last executing test programs: 11m27.960859047s ago: executing program 32 (id=6333): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x101203) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 8m27.985710609s ago: executing program 1 (id=9117): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x51424752, 0x7}}) 8m27.805924101s ago: executing program 1 (id=9120): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x3, @sliced={0x400, [0xffff, 0xdf, 0x6, 0x1, 0x4, 0xffd2, 0x3, 0x6, 0x1, 0x7, 0x5, 0x0, 0x6, 0x1, 0x4, 0x8, 0x843, 0x10, 0x8, 0xfff2, 0x7, 0x2, 0x9, 0x5, 0x8001, 0x1000, 0x2, 0xff, 0x7, 0x9, 0x0, 0x13c, 0x3, 0x7f, 0x400, 0xe, 0x4, 0x4, 0xff7f, 0x1, 0x8, 0x4a6, 0x401, 0x6, 0xb, 0x9, 0x73, 0x3], 0x80000000}}) 8m27.632701157s ago: executing program 1 (id=9123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) 8m27.434890399s ago: executing program 1 (id=9127): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000400)={[{@zero_size_dir}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@umask={'umask', 0x3d, 0x5}}, {@errors_remount}, {}, {@keep_last_dots}, {@dmask={'dmask', 0x3d, 0x40000001}}, {@time_offset={'time_offset', 0x3d, 0x5}}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x808}}, {@zero_size_dir}]}, 0x1, 0x152b, &(0x7f0000000a00)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 8m27.091241901s ago: executing program 1 (id=9132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1e, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) 8m26.655125293s ago: executing program 1 (id=9140): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 8m26.224374423s ago: executing program 33 (id=9140): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 7m26.730894938s ago: executing program 2 (id=9952): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') read$dsp(r0, &(0x7f0000000700)=""/228, 0xe4) 7m26.534014043s ago: executing program 4 (id=9956): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028008000300810000000800050000000000080004000000000008000f00ff01000008001c"], 0x64}}, 0x0) 7m26.39925363s ago: executing program 2 (id=9960): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m25.999314322s ago: executing program 2 (id=9964): r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000240)={0xfffffffa, 0x4, 0x4, 0x20, 0x7, {0x0, 0xea60}, {0x2, 0x8, 0x64, 0x2, 0x1, 0x4, "965d6754"}, 0x6, 0x4, {}, 0x9}) 7m25.758808839s ago: executing program 4 (id=9968): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="5becbc0e0d7cca6073a4f11dad00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m25.694517932s ago: executing program 2 (id=9970): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 7m25.611090868s ago: executing program 4 (id=9972): r0 = syz_io_uring_setup(0x819, &(0x7f0000000180)={0x0, 0x69b5, 0x10100, 0xfffffffe}, &(0x7f0000000100), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, 0x0, 0x1) 7m25.532115449s ago: executing program 4 (id=9974): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08813, &(0x7f0000000380)={[{@discard_sync}, {@notreelog}, {@compress_force}, {@compress}, {@flushoncommit}, {@rescue={'rescue', 0x3d, 'imetacsums'}}, {@user_subvol_rm}, {@nodiscard}]}, 0xfb, 0x5142, &(0x7f0000005140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204081, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 7m25.376798716s ago: executing program 2 (id=9976): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f0000000500), 0x0}, 0x20) 7m24.778378014s ago: executing program 2 (id=9982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x60}}, 0x0) 7m24.254867839s ago: executing program 34 (id=9982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x60}}, 0x0) 7m23.009796713s ago: executing program 4 (id=9998): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/sockcreate\x00') pwritev2(r0, &(0x7f0000007080)=[{&(0x7f0000006cc0)="19", 0x1}], 0x1, 0x6, 0x81, 0xa) 7m22.44946891s ago: executing program 4 (id=10006): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000001440)={'veth1_to_bridge\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x6, 0xc0}}) 7m21.630537984s ago: executing program 35 (id=10006): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000001440)={'veth1_to_bridge\x00', &(0x7f0000000180)=@ethtool_cmd={0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2, 0x6, 0xc0}}) 6m53.214644833s ago: executing program 6 (id=10225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m52.940595171s ago: executing program 6 (id=10229): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900)={[{@fat=@errors_continue}, {@shortname_lower}, {@utf8}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@rodir}, {@fat=@nocase}, {@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_mixed}, {@utf8}, {@uni_xlate}]}, 0x26, 0x341, &(0x7f0000000500)="$eJzs3T1sW1UUAODjviROI0oyIFUwGTYkVDVBDDAlqopUkQGKLP4WIuryk2cqYmEpHRK8gBhBLEgwsXWAsTNiQIiNgZUioQJioVulVjxkvxf7OXaog+SUn+8boqNz73n3POcqfomSm5dXY/PCbFy8ceN6zM9XYmb1zGrcrMRSHIskcu8EAPBfcjPL4vcsd+fZHy7sRXNT7gsAmJ7e+/+rJwaJ6t3sBgA4ChN+///02OylqbUFAEzRyPv/Q0PD+37MP9P/nQAA4N/r2RdefGptPeJ8rTYf0XyvXW/X44nB+NrFeD3SaMTpWIzbEfmDQv600P345Ln1s6drXT8vRb1b0a5HNHfb9fxJYS3p1VdjORZjqajP+vVJt365V1+LiLfuyVdtVtr12Vgo1v9hIRqxEotx30h9xLn1syu14gL17rr5+hGdmN+7iW7/p2IxvnslLkUaF6JbO+h/Z7lWO5OtD9W3r1R78wAAAAAAAAAAAAAAAAAAAAAAYBpO1fqW+uffZM3d9rvn909YGjofp54PF+cDdfLzgbLq3uk87yf7zwcaPp+nXZ+JY3f1zgEAAAAAAAAAAAAAAAAAAOCfo7U9Fxtp2thqbV/eLAe7pcyb33z+1fHoDc1HRDHnjWRQFTP55YauU+SidOUk+ktk/fIsGZpTBEnEYPKVq/2Oy3Oq/bsYKe8G1ZGhStHTRpqeePCnT8ZV/THIJDHysgwHlWL90lDz3jz1F1UHByt3mHMty7KDync+Hq2KSsRMHLqNCYKvr792/6Otk4/1Ml8Whz48/Mjic9c++uzXzY00ipcmTee2Wrezv71WUto/lbi8ORtpozJmJ4wPOoNMZ6u1vZF8/9vzD3zw7b7Jyfj9k5Uzbx+81hd7QVZ8dubyoW6bk9zp7JjNPz546VZ/9x7+xTz56erG1Z0ff5m0qvRFwkEdAAAAAAAAAAAAAAAAAABwJEp/K34Ijz8zvY4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OgN/v9/KeiMZCYJbu3G6FC1sdU6cPHjR3qrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8j/0ZAAD//74Cdqk=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 6m51.956591331s ago: executing program 6 (id=10238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 6m51.734528886s ago: executing program 6 (id=10242): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08813, &(0x7f0000000380)={[{@discard_sync}, {@notreelog}, {@compress_force}, {@compress}, {@flushoncommit}, {@rescue={'rescue', 0x3d, 'imetacsums'}}, {@user_subvol_rm}, {@nodiscard}]}, 0xfb, 0x5142, &(0x7f0000005140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204081, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 6m49.259071223s ago: executing program 6 (id=10268): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000414, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYRES8], 0x6, 0x801, &(0x7f0000001540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 6m48.006442128s ago: executing program 6 (id=10283): mlockall(0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09b38, 0xffffffffffffffff, 0xfffff000) 6m47.34031261s ago: executing program 36 (id=10283): mlockall(0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09b38, 0xffffffffffffffff, 0xfffff000) 5m18.691236276s ago: executing program 7 (id=11510): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10, 0xe, 0xd3a}, &(0x7f0000000240)=0x18) 5m18.474890591s ago: executing program 7 (id=11514): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000003c0)={0x7, 'vlan0\x00', {0x6}}) 5m18.305512955s ago: executing program 7 (id=11518): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0x0) 5m17.909368351s ago: executing program 7 (id=11523): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,umask=00000000000000000000002,keep_last_dots,errors=remount-ro,iocharset=koi8-u,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp874,discard,utf8,namecase=1,keep_last_dots,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c7574696d653d303030dd54273b3b444bfb30303030d33030303030303030303037353734352c6e616d65626173653d312c7569643dc90000000000", @ANYRESHEX, @ANYBLOB=',utf8,iocharset=iso8859-15,discard,\x00'], 0x1, 0x153a, &(0x7f0000000680)="$eJzs3AuYTlUXOPC19t5nDIm3SS7D3nsdXnLZJklySZJLklSSJLeEpEk+SUgMIUlDEpLLkMQQksvEpHG/3y8JSdIkSUhuyf4/U/x9fdW/79L/0/PN+j3Peexln73POmfN+777HOb9uuvQ2k3q1GhERPAfwZ//SAKAWAAYCAB5ASAAgApxFeKy+nNKTPrPDsL+XPenXu4M2OXE9c/euP7ZG9c/e+P6Z29c/+yN65+9cf2zN64/Y9nZpmmFruIt+278/D8748///yGZZcd+vqbsNd0AYv7ZIVz/7I3r/z8r+Gd24vpnb1z/7Cr2cifA/gL49Z8d5PjdHq5/9sb1Zyw7u9zPny/3BpG/2DU4kvPnwvy3zp8xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGPsvOO0vUQBwsX2582KMMcYYY4wxxtifx+e43BkwxhhjjDHGGGPs/z8EARIUBBADOSAWckIuEABwJeSBvBCBqyAOroZ8cA3khwJQEApBPBSGIqDBgAWCEIpCMYhCcSgB10JJKAWloQw4KAsJcB2Ug+uhPNwAFeBGqAg3QSWoDFWgKtwM1eAWqA63Qg24DWpCLagNdeB2qAt3QD24E+rDXdAA7oZ74F5oCPdBI7gfGsMD0AQehKbwEDSD5tACWkKrf2v8s9ATnoNe0BuSoA/0heehH/SHAfACDIQXYRC8BIPhZUiGITAUXoFh8CoMh9dgBIyEUfA6jIY3YAyMhXEwHlJgAkyEN2ESvAWT4W2YAlMhFabBdHgHZsBMmAXvwmx4D+bAXJgH8yEN3ocFsBDS4QNYBB9CBiyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXbYAR/BTvgYdsFu2AOfwF749F8cf+ofxndDQECBAhUqjMEYjMVYzIW5MDfmxjyYByMYwTiMw3yYD/NjfiyIBTEe47EIFkGDBgkJi2JRjGIUS2AJLIklsTSWRocOEzABy+H1WB7LYwWsgBWxIlbCylgZq2JVrIbVsDpWxxpYA2tiTayNtfF2vB37YD2sh/WxPjbABhcfT2EjbISNsTE2wSbYFJtiM2yGLbAFtsJW2BpbYxtsg+2wHbbH9tgBO2AiJmJH7IidsBN2xs7YBbtgV+yK3bA7ds98Ngfgc/gc9saaog/2xb7YD5NzDMAX8AV8EQfhS/gSvozJOARLF38FX8FXcTiexBE4EkfhKKwm3sAxOBZJjMcUTMGJOBEn4STMSvRtnIqpOA2n43ScgTNxJr6Ls/E9fA/n4lycj2mYhgtwIaZjOi7CU5iBi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24HbfjR6gA8GPcjbsxGffiXtyH+3A/7scDeAAzMRMP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPh3/ZeOPSq1OBpFFCSViRIyIFbEil8glcovcIo/IIyIiIuJEnMgn8on8Ir8oKAqKeBEviogiwggjSIQxACCiIipKiBKipCgpSovSwgknEkSCKCfKifKivKggbhQVxU2ikqgs2rqqoqqoJtq56uJWUUPUEDVFLVFb1BF1RF1RV9QT9UR9UV80EA3EPeJe0VD0wQF4v8iqTBMxBJuKodhMNBfywjtYazEc24i2op14VIzEEdhBtHaJ4gnRUYzBTuJvYiw+JbqI8dhVPCO6ie6ih3hW9BRtXC/RW0zGPqKvmIr9RH8xQLwgZmAt8S7OzllbvCySxRAxVLwi5uOrYrh4TYwQI8Uo8boYLd4QY8RYMU6MFyligpgo3hSTxFtisnhbTBFTRaqYJqaLd8QMMVPMEu+K2eI9MUfMFfPEfJEm3hcLxEKRLj4Qi8SHIkMsFkvEUrFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbRCxsE9vFDvGR2Ck+FrvEbrFHfCL2ik/FPvGZ2C8+FwfEFyJTfCkOiq/EIfG1OCy+EUfEt+KoOCaOi+/ECfG9OClOidPijDgrfhDnxI/ivPACJEohpVQykDEyh4yVOWUueYXMLYMLV/cqGSevlvnkNTK/LCALykIyXhaWRaSWRlpJMpRFZTEZlcVlCXmtLClLydKyjHSyrEyQ18ly8npZXt4gK8gbZUV5k6wkK8sqsqq8WVaTt0iI/HyMmrKWrC3ryNtlEtwh68k7ZX15l2wg75b3yHtlQ3mfbCTvl43lA7KJfFA2lQ/JZrK5bCFbylbyYdlaPiLbyLaynXxUtpePyQ7ycZkon5Adpb/wI/KU7CKfll3lM7Kb7C57yB/leellL9lbQh+QfeXzsp/sLwfEAoB8UQ6SL8nB8mWZLIfIofIVOUy+KofL1+QIOVKOkq/L0fINOUaOlePkeJkiJ8iJ8k05Sb4lJ8u35RQ5VabKaXKAHPjTTLOk/MPxb/7G+ME/HX2j3CQ3yy1yq9wmt8sd8iO5U+6Uu+QuuUfukXvlXrlP7pP75X55QB6QmTJTHpQH5SF5SB6Wh+UReUQelcfkGfmdPCG/lyflKXlKnpFn5Vl57sI1AIVKKKmUClSMyqFiVU6VS12hcqsrVR6VV0XUVSpOXa3yqWtUflVAFVSFVLwqrIoorYyyilSoiqpiKqqK44UfGFValVFOlVUJ6rp/Zbwqoa5VJVWpX4y/mF/S7+TXSrVSrVVr1Ua1Ue1UO9VetVcdVAeVqBJVR9VRdVKdVGfVWXVRXVRX1VV1U91UD9VD9VQ9VS/VSyWpJNVXPa/6qf5qgHpBDVQvqkFqkBqsBqtklayGqqFqmBqmhqvhaoQaoUapUWq0Gq3GqDFqnBqnUlSKmqgmqklqkpqsJqspaopKValqupquZqgZapaapWar2WqOmqPmqXkqTaWpBWqBSlfpapFapDLUYrVYLVVL1XK1XK1UK9VqtVqtVWvVerVeZahNapPaoraobWqb2qF2qJ1qp9oldqk9ao/aq/aqfWqf2q/2qwPqgMpUmeqgOqgOqUPqsDqsjqgj6qg6qo6r4+qEOqFOqpPqtDqtzqqz6pw6p86r81nLvkAEIlCBCmKCmCA2iA1yBbmC3EHuIE+QJ4gEkSAuiAvyBdcE+YMCQcGgUBAfFA6KBDowgQ3EhaJHg+JBieDaoGRQKigdlAlcUDZICK4LygXXB+WDG4IKwY1BxeCmoFJQOagSVA1uDqoFtwTVg1uDGsFtQc2gVlA7qBPcHtQN7gjqBXcG9YO7ggbB3cE9wb1Bw+C+oFFwf9A4eCBoEjwYNA0eCpoFzYMWQcug1Z86v/cnCzzieuneOkn30X3187qf7q8H6Bf0QP2iHqRf0oP1yzpZD9FD9St6mH5VD9ev6RF6pB6lX9ej9Rt6jB6rx+nxOkVP0BP1m3qSfktP1m/rKXqqTtXT9HT9jp6hZ+pZ+l09W7+n5+i5ep6er9P0+3qBXqjT9Qd6kf5QZ+jFeoleqpfp5XqFXqlX6dV6jV6r1+n1eoPeqDfpzXqL3qq36e16h/5I79Qf6116t96jP9F79ad6n/5M79ef6wP6C52pv9QH9Vf6kP5aH9bf6CP6W31UH9PH9Xf6hP5en9Sn9Gl9Rp/VP+hz+kd9XvusxX3Wx7tRRpkYE2NiTazJZXKZ3Ca3yWPymIiJmDgTZ/KZfCa/yW8KmoIm3sSbIqaIyUKGTFFT1ERN1JQwJUxJU9KUNqWNM84kmARTzpQz5U15U8FUMBVNRVPJVDJVTBVzs7nZ3GJuMbeaW81t5jZTy9QydUwdU9fUNfVMPVPf1DcNTANzj7nHNDQNTSPTyDQ2jU0T08Q0NU1NM9PMtDAtTCvTyrQ2rU0b08a0M+1Me9PedDAdTKJJNB1NR9PJdDKdTWfTxXQxXU1X0810Mz1MD9PT9DS9TC+TZJJMX9PX9DP9zAAzwAw0A80gM8gMNoNNskk2Q81QM8wMM8PNcDPCjDSjshaq5g0zxow148x4k2JSzEQz0Uwyk8xkM9lMMVNMqkk10810M8PMMLPMLDPbzDZzzBwzz8wzaSbNLDALTLpJN4vMIpNhMswSs8QsM8vMCrPCrDKrzBqzxqyDdWaD2WA2mU1mi9litpltZofZYXaanWaX2WX2mD1mr9lr9pl9Zr/Zbw6YAybTZJqD5qA5ZA6Zw+awOWKOmKPmqDlujpsT5oQ5aU6a0+a0OWsKXPi89CbW5rS57BU2t73S5rF57T/GBW0hG28L2yJW2/y2wC9iY60taUvZ0raMdbasTbDX/SquZCvbKraqvdlWs7fY6r+K69o7bD17p61v77J17O2/iBvYu23W6qQhIoBtbhvblraJfdA2tQ/ZZra5bWFb2vb2MdvBPm4T7RO2o33yV/ECu9CusqvtGrvW7rK77Wl7xh6yX9uz9gfby/a2A+2LdpB9yQ62L9tkO+RX8Sj7uh1t37Bj7Fg7zo7/VTzFTrWpdpqdbt+xM+zMX8Vp9n0726bbOXaunWfn/xRn5ZRuP7CL7Ic2wwawxC61y+xyu8KuvJirz2vX2w12o91pP7Zb7Fa7zW63Oy4uhO1uu8d+YvfaT+1B+5Xdbz+3B+xhm2m//CnOOr/D9ht7xH5rj9pj9rj9zp6w36uLo7PO/Tv7oz1vvQVCApKkKKAYykGxlJNy0RWUm66kPJSXInQVxdHVlI+uofxUgApSIYqnwlSENBmyRBRSUSpGUSpOF9MrTWXIUVlKoOuoHF1P5ekGqkA3UkW6iSpRZapCVelmqka3UHW6lWrQbVSTalFtqkO3U126g+rRnVSf7qIGdDfdQ/dSQ7qPGtH91JgeoCb0IDWlh6gZNacW1JJa0cPUmh6hNtSW2tGj1J4eow70OCXSE9SRnqRO9DfqTE9RF3qautIz1I26Uw96lnrSc9SLelMS9aG+9Dz1o/40gF6ggfQiDaKXaDC9TMk0hIbSKzSMXqXh9BqNoJE0il6n0fQGjaGxNI7GUwpNoIn0Jk2it2gyvU1TaCql0jSaTu/QDJpJs+hdmk3v0RyaS/NoPqXR+7SAFlI6fUCL6EPKoMW0hJbSMlpOK2glraLVtIbW0jpaTxtoI22izbSFttI22k476CPaSR/TLtpNe+gT2kufEtJntJ8+pwP0BWXSl3SQvqJD9DUdpm98b/qWjtIxOk7f0Qn6nk7SKTpNZ+gs/UDn6Ec6T54gxFCEMlRhEMaEOcLYMGeYK7wizB1eGeYJ84aR8KowLrw6zBdeE+YPC4QFw0JhfFg4LBLq0IQ2pDAMi4bFwmhYPCwRXhuWDEuFpcMyoQvLhgnhdWG58PqwfHhDWCG8MawY3hRWCiuHD95VNbw5rBbeElYPbw1rhLeFNcNaYe2wTnh7WDf9jrBeeGdYP7wrLB/eHd4T3hs2DO8LG4X3h43DB8Im4YNh0/ChsFnYPGwRtgxbhRdXJm3DduGjYfvwsbBD+HiYGD4RdgyfDFuFD4d3L3wkbBP+dn9S2CfsGz4fPh96f6ecF50fTYu+H10QXRhNj34QXRT9MJoRXRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y9b5ODnDohJNOucDFuBwu1uV0udwVLre70uVxeV3EXeXi3NUun7vG5XcFXEFXyMW7wq6I084468iFrqgr5qKuuCvhrnUlXSlX2pVxzpV1Ca6la+VaudbuEdfGtXXt3KPuUfeYe8w97h53T7iO7knXyf3NdXZPuS7uafe0e8Z1c91dD/es6+km5Pn56iS5vq6v6+f6uQFugBvoBrpBbpAb7Aa7ZJfshrqhbpgb5oa74W6EG+FGuVFutBvtxrgxbpwb51JcipvoJrpJbpKb7Ca7KW6KS3Wpbrqb7ma4Ga7azJ+PMsfNcfPcPJfm0twCl1WZdLfILXIZLsMtcUvcMrfMrXAr3Cq3yq1xa9w6t85tcBvcJrfJbXFb3Da3ze1wO9xOt9Pt8nl/ntTtdfvcPrff7XcH3Bcu033pDrqv3CH3tTvsvnFH3LfuqDvmjrvv3An3vTvpTrnT7ow7635w59yP7rzzLiUyITIx8mZkUuStyOTI25EpkamR1Mi0yPTIO5EZkZmRWZF3I7Mj70XmROZG5kXmR9Ii70cWRBZG0iMfRBZFPoxkRBZHlkSWRpZFlke8L7wl9EV9MR/1xX0Jf60v6Uv50r6Md76sT/DX+XL+el/e3+Ar+Bt9RX+Tr+Qr+yr+Id/MN/ctfEvfyj/sW/tHfBvf1rfzj/r2/jHfwT/uE/0TvqN/0nfyf/Od/VO+i3/ad/XP+G6+u+/hn/U9/XO+l+/tk3wf39c/7/v5/n6Af8EP9C/6Qf4lP9i/7JP9ED/Uv+KH+Vf9cP+aH+FH+lExr/vRF2+RYbxP8RP8RP+mn+Tf8pP9236Kn+pT/TQ/3b/jZ/iZfpZ/18/27/k5fq6f5+f7NP++X+AX+nT/gV/kP/QZfvHFh8p+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfof/yO/0H/tdfrff4z/xe/2nfp//zO/3n/sD/guf6b/0B/1X/pD/2h/23/gj/lt/1B/zx/13/oT/3p/0p/xpf8af9T/4c/5Hf55/Z40xxhhj7J8y4VJT/LLn58f5fX5jjPi7nfsCwJVbC2X+fX/WinJd/p/b/UV8+wgAPNG76/0Xt5o1k5KSLuybISEoNhfg4r8EZYmBS/FiaAePQSK0hXK/mX9/0f0s/cH80RsBcv3dmFi4FF+a/zMATPqN+R9+dNSCiuHpuP/H/HMBSha7NCYnXIoXQ7ufnq+0hfK/k3+B1n+Qf87PUwDa/N2Y3HApvpR/AjwCT0LiL/b8pZjf7WGMMcYYY4wx9r+uv6jS+eL958X/8flb9+fx6tKYHHAp/qP7c8YYY4wxxhhjjF1+T3Xv8fjDiYltO//rjep/vI/692b+qdEU/t3E/qKNt8r9JdL43Yb3AP+3cADwH04IkNWQ/82z2PxfOVbyhZfOP3YtO+MD+GuU8s9oXOY3JsYYY4wxxtif7tKi/5d/ry5XQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWDb0n37HG/wT39J3uc+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9z+TwAAAP//9C/4Pg==") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 5m17.523912635s ago: executing program 7 (id=11528): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) 5m16.864085493s ago: executing program 7 (id=11538): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@delqdisc={0x34, 0x26, 0x1, 0x70bd27, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) 3.387964345s ago: executing program 8 (id=15370): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffffd, 0x1) 3.347073289s ago: executing program 5 (id=15371): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x46, 0x55}, {0x5, 0x2004}]}, 0x18, 0x0) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 3.241092573s ago: executing program 8 (id=15374): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0xfffd, 0xfffa, 0xc051, 0x3}, 0xc) 3.156038658s ago: executing program 9 (id=15375): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) 3.114542595s ago: executing program 5 (id=15376): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) 3.011691835s ago: executing program 8 (id=15379): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.98840468s ago: executing program 9 (id=15380): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/66, 0x42}], 0x1, 0x85, 0xa) 2.814089912s ago: executing program 9 (id=15383): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$eJzs3d9rFNceAPDvbDbGRL0qiNx7Hy4BH67FuvnVHxYK2sfSSoX23YZkDZKNK9mNmFRQHyqUvhQplFKh9A/oex+lf0D7VwitIEVC+9CXlNnM6prNZjdxdRf384FJzpmZ3XPOzDlnztnZYQMYWOPpn1zEfyLiqyTicMO2fGQbxzf3W398Yy5dktjY+PiPJJJsXX3/JPt/IIv8OyJ+/jziVK453crq2uJsqVRczuIT1aWrE5XVtdOXl2YXigvFK9MzM2fenJl+5+23ulbW1y789e1H998/8+WJ9W9+fHj0bhLn4mC2rbEcz+FWY2Q8xrNjMhzntuw41YXE+knS6wywJ0NZOx+OtA84HENZq0+N9jRnwIt2MyI2gAGVdNz+h/UU8EqpjwPqc/st8+BtZu6vlkfvbU6Amsuf3/xsJPbX5kZj60nDzGhzvnukC+mnafz0+7276RJtPoe4+UxsXxdSBwbZrdsRMZnPN/d/Sdb/7d1kB9ePrWl06XNYoAP30/HP6zGSRRvaf+7J+Ce2Gf90a/TRvv3nHnYpqW2l4793tx3/Pum6jgxlsUO1Md9wculyqTgZEf+KiJMxPJLGd7qfc2b9wUarbY3jv3RJ06+PBbN8PMyPPPua+dnq7POUudGj2xH/fTr+TaKp/99fG+uOjcYz5z89HhfSwC9ftE3jePHe/1pta1/+Rjd3Wbr2Nn6I+P+253/zjlYuC+1wf3KiVh8m6rWi2Z93jv/aKv3dlb/70vM/tkP50yqfNN6vrezu/dO50/f7/y622r7X+r8v+aQWrvdD12er1eWpiH3Jh83rp5++th6v75+W/+SJ7dt/vf6PbtP/pes+7fAY3Dl2p+Wu/XD+53d1/ncfePDBZ9+1Sr+z8/9GLXQyW9NJ/1cq1ivNzhnc63EDAAAAAACAfpTLnv8pZOGDkcsVCpvP8B6LsVypXKmeulReuTIftWdl63cFJ2PzWeH69yGmsu/D1uPTW+IzEXE0Ir4eGq3FC3Pl0nyPyw4AAAAAAAAAAAAAAAAAAAD94kDtmf8kt/X5/9RvQ73OHfDC5XudAaBn2rb/5/0lOKBvuf7D4NL+YXBtbf8jPcoH8FLlw/UfBlpj+x/uYT6Al8/1HwaX9g+DS/sHAAAAAAAAAAAAAAAAAAAAAAAAAACArrpw/ny6bKw/vjGXxuevra4slq+dni9WFgtLK3OFufLy1cJCubxQKhbmykvt3q9ULl+dmo6V6xPVYqU6UVldu7hUXrlSvXh5aXaheLHo50UAAAAAAAAAAAAAAAAAAACgWWV1bXG2VCouC7QMnI2+yMaeA0m7s3w2qwy7eufIAvneF7DfAoc6b1aj0Sd5bgr0uGMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAb/BAAA//9okSnn") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4104, 0x1039) 2.384705432s ago: executing program 8 (id=15386): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000180)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x41bfc) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 