last executing test programs: 20m51.266293466s ago: executing program 32 (id=5086): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) 20m35.463500732s ago: executing program 33 (id=5275): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x730f, 0x4, 0x5}) 19m30.13664987s ago: executing program 34 (id=6163): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x100, 0x100, 0x9, 0xffffffff}) timerfd_create(0x8, 0x80800) 18m35.329565672s ago: executing program 0 (id=6898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x22}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 18m35.016909828s ago: executing program 0 (id=6901): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x20, 0x2, 0x3, "1101b3288888d16d379d0000000000800400", 0x34324d59}) 18m34.76301786s ago: executing program 0 (id=6905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 18m34.552180474s ago: executing program 0 (id=6908): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x2a10812, &(0x7f0000000580)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESDEC, @ANYRES32, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESOCT], 0x21, 0x1508, &(0x7f0000002080)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 18m34.153168418s ago: executing program 0 (id=6911): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180021f2f78d7000ffdbdf2502180000fe00fe080040000008000100ac1414"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4444) 18m33.730806145s ago: executing program 0 (id=6916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001002fbd7000fddbdf2500000000", @ANYRES32=r0, @ANYBLOB="294001002028000014001680100001800c0007"], 0x48}}, 0x20000000) 18m33.220909153s ago: executing program 35 (id=6916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001002fbd7000fddbdf2500000000", @ANYRES32=r0, @ANYBLOB="294001002028000014001680100001800c0007"], 0x48}}, 0x20000000) 16m26.290817419s ago: executing program 7 (id=8751): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3f0, 0x0, 0x1f8, 0x0, 0x308, 0x308, 0xe8, 0x4, 0x0, {[{{@arp={@multicast2, @remote, 0xffffff00, 0xffffff00, 0x4, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x9, 0x80, 0x81, 0x0, 0xbd, 0x5, 'veth0_vlan\x00', 'caif0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x401}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, 0x8, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="8cc489da1088", @empty, @broadcast, @remote, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 16m25.934727351s ago: executing program 7 (id=8757): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16m24.251414672s ago: executing program 7 (id=8792): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) 16m24.088483441s ago: executing program 7 (id=8794): syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file1\x00', 0x8080, &(0x7f0000000c40)=ANY=[], 0xfe, 0x158, &(0x7f0000000040)="$eJzs0E9LKlEYBvDnMHPV+8crF25gQSa0aEhMmbBWURoJQjZQuGlTYBMJipFQrsKIdi2Cti6soJX4FSxrYymEfYk2rl0WR8ciCPwAPb/NMM953+fAWZpravAChy50LWYzu3tmLmdueVeNeHTtpVoNy9wGoPPpvDd/EwZ25FcF2keAjO+cwHYqbU4lsw450w4DGoDIbyzIPCizf8Avmf3HO7mvjQO1od6+/kU2bWUjKhBx9TLZ93oBTMg+O4BU2rRbnfmir1J+WGnUY/7J61EFJzHf2A/rrJ97zFM9Onz1x60gYd5fIiLk3nOg7n8KVMqtZiO+bMwD0PUZARSCoZbx2IiFCmdQN+z7wLoABD7uscHtURMOHAvgvNvVvhVOALVSx8j8nS1Z9zsOFC8g8sXkpiL/fwKKBtF/DhsGEIMGiIiIiIiIiIiIiIiIiIjo23gLAAD//03YXHc=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 16m23.869567302s ago: executing program 7 (id=8798): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000100)=0x7, 0x4) 16m23.288864647s ago: executing program 7 (id=8806): r0 = socket$inet_udp(0x2, 0x2, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='user.syz\x00') 16m22.817044927s ago: executing program 36 (id=8806): r0 = socket$inet_udp(0x2, 0x2, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='user.syz\x00') 8m20.213352519s ago: executing program 5 (id=15579): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 8m19.152649638s ago: executing program 5 (id=15585): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 8m18.965565622s ago: executing program 5 (id=15588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x96}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 8m18.793087998s ago: executing program 5 (id=15592): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@gid}, {@gid}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@dmask={'dmask', 0x3d, 0x10000}}, {@namecase}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@dmask={'dmask', 0x3d, 0x9fd1}}, {@utf8}]}, 0x1, 0x1534, &(0x7f0000001f40)="$eJzs3AuYjtX6MPD7Xms9Y0i8TXIY1lr3w5sclkmSHJLkkCSVJMkpITHJloTEEJI0JCE5DEkMITlMTBrn8/mQkCRNkoTklKzvmvDZ7dpf7b37tv/1n/t3Xc816571rPXcz3u/h/U818z7bdehtRrXrt6QiOA/ghd+JAFALAAMBIC8ABAAQPm48nFZ/TklJv1nB2F/rYdSr3QG7Eri+mdvXP/sjeufvXH9szeuf/bG9c/euP7ZG9efsexs07RC1/CWfTe+/5+d8ef//yKZZcZ+uabMdd0AYv7sEK5/9sb1/18r+DM7cf2zN65/dhV7pRNg/wPw6z87yPFPe7j+2RvXn7Hs7Erff77SG0T+gsdAwV+X05GcFwrz3zp/xhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsv+C0v0wBwKX2lc6LMcYYY4wxxhhjfx2f40pnwBhjjDHGGGOMsf//EARIUBBADOSAWMgJuUAAwNWQB/JCBK6BOLgW8sF1kB8KQEEoBPFQGIqABgMWCEIoCsUgCtdDcbgBSkBJKAWlwUEZSIAboSzcBOXgZigPt0AFuBUqQiWoDFXgNqgKt0M1uAOqw51QA2pCLagNd0EduBvqwj1QD+6F+nAf3A8PQAN4EBrCQ9AIHobG8Ag0gUehKTSD5tACWv5b45+HnvAC9ILekAR9oC+8CP2gPwyAl2AgvAyD4BUYDK9CMgyBofAaDIPXYTi8ASNgJIyCN2E0vAVjYCyMg/GQAhNgIrwNk+AdmAzvwhSYCqkwDabDezADZsIseB9mwwcwB+bCPJgPafAhLICFkA4fwSL4GDJgMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22ww74BHbCp7ALdsMe+Az2wuf/4vhT/zC+GwICChSoUGEMxmAsxmIuzIW5MTfmwTwYwQjGYRzmw3yYH/NjQSyI8RiPRbAIGjRISFgUi2IUo1gci2MJLIGlsBQ6dJiACVgWb8JyWA7LY3msgBWwIlbCSlgFq2BVrIrVsBpWx+pYA2tgLayFd+Fd2AfrYl2sh/WwPta/dHsKG2JDbISNsDE2xibYBJtiU2yOzbEltsRW2ApbY2tsi22xHbbD9tgeEzERO2JH7ISdsDN2xi7YBbtiV+yG3bF75vM5AF/AF7A31hB9sC/2xX6YnGMAvoQv4cs4CF/BV/BVTMYhOBRfw9fwdRyOJ3EEjsRROAqrirdwDI5FEuMxBVNwIk7ESTgJsxJ9F6diKk7D6TgdZ+BMnInv42z8AD/AuTgX52MapuECXIjpmI6L8BRm4GJcgktxGS7HZbgSV+FKXINrcQ2ux/W4ETfiZtyMW3Erbsft+AkqAPwUd+NuTMa9uBf34T7cj/vxAB7ATMzEg3gQD+EhPIyH8QgewaN4DI/jMTyBJ/AknsLTeBrP4lk8h8/Gf93ok5Krk0FkUUKJGBEjYkWsyCVyidwit8gj8oiIiIg4ESfyiXwiv8gvCoqCIl7EiyKiiDDCCBJhDACIqIiK4qK4KCFKiFKilHDCiQSRIMqKsqKcKCfKi1tEBXGrqCgqiTauiqgiqoq2rpq4Q1QX1UUNUVPUErVFbVFH1BF1RV1RT9QT9UV9cb94QDQQfXAAPiSyKtNYDMEmYig2Fc2EvPgO1koMx9aijWgrnhAjcQS2F61conhKdBRjsJP4mxiLz4guYjx2Fc+JbqK76CGeFz1Fa9dL9BaTsY/oK6ZiP9FfDBAviRlYU7yPs3PWEq+KZDFEDBWvifn4uhgu3hAjxEgxSrwpRou3xBgxVowT40WKmCAmirfFJPGOmCzeFVPEVJEqponp4j0xQ8wUs8T7Yrb4QMwRc8U8MV+kiQ/FArFQpIuPxCLxscgQi8USsVQsE8vFCrFSrBKrxRqxVqwT68UGsVFsEpvFFhEL28R2sUN8InaKT8UusVvsEZ+JveJzsU98IfaLL8UB8ZXIFF+Lg+IbcUh8Kw6L78QR8b04Ko6J4+IHcUL8KE6KU+K0OCPOip/EOfGzOC+8AIlSSCmVDGSMzCFjZU6ZS14lc8vg4qN7jYyT18p88jqZXxaQBWUhGS8LyyJSSyOtJBnKorKYjMrrZXF5gywhS8pSsrR0soxMkDfKsvImWU7eLMvLW2QFeausKCvJyrKKvE1WlbdLiFw4Rg1ZU9aSteVdMgnulnXlPbKevFfWl/fJ++UDsoF8UDaUD8lG8mHZWD4im8hHZVPZTDaXLWRL+ZhsJR+XrWUb2VY+IdvJJ2V72UEmyqdkR+kvPkWekV3ks7KrfE52k91lD/mzPC+97CV7S+gDsq98UfaT/eWAWACQL8tB8hU5WL4qk+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC9T5AQ5Ub4tJ8l35GT5rpwip8pUOU0OkAN/mWmWlH84/u3fGT/4l6NvlJvkZrlFbpXb5Ha5Q34id8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMlNmyoPyoDwkD8nD8rA8Io/Io/KYPCN/kCfkj/KkPCVPyTPyrDwrz118DEChEkoqpQIVo3KoWJVT5VJXqdzqapVH5VURdY2KU9eqfOo6lV8VUAVVIRWvCqsiSiujrCIVqqKqmIqq6/HiE0aVUqWVU2VUgrrxXxmviqsbVAlV8lfjL+WX9E/ya6laqlaqlWqtWqu2qq1qp9qp9qq9SlSJqqPqqDqpTqqz6qy6qC6qq+qa9XxQPVQP1VP1VL1UL5WkklRf9aLqp/qrAeolNVC9rAapQWqwGqySVbIaqoaqYWqYGq6GqxFqhBqlRqnRarQao8aocWqcSlEpaqKaqCapSWqymqymqCkqVaWq6Wq6mqFmqFlqlpqtZqs5ao6ap+apNJWmFqgFKl2lq0VqkcpQi9VitVQtVcvVcrVSrVSr1Wq1Vq1V69V6laE2qU1qi9qitqltaofaoXaqnWqX2KX2qD1qr9qr9ql9ar/arw6oAypTZaqD6qA6pA6pw+qwOqKOqKPqqDqujqsT6oQ6qU6q0+q0OqvOqnPqnDqvzmct+wIRiEAFKogJYoLYIDbIFeQKcge5gzxBniASRIK4IC7IF1wX5A8KBAWDQkF8UDgoEujABDYQF4seDa4Pigc3BCWCkkGpoHTggjJBQnBjUDa4KSgX3ByUD24JKgS3BhWDSkHloEpwW1A1uD2oFtwRVA/uDGoENYNaQe3grqBOcHdQN7gnqBfcG9QP7gvuDx4IGgQPBg2Dh4JGwcNB4+CRoEnwaNA0aBY0D1oELf/S+b0/WeBx10v31km6j+6rX9T9dH89QL+kB+qX9SD9ih6sX9XJeogeql/Tw/Trerh+Q4/QI/Uo/aYerd/SY/RYPU6P1yl6gp6o39aT9Dt6sn5XT9FTdaqepqfr9/QMPVPP0u/r2foDPUfP1fP0fJ2mP9QL9EKdrj/Si/THOkMv1kv0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/Qneqf+VO/Su/Ue/Zneqz/X+/QXer/+Uh/QX+lM/bU+qL/Rh/S3+rD+Th/R3+uj+pg+rn/QJ/SP+qQ+pU/rM/qs/kmf0z/r89pnLe6zPt6NMsrEmBgTa2JNLpPL5Da5TR6Tx0RMxMSZOJPP5DP5TX5T0BQ08SbeFDFFTBYyZIqaoiZqoqa4KW5KmBKmlCllnHEmwSSYsqasKWfKmfKmvKlgKpiKpqKpbCqb28xt5nZzu7nD3GHuNHeamqamqW1qmzqmjqlr6pp6pp6pb+qb+839poFpYBqahqaRaWQam8amiWlimpqmprlpblqalqaVaWVam9amrWlr2pl2pr1pbxJNouloOppOppPpbDqbLqaL6Wq6mm6mm+lhepiepqfpZXqZJJNk+pq+pp/pZwaYAWagGWgGmUFmsBlskk2yGWqGmmFmmBluhpsRZqQZlbVQNW+ZMWasGWfGmxSTYiaaiWaSmWQmm8lmipliUk2qmW6mmxlmhpllZpnZZraZY+aYeWaeSTNpZoFZYNJNullkFpkMk2GWmCVmmVlmVpgVZpVZZdaYNWYdrDMbzAazyWwyW8wWs81sMzvMDrPT7DS7zC6zx+wxe81es8/sM/vNfnPAHDCZJtMcNAfNIXPIHDaHzRFzxBw1R81xc9ycMCfMSXPSnDanzVlT4OLnpTexNqfNZa+yue3VNo/Na/8xLmgL2Xhb2Bax2ua3BX4VG2ttCVvSlrKlrbNlbIK98TdxRVvJVrZV7G22qr3dVvtNXMfebevae2w9e6+tbe/6VVzf3mezVicNEAFsM9vItrCN7SO2iX3UNrXNbHPbwrazT9r2toNNtE/Zjvbp38QL7EK7yq62a+xau8vutqftGXvIfmvP2p9sL9vbDrQv20H2FTvYvmqT7ZDfxKPsm3a0fcuOsWPtODv+N/EUO9Wm2ml2un3PzrAzfxOn2Q/tbJtu59i5dp6d/0uclVO6/cgush/bDBvAErvULrPL7Qq78lKuPq9dbzfYjXan/dRusVvtNrvd7ri0ELa77R77md1rP7cH7Td2v/3SHrCHbab9+pc46/wO2+/sEfu9PWqP2eP2B3vC/qgujc469x/sz/a89RYICUiSooBiKAfFUk7KRVdRbrqa8lBeitA1FEfXUj66jvJTASpIhSieClMR0mTIElFIRakYRel6upReKSpNjspQAt1IZekmKkc3U3m6hSrQrVSRKlFlqkK3UVW6narRHVSd7qQaVJNqUW26i+rQ3VSX7qF6dC/Vp/vofnqAGtCD1JAeokb0MDWmR6gJPUpNqRk1pxbUkh6jVvQ4taY21JaeoHb0JLWnDpRIT1FHepo60d+oMz1DXehZ6krPUTfqTj3oeepJL1Av6k1J1If60ovUj/rTAHqJBtLLNIheocH0KiXTEBpKr9Ewep2G0xs0gkbSKHqTRtNbNIbG0jgaTyk0gSbS2zSJ3qHJ9C5NoamUStNoOr1HM2gmzaL3aTZ9QHNoLs2j+ZRGH9ICWkjp9BEtoo8pgxbTElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ31Ku2g37aHPaC99Tkhf0H76kg7QV5RJX9NB+oYO0bd0mL7zvel7OkrH6Dj9QCfoRzpJp+g0naGz9BOdo5/pPHmCEEMRylCFQRgT5ghjw5xhrvCqMHd4dZgnzBtGwmvCuPDaMF94XZg/LBAWDAuF8WHhsEioQxPakMIwLBoWC6Ph9WHx8IawRFgyLBWWDl1YJkwIbwzLhjeF5cKbw/LhLWGF8NawYlgpfOTeKuFtYdXw9rBaeEdYPbwzrBHWDGuFtcO7wjrh3WHd8J6wXnhvWC68L7w/fCBsED4YNgwfChuFD4eNw0fCJuGjYdOwWdg8bBG2DB8LW4WPh63DNmHb8ImwXfhk2D7sECaGT4Udw6d/6b9v4T/vTwr7hH3DF8MXQ+/vkfOi86Np0Q+jC6ILo+nRj6KLoh9HM6KLo0uiS6PLosujK6Iro6uiq6Nromuj66LroxuiG6Pe184BDp1w0ikXuBiXw8W6nC6Xu8rldle7PC6vi7hrXJy71uVz17n8roAr6Aq5eFfYFXHaGWcdudAVdcVc1F3virsbXAlX0pVypZ1zZVyCa+FaupaulXvctXZtXFv3hHvCPemedB1cB/eU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC6/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ154Shz3Bw3z81zaS7NLXBZa8Z0t8gtchkuwy1xS9wyt8ytcCvcKrfKrXFr3Dq3zm1wG9wmt8ltcVvcNrfN7XA73E630+3yeS9M6va6fW6f2+/2uwPuK5fpvnYH3TfukPvWHXbfuSPue3fUHXPH3Q/uhPvRnXSn3Gl3xp11P7lz7md33nmXEpkQmRh5OzIp8k5kcuTdrFkjqZFpkemR9yIzIjMjsyLvR2ZHPojMicyNzIvMj6RFPowsiCyMpEc+iiyKfBzJiCyOLIksjSyLLI94X3hL6Iv6Yj7qr/fF/Q2+hC/pS/nS3vkyPsHf6Mv6m3w5f7Mv72/xFfytvqKv5Cv7R31T38w39y18S/+Yb+Uf9619G9/WP+Hb+Sd9e9/BJ/qnfEf/tO/k/+Y7+2d8F/+s7+qf8918d9/DP+97+hd8L9/bJ/k+vq9/0ffz/f0A/5If6F/2g/wrfrB/1Sf7IX6of80P86/74f4NP8KP9KNi3vSjL10iw3if4if4if5tP8m/4yf7d/0UP9Wn+ml+un/Pz/Az/Sz/vp/tP/Bz/Fw/z8/3af5Dv8Av9On+I7/If+wz/OJLN5X9Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Q7/id/pP/W7/G6/x3/m9/rP/T7/hd/vv/QH/Fc+03/tD/pv/CH/rT/sv/NH/Pf+qD/mj/sf/An/oz/pT/nT/ow/63/y5/zP/jz/zxpjjDHG2J8y4XJT/Lrnwu38Pr8zRvzdzn0B4OqthTL/vj9rRbku/4V2fxHfLgIAT/Xu+tClrUaNpKSki/tmSAiKzc1ad18eHwOX48XQFp6ERGgDZX83//6i+1n6g/mjtwDk+rsxsXA5vjz/FwCY9DvzP/bEqAUVwtNx/4/55wKUKHZ5TE64HC+Gtr/cX2kD5f5J/gVa/UH+Ob9MAWj9d2Nyw+X4cv4J8Dg8DYm/2pMxxhhjjDHGGLugv6jc+dL156W/+Py96/N4dXlMDrgc/9H1OWOMMcYYY4wxxq68Z7r36PBYYmKbzv96o9of76P+3IQxv9fVBP7dxLjxbzW8B/i/hQOA/3BCgKyG/G+exeb/yrGSL750/rFr2RkfQI8O8D+glH9F4wq/MTHGGGOMMcb+cpcX/b/+vbpSCTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY9nQf/odb/AnvqXvSp8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9nwAAAP//2Xj1/A==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) 8m18.308587276s ago: executing program 5 (id=15596): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 8m17.769487635s ago: executing program 5 (id=15600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@delqdisc={0x34, 0x26, 0x1, 0x70bd27, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) 8m17.346695846s ago: executing program 37 (id=15600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@delqdisc={0x34, 0x26, 0x1, 0x70bd27, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) 6m17.42291492s ago: executing program 9 (id=16785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6m17.35369227s ago: executing program 9 (id=16786): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f00000000c0)=[{}], 0x1) 6m17.260787517s ago: executing program 9 (id=16787): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$eJzsljurE0EUx/8zk7vJFUWwtLHwggq6d3ejIsgF01hZCD6ChWAwa4iuBpIUJiAxn8DezsKPIWjrh5Boo02stF6Zx2YnIZt3iHDPrzj578zZ2fNYzgYEQRxbfnz/O4j/HP0sADiJA+TN+i+R+nDL/1vh95svd26X3z3++DU/cPennRnHiz8/B+BzSaA9unf87gPzex98pB+A45LRZTC4Rj8Bx0OjQzA8Mvq5pRvS33Wf1aPQfdqIqlJ40vjSBNIUJ+Mb9hmqVnzM2m91ui8qURQ2tyjm1W9Y4jhK4hPj+y50tJ5VPx8cvtFFMNwz+gbySW10Saz8z+bS/MXM/B0sleTNy8CSFZGhLPGIM6cyW+UAWK0xe5vrPd6aV3ab71CGEFAi6eiGThYZWwKbzUIOpjk+yO2gqmu9UdN7IWZ259MtfU+yEvf0tfI5ndHcuLdghA5WySudT/EHhgvW/NSj5L361MgWHrY63Sv1l5VaWAtfBUHxunfV864Fh2oQaTtj/u2r+XQiPX/qN0niMAevK+1209d2dB1oOzlxmYlv2Oe4eD5dcybOLSRiL13jypeNbRMEQfxPnANTM1nN5USYrwms/7p3dxgjQRAEQRAEQRAEQRDr8S8AAP//p+Y+dA==") r0 = open(&(0x7f0000000340)='./file3\x00', 0x0, 0x1e1) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x2) 6m17.13804958s ago: executing program 9 (id=16788): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) 6m17.069247995s ago: executing program 9 (id=16789): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 6m16.980911885s ago: executing program 9 (id=16790): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89f3, 0x0) 6m0.894997532s ago: executing program 38 (id=16790): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89f3, 0x0) 3m42.397592442s ago: executing program 6 (id=18685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'netpci0\x00', 0x1}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) 3m41.976393897s ago: executing program 6 (id=18693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x44) 3m41.867255221s ago: executing program 6 (id=18696): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfe, 0x85, 0x71, 0x8, 0xb48, 0x3007, 0x4f64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x23, 0x52, 0x26}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x0, 0x81, 0x1, 0x0}) 3m38.550500386s ago: executing program 6 (id=18746): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@init_itable}, {@sysvgroups}]}, 0x3, 0x475, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 3m38.215827265s ago: executing program 6 (id=18750): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0xff, 0x0, 0xfffff038}, {0x28, 0x0, 0x4d, 0xffeff024}, {0x6, 0x0, 0xff}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3m37.618756297s ago: executing program 6 (id=18754): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) setreuid(0x0, 0x0) 3m37.164490532s ago: executing program 39 (id=18754): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) setreuid(0x0, 0x0) 2.96777941s ago: executing program 4 (id=21212): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4) bind$can_raw(r0, &(0x7f0000000100), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0xa9a2, 0x4) 2.82878236s ago: executing program 4 (id=21216): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x4}, 0x80, 0x0}}], 0x1, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}) 2.71792796s ago: executing program 4 (id=21218): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000180)}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 2.584592766s ago: executing program 4 (id=21222): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nodecompose,decompose,nls=cp864,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x20, 0x6de, &(0x7f0000000840)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01", @ANYBLOB="be79acdb6164cce6fcf49c06363592de200a41bdcc182083ef2da301c1a0c02036fd5f03aa147146e983e0d7b4bd943a110216148de63646bda54d59d0ede69fd3800843cc2f03e9a7fb1fd3b8ec8108b2bc84153a8564391aaba71f24c153431856d62c2bf76a3598a34bc24a8014b2a3adc9824ad5510e3b1e898f4f15fca71794bbbd43983d245fa699eb52e2c3b8e0f7147dbb4caf3e5013464340d7952981a83f1192d07208af2e89fa140b0f822044554e7311d0ca"], 0x1, 0x11ef, &(0x7f0000002440)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) 2.101787153s ago: executing program 4 (id=21233): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580), 0x800, &(0x7f00000025c0)={[{@mode}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1.962265735s ago: executing program 1 (id=21236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x26c, 0x0, 0x100000800000000}]}) 1.764708763s ago: executing program 4 (id=21239): openat(0xffffffffffffff9c, 0x0, 0x28042, 0x194) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000340)={0x40, 0x11, 0x23, "69829da8729a479bdc4751dbcc0dbb92a40de041c1875013499afcd4e12b2e3166d844"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.626093465s ago: executing program 8 (id=21240): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.624756285s ago: executing program 1 (id=21241): r0 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 1.513566268s ago: executing program 8 (id=21243): r0 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0) 1.429229784s ago: executing program 1 (id=21244): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendfile(r0, r0, 0x0, 0x548) 1.341522554s ago: executing program 1 (id=21246): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r0, 0xaadec000) 1.287314836s ago: executing program 2 (id=21247): r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_clone3(&(0x7f0000000840)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) 1.287130573s ago: executing program 8 (id=21248): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x1b30}}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 1.223540392s ago: executing program 8 (id=21250): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.038713516s ago: executing program 3 (id=21252): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={r1}, &(0x7f0000000080)=0x8) 1.013066154s ago: executing program 1 (id=21253): syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES32], 0x1, 0x443a, &(0x7f00000088c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r0) 975.630875ms ago: executing program 3 (id=21254): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) 885.562126ms ago: executing program 3 (id=21255): syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, &(0x7f0000000080)=[{}], 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}) 839.365417ms ago: executing program 2 (id=21256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000180)={0x0, 0x3d6fc80, 0x380, 0x0}) 727.314847ms ago: executing program 3 (id=21257): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 689.446367ms ago: executing program 3 (id=21258): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300000, 0x62) 616.26169ms ago: executing program 3 (id=21259): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 427.343199ms ago: executing program 2 (id=21260): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 305.336065ms ago: executing program 2 (id=21261): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='J'], 0x4c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 221.150358ms ago: executing program 2 (id=21262): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0xfff, 0x80, 0x4, 0x6, 0x1, 0x7, 0x6}) 131.405125ms ago: executing program 8 (id=21263): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 129.729021ms ago: executing program 2 (id=21264): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f00000002c0)='./file1\x00', 0x800, &(0x7f0000000340)={[{@filestreams}, {@uqnoenforce}, {@inode64}]}, 0x3, 0xb914, &(0x7f00000316c0)="$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") r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc080583d, &(0x7f0000000080)={0x400000001, 0x0, 0x3}) 61.40965ms ago: executing program 1 (id=21265): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001a40)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000001900)=[{&(0x7f00000001c0)="93", 0x1}], 0x1}}], 0x2, 0x488c0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 0s ago: executing program 8 (id=21266): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)='y', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): Quotacheck needed: Please wait. [ 1752.460516][T23646] XFS (loop3): Quotacheck: Done. [ 1752.553924][ T5833] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1753.033752][T23693] loop3: detected capacity change from 0 to 512 [ 1753.063965][T23693] ext4: Bad value for 'stripe' [ 1753.100899][T23693] overlayfs: upper fs does not support tmpfile. [ 1753.175531][T23696] netlink: 'syz.4.20387': attribute type 16 has an invalid length. [ 1753.220925][T23696] netlink: 'syz.4.20387': attribute type 3 has an invalid length. [ 1753.236617][T23684] loop2: detected capacity change from 0 to 32768 [ 1753.252513][T23696] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.20387'. [ 1753.296151][T23684] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1753.354596][T23684] JBD2: Ignoring recovery information on journal [ 1753.465441][T23705] loop4: detected capacity change from 0 to 4096 [ 1753.473085][T23684] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1753.535779][T23705] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1753.570062][T23705] UDF-fs: Scanning with blocksize 512 failed [ 1753.661582][T23705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1753.766595][ T29] audit: type=1800 audit(1647.412:2934): pid=23705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20390" name="file1" dev="loop4" ino=1334 res=0 errno=0 [ 1753.965272][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-diskseq/4979.tmp-b7:4' failed: Read-only file system [ 1754.011811][T19463] ocfs2: Unmounting device (7,2) on (node local) [ 1754.052763][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-label/LinuxUDF.tmp-b7:4' failed: Read-only file system [ 1754.090899][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/4998.tmp-b7:2' failed: Read-only file system [ 1754.114412][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-uuid/1234567812345678.tmp-b7:4' failed: Read-only file system [ 1754.186268][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/4998.tmp-b7:2' failed: Read-only file system [ 1754.272394][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/4999.tmp-b7:4' failed: Read-only file system [ 1754.287882][ T6408] udevd[6408]: symlink '../../loop2' '/dev/disk/by-diskseq/5000.tmp-b7:2' failed: Read-only file system [ 1754.357150][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/4999.tmp-b7:4' failed: Read-only file system [ 1754.380117][T23718] program syz.8.20396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1754.410976][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/4999.tmp-b7:4' failed: Read-only file system [ 1754.473995][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/4999.tmp-b7:4' failed: Read-only file system [ 1754.542328][T23724] loop4: detected capacity change from 0 to 512 [ 1754.630600][T23724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1754.678114][ T29] audit: type=1800 audit(1648.263:2935): pid=23724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20398" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1754.787830][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1754.843987][T23699] loop3: detected capacity change from 0 to 40427 [ 1754.908826][T23699] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x1f52010) [ 1754.952964][T23699] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1754.987116][T23699] F2FS-fs (loop3): Image doesn't support compression [ 1754.993853][T23699] F2FS-fs (loop3): build fault injection type: 0x4 [ 1755.067218][T23699] F2FS-fs (loop3): invalid crc value [ 1755.294646][T23699] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1755.333012][T23699] F2FS-fs (loop3): Start checkpoint disabled! [ 1755.352488][T23699] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1755.393235][T23699] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 1755.400443][T23699] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1755.469063][T23730] loop2: detected capacity change from 0 to 32768 [ 1755.531654][T23730] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1755.595663][T23730] XFS (loop2): Ending clean mount [ 1755.632126][T17545] kworker/u8:11: attempt to access beyond end of device [ 1755.632126][T17545] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1755.648741][T17545] CPU: 0 UID: 0 PID: 17545 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 1755.648771][T17545] Tainted: [L]=SOFTLOCKUP [ 1755.648778][T17545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1755.648788][T17545] Workqueue: writeback wb_workfn (flush-7:3) [ 1755.648816][T17545] Call Trace: [ 1755.648823][T17545] [ 1755.648831][T17545] dump_stack_lvl+0xe8/0x150 [ 1755.648858][T17545] f2fs_handle_critical_error+0x37c/0x540 [ 1755.648894][T17545] f2fs_write_end_io+0xcdb/0xff0 [ 1755.648933][T17545] __submit_merged_bio+0x256/0x700 [ 1755.648968][T17545] __submit_merged_write_cond+0x3c3/0x4e0 [ 1755.649006][T17545] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1755.649059][T17545] f2fs_write_data_pages+0x2975/0x35e0 [ 1755.649115][T17545] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1755.649208][T17545] ? __lock_acquire+0x6b5/0x2cf0 [ 1755.649253][T17545] ? unwind_next_frame+0xa5/0x23c0 [ 1755.649309][T17545] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1755.649332][T17545] do_writepages+0x32e/0x550 [ 1755.649359][T17545] ? unwind_next_frame+0xa5/0x23c0 [ 1755.649392][T17545] ? reacquire_held_locks+0x104/0x190 [ 1755.649418][T17545] ? writeback_sb_inodes+0x43d/0x19a0 [ 1755.649450][T17545] __writeback_single_inode+0x133/0x11a0 [ 1755.649476][T17545] ? do_raw_spin_unlock+0xf5/0x210 [ 1755.649502][T17545] writeback_sb_inodes+0x944/0x19a0 [ 1755.649556][T17545] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1755.649578][T17545] ? do_raw_spin_lock+0x12b/0x2f0 [ 1755.649658][T17545] ? rcu_is_watching+0x15/0xb0 [ 1755.649721][T17545] wb_writeback+0x456/0xb70 [ 1755.649751][T17545] ? queue_io+0x271/0x4a0 [ 1755.649786][T17545] ? __pfx_wb_writeback+0x10/0x10 [ 1755.649808][T17545] ? do_raw_spin_lock+0x12b/0x2f0 [ 1755.649848][T17545] wb_workfn+0x414/0xf50 [ 1755.649873][T17545] ? look_up_lock_class+0x57/0x110 [ 1755.649920][T17545] ? __pfx_wb_workfn+0x10/0x10 [ 1755.649944][T17545] ? do_raw_spin_lock+0x12b/0x2f0 [ 1755.649968][T17545] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1755.650014][T17545] ? process_one_work+0x87c/0x1650 [ 1755.650037][T17545] process_one_work+0x949/0x1650 [ 1755.650107][T17545] ? __pfx_process_one_work+0x10/0x10 [ 1755.650131][T17545] ? do_raw_spin_lock+0x12b/0x2f0 [ 1755.650175][T17545] worker_thread+0xb46/0x1140 [ 1755.650237][T17545] kthread+0x388/0x470 [ 1755.650260][T17545] ? __pfx_worker_thread+0x10/0x10 [ 1755.650286][T17545] ? __pfx_kthread+0x10/0x10 [ 1755.650309][T17545] ret_from_fork+0x51e/0xb90 [ 1755.650342][T17545] ? __pfx_ret_from_fork+0x10/0x10 [ 1755.650368][T17545] ? __switch_to+0xc7d/0x1450 [ 1755.650398][T17545] ? __pfx_kthread+0x10/0x10 [ 1755.650423][T17545] ret_from_fork_asm+0x1a/0x30 [ 1755.650475][T17545] [ 1755.650484][T17545] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1756.130282][T19463] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1756.507648][T23743] loop4: detected capacity change from 0 to 32768 [ 1756.655766][T23743] UFO tlock:0xffffc900029aa048 [ 1756.697852][T23743] MetaData crosses page boundary!! [ 1756.703353][T23743] lblock = 6300000010, size = -820051968 [ 1756.747028][T23743] CPU: 0 UID: 0 PID: 23743 Comm: syz.4.20407 Tainted: G L syzkaller #0 PREEMPT(full) [ 1756.747063][T23743] Tainted: [L]=SOFTLOCKUP [ 1756.747072][T23743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1756.747085][T23743] Call Trace: [ 1756.747094][T23743] [ 1756.747104][T23743] dump_stack_lvl+0xe8/0x150 [ 1756.747138][T23743] __get_metapage+0x9ed/0xde0 [ 1756.747176][T23743] dtReadFirst+0xd5/0x930 [ 1756.747214][T23743] jfs_readdir+0x94b/0x3c10 [ 1756.747256][T23743] ? __lock_acquire+0x6b5/0x2cf0 [ 1756.747288][T23743] ? aa_file_perm+0x50e/0x15e0 [ 1756.747317][T23743] ? __lock_acquire+0x6b5/0x2cf0 [ 1756.747344][T23743] ? __pfx_jfs_readdir+0x10/0x10 [ 1756.747396][T23743] ? down_write+0x16d/0x200 [ 1756.747419][T23743] ? __pfx_down_write+0x10/0x10 [ 1756.747451][T23743] ? wrap_directory_iterator+0x52/0xe0 [ 1756.747475][T23743] ? __pfx_jfs_readdir+0x10/0x10 [ 1756.747499][T23743] wrap_directory_iterator+0x96/0xe0 [ 1756.747526][T23743] iterate_dir+0x399/0x570 [ 1756.747554][T23743] __se_sys_getdents64+0xf1/0x280 [ 1756.747585][T23743] ? __pfx___se_sys_getdents64+0x10/0x10 [ 1756.747608][T23743] ? __pfx_filldir64+0x10/0x10 [ 1756.747633][T23743] ? rcu_is_watching+0x15/0xb0 [ 1756.747674][T23743] do_syscall_64+0x14d/0xf80 [ 1756.747702][T23743] ? trace_irq_disable+0x3b/0x150 [ 1756.747736][T23743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.747757][T23743] ? clear_bhb_loop+0x40/0x90 [ 1756.747782][T23743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.747801][T23743] RIP: 0033:0x7f10f0b9bf79 [ 1756.747820][T23743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1756.747837][T23743] RSP: 002b:00007f10f1b2d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1756.747858][T23743] RAX: ffffffffffffffda RBX: 00007f10f0e15fa0 RCX: 00007f10f0b9bf79 [ 1756.747873][T23743] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004 [ 1756.747887][T23743] RBP: 00007f10f0c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.747899][T23743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1756.747911][T23743] R13: 00007f10f0e16038 R14: 00007f10f0e15fa0 R15: 00007ffe860381a8 [ 1756.747957][T23743] [ 1756.748054][T23743] bread failed! [ 1756.992118][T23743] jfs_readdir: unexpected rc = -5 from dtReadNext [ 1757.260846][T23782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20418'. [ 1757.304301][T23782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.363269][T23782] bridge_slave_1 (unregistering): left allmulticast mode [ 1757.378362][T19795] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff88807cf5e000 (15)(bridge_slave_1) start [ 1757.411195][T23782] bridge_slave_1 (unregistering): left promiscuous mode [ 1757.440037][T19795] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff88807cf5e000 (15)(bridge_slave_1) end [ 1757.475547][T23782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.564802][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff88807a330000 (15)(veth1_to_bridge) start [ 1757.610095][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff88807a330000 (8)(veth1_to_bridge) end [ 1757.900940][T23792] input: syz0 as /devices/virtual/input/input96 [ 1758.328387][T23808] can0: slcan on pty24. [ 1758.560721][T23810] loop3: detected capacity change from 0 to 4096 [ 1758.588131][T23810] EXT4-fs: Ignoring removed mblk_io_submit option [ 1758.625581][T23806] can0 (unregistered): slcan off pty24. [ 1758.686373][T23810] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1758.752035][T23810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1759.081323][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1759.364192][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/4993.tmp-b7:1' failed: Read-only file system [ 1759.491158][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5011.tmp-b7:3' failed: Read-only file system [ 1759.577661][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/4993.tmp-b7:1' failed: Read-only file system [ 1759.599351][ T6071] udevd[6071]: symlink '../../loop2' '/dev/disk/by-diskseq/5007.tmp-b7:2' failed: Read-only file system [ 1759.670168][T23861] pimreg: entered allmulticast mode [ 1759.683729][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5011.tmp-b7:3' failed: Read-only file system [ 1759.728976][T23860] pimreg: left allmulticast mode [ 1759.761554][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5009.tmp-b7:4' failed: Read-only file system [ 1759.954619][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/4993.tmp-b7:1' failed: Read-only file system [ 1759.974753][ T784] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1760.053728][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5009.tmp-b7:4' failed: Read-only file system [ 1760.104090][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/4993.tmp-b7:1' failed: Read-only file system [ 1760.158634][ T784] usb 3-1: Using ep0 maxpacket: 16 [ 1760.181841][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5009.tmp-b7:4' failed: Read-only file system [ 1760.194729][ T784] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.233461][ T784] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.254986][ T784] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1760.336293][ T784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1760.355774][ T784] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1760.366222][T23889] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20457'. [ 1760.387564][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.403482][T23889] sit0: Master is either lo or non-ether device [ 1760.410338][ T784] usb 3-1: config 0 descriptor?? [ 1760.475689][T23889] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20457'. [ 1760.537241][T23889] sit0: Master is either lo or non-ether device [ 1760.781004][T23906] can0: slcan on pty26. [ 1760.801179][T23905] loop4: detected capacity change from 0 to 1764 [ 1760.859966][ T784] hid (null): bogus close delimiter [ 1761.006091][T23901] can0 (unregistered): slcan off pty26. [ 1761.066137][ T784] usb 3-1: USB disconnect, device number 4 [ 1761.598510][T23932] loop4: detected capacity change from 0 to 512 [ 1761.635577][T23932] EXT4-fs: Ignoring removed nobh option [ 1762.035486][T23932] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1762.085044][T23932] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.20471: attempt to clear invalid blocks 1 len 1 [ 1762.108709][T23932] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1762.109858][T23932] EXT4-fs (loop4): Remounting filesystem read-only [ 1762.119182][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1762.119204][ C1] EXT4-fs (loop4): initial error at time 1655: ext4_clear_blocks:876: inode 13 [ 1762.119237][ C1] EXT4-fs (loop4): last error at time 1655: ext4_clear_blocks:876: inode 13 [ 1762.169211][T23938] loop2: detected capacity change from 0 to 2048 [ 1762.173714][T23932] EXT4-fs (loop4): 1 truncate cleaned up [ 1762.189560][T23932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1762.210135][T23941] program syz.3.20474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1762.261584][T23938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1762.353691][T19463] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.495480][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.537543][T23947] loop2: detected capacity change from 0 to 256 [ 1762.568444][T23945] loop3: detected capacity change from 0 to 1024 [ 1762.732715][T23945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1762.788829][T23945] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.20477: missing EA_INODE flag [ 1762.801130][T23945] EXT4-fs (loop3): Remounting filesystem read-only [ 1762.870990][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1763.186947][T23969] loop4: detected capacity change from 0 to 128 [ 1763.194443][T23969] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1763.224023][T23969] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1763.366772][T23975] program syz.2.20489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1763.432453][T23977] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1763.452805][T23977] FAT-fs (loop4): Filesystem has been set read-only [ 