last executing test programs: 15m38.498288113s ago: executing program 1 (id=3401): syz_usb_connect(0x2, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 15m36.632190027s ago: executing program 1 (id=3426): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) 15m36.378381197s ago: executing program 1 (id=3429): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x7, 0x101, 0x864, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0xb}, 0x50) 15m36.184523655s ago: executing program 1 (id=3432): socket$isdn(0x22, 0x3, 0x3) 15m35.98379486s ago: executing program 1 (id=3437): syz_emit_ethernet(0x76, &(0x7f0000000780)={@broadcast, @random="42e17dbe6edb", @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x3c, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 15m35.756698054s ago: executing program 1 (id=3440): syz_read_part_table(0x1060, &(0x7f0000002280)="$eJzsz8FtwkAQBdBve504h3SSCiJFyS0FICqhBlMAZXClARqhDK4sWsluATi8d9mv1Z+RJjxXn8+fJb6vP8m1hdIlOSf5S1JrrftdLt9LeehS2zvN/brq/yOZkrFP2uRvkk0Zxrckt5Kv1jvlMJelXpLt8aG3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCLugcAAP//4S4O8w==") 15m19.422781032s ago: executing program 32 (id=3440): syz_read_part_table(0x1060, &(0x7f0000002280)="$eJzsz8FtwkAQBdBve504h3SSCiJFyS0FICqhBlMAZXClARqhDK4sWsluATi8d9mv1Z+RJjxXn8+fJb6vP8m1hdIlOSf5S1JrrftdLt9LeehS2zvN/brq/yOZkrFP2uRvkk0Zxrckt5Kv1jvlMJelXpLt8aG3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCLugcAAP//4S4O8w==") 3m36.940670899s ago: executing program 5 (id=13221): r0 = socket$pptp(0x18, 0x1, 0x2) accept4(r0, 0x0, 0x0, 0x800) 3m36.680008056s ago: executing program 5 (id=13226): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x5, 0x19, 0x0, 0x1, [@generic="b0"]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3m36.471216532s ago: executing program 5 (id=13231): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x541e, &(0x7f0000000040)) 3m36.272821222s ago: executing program 5 (id=13237): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 3m36.007558258s ago: executing program 5 (id=13242): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000080)={0x10, 0x2000000}) 3m35.371157551s ago: executing program 5 (id=13251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}}, 0x0) 3m34.763530693s ago: executing program 33 (id=13251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080001"], 0x24}}, 0x0) 1m52.283278855s ago: executing program 2 (id=14489): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0xff}) 1m52.008566828s ago: executing program 2 (id=14493): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000), 0x10) 1m51.797216845s ago: executing program 2 (id=14496): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) dup2(r1, r0) 1m51.63252829s ago: executing program 2 (id=14498): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x400c, &(0x7f0000000580)={[{@lazytime}, {@init_itable}, {@noauto_da_alloc}]}, 0x3, 0x487, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m51.129481049s ago: executing program 2 (id=14501): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800002, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@gid}, {@gid}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@keep_last_dots}, {@gid}, {@sys_tz}, {@zero_size_dir}]}, 0x1, 0x152c, &(0x7f0000000400)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x6) ioctl$FS_IOC_SETFLAGS(r0, 0x41009432, &(0x7f00000001c0)=0x80ff) 1m50.471348335s ago: executing program 2 (id=14505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x54, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m49.973695499s ago: executing program 34 (id=14505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x54, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m7.029923981s ago: executing program 4 (id=14804): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r1], 0x24}}, 0x0) 1m6.809756747s ago: executing program 4 (id=14806): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='changeprofile ://&'], 0x17) 1m6.535741284s ago: executing program 4 (id=14809): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1000, 0x1, 0x4, 0x0, 0x9}) 1m6.208329822s ago: executing program 4 (id=14812): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000000300)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m5.453027354s ago: executing program 4 (id=14817): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@heap}, {@alloc_mode_def}, {@six_active_logs}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x17}}, {@discard}, {@lfs_mode}, {@fsync_mode_posix}, {@alloc_mode_def}, {@memory_low}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5512, &(0x7f0000005a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000000)={0x10, 0x5, 0x0, 0x1000}) 1m3.397668711s ago: executing program 4 (id=14830): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 1m2.817404236s ago: executing program 35 (id=14830): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 18.297444016s ago: executing program 8 (id=15168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.016435598s ago: executing program 8 (id=15171): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x40001, 0x2}, {0x7ff, 0xff}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 17.740835713s ago: executing program 8 (id=15175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0xa, 0xf, {0xf, 0x21, "97aa815508d6a9df01f37c5ed3"}}, 0x0}, 0x0) 15.685818709s ago: executing program 8 (id=15191): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x220, &(0x7f0000000440)="$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") mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@size={'size', 0x3d, [0x6b]}}]}) 15.219842142s ago: executing program 8 (id=15193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00080000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) getgroups(0x0, 0x0) 14.317830848s ago: executing program 8 (id=15200): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x283}) 13.601290993s ago: executing program 36 (id=15200): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x283}) 5.839063209s ago: executing program 7 (id=15252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 5.614858596s ago: executing program 7 (id=15254): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.369810293s ago: executing program 7 (id=15256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002480)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) 4.417834181s ago: executing program 6 (id=15262): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20) 2.374287577s ago: executing program 6 (id=15265): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0xa0835c, &(0x7f00000000c0)={[{@test_dummy_encryption_v1}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) 2.37324591s ago: executing program 7 (id=15266): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c696f636861727365743d63703835352c666d61736b3d30303030303030303030303030303030303030303230342c756d61736b3d30303030303030303030303030303030303031303030002c6b6565705f6c6173745f646f74732c757466382c696f636861727365743d69736f383835382d322c00716e38bcb049da85848e6756a3bd4745417549b1cb9a33b753aa8794c7e33757ce7c8e8fffc81ac6d5041b8ed65bd4dbe75b53ad789c5f492cb5866d74265428e77c8824127d6f36cd183083f016bdaf33c30f8645e367d089cb4235517369a13ead2b4ea75585050ac51ba363c593780cf08ef99a97db4c453e6fded10a48d332668e93902504c38866c149921b590e1dd141206e28b0b817e984629c659b02a0508f2b8ca4ae4a125af4831e79e8bbb571147676f45a4e36f460952320d5a1d97c98508c7f149f9a30b543949899e532f8be39abce"], 0x1, 0x152c, &(0x7f0000001f80)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x41009432, &(0x7f00000001c0)=0xfe) 2.191997619s ago: executing program 3 (id=15268): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0x8, 0x1, 0xb2}) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) 2.037707899s ago: executing program 3 (id=15269): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 1.930795105s ago: executing program 7 (id=15270): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_aout(r0, 0x0, 0x29f) 1.764762553s ago: executing program 0 (id=15271): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, &(0x7f0000000040)) 1.64836814s ago: executing program 3 (id=15272): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) 1.627017328s ago: executing program 6 (id=15273): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000004c0)={0x0, 0x5}) 1.591244564s ago: executing program 0 (id=15274): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, 0x0) 1.195879378s ago: executing program 0 (id=15275): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.152459238s ago: executing program 3 (id=15276): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000, 0x4000000}) 1.003857645s ago: executing program 6 (id=15277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 927.383727ms ago: executing program 3 (id=15278): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x3, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x2, 0x2}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f40)=@newchain={0x454, 0x64, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0x3, 0xb}, {0x9, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x428, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0x3}}, @TCA_FW_POLICE={0x41c, 0x2, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0xa0, 0x9, 0x7, 0x1a00, 0x8, 0x10001, 0xffffff8f, 0x0, 0xffff, 0xfffffffa, 0xffffff71, 0x781, 0x80000000, 0x6, 0x8001, 0x8, 0x5, 0x10001, 0x5, 0x9, 0x0, 0x0, 0x4, 0x8, 0x7, 0xf8, 0x5, 0x7, 0xdec, 0x1ff, 0x6, 0x8c0a, 0x2, 0x4717, 0x1, 0xc, 0x8, 0x8000, 0x7, 0x7, 0x4, 0x9, 0x10000000, 0x5587, 0x3, 0x2, 0x7f, 0xa, 0x10000, 0x1, 0xa5, 0xd62, 0x53d0, 0x5, 0x1, 0x7b29c027, 0x6, 0x4, 0x7c, 0x1, 0x4, 0x0, 0xfffffffd, 0x5, 0x1000, 0x5, 0x6, 0x8, 0xf764, 0x5, 0x38, 0x7, 0xa, 0xf, 0xfffffffe, 0x8, 0x3, 0x1, 0x1, 0x9, 0x1ff, 0x0, 0x7f, 0x0, 0x7, 0x4, 0xfffffff8, 0x2, 0xfffffff7, 0x3, 0x0, 0x7ff, 0xffff, 0xf7d9, 0x2, 0xd53c, 0x51, 0x9, 0x4, 0x19, 0x3000, 0x5, 0x8, 0x200, 0xfffffffc, 0x0, 0x3, 0x5, 0x6c, 0x9, 0x2, 0x1ff, 0xaf, 0x80000000, 0x81, 0x3, 0x80000000, 0x608, 0x2, 0x3ec, 0xdc, 0x0, 0x6, 0x934b, 0xf, 0x6, 0x9, 0xf, 0x6, 0xb, 0x1000, 0x5, 0x7, 0xc, 0xb, 0x4, 0x7, 0x51, 0x5, 0x3, 0x150e, 0x6, 0x8, 0x1, 0xa33, 0x2, 0xaf88, 0x6, 0x0, 0x69, 0x0, 0x5, 0x5, 0x10001, 0xd8f, 0x4, 0x80000001, 0xdd, 0x8, 0x960a, 0x7fff, 0x9, 0x1b0, 0x0, 0x8000, 0x7, 0x8, 0x7537, 0xc4f, 0x101, 0x8a, 0x5, 0x0, 0x2, 0xe4a, 0x2, 0xd, 0x7, 0x1ff, 0x2, 0xfffffffc, 0x3, 0x400, 0x81, 0x9, 0x6, 0xa5, 0x2, 0x3baf, 0x9b, 0x593c, 0x10001, 0xb3fe, 0x7, 0x2, 0xbe, 0x7, 0x3, 0x5, 0x922, 0x9, 0x5, 0x1, 0x2, 0x352f, 0x6, 0x2, 0x80, 0x18, 0x3, 0xb9, 0xfffffff9, 0x7, 0xcbe2, 0x8, 0x6, 0x6, 0xfffffeff, 0x100, 0xffff, 0x3, 0x80, 0x401, 0x4, 0x9, 0x0, 0x800, 0x6, 0x7, 0x3, 0x6, 0x9, 0x62, 0x2, 0x1, 0x7fffffff, 0x401, 0x400, 0x6, 0xea6, 0x8, 0x7, 0x6, 0x10000, 0x1, 0x5, 0x7, 0x1c, 0xfffffff6, 0x200, 0x2, 0x5, 0x6b, 0x1d44, 0x7fffffff]}]}]}}]}, 0x454}}, 0x4000) 709.847003ms ago: executing program 0 (id=15279): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) 657.541744ms ago: executing program 3 (id=15280): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRES64, @ANYRES16, @ANYRES64], 0x41, 0x5e97, &(0x7f0000005e00)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)=""/24, 0x18) 391.067507ms ago: executing program 6 (id=15281): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) flistxattr(r0, 0x0, 0xffffffffffffff73) 348.534437ms ago: executing program 0 (id=15282): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) 117.339461ms ago: executing program 6 (id=15283): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000005980), 0xfe, 0x98ab, &(0x7f000001c880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) pwritev(r0, &(0x7f0000001640)=[{&(0x7f0000000240)='\\', 0x1}], 0x1, 0x68000000, 0x7) 116.273656ms ago: executing program 7 (id=15284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000f8ffffff000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000003850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 0 (id=15285): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000080fbdbdf250a81"], 0x1c}}, 0x20000050) kernel console output (not intermixed with test programs): ctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1328.848700][ T30] audit: type=1800 audit(2000001093.195:455): pid=22952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14639" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1328.925322][T21875] veth1_vlan: entered promiscuous mode [ 1329.081674][T22968] loop6: detected capacity change from 0 to 1024 [ 1329.128464][T22968] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1329.188849][T22968] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1329.238670][T21875] veth0_macvtap: entered promiscuous mode [ 1329.239776][T22968] EXT4-fs (loop6): invalid journal inode [ 1329.294659][T22968] EXT4-fs (loop6): can't get journal size [ 1329.320402][T21875] veth1_macvtap: entered promiscuous mode [ 1329.354362][T22968] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 1329.389851][T22968] EXT4-fs (loop6): mount failed [ 1329.514483][T22990] loop3: detected capacity change from 0 to 512 [ 1329.515934][T21875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.587028][T22990] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1329.599318][T21875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.650074][T22998] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.14649'. [ 1329.667774][T22990] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1329.677313][T22993] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.14649'. [ 1329.743019][T22990] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.14647: bg 0: block 248: padding at end of block bitmap is not set [ 1329.763753][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.797765][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.807404][T22990] Quota error (device loop3): write_blk: dquota write failed [ 1329.819141][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.843193][T22990] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1329.864527][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.886090][T22990] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.14647: Failed to acquire dquot type 1 [ 1329.944997][T22990] EXT4-fs (loop3): 1 truncate cleaned up [ 1329.960490][T22990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1330.184846][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.220537][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.282233][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1330.332688][ T1110] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 1330.350532][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.354084][T23025] loop0: detected capacity change from 0 to 1764 [ 1330.374788][ T1110] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1 [ 1330.386707][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.592347][T23038] loop3: detected capacity change from 0 to 1024 [ 1330.764487][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1330.787111][T22995] loop4: detected capacity change from 0 to 32768 [ 1330.852356][T22995] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1330.908945][T22995] XFS (loop4): Ending clean mount [ 1330.957180][T22995] XFS (loop4): Quotacheck needed: Please wait. [ 1330.994814][ T5916] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1331.121641][T22995] XFS (loop4): Quotacheck: Done. [ 1331.157402][ T5916] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 1331.171807][ T5916] usb 1-1: config 7 has no interface number 0 [ 1331.192586][ T5916] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1331.213757][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.230041][ T5916] usb 1-1: Product: syz [ 1331.238864][ T5916] usb 1-1: Manufacturer: syz [ 1331.251265][ T5916] usb 1-1: SerialNumber: syz [ 1331.302252][ T5835] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1331.512523][ T5916] as10x_usb: device has been detected [ 1331.540778][ T5916] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1331.600855][ T5916] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1331.676767][ T5916] as10x_usb: error during firmware upload part1 [ 1331.712325][ T5916] Registered device Elgato EyeTV DTT Deluxe [ 1331.715595][ T5916] usb 1-1: USB disconnect, device number 45 [ 1331.912610][ T5916] Unregistered device Elgato EyeTV DTT Deluxe [ 1331.920311][ T5916] as10x_usb: device has been disconnected [ 1332.019234][T23121] loop6: detected capacity change from 0 to 1024 [ 1332.054566][T23121] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1332.074513][T23121] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1332.083359][T23121] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1332.085549][T23127] loop4: detected capacity change from 0 to 1024 [ 1332.120869][T23121] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (37511!