2.196306494s ago: executing program 9 (id=15387): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r0, 0x118, 0x11, 0x0, &(0x7f0000000140)) 1.675972806s ago: executing program 8 (id=15390): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x8) 1.674786955s ago: executing program 5 (id=15391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 1.603647955s ago: executing program 9 (id=15392): unshare(0x20000400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 1.450163088s ago: executing program 5 (id=15395): setuid(0xee00) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 1.39635483s ago: executing program 9 (id=15396): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.32896713s ago: executing program 0 (id=15397): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x8000000) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 1.228139773s ago: executing program 5 (id=15398): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "9f0ffeba"}}}, 0x0) 1.16813442s ago: executing program 3 (id=15399): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r0, 0x1000000, 0x0) 1.019472524s ago: executing program 0 (id=15400): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 979.064304ms ago: executing program 3 (id=15401): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$inet6_int(r0, 0x29, 0xd4, 0x0, 0x0) 900.257835ms ago: executing program 0 (id=15402): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x1010c17, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x1, 0x176, &(0x7f0000000200)="$eJzs299K+mAcx/HP/P/zV2JZJ9HBoIM6SVPpj2d1D92A6BJplmQnShBdRBfQ/SXUDWQ43MIpBIZO5/t19Hz2MPd9hGd+B04A1pYpU4YMxYdhP5V9zhlBlwRgQQaSvgYA1lP0Y+rR4b0BQKj1r6S2pPfPp5qicX978JqRdOnORxIT/UP/RdqLjeaNpFL+/uJNOnTPN/5NNiBZKe3Np6d+/tGBe/3/2tCmMho+o2xpezRf987f/WM3BKwXQ3l/HjsQ0U3Ttk68HHdy0csJJ5d8uezlpJPztXu7Pq8lAJhR5Jf9H/Xt/5hv/wNYXZ1u77Zq29bD8g6MmLQEZYRyYC7yoqaCWan71LkMX/jqDAK+MQGYu8Jjq13odHvHzVa1YTWsu9JFqXJWPi2eVwpO55/UWP8PIDx+fvSDrgQAAAAAAAAAAAAAAMwqp52gSwAAAACwIM7/f6/n+zpR0GsEAAAAAAAAAAAAAAAAAAAAwuI7AAD//yEAGGc=") lstat(&(0x7f0000000040)='./file0\x00', 0x0) 818.670104ms ago: executing program 3 (id=15403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 596.195306ms ago: executing program 0 (id=15404): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000010020"], 0x24, 0x1) 410.801212ms ago: executing program 3 (id=15405): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @null, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r0, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 386.933936ms ago: executing program 0 (id=15406): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x9}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x34565559, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x2, 0x1, 0x6}}) 203.834196ms ago: executing program 3 (id=15407): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="08000000010003", 0x7) 99.565755ms ago: executing program 8 (id=15408): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000e80)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000ec0)=@can={{}, 0x80, 0x2, 0x4, 0x2}, 0x210}}, 0x4080811) 64.814758ms ago: executing program 0 (id=15409): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 0s ago: executing program 3 (id=15410): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c666f7263652c666f7263652c756d61736b3d30303030303030303030303030303030303030303031302c6e6c733d64656661756c742c00d4023937168c6a03faba6a3338c76bbb2cc123a1966858d8147d2c8f6696a3afb73a4233a7d6d17cbf793d9f3d5dc088fadadfdb7688c6a99fb22e09bb9b1fbe01fd94fae1e35f93fdbc2d26ac49430c71a16ad073e2416238a4b5f8c9877c553b2690fd7148fad9a9579680000d1a5caad58758c05f80c742dfc96510890d6ab62c3d6bc97ea00353e76f0f436500c88ef1b3ec52d6d1b6189c2c09e76160176ee4c21e9bcebdcac3565569f673575a04183f4095c2743d1547baa170a07fb5b39c0af610bbf13953ecb5e354858f41aa5b7bf2fbde", @ANYRESDEC, @ANYRESDEC], 0x44, 0x704, &(0x7f0000001880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x26) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) kernel console output (not intermixed with test programs): sb: bulk message failed: -22 (7/0) [ 1312.377277][ T119] usb 9-1: USB disconnect, device number 20 [ 1312.480782][ T119] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1312.704764][ T8408] loop5: detected capacity change from 0 to 1024 [ 1312.807353][ T978] usb 10-1: string descriptor 0 read error: -71 [ 1312.855205][ T978] uclogic 0003:5543:0045.000B: failed retrieving string descriptor #200: -71 [ 1312.909573][ T978] uclogic 0003:5543:0045.000B: failed retrieving pen parameters: -71 [ 1312.933548][ T978] uclogic 0003:5543:0045.000B: failed probing pen v2 parameters: -71 [ 1312.941709][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1312.960478][ T978] uclogic 0003:5543:0045.000B: failed probing parameters: -71 [ 1312.968201][ T978] uclogic 0003:5543:0045.000B: probe with driver uclogic failed with error -71 [ 1312.990117][ T978] usb 10-1: USB disconnect, device number 19 [ 1313.343175][ T8402] loop8: detected capacity change from 0 to 32768 [ 1313.405212][ T8402] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 1313.438451][ T8402] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1313.596314][ T8402] XFS (loop8): Ending clean mount [ 1313.633673][ T8402] XFS (loop8): Quotacheck needed: Please wait. [ 1313.859768][ T8402] XFS (loop8): Quotacheck: Done. [ 1314.004528][T29125] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1314.083942][ T8410] loop3: detected capacity change from 0 to 40427 [ 1314.103077][ T8445] netlink: 'syz.9.14736': attribute type 1 has an invalid length. [ 1314.111565][ T8410] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1314.123582][ T8410] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1314.134582][ T8445] netlink: 96 bytes leftover after parsing attributes in process `syz.9.14736'. [ 1314.170532][ T8445] netlink: 1 bytes leftover after parsing attributes in process `syz.9.14736'. [ 1314.207532][ T8410] F2FS-fs (loop3): invalid crc value [ 1314.544430][ T8410] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1314.591784][ T8410] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1314.631435][ T8410] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1315.022115][ T8440] loop0: detected capacity change from 0 to 40427 [ 1315.042883][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3475.tmp-b7:5' failed: Read-only file system [ 1315.067381][ T8440] F2FS-fs: heap/no_heap options were deprecated [ 1315.097785][ T8440] F2FS-fs (loop0): build fault injection rate: 23 [ 1315.130567][ T8440] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 1315.151644][ T8440] F2FS-fs (loop0): invalid crc value [ 1315.236378][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3477.tmp-b7:3' failed: Read-only file system [ 1315.256902][ T8440] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 1315.291894][ T5991] udevd[5991]: symlink '../../loop9' '/dev/disk/by-diskseq/3445.tmp-b7:9' failed: Read-only file system [ 1315.312382][ T5993] udevd[5993]: symlink '../../loop5' '/dev/disk/by-diskseq/3475.tmp-b7:5' failed: Read-only file system [ 1315.344052][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3477.tmp-b7:3' failed: Read-only file system [ 1315.362014][ T5992] udevd[5992]: symlink '../../loop0' '/dev/disk/by-diskseq/3479.tmp-b7:0' failed: Read-only file system [ 1315.416351][ T5992] udevd[5992]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 1315.500706][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-diskseq/3475.tmp-b7:5' failed: Read-only file system [ 1315.539546][ T5991] udevd[5991]: symlink '../../loop8' '/dev/disk/by-diskseq/3478.tmp-b7:8' failed: Read-only file system [ 1315.628831][ T8440] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1315.645312][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-diskseq/3445.tmp-b7:9' failed: Read-only file system [ 1315.672677][ T8440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1315.711859][ T8440] F2FS-fs (loop0): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90 [ 1315.775283][ T8440] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 1315.867677][ T8494] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of page_symlink+0x27a/0x440 [ 1315.956342][ C0] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60 [ 1315.967020][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1315.967053][ C0] Tainted: [L]=SOFTLOCKUP [ 1315.967062][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1315.967075][ C0] Call Trace: [ 1315.967084][ C0] [ 1315.967093][ C0] dump_stack_lvl+0xe8/0x150 [ 1315.967128][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 1315.967159][ C0] f2fs_write_end_io+0xcdb/0xff0 [ 1315.967188][ C0] ? blk_update_request+0x57e/0xe60 [ 1315.967231][ C0] blk_update_request+0x57e/0xe60 [ 1315.967271][ C0] blk_mq_end_request+0x3e/0x70 [ 1315.967302][ C0] blk_done_softirq+0x10a/0x160 [ 1315.967333][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1315.967363][ C0] handle_softirqs+0x22a/0x870 [ 1315.967394][ C0] ? schedule+0x90/0x360 [ 1315.967413][ C0] ? run_ksoftirqd+0x36/0x60 [ 1315.967451][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1315.967479][ C0] run_ksoftirqd+0x36/0x60 [ 1315.967517][ C0] smpboot_thread_fn+0x541/0xa50 [ 1315.967553][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1315.967595][ C0] kthread+0x388/0x470 [ 1315.967616][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1315.967689][ C0] ? __pfx_kthread+0x10/0x10 [ 1315.967711][ C0] ret_from_fork+0x51e/0xb90 [ 1315.967744][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1315.967769][ C0] ? __switch_to+0xc7d/0x1450 [ 1315.967799][ C0] ? __pfx_kthread+0x10/0x10 [ 1315.967820][ C0] ret_from_fork_asm+0x1a/0x30 [ 1315.967865][ C0] [ 1315.967874][ C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1316.063440][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.063470][ C0] Tainted: [L]=SOFTLOCKUP [ 1316.063478][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1316.063490][ C0] Call Trace: [ 1316.063499][ C0] [ 1316.063509][ C0] dump_stack_lvl+0xe8/0x150 [ 1316.063615][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 1316.063743][ C0] f2fs_write_end_io+0xcdb/0xff0 [ 1316.063860][ C0] blk_update_request+0x57e/0xe60 [ 1316.063971][ C0] blk_mq_end_request+0x3e/0x70 [ 1316.064056][ C0] blk_done_softirq+0x10a/0x160 [ 1316.064131][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.064208][ C0] handle_softirqs+0x22a/0x870 [ 1316.064283][ C0] ? schedule+0x90/0x360 [ 1316.064336][ C0] ? run_ksoftirqd+0x36/0x60 [ 1316.064431][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.064498][ C0] run_ksoftirqd+0x36/0x60 [ 1316.064571][ C0] smpboot_thread_fn+0x541/0xa50 [ 1316.064634][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.064742][ C0] kthread+0x388/0x470 [ 1316.064796][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1316.064871][ C0] ? __pfx_kthread+0x10/0x10 [ 1316.064927][ C0] ret_from_fork+0x51e/0xb90 [ 1316.065012][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1316.065105][ C0] ? __switch_to+0xc7d/0x1450 [ 1316.065179][ C0] ? __pfx_kthread+0x10/0x10 [ 1316.065234][ C0] ret_from_fork_asm+0x1a/0x30 [ 1316.065358][ C0] [ 1316.065380][ C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1316.273072][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.273107][ C0] Tainted: [L]=SOFTLOCKUP [ 1316.273116][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1316.273128][ C0] Call Trace: [ 1316.273137][ C0] [ 1316.273146][ C0] dump_stack_lvl+0xe8/0x150 [ 1316.273178][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 1316.273210][ C0] f2fs_write_end_io+0xcdb/0xff0 [ 1316.273253][ C0] blk_update_request+0x57e/0xe60 [ 1316.273296][ C0] blk_mq_end_request+0x3e/0x70 [ 1316.273327][ C0] blk_done_softirq+0x10a/0x160 [ 1316.273359][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.273388][ C0] handle_softirqs+0x22a/0x870 [ 1316.273432][ C0] ? schedule+0x90/0x360 [ 1316.273451][ C0] ? run_ksoftirqd+0x36/0x60 [ 1316.273488][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.273517][ C0] run_ksoftirqd+0x36/0x60 [ 1316.273545][ C0] smpboot_thread_fn+0x541/0xa50 [ 1316.273585][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.273623][ C0] kthread+0x388/0x470 [ 1316.273645][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1316.273673][ C0] ? __pfx_kthread+0x10/0x10 [ 1316.273695][ C0] ret_from_fork+0x51e/0xb90 [ 1316.273727][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1316.273754][ C0] ? __switch_to+0xc7d/0x1450 [ 1316.273783][ C0] ? __pfx_kthread+0x10/0x10 [ 1316.273805][ C0] ret_from_fork_asm+0x1a/0x30 [ 1316.273851][ C0] [ 1316.273861][ C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1316.378605][T29106] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1316.384075][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.384161][ C0] Tainted: [L]=SOFTLOCKUP [ 1316.384183][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1316.384224][ C0] Call Trace: [ 1316.384256][ C0] [ 1316.384281][ C0] dump_stack_lvl+0xe8/0x150 [ 1316.384379][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 1316.384472][ C0] f2fs_write_end_io+0xcdb/0xff0 [ 1316.384591][ C0] blk_update_request+0x57e/0xe60 [ 1316.384710][ C0] blk_mq_end_request+0x3e/0x70 [ 1316.384794][ C0] blk_done_softirq+0x10a/0x160 [ 1316.384869][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.384931][ C0] handle_softirqs+0x22a/0x870 [ 1316.385015][ C0] ? schedule+0x90/0x360 [ 1316.385067][ C0] ? run_ksoftirqd+0x36/0x60 [ 1316.385170][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.385245][ C0] run_ksoftirqd+0x36/0x60 [ 1316.385335][ C0] smpboot_thread_fn+0x541/0xa50 [ 1316.385440][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.385552][ C0] kthread+0x388/0x470 [ 1316.385623][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1316.385743][ C0] ? __pfx_kthread+0x10/0x10 [ 1316.385804][ C0] ret_from_fork+0x51e/0xb90 [ 1316.385890][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1316.385956][ C0] ? __switch_to+0xc7d/0x1450 [ 1316.386029][ C0] ? __pfx_kthread+0x10/0x10 [ 1316.386092][ C0] ret_from_fork_asm+0x1a/0x30 [ 1316.386209][ C0] [ 1316.386232][ C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1316.537314][T29106] usb 10-1: Using ep0 maxpacket: 16 [ 1316.540612][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.540697][ C0] Tainted: [L]=SOFTLOCKUP [ 1316.540719][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1316.540760][ C0] Call Trace: [ 1316.540783][ C0] [ 1316.540825][ C0] dump_stack_lvl+0xe8/0x150 [ 1316.540913][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 1316.540999][ C0] f2fs_write_end_io+0xcdb/0xff0 [ 1316.541122][ C0] blk_update_request+0x57e/0xe60 [ 1316.541229][ C0] blk_mq_end_request+0x3e/0x70 [ 1316.541312][ C0] blk_done_softirq+0x10a/0x160 [ 1316.541388][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.541471][ C0] handle_softirqs+0x22a/0x870 [ 1316.541541][ C0] ? schedule+0x90/0x360 [ 1316.541593][ C0] ? run_ksoftirqd+0x36/0x60 [ 1316.541688][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.541762][ C0] run_ksoftirqd+0x36/0x60 [ 1316.541845][ C0] smpboot_thread_fn+0x541/0xa50 [ 1316.541948][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1316.542057][ C0] kthread+0x388/0x470 [ 1316.542118][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1316.542191][ C0] ? __pfx_kthread+0x10/0x10 [ 1316.542245][ C0] ret_from_fork+0x51e/0xb90 [ 1316.542328][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1316.542393][ C0] ? __switch_to+0xc7d/0x1450 [ 1316.542467][ C0] ? __pfx_kthread+0x10/0x10 [ 1316.542522][ C0] ret_from_fork_asm+0x1a/0x30 [ 1316.542635][ C0] [ 1316.542665][ C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1316.561429][T29106] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.595995][ T452] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint [ 1316.798887][T29106] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1316.814250][T29106] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1316.827748][T29106] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.838989][T29106] usb 10-1: config 0 descriptor?? [ 1317.051019][ T8510] tipc: Started in network mode [ 1317.101895][ T8510] tipc: Node identity 00000000000000000000007ade000001, cluster identity 4711 [ 1317.143960][ T8510] tipc: Enabling of bearer rejected, failed to enable media [ 1317.241562][T29106] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.000C/input/input100 [ 1317.394841][T29106] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1317.491021][T29106] usb 10-1: USB disconnect, device number 20 [ 1317.642551][ T8517] fido_id[8517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1317.723911][ T8526] loop3: detected capacity change from 0 to 64 [ 1317.733968][ T8525] loop8: detected capacity change from 0 to 1024 [ 1317.830719][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14771'. [ 1317.834208][ T8525] hfsplus: request for non-existent node 262144 in B*Tree [ 1317.879129][ T8525] hfsplus: request for non-existent node 262144 in B*Tree [ 1318.120703][ T8509] loop5: detected capacity change from 0 to 32768 [ 1318.226059][ T8537] netlink: 'syz.3.14774': attribute type 3 has an invalid length. [ 1318.261793][ T8509] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1318.441618][ T8509] XFS (loop5): Ending clean mount [ 1318.524836][ T8550] netlink: 256 bytes leftover after parsing attributes in process `syz.3.14778'. [ 1318.611865][T20695] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1318.898846][ T8530] loop0: detected capacity change from 0 to 32768 [ 1318.932588][ T8530] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.14772 (8530) [ 1319.035778][ T8530] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1319.075314][ T8530] BTRFS info (device loop0): using sha256 checksum algorithm [ 1319.377056][ T8530] BTRFS info (device loop0): rebuilding free space tree [ 1319.408475][ T8560] loop8: detected capacity change from 0 to 8192 [ 1319.502981][ T8530] BTRFS info (device loop0): disabling free space tree [ 1319.525731][ T8530] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1319.574504][ T8530] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1319.664513][ T8530] BTRFS info (device loop0): enabling ssd optimizations [ 