1763.472105][T23978] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1763.593143][T14844] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1763.654869][T23982] loop3: detected capacity change from 0 to 64 [ 1764.018005][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1764.223880][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1764.257846][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1764.267215][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.294896][ T9] usb 2-1: config 0 descriptor?? [ 1764.344337][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1764.446498][T23988] loop2: detected capacity change from 0 to 32768 [ 1764.471840][T23988] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1764.500561][T23988] JBD2: Ignoring recovery information on journal [ 1764.585512][T23988] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1764.740477][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/5026.tmp-b7:2' failed: Read-only file system [ 1764.771980][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system [ 1764.888262][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-diskseq/5023.tmp-b7:4' failed: Read-only file system [ 1764.921621][T19463] ocfs2: Unmounting device (7,2) on (node local) [ 1764.954779][T24009] mkiss: ax0: crc mode is auto. [ 1764.963213][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/5026.tmp-b7:2' failed: Read-only file system [ 1764.979709][T23995] loop3: detected capacity change from 0 to 40427 [ 1764.998851][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system [ 1765.031139][T23995] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1765.067102][T23995] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1765.117747][T23995] F2FS-fs (loop3): invalid crc value [ 1765.207342][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-diskseq/5027.tmp-b7:3' failed: Read-only file system [ 1765.264399][ T9] gspca_sonixj: reg_r err -71 [ 1765.269455][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1765.278620][ T6071] udevd[6071]: symlink '../../loop4' '/dev/disk/by-diskseq/5023.tmp-b7:4' failed: Read-only file system [ 1765.321144][T24020] loop4: detected capacity change from 0 to 1024 [ 1765.340971][ T9] usb 2-1: USB disconnect, device number 7 [ 1765.355464][ T784] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1765.369602][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-diskseq/5027.tmp-b7:3' failed: Read-only file system [ 1765.392557][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/5026.tmp-b7:2' failed: Read-only file system [ 1765.413339][T24020] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1765.448773][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-diskseq/5029.tmp-b7:4' failed: Read-only file system [ 1765.476630][T23995] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1765.505288][T24020] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.20506: lblock 2 mapped to illegal pblock 2 (length 1) [ 1765.522812][T24020] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1765.523392][T23995] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1765.546397][T24020] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1765.554572][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1765.554593][ C0] EXT4-fs (loop4): initial error at time 1658: ext4_map_blocks:776: inode 3: block 2 [ 1765.554630][ C0] EXT4-fs (loop4): last error at time 1658: ext4_map_blocks:776: inode 3: block 2 [ 1765.584376][T24020] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.20506: lblock 0 mapped to illegal pblock 48 (length 1) [ 1765.599266][T23995] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1765.607645][ T784] usb 3-1: Using ep0 maxpacket: 16 [ 1765.616306][ T784] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1765.638529][T24020] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1765.638823][T24020] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1765.662420][ T784] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1765.684827][ T784] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1765.719803][T24020] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.20506: Failed to acquire dquot type 0 [ 1765.731769][ T784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1765.738699][ T784] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1765.748109][T24020] loop4: lost filesystem error report for type 5 error -117 [ 1765.748249][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.769205][T24020] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1765.778949][T24020] loop4: lost filesystem error report for type 5 error -117 [ 1765.781861][T24020] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.20506: mark_inode_dirty error [ 1765.806053][T24020] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1765.806896][T24020] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1765.829785][ T784] usb 3-1: config 0 descriptor?? [ 1765.836249][T24020] EXT4-fs (loop4): 1 orphan inode deleted [ 1765.851219][T24020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1765.860071][ T1164] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 1765.932898][ T1164] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1765.953508][T24020] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm syz.4.20506: lblock 1 mapped to illegal pblock 1 (length 1) [ 1765.985442][ T1164] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:9: Failed to release dquot type 0 [ 1766.014372][T24020] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 1 [ 1766.024885][T24020] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 60928 [ 1766.035189][T24020] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.20506: Failed to acquire dquot type 0 [ 1766.065028][T24026] loop1: detected capacity change from 0 to 512 [ 1766.139082][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1766.178657][ T1164] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 1766.211512][ T1164] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1766.211848][ T1164] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1766.286615][T24013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.309631][T24013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.318535][ T1164] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:9: Failed to release dquot type 0 [ 1766.357942][ T1164] loop4: lost filesystem error report for type 5 error -117 [ 1766.358958][T14844] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1766.406082][T14844] loop4: lost filesystem error report for type 5 error -117 [ 1766.406393][T14844] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1766.456537][T14844] loop4: lost filesystem error report for type 5 error -117 [ 1766.456830][T14844] EXT4-fs error (device loop4): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 1766.518972][T14844] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1766.585645][ T784] usb 3-1: USB disconnect, device number 5 [ 1766.820575][T24045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20516'. [ 1766.855595][T24045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20516'. [ 1766.892594][T24045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20516'. [ 1767.438327][T24058] set_capacity_and_notify: 1 callbacks suppressed [ 1767.438347][T24058] loop2: detected capacity change from 0 to 256 [ 1767.462194][T24058] exfat: Deprecated parameter 'utf8' [ 1767.509057][T24058] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1767.770520][T24049] loop1: detected capacity change from 0 to 32768 [ 1767.801033][T24049] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.20518 (24049) [ 1767.882613][T24049] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1767.918472][T24049] BTRFS info (device loop1): using crc32c checksum algorithm [ 1768.056011][T24066] loop3: detected capacity change from 0 to 4096 [ 1768.136377][T24049] BTRFS info (device loop1): enabling ssd optimizations [ 1768.204249][T24049] BTRFS info (device loop1): turning on async discard [ 1768.269798][T24049] BTRFS info (device loop1): enabling free space tree [ 1768.582150][T24094] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1768.711829][T19795] ntfs3(loop3): ino=5, mi_enum_attr [ 1768.872528][T11008] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1768.890727][T24102] netlink: 356 bytes leftover after parsing attributes in process `syz.3.20533'. [ 1769.235651][ T9] kernel write not supported for file /audio (pid: 9 comm: kworker/0:0) [ 1770.072436][T24108] loop3: detected capacity change from 0 to 32768 [ 1770.173475][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5035.tmp-b7:4' failed: Read-only file system [ 1770.193466][T24108] JBD2: Ignoring recovery information on journal [ 1770.279457][T24108] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1770.320570][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5035.tmp-b7:4' failed: Read-only file system [ 1770.367046][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz.8.20547'. [ 1770.437640][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-diskseq/5042.tmp-b7:3' failed: Read-only file system [ 1770.484875][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system [ 1770.554087][ T5833] ocfs2: Unmounting device (7,3) on (node local) [ 1770.611912][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5035.tmp-b7:4' failed: Read-only file system [ 1770.639559][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-diskseq/5042.tmp-b7:3' failed: Read-only file system [ 1770.707767][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-diskseq/5042.tmp-b7:3' failed: Read-only file system [ 1770.767802][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5043.tmp-b7:3' failed: Read-only file system [ 1770.989571][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/5037.tmp-b7:2' failed: Read-only file system [ 1771.065481][T24145] loop2: detected capacity change from 0 to 64 [ 1771.093305][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/5044.tmp-b7:2' failed: Read-only file system [ 1771.161010][T24116] loop1: detected capacity change from 0 to 65536 [ 1771.279347][T24116] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1771.642612][T24116] XFS (loop1): Ending clean mount [ 1771.805711][T11008] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1771.955521][T24164] loop3: detected capacity change from 0 to 512 [ 1772.026263][T24164] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1772.198582][T24164] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1772.229016][T24164] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1772.271436][T24164] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 1773.133152][T24169] loop3: detected capacity change from 0 to 32768 [ 1773.398982][T24171] loop1: detected capacity change from 0 to 40427 [ 1773.424736][T24171] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 1773.458732][T24171] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1773.492584][T24171] F2FS-fs (loop1): build fault injection rate: 18446 [ 1773.507299][T24171] F2FS-fs (loop1): invalid crc value [ 1773.575554][T24187] loop3: detected capacity change from 0 to 64 [ 1773.633405][T24171] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1773.684277][T24171] F2FS-fs (loop1): Start checkpoint disabled! [ 1773.698185][T24171] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 1773.711759][T24171] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1773.726424][T24171] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1773.772092][T24171] syz.1.20556: attempt to access beyond end of device [ 1773.772092][T24171] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1773.849136][T24171] syz.1.20556: attempt to access beyond end of device [ 1773.849136][T24171] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 1774.009086][ T2968] kworker/u8:10: attempt to access beyond end of device [ 1774.009086][ T2968] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1774.025436][ T2968] CPU: 1 UID: 0 PID: 2968 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1774.025464][ T2968] Tainted: [L]=SOFTLOCKUP [ 1774.025471][ T2968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1774.025482][ T2968] Workqueue: writeback wb_workfn (flush-7:1) [ 1774.025509][ T2968] Call Trace: [ 1774.025517][ T2968] [ 1774.025525][ T2968] dump_stack_lvl+0xe8/0x150 [ 1774.025551][ T2968] f2fs_handle_critical_error+0x37c/0x540 [ 1774.025587][ T2968] f2fs_write_end_io+0xcdb/0xff0 [ 1774.025628][ T2968] __submit_merged_bio+0x256/0x700 [ 1774.025663][ T2968] __submit_merged_write_cond+0x3c3/0x4e0 [ 1774.025700][ T2968] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1774.025752][ T2968] f2fs_write_data_pages+0x2975/0x35e0 [ 1774.025810][ T2968] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1774.025846][ T2968] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1774.025904][ T2968] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1774.025975][ T2968] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1774.026003][ T2968] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1774.026025][ T2968] do_writepages+0x32e/0x550 [ 1774.026058][ T2968] ? reacquire_held_locks+0x104/0x190 [ 1774.026084][ T2968] ? writeback_sb_inodes+0x43d/0x19a0 [ 1774.026114][ T2968] __writeback_single_inode+0x133/0x11a0 [ 1774.026140][ T2968] ? do_raw_spin_unlock+0xf5/0x210 [ 1774.026164][ T2968] writeback_sb_inodes+0x944/0x19a0 [ 1774.026194][ T2968] ? ret_from_fork_asm+0x1a/0x30 [ 1774.026244][ T2968] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1774.026265][ T2968] ? do_raw_spin_lock+0x12b/0x2f0 [ 1774.026326][ T2968] ? rcu_is_watching+0x15/0xb0 [ 1774.026363][ T2968] wb_writeback+0x456/0xb70 [ 1774.026389][ T2968] ? queue_io+0x271/0x4a0 [ 1774.026421][ T2968] ? __pfx_wb_writeback+0x10/0x10 [ 1774.026442][ T2968] ? do_raw_spin_lock+0x12b/0x2f0 [ 1774.026478][ T2968] wb_workfn+0x414/0xf50 [ 1774.026500][ T2968] ? look_up_lock_class+0x57/0x110 [ 1774.026542][ T2968] ? __pfx_wb_workfn+0x10/0x10 [ 1774.026565][ T2968] ? do_raw_spin_lock+0x12b/0x2f0 [ 1774.026587][ T2968] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1774.026631][ T2968] ? process_one_work+0x87c/0x1650 [ 1774.026654][ T2968] process_one_work+0x949/0x1650 [ 1774.026701][ T2968] ? __pfx_process_one_work+0x10/0x10 [ 1774.026722][ T2968] ? do_raw_spin_lock+0x12b/0x2f0 [ 1774.026760][ T2968] worker_thread+0xb46/0x1140 [ 1774.026794][ T2968] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1774.026836][ T2968] kthread+0x388/0x470 [ 1774.026856][ T2968] ? __pfx_worker_thread+0x10/0x10 [ 1774.026877][ T2968] ? __pfx_kthread+0x10/0x10 [ 1774.026897][ T2968] ret_from_fork+0x51e/0xb90 [ 1774.026927][ T2968] ? __pfx_ret_from_fork+0x10/0x10 [ 1774.026949][ T2968] ? __switch_to+0xc7d/0x1450 [ 1774.026983][ T2968] ? __pfx_kthread+0x10/0x10 [ 1774.027005][ T2968] ret_from_fork_asm+0x1a/0x30 [ 1774.027050][ T2968] [ 1774.028556][ T2968] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1774.965285][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1775.014667][T24215] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1775.147073][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.181052][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.201533][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1775.232457][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.242035][T24209] loop1: detected capacity change from 0 to 40427 [ 1775.263126][ T9] usb 3-1: config 0 descriptor?? [ 1775.399146][T24218] loop4: detected capacity change from 0 to 8192 [ 1775.466238][T24218] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1775.530511][T24209] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1775.599315][T24209] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1775.636914][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/5056.tmp-b7:1' failed: Read-only file system [ 1775.648996][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-diskseq/5057.tmp-b7:4' failed: Read-only file system [ 1775.668641][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 1775.687039][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 1775.714794][ T9] hid_parser_main: 48 callbacks suppressed [ 1775.714817][ T9] hid-led 0003:0FC5:B080.003E: unknown main item tag 0x0 [ 1775.745542][ T29] audit: type=1800 audit(1667.963:2936): pid=24209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20572" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1775.842718][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5057.tmp-b7:4' failed: Read-only file system [ 1775.875764][T11008] syz-executor: attempt to access beyond end of device [ 1775.875764][T11008] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1775.914476][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 1775.938998][T11008] CPU: 0 UID: 0 PID: 11008 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1775.939028][T11008] Tainted: [L]=SOFTLOCKUP [ 1775.939036][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1775.939047][T11008] Call Trace: [ 1775.939055][T11008] [ 1775.939064][T11008] dump_stack_lvl+0xe8/0x150 [ 1775.939095][T11008] f2fs_handle_critical_error+0x37c/0x540 [ 1775.939138][T11008] f2fs_write_end_io+0xcdb/0xff0 [ 1775.939178][T11008] __submit_merged_bio+0x256/0x700 [ 1775.939225][T11008] __submit_merged_write_cond+0x3c3/0x4e0 [ 1775.939259][T11008] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1775.939308][T11008] f2fs_write_data_pages+0x2975/0x35e0 [ 1775.939360][T11008] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1775.939393][T11008] ? css_rstat_updated+0x23a/0x530 [ 1775.939434][T11008] ? rcu_is_watching+0x15/0xb0 [ 1775.939460][T11008] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 1775.939487][T11008] ? __lock_acquire+0x6b5/0x2cf0 [ 1775.939524][T11008] ? __lock_acquire+0x6b5/0x2cf0 [ 1775.939551][T11008] ? do_raw_spin_lock+0x12b/0x2f0 [ 1775.939585][T11008] ? do_raw_spin_unlock+0xf5/0x210 [ 1775.939622][T11008] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1775.939643][T11008] do_writepages+0x32e/0x550 [ 