=20869) [ 1332.170875][T23121] EXT4-fs (loop6): group descriptors corrupted! [ 1332.209012][T23127] hfsplus: walked past end of dir [ 1332.383872][T23140] loop3: detected capacity change from 0 to 512 [ 1332.447640][T23140] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.14675: bad orphan inode 13 [ 1332.504222][T23140] ext4_test_bit(bit=12, block=4) = 1 [ 1332.525180][T23140] is_bad_inode(inode)=0 [ 1332.529400][T23140] NEXT_ORPHAN(inode)=0 [ 1332.533598][T23140] max_ino=32 [ 1332.570156][T23140] i_nlink=1 [ 1332.575389][T23140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1332.641385][T23140] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.14675: Unrecognised inode hash code 20 [ 1332.663567][T23090] loop7: detected capacity change from 0 to 32768 [ 1332.673935][T23140] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.14675: Corrupt directory, running e2fsck is recommended [ 1332.682893][T23159] loop6: detected capacity change from 0 to 8 [ 1332.696825][T24742] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1332.758910][T23140] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.14675: Unrecognised inode hash code 20 [ 1332.781006][T23090] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1332.790775][T23140] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.14675: Corrupt directory, running e2fsck is recommended [ 1332.856394][T23140] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.14675: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 1332.867617][T24742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.886270][T24742] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1332.897588][T23090] XFS (loop7): Ending clean mount [ 1332.914989][T24742] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1332.918557][T23090] XFS (loop7): Quotacheck needed: Please wait. [ 1332.934708][T24742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.955087][T24742] usb 5-1: config 0 descriptor?? [ 1333.078610][T23090] XFS (loop7): Quotacheck: Done. [ 1333.093379][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.249927][T23141] loop0: detected capacity change from 0 to 32768 [ 1333.318651][T23141] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1333.345733][T21875] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1333.430354][T24742] kovaplus 0003:1E7D:2D50.0009: item fetching failed at offset 2/5 [ 1333.454341][ T797] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1333.521406][T24742] kovaplus 0003:1E7D:2D50.0009: parse failed [ 1333.527528][T24742] kovaplus 0003:1E7D:2D50.0009: probe with driver kovaplus failed with error -22 [ 1333.642262][ T797] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1333.676856][ T5838] ocfs2: Unmounting device (7,0) on (node local) [ 1333.678611][T24742] usb 5-1: USB disconnect, device number 21 [ 1333.686418][ T797] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1333.763641][ T797] usb 7-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1333.820732][ T797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.871338][ T797] usb 7-1: config 0 descriptor?? [ 1333.877470][T23182] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1333.897138][T23205] loop3: detected capacity change from 0 to 4096 [ 1334.406216][ T797] hid-retrode 0003:0403:97C1.000A: unknown main item tag 0x0 [ 1334.451574][ T797] hid-retrode 0003:0403:97C1.000A: unknown main item tag 0x0 [ 1334.459215][T23237] netlink: 'syz.0.14684': attribute type 41 has an invalid length. [ 1334.491090][ T797] hid-retrode 0003:0403:97C1.000A: unknown main item tag 0x0 [ 1334.510814][ T797] hid-retrode 0003:0403:97C1.000A: unknown main item tag 0x0 [ 1334.523194][T23238] loop7: detected capacity change from 0 to 512 [ 1334.561837][ T797] hid-retrode 0003:0403:97C1.000A: unknown main item tag 0x0 [ 1334.627662][ T797] hid-retrode 0003:0403:97C1.000A: hidraw0: USB HID v1.01 Device [HID 0403:97c1] on usb-dummy_hcd.6-1/input0 [ 1334.718089][ T797] usb 7-1: USB disconnect, device number 9 [ 1334.979976][T23256] fido_id[23256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1336.085581][T23241] loop3: detected capacity change from 0 to 32768 [ 1336.174622][T23241] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1336.360451][T23323] loop4: detected capacity change from 0 to 64 [ 1336.373487][T23241] XFS (loop3): Ending clean mount [ 1336.675469][ T5832] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1337.382231][T23298] loop7: detected capacity change from 0 to 32768 [ 1337.459465][T23298] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.14696 (23298) [ 1337.551912][T23369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14708'. [ 1337.580090][T23298] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1337.631116][T23298] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1337.773529][ T5916] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1337.782662][T23307] loop0: detected capacity change from 0 to 40427 [ 1337.806999][T23307] F2FS-fs (loop0): build fault injection rate: 771 [ 1337.844721][T23307] F2FS-fs (loop0): invalid crc value [ 1337.906651][T23298] BTRFS info (device loop7): rebuilding free space tree [ 1337.926063][T23385] ip6gre1: entered promiscuous mode [ 1337.946492][T23385] ip6gre1: entered allmulticast mode [ 1337.976721][ T5916] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.000121][ T1110] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1338.019669][ T5916] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.036163][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1338.037817][ T1110] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1338.044074][T23298] BTRFS info (device loop7): disabling free space tree [ 1338.061436][T22728] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1338.082241][ T5916] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 1338.115018][T23298] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1338.133233][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.135746][T23298] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1338.186919][ T5916] usb 4-1: config 0 descriptor?? [ 1338.209487][T23298] BTRFS info (device loop7): enabling ssd optimizations [ 1338.218085][T22728] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1338.238323][T23298] BTRFS info (device loop7): turning on async discard [ 1338.264472][T23298] BTRFS info (device loop7): force clearing of disk cache [ 1338.288309][T23298] BTRFS info (device loop7): enabling auto defrag [ 1338.296105][T23307] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1338.305771][ T797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1338.328543][T23298] BTRFS info (device loop7): max_inline set to 4096 [ 1338.343049][T23307] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1338.426059][T22728] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 1338.450559][T22728] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1338.499195][T22728] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1338.553287][T22728] usb 7-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1338.604755][T22728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.638196][T22728] usb 7-1: config 0 descriptor?? [ 1338.655912][T21875] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1338.673496][T23407] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1338.685234][ T5838] syz-executor: attempt to access beyond end of device [ 1338.685234][ T5838] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1338.745657][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1338.745685][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1338.745695][ T5838] Call Trace: [ 1338.745703][ T5838] [ 1338.745712][ T5838] dump_stack_lvl+0x189/0x250 [ 1338.745747][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1338.745773][ T5838] ? __pfx_queue_work_on+0x10/0x10 [ 1338.745794][ T5838] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1338.745815][ T5838] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1338.745851][ T5838] f2fs_handle_critical_error+0x37c/0x540 [ 1338.745888][ T5838] f2fs_write_end_io+0x886/0xb60 [ 1338.745929][ T5838] __submit_merged_bio+0x27a/0x6a0 [ 1338.745977][ T5838] __submit_merged_write_cond+0x255/0x530 [ 1338.746013][ T5838] f2fs_write_data_pages+0x261d/0x3000 [ 1338.746071][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1338.746144][ T5838] ? __mod_zone_page_state+0xd7/0x140 [ 1338.746177][ T5838] ? folios_put_refs+0x58b/0x670 [ 1338.746217][ T5838] ? __lock_acquire+0xab9/0xd20 [ 1338.746250][ T5838] ? do_raw_spin_lock+0x121/0x290 [ 1338.746287][ T5838] ? do_raw_spin_unlock+0x122/0x240 [ 1338.746315][ T5838] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1338.746337][ T5838] do_writepages+0x32e/0x550 [ 1338.746379][ T5838] ? do_raw_spin_unlock+0x122/0x240 [ 1338.746413][ T5838] filemap_fdatawrite+0x199/0x240 [ 1338.746435][ T5838] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1338.746519][ T5838] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1338.746559][ T5838] f2fs_write_checkpoint+0x93e/0x2440 [ 1338.746579][ T5838] ? stack_depot_save_flags+0x40/0x860 [ 1338.746634][ T5838] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1338.746703][ T5838] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 1338.746724][ T5838] ? kfree+0x19a/0x6d0 [ 1338.746756][ T5838] kill_f2fs_super+0x2cc/0x6d0 [ 1338.746785][ T5838] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1338.746829][ T5838] ? shrinker_free+0x2ce/0x3e0 [ 1338.746858][ T5838] deactivate_locked_super+0xbc/0x130 [ 1338.746885][ T5838] cleanup_mnt+0x425/0x4c0 [ 1338.746907][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 1338.746935][ T5838] task_work_run+0x1d4/0x260 [ 1338.746966][ T5838] ? __pfx_task_work_run+0x10/0x10 [ 1338.746982][ T5838] ? __x64_sys_umount+0x122/0x160 [ 1338.747012][ T5838] ? exit_to_user_mode_loop+0x40/0x130 [ 1338.747038][ T5838] exit_to_user_mode_loop+0xe9/0x130 [ 1338.747061][ T5838] do_syscall_64+0x2bd/0xfa0 [ 1338.747083][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 1338.747107][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.747126][ T5838] ? clear_bhb_loop+0x60/0xb0 [ 1338.747151][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.747169][ T5838] RIP: 0033:0x7f27399902f7 [ 1338.747190][ T5838] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1338.747207][ T5838] RSP: 002b:00007ffeb4390b78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1338.747229][ T5838] RAX: 0000000000000000 RBX: 00007f2739a11d7d RCX: 00007f27399902f7 [ 1338.747242][ T5838] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb4390c30 [ 1338.747254][ T5838] RBP: 00007ffeb4390c30 R08: 0000000000000000 R09: 0000000000000000 [ 1338.747267][ T5838] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb4391cc0 [ 1338.747279][ T5838] R13: 00007f2739a11d7d R14: 00000000001332e2 R15: 00007ffeb4391d00 [ 1338.747317][ T5838] [ 1338.747354][ T5838] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1339.001556][ T5916] usb 4-1: USB disconnect, device number 30 [ 1339.055668][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1339.232041][T22728] hid (null): report_id 675303578 is invalid [ 1339.252076][T22728] uclogic 0003:5543:0005.000C: report_id 675303578 is invalid [ 1339.288429][T22728] uclogic 0003:5543:0005.000C: item 0 4 1 8 parsing failed [ 1339.340753][T22728] uclogic 0003:5543:0005.000C: parse failed [ 1339.364352][T22728] uclogic 0003:5543:0005.000C: probe with driver uclogic failed with error -22 [ 1339.450985][ T24] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 1339.492835][T22728] usb 7-1: USB disconnect, device number 10 [ 1339.653147][ T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1339.679215][ T24] usb 5-1: config 0 has no interface number 0 [ 1339.715745][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1339.759098][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1339.804988][ T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1339.864889][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1339.889330][ T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1339.912949][ T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1339.941850][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1339.962486][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.020729][ T24] usb 5-1: config 0 descriptor?? [ 1340.027750][T23441] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1340.057041][T23441] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1340.149126][ T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1340.450311][T23441] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 1340.535974][ T24] usb 5-1: USB disconnect, device number 22 [ 1340.568692][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1341.194471][T23540] loop7: detected capacity change from 0 to 2048 [ 1341.254901][T23546] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1341.285058][T23549] loop3: detected capacity change from 0 to 512 [ 1341.293025][T23547] loop4: detected capacity change from 0 to 64 [ 1341.299791][T23549] EXT4-fs: Ignoring removed mblk_io_submit option [ 1341.347199][T23549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1341.452737][T23546] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1341.490062][T23546] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1341.505939][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.531127][T23546] Remounting filesystem read-only [ 1341.579792][T21875] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 1341.861755][T23574] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14732'. [ 1341.861851][T23574] netlink: 60 bytes leftover after parsing attributes in process `syz.7.14732'. [ 1342.088084][T23582] loop4: detected capacity change from 0 to 4096 [ 1342.114032][T23535] loop0: detected capacity change from 0 to 32768 [ 1342.159769][T23535] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1342.351759][T23582] ntfs3(loop4): failed to convert "0080" to cp932 [ 1342.374254][T23535] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1342.392156][T23569] loop3: detected capacity change from 0 to 32768 [ 1342.396008][T23582] ntfs3(loop4): failed to convert name for inode 1e. [ 1342.423249][T23569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.14734 (23569) [ 1342.465167][T23582] ntfs3(loop4): ino=1f, mi_enum_attr [ 1342.490895][T23582] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1342.516790][T23569] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1342.604828][T23569] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 1342.663021][T23611] loop6: detected capacity change from 0 to 1024 [ 1342.722511][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1342.771382][T23611] syz.6.14743: attempt to access beyond end of device [ 1342.771382][T23611] loop6: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1342.808103][T23611] Buffer I/O error on dev loop6, logical block 100663296, async page read [ 1342.847057][T23611] hfsplus: unable to mark blocks free: error -5 [ 1342.874202][T23611] hfsplus: can't free extent: start 0, count 1 [ 1342.889232][ T5838] ocfs2: Unmounting device (7,0) on (node local) [ 1342.900542][T23569] BTRFS info (device loop3): rebuilding free space tree [ 1342.995292][T23569] BTRFS info (device loop3): checking UUID tree [ 1343.053824][T23569] BTRFS info (device loop3): allowing degraded mounts [ 1343.060680][T23569] BTRFS info (device loop3): enabling ssd optimizations [ 1343.146330][T23569] BTRFS info (device loop3): enabling free space tree [ 1343.163813][T23569] BTRFS info (device loop3): force clearing of disk cache [ 1343.197136][T23569] BTRFS info (device loop3): force zlib compression, level 3 [ 1343.248417][T23646] loop7: detected capacity change from 0 to 512 [ 1343.351039][T23646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1343.358579][T23652] loop4: detected capacity change from 0 to 