1319.687361][ T8530] BTRFS info (device loop0): turning on sync discard [ 1319.714013][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3489.tmp-b7:8' failed: Read-only file system [ 1319.723003][ T8530] BTRFS info (device loop0): force clearing of disk cache [ 1319.745155][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:8' failed: Read-only file system [ 1319.779068][ T8547] loop9: detected capacity change from 0 to 32768 [ 1319.941800][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3489.tmp-b7:8' failed: Read-only file system [ 1320.020037][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3489.tmp-b7:8' failed: Read-only file system [ 1320.044526][ T5991] udevd[5991]: symlink '../../loop9' '/dev/disk/by-diskseq/3490.tmp-b7:9' failed: Read-only file system [ 1320.077550][ T5991] udevd[5991]: symlink '../../loop9' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:9' failed: Read-only file system [ 1320.104348][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3489.tmp-b7:8' failed: Read-only file system [ 1320.149883][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-diskseq/3491.tmp-b7:8' failed: Read-only file system [ 1320.190020][ T452] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1320.419734][ T5992] udevd[5992]: symlink '../../loop0' '/dev/disk/by-diskseq/3488.tmp-b7:0' failed: Read-only file system [ 1320.444051][ T5824] udevd[5824]: symlink '../../loop9' '/dev/disk/by-diskseq/3490.tmp-b7:9' failed: Read-only file system [ 1320.818453][ T8584] loop3: detected capacity change from 0 to 40427 [ 1320.847067][ T8603] loop5: detected capacity change from 0 to 1024 [ 1320.854772][ T8584] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1320.880138][ T8584] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1320.954207][ T8584] F2FS-fs (loop3): invalid crc value [ 1321.267921][ T8584] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1321.337178][ T8584] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1321.360408][ T8618] loop5: detected capacity change from 0 to 256 [ 1321.378245][ T8584] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1321.418005][ T8618] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb869ebc2, utbl_chksum : 0xe619d30d) [ 1321.568202][ T8620] loop9: detected capacity change from 0 to 1024 [ 1321.753956][ T8620] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1321.955352][T29960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1322.084725][ T8633] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1322.084725][ T8633] program syz.5.14806 not setting count and/or reply_len properly [ 1322.157633][T29106] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1322.339670][T29106] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1322.362696][T29106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.370858][T29106] usb 1-1: Product: syz [ 1322.410176][T29106] usb 1-1: Manufacturer: syz [ 1322.414860][T29106] usb 1-1: SerialNumber: syz [ 1322.469013][T29106] usb 1-1: config 0 descriptor?? [ 1322.491225][ T8647] netlink: 'syz.3.14811': attribute type 178 has an invalid length. [ 1322.511485][T29106] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1322.560577][T29106] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1322.590474][T29106] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1322.605149][T29106] usb 1-1: media controller created [ 1322.670423][T29106] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1322.709080][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14813'. [ 1322.869477][ T8653] loop3: detected capacity change from 0 to 2048 [ 1322.876259][T29106] DVB: Unable to find symbol mt352_attach() [ 1322.934350][ T8653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1323.070956][ T8653] [syz.3.14815/8653] FS: loop3 File: /file1 would truncate fibmap result [ 1323.103692][T29106] DVB: Unable to find symbol nxt6000_attach() [ 1323.119371][T29106] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1323.187659][T29106] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input101 [ 1323.249105][T29106] dvb-usb: schedule remote query interval to 1000 msecs. [ 1323.256220][T29106] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1323.325921][T29106] dvb-usb: bulk message failed: -22 (7/0) [ 1323.347963][T29106] dvb-usb: bulk message failed: -22 (7/0) [ 1323.357672][ T8662] loop9: detected capacity change from 0 to 2048 [ 1323.398162][T29106] usb 1-1: USB disconnect, device number 5 [ 1323.475972][ T8669] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1323.651078][T29106] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1323.872143][ T5986] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1324.079799][ T5986] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1324.099383][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.124579][ T5986] usb 6-1: config 0 descriptor?? [ 1324.535046][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-diskseq/3491.tmp-b7:8' failed: Read-only file system [ 1324.568035][ T5986] konepure 0003:1E7D:2DB4.000D: hidraw0: USB HID v0.fd Device [HID 1e7d:2db4] on usb-dummy_hcd.5-1/input0 [ 1324.622367][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-diskseq/3504.tmp-b7:3' failed: Read-only file system [ 1324.658756][ T5991] udevd[5991]: symlink '../../loop9' '/dev/disk/by-diskseq/3505.tmp-b7:9' failed: Read-only file system [ 1324.741655][ T8702] mkiss: ax0: crc mode is auto. [ 1324.790113][ T5986] usb 6-1: USB disconnect, device number 40 [ 1324.817189][ T8675] loop0: detected capacity change from 0 to 40427 [ 1324.861248][ T8675] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 1324.898183][ T8699] fido_id[8699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1324.906314][ T8675] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1324.943465][ T5991] udevd[5991]: symlink '../../loop8' '/dev/disk/by-diskseq/3491.tmp-b7:8' failed: Read-only file system [ 1324.953720][ T8675] F2FS-fs (loop0): Image doesn't support compression [ 1324.982713][ T8675] F2FS-fs (loop0): build fault injection rate: 690 [ 1324.989313][ T8675] F2FS-fs (loop0): build fault injection type: 0x35f7 [ 1325.003203][ T5993] udevd[5993]: symlink '../../loop3' '/dev/disk/by-diskseq/3504.tmp-b7:3' failed: Read-only file system [ 1325.051639][ T6668] udevd[6668]: symlink '../../loop9' '/dev/disk/by-diskseq/3505.tmp-b7:9' failed: Read-only file system [ 1325.065212][ T8675] F2FS-fs (loop0): invalid crc value [ 1325.161845][ T5992] udevd[5992]: symlink '../../loop0' '/dev/disk/by-diskseq/3506.tmp-b7:0' failed: Read-only file system [ 1325.205102][ T8707] loop3: detected capacity change from 0 to 4096 [ 1325.226996][ T5992] udevd[5992]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 1325.249838][ T8707] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1325.356277][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-diskseq/3505.tmp-b7:9' failed: Read-only file system [ 1325.382360][T27805] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1325.398560][ T8675] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1325.442252][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3507.tmp-b7:3' failed: Read-only file system [ 1325.454544][ T8675] F2FS-fs (loop0): Start checkpoint disabled! [ 1325.483596][ T8675] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1325.518526][ T8675] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1325.558613][ T8675] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1325.587152][T27805] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1325.643445][T27805] usb 9-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 1325.690431][T27805] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.796859][T27805] usb 9-1: config 0 descriptor?? [ 1325.902702][ T37] kworker/u8:3: attempt to access beyond end of device [ 1325.902702][ T37] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1325.961078][ T8728] xt_hashlimit: max too large, truncated to 1048576 [ 1325.989592][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.989629][ T37] Tainted: [L]=SOFTLOCKUP [ 1325.989637][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1325.989651][ T37] Workqueue: writeback wb_workfn (flush-7:0) [ 1325.989685][ T37] Call Trace: [ 1325.989694][ T37] [ 1325.989704][ T37] dump_stack_lvl+0xe8/0x150 [ 1325.989737][ T37] f2fs_handle_critical_error+0x37c/0x540 [ 1325.989771][ T37] f2fs_write_end_io+0xcdb/0xff0 [ 1325.989821][ T37] __submit_merged_bio+0x256/0x700 [ 1325.989856][ T37] __submit_merged_write_cond+0x3c3/0x4e0 [ 1325.989892][ T37] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1325.989944][ T37] f2fs_write_data_pages+0x2970/0x35e0 [ 1325.990021][ T37] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1325.990065][ T37] ? arch_stack_walk+0x11b/0x150 [ 1325.990130][ T37] ? kasan_save_track+0x4f/0x80 [ 1325.990150][ T37] ? kasan_save_track+0x3e/0x80 [ 1325.990169][ T37] ? kasan_save_free_info+0x46/0x50 [ 1325.990196][ T37] ? kmem_cache_free+0x187/0x630 [ 1325.990216][ T37] ? __es_remove_extent+0xabb/0x1da0 [ 1325.990242][ T37] ? ext4_es_insert_extent+0x4f6/0x2fc0 [ 1325.990269][ T37] ? ext4_map_blocks+0x7cd/0x11d0 [ 1325.990293][ T37] ? ext4_convert_unwritten_extents+0x2be/0x5f0 [ 1325.990317][ T37] ? ext4_convert_unwritten_io_end_vec+0xff/0x170 [ 1325.990381][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1325.990411][ T37] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1325.990442][ T37] do_writepages+0x32e/0x550 [ 1325.990477][ T37] ? reacquire_held_locks+0x104/0x190 [ 1325.990508][ T37] ? writeback_sb_inodes+0x43d/0x19a0 [ 1325.990541][ T37] __writeback_single_inode+0x133/0x11a0 [ 1325.990570][ T37] ? do_raw_spin_unlock+0xf5/0x210 [ 1325.990613][ T37] writeback_sb_inodes+0x944/0x19a0 [ 1325.990669][ T37] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1325.990694][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 1325.990759][ T37] ? rcu_is_watching+0x15/0xb0 [ 1325.990801][ T37] wb_writeback+0x456/0xb70 [ 1325.990832][ T37] ? queue_io+0x1f1/0x4a0 [ 1325.990868][ T37] ? __pfx_wb_writeback+0x10/0x10 [ 1325.990891][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 1325.990932][ T37] wb_workfn+0x414/0xf50 [ 1325.990958][ T37] ? look_up_lock_class+0x57/0x110 [ 1325.991004][ T37] ? __pfx_wb_workfn+0x10/0x10 [ 1325.991032][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 1325.991057][ T37] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1325.991105][ T37] ? process_one_work+0x87c/0x1650 [ 1325.991132][ T37] process_one_work+0x949/0x1650 [ 1325.991184][ T37] ? __pfx_process_one_work+0x10/0x10 [ 1325.991210][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 1325.991251][ T37] worker_thread+0xb46/0x1140 [ 1325.991291][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1325.991330][ T37] kthread+0x388/0x470 [ 1325.991368][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1325.991394][ T37] ? __pfx_kthread+0x10/0x10 [ 1325.991417][ T37] ret_from_fork+0x51e/0xb90 [ 1325.991449][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1325.991476][ T37] ? __switch_to+0xc7d/0x1450 [ 1325.991506][ T37] ? __pfx_kthread+0x10/0x10 [ 1325.991529][ T37] ret_from_fork_asm+0x1a/0x30 [ 1325.991580][ T37] [ 1325.993090][ T37] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1326.421784][ T8734] loop9: detected capacity change from 0 to 1024 [ 1326.552816][ T8731] loop5: detected capacity change from 0 to 4096 [ 1326.611182][T27805] logitech 0003:046D:C626.000E: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.8-1/input0 [ 1326.673618][ T8737] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1326.848835][T27805] usb 9-1: USB disconnect, device number 21 [ 1326.945160][ T8738] fido_id[8738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1326.987115][ T8744] loop3: detected capacity change from 0 to 512 [ 1327.014650][ T8744] EXT4-fs: Ignoring removed nobh option [ 1327.090079][ T8744] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1327.129538][ T8744] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.14853: iget: bad i_size value: -3674898675588399094 [ 1327.194213][ T8750] loop9: detected capacity change from 0 to 64 [ 1327.219454][ T8744] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1327.219981][ T8744] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.14853: couldn't read orphan inode 15 (err -117) [ 1327.229405][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1327.229433][ C0] EXT4-fs (loop3): initial error at time 1786892792: ext4_orphan_get:1391: inode 15 [ 1327.229467][ C0] EXT4-fs (loop3): last error at time 1786892792: ext4_orphan_get:1391: inode 15 [ 1327.312001][ T8744] loop3: lost filesystem error report for type 5 error -117 [ 1327.340374][ T8744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1327.596272][ T30] audit: type=1400 audit(1786892792.835:1391): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8755 comm="syz.8.14858" [ 1327.746638][ T1004] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 1327.806048][ T1004] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 1327.833755][ T1004] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1327.833755][ T1004] [ 1327.891331][ T1004] EXT4-fs (loop3): Total free blocks count 0 [ 1327.930893][ T1004] EXT4-fs (loop3): Free/Dirty block details [ 1327.964216][ T1004] EXT4-fs (loop3): free_blocks=0 [ 1327.969241][ T1004] EXT4-fs (loop3): dirty_blocks=1 [ 1327.993781][ T1004] EXT4-fs (loop3): Block reservation details [ 1328.001227][ T8771] loop0: detected capacity change from 0 to 512 [ 1328.001838][ T1004] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1328.050855][ T6043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.147915][ T8771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.216486][ T8771] ext4 filesystem being mounted at /600/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.252355][ T8779] loop3: detected capacity change from 0 to 128 [ 1328.299048][ T8779] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1328.327292][ T8779] ext4 filesystem being mounted at /3174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.361932][ T8771] EXT4-fs (loop0): resizing filesystem from 256 to 2 blocks [ 1328.369726][ T8771] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 1328.471435][ T452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.516894][ T6043] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1328.546750][ T8784] netlink: 224 bytes leftover after parsing attributes in process `syz.8.14870'. [ 1328.557062][ T8784] tipc: Enabling of bearer rejected, failed to enable media [ 1328.981799][ T8793] loop0: detected capacity change from 0 to 4096 [ 1329.000093][ T8793] ntfs3(loop0): ino=3, Correct links count -> 2. [ 1329.078188][ T8802] ip6gretap0: entered promiscuous mode [ 1329.097692][ T8802] macsec1: entered promiscuous mode [ 1329.107055][ T8802] macsec1: entered allmulticast mode [ 1329.137177][ T8802] ip6gretap0: entered allmulticast mode [ 1329.186641][ T8802] ip6gretap0: left allmulticast mode [ 1329.196881][ T8805] loop5: detected capacity change from 0 to 256 [ 1329.213376][ T8802] ip6gretap0: left promiscuous mode [ 1329.213596][ T8793] ntfs3(loop0): ino=1a, mi_enum_attr [ 1329.229053][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3522.tmp-b7:0' failed: Read-only file system [ 1329.247846][ T8793] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1329.284080][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1329.314708][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:0' failed: Read-only file system [ 1329.331051][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-diskseq/3523.tmp-b7:5' failed: Read-only file system [ 1329.361784][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880313f8000 (11)(syz0) rdma_ndev=ffff88806444c000 (32)(lo) cookie=ffff8880330c2000 (6)(macsec1) start [ 1329.396995][ T8805] FAT-fs (loop5): Directory bread(block 64) failed [ 1329.408289][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880313f8000 (11)(syz0) rdma_ndev=ffff88806444c000 (32)(lo) cookie=ffff8880330c2000 (6)(macsec1) end [ 1329.416006][ T8805] FAT-fs (loop5): Directory bread(block 65) failed [ 1329.441250][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14869'. [ 1329.463387][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888031758000 (11)(syz2) rdma_ndev=ffff888045334000 (26)(wg2) cookie=ffff8880330c2000 (3)(macsec1) start [ 1329.468211][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-diskseq/3491.tmp-b7:8' failed: Read-only file system [ 1329.494912][ T8805] FAT-fs (loop5): Directory bread(block 66) failed [ 1329.514869][ T8805] FAT-fs (loop5): Directory bread(block 67) failed [ 1329.539451][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888031758000 (11)(syz2) rdma_ndev=ffff888045334000 (26)(wg2) cookie=ffff8880330c2000 (3)(macsec1) end [ 1329.561535][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-diskseq/3516.tmp-b7:9' failed: Read-only file system [ 1329.569829][ T8805] FAT-fs (loop5): Directory bread(block 68) failed [ 1329.581200][ T8805] FAT-fs (loop5): Directory bread(block 69) failed [ 1329.588423][ T8805] FAT-fs (loop5): Directory bread(block 70) failed [ 1329.608589][ T8805] FAT-fs (loop5): Directory bread(block 71) failed [ 1329.650474][ T8805] FAT-fs (loop5): Directory bread(block 72) failed [ 1329.668139][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3522.tmp-b7:0' failed: Read-only file system [ 1329.691604][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3522.tmp-b7:0' failed: Read-only file system [ 1329.706868][ T8805] FAT-fs (loop5): Directory bread(block 73) failed [ 1329.717260][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3524.tmp-b7:0' failed: Read-only file system [ 1329.767393][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-diskseq/3491.tmp-b7:8' failed: Read-only file system [ 1330.021929][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14884'. [ 1330.394105][ T8838] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1330.394105][ T8838] The task syz.8.14889 (8838) triggered the difference, watch for misbehavior. [ 1330.648196][T27805] hid-generic 0002:0000:0006.000F: unknown main item tag 0x0 [ 1330.671521][T27805] hid-generic 0002:0000:0006.000F: unknown main item tag 0x0 [ 1330.684357][T27805] hid-generic 