1775.939679][T11008] ? do_raw_spin_unlock+0xf5/0x210 [ 1775.939703][T11008] filemap_fdatawrite+0x1e9/0x2f0 [ 1775.939733][T11008] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1775.939804][T11008] ? do_raw_spin_unlock+0xf5/0x210 [ 1775.939829][T11008] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1775.939865][T11008] f2fs_write_checkpoint+0x9cf/0x2680 [ 1775.939921][T11008] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1775.939995][T11008] kill_f2fs_super+0x314/0x720 [ 1775.940043][T11008] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1775.940079][T11008] ? lockdep_hardirqs_on+0x7a/0x110 [ 1775.940132][T11008] deactivate_locked_super+0xbc/0x130 [ 1775.940166][T11008] cleanup_mnt+0x437/0x4d0 [ 1775.940186][T11008] ? _raw_spin_unlock_irq+0x23/0x50 [ 1775.940218][T11008] task_work_run+0x1d9/0x270 [ 1775.940244][T11008] ? __pfx_task_work_run+0x10/0x10 [ 1775.940278][T11008] exit_to_user_mode_loop+0xed/0x480 [ 1775.940301][T11008] ? rcu_is_watching+0x15/0xb0 [ 1775.940334][T11008] do_syscall_64+0x32d/0xf80 [ 1775.940363][T11008] ? trace_irq_disable+0x3b/0x150 [ 1775.940392][T11008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.940412][T11008] ? clear_bhb_loop+0x40/0x90 [ 1775.940438][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.940457][T11008] RIP: 0033:0x7f723b39d1d7 [ 1775.940478][T11008] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1775.940498][T11008] RSP: 002b:00007ffc8ef64168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1775.940520][T11008] RAX: 0000000000000000 RBX: 00007f723b431c3b RCX: 00007f723b39d1d7 [ 1775.940534][T11008] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8ef64220 [ 1775.940546][T11008] RBP: 00007ffc8ef64220 R08: 00007ffc8ef65220 R09: 00000000ffffffff [ 1775.940560][T11008] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc8ef652b0 [ 1775.940573][T11008] R13: 00007f723b431c3b R14: 00000000001973aa R15: 00007ffc8ef652f0 [ 1775.940607][T11008] [ 1775.942091][T11008] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1776.291031][ T9] hid-led 0003:0FC5:B080.003E: probe with driver hid-led failed with error -71 [ 1776.310736][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5057.tmp-b7:4' failed: Read-only file system [ 1776.333551][ T9] usb 3-1: USB disconnect, device number 6 [ 1776.369475][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5057.tmp-b7:4' failed: Read-only file system [ 1776.442336][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-diskseq/5054.tmp-b7:3' failed: Read-only file system [ 1776.506348][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5058.tmp-b7:4' failed: Read-only file system [ 1776.922523][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1776.938407][T24237] loop3: detected capacity change from 0 to 32768 [ 1776.968289][T24237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.20585 (24237) [ 1777.029807][T24237] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1777.062053][T24237] BTRFS info (device loop3): using sha256 checksum algorithm [ 1777.223831][T24237] BTRFS info (device loop3): rebuilding free space tree [ 1777.252449][T24237] BTRFS info (device loop3): turning on async discard [ 1777.264243][T24264] loop1: detected capacity change from 0 to 128 [ 1777.271773][T24264] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1777.334794][T24237] BTRFS info (device loop3): enabling free space tree [ 1777.355217][T24237] BTRFS info (device loop3): force clearing of disk cache [ 1777.386012][T24264] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1777.591126][T17541] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1777.619195][T19795] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 1777.990986][ T5833] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1778.158363][T24278] loop2: detected capacity change from 0 to 1024 [ 1778.260567][T24278] hfsplus: found bad thread record in catalog [ 1778.281173][T24278] hfsplus: found bad thread record in catalog [ 1778.323959][T24278] hfsplus: found bad thread record in catalog [ 1778.330091][T24278] hfsplus: catalog searching failed [ 1778.338141][T24240] loop4: detected capacity change from 0 to 32768 [ 1778.492632][T17545] hfsplus: found bad thread record in catalog [ 1778.557371][T17545] hfsplus: found bad thread record in catalog [ 1778.629499][ T5825] Bluetooth: hci1: command 0x0405 tx timeout [ 1778.666486][T24240] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1778.705653][T24275] loop1: detected capacity change from 0 to 32768 [ 1778.808501][T24275] JBD2: Ignoring recovery information on journal [ 1778.937118][T24275] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1779.031976][T24240] XFS (loop4): Ending clean mount [ 1779.074806][T24240] XFS (loop4): Quotacheck needed: Please wait. [ 1779.125633][T21832] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1779.240335][T24240] XFS (loop4): Quotacheck: Done. [ 1779.328471][T21832] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1779.337162][T21832] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1779.358639][T21832] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1779.376944][T21832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1779.415231][T21832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1779.432605][T11008] ocfs2: Unmounting device (7,1) on (node local) [ 1779.442960][T21832] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1779.452733][T21832] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1779.484597][T21832] usb 3-1: Product: syz [ 1779.490224][T21832] usb 3-1: Manufacturer: syz [ 1779.525859][T21832] cdc_wdm 3-1:1.0: skipping garbage [ 1779.538793][T21832] cdc_wdm 3-1:1.0: skipping garbage [ 1779.586240][T21832] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1779.592222][T21832] cdc_wdm 3-1:1.0: Unknown control protocol [ 1779.664021][T24315] loop3: detected capacity change from 0 to 8 [ 1779.751462][T21832] usb 3-1: USB disconnect, device number 7 [ 1779.904709][T14844] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1780.427173][T24334] loop2: detected capacity change from 0 to 1024 [ 1780.466373][T24334] hfsplus: b-tree write err: -5, ino 2 [ 1780.476913][T24334] hfsplus: bad catalog entry type [ 1780.545358][T17550] hfsplus: b-tree write err: -5, ino 25 [ 1780.570988][T17550] hfsplus: b-tree write err: -5, ino 4 [ 1780.590465][T17550] hfsplus: b-tree write err: -5, ino 2 [ 1780.807925][T24343] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1780.815493][T24343] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1780.872290][T24345] loop4: detected capacity change from 0 to 512 [ 1780.979926][T24351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1780.990590][T24345] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.20620: corrupted in-inode xattr: invalid ea_ino [ 1781.031871][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5074.tmp-b7:4' failed: Read-only file system [ 1781.081543][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1781.130131][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-diskseq/5070.tmp-b7:3' failed: Read-only file system [ 1781.142902][T24345] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1781.144207][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1781.159885][ C0] EXT4-fs (loop4): initial error at time 1673: ext4_iget_extra_inode:5025: inode 15 [ 1781.169349][ C0] EXT4-fs (loop4): last error at time 1673: ext4_iget_extra_inode:5025: inode 15 [ 1781.184113][T24345] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.20620: couldn't read orphan inode 15 (err -117) [ 1781.201451][T24345] loop4: lost filesystem error report for type 5 error -117 [ 1781.203565][T24345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1781.232734][T24345] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6266: inode #18: comm syz.4.20620: bad extra_isize 6 (inode size 256) [ 1781.318446][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1781.366778][T24348] loop2: detected capacity change from 0 to 32768 [ 1781.382639][T24348] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.20623 (24348) [ 1781.435652][ T6408] udevd[6408]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1781.451486][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-diskseq/5074.tmp-b7:4' failed: Read-only file system [ 1781.465234][T24348] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1781.482121][T24348] BTRFS info (device loop2): using sha256 checksum algorithm [ 1781.522747][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-diskseq/5074.tmp-b7:4' failed: Read-only file system [ 1781.548030][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/5075.tmp-b7:2' failed: Read-only file system [ 1781.578807][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:2' failed: Read-only file system [ 1781.596376][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-diskseq/5076.tmp-b7:4' failed: Read-only file system [ 1781.665712][T24348] BTRFS info (device loop2): rebuilding free space tree [ 1781.723131][T24348] BTRFS info (device loop2): turning on async discard [ 1781.729968][T24348] BTRFS info (device loop2): enabling free space tree [ 1781.753635][T24348] BTRFS info (device loop2): force clearing of disk cache [ 1782.018899][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5068.tmp-b7:1' failed: Read-only file system [ 1782.091970][T24355] loop3: detected capacity change from 0 to 32768 [ 1782.198668][T17550] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 1782.422875][T19463] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1782.577572][T24370] loop4: detected capacity change from 0 to 131072 [ 1782.587134][T24370] F2FS-fs (loop4): invalid crc value [ 1782.689469][T24370] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1782.713346][T24370] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1783.024919][T24388] tap0: tun_chr_ioctl cmd 2147767507 [ 1783.114217][T17541] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff888093b34000 (7)(tap0) start [ 1783.147454][T17541] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff888093b34000 (7)(tap0) end [ 1783.182834][T24392] loop3: detected capacity change from 0 to 1024 [ 1783.378956][T24392] hfsplus: b-tree write err: -5, ino 2 [ 1783.439279][T24392] hfsplus: bad catalog entry type [ 1783.612564][T17541] hfsplus: b-tree write err: -5, ino 25 [ 1783.632064][T17541] hfsplus: b-tree write err: -5, ino 4 [ 1783.642792][T17541] hfsplus: b-tree write err: -5, ino 2 [ 1783.655808][T17541] hfsplus: b-tree write err: -5, ino 26 [ 1783.995708][T24408] loop1: detected capacity change from 0 to 1024 [ 1784.011693][T24408] EXT4-fs: Ignoring removed oldalloc option [ 1784.029482][T24408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1784.089245][T24408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1784.212106][T24408] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.20640: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1784.229112][T21832] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1784.316475][T11008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1784.406652][T21832] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1784.440269][T21832] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x84 has invalid maxpacket 108, setting to 64 [ 1784.466916][T21832] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1784.476640][T21832] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1784.486138][T21832] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1784.495354][T21832] usb 3-1: Product: syz [ 1784.499724][T21832] usb 3-1: Manufacturer: syz [ 1784.505611][T21832] usb 3-1: SerialNumber: syz [ 1784.520749][T21832] usb 3-1: config 0 descriptor?? [ 1784.535552][T21832] usb 3-1: selecting invalid altsetting 0 [ 1784.772533][T21832] usb 3-1: USB disconnect, device number 8 [ 1784.932702][T24414] loop3: detected capacity change from 0 to 32768 [ 1784.971638][T24414] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1785.072223][T24414] XFS (loop3): Ending clean mount [ 1785.096189][T24414] XFS (loop3): Quotacheck needed: Please wait. [ 1785.169707][T24418] loop1: detected capacity change from 0 to 32768 [ 1785.203210][T24414] XFS (loop3): Quotacheck: Done. [ 1785.254099][T24418] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1785.316599][ T5833] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1785.349777][T24418] XFS (loop1): Ending clean mount [ 1785.518546][T11008] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1786.359856][T24452] loop3: detected capacity change from 0 to 32768 [ 1786.366877][T24465] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1786.382859][T24465] dvmrp1: linktype set to 773 [ 1786.413066][T24452] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1786.441625][ T6408] udevd[6408]: symlink '../../loop2' '/dev/disk/by-diskseq/5083.tmp-b7:2' failed: Read-only file system [ 1786.514707][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5089.tmp-b7:1' failed: Read-only file system [ 1786.533583][T24452] XFS (loop3): Ending clean mount [ 1786.550854][T24475] vlan3: entered allmulticast mode [ 1786.561665][T24477] loop1: detected capacity change from 0 to 128 [ 1786.569358][T24452] XFS (loop3): Quotacheck needed: Please wait. [ 1786.583446][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5090.tmp-b7:3' failed: Read-only file system [ 1786.595466][T24475] vlan0: entered allmulticast mode [ 1786.631450][T24477] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1786.635549][T24475] veth0_vlan: entered allmulticast mode [ 1786.649315][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5091.tmp-b7:1' failed: Read-only file system [ 1786.671053][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:3' failed: Read-only file system [ 1786.691584][T16481] udevd[16481]: symlink '../../loop4' '/dev/disk/by-diskseq/5080.tmp-b7:4' failed: Read-only file system [ 1786.742449][T24452] XFS (loop3): Quotacheck: Done. [ 1786.756355][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5091.tmp-b7:1' failed: Read-only file system [ 1786.783290][T17550] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff888055524000 (13)(vlan3) start [ 1786.845828][T17550] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff888055524000 (3)(vlan3) end [ 1786.868726][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5091.tmp-b7:1' failed: Read-only file system [ 1786.882924][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5090.tmp-b7:3' failed: Read-only file system [ 1786.905018][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:3' failed: Read-only file system [ 1786.982122][ T5833] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1787.063884][T24482] tap0: tun_chr_ioctl cmd 1074025677 [ 1787.081527][T24482] tap0: linktype set to 804 [ 1787.517157][T24498] bridge0: entered promiscuous mode [ 1787.525651][T24498] bridge0: port 2(macvtap1) entered blocking state [ 1787.552758][T24498] bridge0: port 2(macvtap1) entered disabled state [ 1787.561788][T24498] macvtap1: entered allmulticast mode [ 1787.567268][T24498] bridge0: entered allmulticast mode [ 1787.588939][T24498] macvtap1: left allmulticast mode [ 1787.605890][T24498] bridge0: left allmulticast mode [ 1787.613211][T24498] bridge0: left promiscuous mode [ 1787.651367][T17541] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff88805241c000 (19)(macvtap1) start [ 1787.678971][T17541] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff88805241c000 (14)(macvtap1) end [ 1788.181827][T24511] veth1_to_bond: entered allmulticast mode [ 1788.188490][T24510] veth1_to_bond: left allmulticast mode [ 1788.945504][T24543] input: syz0 as /devices/virtual/input/input97 [ 1789.017753][T24545] loop1: detected capacity change from 0 to 128 [ 1789.056185][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.081954][T24545] FAT-fs (loop1): Filesystem has been set read-only [ 1789.098292][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.124628][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.143830][T24532] loop3: detected capacity change from 0 to 32768 [ 1789.151706][T24546] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.196897][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.243822][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.262910][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.282546][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.302620][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.311407][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.342967][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.362998][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.389381][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.409142][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.444645][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.464648][T24551] loop2: detected capacity change from 0 to 512 [ 1789.475409][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.496053][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.526197][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.546572][T24551] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.20696: corrupted in-inode xattr: invalid ea_ino [ 1789.580404][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.599636][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.613401][T24551] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1789.613995][T24551] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.20696: couldn't read orphan inode 15 (err -117) [ 1789.623223][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1789.623241][ C0] EXT4-fs (loop2): initial error at time 1680: ext4_iget_extra_inode:5025: inode 15 [ 1789.623267][ C0] EXT4-fs (loop2): last error at time 1680: ext4_iget_extra_inode:5025: inode 15 [ 1789.624477][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.670713][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.679439][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.688524][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.695504][T24551] loop2: lost filesystem error report for type 5 error -117 [ 1789.697076][T24545] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1789.713501][ T29] audit: type=1800 audit(1681.030:2937): pid=24545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.20692" name="file1" dev="loop1" ino=1049231 res=0 errno=0 [ 1789.737821][T24551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1789.898934][T19463] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1790.046007][T24567] netlink: 108 bytes leftover after parsing attributes in process `syz.1.20700'. [ 1790.078619][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20700'. [ 1790.295971][ T797] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1790.329723][T24576] sp0: Synchronizing with TNC [ 1790.409675][T24573] [U] `` [ 1790.467719][ T797] usb 3-1: Using ep0 maxpacket: 16 [ 1790.525556][ T797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.539342][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1790.592849][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1790.613582][ T797] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1790.636498][ T797] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1790.686180][ T797] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1790.712325][ T797] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1790.720357][ T797] usb 3-1: Manufacturer: syz [ 1790.761576][ T797] usb 3-1: config 0 descriptor?? [ 1791.151293][ T797] rc_core: IR keymap rc-hauppauge not found [ 1791.157358][ T797] Registered IR keymap rc-empty [ 1791.184084][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.216669][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.242570][T24566] loop2: detected capacity change from 0 to 512 [ 1791.251322][ T797] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1791.273490][T24566] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1791.308965][ T797] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input98 [ 1791.317347][T24566] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #12: comm syz.2.20701: corrupted in-inode xattr: invalid ea_ino [ 1791.356040][T24566] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1791.356511][T24566] EXT4-fs (loop2): Remounting filesystem read-only [ 1791.365752][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1791.365772][ C1] EXT4-fs (loop2): initial error at time 1682: ext4_iget_extra_inode:5025: inode 12 [ 1791.365802][ C1] EXT4-fs (loop2): last error at time 1682: ext4_iget_extra_inode:5025: inode 12 [ 1791.440639][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.471519][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.483906][T24566] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1791.520717][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.590423][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.610848][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.630458][T24601] loop1: detected capacity change from 0 to 32768 [ 1791.643267][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.652671][T24601] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.20714 (24601) [ 1791.675639][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.698055][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.715626][T24601] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1791.727272][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.735922][T24601] BTRFS info (device loop1): using sha256 checksum algorithm [ 1791.761127][ T797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1791.784354][ T797] mceusb 3-1:0.0: Registered   with mce emulator interface version 1 [ 1791.795663][ T797] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1791.896539][ T9] usb 3-1: USB disconnect, device number 9 [ 1791.936606][T24640] netlink: 165 bytes leftover after parsing attributes in process `syz.8.20722'. [ 1791.968907][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/5101.tmp-b7:1' failed: Read-only file system [ 1791.981695][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:1' failed: Read-only file system [ 1792.034347][ T6071] udevd[6071]: symlink '../../loop3' '/dev/disk/by-diskseq/5097.tmp-b7:3' failed: Read-only file system [ 1792.072878][T24601] BTRFS info (device loop1): rebuilding free space tree [ 1792.159909][T24601] BTRFS info (device loop1): turning on async discard [ 1792.180351][T24601] BTRFS info (device loop1): enabling free space tree [ 1792.187182][T24601] BTRFS info (device loop1): force clearing of disk cache [ 1792.196808][ T6071] udevd[6071]: symlink '../../loop3' '/dev/disk/by-diskseq/5097.tmp-b7:3' failed: Read-only file system [ 1792.372956][ T1164] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 1792.457012][T24649] loop3: detected capacity change from 0 to 4096 [ 1792.480811][T24649] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1792.540709][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/5101.tmp-b7:1' failed: Read-only file system [ 1792.554476][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:1' failed: Read-only file system [ 1792.572247][T19463] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1792.617431][T24649] ntfs3(loop3): ino=19, mi_enum_attr [ 1792.631520][T11008] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1792.676097][ T6071] udevd[6071]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1792.693682][T24649] ntfs3(loop3): failed to convert "c46c" to cp1250 [ 1792.744849][T24649] ntfs3(loop3): ino=20, mi_enum_attr [ 1792.773127][ T6071] udevd[6071]: symlink '../../loop2' '/dev/disk/by-diskseq/5100.tmp-b7:2' failed: Read-only file system [ 1792.791560][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-diskseq/5102.tmp-b7:3' failed: Read-only file system [ 1792.810928][ T6071] udevd[6071]: symlink '../../loop2' '/dev/disk/by-diskseq/5100.tmp-b7:2' failed: Read-only file system [ 1793.015943][T24661] netlink: 564 bytes leftover after parsing attributes in process `syz.1.20729'. [ 1793.037815][T24661] netlink: 564 bytes leftover after parsing attributes in process `syz.1.20729'. [ 1793.708201][ T784] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1793.889685][ T784] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1793.930318][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.952214][ T784] usb 3-1: config 0 descriptor?? [ 1793.974477][ T784] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1794.519085][T24707] infiniband: Added to hash: ib_dev=ffff8880636e8000 (0)() ndev=ffff88807d1de000 (32)(lo) [ 1794.547908][T24707] siw: device registration error -23 [ 1794.569262][T24707] infiniband: Removed from hash: ib_dev=ffff8880636e8000 (0)() ndev=ffff88807d1de000 (32)(lo) [ 1794.818291][ T797] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1794.828719][T24723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20758'. [ 1794.853192][ T784] gspca_cpia1: usb_control_msg 02, error -71 [ 1794.859733][ T784] gspca_cpia1: usb_control_msg 05, error -71 [ 1794.882894][ T784] gspca_cpia1: usb_control_msg 04, error -71 [ 1794.889012][ T784] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 1794.923045][ T784] usb 3-1: USB disconnect, device number 10 [ 1795.000489][ T797] usb 2-1: Using ep0 maxpacket: 8 [ 1795.010705][ T797] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.023825][ T797] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1795.032743][ T797] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1795.042112][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.062595][ T797] usb 2-1: config 0 descriptor?? [ 1795.228067][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20764'. [ 1795.239761][T24736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20764'. [ 1795.523802][ T797] smartjoyplus 0003:6666:8804.003F: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.1-1/input0 [ 1795.566210][ T797] smartjoyplus 0003:6666:8804.003F: Force feedback for SmartJoy PLUS PS2/USB adapter [ 1795.751258][ T797] usb 2-1: USB disconnect, device number 8 [ 1796.014305][T24742] loop4: detected capacity change from 0 to 32768 [ 1796.361205][T24771] loop3: detected capacity change from 0 to 512 [ 1796.385717][T24771] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1796.399899][T24771] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1796.496220][T24771] EXT4-fs (loop3): 1 truncate cleaned up [ 1796.503543][T24771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1796.768360][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1796.893605][T24786] overlay: Unknown parameter '32 [ 1796.893605][T24786] time [ 1796.893605][T24786] string [ 1796.893605][T24786] statistic [ 1796.893605][T24786] state [ 1796.893605][T24786] realm [ 1796.893605][T24786] rateest [ 1796.893605][T24786] quota [ 1796.893605][T24786] pkttype [ 1796.893605][T24786] physdev [ 1796.893605][T24786] cgroup [ 1796.893605][T24786] cgroup [ 1796.893605][T24786] cgroup [ 1796.893605][T24786] owner [ 1796.893605][T24786] nfacct [ 1796.893605][T24786] nfacct [ 1796.893605][T24786] mac [ 1796.893605][T24786] limit [ 1796.893605][T24786] ipvs [ 1796.893605][T24786] helper [ 1796.893605][T24786] devgroup [ 1796.893605][T24786] cpu [ 1796.893605][T24786] conntrack [ 1796.893605][T24786] conntrack [ 1796.893605][T24786] conntrack [ 1796.893605][T24786] connlabel [ 1796.893605][T24786] connbytes [ 1796.893605][T24786] comment [ 1796.893605][T24786] bpf [ 1796.893605][T24786] bpf [ 1796.893605][T24786] connmark [ 1796.893605][T24786] mark [ 1796.893605][T24786] rpfilter [ 1796.893605][T24786] ah [ 1796.893605][T24786] tcpmss [ 1796.893605][T24786] socket [ 1796.893605][T24786] socket [ 1796.893605][T24786] socket [ 1796.893605][T24786] socket [ 1796.893605][T24786] sctp [ 1796.893605][T24786] recent [ 1796.893605][T24786] recent [ 1796.893605][T24786] policy [ 1796.893605][T24786] osf [ 1796.893605][T24786] multiport [ 1796.893605][T24786] length [ 1796.893605][T24786] l2tp [ 1796.893605][T24786] iprange [ 1796.893605][T24786] ipcomp [ 1796.893605][T24786] ttl [ 1796.893605][T24786] hashlimit [ 1796.893605][T24786] hashlimit [ 1796.893605][T24786] hashlimit [ 1796.893605][T24786] esp [ 1796.893605][T24786] ecn [ 1796.893605][T24786] tos [ 1796.893605][T24786] dscp [ 1796.893605][T24786] dccp [ 1796.893605][T24786] connlimit [ 1796.893605][T24786] cluster [ 1796.893605][T24786] addrtype [ 1796.893605][T24786] addrtype [ 1796.893605][T24786] set [ 1796.893605][T24786] set [ 1796.893605][T24786] set [ 1796.893605][T24786] set [ 1796.893605][T24786] set [ 1796.893605][T24786] icmp [ 1797.324104][T24798] loop1: detected capacity change from 0 to 512 [ 1797.378765][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/5103.tmp-b7:2' failed: Read-only file system [ 1797.418772][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5110.tmp-b7:1' failed: Read-only file system [ 1797.435139][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 1797.439728][T24798] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.20790: inode has both inline data and extents flags [ 1797.475055][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/5110.tmp-b7:1' failed: Read-only file system [ 1797.487428][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 1797.519894][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5108.tmp-b7:4' failed: Read-only file system [ 1797.548123][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-diskseq/5109.tmp-b7:3' failed: Read-only file system [ 1797.590496][T24798] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1797.591015][T24798] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.20790: couldn't read orphan inode 15 (err -117) [ 1797.600239][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1797.600259][ C0] EXT4-fs (loop1): initial error at time 1688: ext4_orphan_get:1391: inode 15 [ 1797.600290][ C0] EXT4-fs (loop1): last error at time 1688: ext4_orphan_get:1391: inode 15 [ 1797.658364][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5109.tmp-b7:3' failed: Read-only file system [ 1797.681507][T24805] loop4: detected capacity change from 0 to 256 [ 1797.696540][T24798] loop1: lost filesystem error report for type 5 error -117 [ 1797.708935][T24798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1797.779890][ T6408] udevd[6408]: symlink '../../loop2' '/dev/disk/by-diskseq/5103.tmp-b7:2' failed: Read-only file system [ 1797.859674][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5111.tmp-b7:4' failed: Read-only file system [ 1797.903315][T24798] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1797.921644][T24813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20795'. [ 1798.006328][T11008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1798.101345][T24819] loop3: detected capacity change from 0 to 512 [ 1798.119947][T24819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1798.147866][T24819] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.20802: bad orphan inode 131083 [ 1798.158620][T24819] loop3: lost filesystem error report for type 5 error -117 [ 1798.160607][T24819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1798.362335][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1798.392625][T24825] loop1: detected capacity change from 0 to 32768 [ 1798.428032][T24825] JBD2: Ignoring recovery information on journal [ 1798.475688][T24825] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1798.530098][T24825] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 1798.546151][T24825] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1798.556185][T24825] OCFS2: File system is now read-only. [ 1798.561974][T24825] (syz.1.20800,24825,1):ocfs2_search_chain:1923 ERROR: status = -30 [ 1798.571167][T24825] (syz.1.20800,24825,1):ocfs2_search_chain:2011 ERROR: status = -30 [ 1798.579188][T24825] (syz.1.20800,24825,1):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 1798.588146][T24825] (syz.1.20800,24825,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 1798.596830][T24825] (syz.1.20800,24825,1):ocfs2_claim_new_inode:2392 ERROR: status = -30 [ 1798.605381][T24825] (syz.1.20800,24825,1):ocfs2_claim_new_inode:2407 ERROR: status = -30 [ 1798.613680][T24825] (syz.1.20800,24825,1):ocfs2_mknod_locked:642 ERROR: status = -30 [ 1798.621637][T24825] (syz.1.20800,24825,1):ocfs2_symlink:1957 ERROR: status = -30 [ 1798.630339][T24825] (syz.1.20800,24825,1):ocfs2_symlink:2081 ERROR: status = -30 [ 1798.778676][T11008] ocfs2: Unmounting device (7,1) on (node local) [ 1799.135518][T24849] loop3: detected capacity change from 0 to 164 [ 1799.167870][T24849] rock: directory entry would overflow storage [ 1799.192776][T24849] rock: sig=0x66, size=4, remaining=3 [ 1799.220130][T24849] rock: directory entry would overflow storage [ 1799.230459][T24851] loop2: detected capacity change from 0 to 164 [ 1799.254502][T24849] rock: sig=0x66, size=4, remaining=3 [ 1799.284031][T24851] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1799.628915][T24862] loop2: detected capacity change from 0 to 1024 [ 1799.843402][T17550] hfsplus: b-tree write err: -5, ino 3 [ 1800.195279][ T784] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1800.210193][T24874] input: syz1 as /devices/virtual/input/input99 [ 1800.218290][T24866] loop1: detected capacity change from 0 to 32768 [ 1800.236426][T24866] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.20819 (24866) [ 1800.292288][T24866] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1800.324089][T24866] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 1800.368510][ T784] usb 3-1: config 4 has an invalid interface number: 28 but max is 0 [ 1800.380678][ T784] usb 3-1: config 4 has no interface number 0 [ 1800.389752][ T784] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 1800.438881][ T784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.470351][ T784] usb 3-1: Product: syz [ 1800.479821][ T784] usb 3-1: Manufacturer: syz [ 1800.495884][ T784] usb 3-1: SerialNumber: syz [ 1800.547341][T24866] BTRFS info (device loop1): enabling ssd optimizations [ 1800.565416][ T784] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.28/input/input100 [ 1800.570031][T24866] BTRFS info (device loop1): turning on flush-on-commit [ 1800.583529][T24866] BTRFS info (device loop1): turning on async discard [ 1800.590338][T24866] BTRFS info (device loop1): enabling free space tree [ 1800.598192][T24866] BTRFS info (device loop1): force zlib compression, level 3 [ 1800.606254][T24866] BTRFS info (device loop1): max_inline set to 4096 [ 1800.754542][ T784] bcm5974 3-1:4.28: could not read from device [ 1800.784533][T24866] BTRFS info (device loop1): balance: start -d -m [ 1800.806687][T24866] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 1800.816487][ T784] input: failed to attach handler mousedev to device input100, error: -5 [ 1800.847096][ T784] usb 3-1: USB disconnect, device number 11 [ 1801.031988][T24866] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 1801.239787][T24912] tap0: tun_chr_ioctl cmd 1074025680 [ 1801.253999][T17550] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff88808b38c000 (12)(tap0) start [ 1801.273368][T17550] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff88808b38c000 (5)(tap0) end [ 1801.293085][T24866] BTRFS info (device loop1): found 8 extents, stage: move data extents [ 1801.398746][T24866] BTRFS info (device loop1): found 1 extents, stage: update data pointers [ 1801.474994][T24866] BTRFS info (device loop1): balance: ended with status: 0 [ 1801.571498][T11008] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1801.851353][T24926] hugetlbfs: Bad value '' for mount option 'size' [ 1801.851353][T24926] [ 1802.001017][T24914] loop3: detected capacity change from 0 to 32768 [ 1802.127630][T24914] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1802.303088][T24914] XFS (loop3): Ending clean mount [ 1802.349973][T24914] XFS (loop3): Quotacheck needed: Please wait. [ 1802.577385][T24934] loop1: detected capacity change from 0 to 32768 [ 1802.611458][T24914] XFS (loop3): Quotacheck: Done. [ 1802.644534][T24934] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1802.758048][ T5833] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1802.772564][T24934] XFS (loop1): Ending clean mount [ 1802.823850][ T6408] udevd[6408]: symlink '../../loop2' '/dev/disk/by-diskseq/5123.tmp-b7:2' failed: Read-only file system [ 1802.871479][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/5127.tmp-b7:1' failed: Read-only file system [ 1802.947434][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:1' failed: Read-only file system [ 1802.971866][T11008] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1803.003703][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system [ 1803.039880][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-diskseq/5126.tmp-b7:3' failed: Read-only file system [ 1803.095256][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/5123.tmp-b7:2' failed: Read-only file system [ 1803.133515][ T6408] udevd[6408]: symlink '../../loop3' '/dev/disk/by-diskseq/5126.tmp-b7:3' failed: Read-only file system [ 1803.223142][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5128.tmp-b7:3' failed: Read-only file system [ 1803.276455][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5127.tmp-b7:1' failed: Read-only file system [ 1803.318311][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/5123.tmp-b7:2' failed: Read-only file system [ 1803.457692][T24948] loop4: detected capacity change from 0 to 32768 [ 1803.537593][T24948] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1803.683242][T24948] XFS (loop4): Ending clean mount [ 1803.874083][T14844] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1804.030100][T24976] loop1: detected capacity change from 0 to 32768 [ 1804.304060][T24991] kernel read not supported for file /file0 (pid: 24991 comm: syz.8.20860) [ 1804.366544][ T29] audit: type=1800 audit(1694.715:2938): pid=24991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.20860" name="file0" dev="mqueue" ino=166696 res=0 errno=0 [ 1804.615540][T25001] loop2: detected capacity change from 0 to 512 [ 1804.655177][T25001] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.20865: inode has both inline data and extents flags [ 1804.683465][T25002] loop3: detected capacity change from 0 to 1024 [ 1804.696858][T25001] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1804.697208][T25001] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.20865: couldn't read orphan inode 15 (err -117) [ 1804.706461][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1804.706479][ C0] EXT4-fs (loop2): initial error at time 1695: ext4_orphan_get:1391: inode 15 [ 1804.706510][ C0] EXT4-fs (loop2): last error at time 1695: ext4_orphan_get:1391: inode 15 [ 1804.743649][T25001] loop2: lost filesystem error report for type 5 error -117 [ 1804.786202][T25001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1805.104107][T19463] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1805.235877][T17545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff88805918e000 (4)(hsr1) start [ 1805.292606][T17545] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076990000 (11)(syz2) rdma_ndev=ffff88802c894000 (19)(wg2) cookie=ffff88805918e000 (4)(hsr1) end [ 1805.501707][T25026] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.20874'. [ 1805.528319][T25027] loop9: detected capacity change from 0 to 7 [ 1805.540435][T25026] openvswitch: netlink: Message has 16 unknown bytes. [ 1805.548168][T25027] Buffer I/O error on dev loop9, logical block 0, async page read [ 1805.571499][T25027] Buffer I/O error on dev loop9, logical block 0, async page read [ 1805.593844][T25027] Buffer I/O error on dev loop9, logical block 0, async page read [ 1805.623291][T25027] Buffer I/O error on dev loop9, logical block 0, async page read [ 1805.644458][T25027] Buffer I/O error on dev loop9, logical block 0, async page read [ 1805.680906][T25027] Buffer I/O error on dev loop9, logical block 0, async page read [ 1805.689685][T25027] Buffer I/O error on dev loop9, logical block 0, async page read [ 1805.711337][T25027] ldm_validate_partition_table(): Disk read failed. [ 1805.718060][T25027] Buffer I/O error on dev loop9, logical block 0, async page read [ 1805.746776][T25027] Buffer I/O error on dev loop9, logical block 0, async page read [ 1805.769186][T25027] Buffer I/O error on dev loop9, logical block 0, async page read [ 1805.786906][T25035] loop2: detected capacity change from 0 to 1024 [ 1805.788866][T25027] Dev loop9: unable to read RDB block 0 [ 1805.828935][T25027] loop9: unable to read partition table [ 1805.841987][T25027] loop9: partition table beyond EOD, truncated [ 1805.861683][T25027] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1805.861683][T25027] ) failed (rc=-5) [ 1806.046598][T25019] loop3: detected capacity change from 0 to 32768 [ 1806.068949][T25039] loop2: detected capacity change from 0 to 2048 [ 1806.123285][T25019] JBD2: Ignoring recovery information on journal [ 1806.144545][T25039] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1806.200573][ T779] kernel write not supported for file 2199/net/vlan/vlan0 (pid: 779 comm: kworker/1:9) [ 1806.263736][T25019] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1806.452268][T25051] binder: BC_ATTEMPT_ACQUIRE not supported [ 1806.458151][T25051] binder: 25048:25051 ioctl c0306201 2000000001c0 returned -22 [ 1806.607130][ T5833] ocfs2: Unmounting device (7,3) on (node local) [ 1806.682711][T25053] loop1: detected capacity change from 0 to 4096 [ 1807.192346][T25077] loop3: detected capacity change from 0 to 8192 [ 1807.257620][ T7202] loop3: p2 p3 p4 < > [ 1807.264097][ T7202] loop3: partition table partially beyond EOD, truncated [ 1807.275106][ T7202] loop3: p2 size 590592 extends beyond EOD, truncated [ 1807.287549][ T7202] loop3: p3 start 4294967295 is beyond EOD, truncated [ 1807.296500][ T7202] loop3: p4 start 117440516 is beyond EOD, truncated [ 1807.311566][T25077] loop3: p2 p3 p4 < > [ 1807.316628][T25077] loop3: partition table partially beyond EOD, truncated [ 1807.317522][T25084] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1807.325421][T25077] loop3: p2 size 590592 extends beyond EOD, truncated [ 1807.345512][T25084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1807.361665][T25077] loop3: p3 start 4294967295 is beyond EOD, truncated [ 1807.374250][T25077] loop3: p4 start 117440516 is beyond EOD, truncated [ 1807.724218][T25097] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1807.808020][T25104] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1807.860060][T25104] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1808.114959][T25117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1808.261142][T16481] udevd[16481]: symlink '../../loop3' '/dev/disk/by-diskseq/5151.tmp-b7:3' failed: Read-only file system [ 1808.265216][ T6075] udevd[6075]: symlink '../../loop2' '/dev/disk/by-diskseq/5153.tmp-b7:2' failed: Read-only file system [ 1808.291579][T12517] udevd[12517]: symlink '../../loop4' '/dev/disk/by-diskseq/5132.tmp-b7:4' failed: Read-only file system [ 1808.354044][T25110] ntfs3(loop1): ino=18, mi_enum_attr [ 1808.363937][T25110] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1808.388841][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5151.tmp-b7:3' failed: Read-only file system [ 1808.402204][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5154.tmp-b7:1' failed: Read-only file system [ 1808.430180][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:1' failed: Read-only file system [ 1808.462484][T25110] ntfs3(loop1): ino=1a, mi_enum_attr [ 1808.500257][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5132.tmp-b7:4' failed: Read-only file system [ 1808.741130][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5151.tmp-b7:3' failed: Read-only file system [ 1808.799749][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5154.tmp-b7:1' failed: Read-only file system [ 1808.826476][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:1' failed: Read-only file system [ 1809.322086][T25146] set_capacity_and_notify: 3 callbacks suppressed [ 1809.322103][T25146] loop4: detected capacity change from 0 to 512 [ 1809.366883][T25146] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.20930: bg 0: block 5: invalid block bitmap [ 1809.421401][T25121] loop2: detected capacity change from 0 to 32768 [ 1809.425203][T25146] loop4: lost filesystem error report for type 5 error -117 [ 1809.431786][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1809.445626][ C0] EXT4-fs (loop4): initial error at time 1699: ext4_validate_block_bitmap:432 [ 1809.454541][ C0] EXT4-fs (loop4): last error at time 1699: ext4_validate_block_bitmap:432 [ 1809.497006][T25146] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 1809.511152][T25146] loop4: lost filesystem error report for type 5 error -117 [ 1809.511737][T25146] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.20930: invalid indirect mapped block 3 (level 2) [ 1809.570688][T25146] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1809.571239][T25146] EXT4-fs (loop4): 1 orphan inode deleted [ 1809.583634][T25132] loop1: detected capacity change from 0 to 32768 [ 1809.598788][T25146] EXT4-fs (loop4): 1 truncate cleaned up [ 1809.608495][T25146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1809.663044][T25146] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.4.20930: path /715/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 1809.703697][T25121] UFO tlock:0xffffc900029aa360 [ 1809.736378][T25132] [ 1809.736378][T25132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1809.736378][T25132] [ 1809.789977][T25132] ERROR: (device loop1): diWrite: ixpxd invalid [ 1809.789977][T25132] [ 1809.859543][T25132] ERROR: (device loop1): txCommit: [ 1809.859543][T25132] [ 1809.867809][T25156] loop3: detected capacity change from 0 to 512 [ 1809.869168][T25157] ERROR: (device loop1): diWrite: ixpxd invalid [ 1809.869168][T25157] [ 1809.905567][T25157] ERROR: (device loop1): txCommit: [ 1809.905567][T25157] [ 1809.921652][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1809.983307][T25156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1810.131591][T11008] [ 1810.131591][T11008] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1810.131591][T11008] [ 1810.175848][T11008] [ 1810.175848][T11008] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1810.175848][T11008] [ 1810.251621][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1811.481443][T25173] loop2: detected capacity change from 0 to 32768 [ 1811.649025][T25173] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1811.866534][T25173] XFS (loop2): Ending clean mount [ 1811.909489][T25173] XFS (loop2): Quotacheck needed: Please wait. [ 1811.971329][T25211] netem: unknown loss type 0 [ 1811.981437][T25211] netem: change failed [ 1811.996802][T25173] XFS (loop2): Quotacheck: Done. [ 1812.144787][T19463] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1812.335464][T25200] loop4: detected capacity change from 0 to 32768 [ 1812.380578][T25200] xfs: Deprecated parameter 'noattr2' [ 1812.406541][T25200] XFS: noattr2 mount option is deprecated. [ 1812.513740][T25200] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1812.603461][T25200] XFS (loop4): Ending clean mount [ 1812.653172][T25200] XFS (loop4): Quotacheck needed: Please wait. [ 1812.714435][T25200] XFS (loop4): Quotacheck: Done. [ 1812.825119][T25225] loop1: detected capacity change from 0 to 4096 [ 1812.852882][T25225] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1812.894836][T14844] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1812.984557][T25225] ntfs3(loop1): ino=1a, mi_enum_attr [ 1812.989934][T25225] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1813.020411][T25225] ntfs3(loop1): ino=1a, mi_enum_attr [ 1813.045352][T25225] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1813.114952][T25215] loop3: detected capacity change from 0 to 32768 [ 1813.203326][T25215] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1813.238691][T25215] JBD2: Ignoring recovery information on journal [ 1813.402458][T25215] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1813.637968][ T6408] udevd[6408]: symlink '../../loop2' '/dev/disk/by-diskseq/5165.tmp-b7:2' failed: Read-only file system [ 1813.693647][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5169.tmp-b7:3' failed: Read-only file system [ 1813.767520][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-diskseq/5168.tmp-b7:4' failed: Read-only file system [ 1813.780735][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system [ 1813.819310][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5170.tmp-b7:1' failed: Read-only file system [ 1813.898570][ T5833] ocfs2: Unmounting device (7,3) on (node local) [ 1813.952364][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5168.tmp-b7:4' failed: Read-only file system [ 1813.990944][ T6408] udevd[6408]: symlink '../../loop2' '/dev/disk/by-diskseq/5165.tmp-b7:2' failed: Read-only file system [ 1814.058212][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5169.tmp-b7:3' failed: Read-only file system [ 1814.112383][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5170.tmp-b7:1' failed: Read-only file system [ 1814.172825][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5169.tmp-b7:3' failed: Read-only file system [ 1814.207880][T25271] program syz.4.20978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1814.359788][T25273] sp0: Synchronizing with TNC [ 1814.560331][T25282] loop4: detected capacity change from 0 to 256 [ 1814.596429][T25282] exfat: Deprecated parameter 'utf8' [ 1814.612971][T25284] loop3: detected capacity change from 0 to 256 [ 1814.631180][T25284] exfat: Deprecated parameter 'namecase' [ 1814.643339][T25282] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1814.644180][T25284] exfat: Deprecated parameter 'utf8' [ 1814.689763][T25267] loop2: detected capacity change from 0 to 32768 [ 1814.739583][T25284] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1814.783561][T25267] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.20976 (25267) [ 1814.855691][T25267] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1814.883880][T25267] BTRFS info (device loop2): using crc32c checksum algorithm [ 1814.902243][T25267] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1815.093959][T25267] BTRFS info (device loop2): rebuilding free space tree [ 1815.118379][T25308] loop3: detected capacity change from 0 to 2048 [ 1815.179366][T25311] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1815.195432][T25267] BTRFS info (device loop2): disabling free space tree [ 1815.202374][T25267] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1815.241141][T25267] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1815.257500][T25267] BTRFS info (device loop2): enabling ssd optimizations [ 1815.265571][T25267] BTRFS info (device loop2): enabling disk space caching [ 1815.275242][T25267] BTRFS info (device loop2): force clearing of disk cache [ 1815.286466][T25267] BTRFS info (device loop2): force zstd compression, level 3 [ 1815.390670][ T29] audit: type=1800 audit(1705.057:2939): pid=25267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20976" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1815.542531][T19463] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1815.599488][T25318] loop4: detected capacity change from 0 to 4096 [ 1815.641842][T25318] EXT4-fs: inline encryption not supported [ 1815.776684][T25318] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1815.865610][T25318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1815.948502][ T29] audit: type=1800 audit(1705.581:2940): pid=25318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20992" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1815.970199][T25318] Invalid ELF header magic: != ELF [ 1816.107385][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1816.684304][T25358] binder: 25357:25358 ioctl c00c6211 0 returned -14 [ 1816.937730][ T779] kernel write not supported for file /snd/seq (pid: 779 comm: kworker/1:9) [ 1817.231811][T25341] mkiss: ax0: crc mode is auto. [ 1817.389080][T25373] loop2: detected capacity change from 0 to 8192 [ 1817.435105][ T7202] loop2: p2 p3 p4 < > [ 1817.444834][ T7202] loop2: partition table partially beyond EOD, truncated [ 1817.458589][ T7202] loop2: p2 size 590592 extends beyond EOD, truncated [ 1817.475350][ T7202] loop2: p3 start 4294967295 is beyond EOD, truncated [ 1817.489335][ T7202] loop2: p4 start 117440516 is beyond EOD, truncated [ 1817.511123][T25373] loop2: p2 p3 p4 < > [ 1817.515680][T25373] loop2: partition table partially beyond EOD, truncated [ 1817.523289][T25373] loop2: p2 size 590592 extends beyond EOD, truncated [ 1817.532130][T25373] loop2: p3 start 4294967295 is beyond EOD, truncated [ 1817.539905][T25373] loop2: p4 start 117440516 is beyond EOD, truncated [ 1817.877502][T25371] loop4: detected capacity change from 0 to 32768 [ 1817.991350][T25371] JBD2: Ignoring recovery information on journal [ 1818.126310][T25371] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1818.288453][T25398] loop1: detected capacity change from 0 to 8192 [ 1818.418074][T14844] ocfs2: Unmounting device (7,4) on (node local) [ 1818.499163][ T779] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1818.658740][T25410] netlink: 'syz.1.21030': attribute type 2 has an invalid length. [ 1818.707210][ T779] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.732739][ T779] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1818.772128][ T779] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1818.809307][ T779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1818.817372][ T779] usb 3-1: SerialNumber: syz [ 1818.913870][T25418] loop4: detected capacity change from 0 to 1024 [ 1818.989833][ T797] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1818.997227][T25418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1819.019520][T16481] udevd[16481]: symlink '../../loop1' '/dev/disk/by-diskseq/5187.tmp-b7:1' failed: Read-only file system [ 1819.052688][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-diskseq/5188.tmp-b7:4' failed: Read-only file system [ 1819.068525][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1819.095570][ T779] usb 3-1: 0:2 : does not exist [ 1819.142494][ T779] usb 3-1: USB disconnect, device number 12 [ 1819.163587][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 1819.173606][ T797] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1819.187898][ T797] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1819.200222][ T797] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1819.212972][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.221930][ T797] usb 4-1: Product: syz [ 1819.226154][ T797] usb 4-1: Manufacturer: syz [ 1819.230782][ T797] usb 4-1: SerialNumber: syz [ 1819.262953][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1819.274589][ T7202] udevd[7202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1819.292587][ T797] usb 4-1: config 0 descriptor?? [ 1819.416041][ T6075] udevd[6075]: symlink '../../loop1' '/dev/disk/by-diskseq/5187.tmp-b7:1' failed: Read-only file system [ 1819.438666][T16481] udevd[16481]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1819.487686][T16481] udevd[16481]: symlink '../../loop4' '/dev/disk/by-diskseq/5188.tmp-b7:4' failed: Read-only file system [ 1819.542569][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5188.tmp-b7:4' failed: Read-only file system [ 1819.582964][ T797] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input101 [ 1819.615791][T16481] udevd[16481]: symlink '../../loop1' '/dev/disk/by-diskseq/5187.tmp-b7:1' failed: Read-only file system [ 1819.647842][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5189.tmp-b7:4' failed: Read-only file system [ 1819.664138][T25436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21040'. [ 1819.711958][T25436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21040'. [ 1819.858319][T25443] loop2: detected capacity change from 0 to 256 [ 1819.909582][ T797] rc_core: IR keymap rc-imon-pad not found [ 1819.915475][ T797] Registered IR keymap rc-empty [ 1819.940882][T25443] FAT-fs (loop2): Directory bread(block 64) failed [ 1819.949480][ T797] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1819.975383][T25443] FAT-fs (loop2): Directory bread(block 65) failed [ 1819.994630][ T797] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1820.004294][T25443] FAT-fs (loop2): Directory bread(block 66) failed [ 1820.011860][T25443] FAT-fs (loop2): Directory bread(block 67) failed [ 1820.026089][T25443] FAT-fs (loop2): Directory bread(block 68) failed [ 1820.032772][T25443] FAT-fs (loop2): Directory bread(block 69) failed [ 1820.060412][ T797] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1820.090315][T25443] FAT-fs (loop2): Directory bread(block 70) failed [ 1820.096875][T25443] FAT-fs (loop2): Directory bread(block 71) failed [ 1820.117061][T25443] FAT-fs (loop2): Directory bread(block 72) failed [ 1820.125069][ T797] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input102 [ 1820.133189][T25443] FAT-fs (loop2): Directory bread(block 73) failed [ 1820.170479][ T29] audit: type=1326 audit(1709.519:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25447 comm="syz.1.21045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723b39bf79 code=0x7fc00000 [ 1820.201164][ T797] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:46> initialized [ 1820.226303][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1820.251208][ T797] usb 4-1: USB disconnect, device number 46 [ 1820.256269][ T29] audit: type=1326 audit(1709.519:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25447 comm="syz.1.21045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f723b39bf79 code=0x7fc00000 [ 1820.359709][ T29] audit: type=1326 audit(1709.519:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25447 comm="syz.1.21045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723b39bf79 code=0x7fc00000 [ 1820.428810][ T29] audit: type=1326 audit(1709.519:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25447 comm="syz.1.21045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723b39bf79 code=0x7fc00000 [ 1820.536128][ T29] audit: type=1326 audit(1709.519:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25447 comm="syz.1.21045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723b39bf79 code=0x7fc00000 [ 1820.569620][ T29] audit: type=1326 audit(1709.519:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25447 comm="syz.1.21045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723b39bf79 code=0x7fc00000 [ 1820.636953][ T29] audit: type=1326 audit(1709.519:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25447 comm="syz.1.21045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723b39bf79 code=0x7fc00000 [ 1820.670144][T25456] netlink: 340 bytes leftover after parsing attributes in process `syz.8.21048'. [ 1820.688831][ T29] audit: type=1326 audit(1709.528:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25447 comm="syz.1.21045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723b39bf79 code=0x7fc00000 [ 1821.102712][T25474] loop3: detected capacity change from 0 to 512 [ 1821.151983][T25474] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.21055: invalid indirect mapped block 4294967295 (level 1) [ 1821.216566][T25455] mkiss: ax0: crc mode is auto. [ 1821.242750][T25474] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1821.243169][T25474] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.21055: invalid indirect mapped block 4294967295 (level 1) [ 1821.252502][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1821.252524][ C0] EXT4-fs (loop3): initial error at time 1710: ext4_free_branches:1023: inode 11 [ 1821.252557][ C0] EXT4-fs (loop3): last error at time 1710: ext4_free_branches:1023: inode 11 [ 1821.294905][T25474] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1821.301457][T25474] EXT4-fs (loop3): 2 truncates cleaned up [ 1821.318742][T25474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1821.357517][T25474] EXT4-fs (loop3): shut down requested (0) [ 1821.369880][T25480] team0: Port device team_slave_1 removed [ 1821.575353][T25485] loop1: detected capacity change from 0 to 256 [ 1821.585033][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1822.887630][T25526] loop3: detected capacity change from 0 to 32768 [ 1822.929425][T25526] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1823.000887][T25526] XFS (loop3): Ending clean mount [ 1823.026124][T25546] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1823.037642][T25546] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1823.327062][ T5833] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1824.018154][T25572] loop4: detected capacity change from 0 to 4096 [ 1824.047015][T25572] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1824.123685][ T29] audit: type=1800 audit(1713.223:2949): pid=25572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.21095" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 1824.190119][T25580] program syz.8.21098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1824.306814][T17545] ntfs3(loop4): ino=1e, ntfs3_write_inode failed, -22. [ 1824.324740][T25555] loop1: detected capacity change from 0 to 40427 [ 1824.331718][T25582] loop3: detected capacity change from 0 to 2048 [ 1824.342208][T17545] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1824.359806][T25555] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1824.389633][T25555] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1824.403354][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-diskseq/5198.tmp-b7:4' failed: Read-only file system [ 1824.420083][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1824.420329][T25582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1824.435350][ T7202] udevd[7202]: symlink '../../loop4' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:4' failed: Read-only file system [ 1824.482689][T16481] udevd[16481]: symlink '../../loop3' '/dev/disk/by-diskseq/5200.tmp-b7:3' failed: Read-only file system [ 1824.513895][T16481] udevd[16481]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1824.649831][T16481] udevd[16481]: symlink '../../loop2' '/dev/disk/by-diskseq/5191.tmp-b7:2' failed: Read-only file system [ 1824.669491][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5200.tmp-b7:3' failed: Read-only file system [ 1824.693990][ T6075] udevd[6075]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1824.701798][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5199.tmp-b7:1' failed: Read-only file system [ 1824.716206][T25555] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1824.733945][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1824.777163][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1824.788498][T25555] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1824.844841][T25555] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1824.939912][T25555] syz.1.21088: attempt to access beyond end of device [ 1824.939912][T25555] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1825.213209][T25610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21110'. [ 1825.443945][T25610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21110'. [ 1825.884546][T21832] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1825.970357][T25631] loop1: detected capacity change from 0 to 4096 [ 1825.983241][T25631] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1826.037189][T25631] ntfs3(loop1): Failed to load $Extend (-22). [ 1826.043327][T25631] ntfs3(loop1): Failed to initialize $Extend. [ 1826.055609][T21832] usb 4-1: Using ep0 maxpacket: 8 [ 1826.074116][T21832] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1826.088811][T21832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.113873][T21832] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1826.124539][T21832] pvrusb2: ********** [ 1826.128610][T21832] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1826.140858][T21832] pvrusb2: Important functionality might not be entirely working. [ 1826.150616][T21832] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1826.165202][T21832] pvrusb2: ********** [ 1826.318827][T25638] gtp0: entered promiscuous mode [ 1826.324709][T25638] gtp0: entered allmulticast mode [ 1826.340643][ T2346] pvrusb2: Invalid write control endpoint [ 1826.480681][ T2346] pvrusb2: Invalid write control endpoint [ 1826.492786][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1826.510695][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1826.520389][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1826.531105][ T2346] pvrusb2: Device being rendered inoperable [ 1826.545740][ T2346] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1826.562734][ T2346] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1826.574088][ T784] usb 4-1: USB disconnect, device number 47 [ 1826.606141][ T2346] pvrusb2: Attached sub-driver cx25840 [ 1826.613110][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1826.625709][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1826.701078][T25648] netlink: 'syz.2.21125': attribute type 1 has an invalid length. [ 1826.715440][T25648] netlink: 'syz.2.21125': attribute type 2 has an invalid length. [ 1826.870585][T25653] loop4: detected capacity change from 0 to 512 [ 1826.893494][T25653] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1826.926381][T25653] EXT4-fs (loop4): invalid journal inode [ 1826.945077][T25653] EXT4-fs (loop4): can't get journal size [ 1826.993571][T25653] EXT4-fs (loop4): 1 truncate cleaned up [ 1827.045616][T25653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1827.101980][T14844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1827.346163][T25670] loop3: detected capacity change from 0 to 256 [ 1827.555232][T25672] loop4: detected capacity change from 0 to 4096 [ 1827.572432][T25672] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1827.623093][T25672] ntfs3(loop4): ino=19, mi_enum_attr [ 1827.632216][T25672] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1827.707890][T25672] ntfs3(loop4): failed to convert "c46c" to maccenteuro [ 1827.745071][T25672] ntfs3(loop4): ino=20, mi_enum_attr [ 1827.872715][T25682] netlink: 'syz.3.21139': attribute type 1 has an invalid length. [ 1827.885577][T25682] netlink: 'syz.3.21139': attribute type 2 has an invalid length. [ 1827.893453][T25682] netlink: 'syz.3.21139': attribute type 1 has an invalid length. [ 1827.912928][T25682] netlink: 'syz.3.21139': attribute type 3 has an invalid length. [ 1827.921680][T25682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21139'. [ 1828.242142][T25690] loop2: detected capacity change from 0 to 4096 [ 1828.273368][T25690] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1829.002749][T25692] loop3: detected capacity change from 0 to 32768 [ 1829.023404][T25692] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.21144 (25692) [ 1829.058399][T25692] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1829.106651][T25692] BTRFS info (device loop3): using xxhash64 checksum algorithm [ 1829.225910][T25692] BTRFS info (device loop3): enabling ssd optimizations [ 1829.249803][T25692] BTRFS info (device loop3): turning on flush-on-commit [ 1829.262734][T21832] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1829.281265][T25692] BTRFS info (device loop3): turning on async discard [ 1829.316195][T25692] BTRFS info (device loop3): enabling free space tree [ 1829.337667][T25692] BTRFS info (device loop3): force zlib compression, level 3 [ 1829.378122][T25692] BTRFS info (device loop3): max_inline set to 4096 [ 1829.446048][T21832] usb 3-1: Using ep0 maxpacket: 32 [ 1829.478559][T21832] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1829.498850][T25692] BTRFS info (device loop3): balance: start -d -m [ 1829.506103][T21832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.537171][T21832] usb 3-1: config 0 descriptor?? [ 1829.542948][T25692] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 1829.763304][T25744] loop1: detected capacity change from 0 to 4096 [ 1829.785290][T21832] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1829.812637][T21832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1829.835754][T21832] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1829.855545][T21832] usb 3-1: media controller created [ 1829.872949][T25744] EXT4-fs: inline encryption not supported [ 1829.917226][T25744] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1829.929202][T16481] udevd[16481]: symlink '../../loop4' '/dev/disk/by-diskseq/5212.tmp-b7:4' failed: Read-only file system [ 1829.947729][T21832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1829.956767][T25692] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 1830.008103][T25744] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1830.033425][T25744] System zones: 0-5 [ 1830.044166][T21832] az6027: usb out operation failed. (-71) [ 1830.055200][T21832] az6027: usb out operation failed. (-71) [ 1830.060968][T21832] stb0899_attach: Driver disabled by Kconfig [ 1830.085958][T21832] az6027: no front-end attached [ 1830.085958][T21832] [ 1830.103404][T21832] az6027: usb out operation failed. (-71) [ 1830.117937][T21832] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1830.127472][T25744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1830.147330][T21832] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input103 [ 1830.174962][T21832] dvb-usb: schedule remote query interval to 400 msecs. [ 1830.181244][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5216.tmp-b7:1' failed: Read-only file system [ 1830.206305][T21832] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1830.240062][T21832] usb 3-1: USB disconnect, device number 13 [ 1830.441480][T25692] BTRFS info (device loop3): found 8 extents, stage: move data extents [ 1830.456884][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5216.tmp-b7:1' failed: Read-only file system [ 1830.473380][T21832] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1830.488199][T11008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1830.594721][T25692] BTRFS info (device loop3): balance: canceled [ 1830.675557][ T6408] udevd[6408]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1830.737460][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5216.tmp-b7:1' failed: Read-only file system [ 1830.841996][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/5216.tmp-b7:1' failed: Read-only file system [ 1830.884928][ T5833] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1830.919196][ T5883] udevd[5883]: symlink '../../loop2' '/dev/disk/by-diskseq/5214.tmp-b7:2' failed: Read-only file system [ 1830.944866][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/5217.tmp-b7:1' failed: Read-only file system [ 1831.095162][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5215.tmp-b7:3' failed: Read-only file system [ 1831.110112][ T6408] udevd[6408]: symlink '../../loop1' '/dev/disk/by-diskseq/5217.tmp-b7:1' failed: Read-only file system [ 1831.527289][T25769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21172'. [ 1831.632291][T25769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21172'. [ 1831.840150][T25781] loop2: detected capacity change from 0 to 1024 [ 1831.852289][T25781] EXT4-fs: inline encryption not supported [ 1831.960647][T25781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1832.191676][T25795] loop4: detected capacity change from 0 to 736 [ 1832.397660][T19463] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1832.763369][T25810] loop2: detected capacity change from 0 to 256 [ 1832.812910][T25810] exfat: Deprecated parameter 'utf8' [ 1832.835748][T25810] exfat: Deprecated parameter 'namecase' [ 1832.841510][T25810] exfat: Deprecated