T10089] BTRFS info (device loop6): enabling free space tree [ 1280.842763][T10153] loop4: detected capacity change from 0 to 64 [ 1281.048794][T18740] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1281.213409][T10161] xt_hashlimit: size too large, truncated to 1048576 [ 1281.795813][T10149] loop7: detected capacity change from 0 to 32768 [ 1281.834899][T10149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.15359 (10149) [ 1281.895770][T10149] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1281.934209][T10149] BTRFS info (device loop7): using sha256 checksum algorithm [ 1282.145105][T10149] BTRFS info (device loop7): setting nodatasum [ 1282.178359][T10149] BTRFS info (device loop7): setting nodatacow [ 1282.223470][T10149] BTRFS info (device loop7): enabling ssd optimizations [ 1282.275508][T10149] BTRFS info (device loop7): turning on async discard [ 1282.296829][T10149] BTRFS info (device loop7): enabling free space tree [ 1282.305117][T10210] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1282.691399][T20974] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1282.948723][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15378'. [ 1284.028159][ T5847] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1284.133977][T10268] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.15390'. [ 1284.198683][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 1284.205653][ T5847] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1284.215036][ T5847] usb 3-1: config 0 has no interface number 0 [ 1284.239026][ T5847] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1284.259315][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.292235][ T5847] usb 3-1: Product: syz [ 1284.309234][ T5847] usb 3-1: Manufacturer: syz [ 1284.326826][ T5847] usb 3-1: SerialNumber: syz [ 1284.345853][ T5847] usb 3-1: config 0 descriptor?? [ 1284.379594][ T5847] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1284.566752][T10286] loop4: detected capacity change from 0 to 1024 [ 1284.632463][T10286] EXT4-fs: Ignoring removed orlov option [ 1284.638233][T10286] EXT4-fs: Ignoring removed bh option [ 1284.655802][ T5847] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1284.705536][ T5847] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1284.762906][T10286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.866930][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1284.911827][T10286] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 18: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 1285.074938][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.109806][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1285.114920][ T5898] usb 3-1: USB disconnect, device number 105 [ 1285.159121][ T5898] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1285.228953][ T5898] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1285.273468][ T5898] quatech2 3-1:0.51: device disconnected [ 1285.426285][T10308] loop4: detected capacity change from 0 to 4096 [ 1285.527569][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15405'. [ 1286.246404][T10342] random: crng reseeded on system resumption [ 1286.533632][T10333] loop2: detected capacity change from 0 to 32768 [ 1286.557981][T10330] loop4: detected capacity change from 0 to 32768 [ 1286.600739][T10330] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15408 (10330) [ 1286.619114][T10333] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1286.695203][T10330] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1286.755469][T10333] XFS (loop2): Ending clean mount [ 1286.777435][T10330] BTRFS info (device loop4): using blake2b checksum algorithm [ 1286.821439][T10333] XFS (loop2): Quotacheck needed: Please wait. [ 1286.872043][T10371] netlink: 'syz.6.15417': attribute type 1 has an invalid length. [ 1286.958191][T10333] XFS (loop2): Quotacheck: Done. [ 1287.004695][ T30] audit: type=1800 audit(1219.716:423): pid=10333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15411" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 1287.102707][T10330] BTRFS info (device loop4): enabling ssd optimizations [ 1287.109713][T10330] BTRFS info (device loop4): turning on async discard [ 1287.177097][T10330] BTRFS info (device loop4): enabling free space tree [ 1287.201450][ T9834] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1287.427222][ T5843] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1287.823551][T10407] loop6: detected capacity change from 0 to 512 [ 1287.926450][T10407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1288.082188][T10407] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.15422: corrupted inode contents [ 1288.219516][T10407] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.15422: mark_inode_dirty error [ 1288.286677][T10407] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.15422: corrupted inode contents [ 1288.339254][T10407] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.15422: mark_inode_dirty error [ 1288.402855][T10407] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.15422: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 1288.402855][T10407] [ 1288.531322][T18740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.607709][T10405] loop2: detected capacity change from 0 to 32768 [ 1289.210911][T10451] Bluetooth: MGMT ver 1.23 [ 1289.697733][T10465] loop6: detected capacity change from 0 to 4096 [ 1289.749283][T10465] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1289.778630][T10465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1289.945256][ T30] audit: type=1800 audit(1222.448:424): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15441" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1290.024078][T10463] loop4: detected capacity