64 [ 1343.400107][T23646] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1343.464933][ T5832] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1343.493751][T23658] loop6: detected capacity change from 0 to 512 [ 1343.625647][T21875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1343.626769][T23658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1343.653767][T23658] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1343.741041][T23665] tipc: Started in network mode [ 1343.754815][T23665] tipc: Node identity 00000000000000000000007ade000001, cluster identity 4711 [ 1343.805698][T23665] tipc: Enabling of bearer rejected, failed to enable media [ 1343.944950][T23658] EXT4-fs error (device loop6): ext4_get_first_dir_block:3529: inode #12: comm syz.6.14749: Attempting to read directory block (0) that is past i_size (3) [ 1344.076757][T23658] EXT4-fs (loop6): Remounting filesystem read-only [ 1344.143685][T23683] loop4: detected capacity change from 0 to 128 [ 1344.175551][T23683] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1344.259252][ T1002] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1344.259374][T16172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1344.308534][T23688] netlink: 'syz.7.14756': attribute type 3 has an invalid length. [ 1344.323632][ T1002] Quota error (device loop6): write_blk: dquota write failed [ 1344.365282][ T1002] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 1344.915433][T22728] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1344.923931][T23718] loop0: detected capacity change from 0 to 512 [ 1344.953051][T23718] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1344.979434][T23718] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1345.024954][T23718] EXT4-fs (loop0): 1 truncate cleaned up [ 1345.033929][T23718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.074802][T22728] usb 8-1: Using ep0 maxpacket: 16 [ 1345.088826][T22728] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.101749][T23718] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1345.106243][T22728] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.133058][T22728] usb 8-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1345.146315][T22728] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1345.153158][ T6163] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1345.161033][T22728] usb 8-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1345.170173][T22728] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.184447][T22728] usb 8-1: config 0 descriptor?? [ 1345.222576][T23737] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.0.14763: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1345.246452][ T24] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1345.270600][T23737] EXT4-fs error (device loop0) in ext4_delete_entry:2739: Corrupt filesystem [ 1345.317745][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.369268][ T6163] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1345.382946][ T6163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.396469][ T6163] usb 5-1: Product: syz [ 1345.401321][ T6163] usb 5-1: Manufacturer: syz [ 1345.415646][ T6163] usb 5-1: SerialNumber: syz [ 1345.448133][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1345.459505][ T6163] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1345.470677][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1345.481891][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.499652][ T797] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1345.521526][ T24] usb 7-1: config 0 descriptor?? [ 1345.555329][ T5916] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1345.643909][T22728] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1345.650697][T22728] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1345.672534][T22728] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1345.680915][T22728] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1345.688255][T22728] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1345.703652][T22728] kye 0003:0458:0087.000D: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.7-1/input0 [ 1345.726484][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 1345.780251][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.797504][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1345.813302][ T5916] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1345.823190][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.842687][ T5916] usb 4-1: config 0 descriptor?? [ 1345.955875][ T6163] usb 8-1: USB disconnect, device number 2 [ 1346.019451][ T24] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 1346.035182][ T24] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 1346.046641][ T24] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 1346.055740][ T24] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 1346.064312][ T24] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 1346.078827][ T24] redragon 0003:0C45:760B.000E: hidraw0: USB HID vff.fc Device [HID 0c45:760b] on usb-dummy_hcd.6-1/input0 [ 1346.227718][T13138] usb 5-1: USB disconnect, device number 23 [ 1346.245700][ T6163] usb 7-1: USB disconnect, device number 11 [ 1346.336387][ T5916] gembird 0003:11FF:3331.000F: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.3-1/input0 [ 1346.468524][T23779] loop0: detected capacity change from 0 to 32768 [ 1346.504301][T23779] [ 1346.504301][T23779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1346.504301][T23779] [ 1346.524590][ T30] audit: type=1800 audit(2000001109.724:456): pid=23779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14774" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 1346.537915][T22728] usb 4-1: USB disconnect, device number 31 [ 1346.597306][ T5838] [ 1346.597306][ T5838] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1346.597306][ T5838] [ 1346.610721][ T5838] [ 1346.610721][ T5838] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1346.610721][ T5838] [ 1346.657135][ T797] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1346.681012][ T797] ath9k_htc: Failed to initialize the device [ 1346.703690][T13138] usb 5-1: ath9k_htc: USB layer deinitialized [ 1346.913319][ T6163] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1346.949010][T23846] loop4: detected capacity change from 0 to 1024 [ 1347.025303][T23846] hfsplus: bad catalog entry type [ 1347.105676][ T6163] usb 8-1: Using ep0 maxpacket: 32 [ 1347.116176][ T6163] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.154600][ T6163] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.178493][ T6163] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1347.188534][ T6163] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.192340][ T1158] hfsplus: b-tree write err: -5, ino 4 [ 1347.204451][ T6163] usb 8-1: config 0 descriptor?? [ 1347.696682][ T6163] aquacomputer_d5next 0003:0C70:F0B6.0010: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.7-1/input0 [ 1347.926450][ T6163] usb 8-1: USB disconnect, device number 3 [ 1348.304513][T23911] netlink: 504 bytes leftover after parsing attributes in process `syz.0.14791'. [ 1348.405257][T23860] loop3: detected capacity change from 0 to 40427 [ 1348.429835][T23872] loop6: detected capacity change from 0 to 32768 [ 1348.437070][T23860] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 1348.444965][T23860] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1348.457646][T23875] loop4: detected capacity change from 0 to 32768 [ 1348.460851][T23872] btrfs: Deprecated parameter 'usebackuproot' [ 1348.482721][T23860] F2FS-fs (loop3): build fault injection rate: 17008 [ 1348.536256][T23872] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1348.548133][T23860] F2FS-fs (loop3): build fault injection type: 0x1f8 [ 1348.588218][T23875] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 1348.638876][T23860] F2FS-fs (loop3): invalid crc value [ 1348.647442][T23872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.14784 (23872) [ 1348.774845][T23872] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1348.822269][T23872] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 1349.019355][ T5835] ocfs2: Unmounting device (7,4) on (node local) [ 1349.073507][ T50] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 1349.140932][T23860] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1349.193662][T23872] BTRFS warning (device loop6): couldn't read tree root [ 1349.201436][T23872] BTRFS warning (device loop6): try to load backup roots slot 1 [ 1349.209735][ T50] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 1349.231375][T23872] BTRFS warning (device loop6): couldn't read tree root [ 1349.243821][T23872] BTRFS warning (device loop6): try to load backup roots slot 2 [ 1349.251969][T23860] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1349.254511][ T50] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1349.271376][T23872] BTRFS warning (device loop6): couldn't read tree root [ 1349.278546][T23872] BTRFS warning (device loop6): try to load backup roots slot 3 [ 1349.299681][T23860] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1349.345483][T23872] BTRFS info (device loop6): rebuilding free space tree [ 1349.364259][T23962] sctp: [Deprecated]: syz.0.14798 (pid 23962) Use of int in maxseg socket option. [ 1349.364259][T23962] Use struct sctp_assoc_value instead [ 1349.406290][T23872] BTRFS info (device loop6): checking UUID tree [ 1349.413806][T23872] BTRFS info (device loop6): enabling ssd optimizations [ 1349.443816][T23872] BTRFS info (device loop6): disabling tree log [ 1349.462991][T23872] BTRFS info (device loop6): turning on async discard [ 1349.493931][T23872] BTRFS info (device loop6): enabling free space tree [ 1349.516906][T23872] BTRFS info (device loop6): force clearing of disk cache [ 1349.530573][T23969] loop4: detected capacity change from 0 to 128 [ 1349.545107][T23872] BTRFS info (device loop6): trying to use backup root at mount time [ 1349.553260][T23872] BTRFS info (device loop6): use zlib compression, level 3 [ 1349.572555][T23969] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1349.595583][T23969] hpfs: filesystem error: improperly stopped [ 1349.603500][T23969] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1349.613071][T23969] hpfs: You really don't want any checks? You are crazy... [ 1349.630530][T23969] hpfs: hpfs_map_sector(): read error [ 1349.639513][T23969] hpfs: code page support is disabled [ 1349.673399][T23969] hpfs: hpfs_map_4sectors(): unaligned read [ 1349.705351][T23969] hpfs: hpfs_map_4sectors(): unaligned read [ 1349.711314][T23969] hpfs: filesystem error: unable to find root dir [ 1349.769238][T23969] hpfs: hpfs_map_4sectors(): unaligned read [ 1349.775991][T23969] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 1349.893443][T16172] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1350.208322][T23988] loop4: detected capacity change from 0 to 16 [ 1350.239557][T23988] erofs (device loop4): mounted with root inode @ nid 36. [ 1350.348121][ T30] audit: type=1400 audit(2000001113.269:457): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26170749D4C1 pid=23987 comm="syz.4.14806" [ 1350.507427][T23956] loop7: detected capacity change from 0 to 32768 [ 1350.668769][T23956] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 1350.802081][T24012] loop0: detected capacity change from 0 to 512 [ 1350.955175][T21875] ocfs2: Unmounting device (7,7) on (node local) [ 1350.968618][T13138] Process accounting resumed [ 1351.014291][T13138] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 1351.055458][T13138] FAT-fs (loop0): Filesystem has been set read-only [ 1351.063592][T24018] loop4: detected capacity change from 0 to 1024 [ 1351.155270][T24018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1351.386702][T24018] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1351.565550][ T5835] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /3040/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=2, rec_len=0, size=80 fake=0 [ 1351.620787][ T5835] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /3040/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=2, rec_len=0, size=80 fake=0 [ 1351.681944][ T5835] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 1351.690636][T24044] mkiss: ax0: crc mode is auto. [ 1351.775168][ T5835] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /3040/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=2, rec_len=0, size=80 fake=0 [ 1351.824349][ T5835] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /3040/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=2, rec_len=0, size=80 fake=0 [ 1351.892945][ T5835] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 1351.937280][ T5835] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /3040/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=2, rec_len=0, size=80 fake=0 [ 1351.964286][ T5835] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /3040/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=2, rec_len=0, size=80 fake=0 [ 1351.991347][ T5835] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 1352.003157][ T5835] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /3040/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=2, rec_len=0, size=80 fake=0 [ 1352.033939][ T5835] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /3040/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=2, rec_len=0, size=80 fake=0 [ 1352.089689][ T5835] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 1352.117072][ T5835] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /3040/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=2, rec_len=0, size=80 fake=0 [ 1352.172905][ T5835] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /3040/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=2, rec_len=0, size=80 fake=0 [ 1352.201642][T24016] loop6: detected capacity change from 0 to 40427 [ 1352.214874][ T5835] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 1352.225301][T24016] F2FS-fs (loop6): invalid crc value [ 1352.228182][ T5835] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 1352.249783][ T5835] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 1352.283489][ T5835] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 1352.305465][ T5835] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 1352.332302][ T5835] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 1352.568592][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1352.595087][T24016] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1352.615873][T24016] F2FS-fs (loop6): Start checkpoint disabled! [ 1352.633930][T24016] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1352.653390][T24016] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1352.732574][T24049] loop3: detected capacity change from 0 to 32768 [ 1352.745378][T24069] loop7: detected capacity change from 0 to 4096 [ 1352.776522][ T50] kworker/u8:3: attempt to access beyond end of device [ 1352.776522][ T50] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1352.807003][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 1352.807032][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1352.807044][ T50] Workqueue: writeback wb_workfn (flush-7:6) [ 1352.807075][ T50] Call Trace: [ 1352.807084][ T50] [ 1352.807093][ T50] dump_stack_lvl+0x189/0x250 [ 1352.807127][ T50] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1352.807154][ T50] ? __pfx_queue_work_on+0x10/0x10 [ 1352.807176][ T50] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1352.807199][ T50] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1352.807234][ T50] f2fs_handle_critical_error+0x37c/0x540 [ 1352.807270][ T50] f2fs_write_end_io+0x886/0xb60 [ 1352.807313][ T50] __submit_merged_bio+0x27a/0x6a0 [ 1352.807350][ T50] __submit_merged_write_cond+0x255/0x530 [ 1352.807387][ T50] f2fs_write_data_pages+0x261d/0x3000 [ 1352.807447][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1352.807484][ T50] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1352.807548][ T50] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1352.807577][ T50] ? look_up_lock_class+0x74/0x170 [ 1352.807613][ T50] ? trace_f2fs_writepages+0x7f/0x200 [ 1352.807644][ T50] ? f2fs_write_node_pages+0x478/0x6e0 [ 1352.807677][ T50] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1352.807708][ T50] ? __lock_acquire+0xab9/0xd20 [ 1352.807738][ T50] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1352.807759][ T50] do_writepages+0x32e/0x550 [ 1352.807804][ T50] ? reacquire_held_locks+0x127/0x1d0 [ 1352.807827][ T50] ? writeback_sb_inodes+0x384/0x1010 [ 1352.807863][ T50] __writeback_single_inode+0x145/0xff0 [ 1352.807889][ T50] ? do_raw_spin_unlock+0x122/0x240 [ 1352.807921][ T50] writeback_sb_inodes+0x6c7/0x1010 [ 1352.807978][ T50] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1352.808051][ T50] ? rcu_is_watching+0x15/0xb0 [ 1352.808088][ T50] wb_writeback+0x43b/0xaf0 [ 1352.808124][ T50] ? queue_io+0x3d1/0x590 [ 1352.808152][ T50] ? __pfx_wb_writeback+0x10/0x10 [ 1352.808187][ T50] ? _raw_spin_unlock_irq+0x23/0x50 [ 1352.808216][ T50] wb_workfn+0x409/0xef0 [ 1352.808257][ T50] ? __pfx_wb_workfn+0x10/0x10 [ 1352.808286][ T50] ? __lock_acquire+0xab9/0xd20 [ 1352.808321][ T50] ? process_scheduled_works+0x9ef/0x17b0 [ 1352.808359][ T50] ? _raw_spin_unlock_irq+0x23/0x50 [ 1352.808377][ T50] ? process_scheduled_works+0x9ef/0x17b0 [ 1352.808397][ T50] ? process_scheduled_works+0x9ef/0x17b0 [ 1352.808421][ T50] process_scheduled_works+0xae1/0x17b0 [ 1352.808478][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 1352.808523][ T50] worker_thread+0x8a0/0xda0 [ 1352.808578][ T50] kthread+0x711/0x8a0 [ 1352.808609][ T50] ? __pfx_worker_thread+0x10/0x10 [ 1352.808631][ T50] ? __pfx_kthread+0x10/0x10 [ 1352.808661][ T50] ? _raw_spin_unlock_irq+0x23/0x50 [ 1352.808681][ T50] ? lockdep_hardirqs_on+0x9c/0x150 [ 1352.808702][ T50] ? __pfx_kthread+0x10/0x10 [ 1352.808729][ T50] ret_from_fork+0x4bc/0x870 [ 1352.808753][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 1352.808791][ T50] ? __switch_to_asm+0x39/0x70 [ 1352.808807][ T50] ? __switch_to_asm+0x33/0x70 [ 1352.808821][ T50] ? __pfx_kthread+0x10/0x10 [ 1352.808848][ T50] ret_from_fork_asm+0x1a/0x30 [ 1352.808886][ T50] [ 1352.809431][ T50] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1352.841882][T24049] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1352.975189][T24069] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1353.267091][T24069] ntfs3: Volume is dirty and "force" flag is not set! [ 1353.404896][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.445788][ T5832] ocfs2: Unmounting device (7,3) on (node local) [ 1353.883361][ T5916] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1353.968404][T24114] loop6: detected capacity change from 0 to 1024 [ 1353.988957][T24114] EXT4-fs: inline encryption not supported [ 1354.010329][T24114] EXT4-fs: Ignoring removed i_version option [ 1354.063936][ T5916] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1354.095516][T24114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1354.118563][ T5916] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1354.127713][ T5916] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.237794][ T5916] usb 8-1: config 0 descriptor?? [ 1354.416851][T16172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.477192][ T5916] (null): keene_cmd_main failed (-71) [ 1354.542693][ T5916] video4linux radio48: keene_cmd_main failed (-71) [ 1354.586307][ T5916] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 1354.636017][ T5916] usb 8-1: USB disconnect, device number 4 [ 1354.668590][T24152] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 1354.918266][T31716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1354.933478][T31716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1354.944126][T31716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1354.962759][T31716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1354.982272][T31716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1355.360542][T24161] lo speed is unknown, defaulting to 1000 [ 1355.444646][T24195] loop3: detected capacity change from 0 to 2048 [ 1355.519069][T24195] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 1344: 0x15 != 0x00 [ 1355.572062][T24208] loop6: detected capacity change from 0 to 2048 [ 1355.587209][T24195] UDF-fs: warning (device loop3): udf_fill_super: No fileset found [ 1355.653588][T24208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1355.765894][T24208] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 1355.846323][T24210] loop0: detected capacity change from 0 to 4096 [ 1355.901062][T24210] ntfs3(loop0): ino=b, mi_enum_attr [ 1355.963030][T24210] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1355.988946][T24210] ntfs3(loop0): Failed to load $Extend (-22). [ 1356.010749][T24210] ntfs3(loop0): Failed to initialize $Extend. [ 1356.090131][T24228] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1356.160476][T24228] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1356.208590][T24228] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1356.262796][T24228] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1356.322272][T24228] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1357.078114][ T5916] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1357.186971][T21654] Bluetooth: hci2: command tx timeout [ 1357.259939][ T5916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1357.268947][ T5916] usb 4-1: config 0 has no interface number 0 [ 1357.315010][ T5916] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1357.361659][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.404080][ T5916] usb 4-1: config 0 descriptor?? [ 1357.438434][ T5916] usb 4-1: selecting invalid altsetting 1 [ 1357.460087][ T5916] dvb_ttusb_budget: ttusb_init_controller: error [ 1357.473876][ T5916] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1357.667195][ T5916] DVB: Unable to find symbol cx22700_attach() [ 1357.782458][ T5916] DVB: Unable to find symbol tda10046_attach() [ 1357.791576][ T5916] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1357.819484][ T5916] usb 4-1: USB disconnect, device number 32 [ 1357.826852][T24270] loop7: detected capacity change from 0 to 40427 [ 1357.886199][T24270] F2FS-fs (loop7): build fault injection rate: 14 [ 1357.907516][T24270] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 1357.968876][T24270] F2FS-fs (loop7): invalid crc value [ 1358.045872][ C0] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 1358.114483][ C0] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 1358.209829][T24270] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1358.220323][T24270] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 1358.257001][T24270] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1358.639285][ T5916] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1358.835397][ T5916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1358.846445][ T5916] usb 4-1: config 0 has no interface number 0 [ 1358.866698][ T5916] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1358.880038][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.909521][ T5916] usb 4-1: config 0 descriptor?? [ 1358.937139][ T5916] usb 4-1: selecting invalid altsetting 1 [ 1358.947523][ T5916] dvb_ttusb_budget: ttusb_init_controller: error [ 1358.961328][ T5916] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1359.063161][ T5916] DVB: Unable to find symbol cx22700_attach() [ 1359.156412][ T5916] DVB: Unable to find symbol tda10046_attach() [ 1359.172226][ T5916] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1359.219266][ T5916] usb 4-1: USB disconnect, device number 33 [ 1359.416823][T21654] Bluetooth: hci2: command tx timeout [ 1359.543618][ T30] audit: type=1326 audit(2000001121.903:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24343 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29898efc9 code=0x7ffc0000 [ 1359.565488][ T30] audit: type=1326 audit(2000001121.903:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24343 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc29898efc9 code=0x7ffc0000 [ 1359.589888][ T30] audit: type=1326 audit(2000001121.903:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24343 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29898efc9 code=0x7ffc0000 [ 1359.614288][ T30] audit: type=1326 audit(2000001121.903:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24343 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29898efc9 code=0x7ffc0000 [ 1359.673433][T24349] loop7: detected capacity change from 0 to 64 [ 1360.186668][T24370] loop7: detected capacity change from 0 to 64 [ 1360.364074][ T1110] bond0 (unregistering): Released all slaves [ 1360.508861][ T30] audit: type=1326 audit(2000001122.791:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24378 comm="syz.7.14873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29898efc9 code=0x7ffc0000 [ 1360.533434][ T30] audit: type=1326 audit(2000001122.791:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24378 comm="syz.7.14873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29898efc9 code=0x7ffc0000 [ 1360.557900][ T30] audit: type=1326 audit(2000001122.801:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24378 comm="syz.7.14873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc29898efc9 code=0x7ffc0000 [ 1360.650669][ T30] audit: type=1326 audit(2000001122.801:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24378 comm="syz.7.14873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29898efc9 code=0x7ffc0000 [ 1360.703443][T24364] loop3: detected capacity change from 0 to 40427 [ 1360.708415][ T30] audit: type=1326 audit(2000001122.801:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24378 comm="syz.7.14873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fc29898efc9 code=0x7ffc0000 [ 1360.720371][T24364] F2FS-fs (loop3): build fault injection rate: 14 [ 1360.801449][T24364] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 1360.828387][ T30] audit: type=1326 audit(2000001122.801:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24378 comm="syz.7.14873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29898efc9 code=0x7ffc0000 [ 1360.838702][T24364] F2FS-fs (loop3): invalid crc value [ 1360.874385][T24386] netlink: 'syz.7.14875': attribute type 10 has an invalid length. [ 1360.903638][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 1360.942245][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 1361.054166][T24364] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1361.065498][T24364] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 1361.085807][T24364] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1361.183435][ T1110] bond1 (unregistering): Released all slaves [ 1361.218874][ T1110] bond2 (unregistering): Released all slaves [ 1361.295409][ T1110] bond3 (unregistering): Released all slaves [ 1361.625522][T24410] loop7: detected capacity change from 0 to 1024 [ 1361.655099][T21654] Bluetooth: hci2: command tx timeout [ 1362.080561][ T1002] hfsplus: b-tree write err: -5, ino 4 [ 1362.375612][T24161] vxcan1 speed is unknown, defaulting to 1000 [ 1363.112743][T24474] loop0: detected capacity change from 0 to 64 [ 1363.851961][T21654] Bluetooth: hci2: command tx timeout [ 1363.889803][T24455] loop7: detected capacity change from 0 to 32768 [ 1363.960310][T24462] loop6: detected capacity change from 0 to 32768 [ 1364.090781][T24452] loop3: detected capacity change from 0 to 40427 [ 1364.114916][T24462] syz.6.14890: attempt to access beyond end of device [ 1364.114916][T24462] loop6: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 1364.153305][T24452] F2FS-fs (loop3): build fault injection rate: 690 [ 1364.171266][T24462] metapage_write_end_io: I/O error [ 1364.205292][T24452] F2FS-fs (loop3): invalid crc value [ 1364.211540][T24462] ERROR: (device loop6): release_metapage: metapage_write_one() failed [ 1364.211540][T24462] [ 1364.273668][T24462] ERROR: (device loop6): remounting filesystem as read-only [ 1364.302668][ T113] blkno = 8ed2c, nblocks = 1 [ 1364.302973][T24462] blkno = 8ed2c, nblocks = 1 [ 1364.307475][ T113] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 1364.307475][ T113] [ 1364.320372][T24462] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 1364.320372][T24462] [ 1364.362961][T24462] ERROR: (device loop6): dtSearch: DT_GETPAGE: dtree page corrupt [ 1364.362961][T24462] [ 1364.424307][T24462] jfs_mkdir: dtSearch returned -5 [ 1364.654224][T24452] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1364.710362][T24452] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1364.741981][T16172] syz-executor: attempt to access beyond end of device [ 1364.741981][T16172] loop6: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 1364.830693][T16172] metapage_write_end_io: I/O error [ 1364.864647][T16172] JFS: metapage_get_blocks failed [ 1364.869986][T16172] JFS: metapage_get_blocks failed [ 1364.937831][T16172] JFS: metapage_get_blocks failed [ 1364.943054][T16172] JFS: metapage_get_blocks failed [ 1365.135186][ T5832] syz-executor: attempt to access beyond end of device [ 1365.135186][ T5832] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1365.202297][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1365.202327][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1365.202340][ T5832] Call Trace: [ 1365.202348][ T5832] [ 1365.202357][ T5832] dump_stack_lvl+0x189/0x250 [ 1365.202394][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1365.202420][ T5832] ? __pfx_queue_work_on+0x10/0x10 [ 1365.202441][ T5832] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1365.202463][ T5832] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1365.202499][ T5832] f2fs_handle_critical_error+0x37c/0x540 [ 1365.202537][ T5832] f2fs_write_end_io+0x886/0xb60 [ 1365.202580][ T5832] __submit_merged_bio+0x27a/0x6a0 [ 1365.202618][ T5832] __submit_merged_write_cond+0x255/0x530 [ 1365.202653][ T5832] f2fs_write_data_pages+0x261d/0x3000 [ 1365.202714][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1365.202787][ T5832] ? __mod_zone_page_state+0xd7/0x140 [ 1365.202819][ T5832] ? folios_put_refs+0x58b/0x670 [ 1365.202860][ T5832] ? __lock_acquire+0xab9/0xd20 [ 1365.202892][ T5832] ? do_raw_spin_lock+0x121/0x290 [ 1365.202942][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 1365.202969][ T5832] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1365.202990][ T5832] do_writepages+0x32e/0x550 [ 1365.203033][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 1365.203065][ T5832] filemap_fdatawrite+0x199/0x240 [ 1365.203086][ T5832] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1365.203160][ T5832] ? do_raw_spin_unlock+0x122/0x240 [ 1365.203193][ T5832] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1365.203232][ T5832] f2fs_write_checkpoint+0x93e/0x2440 [ 1365.203251][ T5832] ? stack_depot_save_flags+0x40/0x860 [ 1365.203305][ T5832] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1365.203376][ T5832] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 1365.203397][ T5832] ? kfree+0x19a/0x6d0 [ 1365.203429][ T5832] kill_f2fs_super+0x2cc/0x6d0 [ 1365.203457][ T5832] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1365.203502][ T5832] ? shrinker_free+0x2ce/0x3e0 [ 1365.203532][ T5832] deactivate_locked_super+0xbc/0x130 [ 1365.203560][ T5832] cleanup_mnt+0x425/0x4c0 [ 1365.203581][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 1365.203607][ T5832] task_work_run+0x1d4/0x260 [ 1365.203630][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 1365.203647][ T5832] ? __x64_sys_umount+0x122/0x160 [ 1365.203676][ T5832] ? exit_to_user_mode_loop+0x40/0x130 [ 1365.203701][ T5832] exit_to_user_mode_loop+0xe9/0x130 [ 1365.203721][ T5832] do_syscall_64+0x2bd/0xfa0 [ 1365.203743][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 1365.203766][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.203784][ T5832] ? clear_bhb_loop+0x60/0xb0 [ 1365.203809][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.203825][ T5832] RIP: 0033:0x7f4dd7f902f7 [ 1365.203849][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1365.203863][ T5832] RSP: 002b:00007fffd4265e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1365.203885][ T5832] RAX: 0000000000000000 RBX: 00007f4dd8011d7d RCX: 00007f4dd7f902f7 [ 1365.203898][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd4265f50 [ 1365.203919][ T5832] RBP: 00007fffd4265f50 R08: 0000000000000000 R09: 0000000000000000 [ 1365.203930][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd4266fe0 [ 1365.203943][ T5832] R13: 00007f4dd8011d7d R14: 000000000013938e R15: 00007fffd4267020 [ 