last executing test programs: 23.36284595s ago: executing program 0 (id=917): openat$vcsa(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x43) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) link(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 12.673416043s ago: executing program 3 (id=933): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) prlimit64(0x0, 0xe, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={0x0}) sched_setscheduler(0x0, 0xfffffffffffffffe, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002940)=""/102392, 0x18ff8) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 11.149686864s ago: executing program 3 (id=938): r0 = syz_io_uring_setup(0x2523, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x0, 0x1b2}, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x0, r1}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) get_mempolicy(0x0, 0x0, 0x1000, &(0x7f0000ff9000/0x4000)=nil, 0x3) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000000c0), 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) 10.122958201s ago: executing program 2 (id=939): sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x22, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000000, 0xfa15, 0x100}, 0x0) 9.898391562s ago: executing program 2 (id=941): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x1, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xc, 0x14}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 9.686857744s ago: executing program 2 (id=942): mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffffffff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) time(0xfffffffffffffffc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0xa, 0x3, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x78, r5}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x10000, 0x2b6, 0x5, 0x20033, 0x1, 0xae, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xb}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getrlimit(0x4, &(0x7f0000000280)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r7, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x280040c8}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b80)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535ef976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fce30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3084cf3b54258a1585514aac353b21fe733671e0543929c06f72fc598939003ac6777f3497522236fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1f95b840c363606dc22cb2d1b8af57f6dce7214152ba1b3c0d3add700a11a1c45879fc77e7bb2af8c345ddddf49f41269b4212dfb50f7b7ca71135de32804a80380a6e20e0ae03be76ee472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52af50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e46bd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cbce5df0ba31cb79367527616231f5dcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd2410856f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d86023893b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9da34eae8a2e6b046327db408ac6f11f4a280dd2b87149f9def3c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046cea2e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e588a798a85faf7f4f1dc020b7dd5750022c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6cc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472787621147182352a1dbd93595cbc26e813ccc121f0041022522eff010000a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b360000000000000000000016000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000009b5400000000000000000200000000000000000000000000000000cf00"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x4, 0x1, 0xc3, 0x0, 0x1000, 0x2, 0x42, 0x0, 0x2, 0xf9, 0x5, 0x20, 0x0, 0xff, 0xb, 0x80, 0xa, 0x4, 0x3, '\x00', 0x4e, 0x8}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x556, &(0x7f0000000640)="$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") 9.620635214s ago: executing program 0 (id=943): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef6f, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 8.938350629s ago: executing program 1 (id=944): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) 8.74108791s ago: executing program 2 (id=945): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000002900)='ext4_request_inode\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x4827e, 0x0) 8.633146451s ago: executing program 1 (id=946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x2d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0xf98, &(0x7f00000002c0)={@fda={0x66646185, 0x7, 0x2, 0x4}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x0, 0x1, 0x33}}, &(0x7f0000000600)={0x0, 0x20, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 8.632114571s ago: executing program 0 (id=947): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@compress}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f000000a5c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 8.446554192s ago: executing program 1 (id=948): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4008050) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x81004, 0x5, 0x94ea, 0xffffffff, 'syz0\x00'}, 0x6, 0x20, 0x5, 0x0, 0x0, 0xfffe, 'syz1\x00', 0x0}) fanotify_init(0x23f, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x1004, 0x0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000280)={0x1006, 0x78, 0x400}) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x2, 0x8, 0x9, 0x3, 0x5}) 7.380781159s ago: executing program 2 (id=949): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x109c00, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) timer_create(0x0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000193c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000019380)={&(0x7f0000019340)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "561178513b"}]}, 0x20}}, 0x8040) syz_usb_disconnect(r5) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000300)=""/102392, 0x18ff8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6d", 0x9) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd29, 0x100000, {0x0, 0x0, 0x74, r2, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040840}, 0x240000c0) 7.168243251s ago: executing program 1 (id=950): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdir(0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x103, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1000, {[0x9, 0xdaa, 0x7fff, 0x31, 0x5, 0x1, 0x6d2e, 0xc33]}}, 0x5c) syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') 7.010280432s ago: executing program 3 (id=951): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 5.302104134s ago: executing program 1 (id=952): openat$vcsa(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x43) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) link(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.830160047s ago: executing program 3 (id=953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) io_submit(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_enter(0xffffffffffffffff, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000040)="2ae73cdfcefe5b1d5fb7e34bb4bb86db09f190f499457e5e1986b738f2218fd8556827b168bef4692bd051735cf28547da9606f3085a7915a6be31a7403c38458d4da695a8401fee5d268baeb9508c288165abde0520a34b0471402cf1b3c9efd955b18f24a30f4bce52eb448a9a8217b1688095bd40d9c68f45197cf4b31c31b5cd455d726160e04ac6fa1055930217f77eb12bd618da1995cfe147ebe851d057a29011", 0xa4) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 3.718040265s ago: executing program 3 (id=954): mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffffffff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) time(0xfffffffffffffffc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0xa, 0x3, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x78, r5}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x10000, 0x2b6, 0x5, 0x20033, 0x1, 0xae, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xb}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getrlimit(0x4, &(0x7f0000000280)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r7, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x280040c8}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000b80)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535ef976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fce30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3084cf3b54258a1585514aac353b21fe733671e0543929c06f72fc598939003ac6777f3497522236fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1f95b840c363606dc22cb2d1b8af57f6dce7214152ba1b3c0d3add700a11a1c45879fc77e7bb2af8c345ddddf49f41269b4212dfb50f7b7ca71135de32804a80380a6e20e0ae03be76ee472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52af50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e46bd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cbce5df0ba31cb79367527616231f5dcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd2410856f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d86023893b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9da34eae8a2e6b046327db408ac6f11f4a280dd2b87149f9def3c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046cea2e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e588a798a85faf7f4f1dc020b7dd5750022c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6cc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472787621147182352a1dbd93595cbc26e813ccc121f0041022522eff010000a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b360000000000000000000016000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000009b5400000000000000000200000000000000000000000000000000cf00"}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x4, 