0002:0000:0006.000F: unknown main item tag 0x0 [ 1330.693229][T27805] hid-generic 0002:0000:0006.000F: unknown main item tag 0x0 [ 1330.703130][T27805] hid-generic 0002:0000:0006.000F: unknown main item tag 0x0 [ 1330.712733][T27805] hid-generic 0002:0000:0006.000F: unknown main item tag 0x0 [ 1330.732402][T27805] hid-generic 0002:0000:0006.000F: unknown main item tag 0x0 [ 1330.768105][T27805] hid-generic 0002:0000:0006.000F: unknown main item tag 0x0 [ 1330.777624][T27805] hid-generic 0002:0000:0006.000F: unknown main item tag 0x0 [ 1330.799045][T27805] hid-generic 0002:0000:0006.000F: unknown main item tag 0x0 [ 1330.859602][T27805] hid-generic 0002:0000:0006.000F: hidraw0: HID va.68 Device [syz1] on syz1 [ 1331.178077][ T8856] fido_id[8856]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1331.415502][ T8869] loop0: detected capacity change from 0 to 64 [ 1331.430745][ T8866] syz.5.14906 (8866) used obsolete PPPIOCDETACH ioctl [ 1331.574014][ T8871] Zero length message leads to an empty skb [ 1331.896485][ T8884] loop3: detected capacity change from 0 to 128 [ 1331.944210][ T8884] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1331.944274][ T8884] hpfs: filesystem error: improperly stopped [ 1331.944294][ T8884] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1331.944313][ T8884] hpfs: You really don't want any checks? You are crazy... [ 1331.944701][ T8884] hpfs: hpfs_map_sector(): read error [ 1331.944716][ T8884] hpfs: code page support is disabled [ 1331.944818][ T8884] hpfs: hpfs_map_4sectors(): unaligned read [ 1331.944890][ T8884] hpfs: hpfs_map_4sectors(): unaligned read [ 1331.944903][ T8884] hpfs: filesystem error: unable to find root dir [ 1331.991376][ T8884] hpfs: hpfs_map_4sectors(): unaligned read [ 1331.992558][ T8884] hpfs: hpfs_map_sector(): read error [ 1332.488755][ T8897] sctp: [Deprecated]: syz.3.14920 (pid 8897) Use of int in max_burst socket option. [ 1332.488755][ T8897] Use struct sctp_assoc_value instead [ 1332.507404][ T8898] loop9: detected capacity change from 0 to 512 [ 1332.531726][ T8898] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1332.561644][ T8898] EXT4-fs (loop9): warning: maximal mount count reached, running e2fsck is recommended [ 1332.622163][ T8898] EXT4-fs error (device loop9): ext4_orphan_get:1391: comm syz.9.14921: inode #15: comm syz.9.14921: iget: illegal inode # [ 1332.716262][ T8883] loop0: detected capacity change from 0 to 32768 [ 1332.746362][T29996] kernel read not supported for file /media2 (pid: 29996 comm: kworker/1:1) [ 1332.756549][ T8898] loop9: lost filesystem error report for type 5 error -117 [ 1332.757152][ T8898] EXT4-fs (loop9): Remounting filesystem read-only [ 1332.764542][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1332.764565][ C0] EXT4-fs (loop9): initial error at time 1786892798: ext4_orphan_get:1391 [ 1332.764588][ C0] EXT4-fs (loop9): last error at time 1786892798: ext4_orphan_get:1391 [ 1332.869744][ T8883] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1332.911617][ T8898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1333.049838][ T8883] XFS (loop0): Ending clean mount [ 1333.100850][ T8883] XFS (loop0): Quotacheck needed: Please wait. [ 1333.251071][T29960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.322685][ T8883] XFS (loop0): Quotacheck: Done. [ 1333.507828][ T8931] loop3: detected capacity change from 0 to 128 [ 1333.693435][ T452] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1333.702977][ T8935] loop8: detected capacity change from 0 to 1024 [ 1333.894171][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3533.tmp-b7:3' failed: Read-only file system [ 1333.925159][ T8935] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1333.941494][ T5993] udevd[5993]: symlink '../../loop5' '/dev/disk/by-diskseq/3525.tmp-b7:5' failed: Read-only file system [ 1333.978332][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3533.tmp-b7:3' failed: Read-only file system [ 1334.003589][ T8949] loop5: detected capacity change from 0 to 256 [ 1334.008514][ T5991] udevd[5991]: symlink '../../loop0' '/dev/disk/by-diskseq/3531.tmp-b7:0' failed: Read-only file system [ 1334.050774][T27805] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1334.058816][ T8935] ext4 filesystem being mounted at /983/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1334.077673][ T8949] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 1334.099977][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3534.tmp-b7:8' failed: Read-only file system [ 1334.136152][ T5991] udevd[5991]: symlink '../../loop0' '/dev/disk/by-diskseq/3531.tmp-b7:0' failed: Read-only file system [ 1334.140798][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3535.tmp-b7:3' failed: Read-only file system [ 1334.163611][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1334.177711][ T30] audit: type=1800 audit(1786892799.894:1392): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.14934" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1334.216532][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:8' failed: Read-only file system [ 1334.227011][ T5991] udevd[5991]: symlink '../../loop0' '/dev/disk/by-diskseq/3536.tmp-b7:0' failed: Read-only file system [ 1334.286834][ T8951] tipc: Started in network mode [ 1334.291782][ T8951] tipc: Node identity e0000002, cluster identity 4711 [ 1334.309683][T27805] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.313414][ T30] audit: type=1800 audit(1786892800.045:1393): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14940" name="file1" dev="loop5" ino=1048928 res=0 errno=0 [ 1334.355390][ T8951] tipc: Enabling of bearer rejected, failed to enable media [ 1334.373853][T27805] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.413669][T27805] usb 10-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1334.437702][T27805] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.455106][T29125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1334.520539][T27805] usb 10-1: config 0 descriptor?? [ 1334.965126][T27805] kye 0003:0458:0153.0010: hidraw0: USB HID v2.00 Device [HID 0458:0153] on usb-dummy_hcd.9-1/input0 [ 1335.118063][T29996] usb 10-1: USB disconnect, device number 21 [ 1335.233147][ T8970] fido_id[8970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1335.349612][ T8977] loop5: detected capacity change from 0 to 64 [ 1335.838903][ T8961] loop0: detected capacity change from 0 to 40427 [ 1335.925518][ T8961] F2FS-fs (loop0): invalid crc value [ 1336.236267][ T30] audit: type=1326 audit(1786892802.094:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.9.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1336.325205][ T30] audit: type=1326 audit(1786892802.158:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.9.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1336.387494][ T30] audit: type=1326 audit(1786892802.169:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.9.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3243b5b78e code=0x7ffc0000 [ 1336.428220][ T8961] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1336.446260][ T8961] F2FS-fs (loop0): Start checkpoint disabled! [ 1336.454388][ T8961] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 1336.474771][ T30] audit: type=1326 audit(1786892802.180:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.9.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3243b9c1d7 code=0x7ffc0000 [ 1336.524240][ T8961] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1336.584660][ T30] audit: type=1326 audit(1786892802.180:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.9.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1336.669677][ T30] audit: type=1326 audit(1786892802.180:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.9.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3243b9c1d7 code=0x7ffc0000 [ 1336.726970][ T30] audit: type=1326 audit(1786892802.180:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.9.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3243b5b78e code=0x7ffc0000 [ 1336.757660][ T12] kworker/u8:0: attempt to access beyond end of device [ 1336.757660][ T12] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1336.783581][ T30] audit: type=1326 audit(1786892802.180:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9002 comm="syz.9.14964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1336.818312][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1336.818350][ T12] Tainted: [L]=SOFTLOCKUP [ 1336.818359][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1336.818375][ T12] Workqueue: writeback wb_workfn (flush-7:0) [ 1336.818424][ T12] Call Trace: [ 1336.818434][ T12] [ 1336.818445][ T12] dump_stack_lvl+0xe8/0x150 [ 1336.818483][ T12] f2fs_handle_critical_error+0x37c/0x540 [ 1336.818521][ T12] f2fs_write_end_io+0xcdb/0xff0 [ 1336.818574][ T12] __submit_merged_bio+0x256/0x700 [ 1336.818611][ T12] __submit_merged_write_cond+0x3c3/0x4e0 [ 1336.818650][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1336.818708][ T12] f2fs_write_data_pages+0x2970/0x35e0 [ 1336.818800][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1336.818846][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1336.818922][ T12] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1336.819005][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1336.819041][ T12] do_writepages+0x32e/0x550 [ 1336.819083][ T12] ? reacquire_held_locks+0x104/0x190 [ 1336.819118][ T12] ? writeback_sb_inodes+0x43d/0x19a0 [ 1336.819156][ T12] __writeback_single_inode+0x133/0x11a0 [ 1336.819188][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 1336.819220][ T12] writeback_sb_inodes+0x944/0x19a0 [ 1336.819257][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 1336.819304][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 1336.819342][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1336.819369][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1336.819438][ T12] ? rcu_is_watching+0x15/0xb0 [ 1336.819482][ T12] wb_writeback+0x456/0xb70 [ 1336.819516][ T12] ? queue_io+0x1f1/0x4a0 [ 1336.819556][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 1336.819582][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1336.819627][ T12] wb_workfn+0x414/0xf50 [ 1336.819655][ T12] ? look_up_lock_class+0x57/0x110 [ 1336.819700][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 1336.819729][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1336.819757][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1336.819816][ T12] ? process_one_work+0x87c/0x1650 [ 1336.819846][ T12] process_one_work+0x949/0x1650 [ 1336.819902][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1336.819931][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1336.819976][ T12] worker_thread+0xb46/0x1140 [ 1336.820043][ T12] kthread+0x388/0x470 [ 1336.820069][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1336.820099][ T12] ? __pfx_kthread+0x10/0x10 [ 1336.820125][ T12] ret_from_fork+0x51e/0xb90 [ 1336.820162][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1336.820192][ T12] ? __switch_to+0xc7d/0x1450 [ 1336.820225][ T12] ? __pfx_kthread+0x10/0x10 [ 1336.820251][ T12] ret_from_fork_asm+0x1a/0x30 [ 1336.820308][ T12] [ 1336.820319][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1337.164800][ T8991] loop8: detected capacity change from 0 to 32768 [ 1337.224091][ T8991] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1337.342472][ T8991] XFS (loop8): Ending clean mount [ 1337.396842][ T8991] XFS (loop8): Quotacheck needed: Please wait. [ 1337.580877][ T8991] XFS (loop8): Quotacheck: Done. [ 1337.666743][ T9001] loop5: detected capacity change from 0 to 32768 [ 1337.679857][T29125] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1337.686149][ T119] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1337.811652][ T9001] overlayfs: upper fs needs to support d_type. [ 1337.856575][ T9008] loop9: detected capacity change from 0 to 40427 [ 1337.863655][ T9001] overlayfs: upper fs does not support tmpfile. [ 1337.907131][ T9008] F2FS-fs (loop9): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 1337.922244][ T119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.951187][ T9001] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1337.958502][ T119] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1337.983921][ T9008] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1338.003327][ T9008] F2FS-fs (loop9): invalid crc value [ 1338.008186][ T119] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1338.038917][ T119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.049854][ T9001] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 1338.049854][ T9001] [ 1338.075719][ T119] usb 4-1: config 0 descriptor?? [ 1338.121335][ T9001] ERROR: (device loop5): remounting filesystem as read-only [ 1338.149308][ T9001] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 1338.344753][ T9008] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1338.376103][ T9008] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 1338.393824][ T9008] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1338.443381][ T9033] loop8: detected capacity change from 0 to 64 [ 1338.548213][T29960] syz-executor: attempt to access beyond end of device [ 1338.548213][T29960] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1338.588852][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-diskseq/3548.tmp-b7:8' failed: Read-only file system [ 1338.600114][T29960] CPU: 0 UID: 0 PID: 29960 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1338.600149][T29960] Tainted: [L]=SOFTLOCKUP [ 1338.600157][T29960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1338.600169][T29960] Call Trace: [ 1338.600178][T29960] [ 1338.600186][T29960] dump_stack_lvl+0xe8/0x150 [ 1338.600222][T29960] f2fs_handle_critical_error+0x37c/0x540 [ 1338.600257][T29960] f2fs_write_end_io+0xcdb/0xff0 [ 1338.600307][T29960] __submit_merged_bio+0x256/0x700 [ 1338.600340][T29960] __submit_merged_write_cond+0x3c3/0x4e0 [ 1338.600375][T29960] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1338.600426][T29960] f2fs_write_data_pages+0x2970/0x35e0 [ 1338.600494][T29960] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1338.600639][T29960] ? is_bpf_text_address+0x292/0x2b0 [ 1338.600710][T29960] ? is_bpf_text_address+0x26/0x2b0 [ 1338.600793][T29960] ? __lock_acquire+0x6b5/0x2cf0 [ 1338.600901][T29960] ? __lock_acquire+0x6b5/0x2cf0 [ 1338.601002][T29960] ? do_raw_spin_lock+0x12b/0x2f0 [ 1338.601096][T29960] ? do_raw_spin_unlock+0xf5/0x210 [ 1338.601151][T29960] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1338.601234][T29960] do_writepages+0x32e/0x550 [ 1338.601338][T29960] ? do_raw_spin_unlock+0xf5/0x210 [ 1338.601404][T29960] filemap_fdatawrite+0x1e9/0x2f0 [ 1338.601495][T29960] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1338.601695][T29960] ? do_raw_spin_unlock+0xf5/0x210 [ 1338.601754][T29960] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1338.601871][T29960] f2fs_write_checkpoint+0x9cf/0x2680 [ 1338.602070][T29960] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1338.602314][T29960] kill_f2fs_super+0x314/0x720 [ 1338.602414][T29960] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1338.602526][T29960] ? lockdep_hardirqs_on+0x7a/0x110 [ 1338.602625][T29960] deactivate_locked_super+0xbc/0x130 [ 1338.602716][T29960] cleanup_mnt+0x437/0x4d0 [ 1338.602780][T29960] ? _raw_spin_unlock_irq+0x23/0x50 [ 1338.602844][T29960] task_work_run+0x1d9/0x270 [ 1338.602916][T29960] ? __pfx_task_work_run+0x10/0x10 [ 1338.603013][T29960] exit_to_user_mode_loop+0xed/0x480 [ 1338.603076][T29960] ? rcu_is_watching+0x15/0xb0 [ 1338.603168][T29960] do_syscall_64+0x32d/0xf80 [ 1338.603229][T29960] ? trace_irq_disable+0x3b/0x150 [ 1338.603312][T29960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.603365][T29960] ? clear_bhb_loop+0x40/0x90 [ 1338.603452][T29960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.603568][T29960] RIP: 0033:0x7f3243b9c117 [ 1338.603624][T29960] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1338.603675][T29960] RSP: 002b:00007ffffef87448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1338.603740][T29960] RAX: 0000000000000000 RBX: 00007f3243c0471f RCX: 00007f3243b9c117 [ 1338.603781][T29960] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffef87500 [ 1338.603815][T29960] RBP: 00007ffffef87500 R08: 00007ffffef88500 R09: 00000000ffffffff [ 1338.603858][T29960] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffef88590 [ 1338.603898][T29960] R13: 00007f3243c0471f R14: 000000000015ad1f R15: 00007ffffef885d0 [ 1338.603995][T29960] [ 1338.625562][T29960] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1338.685477][ T119] kovaplus 0003:1E7D:2D50.