1365.203980][ T5832] [ 1365.651010][ T5832] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1365.734994][T24161] chnl_net:caif_netlink_parms(): no params data found [ 1365.742219][T24540] loop7: detected capacity change from 0 to 32768 [ 1366.215467][T24648] nbd: must specify at least one socket [ 1366.564788][ T1110] hsr_slave_0: left promiscuous mode [ 1366.640533][ T1110] hsr_slave_1: left promiscuous mode [ 1366.693770][ T1110] veth0_macvtap: left allmulticast mode [ 1367.123809][T24689] loop0: detected capacity change from 0 to 4096 [ 1367.178683][T24696] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1367.468881][T24708] loop0: detected capacity change from 0 to 64 [ 1367.512348][T24708] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1367.525443][T24708] hfs: filesystem is marked locked, mounting read-only. [ 1367.534107][ T1110] team0 (unregistering): Port device macvlan1 removed [ 1367.659100][T24718] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.14918'. [ 1367.727634][T13138] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1367.849484][T24724] cgroup2: Unexpected value for 'memory_localevents' [ 1367.923457][T13138] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1367.940349][T13138] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.000034][T13138] usb 7-1: config 0 descriptor?? [ 1368.265296][T13138] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1368.355525][T24727] loop0: detected capacity change from 0 to 32768 [ 1368.463685][T24727] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 1368.485525][T13138] [drm:udl_init] *ERROR* Selecting channel failed [ 1368.511829][ T5838] ocfs2: Unmounting device (7,0) on (node local) [ 1368.594094][T13138] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1368.612554][T13138] [drm] Initialized udl on minor 2 [ 1368.636049][T13138] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1368.675802][T13138] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1368.706367][T24742] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1368.725626][T13138] usb 7-1: USB disconnect, device number 12 [ 1368.739449][T24742] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1368.879699][T24753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14922'. [ 1368.889404][T24753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14922'. [ 1368.900438][T24753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14922'. [ 1369.132674][T24756] loop6: detected capacity change from 0 to 512 [ 1369.154598][T24756] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1369.186872][T24756] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1369.231543][T24756] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.14923: bad orphan inode 131083 [ 1369.247078][T24756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1369.272172][T24756] EXT4-fs warning (device loop6): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 1369.335228][T16172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.537741][ T6163] IPVS: starting estimator thread 0... [ 1369.662658][T24768] IPVS: using max 27 ests per chain, 64800 per kthread [ 1370.484070][T24161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.492915][T24161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.517338][T24161] bridge_slave_0: entered allmulticast mode [ 1370.527722][T24161] bridge_slave_0: entered promiscuous mode [ 1370.548649][T24161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.568133][T24161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.615861][T24161] bridge_slave_1: entered allmulticast mode [ 1370.624421][T24161] bridge_slave_1: entered promiscuous mode [ 1370.670223][T24837] loop3: detected capacity change from 0 to 64 [ 1370.722102][T24843] netlink: 47 bytes leftover after parsing attributes in process `syz.7.14938'. [ 1370.775904][T24843] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14938'. [ 1371.149267][T24161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.257273][T24161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1371.458925][ T6163] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1371.523630][T24161] team0: Port device team_slave_0 added [ 1371.564478][T24802] loop6: detected capacity change from 0 to 40427 [ 1371.581722][T24161] team0: Port device team_slave_1 added [ 1371.593136][ T1110] IPVS: stop unused estimator thread 0... [ 1371.635724][T24802] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 1371.651434][ T6163] usb 8-1: Using ep0 maxpacket: 32 [ 1371.662964][T24802] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1371.685201][ T6163] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1371.708059][ T6163] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.763554][ T6163] usb 8-1: config 0 descriptor?? [ 1371.809604][ T6163] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1371.925963][T24161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.953091][T24161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.024393][T24161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.061889][T24958] tipc: Started in network mode [ 1372.067164][T24958] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1372.105047][T24958] tipc: Enabling of bearer rejected, failed to enable media [ 1372.138948][T24161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.164063][T24161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.252689][T24161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.276017][T24802] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1372.339909][T24802] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1372.342116][T24969] loop3: detected capacity change from 0 to 16 [ 1372.390869][T24802] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1372.447033][T24969] erofs (device loop3): mounted with root inode @ nid 36. [ 1372.457759][ T6163] usb 8-1: USB disconnect, device number 5 [ 1372.554421][T16172] syz-executor: attempt to access beyond end of device [ 1372.554421][T16172] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1372.609077][T16172] CPU: 0 UID: 0 PID: 16172 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1372.609104][T16172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1372.609115][T16172] Call Trace: [ 1372.609123][T16172] [ 1372.609133][T16172] dump_stack_lvl+0x189/0x250 [ 1372.609171][T16172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1372.609199][T16172] ? __pfx_queue_work_on+0x10/0x10 [ 1372.609220][T16172] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1372.609244][T16172] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1372.609281][T16172] f2fs_handle_critical_error+0x37c/0x540 [ 1372.609321][T16172] f2fs_write_end_io+0x886/0xb60 [ 1372.609368][T16172] __submit_merged_bio+0x27a/0x6a0 [ 1372.609407][T16172] __submit_merged_write_cond+0x255/0x530 [ 1372.609447][T16172] f2fs_write_data_pages+0x261d/0x3000 [ 1372.609518][T16172] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1372.609608][T16172] ? __mod_zone_page_state+0xd7/0x140 [ 1372.609644][T16172] ? folios_put_refs+0x58b/0x670 [ 1372.609685][T16172] ? __lock_acquire+0xab9/0xd20 [ 1372.609718][T16172] ? do_raw_spin_lock+0x121/0x290 [ 1372.609761][T16172] ? do_raw_spin_unlock+0x122/0x240 [ 1372.609789][T16172] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1372.609811][T16172] do_writepages+0x32e/0x550 [ 1372.609852][T16172] ? do_raw_spin_unlock+0x122/0x240 [ 1372.609885][T16172] filemap_fdatawrite+0x199/0x240 [ 1372.609905][T16172] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1372.609991][T16172] ? do_raw_spin_unlock+0x122/0x240 [ 1372.610024][T16172] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1372.610068][T16172] f2fs_write_checkpoint+0x93e/0x2440 [ 1372.610134][T16172] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1372.610153][T16172] ? kasan_record_aux_stack+0xbd/0xd0 [ 1372.610262][T16172] kill_f2fs_super+0x2cc/0x6d0 [ 1372.610295][T16172] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1372.610343][T16172] ? shrinker_free+0x2ce/0x3e0 [ 1372.610374][T16172] deactivate_locked_super+0xbc/0x130 [ 1372.610404][T16172] cleanup_mnt+0x425/0x4c0 [ 1372.610429][T16172] ? lockdep_hardirqs_on+0x9c/0x150 [ 1372.610457][T16172] task_work_run+0x1d4/0x260 [ 1372.610481][T16172] ? __pfx_task_work_run+0x10/0x10 [ 1372.610497][T16172] ? __x64_sys_umount+0x122/0x160 [ 1372.610529][T16172] ? exit_to_user_mode_loop+0x40/0x130 [ 1372.610556][T16172] exit_to_user_mode_loop+0xe9/0x130 [ 1372.610588][T16172] do_syscall_64+0x2bd/0xfa0 [ 1372.610611][T16172] ? lockdep_hardirqs_on+0x9c/0x150 [ 1372.610634][T16172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.610653][T16172] ? clear_bhb_loop+0x60/0xb0 [ 1372.610679][T16172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.610697][T16172] RIP: 0033:0x7fd4853902f7 [ 1372.610716][T16172] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1372.610732][T16172] RSP: 002b:00007fff05929a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1372.610754][T16172] RAX: 0000000000000000 RBX: 00007fd485411d7d RCX: 00007fd4853902f7 [ 1372.610768][T16172] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff05929b20 [ 1372.610780][T16172] RBP: 00007fff05929b20 R08: 0000000000000000 R09: 0000000000000000 [ 1372.610790][T16172] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0592abb0 [ 1372.610802][T16172] R13: 00007fd485411d7d R14: 000000000013aea5 R15: 00007fff0592abf0 [ 1372.610842][T16172] [ 1372.942388][T16172] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1372.999394][T24161] hsr_slave_0: entered promiscuous mode [ 1373.007564][T24161] hsr_slave_1: entered promiscuous mode [ 1373.265988][T25031] netlink: 'syz.0.14950': attribute type 4 has an invalid length. [ 1373.437032][T25033] loop3: detected capacity change from 0 to 32768 [ 1373.465114][T25033] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.14951 (25033) [ 1373.509679][T25033] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1373.520381][T25033] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 1373.530588][T25033] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1373.682877][T25092] Bluetooth: MGMT ver 1.23 [ 1373.692058][T25033] BTRFS info (device loop3): rebuilding free space tree [ 1373.707732][T25033] BTRFS info (device loop3): disabling free space tree [ 1373.714924][T25033] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1373.724901][T25033] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1373.750419][T25033] BTRFS info (device loop3): checking UUID tree [ 1373.758244][T25033] BTRFS info (device loop3): enabling ssd optimizations [ 1373.765393][T25033] BTRFS info (device loop3): turning off barriers [ 1373.772020][T25033] BTRFS info (device loop3): turning on flush-on-commit [ 1373.779382][T25033] BTRFS info (device loop3): enabling disk space caching [ 1373.786590][T25033] BTRFS info (device loop3): force clearing of disk cache [ 1373.793880][T25033] BTRFS info (device loop3): use zstd compression, level 3 [ 1373.801369][T25033] BTRFS info (device loop3): max_inline set to 0 [ 1373.831666][T25033] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1374.363686][T25120] loop7: detected capacity change from 0 to 2048 [ 1374.430455][T25120] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1374.497493][T25125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14956'. [ 1374.519577][T25120] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1374.570422][ T30] audit: type=1800 audit(2000001135.952:468): pid=25120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.14955" name="file1" dev="loop7" ino=1346 res=0 errno=0 [ 1374.771854][T24161] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1374.816525][T25140] netlink: 'syz.6.14957': attribute type 2 has an invalid length. [ 1374.860285][T25064] loop0: detected capacity change from 0 to 32768 [ 1374.881954][T24161] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1374.951578][T24161] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1375.015267][T25064] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1375.068017][T24161] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1375.211702][T25064] XFS (loop0): Ending clean mount [ 1375.498778][ T5838] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1375.749140][ T797] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1375.766216][T24161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.943297][T24161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.953317][T25183] loop7: detected capacity change from 0 to 4096 [ 1375.959792][ T797] usb 7-1: Using ep0 maxpacket: 16 [ 1375.961626][ T797] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1375.991396][ T797] usb 7-1: config 0 has no interface number 0 [ 1376.026637][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.033899][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1376.060353][ T797] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1376.113910][ T797] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1376.128056][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.135333][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.145934][T25183] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1376.167065][ T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.201152][T25183] ntfs3(loop7): ino=1a, mi_enum_attr [ 1376.205206][ T797] usb 7-1: Product: syz [ 1376.209895][T25183] ntfs3(loop7): ino=1a, mi_enum_attr [ 1376.210898][ T797] usb 7-1: Manufacturer: syz [ 1376.269668][T25183] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 1376.270671][ T797] usb 7-1: SerialNumber: syz [ 1376.304968][ T797] usb 7-1: config 0 descriptor?? [ 1376.350111][ T797] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 1376.608292][T24161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1376.765949][ T797] usb 7-1: USB disconnect, device number 13 [ 1377.533880][T24161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.854975][T25265] netlink: 'syz.3.14978': attribute type 6 has an invalid length. [ 1378.013447][T25261] loop0: detected capacity change from 0 to 4096 [ 1378.171681][T25261] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1378.385719][T25261] overlayfs: upper fs does not support tmpfile. [ 1378.475566][T25261] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1378.522183][T25298] comedi comedi3: dt2801: I/O port conflict (0x4f27,2) [ 1378.529261][T25261] overlayfs: failed to set uuid (/file0, err=-22); falling back to uuid=null. [ 1378.529359][T25261] overlayfs: failed to verify upper root origin [ 1378.686839][T24161] veth0_vlan: entered promiscuous mode [ 1378.744438][T24161] veth1_vlan: entered promiscuous mode [ 1378.780583][T24340] ntfs3(loop0): ino=9, ntfs3_write_inode failed, -22. [ 1378.813584][ T5838] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22. [ 1378.933936][T25316] ucma_write: process 5930 (syz.3.14991) changed security contexts after opening file descriptor, this is not allowed. [ 1379.007443][T24161] veth0_macvtap: entered promiscuous mode [ 1379.048977][T24161] veth1_macvtap: entered promiscuous mode [ 1379.176148][T24161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1379.248423][T24161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1379.319257][ T1002] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.405760][ T1002] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.439201][ T1002] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.480890][ T1002] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.504997][T25340] loop3: detected capacity change from 0 to 64 [ 1379.879687][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.915472][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.981334][T25358] loop0: detected capacity change from 0 to 1764 [ 1380.013731][T25368] option changes via remount are deprecated (pid=25366 comm=syz.7.15000) [ 1380.050667][T25308] loop6: detected capacity change from 0 to 32768 [ 1380.081950][T14583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.127895][T25308] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1380.182517][T14583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.390297][T25308] XFS (loop6): Ending clean mount [ 1380.441209][T25308] XFS (loop6): Quotacheck needed: Please wait. [ 1380.464795][T25390] loop0: detected capacity change from 0 to 4096 [ 1380.539053][T25308] XFS (loop6): Quotacheck: Done. [ 1380.661125][T25407] loop8: detected capacity change