0x1, 0xc3, 0x0, 0x1000, 0x2, 0x42, 0x0, 0x2, 0xf9, 0x5, 0x20, 0x0, 0xff, 0xb, 0x80, 0xa, 0x4, 0x3, '\x00', 0x4e, 0x8}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x556, &(0x7f0000000640)="$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") 2.697817471s ago: executing program 2 (id=955): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000), 0x24, 0x0) socket(0x840000000002, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000300)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@acl}, {@cache_strategy_readahead}, {@cache_strategy_readahead}, {@cache_strategy_readahead}, {@cache_strategy_readaround}, {@noacl}, {@dax_always}]}, 0x1, 0x194, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000200)=0x8000000) 1.675018548s ago: executing program 0 (id=956): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef6f, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.47198876s ago: executing program 3 (id=957): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$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") fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) open(&(0x7f00000003c0)='.\x00', 0x101080, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.187492442s ago: executing program 0 (id=958): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4008050) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x81004, 0x5, 0x94ea, 0xffffffff, 'syz0\x00'}, 0x6, 0x20, 0x5, 0x0, 0x0, 0xfffe, 'syz1\x00', 0x0}) fanotify_init(0x23f, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x1004, 0x0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000280)={0x1006, 0x78, 0x400}) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x2, 0x8, 0x9, 0x3, 0x5}) 983.931343ms ago: executing program 1 (id=959): mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffffffff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) time(0xfffffffffffffffc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0xa, 0x3, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) 0s ago: executing program 0 (id=960): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdir(0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x103, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1000, {[0x9, 0xdaa, 0x7fff, 0x31, 0x5, 0x1, 0x6d2e, 0xc33]}}, 0x5c) syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') kernel console output (not intermixed with test programs): 2*16kB (UM) 2*32kB (UE) 3*64kB (UME) 1*128kB (U) 13*256kB (UME) 16*512kB (UME) 3*1024kB (M) 3*2048kB (UME) 352*4096kB (M) = 1462972kB [ 119.677318][ T6117] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 119.717592][ T6117] Node 1 Normal: 265*4kB (UME) 69*8kB (UME) 40*16kB (UME) 69*32kB (UME) 18*64kB (UME) 4*128kB (UE) 1*256kB (E) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 948*4096kB (M) = 3893484kB [ 119.766978][ T6117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.807392][ T6117] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.851722][ T6117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.881275][ T6117] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.916556][ T6117] 61760 total pagecache pages [ 119.933078][ T6117] 0 pages in swap cache [ 119.950131][ T6117] Free swap = 124996kB [ 119.961418][ T6117] Total swap = 124996kB [ 119.980013][ T6117] 2097051 pages RAM [ 119.997287][ T6117] 0 pages HighMem/MovableOnly [ 120.009636][ T6117] 416137 pages reserved [ 120.019781][ T6117] 0 pages cma reserved [ 122.396406][ T6161] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 122.796184][ T42] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.085707][ T6160] loop1: detected capacity change from 0 to 40427 [ 123.117506][ T6160] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 123.134145][ T6160] F2FS-fs (loop1): Unrecognized mount option "checkpoint=merge" or missing value [ 124.892305][ T5801] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 125.830628][ T6200] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 125.996651][ T6205] netlink: 88 bytes leftover after parsing attributes in process `syz.3.91'. [ 128.831233][ T6216] loop1: detected capacity change from 0 to 128 [ 128.885643][ T6216] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.923049][ T6216] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.135948][ T6216] EXT4-fs warning (device loop1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 129.257525][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.009116][ T6254] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.027680][ T6255] netlink: 88 bytes leftover after parsing attributes in process `syz.0.105'. [ 131.114116][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.295971][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.320940][ T8] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a51, bcdDevice= 0.00 [ 131.344735][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.377266][ T8] usb 4-1: config 0 descriptor?? [ 132.378538][ T8] hid-generic 0003:1B1C:0A51.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:0a51] on usb-dummy_hcd.3-1/input0 [ 132.394942][ T8] usb 4-1: USB disconnect, device number 2 [ 133.177143][ T6272] fido_id[6272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 133.207206][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.214276][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.335405][ T6277] overlayfs: failed to resolve './file1': -2 [ 133.858331][ T6293] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 133.858331][ T6293] The task syz.1.118 (6293) triggered the difference, watch for misbehavior. [ 134.162904][ T6289] loop0: detected capacity change from 0 to 32768 [ 134.191100][ T6289] XFS (loop0): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 134.283199][ T6289] XFS (loop0): Ending clean mount [ 134.362210][ T5792] XFS (loop0): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 134.922364][ T1192] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.414994][ T1192] usb 1-1: Using ep0 maxpacket: 8 [ 135.430537][ T1192] usb 1-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 135.440434][ T1192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.452892][ T1192] usb 1-1: config 0 descriptor?? [ 135.461778][ T1192] usblcd 1-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 136.020249][ T6321] overlayfs: failed to resolve './file1': -2 [ 136.028234][ T6306] loop0: detected capacity change from 0 to 32768 [ 136.203671][ T6326] process 'syz.2.127' launched './file2' with NULL argv: empty string added [ 137.606631][ T6333] loop3: detected capacity change from 0 to 64 [ 137.738916][ T1192] usb 1-1: USB disconnect, device number 2 [ 137.848206][ T6338] loop3: detected capacity change from 0 to 256 [ 138.105005][ T6340] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.405363][ T6340] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 140.958912][ T6362] loop2: detected capacity change from 0 to 4096 [ 141.103808][ T6362] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 141.166083][ T6362] ntfs3: Volume is dirty and "force" flag is not set! [ 141.724804][ T5833] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.747759][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'. [ 141.869794][ T6376] loop0: detected capacity change from 0 to 128 [ 141.894115][ T6376] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 141.913304][ T6376] vxfs: unsupported VxFS version (-1232326277) [ 141.935874][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 141.944373][ T5833] usb 2-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 141.980895][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.012662][ T5833] usb 2-1: config 0 descriptor?? [ 142.039444][ T5833] usblcd 2-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 142.591691][ T6371] loop1: detected capacity change from 0 to 32768 [ 144.991529][ T8] usb 2-1: USB disconnect, device number 2 [ 146.146234][ T6413] loop0: detected capacity change from 0 to 4096 [ 146.281029][ T6413] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 146.336257][ T6413] ntfs3: Volume is dirty and "force" flag is not set! [ 147.333557][ T6412] loop3: detected capacity change from 0 to 32768 [ 147.463187][ T6412] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.152 (6412) [ 147.623904][ T6412] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 147.634805][ T6412] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 147.643582][ T6412] BTRFS info (device loop3): enabling disk space caching [ 147.650777][ T6412] BTRFS info (device loop3): force clearing of disk cache [ 147.658353][ T6412] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 147.669571][ T6412] BTRFS