change from 0 to 32768 [ 1290.117623][T18740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1290.746171][T10503] netlink: 'syz.4.15453': attribute type 10 has an invalid length. [ 1290.803738][T10506] netlink: 'syz.4.15453': attribute type 10 has an invalid length. [ 1290.818035][T10505] loop6: detected capacity change from 0 to 512 [ 1290.847388][T10503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.863194][T10506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15453'. [ 1290.882163][T10505] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.15454: inode has both inline data and extents flags [ 1290.913833][T10503] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1290.923739][T10505] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1290.926551][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1290.942224][ C1] EXT4-fs (loop6): initial error at time 1223: ext4_orphan_get:1391: inode 15 [ 1290.951165][ C1] EXT4-fs (loop6): last error at time 1223: ext4_orphan_get:1391: inode 15 [ 1290.951210][T10506] batadv0: entered promiscuous mode [ 1290.983495][T10471] loop2: detected capacity change from 0 to 40427 [ 1291.000903][T10505] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.15454: couldn't read orphan inode 15 (err -117) [ 1291.004059][T10506] batadv0: entered allmulticast mode [ 1291.027543][T10505] loop6: lost filesystem error report for type 5 error -117 [ 1291.037272][T10471] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1291.047285][T10505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1291.084237][T10471] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1291.088123][T10506] bond0: (slave batadv0): Releasing backup interface [ 1291.113515][T10471] F2FS-fs (loop2): build fault injection type: 0x0 [ 1291.121055][T10471] F2FS-fs (loop2): invalid crc value [ 1291.132330][T10505] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #2: comm syz.6.15454: invalid size [ 1291.173804][T10506] bridge0: port 4(batadv0) entered blocking state [ 1291.191472][T18740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.199157][T10506] bridge0: port 4(batadv0) entered disabled state [ 1291.406412][T10471] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1291.439514][T10471] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1291.464704][T10471] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1291.531555][ T30] audit: type=1800 audit(1223.906:425): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15443" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 1291.540438][ T63] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1291.562006][ T63] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1291.621942][T10471] syz.2.15443: attempt to access beyond end of device [ 1291.621942][T10471] loop2: rw=34817, sector=77824, nr_sectors = 2047 limit=40427 [ 1291.675031][T10471] syz.2.15443: attempt to access beyond end of device [ 1291.675031][T10471] loop2: rw=8423425, sector=49160, nr_sectors = 7 limit=40427 [ 1291.829691][ T9834] syz-executor: attempt to access beyond end of device [ 1291.829691][ T9834] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1291.876248][ T9834] CPU: 0 UID: 0 PID: 9834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1291.876277][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1291.876291][ T9834] Call Trace: [ 1291.876300][ T9834] [ 1291.876309][ T9834] dump_stack_lvl+0xe8/0x150 [ 1291.876345][ T9834] f2fs_handle_critical_error+0x37c/0x540 [ 1291.876388][ T9834] f2fs_write_end_io+0xcdb/0xff0 [ 1291.876434][ T9834] __submit_merged_bio+0x256/0x700 [ 1291.876478][ T9834] __submit_merged_write_cond+0x3c3/0x4e0 [ 1291.876520][ T9834] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1291.876583][ T9834] f2fs_write_data_pages+0x2975/0x35e0 [ 1291.876653][ T9834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1291.876706][ T9834] ? do_raw_spin_lock+0x12b/0x2f0 [ 1291.876761][ T9834] ? do_raw_spin_unlock+0xf5/0x210 [ 1291.876789][ T9834] ? free_unref_folios+0x15ad/0x16d0 [ 1291.876834][ T9834] ? __lock_acquire+0x6b5/0x2cf0 [ 1291.876902][ T9834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1291.876927][ T9834] do_writepages+0x32e/0x550 [ 1291.876978][ T9834] ? do_raw_spin_unlock+0xf5/0x210 [ 1291.877004][ T9834] filemap_fdatawrite+0x1e9/0x2f0 [ 1291.877035][ T9834] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1291.877111][ T9834] ? do_raw_spin_unlock+0xf5/0x210 [ 1291.877138][ T9834] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1291.877178][ T9834] f2fs_write_checkpoint+0x9cf/0x2680 [ 1291.877238][ T9834] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1291.877305][ T9834] ? kfree+0x1c1/0x630 [ 1291.877331][ T9834] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 1291.877364][ T9834] kill_f2fs_super+0x314/0x720 [ 1291.877395][ T9834] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1291.877431][ T9834] ? lockdep_hardirqs_on+0x7a/0x110 [ 1291.877475][ T9834] deactivate_locked_super+0xbc/0x130 [ 1291.877505][ T9834] cleanup_mnt+0x437/0x4d0 [ 1291.877525][ T9834] ? _raw_spin_unlock_irq+0x23/0x50 [ 1291.877555][ T9834] task_work_run+0x1d9/0x270 [ 1291.877579][ T9834] ? __pfx_task_work_run+0x10/0x10 [ 1291.877613][ T9834] exit_to_user_mode_loop+0xed/0x480 [ 1291.877635][ T9834] ? rcu_is_watching+0x15/0xb0 [ 1291.877676][ T9834] do_syscall_64+0x32d/0xf80 [ 1291.877704][ T9834] ? trace_irq_disable+0x3b/0x150 [ 1291.877730][ T9834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.877770][ T9834] ? clear_bhb_loop+0x40/0x90 [ 1291.877798][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.877818][ T9834] RIP: 0033:0x7f0d65f9d1d7 [ 1291.877839][ T9834] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1291.877858][ T9834] RSP: 002b:00007ffff7756988 