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 1338.894552][ T5991] udevd[5991]: symlink '../../loop0' '/dev/disk/by-diskseq/3544.tmp-b7:0' failed: Read-only file system [ 1338.953787][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-diskseq/3545.tmp-b7:5' failed: Read-only file system [ 1339.060953][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3548.tmp-b7:8' failed: Read-only file system [ 1339.077391][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3545.tmp-b7:5' failed: Read-only file system [ 1339.106017][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3548.tmp-b7:8' failed: Read-only file system [ 1339.122899][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3549.tmp-b7:5' failed: Read-only file system [ 1339.158245][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3544.tmp-b7:0' failed: Read-only file system [ 1339.214330][ T119] kovaplus 0003:1E7D:2D50.0011: couldn't init struct kovaplus_device [ 1339.235848][ T119] kovaplus 0003:1E7D:2D50.0011: couldn't install mouse [ 1339.255497][ T119] kovaplus 0003:1E7D:2D50.0011: probe with driver kovaplus failed with error -71 [ 1339.310135][ T119] usb 4-1: USB disconnect, device number 3 [ 1339.374041][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-diskseq/3535.tmp-b7:3' failed: Read-only file system [ 1339.398312][ T5824] udevd[5824]: symlink '../../loop9' '/dev/disk/by-diskseq/3547.tmp-b7:9' failed: Read-only file system [ 1339.712632][ T9052] loop3: detected capacity change from 0 to 512 [ 1339.737013][ T9052] EXT4-fs: Ignoring removed bh option [ 1339.840870][ T9052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.975244][ T9052] ext4 filesystem being mounted at /3205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1340.150047][ T9040] loop8: detected capacity change from 0 to 32768 [ 1340.169527][ T6043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.174079][ T9040] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.14976 (9040) [ 1340.267477][ T9040] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1340.286531][ T9040] BTRFS info (device loop8): using xxhash64 checksum algorithm [ 1340.451606][ T9080] loop3: detected capacity change from 0 to 1024 [ 1340.503724][ T9040] BTRFS info (device loop8): enabling ssd optimizations [ 1340.518939][ T9040] BTRFS info (device loop8): turning on flush-on-commit [ 1340.525956][ T9040] BTRFS info (device loop8): turning on async discard [ 1340.536856][ T9080] EXT4-fs: Ignoring removed orlov option [ 1340.548305][ T9040] BTRFS info (device loop8): enabling free space tree [ 1340.555306][ T9040] BTRFS info (device loop8): force zlib compression, level 3 [ 1340.630989][ T9040] BTRFS info (device loop8): max_inline set to 4096 [ 1340.659195][ T9080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1340.850331][ T9055] loop5: detected capacity change from 0 to 32768 [ 1340.907840][ T9055] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1340.954344][ T6043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.975855][ T9055] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1341.070381][ T9055] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 1341.099113][ T978] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1341.105986][ T978] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1341.127371][ T9040] BTRFS info (device loop8): balance: start -d -m [ 1341.207482][ T978] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 108ms [ 1341.219754][ T978] gfs2: fsid=syz:syz.0: jid=0: Done [ 1341.227136][ T9055] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1341.241985][ T9040] BTRFS info (device loop8): relocating block group 6881280 flags data|metadata [ 1341.496741][ T9055] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1341.652520][ T9055] syz.5.14982: attempt to access beyond end of device [ 1341.652520][ T9055] loop5: rw=8390659, sector=68719479080, nr_sectors = 14008 limit=32768 [ 1341.679988][ T9040] BTRFS info (device loop8): relocating block group 5242880 flags data|metadata [ 1341.750182][ T9121] loop9: detected capacity change from 0 to 1024 [ 1341.823036][ T9121] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1341.881326][T20695] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 1341.902360][ T9121] ext4 filesystem being mounted at /930/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1341.914571][ T9127] netlink: 'syz.0.15004': attribute type 3 has an invalid length. [ 1341.941673][T20695] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 1341.978023][ T9040] BTRFS info (device loop8): balance: canceled [ 1341.991503][ T9127] netlink: 'syz.0.15004': attribute type 1 has an invalid length. [ 1341.999668][ T9127] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15004'. [ 1342.010958][T20695] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:20695 [syz-executor] gfs2_quota_sync+0x370/0x470 [ 1342.023053][T20695] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1342.037838][T20695] CPU: 0 UID: 0 PID: 20695 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.037873][T20695] Tainted: [L]=SOFTLOCKUP [ 1342.037882][T20695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1342.037896][T20695] Call Trace: [ 1342.037905][T20695] [ 1342.037915][T20695] dump_stack_lvl+0xe8/0x150 [ 1342.037950][T20695] gfs2_withdraw+0xc3/0x1b0 [ 1342.037976][T20695] inode_go_instantiate+0xab4/0x1220 [ 1342.038002][T20695] ? preempt_schedule_common+0x82/0xd0 [ 1342.038031][T20695] ? __pfx_inode_go_instantiate+0x10/0x10 [ 1342.038066][T20695] gfs2_instantiate+0x168/0x220 [ 1342.038094][T20695] gfs2_glock_wait+0x1d4/0x2a0 [ 1342.038120][T20695] do_sync+0x49a/0xcb0 [ 1342.038148][T20695] ? _raw_spin_unlock+0x28/0x50 [ 1342.038166][T20695] ? gfs2_quota_sync+0x370/0x470 [ 1342.038205][T20695] ? __pfx_do_sync+0x10/0x10 [ 1342.038243][T20695] ? gfs2_quota_sync+0x370/0x470 [ 1342.038275][T20695] ? do_raw_spin_unlock+0xf5/0x210 [ 1342.038301][T20695] gfs2_quota_sync+0x370/0x470 [ 1342.038340][T20695] gfs2_sync_fs+0x4c/0xb0 [ 1342.038368][T20695] sync_filesystem+0xee/0x230 [ 1342.038403][T20695] generic_shutdown_super+0x77/0x2d0 [ 1342.038438][T20695] kill_block_super+0x44/0x90 [ 1342.038460][T20695] deactivate_locked_super+0xbc/0x130 [ 1342.038494][T20695] cleanup_mnt+0x437/0x4d0 [ 1342.038514][T20695] ? _raw_spin_unlock_irq+0x23/0x50 [ 1342.038537][T20695] task_work_run+0x1d9/0x270 [ 1342.038563][T20695] ? __pfx_task_work_run+0x10/0x10 [ 1342.038595][T20695] exit_to_user_mode_loop+0xed/0x480 [ 1342.038619][T20695] ? rcu_is_watching+0x15/0xb0 [ 1342.038653][T20695] do_syscall_64+0x32d/0xf80 [ 1342.038684][T20695] ? trace_irq_disable+0x3b/0x150 [ 1342.038713][T20695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.038736][T20695] ? clear_bhb_loop+0x40/0x90 [ 1342.038764][T20695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.038785][T20695] RIP: 0033:0x7fde9139c117 [ 1342.038806][T20695] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1342.038825][T20695] RSP: 002b:00007ffceaae5f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1342.038848][T20695] RAX: 0000000000000000 RBX: 00007fde9140471f RCX: 00007fde9139c117 [ 1342.038863][T20695] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffceaae6040 [ 1342.038877][T20695] RBP: 00007ffceaae6040 R08: 00007ffceaae7040 R09: 00000000ffffffff [ 1342.038892][T20695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffceaae70d0 [ 1342.038905][T20695] R13: 00007fde9140471f R14: 000000000015ba9c R15: 00007ffceaae7110 [ 1342.038940][T20695] [ 1342.038949][T20695] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1342.407080][T29960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1342.428632][ T9133] loop3: detected capacity change from 0 to 764 [ 1342.444880][T29125] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1342.520787][ T9129] Symlink component flag not implemented [ 1342.532143][ T9129] Symlink component flag not implemented [ 1342.537972][ T9129] Symlink component flag not implemented (128) [ 1342.557998][ T9129] Symlink component flag not implemented (122) [ 1343.032467][ T9141] loop3: detected capacity change from 0 to 4096 [ 1343.115698][ T9141] ntfs3(loop3): ino=b, mi_enum_attr [ 1343.128861][ T9141] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1343.150338][ T9141] ntfs3(loop3): Failed to load $Extend (-22). [ 1343.175763][ T9141] ntfs3(loop3): Failed to initialize $Extend. [ 1343.203526][T29996] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1343.244086][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1343.244106][ T30] audit: type=1800 audit(1786892809.615:1404): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15010" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 1343.299751][ T9140] ntfs3(loop3): ino=1e, "file1" attr_set_size [ 1343.323746][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3563.tmp-b7:3' failed: Read-only file system [ 1343.384771][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1343.396419][T29996] usb 10-1: Using ep0 maxpacket: 32 [ 1343.416624][T29996] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1343.435757][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:3' failed: Read-only file system [ 1343.447979][T29996] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.461201][T29996] usb 10-1: Product: syz [ 1343.473426][T29996] usb 10-1: Manufacturer: syz [ 1343.479410][T29996] usb 10-1: SerialNumber: syz [ 1343.495430][T29996] usb 10-1: config 0 descriptor?? [ 1343.516468][T29996] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1343.533788][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3563.tmp-b7:3' failed: Read-only file system [ 1343.545740][T29996] dvb-usb: bulk message failed: -22 (2/0) [ 1343.556365][T29996] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1343.580389][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3563.tmp-b7:3' failed: Read-only file system [ 1343.612208][T29996] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1343.622526][T29996] usb 10-1: media controller created [ 1343.637664][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3563.tmp-b7:3' failed: Read-only file system [ 1343.669172][T29996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1343.687536][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3564.tmp-b7:3' failed: Read-only file system [ 1343.730756][T29996] usb 10-1: selecting invalid altsetting 7 [ 1343.737539][T29996] cxusb: set interface failed [ 1343.742287][T29996] dvb-usb: bulk message failed: -22 (1/0) [ 1343.787665][T29996] DVB: Unable to find symbol lgdt330x_attach() [ 1343.799684][T29996] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1343.841186][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3544.tmp-b7:0' failed: Read-only file system [ 1343.945481][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3564.tmp-b7:3' failed: Read-only file system [ 1343.959347][T29996] rc_core: IR keymap rc-dvico-portable not found [ 1343.965775][T29996] Registered IR keymap rc-empty [ 1343.983393][T29996] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1344.017075][ T5991] udevd[5991]: symlink '../../loop0' '/dev/disk/by-diskseq/3544.tmp-b7:0' failed: Read-only file system [ 1344.031455][T29996] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input102 [ 1344.051656][T29996] dvb-usb: schedule remote query interval to 100 msecs. [ 1344.058792][T29996] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1344.100219][T29996] usb 10-1: USB disconnect, device number 22 [ 1344.149714][ T9165] loop0: detected capacity change from 0 to 8 [ 1344.298508][T29996] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1344.575937][ T9175] netlink: 'syz.9.15023': attribute type 322 has an invalid length. [ 1345.251877][ T9198] loop8: detected capacity change from 0 to 1024 [ 1345.423783][ T9198] Process accounting resumed [ 1345.540896][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1345.789921][ T9191] loop0: detected capacity change from 0 to 32768 [ 1345.832296][ T9191] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 78a74b1b-01a5-4470-b9a0-7dfc015953ac [ 1345.870217][ T9191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15031 (9191) [ 1345.962702][ T9191] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1345.999402][ T9191] BTRFS info (device loop0): using crc32c checksum algorithm [ 1346.043463][ T9206] loop3: detected capacity change from 0 to 512 [ 1346.175424][ T9206] EXT4-fs error (device loop3): ext4_iget_extra_inode:5052: inode #15: comm syz.3.15038: corrupted in-inode xattr: invalid ea_ino [ 1346.220977][ T9191] BTRFS info (device loop0): enabling ssd optimizations [ 1346.233134][ T9191] BTRFS info (device loop0): turning on async discard [ 1346.240087][ T9191] BTRFS info (device loop0): enabling free space tree [ 1346.248209][ T9206] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1346.260428][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1346.270770][ T9206] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.15038: couldn't read orphan inode 15 (err -117) [ 1346.276075][ C0] EXT4-fs (loop3): initial error at time 1786892812: ext4_iget_extra_inode:5052: inode 15 [ 1346.298080][ C0] EXT4-fs (loop3): last error at time 1786892812: ext4_iget_extra_inode:5052: inode 15 [ 1346.437430][ T9206] loop3: lost filesystem error report for type 5 error -117 [ 1346.439448][ T9233] loop9: detected capacity change from 0 to 256 [ 1346.460114][ T9206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1346.495930][ T9233] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1346.527133][ T9206] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.566393][ T9231] loop8: detected capacity change from 0 to 4096 [ 1346.573537][ T452] BTRFS info (device loop0): last unmount of filesystem 78a74b1b-01a5-4470-b9a0-7dfc015953ac [ 1346.617303][ T9231] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512). [ 1346.679841][ T9231] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1346.711952][ T9231] ntfs3(loop8): ino=1e, mi_enum_attr [ 1347.015905][T20695] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 564 [ 1347.071620][T20695] CPU: 0 UID: 0 PID: 20695 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.071656][T20695] Tainted: [L]=SOFTLOCKUP [ 1347.071663][T20695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1347.071677][T20695] Call Trace: [ 1347.071686][T20695] [ 1347.071696][T20695] dump_stack_lvl+0xe8/0x150 [ 1347.071727][T20695] gfs2_assert_warn_i+0x194/0x2c0 [ 1347.071758][T20695] gfs2_make_fs_ro+0x30d/0x320 [ 1347.071788][T20695] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 1347.071812][T20695] ? do_raw_spin_lock+0x12b/0x2f0 [ 1347.071833][T20695] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1347.071865][T20695] ? do_raw_spin_unlock+0xf5/0x210 [ 1347.071889][T20695] gfs2_put_super+0x220/0x860 [ 1347.071922][T20695] ? __pfx_gfs2_put_super+0x10/0x10 [ 1347.071959][T20695] generic_shutdown_super+0x13d/0x2d0 [ 1347.071995][T20695] kill_block_super+0x44/0x90 [ 1347.072018][T20695] deactivate_locked_super+0xbc/0x130 [ 1347.072051][T20695] cleanup_mnt+0x437/0x4d0 [ 1347.072072][T20695] ? _raw_spin_unlock_irq+0x23/0x50 [ 1347.072098][T20695] task_work_run+0x1d9/0x270 [ 1347.072124][T20695] ? __pfx_task_work_run+0x10/0x10 [ 1347.072159][T20695] exit_to_user_mode_loop+0xed/0x480 [ 1347.072184][T20695] ? rcu_is_watching+0x15/0xb0 [ 1347.072218][T20695] do_syscall_64+0x32d/0xf80 [ 1347.072241][T20695] ? trace_irq_disable+0x3b/0x150 [ 1347.072271][T20695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.072293][T20695] ? clear_bhb_loop+0x40/0x90 [ 1347.072319][T20695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.072341][T20695] RIP: 0033:0x7fde9139c117 [ 1347.072362][T20695] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1347.072381][T20695] RSP: 002b:00007ffceaae5f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1347.072403][T20695] RAX: 0000000000000000 RBX: 00007fde9140471f RCX: 00007fde9139c117 [ 1347.072418][T20695] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffceaae6040 [ 1347.072432][T20695] RBP: 00007ffceaae6040 R08: 00007ffceaae7040 R09: 00000000ffffffff [ 1347.072448][T20695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffceaae70d0 [ 1347.072461][T20695] R13: 00007fde9140471f R14: 000000000015ba9c R15: 00007ffceaae7110 [ 1347.072495][T20695] [ 1347.344986][ T9242] netlink: 'syz.0.15044': attribute type 24 has an invalid length. [ 1347.524371][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15049'. [ 1348.003030][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3573.tmp-b7:3' failed: Read-only file system [ 1348.065994][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3576.tmp-b7:8' failed: Read-only file system [ 1348.179104][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3575.tmp-b7:0' failed: Read-only file system [ 1348.287259][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3577.tmp-b7:5' failed: Read-only file system [ 1348.317196][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880313f8000 (11)(syz0) rdma_ndev=ffff88806444c000 (32)(lo) cookie=ffff88807b31c000 (7)(pimreg) start [ 1348.370271][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880313f8000 (11)(syz0) rdma_ndev=ffff88806444c000 (32)(lo) cookie=ffff88807b31c000 (7)(pimreg) end [ 1348.429462][ T30] audit: type=1326 audit(1786892815.173:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.8.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3359aeb9 code=0x7ffc0000 [ 1348.453805][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888031758000 (11)(syz2) rdma_ndev=ffff888045334000 (26)(wg2) cookie=ffff88807b31c000 (4)(pimreg) start [ 1348.459562][ T5992] udevd[5992]: symlink '../../loop0' '/dev/disk/by-diskseq/3575.tmp-b7:0' failed: Read-only file system [ 1348.484304][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-diskseq/3576.tmp-b7:8' failed: Read-only file system [ 1348.553305][ T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888031758000 (11)(syz2) rdma_ndev=ffff888045334000 (26)(wg2) cookie=ffff88807b31c000 (3)(pimreg) end [ 1348.569859][ T30] audit: type=1326 audit(1786892815.173:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.8.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3359aeb9 code=0x7ffc0000 [ 1348.601447][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3577.tmp-b7:5' failed: Read-only file system [ 1348.663860][ T5992] udevd[5992]: symlink '../../loop0' '/dev/disk/by-diskseq/3575.tmp-b7:0' failed: Read-only file system [ 1348.682142][ T30] audit: type=1326 audit(1786892815.226:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.8.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fae3359aeb9 code=0x7ffc0000 [ 1348.718494][ T5991] udevd[5991]: symlink '../../loop8' '/dev/disk/by-diskseq/3576.tmp-b7:8' failed: Read-only file system [ 1348.771220][ T30] audit: type=1326 audit(1786892815.226:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.8.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3359aeb9 code=0x7ffc0000 [ 1348.839285][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3577.tmp-b7:5' failed: Read-only file system [ 1348.860547][ T30] audit: type=1326 audit(1786892815.226:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.8.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3359aeb9 code=0x7ffc0000 [ 1348.947089][ T30] audit: type=1326 audit(1786892815.248:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.8.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fae3359aeb9 code=0x7ffc0000 [ 1348.990204][ T9255] loop9: detected capacity change from 0 to 32768 [ 1349.016744][ T9255] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.15052 (9255) [ 1349.042580][ T30] audit: type=1326 audit(1786892815.258:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.8.