info (device loop3): use zstd compression, level 3 [ 147.677833][ T6412] BTRFS info (device loop3): disk space caching is enabled [ 147.693578][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.151'. [ 147.765749][ T6430] loop2: detected capacity change from 0 to 1024 [ 147.786483][ T6430] EXT4-fs: Ignoring removed i_version option [ 147.827960][ T6430] EXT4-fs: inline encryption not supported [ 147.833858][ T6430] EXT4-fs: Ignoring removed i_version option [ 148.041910][ T6440] loop1: detected capacity change from 0 to 128 [ 148.094170][ T6412] BTRFS info (device loop3): enabling ssd optimizations [ 148.101205][ T6412] BTRFS info (device loop3): auto enabling async discard [ 148.134255][ T6440] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 148.141280][ T6412] BTRFS info (device loop3): rebuilding free space tree [ 148.154247][ T6440] vxfs: unsupported VxFS version (-1232326277) [ 148.405448][ T6336] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.112914][ T6412] BTRFS info (device loop3): disabling free space tree [ 149.176252][ T6412] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 149.214042][ T6412] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 149.434594][ T5786] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 150.624496][ T6455] netlink: 88 bytes leftover after parsing attributes in process `syz.3.158'. [ 152.365234][ T6474] fuse: Bad value for 'fd' [ 153.162084][ T6484] loop1: detected capacity change from 0 to 2048 [ 153.325582][ T6488] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.811963][ T6498] netlink: 88 bytes leftover after parsing attributes in process `syz.0.170'. [ 154.302884][ T6501] loop1: detected capacity change from 0 to 4096 [ 154.386248][ T6486] loop3: detected capacity change from 0 to 40427 [ 154.405820][ T6486] F2FS-fs (loop3): build fault injection attr: rate: 174, type: 0x7ffff [ 154.481249][ T6501] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 154.528527][ T6501] ntfs3: Volume is dirty and "force" flag is not set! [ 155.981308][ T6518] fuse: Bad value for 'fd' [ 157.034916][ T6519] loop2: detected capacity change from 0 to 128 [ 157.078833][ T6519] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 157.088496][ T6519] vxfs: unsupported VxFS version (-1232326277) [ 157.147201][ T6524] loop0: detected capacity change from 0 to 4096 [ 157.405950][ T6524] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 158.043376][ T6530] ntfs3: Volume is dirty and "force" flag is not set! [ 158.459791][ T6540] netlink: 88 bytes leftover after parsing attributes in process `syz.3.181'. [ 158.478297][ T6542] loop2: detected capacity change from 0 to 128 [ 160.275524][ T1192] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 160.585842][ T1192] usb 4-1: Using ep0 maxpacket: 8 [ 160.619004][ T6549] loop2: detected capacity change from 0 to 4096 [ 160.625914][ T1192] usb 4-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 160.648533][ T1192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.690394][ T1192] usb 4-1: config 0 descriptor?? [ 160.720863][ T1192] usblcd 4-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 161.396611][ T6556] fuse: Bad value for 'fd' [ 161.590974][ T6559] loop1: detected capacity change from 0 to 4096 [ 161.789116][ T6547] loop3: detected capacity change from 0 to 32768 [ 161.926533][ T6559] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 162.010511][ T6559] ntfs3: Volume is dirty and "force" flag is not set! [ 162.370358][ T28] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 162.605000][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 162.656413][ T28] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.669096][ T28] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.679080][ T28] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.685923][ T28] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 162.695147][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.731019][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.187'. [ 162.731928][ T28] usb 1-1: config 0 descriptor?? [ 163.808721][ T28] hid (null): invalid report_size 1936287343 [ 163.884305][ T28] usb 1-1: USB disconnect, device number 3 [ 164.031912][ T786] usb 4-1: USB disconnect, device number 3 [ 164.545279][ T6579] loop3: detected capacity change from 0 to 2048 [ 164.563106][ T6579] EXT4-fs: inline encryption not supported [ 164.639377][ T6579] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.705018][ T6582] netlink: 88 bytes leftover after parsing attributes in process `syz.0.193'. [ 164.908287][ T5786] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 165.941025][ T6593] loop2: detected capacity change from 0 to 128 [ 166.280991][ T6593] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 166.357945][ T6593] vxfs: unsupported VxFS version (-1232326277) [ 167.900520][ T6611] overlayfs: missing 'lowerdir' [ 168.069592][ T6613] loop0: detected capacity change from 0 to 764 [ 168.096919][ T1192] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 168.119145][ T6613] rock: directory entry would overflow storage [ 168.149358][ T6613] rock: sig=0x4f50, size=4, remaining=3 [ 168.157678][ T6613] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 168.294210][ T1192] usb 4-1: Using ep0 maxpacket: 8 [ 168.378045][ T1192] usb 4-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 168.423490][ T6617] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 168.513575][ T1192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.341030][ T6620] netlink: 88 bytes leftover after parsing attributes in process `syz.0.203'. [ 169.377529][ T1192] usb 4-1: config 0 descriptor?? [ 169.427230][ T1192] usblcd 4-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 170.569911][ T6607] loop3: detected capacity change from 0 to 32768 [ 171.312652][ T6632] loop2: detected capacity change from 0 to 4096 [ 171.321865][ T6632] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 171.509839][ T6632] ntfs3: loop2: failed to convert "c46c" to cp855 [ 172.352780][ T28] usb 4-1: USB disconnect, device number 4 [ 176.238025][ T6654] loop3: detected capacity change from 0 to 262144 [ 176.292471][ T6654] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.211 (6654) [ 176.414953][ T6653] netlink: 88 bytes leftover after parsing attributes in process `syz.1.213'. [ 176.565034][ T6660] loop0: detected capacity change from 0 to 2048 [ 177.096966][ T6669] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.660958][ T27] audit: type=1800 audit(1761937096.064:3): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.214" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 177.797811][ T6669] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 177.847502][ T6669] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 177.896702][ T6669] Remounting filesystem read-only [ 178.508271][ T5792] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 178.564173][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=15 [ 178.597847][ T5792] NILFS (loop0): discard dirty block: blocknr=22, size=1024 [ 178.630975][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.674585][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.698895][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.737186][ T5792] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 178.779381][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 178.798778][ T5792] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 178.825344][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.848799][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.864448][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.910235][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 178.929935][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.977469][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 179.019893][ T5792] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 179.027211][ T6698] loop2: detected capacity change from 0 to 256 [ 179.049910][ T5792] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 179.078702][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 179.110904][ T5792] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 179.137629][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 179.192004][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 179.236963][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 179.291585][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 179.324012][ T5792] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 179.348155][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 179.378646][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 179.431324][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 179.434704][ T6702] netlink: 88 bytes leftover after parsing attributes in process `syz.2.225'. [ 179.473300][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 179.505871][ T5792] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 179.554208][ T5792] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 179.561858][ T5792] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 179.602530][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 