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1291.877880][ T9834] RAX: 0000000000000000 RBX: 00007f0d66031c3b RCX: 00007f0d65f9d1d7 [ 1291.877895][ T9834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff7756a40 [ 1291.877909][ T9834] RBP: 00007ffff7756a40 R08: 00007ffff7757a40 R09: 00000000ffffffff [ 1291.877923][ T9834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff7757ad0 [ 1291.877937][ T9834] R13: 00007f0d66031c3b R14: 000000000012adc6 R15: 00007ffff7757b10 [ 1291.877976][ T9834] [ 1291.877985][ T9834] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1292.552790][T10519] loop6: detected capacity change from 0 to 40427 [ 1292.578133][T10519] F2FS-fs (loop6): Image doesn't support compression [ 1292.594744][T10547] loop7: detected capacity change from 0 to 64 [ 1292.628369][T10519] F2FS-fs (loop6): build fault injection rate: 690 [ 1292.655558][T10519] F2FS-fs (loop6): invalid crc value [ 1292.696224][T10547] Trying to free block not in datazone [ 1293.000671][T10519] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1293.040101][T10519] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1293.506673][T10548] loop4: detected capacity change from 0 to 32768 [ 1293.579331][T10548] add_index: next_index = 0. Resetting! [ 1293.601485][T10548] non-latin1 character 0x3ff found in JFS file name [ 1293.627478][T10548] mount with iocharset=utf8 to access [ 1293.978062][T10579] loop6: detected capacity change from 0 to 512 [ 1293.999007][T10580] netlink: 168 bytes leftover after parsing attributes in process `syz.4.15486'. [ 1294.083968][T10562] loop7: detected capacity change from 0 to 32768 [ 1294.153716][T10579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1294.240510][T10562] ERROR: (device loop7): dbFindCtl: Corrupt dmapctl page [ 1294.240510][T10562] [ 1294.259678][T10562] ERROR: (device loop7): remounting filesystem as read-only [ 1294.268974][T10562] jfs_mkdir: dtInsert returned -EIO [ 1294.279553][T10562] ERROR: (device loop7): jfs_mkdir: [ 1294.279553][T10562] [ 1294.289225][T18740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.059455][T10584] loop2: detected capacity change from 0 to 32768 [ 1295.075329][T10584] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15487 (10584) [ 1295.115198][T10584] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1295.126247][T10584] BTRFS info (device loop2): using sha256 checksum algorithm [ 1295.141245][T10584] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1295.228800][ T1655] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1295.328763][T10584] BTRFS info (device loop2): rebuilding free space tree [ 1295.383722][T10584] BTRFS info (device loop2): disabling free space tree [ 1295.407892][T10584] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1295.431173][ T1655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.452155][T10584] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1295.468874][ T1655] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 1295.479955][ T1655] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.492382][T10584] BTRFS info (device loop2): enabling ssd optimizations [ 1295.501361][T10584] BTRFS info (device loop2): enabling disk space caching [ 1295.508931][T10584] BTRFS info (device loop2): force clearing of disk cache [ 1295.518164][ T1655] usb 5-1: config 0 descriptor?? [ 1295.523302][T10584] BTRFS info (device loop2): enabling auto defrag [ 1295.530316][T10584] BTRFS info (device loop2): max_inline set to 0 [ 1295.758509][ T9834] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1295.788036][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15503'. [ 1296.001787][T10637] netlink: 260 bytes leftover after parsing attributes in process `syz.6.15505'. [ 1296.065637][ T1655] isku 0003:1E7D:3264.000C: hidraw0: USB HID v10.00 Device [HID 1e7d:3264] on usb-dummy_hcd.4-1/input0 [ 1296.231486][ T24] usb 5-1: USB disconnect, device number 33 [ 1296.708709][T10652] loop2: detected capacity change from 0 to 4096 [ 1297.289356][T10673] netlink: 'syz.2.15521': attribute type 10 has an invalid length. [ 1297.359869][T10676] netlink: 'syz.2.15521': attribute type 10 has an invalid length. [ 1297.361904][T10673] team0: Port device dummy0 added [ 1297.418495][T10680] loop6: detected capacity change from 0 to 128 [ 1297.447036][T10680] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1297.463966][T10680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1297.511194][T10676] team0: Port device dummy0 removed [ 1297.595118][ T30] audit: type=1326 audit(1229.500:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.4.15527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f885ed9bf79 code=0x0 [ 1297.673456][T10687] veth0: entered promiscuous mode [ 1297.685564][T10686] veth0: left promiscuous mode [ 1297.906136][T17725] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (34)(bond0) cookie=ffff888077148000 (10)(syzkaller1) start [ 1297.941495][T17725] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (34)(bond0) cookie=ffff888077148000 (3)(syzkaller1) end [ 1297.997756][T17725] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff888077148000 (3)(syzkaller1) start [ 1298.034256][T17725] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff888077148000 (3)(syzkaller1) end [ 1298.141210][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15535'. [ 1298.227307][ T144] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (34)(bond0) cookie=ffff88807d922000 (12)(macvlan2) start [ 1298.253235][ T144] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (34)(bond0) cookie=ffff88807d922000 (5)(macvlan2) end [ 1298.275898][ T144] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff88807d922000 (5)(macvlan2) start [ 1298.320342][ T144] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff88807d922000 (4)(macvlan2) end [ 1299.013745][T10728] loop4: detected capacity change from 0 to 512 [ 1299.088496][T10728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.347331][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.449536][T10735] macsec1: entered allmulticast mode [ 1299.485291][T10735] macsec0: entered allmulticast mode [ 1299.502170][T10735] veth1_macvtap: entered allmulticast mode [ 1299.506257][T10740] loop4: detected capacity change from 0 to 128 [ 1299.561855][T10740] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1299.582188][T17736] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (34)(bond0) cookie=ffff88807b640000 (8)(batadv2) start [ 1299.628589][T10740] hpfs: filesystem error: improperly stopped [ 1299.629683][T17736] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804054c000 (13)(syz1) rdma_ndev=ffff88807d9bc000 (34)(bond0) cookie=ffff88807b640000 (4)(batadv2) end [ 1299.679468][T17736] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff88807b640000 (3)(batadv2) start [ 1299.689766][T10740] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1299.710204][T10744] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15553'. [ 1299.734498][T17736] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888063564000 (13)(!yz!) rdma_ndev=ffff88807a98a000 (24)(team_slave_0) cookie=ffff88807b640000 (3)(batadv2) end [ 1299.753913][T10740] [ 1299.773331][T10740] hpfs: You really don't want any checks? You are crazy... [ 1299.814853][T10740] hpfs: hpfs_map_sector(): read error [ 1299.830418][T10740] hpfs: code page support is disabled [ 1299.854240][T10740] hpfs: hpfs_map_4sectors(): unaligned read [ 1299.856984][T10748] loop2: detected capacity change from 0 to 8 [ 1299.860339][T10740] hpfs: hpfs_map_4sectors(): unaligned read [ 1299.913132][T10740] hpfs: filesystem error: unable to find root dir [ 1300.066044][ T5848] Bluetooth: min 33022 > max 0 [ 1300.092867][T10756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15558'. [ 1300.174871][T10758] loop4: detected capacity change from 0 to 512 [ 1300.218355][T10758] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1300.253786][T10758] EXT4-fs (loop4): 1 truncate cleaned up [ 1300.272427][T10758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.376836][ T30] audit: type=1800 audit(1232.056:427): pid=10758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15560" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1300.476784][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.730132][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15565'. [ 1301.073235][T10750] loop6: detected capacity change from 0 to 40427 [ 1301.225084][T10792] loop7: detected capacity change from 0 to 64 [ 1301.380680][T10750] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1301.436529][T10750] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1301.553466][T10801] loop7: detected capacity change from 0 to 2048 [ 1301.618445][T10801] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1301.628018][T18740] syz-executor: attempt to access beyond end of device [ 1301.628018][T18740] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1301.670506][T18740] CPU: 0 UID: 0 PID: 18740 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1301.670534][T18740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1301.670546][T18740] Call Trace: [ 1301.670554][T18740] [ 1301.670563][T18740] dump_stack_lvl+0xe8/0x150 [ 1301.670596][T18740] f2fs_handle_critical_error+0x37c/0x540 [ 1301.670636][T18740] f2fs_write_end_io+0xcdb/0xff0 [ 1301.670680][T18740] __submit_merged_bio+0x256/0x700 [ 1301.670718][T18740] __submit_merged_write_cond+0x3c3/0x4e0 [ 1301.670758][T18740] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1301.670814][T18740] f2fs_write_data_pages+0x2975/0x35e0 [ 1301.670877][T18740] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1301.670915][T18740] ? css_rstat_updated+0x23a/0x530 [ 1301.670966][T18740] ? rcu_is_watching+0x15/0xb0 [ 1301.670994][T18740] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 1301.671026][T18740] ? __lock_acquire+0x6b5/0x2cf0 [ 1301.671069][T18740] ? __lock_acquire+0x6b5/0x2cf0 [ 1301.671100][T18740] ? do_raw_spin_lock+0x12b/0x2f0 [ 1301.671133][T18740] ? do_raw_spin_unlock+0xf5/0x210 [ 1301.671154][T18740] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1301.671177][T18740] do_writepages+0x32e/0x550 [ 1301.671222][T18740] ? do_raw_spin_unlock+0xf5/0x210 [ 1301.671248][T18740] filemap_fdatawrite+0x1e9/0x2f0 [ 1301.671280][T18740] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1301.671359][T18740] ? do_raw_spin_unlock+0xf5/0x210 [ 1301.671384][T18740] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1301.671442][T18740] f2fs_write_checkpoint+0x9cf/0x2680 [ 1301.671511][T18740] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1301.671601][T18740] kill_f2fs_super+0x314/0x720 [ 1301.671633][T18740] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1301.671673][T18740] ? lockdep_hardirqs_on+0x7a/0x110 [ 1301.671721][T18740] deactivate_locked_super+0xbc/0x130 [ 1301.671754][T18740] cleanup_mnt+0x437/0x4d0 [ 1301.671776][T18740] ? _raw_spin_unlock_irq+0x23/0x50 [ 1301.671808][T18740] task_work_run+0x1d9/0x270 [ 1301.671835][T18740] ? __pfx_task_work_run+0x10/0x10 [ 1301.671871][T18740] exit_to_user_mode_loop+0xed/0x480 [ 1301.671894][T18740] ? rcu_is_watching+0x15/0xb0 [ 1301.671928][T18740] do_syscall_64+0x32d/0xf80 [ 1301.671958][T18740] ? trace_irq_disable+0x3b/0x150 [ 1301.671986][T18740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.672007][T18740] ? clear_bhb_loop+0x40/0x90 [ 1301.672034][T18740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.672054][T18740] RIP: 0033:0x7fa3b7d9d1d7 [ 1301.672074][T18740] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1301.672091][T18740] RSP: 