from 0 to 512 [ 1380.684667][ T982] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1380.694040][T25407] EXT4-fs: Ignoring removed nobh option [ 1380.750165][T25407] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1380.774045][T16172] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1380.833166][T25407] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 1380.883202][T25407] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.15006: invalid indirect mapped block 2683928664 (level 1) [ 1380.900402][ T982] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1380.908722][ T982] usb 4-1: config 0 has no interface number 0 [ 1380.961307][ T982] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1380.995114][T25407] EXT4-fs (loop8): Remounting filesystem read-only [ 1381.028001][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.036966][T25407] EXT4-fs (loop8): 1 truncate cleaned up [ 1381.070840][T25407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1381.144338][ T982] usb 4-1: config 0 descriptor?? [ 1381.158453][ T982] usb 4-1: selecting invalid altsetting 1 [ 1381.183772][ T982] dvb_ttusb_budget: ttusb_init_controller: error [ 1381.219964][ T982] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1381.304421][T24161] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.557223][ T982] DVB: Unable to find symbol cx22700_attach() [ 1381.727004][ T982] DVB: Unable to find symbol tda10046_attach() [ 1381.759042][ T982] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1381.808059][ T982] usb 4-1: USB disconnect, device number 34 [ 1382.157204][T25484] loop6: detected capacity change from 0 to 256 [ 1382.157718][T25486] loop3: detected capacity change from 0 to 64 [ 1382.301581][T25484] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1382.555104][T25507] Error: Driver 'c6xdigio' is already registered, aborting... [ 1382.624851][T25447] loop0: detected capacity change from 0 to 32768 [ 1382.716522][T25447] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1382.780400][T25528] usb usb8: usbfs: process 25528 (syz.8.15031) did not claim interface 0 before use [ 1382.816365][T25447] XFS (loop0): Ending clean mount [ 1383.112691][ T5838] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1383.390787][T25294] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1383.571165][T25294] usb 4-1: Using ep0 maxpacket: 8 [ 1383.595589][T25564] loop6: detected capacity change from 0 to 64 [ 1383.603687][T25294] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1383.612704][T25294] usb 4-1: config 179 has no interface number 0 [ 1383.635456][T25294] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1383.683746][T25294] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1383.743741][T25294] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1383.811841][T25294] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1383.824451][T25294] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1383.840551][T25294] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1383.890317][T25294] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1383.919636][T25294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.942261][T25534] loop7: detected capacity change from 0 to 32768 [ 1383.980604][T25578] loop6: detected capacity change from 0 to 512 [ 1384.011336][T25578] EXT4-fs: Ignoring removed mblk_io_submit option [ 1384.040915][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1384.064424][T25294] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input81 [ 1384.100855][T25534] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 1384.121569][T25578] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1384.181127][ T5184] input input81: unable to receive magic message: -110 [ 1384.190700][T25578] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1384.221297][T25578] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a000e018, mo2=0002] [ 1384.232621][T25578] System zones: 0-1, 15-15, 18-18, 34-34 [ 1384.249586][T25578] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1384.280726][T25578] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.15044: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1384.287887][ T5184] input input81: unable to receive magic message: -32 [ 1384.430537][T21875] ocfs2: Unmounting device (7,7) on (node local) [ 1384.435137][T10376] usb 4-1: USB disconnect, device number 35 [ 1384.437094][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1384.464544][T25578] EXT4-fs error (device loop6): ext4_quota_enable:7139: comm syz.6.15044: Bad quota inode: 4, type: 1 [ 1384.575375][T25578] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1384.649005][T25578] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1384.697175][T25578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1384.711851][T25633] loop7: detected capacity change from 0 to 512 [ 1384.803294][T25578] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.15044: bad symlink. [ 1384.817640][T25633] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.7.15049: corrupted xattr block 95: invalid header [ 1384.855180][T25642] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.15044: bad symlink. [ 1384.909272][T25633] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1384.947047][T25633] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.15049: bg 0: block 7: invalid block bitmap [ 1384.972159][T25633] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1385.020751][T25633] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2967: inode #11: comm syz.7.15049: corrupted xattr block 95: invalid header [ 1385.038417][T16172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.103017][T25633] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 1385.158783][T25633] EXT4-fs (loop7): 1 orphan inode deleted [ 1385.180642][T25633] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1385.282226][T25664] Bluetooth: MGMT ver 1.23 [ 1385.435044][T21875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.579848][T25674] loop6: detected capacity change from 0 to 1024 [ 1385.602559][ T982] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1385.721167][T25674] hfsplus: xattr searching failed [ 1385.799985][ T982] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1385.834121][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.866196][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.911315][ T982] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1385.972741][ T982] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1386.022308][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.037755][T25704] loop0: detected capacity change from 0 to 1024 [ 1386.065113][T25704] EXT4-fs: Ignoring removed bh option [ 1386.084189][T25704] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1386.105480][ T982] usb 4-1: config 0 descriptor?? [ 1386.145609][T25704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1386.322529][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.500716][T25737] loop7: detected capacity change from 0 to 512 [ 1386.534330][T25737] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1386.566027][T25737] EXT4-fs (loop7): invalid journal inode [ 1386.574807][T25737] EXT4-fs (loop7): can't get journal size [ 1386.584998][ T982] hid_parser_main: 5 callbacks suppressed [ 1386.585022][ T982] holtek_kbd 0003:04D9:A055.0011: unknown main item tag 0x0 [ 1386.614547][ T982] holtek_kbd 0003:04D9:A055.0011: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 1386.626358][T25737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 1386.635035][T25737] System zones: 1-12, 13-13 [ 1386.646213][T25737] EXT4-fs (loop7): 1 truncate cleaned up [ 1386.683243][T25737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1386.818744][ T982] usb 4-1: USB disconnect, device number 36 [ 1386.913416][T21875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.931170][T25750] fido_id[25750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1387.124171][T25778] loop8: detected capacity change from 0 to 4096 [ 1387.171213][T25784] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1387.253622][T25786] loop0: detected capacity change from 0 to 1024 [ 1387.308746][T25786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1387.598030][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.770522][T25800] loop7: detected capacity change from 0 to 4096 [ 1387.794770][T25800] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1387.847632][T25800] ntfs3(loop7): ino=3, mi_enum_attr [ 1388.242534][T25830] loop3: detected capacity change from 0 to 1024 [ 1388.398408][T25830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1389.066130][ T30] audit: type=1800 audit(2000001149.512:469): pid=25830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15089" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1389.120711][T25816] loop0: detected capacity change from 0 to 32768 [ 1389.153288][T25816] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15085 (25816) [ 1389.207660][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.257994][T25816] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1389.312122][T25816] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1389.653664][T25816] BTRFS info (device loop0): enabling ssd optimizations [ 1389.718534][T25816] BTRFS info (device loop0): turning on async discard [ 1389.725385][T25816] BTRFS info (device loop0): enabling free space tree [ 1389.867893][T10376] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1390.050043][T10376] usb 4-1: Using ep0 maxpacket: 8 [ 1390.090106][T10376] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1390.105337][ T5838] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1390.114593][T10376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.116349][T25845] loop6: detected capacity change from 0 to 32768 [ 1390.149576][T10376] usb 4-1: Product: syz [ 1390.154059][T10376] usb 4-1: Manufacturer: syz [ 1390.202059][T10376] usb 4-1: SerialNumber: syz [ 1390.225744][T10376] usb 4-1: config 0 descriptor?? [ 1390.256259][T10376] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1390.284041][T25845] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 1390.289737][T25858] loop8: detected capacity change from 0 to 40427 [ 1390.354031][T25858] F2FS-fs (loop8): Image doesn't support compression [ 1390.377758][T25858] F2FS-fs (loop8): build fault injection rate: 690 [ 1390.448739][T25858] F2FS-fs (loop8): build fault injection type: 0x35f7 [ 1390.493009][T25858] F2FS-fs (loop8): invalid crc value [ 1390.743615][T16172] ocfs2: Unmounting device (7,6) on (node local) [ 1390.837061][T25862] loop7: detected capacity change from 0 to 40427 [ 1390.853617][T25858] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1390.913383][T25858] F2FS-fs (loop8): Start checkpoint disabled! [ 1390.959968][T25862] F2FS-fs (loop7): invalid crc value [ 1390.980035][T10376] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1391.011331][T25858] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 1391.054605][T10376] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1391.076117][T25858] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1391.130523][T10376] usb 4-1: USB disconnect, device number 37 [ 1391.167684][ T30] audit: type=1800 audit(2000001151.477:470): pid=25858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.15094" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 1391.315861][ T1158] kworker/u8:7: attempt to access beyond end of device [ 1391.315861][ T1158] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1391.377397][ T1158] CPU: 1 UID: 0 PID: 1158 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1391.377426][ T1158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1391.377439][ T1158] Workqueue: writeback wb_workfn (flush-7:8) [ 1391.377468][ T1158] Call Trace: [ 1391.377478][ T1158] [ 1391.377487][ T1158] dump_stack_lvl+0x189/0x250 [ 1391.377517][ T1158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1391.377540][ T1158] ? __pfx_queue_work_on+0x10/0x10 [ 1391.377560][ T1158] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1391.377582][ T1158] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1391.377618][ T1158] f2fs_handle_critical_error+0x37c/0x540 [ 1391.377653][ T1158] f2fs_write_end_io+0x886/0xb60 [ 1391.377693][ T1158] __submit_merged_bio+0x27a/0x6a0 [ 1391.377726][ T1158] __submit_merged_write_cond+0x255/0x530 [ 1391.377762][ T1158] f2fs_write_data_pages+0x261d/0x3000 [ 1391.377818][ T1158] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1391.377852][ T1158] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1391.377913][ T1158] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1391.377940][ T1158] ? look_up_lock_class+0x74/0x170 [ 1391.377975][ T1158] ? trace_f2fs_writepages+0x7f/0x200 [ 1391.378002][ T1158] ? f2fs_write_node_pages+0x478/0x6e0 [ 1391.378036][ T1158] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1391.378069][ T1158] ? __lock_acquire+0xab9/0xd20 [ 1391.378097][ T1158] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1391.378118][ T1158] do_writepages+0x32e/0x550 [ 1391.378151][ T1158] ? reacquire_held_locks+0x127/0x1d0 [ 1391.378174][ T1158] ? writeback_sb_inodes+0x384/0x1010 [ 1391.378208][ T1158] __writeback_single_inode+0x145/0xff0 [ 1391.378235][ T1158] ? do_raw_spin_unlock+0x122/0x240 [ 1391.378267][ T1158] writeback_sb_inodes+0x6c7/0x1010 [ 1391.378332][ T1158] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1391.378408][ T1158] ? rcu_is_watching+0x15/0xb0 [ 1391.378446][ T1158] wb_writeback+0x43b/0xaf0 [ 1391.378480][ T1158] ? queue_io+0x3d1/0x590 [ 1391.378511][ T1158] ? __pfx_wb_writeback+0x10/0x10 [ 1391.378547][ T1158] ? _raw_spin_unlock_irq+0x23/0x50 [ 1391.378576][ T1158] wb_workfn+0x409/0xef0 [ 1391.378618][ T1158] ? __pfx_wb_workfn+0x10/0x10 [ 1391.378648][ T1158] ? __lock_acquire+0xab9/0xd20 [ 1391.378681][ T1158] ? process_scheduled_works+0x9ef/0x17b0 [ 1391.378712][ T1158] ? _raw_spin_unlock_irq+0x23/0x50 [ 1391.378732][ T1158] ? process_scheduled_works+0x9ef/0x17b0 [ 1391.378752][ T1158] ? process_scheduled_works+0x9ef/0x17b0 [ 1391.378777][ T1158] process_scheduled_works+0xae1/0x17b0 [ 1391.378835][ T1158] ? __pfx_process_scheduled_works+0x10/0x10 [ 1391.378876][ T1158] worker_thread+0x8a0/0xda0 [ 1391.378904][ T1158] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1391.378936][ T1158] ? __kthread_parkme+0x7b/0x200 [ 1391.378974][ T1158] kthread+0x711/0x8a0 [ 1391.379005][ T1158] ? __pfx_worker_thread+0x10/0x10 [ 1391.379028][ T1158] ? __pfx_kthread+0x10/0x10 [ 1391.379057][ T1158] ? _raw_spin_unlock_irq+0x23/0x50 [ 1391.379079][ T1158] ? lockdep_hardirqs_on+0x9c/0x150 [ 1391.379100][ T1158] ? __pfx_kthread+0x10/0x10 [ 1391.379127][ T1158] ret_from_fork+0x4bc/0x870 [ 1391.379153][ T1158] ? __pfx_ret_from_fork+0x10/0x10 [ 1391.379185][ T1158] ? __switch_to_asm+0x39/0x70 [ 1391.379202][ T1158] ? __switch_to_asm+0x33/0x70 [ 1391.379218][ T1158] ? __pfx_kthread+0x10/0x10 [ 1391.379247][ T1158] ret_from_fork_asm+0x1a/0x30 [ 1391.379294][ T1158] [ 1391.379304][ T1158] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1391.603064][T25862] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1391.796133][T25944] loop6: detected capacity change from 0 to 64 [ 1391.835467][T25862] F2FS-fs (loop7): Start checkpoint disabled! [ 1391.987532][T25862] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1392.063580][T25862] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1392.399060][T25964] loop3: detected capacity change from 0 to 64 [ 1392.538183][ T30] audit: type=1800 audit(2000001152.767:471): pid=25964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15103" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 1392.575817][T25970] loop0: detected capacity change from 0 to 128 [ 1392.842188][T25984] loop3: detected capacity change from 0 to 16 [ 1392.883166][T25984] erofs (device loop3): mounted with root inode @ nid 36. [ 1393.620901][T26016] tipc: Enabling of bearer rejected, failed to enable media [ 1393.890796][T26032] loop3: detected capacity change from 0 to 512 [ 1393.942768][T26032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1393.988369][T26032] EXT4-fs (loop3): 1 truncate cleaned up [ 1394.028526][T26032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.278440][T26049] gtp0: entered promiscuous mode [ 1394.296585][T26049] gtp0: entered allmulticast mode [ 