179.630784][ T5792] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 179.648492][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 179.682908][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 179.693583][ T5792] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 179.754281][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 180.381151][ T1192] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 180.884271][ T1192] usb 1-1: Using ep0 maxpacket: 8 [ 180.919589][ T1192] usb 1-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 180.949298][ T1192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.991214][ T1192] usb 1-1: config 0 descriptor?? [ 181.065965][ T1192] usblcd 1-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 181.238168][ T6700] loop1: detected capacity change from 0 to 32768 [ 182.165580][ T6706] loop0: detected capacity change from 0 to 32768 [ 182.282012][ T6722] overlayfs: missing 'lowerdir' [ 182.434414][ T6700] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.443800][ T6700] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR [ 182.454913][ T6700] XFS (loop1): log mount failed [ 183.408553][ T786] usb 1-1: USB disconnect, device number 4 [ 183.496954][ T6736] loop3: detected capacity change from 0 to 4096 [ 183.603290][ T6739] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.135815][ T6748] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 185.537372][ T6754] netlink: 88 bytes leftover after parsing attributes in process `syz.1.234'. [ 186.912405][ T6765] virt_wifi0 speed is unknown, defaulting to 1000 [ 186.924190][ T6765] virt_wifi0 speed is unknown, defaulting to 1000 [ 186.978299][ T6765] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.008590][ T6765] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 187.203686][ T6765] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.273999][ T6765] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.834341][ T6765] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.842465][ T6765] virt_wifi0 speed is unknown, defaulting to 1000 [ 188.298588][ T6782] loop3: detected capacity change from 0 to 4096 [ 188.340321][ T6782] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 188.362227][ T6782] ntfs3: Volume is dirty and "force" flag is not set! [ 188.516364][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 188.819786][ T6787] netlink: 88 bytes leftover after parsing attributes in process `syz.3.245'. [ 189.029638][ T6780] loop0: detected capacity change from 0 to 32768 [ 189.087307][ T6780] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.242 (6780) [ 189.167578][ T6780] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 189.208456][ T6780] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 189.364364][ T6780] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 190.062144][ T6780] BTRFS info (device loop0): use zstd compression, level 3 [ 190.070453][ T6780] BTRFS info (device loop0): using free space tree [ 190.446552][ T6780] BTRFS info (device loop0): enabling ssd optimizations [ 190.478237][ T6780] BTRFS info (device loop0): auto enabling async discard [ 190.666389][ T6819] loop1: detected capacity change from 0 to 47 [ 190.711969][ T27] audit: type=1800 audit(1761937109.114:4): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.242" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 190.876443][ T6822] loop3: detected capacity change from 0 to 128 [ 190.909167][ T6822] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 190.926093][ T6822] vxfs: unsupported VxFS version (-1232326277) [ 191.250452][ T6826] loop1: detected capacity change from 0 to 2048 [ 191.318686][ T6826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.546582][ T5792] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 192.378113][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 193.554208][ T6841] netlink: 88 bytes leftover after parsing attributes in process `syz.0.254'. [ 193.648361][ T6843] loop2: detected capacity change from 0 to 128 [ 193.745520][ T6843] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 193.780231][ T6843] hpfs: filesystem error: improperly stopped [ 193.803691][ T6843] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 193.824578][ T6843] hpfs: You really don't want any checks? You are crazy... [ 193.829836][ T6847] loop0: detected capacity change from 0 to 64 [ 193.832819][ T6843] hpfs: hpfs_map_sector(): read error [ 193.855574][ T6843] hpfs: code page support is disabled [ 193.875694][ T6843] hpfs: hpfs_map_4sectors(): unaligned read [ 193.902547][ T6843] hpfs: hpfs_map_4sectors(): unaligned read [ 193.922315][ T6843] hpfs: filesystem error: unable to find root dir [ 194.188543][ T6849] loop0: detected capacity change from 0 to 1024 [ 194.232222][ T6849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.354253][ T6849] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 194.643562][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.650046][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.346885][ T6849] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.261: lblock 2 mapped to illegal pblock 2 (length 1) [ 195.385609][ T6849] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 195.393793][ T6849] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.261: lblock 0 mapped to illegal pblock 48 (length 1) [ 195.448464][ T6849] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 195.510649][ T6865] loop3: detected capacity change from 0 to 4096 [ 195.525778][ T6849] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.261: Failed to acquire dquot type 0 [ 195.546846][ T6865] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 195.566326][ T6865] ntfs3: Volume is dirty and "force" flag is not set! [ 195.595193][ T6849] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 195.657896][ T6849] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.261: mark_inode_dirty error [ 195.727338][ T6849] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 195.789027][ T6849] EXT4-fs (loop0): 1 orphan inode deleted [ 195.812728][ T6849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.812759][ T11] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.899736][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.266'. [ 195.953693][ T11] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 195.983272][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u4:0: Failed to release dquot type 0 [ 196.086107][ T6849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.126487][ T6849] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.261: Invalid inode table block 1 in block_group 0 [ 196.223531][ T6849] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 196.239736][ T6849] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.261: mark_inode_dirty error [ 196.373266][ T6853] loop2: detected capacity change from 0 to 32768 [ 196.387948][ T6853] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.262 (6853) [ 196.482643][ T6853] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.509197][ T6853] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 196.535863][ T6853] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 196.552678][ T6853] BTRFS info (device loop2): trying to use backup root at mount time [ 196.574348][ T6853] BTRFS info (device loop2): setting nodatasum [ 196.580681][ T6853] BTRFS info (device loop2): force zlib compression, level 3 [ 196.602720][ T6853] BTRFS info (device loop2): turning on flush-on-commit [ 196.620946][ T6853] BTRFS info (device loop2): enabling disk space caching [ 196.640624][ T6853] BTRFS error (device loop2): cannot disable free space tree [ 196.690352][ T6853] BTRFS error (device loop2): open_ctree failed: -22 [ 196.709041][ T5791] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5791) [ 197.675371][ T6853] loop2: detected capacity change from 32768 to 64 [ 197.807934][ T6881] loop3: detected capacity change from 0 to 764 [ 197.849003][ T6877] loop0: detected capacity change from 0 to 8192 [ 197.960795][ T6877] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.169617][ T6884] rock: directory entry would overflow storage [ 198.176659][ T6884] rock: sig=0x4f50, size=4, remaining=3 [ 198.182283][ T6884] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 202.011208][ T6892] loop0: detected capacity change from 0 to 40427 [ 202.434232][ T6892] F2FS-fs (loop0): invalid crc value [ 202.493235][ T6892] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.861172][ T6892] F2FS-fs (loop0): Start checkpoint disabled! [ 203.565579][ T6892] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 203.667268][ T6906] loop1: detected capacity change from 0 to 128 [ 206.403109][ T6923] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 206.412579][ T6923] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 206.422612][ T6921] loop3: detected capacity change from 0 to 128 [ 208.073321][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 208.079771][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 208.085872][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 209.108221][ T6924] loop2: detected capacity change from 0 to 32768 [ 