002b:00007fff82ff7128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1301.672112][T18740] RAX: 0000000000000000 RBX: 00007fa3b7e31c3b RCX: 00007fa3b7d9d1d7 [ 1301.672126][T18740] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff82ff71e0 [ 1301.672139][T18740] RBP: 00007fff82ff71e0 R08: 00007fff82ff81e0 R09: 00000000ffffffff [ 1301.672152][T18740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff82ff8270 [ 1301.672165][T18740] R13: 00007fa3b7e31c3b R14: 000000000012d10c R15: 00007fff82ff82b0 [ 1301.672208][T18740] [ 1301.979520][T18740] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1302.326744][ T5848] Bluetooth: hci5: command tx timeout [ 1303.079973][T10806] loop2: detected capacity change from 0 to 40427 [ 1303.116405][T10806] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 1303.159703][T10806] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1303.185397][T10806] F2FS-fs (loop2): build fault injection rate: 17008 [ 1303.225480][T10806] F2FS-fs (loop2): build fault injection type: 0x1f8 [ 1303.244072][T10806] F2FS-fs (loop2): invalid crc value [ 1303.311348][T10818] loop6: detected capacity change from 0 to 32768 [ 1303.333345][T10818] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.15579 (10818) [ 1303.403810][T10818] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1303.440206][T10818] BTRFS info (device loop6): using sha256 checksum algorithm [ 1303.458443][T10818] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1303.554541][T10806] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1303.615422][T10806] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1303.622533][T10806] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1303.660596][T10818] BTRFS info (device loop6): rebuilding free space tree [ 1303.744072][T10818] BTRFS info (device loop6): disabling free space tree [ 1303.784702][T10818] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1303.825389][T10823] loop7: detected capacity change from 0 to 32768 [ 1303.833049][T10818] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1303.848825][ T9834] syz-executor: attempt to access beyond end of device [ 1303.848825][ T9834] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1303.884856][ T9834] CPU: 0 UID: 0 PID: 9834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1303.884880][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1303.884891][ T9834] Call Trace: [ 1303.884898][ T9834] [ 1303.884906][ T9834] dump_stack_lvl+0xe8/0x150 [ 1303.884961][ T9834] f2fs_handle_critical_error+0x37c/0x540 [ 1303.884998][ T9834] f2fs_write_end_io+0xcdb/0xff0 [ 1303.885037][ T9834] __submit_merged_bio+0x256/0x700 [ 1303.885071][ T9834] __submit_merged_write_cond+0x3c3/0x4e0 [ 1303.885117][ T9834] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1303.885162][ T9834] f2fs_write_data_pages+0x2975/0x35e0 [ 1303.885213][ T9834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1303.885245][ T9834] ? do_raw_spin_lock+0x12b/0x2f0 [ 1303.885286][ T9834] ? do_raw_spin_unlock+0xf5/0x210 [ 1303.885326][ T9834] ? free_unref_folios+0x15ad/0x16d0 [ 1303.885364][ T9834] ? __lock_acquire+0x6b5/0x2cf0 [ 1303.885408][ T9834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1303.885431][ T9834] do_writepages+0x32e/0x550 [ 1303.885466][ T9834] ? do_raw_spin_unlock+0xf5/0x210 [ 1303.885490][ T9834] filemap_fdatawrite+0x1e9/0x2f0 [ 1303.885520][ T9834] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1303.885586][ T9834] ? do_raw_spin_unlock+0xf5/0x210 [ 1303.885611][ T9834] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1303.885647][ T9834] f2fs_write_checkpoint+0x9cf/0x2680 [ 1303.885701][ T9834] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1303.885774][ T9834] kill_f2fs_super+0x314/0x720 [ 1303.885810][ T9834] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1303.885845][ T9834] ? lockdep_hardirqs_on+0x7a/0x110 [ 1303.885887][ T9834] deactivate_locked_super+0xbc/0x130 [ 1303.885923][ T9834] cleanup_mnt+0x437/0x4d0 [ 1303.885943][ T9834] ? _raw_spin_unlock_irq+0x23/0x50 [ 1303.885974][ T9834] task_work_run+0x1d9/0x270 [ 1303.885997][ T9834] ? __pfx_task_work_run+0x10/0x10 [ 1303.886028][ T9834] exit_to_user_mode_loop+0xed/0x480 [ 1303.886050][ T9834] ? rcu_is_watching+0x15/0xb0 [ 1303.886081][ T9834] do_syscall_64+0x32d/0xf80 [ 1303.886107][ T9834] ? trace_irq_disable+0x3b/0x150 [ 1303.886131][ T9834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.886146][ T9834] ? clear_bhb_loop+0x40/0x90 [ 1303.886165][ T9834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.886180][ T9834] RIP: 0033:0x7f0d65f9d1d7 [ 1303.886195][ T9834] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1303.886208][ T9834] RSP: 002b:00007ffff7756988 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1303.886225][ T9834] RAX: 0000000000000000 RBX: 00007f0d66031c3b RCX: 00007f0d65f9d1d7 [ 1303.886235][ T9834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff7756a40 [ 1303.886244][ T9834] RBP: 00007ffff7756a40 R08: 00007ffff7757a40 R09: 00000000ffffffff [ 1303.886255][ T9834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff7757ad0 [ 1303.886264][ T9834] R13: 00007f0d66031c3b R14: 000000000012d925 R15: 00007ffff7757b10 [ 1303.886288][ T9834] [ 1303.886299][ T9834] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1303.912760][T10818] BTRFS info (device loop6): enabling ssd optimizations [ 1304.184902][T10823] XFS (loop7): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1304.285545][T10818] BTRFS info (device loop6): enabling disk space caching [ 1304.292653][T10818] BTRFS info (device loop6): force clearing of disk cache [ 1304.328252][T10823] XFS (loop7): Ending clean mount [ 1304.350258][T10818] BTRFS info (device loop6): enabling auto