1394.310570][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.348138][T26054] sctp: [Deprecated]: syz.7.15119 (pid 26054) Use of int in maxseg socket option. [ 1394.348138][T26054] Use struct sctp_assoc_value instead [ 1395.208810][T26082] loop3: detected capacity change from 0 to 4096 [ 1395.345356][T26091] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1395.539909][T26007] loop0: detected capacity change from 0 to 32768 [ 1395.550755][T26097] loop7: detected capacity change from 0 to 1024 [ 1395.622277][T26097] hfsplus: request for non-existent node 16777216 in B*Tree [ 1395.692039][T26097] hfsplus: request for non-existent node 16777216 in B*Tree [ 1395.800945][T26114] netlink: 104 bytes leftover after parsing attributes in process `syz.6.15132'. [ 1395.848202][T26007] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1395.887999][ T30] audit: type=1800 audit(2000001155.901:472): pid=26097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.15129" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 1396.484475][ T5838] ocfs2: Unmounting device (7,0) on (node local) [ 1396.780866][T26150] loop7: detected capacity change from 0 to 2048 [ 1396.820796][T26150] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 1396.866159][T26150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1397.275852][T26173] loop8: detected capacity change from 0 to 512 [ 1397.343912][T26173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1397.385021][T26173] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1397.418257][T26173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 1397.468231][T26173] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80) [ 1397.546359][T26173] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1397.569182][T26187] mkiss: ax0: crc mode is auto. [ 1397.591727][T26193] program syz.6.15152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1397.598864][T26173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1397.690200][T26173] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.15149: dx entry: limit 65535 != root limit 120 [ 1397.731024][T26173] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.15149: Corrupt directory, running e2fsck is recommended [ 1397.820577][T26173] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 3: comm syz.8.15149: path /38/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 1398.001184][T24161] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.318913][T26224] bridge0: port 3(syz_tun) entered blocking state [ 1398.363510][T26224] bridge0: port 3(syz_tun) entered disabled state [ 1398.391053][T26224] syz_tun: entered allmulticast mode [ 1398.416001][T26230] loop3: detected capacity change from 0 to 512 [ 1398.435119][T26224] syz_tun: entered promiscuous mode [ 1398.445465][T26224] bridge0: port 3(syz_tun) entered blocking state [ 1398.453012][T26224] bridge0: port 3(syz_tun) entered forwarding state [ 1398.477105][T26230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1398.549016][T26230] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1398.571885][T26230] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1398.580102][T26230] System zones: 0-1, 15-15, 18-18, 34-34 [ 1398.684556][T26230] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1398.695743][T26243] loop7: detected capacity change from 0 to 1024 [ 1398.705875][T26230] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 1398.710101][T26243] EXT4-fs: inline encryption not supported [ 1398.723498][T26243] EXT4-fs: Ignoring removed i_version option [ 1398.743729][T26243] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1398.777865][T26230] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1398.797912][T26230] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1398.813962][T26230] EXT4-fs (loop3): 1 truncate cleaned up [ 1398.844445][T26243] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.15165: lblock 2 mapped to illegal pblock 2 (length 1) [ 1398.845897][T26254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15169'. [ 1398.872913][T26230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1398.906999][T26243] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1398.986166][T26243] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.15165: lblock 0 mapped to illegal pblock 48 (length 1) [ 1399.011074][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.044815][T26243] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1399.064904][T26243] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.15165: Failed to acquire dquot type 0 [ 1399.124417][T26243] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1399.189337][T26243] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.15165: mark_inode_dirty error [ 1399.223796][T26243] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1399.268110][T26243] EXT4-fs (loop7): 1 orphan inode deleted [ 1399.286537][T26243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1399.298941][ T1158] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1399.372911][ T1158] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1399.397546][ T1158] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 1399.453142][T21875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.479521][T21875] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1399.506387][T21875] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1399.543976][T21875] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 1399.557963][T26287] loop3: detected capacity change from 0 to 64 [ 1399.607262][T22728] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1399.614978][T26287] hfs: unable to locate alternate MDB [ 1399.624180][T26287] hfs: continuing without an alternate MDB [ 1399.787023][T22728] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.841912][T22728] usb 9-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 1399.862857][T22728] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.894996][T22728] usb 9-1: config 0 descriptor?? [ 1400.143660][T21654] Bluetooth: hci0: unknown advertising packet type: 0x31 [ 1400.143772][T21654] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1400.297268][T26315] netlink: 72 bytes leftover after parsing attributes in process `syz.7.15185'. [ 1400.306661][T26315] netlink: 36 bytes leftover after parsing attributes in process `syz.7.15185'. [ 1400.321144][T26315] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1400.332876][T26283] loop0: detected capacity change from 0 to 32768 [ 1400.360476][T26283] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15176 (26283) [ 1400.404526][T26280] loop6: detected capacity change from 0 to 32768 [ 1400.415526][T22728] razer 0003:1532:010D.0012: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.8-1/input0 [ 1400.452157][T26283] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1400.463976][T26283] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 1400.495976][T26280] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1400.606087][ T24] usb 9-1: USB disconnect, device number 2 [ 1400.701712][T26280] XFS (loop6): Ending clean mount [ 1400.768141][T26280] XFS (loop6): Quotacheck needed: Please wait. [ 1400.783582][T26283] BTRFS info (device loop0): rebuilding free space tree [ 1400.808464][T26355] fido_id[26355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1400.828809][T26283] BTRFS info (device loop0): disabling free space tree [ 1400.828883][T26283] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1400.828906][T26283] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1400.863263][T26283] BTRFS info (device loop0): checking UUID tree [ 1400.872486][T26283] BTRFS info (device loop0): setting nodatasum [ 1400.872516][T26283] BTRFS info (device loop0): enabling ssd optimizations [ 1400.872534][T26283] BTRFS info (device loop0): turning off barriers [ 1400.872551][T26283] BTRFS info (device loop0): disabling tree log [ 1400.872567][T26283] BTRFS info (device loop0): turning on flush-on-commit [ 1400.872584][T26283] BTRFS info (device loop0): force clearing of disk cache [ 1400.872602][T26283] BTRFS info (device loop0): max_inline set to 0 [ 1400.984200][T26280] XFS (loop6): Quotacheck: Done. [ 1401.139808][T26370] loop7: detected capacity change from 0 to 4096 [ 1401.180696][ T5838] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1401.181720][T16172] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1401.231934][T26375] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1401.440376][T26379] loop8: detected capacity change from 0 to 256 [ 1402.070997][T24161] bridge0: port 3(syz_tun) entered disabled state [ 1402.262335][T26404] loop6: detected capacity change from 0 to 1024 [ 1402.292488][T24161] syz_tun (unregistering): left allmulticast mode [ 1402.292514][T24161] syz_tun (unregistering): left promiscuous mode [ 1402.292635][T24161] bridge0: port 3(syz_tun) entered disabled state [ 1402.368392][T26423] loop3: detected capacity change from 0 to 256 [ 1402.372837][T26423] exfat: Deprecated parameter 'utf8' [ 1402.372916][T26423] exfat: Deprecated parameter 'utf8' [ 1402.372955][T26423] exfat: Deprecated parameter 'namecase' [ 1402.380425][T26423] exFAT-fs (loop3): error, The cluster chain has a loop [ 1402.380450][T26423] exFAT-fs (loop3): Filesystem has been set read-only [ 1402.380462][T26423] exFAT-fs (loop3): failed to count the number of clusters in root [ 1402.380474][T26423] exFAT-fs (loop3): failed to recognize exfat type [ 1403.170859][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.380144][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.438279][T26446] loop3: detected capacity change from 0 to 256 [ 1403.457795][T26399] loop0: detected capacity change from 0 to 40427 [ 1403.488904][T26451] loop7: detected capacity change from 0 to 512 [ 1403.524846][T26399] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1403.563503][T26399] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1403.574229][T26451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1403.594825][T26399] F2FS-fs (loop0): invalid crc value [ 1403.614906][T26446] FAT-fs (loop3): Directory bread(block 64) failed [ 1403.632692][T31716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1403.664343][T31716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1403.671220][T26446] FAT-fs (loop3): Directory bread(block 65) failed [ 1403.674906][T31716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1403.686789][T31716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1403.695284][T31716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1403.714171][T26451] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.723651][T26446] FAT-fs (loop3): Directory bread(block 66) failed [ 1403.731788][T26446] FAT-fs (loop3): Directory bread(block 67) failed [ 1403.738668][T26446] FAT-fs (loop3): Directory bread(block 68) failed [ 1403.745373][T26446] FAT-fs (loop3): Directory bread(block 69) failed [ 1403.753387][T26446] FAT-fs (loop3): Directory bread(block 70) failed [ 1403.760303][T26446] FAT-fs (loop3): Directory bread(block 71) failed [ 1403.767357][T26446] FAT-fs (loop3): Directory bread(block 72) failed [ 1403.774162][T26446] FAT-fs (loop3): Directory bread(block 73) failed [ 1403.831335][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.892481][T26399] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1403.942877][T21875] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.011801][T26399] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1404.018906][T26399] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1404.205414][T26399] syz.0.15195: attempt to access beyond end of device [ 1404.205414][T26399] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1404.261749][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.413183][T26458] lo speed is unknown, defaulting to 1000 [ 1404.706697][T26489] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1404.713200][T26489] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1404.761265][T26489] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1404.767811][T26489] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1404.781964][T26489] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1404.803033][T26489] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 1404.809687][T26489] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1404.817308][T26489] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 1404.869111][T26489] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1404.876965][T26489] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1404.899717][ T36] bridge_slave_1: left allmulticast mode [ 1404.922541][T26489] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1404.930433][T26489] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1404.931051][ T36] bridge_slave_1: left promiscuous mode [ 1404.959224][T26489] comedi comedi3: 8255: I/O port conflict (0x61,4) [ 1404.974109][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.991634][T26489] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1404.999600][T26489] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1405.027330][T26469] loop6: detected capacity change from 0 to 32768 [ 1405.031146][T26489] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 1405.049371][T26489] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1405.059994][T26489] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1405.060461][ T36] bridge_slave_0: left allmulticast mode [ 1405.123339][ T36] bridge_slave_0: left promiscuous mode [ 1405.129296][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.169438][T26489] comedi comedi3: 8255: I/O port conflict (0xc0,4) [ 1405.185021][T26474] loop7: detected capacity change from 0 to 32768 [ 1405.206125][T26489] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 1405.208001][T13981] kworker/u8:4: attempt to access beyond end of device [ 1405.208001][T13981] loop6: rw=1, sector=2621792, nr_sectors = 8 limit=32768 [ 1405.252032][T26489] comedi comedi3: 8255: I/O port conflict (0x2000e69,4) [ 1405.276408][ T113] blkno = 5002c, nblocks = 1 [ 1405.281060][ T113] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 1405.281060][ T113] [ 1405.281800][T26489] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1405.302987][T26489] comedi comedi3: 8255: I/O port conflict (0x80008,4) [ 1405.310418][ T113] ERROR: (device loop6): remounting filesystem as read-only [ 1405.318663][T26489] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1405.319975][T26474] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1405.488994][T26474] XFS (loop7): Ending clean mount [ 1405.519712][T26474] XFS (loop7): Quotacheck needed: Please wait. [ 1405.663016][T26474] XFS (loop7): Quotacheck: Done. [ 1405.740833][T21875] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1405.965464][T21654] Bluetooth: hci2: command tx timeout [ 1406.209667][T26536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1407.172868][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.192149][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.209605][ T36] bond0 (unregistering): Released all slaves [ 1407.758100][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1407.967029][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1408.009953][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.025985][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1408.054508][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.075814][ T10] usb 1-1: config 0 descriptor?? [ 1408.099527][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1408.148895][T21654] Bluetooth: hci2: command tx timeout [ 1408.160744][T26616] loop3: detected capacity change from 0 to 512 [ 1408.208812][T26623] loop7: detected capacity change from 0 to 8 [ 1408.222323][T26623] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1408.235405][T26616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1408.273704][T26616] ext4 filesystem being mounted at /2993/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.319632][T26458] vxcan1 speed is unknown, defaulting to 1000 [ 1408.342629][T26616] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.15233: corrupted inode contents [ 1408.361346][T26616] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.15233: mark_inode_dirty error [ 1408.386951][T26616] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.15233: corrupted inode contents [ 