209.181477][ T6924] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 209.216322][ T6924] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 209.357532][ T6924] XFS (loop2): AIL initialisation failed: error -12 [ 209.404215][ T6924] XFS (loop2): log mount failed [ 210.864415][ T6953] loop3: detected capacity change from 0 to 40427 [ 210.904187][ T6953] F2FS-fs (loop3): build fault injection attr: rate: 174, type: 0x7ffff [ 210.904742][ T6968] netlink: 660 bytes leftover after parsing attributes in process `syz.0.294'. [ 211.056653][ T6968] (null): rxe_set_mtu: Set mtu to 1024 [ 211.384125][ T6979] fuse: Bad value for 'fd' [ 212.997079][ T6983] loop1: detected capacity change from 0 to 512 [ 213.029577][ T6983] EXT4-fs: Ignoring removed bh option [ 213.087833][ T6968] infiniband syû: set active [ 213.092818][ T6968] infiniband syû: added bond_slave_0 [ 213.101732][ T6968] syû: rxe_create_cq: returned err = -12 [ 213.108136][ T6968] infiniband syû: Couldn't create ib_mad CQ [ 213.116438][ T6968] infiniband syû: Couldn't open port 1 [ 213.170255][ T6983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.183394][ T6983] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.218013][ T6968] RDS/IB: syû: added [ 213.222801][ T6968] smc: adding ib device syû with port count 1 [ 213.264856][ T6968] smc: ib device syû port 1 has pnetid [ 213.924883][ T6992] hub 1-0:1.0: USB hub found [ 213.973267][ T6992] hub 1-0:1.0: 1 port detected [ 214.097553][ T6980] loop2: detected capacity change from 0 to 32768 [ 214.139731][ T6980] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.161966][ T6980] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 214.183059][ T6980] BTRFS info (device loop2): use zlib compression, level 3 [ 214.210876][ T6980] BTRFS info (device loop2): using free space tree [ 214.233127][ T6983] capability: warning: `syz.1.300' uses 32-bit capabilities (legacy support in use) [ 214.282249][ T27] audit: type=1800 audit(1761937132.684:5): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.300" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 214.448044][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.527233][ T6980] BTRFS error (device loop2): open_ctree failed: -4 [ 214.864347][ T5833] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 215.020873][ T7020] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 215.034267][ T5833] usb 2-1: device descriptor read/64, error -71 [ 215.062318][ T7020] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 215.254453][ T7026] loop3: detected capacity change from 0 to 1024 [ 215.271234][ T7026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.305785][ T7026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.368493][ T5833] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 215.371520][ T7032] fuse: Bad value for 'fd' [ 215.574213][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 216.149087][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.482118][ T5833] usb 2-1: device descriptor read/64, error -71 [ 216.610127][ T5833] usb usb2-port1: attempt power cycle [ 216.735376][ T7040] loop3: detected capacity change from 0 to 1024 [ 217.572557][ T7040] hfsplus: xattr searching failed [ 218.279190][ T5833] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 218.899395][ T5833] usb 2-1: device not accepting address 5, error -71 [ 219.136022][ T6399] hfsplus: bad catalog file entry [ 219.200533][ T6399] hfsplus: b-tree write err: -5, ino 3 [ 219.505866][ T7045] virt_wifi0 speed is unknown, defaulting to 1000 [ 220.142294][ T7050] netlink: 88 bytes leftover after parsing attributes in process `syz.3.314'. [ 220.550481][ T7054] loop2: detected capacity change from 0 to 4096 [ 220.775184][ T7054] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 221.469236][ T7057] ntfs3: Volume is dirty and "force" flag is not set! [ 221.754654][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 222.132537][ T7061] overlayfs: missing 'lowerdir' [ 222.174544][ T7062] loop3: detected capacity change from 0 to 256 [ 222.469933][ T7069] capability: warning: `syz.2.319' uses deprecated v2 capabilities in a way that may be insecure [ 224.273335][ T7062] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 225.527914][ T786] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 225.737688][ T786] usb 1-1: device descriptor read/64, error -71 [ 226.234948][ T7078] netlink: 88 bytes leftover after parsing attributes in process `syz.2.323'. [ 226.268980][ T7080] loop3: detected capacity change from 0 to 2048 [ 226.287697][ T7080] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.412294][ T7084] warning: `syz.1.325' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 226.527277][ T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 226.848407][ T786] usb 1-1: device descriptor read/64, error -71 [ 226.853052][ T7090] loop1: detected capacity change from 0 to 4096 [ 226.887449][ T7090] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 227.598416][ T786] usb usb1-port1: attempt power cycle [ 227.604890][ T7095] ntfs3: Volume is dirty and "force" flag is not set! [ 227.913471][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.327'. [ 228.457643][ T7092] loop3: detected capacity change from 0 to 32768 [ 228.465500][ T786] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 228.491116][ T7092] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.328 (7092) [ 228.577033][ T7092] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 228.587821][ T7092] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 228.597360][ T7092] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 228.606847][ T7092] BTRFS info (device loop3): use zstd compression, level 3 [ 228.614155][ T7092] BTRFS info (device loop3): using free space tree [ 228.624844][ T786] usb 1-1: device descriptor read/8, error -71 [ 228.679602][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 228.743651][ T7092] BTRFS info (device loop3): enabling ssd optimizations [ 228.750811][ T7092] BTRFS info (device loop3): auto enabling async discard [ 228.844350][ T7108] loop0: detected capacity change from 0 to 4096 [ 228.893804][ T7108] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 228.911219][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 228.925444][ T5879] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 228.998087][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 229.045024][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 229.167026][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 229.182416][ T5879] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.197192][ T5786] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 229.244418][ T5879] usb 2-1: config 64 has an invalid interface number: 111 but max is 0 [ 229.246481][ T7108] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 229.276732][ T5879] usb 2-1: config 64 has no interface number 0 [ 229.285736][ T5879] usb 2-1: config 64 interface 111 altsetting 38 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 229.369092][ T5879] usb 2-1: config 64 interface 111 altsetting 38 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 229.403854][ T5879] usb 2-1: config 64 interface 111 altsetting 38 has an invalid endpoint with address 0x11, skipping [ 229.490058][ T5879] usb 2-1: config 64 interface 111 altsetting 38 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 229.533050][ T5879] usb 2-1: config 64 interface 111 has no altsetting 0 [ 229.579649][ T5879] usb 2-1: New USB device found, idVendor=1199, idProduct=683e, bcdDevice=6d.d2 [ 229.589311][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.622656][ T5879] usb 2-1: Product: syz [ 229.653186][ T5879] usb 2-1: Manufacturer: syz [ 229.663845][ T5792] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 229.690366][ T5879] usb 2-1: SerialNumber: syz [ 230.011427][ T5879] sierra 2-1:64.111: Sierra USB modem converter detected [ 230.096538][ T7128] loop3: detected capacity change from 0 to 64 [ 230.101960][ T5879] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 230.136144][ T7128] hfs: unable to locate alternate MDB [ 230.142008][ T7128] hfs: continuing without an alternate MDB [ 230.376082][ T5879] usb 2-1: USB disconnect, device number 7 [ 230.680295][ T5879] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 230.738534][ T5879] sierra 2-1:64.111: device disconnected [ 231.490224][ T7132] netlink: 88 bytes leftover after parsing attributes in process `syz.0.335'. [ 233.160066][ T7146] loop1: detected capacity change from 0 to 4096 [ 233.195529][ T7146] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 233.584507][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'. [ 234.792560][ T5840] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.956066][ T5840] usb 1-1: device descriptor read/64, error -71 [ 235.884091][ T5840] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 235.948177][ T7166] loop2: detected capacity change from 0 to 736 [ 236.045821][ T5840] usb 1-1: device descriptor read/64, error -71 [ 236.133139][ T7151] loop3: detected capacity change from 0 to 32768 [ 236.168968][ T5840] usb usb1-port1: attempt power cycle [ 236.305748][ T7151] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 236.312432][ T7151] (syz.3.343,7151,1):ocfs2_initialize_super:2285 ERROR: status = -12 [ 236.419607][ T7151] (syz.3.343,7151,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 237.288304][ T7164] loop1: detected capacity change from 0 to 32768 [ 237.332842][ T7164] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.346 (7164) [ 237.397153][ T7164] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.454201][ T7164] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 237.505844][ T7164] BTRFS info (device loop1): using free space tree [ 237.656843][ T7168] loop0: detected capacity change from 0 to 32768 [ 237.804079][ T7168] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 237.845737][ T7168] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 237.905310][ T7164] BTRFS info (device loop1): enabling ssd optimizations [ 237.925450][ T7164] BTRFS info (device loop1): auto enabling async discard [ 238.217402][ T7168] XFS (loop0): Ending clean mount [ 238.477209][ T7168] XFS (loop0): Quotacheck needed: Please wait. [ 238.976010][ T5785] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.175077][ T7214] fuse: Bad value for 'fd' [ 239.440398][ T7168] XFS (loop0): Quotacheck: Done. [ 240.044117][ T5792] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 240.244098][ T786] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 241.014087][ T786] usb 4-1: device descriptor read/64, error -71 [ 241.072947][ T7221] loop2: detected capacity change from 0 to 4096 [ 241.195097][ T7221] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 241.286785][ T786] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 241.358398][ T7221] ntfs3: loop2: failed to convert "c46c" to cp855 [ 241.480720][ T786] usb 4-1: device descriptor read/64, error -71 [ 241.609798][ T786] usb usb4-port1: attempt power cycle [ 241.718266][ T7225] loop1: detected capacity change from 0 to 32768 [ 241.734450][ T7225] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.359 (7225) [ 241.769357][ T7225] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 241.783589][ T7225] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 241.798661][ T7225] BTRFS info (device loop1): enabling disk space caching [ 241.808382][ T7225] BTRFS info (device loop1): use no compression [ 241.820812][ T7225] BTRFS info (device loop1): force clearing of disk cache [ 241.828967][ T7225] BTRFS info (device loop1): turning on sync discard [ 241.840740][ T7225] BTRFS info (device loop1): disabling disk space caching [ 241.924129][ T7225] BTRFS info (device loop1): enabling ssd optimizations [ 241.956069][ T7225] BTRFS info (device loop1): rebuilding free space tree [ 242.017154][ T7225] BTRFS info (device loop1): disabling free space tree [ 242.028500][ T7225] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 242.039833][ T7225] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 242.050983][ T786] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 242.095064][ T786] usb 4-1: device descriptor read/8, error -71 [ 242.146704][ T7246] loop2: detected capacity change from 0 to 4096 [ 242.229337][ T7246] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 242.244625][ T7246] ntfs3: Volume is dirty and "force" flag is not set! [ 242.464289][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.360'. [ 242.494448][ T786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 242.754024][ T786] usb 4-1: device not accepting address 8, error -71 [ 242.761237][ T786] usb usb4-port1: unable to enumerate USB device [ 243.453341][ T7253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.362'. [ 243.748145][ T7262] netlink: 'syz.0.366': attribute type 3 has an invalid length. [ 243.810256][ T7264] fuse: Bad value for 'fd' [ 244.806466][ T7262] netlink: 'syz.0.366': attribute type 3 has an invalid length. [ 245.771281][ T7272] loop2: detected capacity change from 0 to 4096 [ 245.814074][ T7272] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 245.983791][ T7272] ntfs3: loop2: failed to convert "c46c" to cp855 [ 246.574271][ T7274] loop0: detected capacity change from 0 to 64 [ 246.590003][ T5785] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 246.716717][ T7274] hfs: get root inode failed [ 247.303031][ T7289] loop2: detected capacity change from 0 to 4096 [ 247.567510][ T7289] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 247.599583][ T7289] ntfs3: Volume is dirty and "force" flag is not set! [ 247.834068][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.374'. [ 247.977307][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.375'. [ 250.533632][ T7317] loop0: detected capacity change from 0 to 764 [ 250.627059][ T7317] rock: directory entry would overflow storage [ 250.633274][ T7317] rock: sig=0x4f50, size=4, remaining=3 [ 250.638964][ T7317] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 250.716502][ T7318] loop1: detected capacity change from 0 to 4096 [ 250.726830][ T7318] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 251.407618][ T7318] ntfs3: loop1: failed to convert "c46c" to cp855 [ 251.834934][ T7333] loop2: detected capacity change from 0 to 4096 [ 252.041075][ T7333] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 252.068939][ T7333] ntfs3: Volume is dirty and "force" flag is not set! [ 252.372036][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.385'. [ 252.595400][ T7335] Bluetooth: MGMT ver 1.22 [ 253.224541][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 253.234822][ T7344] loop1: detected capacity change from 0 to 4096 [ 253.249506][ T7344] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 253.939269][ T7347] loop3: detected capacity change from 0 to 764 [ 254.009754][ T7344] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 254.102118][ T7347] rock: directory entry would overflow storage [ 254.108529][ T7347] rock: sig=0x4f50, size=4, remaining=3 [ 254.114202][ T7347] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 254.562736][ T7350] loop3: detected capacity change from 0 to 1024 [ 254.570541][ T5785] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 254.592679][ T5785] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 255.444813][ T7358] syz.3.396 uses obsolete (PF_INET,SOCK_PACKET) [ 255.507931][ T7360] loop2: detected capacity change from 0 to 4096 [ 255.527993][ T7340] loop0: detected capacity change from 0 to 32768 [ 255.557698][ T7360] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 255.601384][ T7360] ntfs3: Volume is dirty and "force" flag is not set! [ 255.610759][ T7340] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 255.635247][ T7340] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 255.636230][ T7340] XFS (loop0): log mount failed [ 255.952324][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'. [ 255.978587][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.985225][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.396609][ T7372] netlink: 'syz.3.399': attribute type 3 has an invalid length. [ 256.410858][ T7372] netlink: 'syz.3.399': attribute type 3 has an invalid length. [ 257.277341][ T51] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 257.704063][ T5909] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 257.904478][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 257.923519][ T5909] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 257.946393][ T5909] usb 4-1: config 0 has no interface number 0 [ 258.103767][ T7389] loop1: detected capacity change from 0 to 1024 [ 258.384456][ T7389] hfsplus: xattr searching failed [ 258.706397][ T5909] usb 4-1: config 0 interface 184 has no altsetting 0 [ 258.724273][ T5909] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 258.733373][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.744504][ T5909] usb 4-1: Product: syz [ 258.748717][ T5909] usb 4-1: Manufacturer: syz [ 258.753342][ T5909] usb 4-1: SerialNumber: syz [ 258.800797][ T5909] usb 4-1: config 0 descriptor?? [ 258.817363][ T5909] smsc75xx v1.0.0 [ 259.862990][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 259.897944][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 260.343108][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 260.378174][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 260.389197][ T5909] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 260.413694][ T5909] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 260.429171][ T7395] loop0: detected capacity change from 0 to 4096 [ 260.438912][ T5909] usb 4-1: USB disconnect, device number 9 [ 260.932943][ T7402] loop2: detected capacity change from 0 to 4096 [ 260.985087][ T7402] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 261.003615][ T7402] ntfs3: Volume is dirty and "force" flag is not set! [ 261.189846][ T7404] loop3: detected capacity change from 0 to 4096 [ 261.287449][ T7404] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 261.305708][ T7404] ntfs3: Volume is dirty and "force" flag is not set! [ 261.801566][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 261.802323][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.407'. [ 