defrag [ 1304.356751][T10818] BTRFS info (device loop6): max_inline set to 0 [ 1304.607107][T20974] XFS (loop7): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 1304.641247][T10872] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1304.709632][T10870] can0: slcan on ptm0. [ 1304.739035][ T63] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 1304.869865][T18740] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1304.923876][ T30] audit: type=1400 audit(1236.265:428): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A203AFB7A39AE0EE7AF44 pid=10875 comm="syz.0.15599" [ 1305.001558][T10870] can0 (unregistered): slcan off ptm0. [ 1306.198811][T10927] loop2: detected capacity change from 0 to 1024 [ 1306.480350][T10903] loop6: detected capacity change from 0 to 32768 [ 1306.636419][T10903] ialloc: diAlloc returned -5! [ 1306.657341][T10903] ialloc: diAlloc returned -5! [ 1306.939978][ T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1307.137824][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1307.156954][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1307.173175][ T24] usb 3-1: config 0 has no interface number 0 [ 1307.202154][ T24] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1307.232253][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.262412][ T24] usb 3-1: Product: syz [ 1307.266830][ T24] usb 3-1: Manufacturer: syz [ 1307.271461][ T24] usb 3-1: SerialNumber: syz [ 1307.306970][ T24] usb 3-1: config 0 descriptor?? [ 1307.504084][T10972] loop4: detected capacity change from 0 to 1024 [ 1307.523543][T10972] EXT4-fs: Ignoring removed bh option [ 1307.557288][ T24] usb 3-1: selecting invalid altsetting 1 [ 1307.563098][ T24] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1307.572466][T10972] EXT4-fs: Mount option(s) incompatible with ext3 [ 1307.603745][ T24] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1307.634204][ T24] speedtch 3-1:0.1: probe with driver speedtch failed with error -22 [ 1307.678683][ T24] usb 3-1: USB disconnect, device number 106 [ 1307.708242][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.989638][T10988] loop4: detected capacity change from 0 to 512 [ 1308.003929][T10988] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1308.029331][T10988] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1308.057186][T10988] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.15638: bg 0: block 248: padding at end of block bitmap is not set [ 1308.071826][T10988] loop4: lost filesystem error report for type 5 error -117 [ 1308.072359][T10988] Quota error (device loop4): write_blk: dquota write failed [ 1308.079763][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1308.079783][ C1] EXT4-fs (loop4): last error at time 1239: ext4_validate_block_bitmap:441 [ 1308.104180][T10988] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1308.136319][T10988] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.15638: Failed to acquire dquot type 1 [ 1308.163879][T10988] loop4: lost filesystem error report for type 5 error -117 [ 1308.167142][T10988] EXT4-fs (loop4): 1 truncate cleaned up [ 1308.217018][T10988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1308.352362][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1308.732981][T11014] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15650'. [ 1309.079652][T11028] loop4: detected capacity change from 0 to 64 [ 1309.126399][T11028] hfs: request for non-existent node 327680 in B*Tree [ 1309.160109][T11028] hfs: request for non-existent node 327680 in B*Tree [ 1309.798829][T11060] loop7: detected capacity change from 0 to 512 [ 1309.834080][T11060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1309.858109][T11060] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.15672: bad orphan inode 11 [ 1309.884615][T11060] loop7: lost filesystem error report for type 5 error -117 [ 1309.886456][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1309.900620][ C0] EXT4-fs (loop7): initial error at time 1240: ext4_orphan_get:1417 [ 1309.908677][ C0] EXT4-fs (loop7): last error at time 1240: ext4_orphan_get:1417 [ 1309.910791][T11060] ext4_test_bit(bit=10, block=4) = 1 [ 1309.981146][T11060] is_bad_inode(inode)=0 [ 1309.988638][T11060] NEXT_ORPHAN(inode)=2080374784 [ 1309.993644][T11060] max_ino=32 [ 1309.997437][T11060] i_nlink=0 [ 1310.000755][T11060] EXT4-fs (loop7): 1 truncate cleaned up [ 1310.008465][T11060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1310.033185][T11060] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.15672: bg 0: block 393: padding at end of block bitmap is not set [ 1310.086043][T20974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.425543][T11083] loop7: detected capacity change from 0 to 1024 [ 1310.551819][T11087] netlink: 320 bytes leftover after parsing attributes in process `syz.2.15684'. [ 1310.707592][T11093] loop7: detected capacity change from 0 to 1024 [ 1310.743737][T11093] EXT4-fs: Ignoring removed orlov option [ 1310.774287][T11093] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1310.892845][T11093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1310.953996][ T30] audit: type=1800 audit(1241.831:429): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15694" name="file1" dev="tmpfs" ino=397 res=0 errno=0 [ 1310.979377][T11093] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 7: comm syz.7.15688: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1311.110912][ T1373] jfs_flush_journal: synclist not empty [ 1311.116543][ T1373] metapage: ffff88801e7d05d0: 00001000 00000000 00003b90 00000000 [ 1311.132488][ T1373] metapage: ffff88801e7d05e0: 1e7d09c0 ffff8880 5721f228 ffff8880 [ 1311.154968][ T1373] metapage: ffff88801e7d05f0: 00000004 00000000 00000000 00000000 [ 1311.162865][ T1373] metapage: ffff88801e7d0600: 359bd000 ffff8880 00000030 00000000 [ 1311.175320][T20974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.186589][ T1373] metapage: ffff88801e7d0610: 00000000 dead4ead ffffffff 00000000 [ 1311.233507][ T1373] metapage: ffff88801e7d0620: ffffffff ffffffff 9a3e17a0 ffffffff [ 1311.255007][ T1373] metapage: ffff88801e7d0630: 93cbb0c0 ffffffff 00000000 00000000 [ 1311.284275][ T1373] metapage: ffff88801e7d0640: 8c0b3820 ffffffff 00000300 00000000 [ 1311.306921][ T1373] metapage: ffff88801e7d0650: 1e7d0650 ffff8880 1e7d0650 ffff8880 [ 1311.357310][ T1373] metapage: ffff88801e7d0660: 00d66f40 ffffea00 68d7c000 ffff8880 [ 1311.404461][ T1373] metapage: ffff88801e7d0670: 00001000 0000408c 00000000 00000000 [ 1311.412364][ T1373] metapage: ffff88801e7d0680: 5721f000 ffff8880 [ 1311.457509][ T1373] page: ffffea0000d66f40: 00fff2000000403c ffffea0001e60748 [ 1311.464882][ T1373] page: ffffea0000d66f50: ffff8880118309e0 0000000000000000 [ 1311.514955][ T1373] page: ffffea0000d66f60: 0000000000000030 ffff88801e7d05d0 [ 1311.522348][ T1373] page: ffffea0000d66f70: 00000001ffffffff ffff88801dabdcc0 [ 1311.574957][ T1373] metapage: ffff88801e7d09b0: 00001000 00000000 00003f08 00000000 [ 1311.597832][ T1373] metapage: ffff88801e7d09c0: 1e7d0200 ffff8880 1e7d05e0 ffff8880 [ 1311.619518][ T1373] metapage: ffff88801e7d09d0: 00000004 00000000 00000000 00000000 [ 1311.641521][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15701'. [ 1311.645103][ T1373] metapage: ffff88801e7d09e0: 7722f000 ffff8880 0000002c 00000000 [ 1311.693497][ T1373] metapage: ffff88801e7d09f0: 00000000 dead4ead ffffffff 00000000 [ 1311.712716][ T1373] metapage: ffff88801e7d0a00: ffffffff ffffffff 9a3e17a0 ffffffff [ 1311.734616][ T1373] metapage: ffff88801e7d0a10: 93cbb0c0 ffffffff 00000000 00000000 [ 1311.758632][ T1373] metapage: ffff88801e7d0a20: 8c0b3820 ffffffff 00000300 00000000 [ 1311.785480][T11126] netlink: 'syz.6.15703': attribute type 10 has an invalid length. [ 1311.804409][ T1373] metapage: ffff88801e7d0a30: 1e7d0a30 ffff8880 1e7d0a30 ffff8880 [ 1311.812411][ T1373] metapage: ffff88801e7d0a40: 01dc8bc0 ffffea00 68d7c000 ffff8880 [ 1311.820533][T11126] batadv0: left promiscuous mode [ 1311.831422][ T1373] metapage: ffff88801e7d0a50: 00001000 0000408c 00000000 00000000 [ 1311.840901][T11129] netlink: 'syz.6.15703': attribute type 10 has an invalid length. [ 1311.861319][ T1373] metapage: ffff88801e7d0a60: 5721f000 ffff8880 [ 1311.870663][T11126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.886083][ T1373] page: ffffea0001dc8bc0: 00fff2800000403c ffffea000137a208 [ 1311.902512][T11129] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15703'. [ 1311.913605][ T1373] page: ffffea0001dc8bd0: ffffea000214d848 0000000000000000 [ 1311.920947][ T1373] page: ffffea0001dc8be0: 000000000000002c ffff88801e7d09b0 [ 1311.958353][T11126] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1311.977591][ T1373] page: ffffea0001dc8bf0: 00000001ffffffff ffff88801dabdcc0 [ 1311.991662][T11129] batadv0: entered promiscuous mode [ 1312.002538][ T1373] metapage: ffff88801e7d01f0: 00001000 00000000 00003fb0 00000000 [ 1312.022403][T11129] batadv0: entered allmulticast mode [ 1312.027825][ T1373] metapage: ffff88801e7d0200: 5721f228 ffff8880 1e7d09c0 ffff8880 [ 1312.041483][T11131] loop4: detected capacity change from 0 to 1024 [ 1312.061299][ T1373] metapage: ffff88801e7d0210: 00000004 00000000 00000000 00000000 [ 1312.079521][T11129] bond0: (slave batadv0): Releasing backup interface [ 1312.101283][ T1373] metapage: ffff88801e7d0220: 34f6c000 ffff8880 0000001c 00000000 [ 1312.114832][ T1373] metapage: ffff88801e7d0230: 00000000 dead4ead ffffffff 00000000 [ 1312.127373][ T1373] metapage: ffff88801e7d0240: ffffffff ffffffff 9a3e17a0 ffffffff [ 1312.152137][ T1373] metapage: ffff88801e7d0250: 93cbb0c0 ffffffff 00000000 00000000 [ 1312.169732][ T1373] metapage: ffff88801e7d0260: 8c0b3820 ffffffff 00000300 00000000 [ 1312.182925][T11129] bridge0: port 3(batadv0) entered blocking state [ 1312.226785][ T1373] metapage: ffff88801e7d0270: 1e7d0270 ffff8880 1e7d0270 ffff8880 [ 1312.235149][T11129] bridge0: port 3(batadv0) entered disabled state [ 1312.262560][ T1373] metapage: ffff88801e7d0280: 00d3db00 ffffea00 68d7c000 ffff8880 [ 1312.278223][T11131] hfsplus: xattr searching failed [ 1312.298301][ T1373] metapage: ffff88801e7d0290: 00001000 0000408c 00000000 00000000 [ 1312.321503][ T1373] metapage: ffff88801e7d02a0: 5721f000 ffff8880 [ 1312.346160][ T1373] page: ffffea0000d3db00: 00fff2800000403c ffffea000248c1c8 [ 1312.385809][ T1373] page: ffffea0000d3db10: ffffea000137a208 0000000000000000 [ 1312.432420][ T1373] page: ffffea0000d3db20: 000000000000001c ffff88801e7d01f0 [ 1312.440928][ T1373] page: ffffea0000d3db30: 00000001ffffffff ffff88801dabdcc0 [ 1312.473744][ T1373] read_mapping_page failed! [ 1312.484878][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15709'. [ 1312.498545][ T1373] diWriteSpecial: failed to read aggregate inode extent! [ 1312.519655][T11139] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1312.532341][ T1373] read_mapping_page failed! [ 1312.536881][ T1373] diWriteSpecial: failed to read aggregate inode extent! [ 1312.604255][T11141] loop7: detected capacity change from 0 to 4096 [ 1312.641685][T11141] EXT4-fs: Mount option(s) incompatible with ext2 [ 1312.725889][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1312.735190][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1313.153668][T11171] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1313.179913][ C0] [ 1313.182277][ C0] ================================ [ 1313.187406][ C0] WARNING: inconsistent lock state [ 1313.192544][ C0] syzkaller #0 Not tainted [ 1313.196980][ C0] -------------------------------- [ 1313.202112][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 1313.208982][ C0] syz.0.15721/11171 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1313.215529][ C0] ffff888031648868 (&dev->spinlock){?...