1408.436837][T26634] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.15233: corrupted inode contents [ 1408.554627][T26634] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.15233: mark_inode_dirty error [ 1408.609884][T26634] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.15233: corrupted inode contents [ 1408.684519][T26634] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.15233: mark_inode_dirty error [ 1408.752253][T26634] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.15233: corrupted inode contents [ 1408.764656][ T10] gspca_vc032x: reg_r err -71 [ 1408.777107][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 1408.804077][ T10] usb 1-1: USB disconnect, device number 46 [ 1408.812731][T26634] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.15233: mark_inode_dirty error [ 1409.048852][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.107492][T26656] netlink: 80 bytes leftover after parsing attributes in process `syz.6.15238'. [ 1409.140458][T26656] netlink: 64 bytes leftover after parsing attributes in process `syz.6.15238'. [ 1409.856394][T26679] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 1409.925609][T26679] macsec1: entered allmulticast mode [ 1409.946204][T26679] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 1409.956373][ T5916] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1410.160582][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.181281][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.193471][ T30] audit: type=1326 audit(2000001169.287:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.0.15249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273998efc9 code=0x7ffc0000 [ 1410.216592][ T5916] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1410.216624][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.249829][ T5916] usb 7-1: config 0 descriptor?? [ 1410.339343][ T30] audit: type=1326 audit(2000001169.287:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.0.15249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273998efc9 code=0x7ffc0000 [ 1410.379514][T21654] Bluetooth: hci2: command tx timeout [ 1410.385521][ T30] audit: type=1326 audit(2000001169.333:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.0.15249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f273998efc9 code=0x7ffc0000 [ 1410.417989][ T30] audit: type=1326 audit(2000001169.333:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.0.15249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273998efc9 code=0x7ffc0000 [ 1410.592101][ T30] audit: type=1326 audit(2000001169.333:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.0.15249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273998efc9 code=0x7ffc0000 [ 1410.664723][ T30] audit: type=1326 audit(2000001169.352:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.0.15249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f273998efc9 code=0x7ffc0000 [ 1410.755302][ T5916] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 1410.778682][ T30] audit: type=1326 audit(2000001169.352:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.0.15249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273998efc9 code=0x7ffc0000 [ 1410.856322][ T30] audit: type=1326 audit(2000001169.352:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26705 comm="syz.0.15249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273998efc9 code=0x7ffc0000 [ 1411.046583][ T5916] hid-led 0003:0FC5:B080.0013: probe with driver hid-led failed with error -71 [ 1411.084960][ T5916] usb 7-1: USB disconnect, device number 14 [ 1411.264404][T26758] binder: BINDER_SET_CONTEXT_MGR already set [ 1411.283942][T26758] binder: 26757:26758 ioctl 40046207 0 returned -16 [ 1411.325319][ T36] hsr_slave_0: left promiscuous mode [ 1411.345230][ T36] hsr_slave_1: left promiscuous mode [ 1411.359021][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.377413][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.415832][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.435519][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.496106][T26721] loop0: detected capacity change from 0 to 32768 [ 1411.517172][T26721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15251 (26721) [ 1411.562849][ T36] veth1_macvtap: left promiscuous mode [ 1411.568468][ T36] veth0_macvtap: left promiscuous mode [ 1411.575480][ T36] veth1_vlan: left promiscuous mode [ 1411.584436][ T36] veth0_vlan: left promiscuous mode [ 1411.593535][T26721] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1411.607236][T26721] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 1411.775397][ T13] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1411.830767][T26721] BTRFS error (device loop0): failed to load root extent [ 1411.844462][T26721] BTRFS warning (device loop0): try to load backup roots slot 1 [ 1411.864285][ T13] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1411.910733][T26721] BTRFS warning (device loop0): couldn't read tree root [ 1411.921856][T26721] BTRFS warning (device loop0): try to load backup roots slot 2 [ 1411.947403][T24340] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1412.005821][T26721] BTRFS warning (device loop0): couldn't read tree root [ 1412.021433][T26721] BTRFS warning (device loop0): try to load backup roots slot 3 [ 1412.090475][T26721] BTRFS info (device loop0): checking UUID tree [ 1412.097633][T26721] BTRFS info (device loop0): setting nodatasum [ 1412.110873][T26721] BTRFS info (device loop0): setting nodatacow [ 1412.120089][T26721] BTRFS info (device loop0): enabling ssd optimizations [ 1412.133647][T26721] BTRFS info (device loop0): turning on flush-on-commit [ 1412.141220][T26721] BTRFS info (device loop0): turning on async discard [ 1412.171414][T26721] BTRFS info (device loop0): enabling free space tree [ 1412.178435][T26721] BTRFS info (device loop0): enabling auto defrag [ 1412.205408][T26721] BTRFS info (device loop0): trying to use backup root at mount time [ 1412.481859][ T5838] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1412.598659][T21654] Bluetooth: hci2: command tx timeout [ 1413.541945][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1413.632041][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1414.677913][T26830] loop7: detected capacity change from 0 to 256 [ 1414.698560][T26828] loop6: detected capacity change from 0 to 512 [ 1414.734073][T26828] EXT4-fs: Ignoring removed oldalloc option [ 1414.743114][T26830] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1414.775963][T26828] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1414.824382][T26851] blktrace: Concurrent blktraces are not allowed on sg0 [ 1414.863222][T26828] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.15265: Parent and EA inode have the same ino 15 [ 1414.933836][T26828] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.15265: Parent and EA inode have the same ino 15 [ 1414.995327][T26828] EXT4-fs (loop6): 1 orphan inode deleted [ 1415.005334][T26828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1415.017022][T26910] loop3: detected capacity change from 0 to 1024 [ 1415.112311][T26910] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1415.133417][T26828] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 1415.325605][T26458] chnl_net:caif_netlink_parms(): no params data found [ 1415.339730][ T1110] hfsplus: b-tree write err: -5, ino 4 [ 1415.372981][T16172] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1415.807201][T26966] usb usb3: selecting invalid altsetting 5 [ 1416.076720][T26922] loop7: detected capacity change from 0 to 32768 [ 1416.086642][T26922] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.15270 (26922) [ 1416.174902][T26922] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1416.220316][T26922] BTRFS info (device loop7): using blake2b (blake2b-256-lib) checksum algorithm [ 1416.255878][T26458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.289047][T26458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.330222][T26458] bridge_slave_0: entered allmulticast mode [ 1416.376478][T26458] bridge_slave_0: entered promiscuous mode [ 1416.425051][T26922] BTRFS info (device loop7): enabling ssd optimizations [ 1416.455642][T26922] BTRFS info (device loop7): turning on async discard [ 1416.462501][T26922] BTRFS info (device loop7): enabling free space tree [ 1416.497299][T26458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.512922][T27041] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1416.526788][T26458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.530416][T26922] BTRFS info (device loop7): use zstd compression, level 3 [ 1416.562305][T26458] bridge_slave_1: entered allmulticast mode [ 1416.604756][T26458] bridge_slave_1: entered promiscuous mode [ 1416.974140][T21875] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1417.011858][ T5161] ------------[ cut here ]------------ [ 1417.017385][ T5161] WARNING: kernel/trace/blktrace.c:368 at __blk_add_trace+0x79c/0x8d0, CPU#1: jbd2/sda1-8/5161 [ 1417.029143][ T5161] Modules linked in: [ 1417.034401][ T5161] CPU: 1 UID: 0 PID: 5161 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) [ 1417.044292][ T5161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1417.056015][ T5161] RIP: 0010:__blk_add_trace+0x79c/0x8d0 [ 1417.062108][ T5161] Code: ff 4d 85 e4 75 4f e8 d3 0d f8 ff e9 fb fd ff ff e8 c9 0d f8 ff e9 ec fd ff ff e8 bf 0d f8 ff e9 d8 fd ff ff e8 b5 0d f8 ff 90 <0f> 0b 90 e9 ca fd ff ff e8 a7 0d f8 ff 48 8b 7c 24 30 e8 cd 51 00 [ 1417.082462][ T5161] RSP: 0018:ffffc9000e1ef460 EFLAGS: 00010293 [ 1417.089401][ T5161] RAX: ffffffff81c86f2b RBX: 0000000000000001 RCX: ffff888034088000 [ 1417.097964][ T5161] RDX: 0000000000000000 RSI: 00000000901e000f RDI: 000000008000ffff [ 1417.106007][ T5161] RBP: ffffc9000e1ef578 R08: ffff888034088000 R09: 0000000000000009 [ 1417.114532][ T5161] R10: 0000000000000011 R11: 0000000000000000 R12: 000000008000ffff [ 1417.122643][ T5161] R13: ffff888011682500 R14: 00000000901e000f R15: 0000000000000001 [ 1417.130923][ T5161] FS: 0000000000000000(0000) GS:ffff888125feb000(0000) knlGS:0000000000000000 [ 1417.140170][ T5161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1417.146914][ T5161] CR2: 00007f03e2783286 CR3: 000000007e970000 CR4: 00000000003526f0 [ 1417.155016][ T5161] Call Trace: [ 1417.158337][ T5161] [ 1417.161374][ T5161] ? __lock_acquire+0xab9/0xd20 [ 1417.166311][ T5161] ? __pfx___blk_add_trace+0x10/0x10 [ 1417.171733][ T5161] ? blk_add_trace_bio_remap+0xed/0x560 [ 1417.177342][ T5161] blk_add_trace_bio_remap+0x4b8/0x560 [ 1417.182966][ T5161] ? __pfx___might_resched+0x10/0x10 [ 1417.188302][ T5161] ? __pfx_blk_add_trace_bio_remap+0x10/0x10 [ 1417.194384][ T5161] submit_bio_noacct+0x187b/0x1b80 [ 1417.199566][ T5161] journal_submit_commit_record+0x665/0x8b0 [ 1417.205627][ T5161] ? __pfx_journal_submit_commit_record+0x10/0x10 [ 1417.212359][ T5161] jbd2_journal_commit_transaction+0x3455/0x5a00 [ 1417.219251][ T5161] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 1417.226216][ T5161] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1417.232590][ T5161] ? rcu_is_watching+0x15/0xb0 [ 1417.237498][ T5161] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 1417.243264][ T5161] ? __pfx___timer_delete_sync+0x10/0x10 [ 1417.249143][ T5161] kjournald2+0x3cf/0x750 [ 1417.253566][ T5161] ? __pfx_kjournald2+0x10/0x10 [ 1417.258505][ T5161] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1417.264611][ T5161] ? __kthread_parkme+0x7b/0x200 [ 1417.269647][ T5161] ? __kthread_parkme+0x1a1/0x200 [ 1417.274746][ T5161] kthread+0x711/0x8a0 [ 1417.278961][ T5161] ? __pfx_kjournald2+0x10/0x10 [ 1417.283865][ T5161] ? __pfx_kthread+0x10/0x10 [ 1417.288522][ T5161] ? _raw_spin_unlock_irq+0x23/0x50 [ 1417.293813][ T5161] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.299069][ T5161] ? __pfx_kthread+0x10/0x10 [ 1417.303867][ T5161] ret_from_fork+0x4bc/0x870 [ 1417.308530][ T5161] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.313760][ T5161] ? __switch_to_asm+0x39/0x70 [ 1417.318573][ T5161] ? __switch_to_asm+0x33/0x70 [ 1417.323456][ T5161] ? __pfx_kthread+0x10/0x10 [ 1417.328346][ T5161] ret_from_fork_asm+0x1a/0x30 [ 1417.333461][ T5161] [ 1417.336522][ T5161] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1417.343831][ T5161] CPU: 1 UID: 0 PID: 5161 Comm: jbd2/sda1-8 Not tainted syzkaller #0 PREEMPT(full) [ 1417.353231][ T5161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1417.363324][ T5161] Call Trace: [ 1417.366639][ T5161] [ 1417.369604][ T5161] dump_stack_lvl+0x99/0x250 [ 1417.374254][ T5161] ? __asan_memcpy+0x40/0x70 [ 1417.378881][ T5161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1417.384126][ T5161] ? __pfx__printk+0x10/0x10 [ 1417.388763][ T5161] vpanic+0x237/0x6d0 [ 1417.392764][ T5161] ? __pfx_vpanic+0x10/0x10 [ 1417.397320][ T5161] ? is_bpf_text_address+0x292/0x2b0 [ 1417.402618][ T5161] ? is_bpf_text_address+0x26/0x2b0 [ 1417.407830][ T5161] panic+0xb9/0xc0 [ 1417.411650][ T5161] ? __pfx_panic+0x10/0x10 [ 1417.416090][ T5161] ? ret_from_fork_asm+0x1a/0x30 [ 1417.421041][ T5161] __warn+0x334/0x4c0 [ 1417.425032][ T5161] ? __blk_add_trace+0x79c/0x8d0 [ 1417.430004][ T5161] ? __blk_add_trace+0x79c/0x8d0 [ 1417.434956][ T5161] report_bug+0x2be/0x4f0 [ 1417.439318][ T5161] ? __blk_add_trace+0x79c/0x8d0 [ 1417.444261][ T5161] ? __blk_add_trace+0x79c/0x8d0 [ 1417.449287][ T5161] ? __blk_add_trace+0x79e/0x8d0 [ 1417.454231][ T5161] handle_bug+0x84/0x160 [ 1417.458480][ T5161] exc_invalid_op+0x1a/0x50 [ 1417.462988][ T5161] asm_exc_invalid_op+0x1a/0x20 [ 1417.467840][ T5161] RIP: 0010:__blk_add_trace+0x79c/0x8d0 [ 1417.473415][ T5161] Code: ff 4d 85 e4 75 4f e8 d3 0d f8 ff e9 fb fd ff ff e8 c9 0d f8 ff e9 ec fd ff ff e8 bf 0d f8 ff e9 d8 fd ff ff e8 b5 0d f8 ff 90 <0f> 0b 90 e9 ca fd ff ff e8 a7 0d f8 ff 48 8b 7c 24 30 e8 cd 51 00 [ 1417.493198][ T5161] RSP: 0018:ffffc9000e1ef460 EFLAGS: 00010293 [ 1417.499274][ T5161] RAX: ffffffff81c86f2b RBX: 0000000000000001 RCX: ffff888034088000 [ 1417.507333][ T5161] RDX: 0000000000000000 RSI: 00000000901e000f RDI: 000000008000ffff [ 1417.515307][ T5161] RBP: ffffc9000e1ef578 R08: ffff888034088000 R09: 0000000000000009 [ 1417.523285][ T5161] R10: 0000000000000011 R11: 0000000000000000 R12: 000000008000ffff [ 1417.531273][ T5161] R13: ffff888011682500 R14: 00000000901e000f R15: 0000000000000001 [ 1417.539353][ T5161] ? __blk_add_trace+0x79b/0x8d0 [ 1417.544314][ T5161] ? __lock_acquire+0xab9/0xd20 [ 1417.549194][ T5161] ? __pfx___blk_add_trace+0x10/0x10 [ 1417.554496][ T5161] ? blk_add_trace_bio_remap+0xed/0x560 [ 1417.560060][ T5161] blk_add_trace_bio_remap+0x4b8/0x560 [ 1417.565533][ T5161] ? __pfx___might_resched+0x10/0x10 [ 1417.570827][ T5161] ? __pfx_blk_add_trace_bio_remap+0x10/0x10 [ 1417.576822][ T5161] submit_bio_noacct+0x187b/0x1b80 [ 1417.582138][ T5161] journal_submit_commit_record+0x665/0x8b0 [ 1417.588219][ T5161] ? __pfx_journal_submit_commit_record+0x10/0x10 [ 1417.594648][ T5161] jbd2_journal_commit_transaction+0x3455/0x5a00 [ 1417.601016][ T5161] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 1417.607704][ T5161] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1417.614132][ T5161] ? rcu_is_watching+0x15/0xb0 [ 1417.618971][ T5161] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 1417.624615][ T5161] ? __pfx___timer_delete_sync+0x10/0x10 [ 1417.630271][ T5161] kjournald2+0x3cf/0x750 [ 1417.634633][ T5161] ? __pfx_kjournald2+0x10/0x10 [ 1417.639491][ T5161] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1417.645570][ T5161] ? __kthread_parkme+0x7b/0x200 [ 1417.650624][ T5161] ? __kthread_parkme+0x1a1/0x200 [ 1417.655747][ T5161] kthread+0x711/0x8a0 [ 1417.659843][ T5161] ? __pfx_kjournald2+0x10/0x10 [ 1417.664703][ T5161] ? __pfx_kthread+0x10/0x10 [ 1417.669427][ T5161] ? _raw_spin_unlock_irq+0x23/0x50 [ 1417.674666][ T5161] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.680041][ T5161] ? __pfx_kthread+0x10/0x10 [ 1417.684640][ T5161] ret_from_fork+0x4bc/0x870 [ 1417.689236][ T5161] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.694355][ T5161] ? __switch_to_asm+0x39/0x70 [ 1417.699123][ T5161] ? __switch_to_asm+0x33/0x70 [ 1417.703888][ T5161] ? __pfx_kthread+0x10/0x10 [ 1417.708498][ T5161] ret_from_fork_asm+0x1a/0x30 [ 1417.713365][ T5161] [ 1417.716751][ T5161] Kernel Offset: disabled [ 1417.721177][ T5161] Rebooting in 86400 seconds..