parameter 'utf8' [ 1832.876481][T25816] loop3: detected capacity change from 0 to 128 [ 1832.894256][T25810] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1832.917045][T25816] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1832.959796][T25821] loop1: detected capacity change from 0 to 256 [ 1833.248721][ T5833] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1833.350248][T25830] loop2: detected capacity change from 0 to 512 [ 1833.394852][T25833] loop1: detected capacity change from 0 to 1024 [ 1833.418375][T25830] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1833.452409][T25830] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1833.514440][T25813] loop4: detected capacity change from 0 to 32768 [ 1833.533471][T25833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1833.559033][T25830] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.21197: bad orphan inode 131083 [ 1833.604804][T25830] loop2: lost filesystem error report for type 5 error -117 [ 1833.613767][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1833.627584][ C1] EXT4-fs (loop2): initial error at time 1722: ext4_orphan_get:1417 [ 1833.635625][ C1] EXT4-fs (loop2): last error at time 1722: ext4_orphan_get:1417 [ 1833.644013][ T29] audit: type=1800 audit(1722.109:2950): pid=25833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21198" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1833.670711][ T29] audit: type=1800 audit(1722.128:2951): pid=25833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21198" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1833.690960][T25813] [ 1833.690960][T25813] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1833.690960][T25813] [ 1833.703945][T25830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1833.760060][T25830] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.2.21197: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1833.805206][T25833] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.21198: lblock 0 mapped to illegal pblock 0 (length 1) [ 1833.846537][T25833] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1833.857480][T17545] read_mapping_page failed! [ 1833.881509][T17545] ERROR: (device loop4): txCommit: [ 1833.881509][T17545] [ 1833.914327][T25830] EXT4-fs error (device loop2) in ext4_delete_entry:2737: Corrupt filesystem [ 1833.922203][T17545] jfs_write_inode: jfs_commit_inode failed! [ 1833.928632][T25833] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1833.928632][T25833] [ 1833.950069][T14844] [ 1833.950069][T14844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1833.950069][T14844] [ 1833.957627][T25830] EXT4-fs warning (device loop2): ext4_rename_delete:3729: inode #2: comm syz.2.21197: Deleting old file: nlink 5, error=-117 [ 1833.999314][T14844] [ 1833.999314][T14844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1833.999314][T14844] [ 1834.100140][T25847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.21201'. [ 1834.112449][T11008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1834.134474][ C0] hrtimer: interrupt took 11087 ns [ 1834.146676][T19463] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1834.336206][T25847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21201'. [ 1834.913768][T25876] netlink: 'syz.1.21214': attribute type 1 has an invalid length. [ 1835.184044][T25891] loop4: detected capacity change from 0 to 1024 [ 1835.295278][ T6408] udevd[6408]: symlink '../../loop2' '/dev/disk/by-diskseq/5236.tmp-b7:2' failed: Read-only file system [ 1835.346812][T25897] program syz.2.21225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1835.364520][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/5235.tmp-b7:1' failed: Read-only file system [ 1835.423787][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5228.tmp-b7:3' failed: Read-only file system [ 1835.494337][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/5235.tmp-b7:1' failed: Read-only file system [ 1835.543864][ T6408] udevd[6408]: symlink '../../loop2' '/dev/disk/by-diskseq/5236.tmp-b7:2' failed: Read-only file system [ 1835.619941][ T7202] udevd[7202]: symlink '../../loop3' '/dev/disk/by-diskseq/5228.tmp-b7:3' failed: Read-only file system [ 1835.634603][T25907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21230'. [ 1835.650641][T17541] hfsplus: b-tree write err: -5, ino 25 [ 1835.662772][T17541] hfsplus: b-tree write err: -5, ino 4 [ 1835.683422][T17541] hfsplus: b-tree write err: -5, ino 2 [ 1835.696796][T25911] netlink: 'syz.3.21232': attribute type 14 has an invalid length. [ 1835.728861][ T7202] udevd[7202]: symlink '../../loop2' '/dev/disk/by-diskseq/5236.tmp-b7:2' failed: Read-only file system [ 1835.786634][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-diskseq/5237.tmp-b7:4' failed: Read-only file system [ 1835.829327][ T7202] udevd[7202]: symlink '../../loop1' '/dev/disk/by-diskseq/5235.tmp-b7:1' failed: Read-only file system [ 1835.846108][ T6408] udevd[6408]: symlink '../../loop4' '/dev/disk/by-diskseq/5237.tmp-b7:4' failed: Read-only file system [ 1835.937855][T25917] loop2: detected capacity change from 0 to 1024 [ 1836.004140][T25917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1836.148787][T25927] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.21242'. [ 1836.185081][T25927] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1836.475409][T25942] loop1: detected capacity change from 0 to 512 [ 1836.498071][T25942] EXT4-fs: Ignoring removed oldalloc option [ 1836.534322][T25942] EXT4-fs (loop1): 1 truncate cleaned up [ 1836.547512][T25942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1836.617659][T25942] EXT4-fs (loop1): shut down requested (1) [ 1836.699136][T11008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1837.268210][T25960] loop1: detected capacity change from 0 to 32768 [ 1837.337688][T25960] JBD2: Ignoring recovery information on journal [ 1837.412713][T25960] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1837.612924][T25981] macvlan0: entered promiscuous mode [ 1837.627281][T25981] netlink: 'syz.8.21263': attribute type 1 has an invalid length. [ 1837.639435][T25981] netlink: 'syz.8.21263': attribute type 2 has an invalid length. [ 1837.649440][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21263'. [ 1837.732077][T25971] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 1837.764886][T11008] ocfs2: Unmounting device (7,1) on (node local) [ 1837.786293][T25971] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1837.875334][ T29] audit: type=1800 audit(1726.085:2952): pid=25971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21259" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1838.071961][T25971] [ 1838.074339][T25971] ====================================================== [ 1838.081390][T25971] WARNING: possible circular locking dependency detected [ 1838.088428][T25971] syzkaller #0 Tainted: G L [ 1838.094419][T25971] ------------------------------------------------------ [ 1838.101449][T25971] syz.3.21259/25971 is trying to acquire lock: [ 1838.107612][T25971] ffff88807802b480 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_del_inode_from_orphan+0x12e/0x7a0 [ 1838.120791][T25971] [ 1838.120791][T25971] but task is already holding lock: [ 1838.128194][T25971] ffff8880787da2e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_dio_end_io+0x437/0x1210 [ 1838.138748][T25971] [ 1838.138748][T25971] which lock already depends on the new lock. [ 1838.138748][T25971] [ 1838.149157][T25971] [ 1838.149157][T25971] the existing dependency chain (in reverse order) is: [ 1838.158184][T25971] [ 1838.158184][T25971] -> #3 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}: [ 1838.166985][T25971] down_write+0x96/0x200 [ 1838.171771][T25971] ocfs2_try_remove_refcount_tree+0xb6/0x340 [ 1838.178299][T25971] ocfs2_xattr_set+0x61a/0x13e0 [ 1838.183690][T25971] ocfs2_set_acl+0x701/0x7b0 [ 1838.188823][T25971] ocfs2_iop_set_acl+0x1b1/0x2b0 [ 1838.194301][T25971] vfs_set_acl+0x8ff/0xc00 [ 1838.199266][T25971] filename_setxattr+0x305/0x630 [ 1838.204757][T25971] path_setxattrat+0x3eb/0x440 [ 1838.210098][T25971] __x64_sys_setxattr+0xbc/0xe0 [ 1838.215506][T25971] do_syscall_64+0x14d/0xf80 [ 1838.220688][T25971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.227127][T25971] [ 1838.227127][T25971] -> #2 (&oi->ip_xattr_sem){++++}-{4:4}: [ 1838.234984][T25971] down_read+0x47/0x2e0 [ 1838.239707][T25971] ocfs2_calc_xattr_init+0x20a/0xd90 [ 1838.245539][T25971] ocfs2_mknod+0xf51/0x2290 [ 1838.250588][T25971] ocfs2_create+0x195/0x490 [ 1838.255657][T25971] vfs_create+0x2d1/0x460 [ 1838.260535][T25971] filename_mknodat+0x3e8/0x660 [ 1838.265936][T25971] __se_sys_mknod+0x3a/0x150 [ 1838.271066][T25971] do_syscall_64+0x14d/0xf80 [ 1838.276202][T25971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.282632][T25971] [ 1838.282632][T25971] -> #1 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 1838.293268][T25971] down_write+0x96/0x200 [ 1838.298061][T25971] ocfs2_evict_inode+0x1539/0x44e0 [ 1838.303713][T25971] evict+0x61e/0xb10 [ 1838.308149][T25971] ocfs2_dentry_iput+0x24d/0x390 [ 1838.313636][T25971] __dentry_kill+0x1a2/0x5e0 [ 1838.318777][T25971] finish_dput+0xc9/0x480 [ 1838.323667][T25971] __fput+0x691/0xa70 [ 1838.328203][T25971] task_work_run+0x1d9/0x270 [ 1838.333343][T25971] exit_to_user_mode_loop+0xed/0x480 [ 1838.339173][T25971] do_syscall_64+0x32d/0xf80 [ 1838.344313][T25971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.350778][T25971] [ 1838.350778][T25971] -> #0 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}: [ 1838.361326][T25971] __lock_acquire+0x15a5/0x2cf0 [ 1838.366715][T25971] lock_acquire+0xf0/0x2e0 [ 1838.371664][T25971] down_write+0x96/0x200 [ 1838.376442][T25971] ocfs2_del_inode_from_orphan+0x12e/0x7a0 [ 1838.382780][T25971] ocfs2_dio_end_io+0x543/0x1210 [ 1838.388244][T25971] dio_complete+0x25b/0x790 [ 1838.393280][T25971] __blockdev_direct_IO+0x2cb0/0x32f0 [ 1838.399183][T25971] ocfs2_direct_IO+0x251/0x2c0 [ 1838.404470][T25971] generic_file_direct_write+0x1db/0x3e0 [ 1838.410633][T25971] __generic_file_write_iter+0x11d/0x230 [ 1838.416806][T25971] ocfs2_file_write_iter+0x1663/0x1ed0 [ 1838.422799][T25971] do_iter_readv_writev+0x619/0x8c0 [ 1838.428525][T25971] vfs_writev+0x33c/0x990 [ 1838.433380][T25971] __se_sys_pwritev2+0x184/0x2a0 [ 1838.438862][T25971] do_syscall_64+0x14d/0xf80 [ 1838.444012][T25971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.450439][T25971] [ 1838.450439][T25971] other info that might help us debug this: [ 1838.450439][T25971] [ 1838.460690][T25971] Chain exists of: [ 1838.460690][T25971] &ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE] --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key [ 1838.460690][T25971] [ 1838.477910][T25971] Possible unsafe locking scenario: [ 1838.477910][T25971] [ 1838.485368][T25971] CPU0 CPU1 [ 1838.490741][T25971] ---- ---- [ 1838.496116][T25971] lock(&ocfs2_file_ip_alloc_sem_key); [ 1838.501672][T25971] lock(&oi->ip_xattr_sem); [ 1838.508788][T25971] lock(&ocfs2_file_ip_alloc_sem_key); [ 1838.516854][T25971] lock(&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]); [ 1838.524144][T25971] [ 1838.524144][T25971] *** DEADLOCK *** [ 1838.524144][T25971] [ 1838.532290][T25971] 3 locks held by syz.3.21259/25971: [ 1838.537573][T25971] #0: ffff888075c66420 (sb_writers#29){.+.+}-{0:0}, at: vfs_writev+0x2aa/0x990 [ 1838.546644][T25971] #1: ffff8880787da640 (&sb->s_type->i_mutex_key#39){+.+.}-{4:4}, at: ocfs2_file_write_iter+0x429/0x1ed0 [ 1838.557970][T25971] #2: ffff8880787da2e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_dio_end_io+0x437/0x1210 [ 1838.568941][T25971] [ 1838.568941][T25971] stack backtrace: [ 1838.574850][T25971] CPU: 0 UID: 0 PID: 25971 Comm: syz.3.21259 Tainted: G L syzkaller #0 PREEMPT(full) [ 1838.574871][T25971] Tainted: [L]=SOFTLOCKUP [ 1838.574877][T25971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1838.574887][T25971] Call Trace: [ 1838.574894][T25971] [ 1838.574901][T25971] dump_stack_lvl+0xe8/0x150 [ 1838.574923][T25971] print_circular_bug+0x2e1/0x300 [ 1838.574947][T25971] check_noncircular+0x12e/0x150 [ 1838.574971][T25971] __lock_acquire+0x15a5/0x2cf0 [ 1838.574993][T25971] ? _raw_spin_unlock+0x28/0x50 [ 1838.575014][T25971] ? ocfs2_get_system_file_inode+0x202/0x7e0 [ 1838.575037][T25971] lock_acquire+0xf0/0x2e0 [ 1838.575054][T25971] ? ocfs2_del_inode_from_orphan+0x12e/0x7a0 [ 1838.575079][T25971] down_write+0x96/0x200 [ 1838.575092][T25971] ? ocfs2_del_inode_from_orphan+0x12e/0x7a0 [ 1838.575113][T25971] ? __pfx_down_write+0x10/0x10 [ 1838.575131][T25971] ocfs2_del_inode_from_orphan+0x12e/0x7a0 [ 1838.575156][T25971] ? __pfx_ocfs2_del_inode_from_orphan+0x10/0x10 [ 1838.575180][T25971] ? down_write+0x16d/0x200 [ 1838.575194][T25971] ? __pfx_down_write+0x10/0x10 [ 1838.575207][T25971] ? kmem_cache_free+0x439/0x630 [ 1838.575222][T25971] ? __blockdev_direct_IO+0x2b09/0x32f0 [ 1838.575242][T25971] ? ocfs2_direct_IO+0x251/0x2c0 [ 1838.575254][T25971] ? generic_file_direct_write+0x1db/0x3e0 [ 1838.575273][T25971] ocfs2_dio_end_io+0x543/0x1210 [ 1838.575291][T25971] ? __pfx_ocfs2_dio_end_io+0x10/0x10 [ 1838.575312][T25971] ? __lock_acquire+0x6b5/0x2cf0 [ 1838.575330][T25971] ? lockdep_hardirqs_on+0x7a/0x110 [ 1838.575356][T25971] ? do_raw_spin_lock+0x12b/0x2f0 [ 1838.575374][T25971] ? __pfx_ocfs2_dio_end_io+0x10/0x10 [ 1838.575387][T25971] dio_complete+0x25b/0x790 [ 1838.575409][T25971] __blockdev_direct_IO+0x2cb0/0x32f0 [ 1838.575441][T25971] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 1838.575461][T25971] ? __pfx_invalidate_inode_pages2_range+0x10/0x10 [ 1838.575483][T25971] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 1838.575500][T25971] ? filemap_write_and_wait_range+0x1e9/0x3f0 [ 1838.575523][T25971] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 1838.575544][T25971] ? __lock_acquire+0x6b5/0x2cf0 [ 1838.575567][T25971] ? do_raw_spin_lock+0x12b/0x2f0 [ 1838.575587][T25971] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 1838.575601][T25971] ocfs2_direct_IO+0x251/0x2c0 [ 1838.575622][T25971] generic_file_direct_write+0x1db/0x3e0 [ 1838.575642][T25971] __generic_file_write_iter+0x11d/0x230 [ 1838.575659][T25971] ? ocfs2_file_write_iter+0x163a/0x1ed0 [ 1838.575681][T25971] ocfs2_file_write_iter+0x1663/0x1ed0 [ 1838.575708][T25971] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 1838.575730][T25971] ? aa_file_perm+0x50e/0x15e0 [ 1838.575746][T25971] ? aa_file_perm+0x192/0x15e0 [ 1838.575765][T25971] ? __futex_wait+0x1fc/0x420 [ 1838.575786][T25971] ? __lock_acquire+0x6b5/0x2cf0 [ 1838.575806][T25971] ? __pfx___futex_wait+0x10/0x10 [ 1838.575830][T25971] do_iter_readv_writev+0x619/0x8c0 [ 1838.575847][T25971] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1838.575868][T25971] vfs_writev+0x33c/0x990 [ 1838.575888][T25971] ? __pfx_vfs_writev+0x10/0x10 [ 1838.575911][T25971] ? __fget_files+0x2a/0x420 [ 1838.575933][T25971] ? __fget_files+0x3a0/0x420 [ 1838.575951][T25971] ? __fget_files+0x2a/0x420 [ 1838.575974][T25971] __se_sys_pwritev2+0x184/0x2a0 [ 1838.575990][T25971] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 1838.576008][T25971] ? __x64_sys_pwritev2+0x20/0xc0 [ 1838.576025][T25971] do_syscall_64+0x14d/0xf80 [ 1838.576046][T25971] ? trace_irq_disable+0x3b/0x150 [ 1838.576066][T25971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.576080][T25971] ? clear_bhb_loop+0x40/0x90 [ 1838.576096][T25971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.576110][T25971] RIP: 0033:0x7ff13ed9bf79 [ 1838.576124][T25971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1838.576137][T25971] RSP: 002b:00007ff13fc3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1838.576152][T25971] RAX: ffffffffffffffda RBX: 00007ff13f015fa0 RCX: 00007ff13ed9bf79 [ 1838.576164][T25971] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 1838.576173][T25971] RBP: 00007ff13ee327e0 R08: 0000000000000000 R09: 0000000000000003 [ 1838.576182][T25971] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 1838.576191][T25971] R13: 00007ff13f016038 R14: 00007ff13f015fa0 R15: 00007ffd7175f7e8 [ 1838.576208][T25971] [ 1839.077460][T25983] set_capacity_and_notify: 1 callbacks suppressed [ 1839.077477][T25983] loop2: detected capacity change from 0 to 65536 [ 1839.115833][ T5833] ocfs2: Unmounting device (7,3) on (node local) [ 1839.129222][T25983] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1839.205586][T25983] XFS (loop2): Ending clean mount [ 1839.211537][T25983] XFS (loop2): Quotacheck needed: Please wait. [ 1839.219314][T17541] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_inobt block 0x8008 [ 1839.240063][T17541] XFS (loop2): Unmount and run xfs_repair [ 1839.270197][T17541] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1839.277594][T17541] 00000000: 49 41 42 33 00 00 00 00 d3 00 ff ff ff ff ff ff IAB3............ [ 1839.301169][T17541] 00000010: 00 00 00 00 00 00 80 08 00 00 00 00 00 00 00 00 ................ [ 1839.310233][T17541] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1839.319290][T17541] 00000030: 00 00 00 01 e5 03 51 91 00 00 00 00 00 00 00 00 ......Q......... [ 1839.329320][T17541] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1839.338346][T17541] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1839.347300][T17541] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1839.356422][T17541] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1839.367738][T17541] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x8008 len 2 error 74 [ 1839.379223][T17541] loop2: lost filesystem error report for type 5 error -117 [ 1839.380547][T25983] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1839.397087][T25983] loop2: lost filesystem error report for type 5 error -117 [ 1839.531744][T19463] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1839.549363][T19463] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 1842.596431][ T1301] ieee802154 phy1 wpan1: encryption failed: -22