}-{3:3}, at: das16m1_interrupt+0x5e/0x180 [ 1313.224809][ C0] {HARDIRQ-ON-W} state was registered at: [ 1313.230556][ C0] lock_acquire+0xf0/0x2e0 [ 1313.235112][ C0] _raw_spin_lock_bh+0x36/0x50 [ 1313.240004][ C0] waveform_ao_cancel+0x8d/0x120 [ 1313.245071][ C0] comedi_close+0x27e/0x5e0 [ 1313.249694][ C0] __fput+0x44f/0xa70 [ 1313.253809][ C0] task_work_run+0x1d9/0x270 [ 1313.258533][ C0] exit_to_user_mode_loop+0xed/0x480 [ 1313.263937][ C0] do_syscall_64+0x32d/0xf80 [ 1313.269081][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.275098][ C0] irq event stamp: 1472 [ 1313.279271][ C0] hardirqs last enabled at (1471): [] irqentry_exit+0x59e/0x620 [ 1313.288578][ C0] hardirqs last disabled at (1472): [] common_interrupt+0x13/0xe0 [ 1313.297979][ C0] softirqs last enabled at (1404): [] __irq_exit_rcu+0x5f/0x150 [ 1313.307370][ C0] softirqs last disabled at (1275): [] __irq_exit_rcu+0x5f/0x150 [ 1313.316764][ C0] [ 1313.316764][ C0] other info that might help us debug this: [ 1313.324840][ C0] Possible unsafe locking scenario: [ 1313.324840][ C0] [ 1313.332387][ C0] CPU0 [ 1313.335683][ C0] ---- [ 1313.338973][ C0] lock(&dev->spinlock); [ 1313.343331][ C0] [ 1313.346801][ C0] lock(&dev->spinlock); [ 1313.351383][ C0] [ 1313.351383][ C0] *** DEADLOCK *** [ 1313.351383][ C0] [ 1313.359541][ C0] 2 locks held by syz.0.15721/11171: [ 1313.364842][ C0] #0: ffff88805a5252e8 (&tty->termios_rwsem){++++}-{4:4}, at: uart_ioctl+0x109/0x1af0 [ 1313.374545][ C0] #1: ffff888025e48e90 (&port->mutex){+.+.}-{4:4}, at: uart_ioctl+0x133/0x1af0 [ 1313.383624][ C0] [ 1313.383624][ C0] stack backtrace: [ 1313.389617][ C0] CPU: 0 UID: 0 PID: 11171 Comm: syz.0.15721 Not tainted syzkaller #0 PREEMPT(full) [ 1313.389636][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1313.389646][ C0] Call Trace: [ 1313.389655][ C0] [ 1313.389662][ C0] dump_stack_lvl+0xe8/0x150 [ 1313.389686][ C0] print_usage_bug+0x28b/0x2e0 [ 1313.389708][ C0] mark_lock_irq+0x410/0x420 [ 1313.389738][ C0] mark_lock+0x115/0x190 [ 1313.389758][ C0] __lock_acquire+0x661/0x2cf0 [ 1313.389787][ C0] lock_acquire+0xf0/0x2e0 [ 1313.389804][ C0] ? das16m1_interrupt+0x5e/0x180 [ 1313.389826][ C0] ? ktime_get+0x45/0x200 [ 1313.389840][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1313.389857][ C0] _raw_spin_lock+0x2e/0x40 [ 1313.389881][ C0] ? das16m1_interrupt+0x5e/0x180 [ 1313.389901][ C0] das16m1_interrupt+0x5e/0x180 [ 1313.389920][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 1313.389941][ C0] __handle_irq_event_percpu+0x227/0x9e0 [ 1313.389961][ C0] handle_irq_event+0x8b/0x1e0 [ 1313.389975][ C0] ? handle_edge_irq+0x229/0xa10 [ 1313.389990][ C0] handle_edge_irq+0x23b/0xa10 [ 1313.390007][ C0] __common_interrupt+0x141/0x1f0 [ 1313.390026][ C0] common_interrupt+0xb6/0xe0 [ 1313.390044][ C0] [ 1313.390049][ C0] [ 1313.390055][ C0] asm_common_interrupt+0x26/0x40 [ 1313.390071][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1313.390093][ C0] Code: f7 e8 fd 21 f2 f5 f7 c3 00 02 00 00 74 05 e8 20 70 1d f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 e8 e3 f5 65 8b 05 bd bf 6b 07 85 c0 74 18 5b 41 5e c3 cc cc [ 1313.390106][ C0] RSP: 0018:ffffc9000cb2fa28 EFLAGS: 00000206 [ 1313.390120][ C0] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 0000000080000001 [ 1313.390132][ C0] RDX: 0000000000000006 RSI: ffffffff8def2049 RDI: 0000000000000001 [ 1313.390143][ C0] RBP: ffffc9000cb2fbe0 R08: ffffffff901182b7 R09: 1ffffffff2023056 [ 1313.390155][ C0] R10: dffffc0000000000 R11: fffffbfff2023057 R12: 0000000000000100 [ 1313.390166][ C0] R13: dffffc0000000000 R14: ffffffff9a5cc360 R15: ffffffff8f00a560 [ 1313.390186][ C0] serial8250_config_port+0x1467/0x5300 [ 1313.390216][ C0] ? kfree+0x1c1/0x630 [ 1313.390237][ C0] ? __release_region+0x3a6/0x530 [ 1313.390254][ C0] ? __pfx_serial8250_config_port+0x10/0x10 [ 1313.390276][ C0] ? __release_region+0x3a6/0x530 [ 1313.390293][ C0] ? __pfx___release_region+0x10/0x10 [ 1313.390309][ C0] univ8250_config_port+0x3b9/0x980 [ 1313.390325][ C0] ? __pfx_univ8250_release_port+0x10/0x10 [ 1313.390339][ C0] ? serial8250_release_std_resource+0x135/0x2e0 [ 1313.390363][ C0] uart_ioctl+0x1570/0x1af0 [ 1313.390397][ C0] ? do_futex+0x333/0x420 [ 1313.390415][ C0] ? __pfx_uart_ioctl+0x10/0x10 [ 1313.390436][ C0] ? __fget_files+0x2a/0x420 [ 1313.390458][ C0] ? __fget_files+0x3a0/0x420 [ 1313.390476][ C0] ? __fget_files+0x2a/0x420 [ 1313.390496][ C0] tty_ioctl+0x928/0xde0 [ 1313.390514][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 1313.390530][ C0] __se_sys_ioctl+0xfc/0x170 [ 1313.390547][ C0] do_syscall_64+0x14d/0xf80 [ 1313.390568][ C0] ? trace_irq_disable+0x3b/0x150 [ 1313.390588][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.390602][ C0] ? clear_bhb_loop+0x40/0x90 [ 1313.390618][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.390632][ C0] RIP: 0033:0x7f9b5e19bf79 [ 1313.390646][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.390658][ C0] RSP: 002b:00007f9b5f00d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1313.390672][ C0] RAX: ffffffffffffffda RBX: 00007f9b5e415fa0 RCX: 00007f9b5e19bf79 [ 1313.390683][ C0] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 1313.390692][ C0] RBP: 00007f9b5e2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1313.390706][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1313.390715][ C0] R13: 00007f9b5e416038 R14: 00007f9b5e415fa0 R15: 00007ffd933a2628 [ 1313.390732][ C0] [ 1313.390829][ C0] comedi comedi3: fifo overflow [ 1313.862997][T11171] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)