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3359aeb9 code=0x7ffc0000 [ 1349.094160][ T9284] loop8: detected capacity change from 0 to 512 [ 1349.132636][ T9255] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1349.144669][ T9255] BTRFS info (device loop9): using sha256 checksum algorithm [ 1349.190071][ T9284] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1349.265119][ T9284] ext4 filesystem being mounted at /1007/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.375873][ T9284] EXT4-fs error (device loop8): ext4_empty_dir:3075: inode #12: comm syz.8.15066: invalid size [ 1349.457369][ T9255] BTRFS info (device loop9): rebuilding free space tree [ 1349.464504][ T9284] EXT4-fs (loop8): Remounting filesystem read-only [ 1349.561554][ T9255] BTRFS info (device loop9): disabling free space tree [ 1349.568527][ T9255] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1349.593678][ T9255] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1349.631465][T29125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.643210][ T13] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1349.658424][ T9255] BTRFS info (device loop9): enabling ssd optimizations [ 1349.667413][ T13] Quota error (device loop8): write_blk: dquota write failed [ 1349.681487][ T13] Quota error (device loop8): free_dqentry: Can't write quota data block 5 [ 1349.690657][ T9255] BTRFS info (device loop9): turning on sync discard [ 1349.698342][ T9255] BTRFS info (device loop9): force clearing of disk cache [ 1350.108049][ T9285] loop0: detected capacity change from 0 to 32768 [ 1350.121336][T29960] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1350.133024][ T9309] loop8: detected capacity change from 0 to 8192 [ 1350.210720][ T9285] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1350.345932][ T9285] XFS (loop0): Ending clean mount [ 1350.383099][ T9285] XFS (loop0): Quotacheck needed: Please wait. [ 1350.628894][ T9285] XFS (loop0): Quotacheck: Done. [ 1350.817390][ T9335] loop8: detected capacity change from 0 to 16 [ 1350.850400][ T9334] loop3: detected capacity change from 0 to 64 [ 1350.862654][ T9335] erofs (device loop8): mounted with root inode @ nid 36. [ 1350.920840][ T452] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1351.050273][ T9338] loop9: detected capacity change from 0 to 1024 [ 1351.172070][ T9338] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1351.262900][ T9338] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 2: comm syz.9.15073: lblock 2 mapped to illegal pblock 2 (length 1) [ 1351.359011][ T9338] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1351.367490][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1351.383326][ C1] EXT4-fs (loop9): initial error at time 1786892818: ext4_map_blocks:776: inode 3: block 2 [ 1351.393482][ C1] EXT4-fs (loop9): last error at time 1786892818: ext4_map_blocks:776: inode 3: block 2 [ 1351.402631][ T9338] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 1351.464626][ T9338] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 48: comm syz.9.15073: lblock 0 mapped to illegal pblock 48 (length 1) [ 1351.519655][ T9338] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1351.520077][ T9338] EXT4-fs error (device loop9): ext4_acquire_dquot:7006: comm syz.9.15073: Failed to acquire dquot type 0 [ 1351.557778][ T9338] loop9: lost filesystem error report for type 5 error -117 [ 1351.558129][ T9338] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6273: Corrupt filesystem [ 1351.581523][ T9338] loop9: lost filesystem error report for type 5 error -117 [ 1351.596933][ T9338] EXT4-fs error (device loop9): ext4_evict_inode:255: inode #11: comm syz.9.15073: mark_inode_dirty error [ 1351.616331][ T9338] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1351.616848][ T9338] EXT4-fs warning (device loop9): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1351.694018][ T9338] EXT4-fs (loop9): 1 orphan inode deleted [ 1351.701964][ T9338] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.725677][ T12] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1351.760639][ T12] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1351.769077][ T12] EXT4-fs error (device loop9): ext4_release_dquot:7042: comm kworker/u8:0: Failed to release dquot type 0 [ 1351.832954][ T9357] comedi comedi3: bad chanlist[0]=0x25dfb300 chan=45824 range length=9 [ 1351.843730][ T9338] EXT4-fs error (device loop9): __ext4_get_inode_loc:4809: comm syz.9.15073: Invalid inode table block 1 in block_group 0 [ 1351.860970][ T9355] macsec1: entered promiscuous mode [ 1351.887836][ T9338] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6273: Corrupt filesystem [ 1351.890427][ T9355] macvlan0: entered promiscuous mode [ 1351.965522][ T9355] macvlan0: left promiscuous mode [ 1352.050317][T29960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.104180][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880313f8000 (11)(syz0) rdma_ndev=ffff88806444c000 (32)(lo) cookie=ffff888047936000 (8)(macsec1) start [ 1352.123387][T29960] EXT4-fs error (device loop9): __ext4_get_inode_loc:4809: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1352.128688][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880313f8000 (11)(syz0) rdma_ndev=ffff88806444c000 (32)(lo) cookie=ffff888047936000 (3)(macsec1) end [ 1352.143911][T29960] loop9: lost filesystem error report for type 5 error -117 [ 1352.159040][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888031758000 (11)(syz2) rdma_ndev=ffff888045334000 (26)(wg2) cookie=ffff888047936000 (3)(macsec1) start [ 1352.189354][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888031758000 (11)(syz2) rdma_ndev=ffff888045334000 (26)(wg2) cookie=ffff888047936000 (3)(macsec1) end [ 1352.220281][T29960] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6273: Corrupt filesystem [ 1352.229973][T29960] loop9: lost filesystem error report for type 5 error -117 [ 1352.230325][T29960] EXT4-fs error (device loop9): ext4_quota_off:7290: inode #3: comm syz-executor: mark_inode_dirty error [ 1352.249925][T29960] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1352.504384][ T9371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15093'. [ 1352.649493][ T9352] loop8: detected capacity change from 0 to 32768 [ 1352.675006][ T9352] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.15085 (9352) [ 1352.742240][ T9352] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1352.764217][ T5993] udevd[5993]: symlink '../../loop9' '/dev/disk/by-diskseq/3591.tmp-b7:9' failed: Read-only file system [ 1352.788153][ T9352] BTRFS info (device loop8): using sha256 checksum algorithm [ 1352.965316][ T9352] BTRFS info (device loop8): enabling ssd optimizations [ 1352.974421][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-diskseq/3592.tmp-b7:8' failed: Read-only file system [ 1352.986296][ T9352] BTRFS info (device loop8): turning on async discard [ 1353.000280][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:8' failed: Read-only file system [ 1353.017693][ T9352] BTRFS info (device loop8): enabling free space tree [ 1353.052014][ T5992] udevd[5992]: symlink '../../loop5' '/dev/disk/by-diskseq/3577.tmp-b7:5' failed: Read-only file system [ 1353.079784][ T9352] BTRFS info (device loop8): device stats zeroed by syz.8.15085 (9352) [ 1353.184261][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-diskseq/3591.tmp-b7:9' failed: Read-only file system [ 1353.225909][ T5991] udevd[5991]: symlink '../../loop0' '/dev/disk/by-diskseq/3589.tmp-b7:0' failed: Read-only file system [ 1353.247584][T29125] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1353.263825][ T9413] program syz.5.15104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1353.281056][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-diskseq/3591.tmp-b7:9' failed: Read-only file system [ 1353.286464][ T6668] udevd[6668]: symlink '../../loop5' '/dev/disk/by-diskseq/3577.tmp-b7:5' failed: Read-only file system [ 1353.294576][ T5993] udevd[5993]: symlink '../../loop3' '/dev/disk/by-diskseq/3590.tmp-b7:3' failed: Read-only file system [ 1353.359367][ T5991] udevd[5991]: symlink '../../loop0' '/dev/disk/by-diskseq/3589.tmp-b7:0' failed: Read-only file system [ 1354.337202][ T9415] loop0: detected capacity change from 0 to 32768 [ 1354.353934][ T9415] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15106 (9415) [ 1354.426223][ T9415] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1354.440134][ T9415] BTRFS info (device loop0): using sha256 checksum algorithm [ 1354.493472][ T9415] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1354.508781][T29996] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1354.574422][ T9423] loop8: detected capacity change from 0 to 32768 [ 1354.658292][T29996] usb 10-1: Using ep0 maxpacket: 8 [ 1354.670656][ T9423] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 1354.691236][T29996] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1354.724674][T29996] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1354.733713][T29996] usb 10-1: Product: syz [ 1354.738063][T29996] usb 10-1: Manufacturer: syz [ 1354.742908][ T9423] JBD2: Ignoring recovery information on journal [ 1354.750077][T29996] usb 10-1: SerialNumber: syz [ 1354.758109][T29996] usb 10-1: config 0 descriptor?? [ 1354.814234][T29996] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1354.926692][ T9415] BTRFS info (device loop0): rebuilding free space tree [ 1354.935975][ T9423] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1354.969916][ T9415] BTRFS info (device loop0): disabling free space tree [ 1354.977448][ T9415] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1355.014407][ T9415] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1355.089888][ T9415] BTRFS info (device loop0): enabling ssd optimizations [ 1355.124264][ T9415] BTRFS info (device loop0): turning on async discard [ 1355.160991][ T9415] BTRFS info (device loop0): enabling disk space caching [ 1355.180891][ T9415] BTRFS info (device loop0): force clearing of disk cache [ 1355.188100][ T9415] BTRFS info (device loop0): enabling auto defrag [ 1355.268454][ T9415] BTRFS info (device loop0): max_inline set to 0 [ 1355.362798][T29996] gspca_zc3xx: reg_w_i err -71 [ 1355.380504][T29996] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1355.423985][ T452] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1355.440211][T29996] usb 10-1: USB disconnect, device number 23 [ 1355.609208][T29125] ocfs2: Unmounting device (7,8) on (node local) [ 1356.219894][ T9480] loop9: detected capacity change from 0 to 764 [ 1356.597634][ T9493] loop9: detected capacity change from 0 to 512 [ 1356.624970][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15133'. [ 1356.665554][ T9493] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1356.729111][ T9493] EXT4-fs (loop9): 1 orphan inode deleted [ 1356.773661][ T9493] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1356.800843][ T9500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15134'. [ 1356.901614][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15136'. [ 1356.938365][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15136'. [ 1356.952712][T29960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.961436][ T9503] netlink: 'syz.3.15136': attribute type 12 has an invalid length. [ 1357.439265][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-diskseq/3596.tmp-b7:8' failed: Read-only file system [ 1357.541851][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3577.tmp-b7:5' failed: Read-only file system [ 1357.614032][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3596.tmp-b7:8' failed: Read-only file system [ 1357.673096][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3590.tmp-b7:3' failed: Read-only file system [ 1357.708783][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-diskseq/3601.tmp-b7:9' failed: Read-only file system [ 1357.802527][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-diskseq/3596.tmp-b7:8' failed: Read-only file system [ 1357.830175][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-diskseq/3590.tmp-b7:3' failed: Read-only file system [ 1357.881476][ T5991] udevd[5991]: symlink '../../loop9' '/dev/disk/by-diskseq/3601.tmp-b7:9' failed: Read-only file system [ 1357.968716][ T9540] loop9: detected capacity change from 0 to 512 [ 1358.004803][ T9540] EXT4-fs: Ignoring removed oldalloc option [ 1358.046616][ T9540] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1358.070772][ T5824] udevd[5824]: symlink '../../loop9' '/dev/disk/by-diskseq/3602.tmp-b7:9' failed: Read-only file system [ 1358.121834][ T5992] udevd[5992]: symlink '../../loop3' '/dev/disk/by-diskseq/3590.tmp-b7:3' failed: Read-only file system [ 1358.140038][ T9542] loop3: detected capacity change from 0 to 512 [ 1358.160827][ T9540] EXT4-fs (loop9): 1 truncate cleaned up [ 1358.201738][ T9540] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1358.220198][ T9542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1358.306477][ T9517] loop0: detected capacity change from 0 to 32768 [ 1358.332486][ T9542] ext4 filesystem being mounted at /3245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.380856][ T9552] loop8: detected capacity change from 0 to 512 [ 1358.391948][ T9517] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1358.401363][ T9540] EXT4-fs warning (device loop9): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 1358.435155][ T9540] EXT4-fs warning (device loop9): ext4_group_extend:1891: can't read last block, resize aborted [ 1358.567927][ T9528] loop5: detected capacity change from 0 to 32768 [ 1358.645899][ T6043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.683013][ T9528] XFS (loop5): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 1358.705664][T29960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.733817][ T9517] XFS (loop0): Ending clean mount [ 1358.783259][ T9517] XFS (loop0): Quotacheck needed: Please wait. [ 1359.039238][ T9517] XFS (loop0): Quotacheck: Done. [ 1359.127849][ T9564] loop8: detected capacity change from 0 to 4096 [ 1359.212902][ T9564] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1359.214094][ T9569] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1359.270647][ T9564] Remounting filesystem read-only [ 1359.332476][ T9564] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1359.381471][ T452] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1359.418704][ T9564] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1360.070787][ T9566] loop9: detected capacity change from 0 to 32768 [ 1360.097485][ T9566] (syz.9.15159,9566,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1360.170364][ T9566] (syz.9.15159,9566,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1360.302274][ T9590] netlink: 'syz.5.15170': attribute type 2 has an invalid length. [ 1360.330732][ T9566] (syz.9.15159,9566,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1360.400895][ T9596] loop0: detected capacity change from 0 to 1024 [ 1360.408532][ T9596] ext3: Bad value for 'mb_optimize_scan' [ 1360.518260][ T9566] JBD2: Ignoring recovery information on journal [ 1360.653240][ T9566] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1360.973321][ T9609] loop3: detected capacity change from 0 to 512 [ 1360.974931][ T9608] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15178'. [ 1360.990597][T29960] ocfs2: Unmounting device (7,9) on (node local) [ 1361.017492][ T9609] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1361.017525][ T9609] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1361.032391][ T9609] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1361.032782][ T9609] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1361.032876][ T9609] System zones: 0-2, 18-18, 34-35 [ 1361.058741][ T9609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.312805][ T6043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.699644][ T9631] loop5: detected capacity change from 0 to 128 [ 1361.750100][ T9631] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1361.838432][ T9631] ext4 filesystem being mounted at /1746/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.965737][T29106] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1362.005265][T20695] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1362.127751][T29106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.147472][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3613.tmp-b7:8' failed: Read-only file system [ 1362.150615][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3621.tmp-b7:5' failed: Read-only file system [ 1362.170587][T29106] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1362.179688][T29106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.202546][T29106] usb 4-1: config 0 descriptor?? [ 1362.335565][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3621.tmp-b7:5' failed: Read-only file system [ 1362.379711][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3613.tmp-b7:8' failed: Read-only file system [ 1362.398214][ T9646] loop5: detected capacity change from 0 to 512 [ 1362.420793][ T9630] loop0: detected capacity change from 0 to 32768 [ 1362.485087][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15196'. [ 1362.509022][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3622.tmp-b7:5' failed: Read-only file system [ 1362.535881][ T978] Process accounting resumed [ 1362.542460][ T978] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 1362.558110][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system [ 1362.570245][ T978] FAT-fs (loop5): Filesystem has been set read-only [ 1362.598221][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:5' failed: Read-only file system [ 1362.647861][T29106] lg-g15 0003:046D:C222.0012: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 1362.699632][ T5991] udevd[5991]: symlink '../../loop8' '/dev/disk/by-diskseq/3613.tmp-b7:8' failed: Read-only file system [ 1362.751731][ T5993] udevd[5993]: symlink '../../loop5' '/dev/disk/by-diskseq/3622.tmp-b7:5' failed: Read-only file system [ 1362.788420][ T9651] loop8: detected capacity change from 0 to 22 [ 1362.822226][ T5993] udevd[5993]: symlink '../../loop5' '/dev/disk/by-diskseq/3622.tmp-b7:5' failed: Read-only file system [ 1362.841467][T29106] usb 4-1: USB disconnect, device number 4 [ 1362.848726][ T9651] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1362.889576][ T9628] loop9: detected capacity change from 0 to 32768 [ 1362.898858][ T9651] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1362.938997][ T9628] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.15180 (9628) [ 1363.001187][ T9649] fido_id[9649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C222.0012/report_descriptor': No such file or directory [ 1363.048974][ T9628] BTRFS info (device loop9): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1363.093776][ T9628] BTRFS info (device loop9): using xxhash64 checksum algorithm [ 1363.267981][ T9628] BTRFS info (device loop9): enabling ssd optimizations [ 1363.301892][ T9628] BTRFS info (device loop9): turning on flush-on-commit [ 1363.355705][ T9628] BTRFS info (device loop9): turning on sync discard [ 1363.362488][ T9628] BTRFS info (device loop9): enabling free space tree [ 1363.391820][ T9628] BTRFS info (device loop9): force zlib compression, level 3 [ 1363.401275][ T9628] BTRFS info (device loop9): max_inline set to 4096 [ 1363.602840][ T9688] netlink: 'syz.3.15207': attribute type 29 has an invalid length. [ 1363.664515][ T9688] netlink: 'syz.3.15207': attribute type 29 has an invalid length. [ 1363.675051][ T9628] BTRFS info (device loop9): balance: start -d -m [ 1363.706678][ T9628] BTRFS info (device loop9): relocating block group 6881280 flags data|metadata [ 1364.035334][ T9628] BTRFS info (device loop9): relocating block group 5242880 flags data|metadata [ 1364.159609][ T978] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1364.260885][ T9628] BTRFS info (device loop9): balance: canceled [ 1364.335313][ T978] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1364.364423][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.397873][ T978] usb 6-1: Product: syz [ 1364.413140][ T978] usb 6-1: Manufacturer: syz [ 1364.441599][ T978] usb 6-1: SerialNumber: syz [ 1364.681573][ T978] usb 6-1: config 0 descriptor?? [ 1364.731195][T29960] BTRFS info (device loop9): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1364.909490][ T978] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1365.004910][ T9697] loop0: detected capacity change from 0 to 32768 [ 1365.030646][ T9699] loop8: detected capacity change from 0 to 32768 [ 1365.066911][ T9697] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1365.127678][ T978] usb 6-1: USB disconnect, device number 41 [ 1365.170666][ T9699] ERROR: (device loop8): dbAllocAG: unable to allocate blocks [ 1365.170666][ T9699] [ 1365.201932][ T9699] ERROR: (device loop8): remounting filesystem as read-only [ 1365.299034][ T9699] ERROR: (device loop8): dbDiscardAG: -EIO [ 1365.299034][ T9699] [ 1365.339505][ T9697] XFS (loop0): Ending clean mount [ 1365.346669][ T9714] loop3: detected capacity change from 0 to 4096 [ 1365.414690][ T9714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1365.589319][ T452] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1365.817862][ T9722] loop8: detected capacity change from 0 to 512 [ 1365.902496][ T6043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.343109][ T9730] [U]  [ 1366.684467][ T9742] netlink: 'syz.0.15225': attribute type 27 has an invalid length. [ 1366.834771][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3634.tmp-b7:0' failed: Read-only file system [ 1366.913904][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3624.tmp-b7:5' failed: Read-only file system [ 1366.933020][T29996] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1367.003354][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-diskseq/3637.tmp-b7:8' failed: Read-only file system [ 1367.063348][ T5992] udevd[5992]: symlink '../../loop0' '/dev/disk/by-diskseq/3634.tmp-b7:0' failed: Read-only file system [ 1367.084635][ T9754] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1367.093351][T29996] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1367.136966][T29996] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1367.167319][T29996] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1367.183613][ T5824] udevd[5824]: symlink '../../loop5' '/dev/disk/by-diskseq/3624.tmp-b7:5' failed: Read-only file system [ 1367.204330][T29996] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1367.211977][ T9757] loop8: detected capacity change from 0 to 1024 [ 1367.234976][ T9757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1367.249991][T29996] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1367.285681][T29996] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1367.307313][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15234'. [ 1367.316199][T29996] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1367.316321][T29996] usb 4-1: Product: syz [ 1367.316337][T29996] usb 4-1: Manufacturer: syz [ 1367.348736][ T9757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1367.367637][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3638.tmp-b7:8' failed: Read-only file system [ 1367.409857][T29996] cdc_wdm 4-1:1.0: skipping garbage [ 1367.417554][T29996] cdc_wdm 4-1:1.0: skipping garbage [ 1367.451105][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1367.474848][T29996] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1367.481340][T29996] cdc_wdm 4-1:1.0: Unknown control protocol [ 1367.551447][ T5993] udevd[5993]: symlink '../../loop5' '/dev/disk/by-diskseq/3624.tmp-b7:5' failed: Read-only file system [ 1367.565522][ T5991] udevd[5991]: symlink '../../loop0' '/dev/disk/by-diskseq/3634.tmp-b7:0' failed: Read-only file system [ 1367.605459][T29125] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.618298][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3638.tmp-b7:8' failed: Read-only file system [ 1367.695303][ T5986] usb 4-1: USB disconnect, device number 5 [ 1368.414427][ T9791] loop9: detected capacity change from 0 to 1024 [ 1368.455782][ T9791] EXT4-fs: Ignoring removed mblk_io_submit option [ 1368.510860][ T9791] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1368.547259][ T9791] ext4 filesystem being mounted at /966/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.635447][ T9791] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: comm syz.9.15248: lblock 0 mapped to illegal pblock 0 (length 1) [ 1368.644249][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1368.644313][ T30] audit: type=1800 audit(1786892836.856:1412): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.15248" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1368.725283][ T9799] loop5: detected capacity change from 0 to 64 [ 1368.823453][ T9777] loop0: detected capacity change from 0 to 32768 [ 1368.834107][T29960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1368.903623][ T9777] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15241 (9777) [ 1368.987963][ T9777] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1369.013293][ T9777] BTRFS info (device loop0): using blake2b checksum algorithm [ 1369.022764][ T9780] loop8: detected capacity change from 0 to 32768 [ 1369.052559][ T9780] BTRFS info: device /dev/loop8 (7:8) using temp-fsid 2f6079d9-14ac-4ac6-8298-43c5c8d161c0 [ 1369.068051][ T9780] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.15242 (9780) [ 1369.119370][ T9780] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1369.142796][ T9780] BTRFS info (device loop8): using crc32c checksum algorithm [ 1369.249783][ T9777] BTRFS info (device loop0): enabling ssd optimizations [ 1369.282077][ T9777] BTRFS info (device loop0): turning on async discard [ 1369.288981][ T9777] BTRFS info (device loop0): enabling free space tree [ 1369.343292][ T9777] BTRFS info (device loop0): use zstd compression, level 3 [ 1369.485609][ T9780] BTRFS info (device loop8): rebuilding free space tree [ 1369.540166][ T9834] netlink: 32 bytes leftover after parsing attributes in process `syz.9.15254'. [ 1369.609373][ T452] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1369.624744][ T9780] BTRFS info (device loop8): checking UUID tree [ 1369.655352][T27805] IPVS: starting estimator thread 0... [ 1369.655391][ T9780] BTRFS info (device loop8): allowing degraded mounts [ 1369.682856][ T9800] loop3: detected capacity change from 0 to 32768 [ 1369.712084][ T9780] BTRFS info (device loop8): enabling ssd optimizations [ 1369.719415][ T9780] BTRFS info (device loop8): enabling free space tree [ 1369.757717][ T9780] BTRFS info (device loop8): force clearing of disk cache [ 1369.785619][ T9837] IPVS: using max 30 ests per chain, 72000 per kthread [ 1369.792879][ T9780] BTRFS info (device loop8): force zlib compression, level 3 [ 1370.283462][T29125] BTRFS info (device loop8): last unmount of filesystem 2f6079d9-14ac-4ac6-8298-43c5c8d161c0 [ 1370.340018][ T9848] loop3: detected capacity change from 0 to 256 [ 1370.456315][ T9848] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 1370.591043][ T9851] tmpfs: Cannot disable swap on remount [ 1370.741441][ T9802] loop5: detected capacity change from 0 to 40427 [ 1370.818130][ T9802] F2FS-fs (loop5): invalid crc value [ 1371.001213][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15265'. [ 1371.053444][ T9863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15265'. [ 1371.225077][ T9802] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1371.239590][ T9802] F2FS-fs (loop5): Start checkpoint disabled! [ 1371.314267][ T9802] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1371.351876][ T9802] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1371.455228][ T9874] loop8: detected capacity change from 0 to 256 [ 1371.490915][ T30] audit: type=1800 audit(1786892839.924:1413): pid=9802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.15253" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 1371.567845][ T9874] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1371.583660][ T5991] udevd[5991]: symlink '../../loop5' '/dev/disk/by-diskseq/3651.tmp-b7:5' failed: Read-only file system [ 1371.602056][ T5993] udevd[5993]: symlink '../../loop3' '/dev/disk/by-diskseq/3650.tmp-b7:3' failed: Read-only file system [ 1371.616336][ T9874] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1371.658879][ T5991] udevd[5991]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system [ 1371.688961][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3642.tmp-b7:0' failed: Read-only file system [ 1371.717727][ T58] kworker/u8:4: attempt to access beyond end of device [ 1371.717727][ T58] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1371.734898][ T9874] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1371.754771][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3649.tmp-b7:8' failed: Read-only file system [ 1371.786839][ T9874] exFAT-fs (loop8): failed to load alloc-bitmap [ 1371.793286][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1371.793324][ T58] Tainted: [L]=SOFTLOCKUP [ 1371.793333][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1371.793347][ T58] Workqueue: writeback wb_workfn (flush-7:5) [ 1371.793381][ T58] Call Trace: [ 1371.793390][ T58] [ 1371.793399][ T58] dump_stack_lvl+0xe8/0x150 [ 1371.793433][ T58] f2fs_handle_critical_error+0x37c/0x540 [ 1371.793468][ T58] f2fs_write_end_io+0xcdb/0xff0 [ 1371.793515][ T58] __submit_merged_bio+0x256/0x700 [ 1371.793547][ T58] __submit_merged_write_cond+0x3c3/0x4e0 [ 1371.793582][ T58] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1371.793629][ T58] f2fs_write_data_pages+0x2970/0x35e0 [ 1371.793698][ T58] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1371.793773][ T58] ? __lock_acquire+0x6b5/0x2cf0 [ 1371.793831][ T58] ? unwind_next_frame+0xa5/0x23c0 [ 1371.793884][ T58] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1371.793915][ T58] do_writepages+0x32e/0x550 [ 1371.793963][ T58] ? reacquire_held_locks+0x104/0x190 [ 1371.794080][ T58] ? writeback_sb_inodes+0x43d/0x19a0 [ 1371.794172][ T58] __writeback_single_inode+0x133/0x11a0 [ 1371.794245][ T58] ? do_raw_spin_unlock+0xf5/0x210 [ 1371.794317][ T58] writeback_sb_inodes+0x944/0x19a0 [ 1371.794454][ T58] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1371.794516][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 1371.794682][ T58] ? rcu_is_watching+0x15/0xb0 [ 1371.794772][ T58] wb_writeback+0x456/0xb70 [ 1371.794847][ T58] ? queue_io+0x1f1/0x4a0 [ 1371.794933][ T58] ? __pfx_wb_writeback+0x10/0x10 [ 1371.795002][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 1371.795098][ T58] wb_workfn+0x414/0xf50 [ 1371.795161][ T58] ? look_up_lock_class+0x57/0x110 [ 1371.795258][ T58] ? __pfx_wb_workfn+0x10/0x10 [ 1371.795331][ T58] ? do_raw_spin_unlock+0xf5/0x210 [ 1371.795402][ T58] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1371.795539][ T58] ? process_one_work+0x87c/0x1650 [ 1371.795613][ T58] process_one_work+0x949/0x1650 [ 1371.795734][ T58] ? __pfx_process_one_work+0x10/0x10 [ 1371.795798][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 1371.795903][ T58] worker_thread+0xb46/0x1140 [ 1371.796059][ T58] kthread+0x388/0x470 [ 1371.796120][ T58] ? __pfx_worker_thread+0x10/0x10 [ 1371.796186][ T58] ? __pfx_kthread+0x10/0x10 [ 1371.796247][ T58] ret_from_fork+0x51e/0xb90 [ 1371.796323][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 1371.796394][ T58] ? __switch_to+0xc7d/0x1450 [ 1371.796468][ T58] ? __pfx_kthread+0x10/0x10 [ 1371.796530][ T58] ret_from_fork_asm+0x1a/0x30 [ 1371.796650][ T58] [ 1371.796678][ T58] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1371.850777][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-uuid/1234-1234.tmp-b7:8' failed: Read-only file system [ 1371.862345][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3642.tmp-b7:0' failed: Read-only file system [ 1371.926369][ T9874] exFAT-fs (loop8): failed to recognize exfat type [ 1371.976478][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3652.tmp-b7:0' failed: Read-only file system [ 1372.006687][ T5824] udevd[5824]: symlink '../../loop0' '/dev/disk/by-diskseq/3652.tmp-b7:0' failed: Read-only file system [ 1372.212352][ T5992] udevd[5992]: symlink '../../loop8' '/dev/disk/by-diskseq/3653.tmp-b7:8' failed: Read-only file system [ 1372.234484][ T9880] loop0: detected capacity change from 0 to 1764 [ 1372.242654][ T9882] loop9: detected capacity change from 0 to 64 [ 1372.649503][ T9890] loop9: detected capacity change from 0 to 8 [ 1372.961622][ T30] audit: type=1326 audit(1786892841.491:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.9.15281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1373.047789][ T30] audit: type=1326 audit(1786892841.491:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.9.15281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1373.160685][ T30] audit: type=1326 audit(1786892841.512:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.9.15281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1373.217889][ T9878] loop3: detected capacity change from 0 to 32768 [ 1373.250960][ T30] audit: type=1326 audit(1786892841.512:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.9.15281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1373.356209][ T9903] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1373.358495][ T30] audit: type=1326 audit(1786892841.512:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.9.15281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1373.455339][ T30] audit: type=1326 audit(1786892841.512:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.9.15281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1373.517588][ T9907] loop8: detected capacity change from 0 to 128 [ 1373.539807][ T30] audit: type=1326 audit(1786892841.534:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.9.15281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3243b3c2d9 code=0x7ffc0000 [ 1373.566277][ T9907] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1373.588174][ T30] audit: type=1326 audit(1786892841.534:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.9.15281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1373.611167][ T30] audit: type=1326 audit(1786892841.555:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.9.15281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3243b9aeb9 code=0x7ffc0000 [ 1373.618001][ T9907] ext4 filesystem being mounted at /1056/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.752422][ T9893] loop0: detected capacity change from 0 to 32768 [ 1373.811680][ T9893] ERROR: (device loop0): dtSearch: stack overrun! [ 1373.811680][ T9893] [ 1373.827664][ T9893] ERROR: (device loop0): remounting filesystem as read-only [ 1373.845122][ T9893] btstack dump: [ 1373.853384][ T9893] bn = 0, index = 0 [ 1373.862902][ T9893] bn = 72c, index = 96 [ 1373.876073][ T9893] bn = 0, index = 0 [ 1373.888462][ T9893] bn = 72c, index = 96 [ 1373.899335][ T9893] bn = 0, index = 0 [ 1373.910148][ T9893] bn = 72c, index = 96 [ 1373.924102][ T9893] bn = 0, index = 0 [ 1373.939345][ T9893] bn = 0, index = 0 [ 1374.006652][T29125] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1374.329571][ T9915] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1374.440262][ T9921] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1374.503279][ T9915] NILFS error (device loop8): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 1374.582583][ T9915] Remounting filesystem read-only [ 1375.767371][ T9972] set_capacity_and_notify: 2 callbacks suppressed [ 1375.767395][ T9972] loop9: detected capacity change from 0 to 64 [ 1376.034874][ T9979] loop5: detected capacity change from 0 to 256 [ 1376.124473][ T9979] FAT-fs (loop5): Directory bread(block 64) failed [ 1376.131133][ T9979] FAT-fs (loop5): Directory bread(block 65) failed [ 1376.165401][ T9979] FAT-fs (loop5): Directory bread(block 66) failed [ 1376.200555][ T9979] FAT-fs (loop5): Directory bread(block 67) failed [ 1376.226107][ T9979] FAT-fs (loop5): Directory bread(block 68) failed [ 1376.232733][ T9979] FAT-fs (loop5): Directory bread(block 69) failed [ 1376.258841][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-diskseq/3673.tmp-b7:9' failed: Read-only file system [ 1376.276298][ T5991] udevd[5991]: symlink '../../loop0' '/dev/disk/by-diskseq/3669.tmp-b7:0' failed: Read-only file system [ 1376.303298][ T9979] FAT-fs (loop5): Directory bread(block 70) failed [ 1376.319948][ T9979] FAT-fs (loop5): Directory bread(block 71) failed [ 1376.326854][ T9979] FAT-fs (loop5): Directory bread(block 72) failed [ 1376.333946][ T9979] FAT-fs (loop5): Directory bread(block 73) failed [ 1376.345881][ T9960] loop3: detected capacity change from 0 to 32768 [ 1376.389080][ T9960] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1376.425090][ T9960] JBD2: Ignoring recovery information on journal [ 1376.473658][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-diskseq/3673.tmp-b7:9' failed: Read-only file system [ 1376.509139][ T9960] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1376.539977][ T9992] loop9: detected capacity change from 0 to 256 [ 1376.554544][ T5992] udevd[5992]: symlink '../../loop0' '/dev/disk/by-diskseq/3669.tmp-b7:0' failed: Read-only file system [ 1376.645826][ T9992] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xecfd5def, utbl_chksum : 0xe619d30d) [ 1376.678332][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-diskseq/3676.tmp-b7:9' failed: Read-only file system [ 1376.691632][ T5991] udevd[5991]: symlink '../../loop5' '/dev/disk/by-diskseq/3674.tmp-b7:5' failed: Read-only file system [ 1376.718937][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3675.tmp-b7:3' failed: Read-only file system [ 1376.754541][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-uuid/1234-1234.tmp-b7:9' failed: Read-only file system [ 1376.787709][ T5993] udevd[5993]: symlink '../../loop0' '/dev/disk/by-diskseq/3669.tmp-b7:0' failed: Read-only file system [ 1376.801027][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system [ 1376.992524][ T6043] ocfs2: Unmounting device (7,3) on (node local) [ 1377.044149][T10003] loop0: detected capacity change from 0 to 1024 [ 1377.134511][T10003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1377.626841][ T452] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1378.178638][T10012] loop5: detected capacity change from 0 to 32768 [ 1378.244644][T10042] loop9: detected capacity change from 0 to 2048 [ 1378.258919][T10012] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1378.297158][T10042] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1378.368844][T10012] XFS (loop5): Ending clean mount [ 1378.379184][T10012] XFS (loop5): Quotacheck needed: Please wait. [ 1378.381458][T10057] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1378.534670][T10012] XFS (loop5): Quotacheck: Done. [ 1378.678966][T10060] loop3: detected capacity change from 0 to 512 [ 1378.712591][T20695] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1378.745048][T10060] EXT4-fs: Ignoring removed bh option [ 1378.864944][T10060] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1378.965166][T10060] EXT4-fs (loop3): 1 truncate cleaned up [ 1378.998545][T10060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.036236][T10071] loop0: detected capacity change from 0 to 64 [ 1379.277908][ T6043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.318451][T10074] team0: Device vlan2 is already an upper device of the team interface [ 1379.532752][ T58] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880313f8000 (11)(syz0) rdma_ndev=ffff88806444c000 (32)(lo) cookie=ffff8880518f6000 (10)(vlan2) start [ 1379.596338][ T58] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff8880313f8000 (11)(syz0) rdma_ndev=ffff88806444c000 (32)(lo) cookie=ffff8880518f6000 (3)(vlan2) end [ 1379.652569][ T58] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888031758000 (11)(syz2) rdma_ndev=ffff888045334000 (26)(wg2) cookie=ffff8880518f6000 (3)(vlan2) start [ 1379.731337][ T58] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888031758000 (11)(syz2) rdma_ndev=ffff888045334000 (26)(wg2) cookie=ffff8880518f6000 (3)(vlan2) end [ 1380.373015][T10115] netlink: 'syz.3.15377': attribute type 5 has an invalid length. [ 1380.629647][T10127] loop3: detected capacity change from 0 to 2048 [ 1380.696000][T10127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1380.720883][T10129] loop9: detected capacity change from 0 to 1024 [ 1380.859952][T10129] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1380.924291][ T6043] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.960394][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1380.974004][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-diskseq/3691.tmp-b7:9' failed: Read-only file system [ 1380.987929][ T5992] udevd[5992]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system [ 1381.041444][T10135] loop0: detected capacity change from 0 to 2048 [ 1381.072103][T10135] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1381.077304][ T5824] udevd[5824]: symlink '../../loop8' '/dev/disk/by-diskseq/3671.tmp-b7:8' failed: Read-only file system [ 1381.140325][T10137] loop8: detected capacity change from 0 to 1024 [ 1381.160030][ T5824] udevd[5824]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1381.176396][T10138] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1381.194564][T29960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.219456][T10137] hfsplus: invalid length 32517 has been corrected to 255 [ 1381.229490][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3690.tmp-b7:3' failed: Read-only file system [ 1381.287978][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3690.tmp-b7:3' failed: Read-only file system [ 1381.323282][ T5992] udevd[5992]: symlink '../../loop0' '/dev/disk/by-diskseq/3692.tmp-b7:0' failed: Read-only file system [ 1381.336653][ T5992] udevd[5992]: symlink '../../loop0' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:0' failed: Read-only file system [ 1381.368816][ T5991] udevd[5991]: symlink '../../loop8' '/dev/disk/by-diskseq/3694.tmp-b7:8' failed: Read-only file system [ 1381.566928][T10145] CUSE: unknown device info "€" [ 1381.588564][T10145] CUSE: unknown device info "" [ 1381.615503][T10145] CUSE: unknown device info "" [ 1381.629582][T10145] CUSE: unknown device info "€" [ 1381.652632][T10145] CUSE: zero length info key specified [ 1381.864696][T10156] sg_write: data in/out 155612/57 bytes for SCSI command 0x0-- guessing data in; [ 1381.864696][T10156] program syz.0.15393 not setting count and/or reply_len properly [ 1381.988511][T10159] loop3: detected capacity change from 0 to 64 [ 1382.294845][T27805] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1382.433849][ T5986] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1382.456572][T27805] usb 10-1: Using ep0 maxpacket: 32 [ 1382.474048][T27805] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1382.503304][T27805] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.512436][T27805] usb 10-1: Product: syz [ 1382.516746][T27805] usb 10-1: Manufacturer: syz [ 1382.537299][T27805] usb 10-1: SerialNumber: syz [ 1382.547971][T10154] loop8: detected capacity change from 0 to 32768 [ 1382.561018][T27805] usb 10-1: config 0 descriptor?? [ 1382.577674][T10154] BTRFS info: device /dev/loop8 (7:8) using temp-fsid fe91dc02-a5e8-441e-b45e-b39fd6f0c7f0 [ 1382.592708][T10174] loop0: detected capacity change from 0 to 64 [ 1382.601006][ T5986] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1382.610175][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.619994][T10154] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.15390 (10154) [ 1382.637792][T27805] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1382.652269][ T5986] usb 6-1: Product: syz [ 1382.662955][ T5986] usb 6-1: Manufacturer: syz [ 1382.672517][ T5986] usb 6-1: SerialNumber: syz [ 1382.687952][T10154] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1382.721435][ T5986] usb 6-1: config 0 descriptor?? [ 1382.736962][T10154] BTRFS info (device loop8): using crc32c checksum algorithm [ 1382.904280][T10154] BTRFS info (device loop8): enabling ssd optimizations [ 1382.920232][T10154] BTRFS info (device loop8): turning on flush-on-commit [ 1382.958198][T10154] BTRFS info (device loop8): enabling free space tree [ 1382.969264][ T5986] usb 6-1: ignoring: probably an ADSL modem [ 1382.992566][T10154] BTRFS info (device loop8): enabling auto defrag [ 1382.999078][T10154] BTRFS info (device loop8): use lzo compression, level 1 [ 1383.036816][T10154] BTRFS info (device loop8): max_inline set to 4096 [ 1383.155151][T27805] gspca_ov534_9: reg_w failed -71 [ 1383.252089][T29125] BTRFS info (device loop8): last unmount of filesystem fe91dc02-a5e8-441e-b45e-b39fd6f0c7f0 [ 1383.267463][T10201] Bluetooth: MGMT ver 1.23 [ 1383.389969][ T5986] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1383.455589][ T5986] usb 6-1: USB disconnect, device number 42 [ 1383.503227][T10205] loop3: detected capacity change from 0 to 1024 [ 1383.510037][T27805] gspca_ov534_9: Unknown sensor 0000 [ 1383.510131][T27805] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 1383.583513][T27805] usb 10-1: USB disconnect, device number 24 [ 1383.629427][ T37] [ 1383.631860][ T37] ====================================================== [ 1383.638913][ T37] WARNING: possible circular locking dependency detected [ 1383.645983][ T37] syzkaller #0 Tainted: G L [ 1383.652004][ T37] ------------------------------------------------------ [ 1383.659054][ T37] kworker/u8:3/37 is trying to acquire lock: [ 1383.665073][ T37] ffff8880363d4950 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a9/0x280 [ 1383.674722][ T37] [ 1383.674722][ T37] but task is already holding lock: [ 1383.682128][ T37] ffff8880363d6b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1383.692278][ T37] [ 1383.692278][ T37] which lock already depends on the new lock. [ 1383.692278][ T37] [ 1383.702713][ T37] [ 1383.702713][ T37] the existing dependency chain (in reverse order) is: [ 1383.712270][ T37] [ 1383.712270][ T37] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1383.720730][ T37] percpu_down_read_internal+0x48/0x1c0 [ 1383.726825][ T37] ext4_writepages+0x205/0x3b0 [ 1383.732132][ T37] do_writepages+0x32e/0x550 [ 1383.737275][ T37] __writeback_single_inode+0x133/0x11a0 [ 1383.743451][ T37] writeback_single_inode+0x4ac/0xdc0 [ 1383.749363][ T37] write_inode_now+0x1c2/0x290 [ 1383.754699][ T37] iput+0x8c1/0xe80 [ 1383.759060][ T37] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 1383.764992][ T37] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 1383.771426][ T37] __ext4_expand_extra_isize+0x30d/0x400 [ 1383.777616][ T37] __ext4_mark_inode_dirty+0x45c/0x730 [ 1383.783631][ T37] ext4_evict_inode+0x7a1/0xeb0 [ 1383.789033][ T37] evict+0x61e/0xb10 [ 1383.793473][ T37] ext4_orphan_cleanup+0xc38/0x1470 [ 1383.799216][ T37] ext4_fill_super+0x59ff/0x6320 [ 1383.804702][ T37] get_tree_bdev_flags+0x431/0x4f0 [ 1383.810357][ T37] vfs_get_tree+0x92/0x2a0 [ 1383.815320][ T37] do_new_mount+0x341/0xd30 [ 1383.820371][ T37] __se_sys_mount+0x31d/0x420 [ 1383.825641][ T37] do_syscall_64+0x14d/0xf80 [ 1383.830787][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.837225][ T37] [ 1383.837225][ T37] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 1383.844804][ T37] down_read+0x47/0x2e0 [ 1383.849507][ T37] ext4_setattr+0x888/0x1c60 [ 1383.854643][ T37] notify_change+0xc1a/0xf40 [ 1383.859786][ T37] chown_common+0x466/0x6b0 [ 1383.864837][ T37] do_fchownat+0x14c/0x250 [ 1383.869796][ T37] __x64_sys_chown+0x82/0xa0 [ 1383.874924][ T37] do_syscall_64+0x14d/0xf80 [ 1383.880062][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.886494][ T37] [ 1383.886494][ T37] -> #0 (jbd2_handle){++++}-{0:0}: [ 1383.893823][ T37] __lock_acquire+0x15a5/0x2cf0 [ 1383.899220][ T37] lock_acquire+0xf0/0x2e0 [ 1383.904179][ T37] wait_transaction_locked+0x1c2/0x280 [ 1383.910535][ T37] start_this_handle+0x7dc/0x2290 [ 1383.916116][ T37] jbd2__journal_start+0x2c0/0x5b0 [ 1383.921775][ T37] __ext4_journal_start_sb+0x203/0x620 [ 1383.927780][ T37] ext4_do_writepages+0xf94/0x46e0 [ 1383.933437][ T37] ext4_writepages+0x241/0x3b0 [ 1383.938772][ T37] do_writepages+0x32e/0x550 [ 1383.943914][ T37] __writeback_single_inode+0x133/0x11a0 [ 1383.950091][ T37] writeback_sb_inodes+0x944/0x19a0 [ 1383.955861][ T37] __writeback_inodes_wb+0x111/0x240 [ 1383.961690][ T37] wb_writeback+0x46a/0xb70 [ 1383.966739][ T37] wb_workfn+0xb4c/0xf50 [ 1383.971520][ T37] process_one_work+0x949/0x1650 [ 1383.977003][ T37] worker_thread+0xb46/0x1140 [ 1383.982221][ T37] kthread+0x388/0x470 [ 1383.986831][ T37] ret_from_fork+0x51e/0xb90 [ 1383.991963][ T37] ret_from_fork_asm+0x1a/0x30 [ 1383.997283][ T37] [ 1383.997283][ T37] other info that might help us debug this: [ 1383.997283][ T37] [ 1384.007846][ T37] Chain exists of: [ 1384.007846][ T37] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 1384.007846][ T37] [ 1384.021259][ T37] Possible unsafe locking scenario: [ 1384.021259][ T37] [ 1384.028726][ T37] CPU0 CPU1 [ 1384.034105][ T37] ---- ---- [ 1384.039479][ T37] rlock(&sbi->s_writepages_rwsem); [ 1384.044782][ T37] lock(&ei->xattr_sem); [ 1384.051660][ T37] lock(&sbi->s_writepages_rwsem); [ 1384.059407][ T37] lock(jbd2_handle); [ 1384.063497][ T37] [ 1384.063497][ T37] *** DEADLOCK *** [ 1384.063497][ T37] [ 1384.071663][ T37] 4 locks held by kworker/u8:3/37: [ 1384.076997][ T37] #0: ffff888020a98948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 1384.087743][ T37] #1: ffffc90000ad7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 1384.099619][ T37] #2: ffff8880363c80e0 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 1384.110295][ T37] #3: ffff8880363d6b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1384.120765][ T37] [ 1384.120765][ T37] stack backtrace: [ 1384.126801][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1384.126831][ T37] Tainted: [L]=SOFTLOCKUP [ 1384.126838][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1384.126851][ T37] Workqueue: writeback wb_workfn (flush-8:0) [ 1384.126878][ T37] Call Trace: [ 1384.126888][ T37] [ 1384.126897][ T37] dump_stack_lvl+0xe8/0x150 [ 1384.126922][ T37] print_circular_bug+0x2e1/0x300 [ 1384.126957][ T37] check_noncircular+0x12e/0x150 [ 1384.126986][ T37] __lock_acquire+0x15a5/0x2cf0 [ 1384.127011][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 1384.127033][ T37] lock_acquire+0xf0/0x2e0 [ 1384.127053][ T37] ? wait_transaction_locked+0x1a9/0x280 [ 1384.127072][ T37] ? wait_transaction_locked+0x1a9/0x280 [ 1384.127087][ T37] wait_transaction_locked+0x1c2/0x280 [ 1384.127103][ T37] ? wait_transaction_locked+0x1a9/0x280 [ 1384.127119][ T37] ? __pfx_wait_transaction_locked+0x10/0x10 [ 1384.127136][ T37] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1384.127154][ T37] ? __pfx_stack_trace_save+0x10/0x10 [ 1384.127175][ T37] start_this_handle+0x7dc/0x2290 [ 1384.127203][ T37] ? process_one_work+0x949/0x1650 [ 1384.127229][ T37] ? __pfx_start_this_handle+0x10/0x10 [ 1384.127260][ T37] ? rcu_is_watching+0x15/0xb0 [ 1384.127283][ T37] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1384.127308][ T37] ? jbd2__journal_start+0x1db/0x5b0 [ 1384.127331][ T37] ? kmem_cache_alloc_noprof+0x307/0x650 [ 1384.127357][ T37] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1384.127384][ T37] jbd2__journal_start+0x2c0/0x5b0 [ 1384.127409][ T37] __ext4_journal_start_sb+0x203/0x620 [ 1384.127438][ T37] ext4_do_writepages+0xf94/0x46e0 [ 1384.127479][ T37] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1384.127521][ T37] ext4_writepages+0x241/0x3b0 [ 1384.127539][ T37] ? __pfx_ext4_writepages+0x10/0x10 [ 1384.127562][ T37] ? do_raw_spin_unlock+0xf5/0x210 [ 1384.127579][ T37] ? __pfx_ext4_writepages+0x10/0x10 [ 1384.127596][ T37] do_writepages+0x32e/0x550 [ 1384.127620][ T37] ? reacquire_held_locks+0x104/0x190 [ 1384.127644][ T37] ? writeback_sb_inodes+0x43d/0x19a0 [ 1384.127667][ T37] __writeback_single_inode+0x133/0x11a0 [ 1384.127688][ T37] ? do_raw_spin_unlock+0xf5/0x210 [ 1384.127707][ T37] writeback_sb_inodes+0x944/0x19a0 [ 1384.127737][ T37] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1384.127771][ T37] ? __pfx_down_read_trylock+0x10/0x10 [ 1384.127787][ T37] ? __pfx___up_read+0x10/0x10 [ 1384.127808][ T37] __writeback_inodes_wb+0x111/0x240 [ 1384.127831][ T37] wb_writeback+0x46a/0xb70 [ 1384.127851][ T37] ? queue_io+0x1f1/0x4a0 [ 1384.127873][ T37] ? __pfx_wb_writeback+0x10/0x10 [ 1384.127891][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 1384.127914][ T37] wb_workfn+0xb4c/0xf50 [ 1384.127936][ T37] ? __pfx_wb_workfn+0x10/0x10 [ 1384.127959][ T37] ? do_raw_spin_unlock+0xf5/0x210 [ 1384.127984][ T37] ? process_one_work+0x87c/0x1650 [ 1384.128004][ T37] process_one_work+0x949/0x1650 [ 1384.128034][ T37] ? __pfx_process_one_work+0x10/0x10 [ 1384.128054][ T37] ? do_raw_spin_lock+0x26c/0x2f0 [ 1384.128077][ T37] worker_thread+0xb46/0x1140 [ 1384.128102][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1384.128125][ T37] kthread+0x388/0x470 [ 1384.128142][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1384.128162][ T37] ? __pfx_kthread+0x10/0x10 [ 1384.128178][ T37] ret_from_fork+0x51e/0xb90 [ 1384.128201][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1384.128222][ T37] ? __switch_to+0xc7d/0x1450 [ 1384.128242][ T37] ? __pfx_kthread+0x10/0x10 [ 1384.128257][ T37] ret_from_fork_asm+0x1a/0x30 [ 1384.128288][ T37] [ 1384.660237][ T4501] hfsplus: b-tree write err: -5, ino 4 [ 1384.742188][T10212] loop0: detected capacity change from 0 to 32768 [ 1385.033305][ T119] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1385.173486][ T119] usb 4-1: Using ep0 maxpacket: 16 [ 1385.180264][ T119] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 1385.188786][ T119] usb 4-1: config 0 has no interface number 0 [ 1385.195480][ T119] usb 4-1: config 0 interface 48 has no altsetting 0 [ 1385.204248][ T119] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 1385.213725][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.221798][ T119] usb 4-1: Product: syz [ 1385.225993][ T119] usb 4-1: Manufacturer: syz [ 1385.230719][ T119] usb 4-1: SerialNumber: syz [ 1385.238989][ T119] usb 4-1: config 0 descriptor?? [ 1385.441995][T10214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.451429][T10214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.468834][T27805] usb 4-1: USB disconnect, device number 6 [ 1385.971258][ T5824] udevd[5824]: symlink '../../loop3' '/dev/disk/by-diskseq/3705.tmp-b7:3' failed: Read-only file system