262.437309][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.408'. [ 262.475833][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 262.497214][ T5797] Bluetooth: hci1: hardware error 0x00 [ 263.646405][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 263.656362][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 263.666838][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 263.694497][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 263.924551][ T7416] loop1: detected capacity change from 0 to 4096 [ 263.941589][ T7416] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 264.198905][ T7416] ntfs3: loop1: failed to convert "c46c" to cp855 [ 264.323783][ T7427] loop3: detected capacity change from 0 to 128 [ 264.344438][ T7427] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 264.374372][ T7427] vxfs: unsupported VxFS version (-1232326277) [ 264.764210][ T5797] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 267.308671][ T7447] loop2: detected capacity change from 0 to 1024 [ 269.745666][ T7471] netlink: 88 bytes leftover after parsing attributes in process `syz.0.427'. [ 270.942830][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 271.058069][ T7483] loop3: detected capacity change from 0 to 128 [ 271.277713][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 271.978702][ T8] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 271.989134][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.998634][ T8] usb 1-1: Product: syz [ 272.002911][ T8] usb 1-1: Manufacturer: syz [ 272.007843][ T8] usb 1-1: SerialNumber: syz [ 272.023730][ T8] usb 1-1: config 0 descriptor?? [ 272.035682][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 272.202554][ T7486] loop3: detected capacity change from 0 to 1024 [ 272.220487][ T7486] EXT4-fs: Ignoring removed bh option [ 272.294473][ T7486] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 272.346681][ T7486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.590361][ T8] gspca_se401: read req failed req 0x06 error -19 [ 274.017422][ T8] usb 1-1: USB disconnect, device number 12 [ 274.130758][ T7493] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.433: bg 0: block 107: padding at end of block bitmap is not set [ 274.178520][ T7493] EXT4-fs (loop3): Remounting filesystem read-only [ 274.213184][ T7493] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 275.356089][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'. [ 275.363183][ T7500] loop0: detected capacity change from 0 to 4096 [ 275.498158][ T7509] netlink: 88 bytes leftover after parsing attributes in process `syz.2.439'. [ 277.709984][ T7511] loop1: detected capacity change from 0 to 128 [ 277.723583][ T7511] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 277.760967][ T7500] ntfs3: loop0: Failed to read $AttrDef (-4). [ 277.957504][ T7514] loop2: detected capacity change from 0 to 128 [ 277.981768][ T7511] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 280.573419][ T7516] loop0: detected capacity change from 0 to 764 [ 281.055754][ T7521] rock: directory entry would overflow storage [ 281.061935][ T7521] rock: sig=0x4f50, size=4, remaining=3 [ 281.067637][ T7521] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 281.248161][ T7524] loop1: detected capacity change from 0 to 4096 [ 281.318948][ T7524] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 281.332435][ T7524] ntfs3: Volume is dirty and "force" flag is not set! [ 281.616334][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 281.922076][ T7529] fuse: Bad value for 'fd' [ 283.176774][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.403168][ T7539] netlink: 88 bytes leftover after parsing attributes in process `syz.3.449'. [ 284.561961][ T7533] loop0: detected capacity change from 0 to 40427 [ 284.594531][ T7533] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x7ffff [ 284.623092][ T7533] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 284.646863][ T7533] F2FS-fs (loop0): Image doesn't support compression [ 284.686157][ T7533] F2FS-fs (loop0): invalid crc value [ 284.707508][ T7533] F2FS-fs (loop0): Found nat_bits in checkpoint [ 284.879876][ T7533] F2FS-fs (loop0): Start checkpoint disabled! [ 284.919340][ T7533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 285.093651][ T7536] loop1: detected capacity change from 0 to 32768 [ 285.206769][ T7536] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.448 (7536) [ 285.888864][ T7550] F2FS-fs (loop0): inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x3ab/0x470 [ 286.026776][ T7536] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.094696][ T7536] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 286.113753][ T7536] BTRFS info (device loop1): using free space tree [ 286.259047][ T7536] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 286.260068][ T7536] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 286.366412][ T7536] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 286.394685][ T7536] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 286.424779][ T7536] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 286.481584][ T7561] loop3: detected capacity change from 0 to 764 [ 286.484901][ T7536] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 286.544820][ T7536] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 286.556240][ T7536] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 286.574867][ T7536] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 286.605003][ T7536] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 286.621392][ T1101] kworker/u4:8: attempt to access beyond end of device [ 286.621392][ T1101] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 286.767059][ T1101] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 286.813131][ T1101] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 286.815854][ T7536] BTRFS error (device loop1): open_ctree failed: -12 [ 286.955588][ T7567] rock: directory entry would overflow storage [ 286.961810][ T7567] rock: sig=0x4f50, size=4, remaining=3 [ 286.967493][ T7567] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 287.107295][ T5796] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (5796) [ 287.549718][ T7572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 288.419587][ T7576] loop0: detected capacity change from 0 to 128 [ 288.515497][ T7579] fuse: Bad value for 'fd' [ 289.568426][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 289.701285][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 289.712109][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 289.724383][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 289.781219][ T7587] Bluetooth: hci0: load_link_keys: too big key_count value 3072 [ 289.954668][ T7594] netlink: 88 bytes leftover after parsing attributes in process `syz.2.458'. [ 292.710440][ T7604] loop2: detected capacity change from 0 to 4096 [ 292.755004][ T7604] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 292.774591][ T7604] ntfs3: Volume is dirty and "force" flag is not set! [ 293.036796][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.463'. [ 293.819430][ T7610] fuse: Bad value for 'fd' [ 294.638654][ T7612] loop0: detected capacity change from 0 to 256 [ 294.654760][ T7612] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 295.052385][ T7617] loop1: detected capacity change from 0 to 128 [ 296.205182][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 296.552322][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 296.577201][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 296.591480][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 297.156919][ T7634] netlink: 88 bytes leftover after parsing attributes in process `syz.0.471'. [ 297.988814][ T7640] loop0: detected capacity change from 0 to 4096 [ 298.025965][ T7640] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 298.137915][ T7640] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 298.280466][ T7646] loop1: detected capacity change from 0 to 1024 [ 299.067154][ T7646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.165661][ T5792] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 299.301196][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.471780][ T7652] loop2: detected capacity change from 0 to 64 [ 300.716314][ T7657] loop1: detected capacity change from 0 to 32768 [ 300.982130][ T7665] overlayfs: failed to clone upperpath [ 301.092190][ T7666] overlayfs: failed to clone upperpath [ 301.737362][ T7657] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 302.595659][ T7677] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 302.604605][ T7677] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 305.494347][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 305.797176][ T7690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'. [ 307.222863][ T7702] loop1: detected capacity change from 0 to 764 [ 308.082068][ T7703] rock: directory entry would overflow storage [ 308.088462][ T7703] rock: sig=0x4f50, size=4, remaining=3 [ 308.094278][ T7703] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 309.252897][ T7698] loop3: detected capacity change from 0 to 262144 [ 309.298385][ T7698] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.489 (7698) [ 309.319224][ T7698] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 309.329598][ T7698] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 309.339022][ T7698] BTRFS info (device loop3): using free space tree [ 309.561111][ T49] BTRFS warning (device loop3): checksum verify failed on logical 30654464 mirror 1 wanted 0x6191332ca3bfabbd found 0x9eb6bd6c7b6c1206 level 0 [ 309.655897][ T49] BTRFS warning (device loop3): checksum verify failed on logical 30654464 mirror 2 wanted 0x6191332ca3bfabbd found 0x589d0143f7715625 level 0 [ 309.817803][ T7698] BTRFS warning (device loop3): couldn't read tree root [ 310.036359][ T7698] BTRFS error (device loop3): open_ctree failed: -5 [ 310.224744][ T7705] loop2: detected capacity change from 0 to 40427 [ 310.282253][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.494'. [ 310.331670][ T7705] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x7ffff [ 310.369613][ T7705] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 310.404341][ T7705] F2FS-fs (loop2): Image doesn't support compression [ 310.448941][ T7705] F2FS-fs (loop2): invalid crc value [ 310.503295][ T7705] F2FS-fs (loop2): Found nat_bits in checkpoint [ 310.799861][ T7705] F2FS-fs (loop2): Start checkpoint disabled! [ 310.868088][ T7705] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 311.538636][ T7748] syz.2.491: attempt to access beyond end of device [ 311.538636][ T7748] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 311.655353][ T7748] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x669/0x18d0 [ 312.214754][ T7749] loop0: detected capacity change from 0 to 32768 [ 312.249469][ T7749] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.498 (7749) [ 312.309519][ T7749] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 312.319802][ T7749] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 312.329324][ T7749] BTRFS info (device loop0): using free space tree [ 312.415758][ T1069] kworker/u4:5: attempt to access beyond end of device [ 312.415758][ T1069] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 312.488988][ T7749] BTRFS info (device loop0): enabling ssd optimizations [ 312.496087][ T7749] BTRFS info (device loop0): auto enabling async discard [ 312.512968][ T1069] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 312.574065][ T1069] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 312.644217][ T1069] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 312.834410][ T5792] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 312.835223][ T7769] loop3: detected capacity change from 0 to 128 [ 312.921617][ T7769] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 312.960064][ T7769] vxfs: unsupported VxFS version (-1232326277) [ 313.427716][ T5796] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (5796) [ 314.632764][ T7780] loop1: detected capacity change from 0 to 4096 [ 314.916102][ T7780] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 315.454813][ T7780] ntfs3: loop1: failed to convert "c46c" to cp855 [ 317.495279][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.501824][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.216577][ T7825] loop0: detected capacity change from 0 to 2048 [ 320.279266][ T7827] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.408274][ T7829] loop2: detected capacity change from 0 to 764 [ 321.075251][ T7833] rock: directory entry would overflow storage [ 321.081473][ T7833] rock: sig=0x4f50, size=4, remaining=3 [ 321.107653][ T7833] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 322.404483][ T7844] loop3: detected capacity change from 0 to 128 [ 322.491320][ T7844] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 322.535905][ T7844] vxfs: unsupported VxFS version (-1232326277) [ 322.691248][ T7846] loop2: detected capacity change from 0 to 4096 [ 322.900932][ T7846] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 322.915083][ T7846] ntfs3: Volume is dirty and "force" flag is not set! [ 323.148358][ T7850] tipc: Started in network mode [ 323.153613][ T7850] tipc: Node identity ac1414aa, cluster identity 4711 [ 323.162841][ T7850] tipc: Enabled bearer , priority 10 [ 323.184350][ T7851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.519'. [ 323.940088][ T7853] tipc: Enabled bearer , priority 0 [ 324.710951][ T7827] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 324.745329][ T7827] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 324.779493][ T7827] Remounting filesystem read-only [ 324.798514][ T1081] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 324.820597][ T1081] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 324.837722][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 324.856322][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 324.870418][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 324.908486][ T1081] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 324.925135][ T1081] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 324.954035][ T1081] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 324.961400][ T1081] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 324.996555][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.010505][ T7866] loop3: detected capacity change from 0 to 256 [ 325.019452][ T8] tipc: Node number set to 2886997162 [ 325.045297][ T1081] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 325.052442][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.104270][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.113204][ T1081] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 325.184109][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.193053][ T1081] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 325.230753][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.261148][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.283962][ T1081] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 325.291323][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.344013][ T1081] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 325.364308][ T1081] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 325.389926][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.410224][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.447369][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.474054][ T1081] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 325.480820][ T1081] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 325.503981][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.517878][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.538154][ T1081] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.579747][ T5792] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 325.618154][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 325.637782][ T5792] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 325.664157][ T5792] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 325.681757][ T5792] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 325.693936][ T5792] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 325.705880][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 325.712741][ T5792] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 325.720787][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.731065][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.740476][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.752308][ T5792] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 325.770341][ T5792] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 325.778102][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.787597][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 325.839584][ T5792] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 327.946022][ T7888] loop1: detected capacity change from 0 to 4096 [ 327.978653][ T7888] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 328.005294][ T7888] ntfs3: Volume is dirty and "force" flag is not set! [ 328.216025][ T7889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.529'. [ 328.471144][ T7879] loop0: detected capacity change from 0 to 32768 [ 328.545412][ T7879] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.526 (7879) [ 328.700052][ T7879] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.803395][ T7879] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 328.855824][ T7879] BTRFS info (device loop0): using free space tree [ 329.069961][ T7879] BTRFS info (device loop0): enabling ssd optimizations [ 329.121605][ T7879] BTRFS info (device loop0): auto enabling async discard [ 329.199641][ T7882] loop2: detected capacity change from 0 to 32768 [ 330.127417][ T7921] atomic_op ffff88801afbd198 conn xmit_atomic 0000000000000000 [ 330.349208][ T7919] sctp: failed to load transform for md5: -2 [ 330.610510][ T27] audit: type=1804 audit(1761937248.954:6): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.526" name="/newroot/134/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 331.314825][ T5792] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.897245][ T7945] loop3: detected capacity change from 0 to 4096 [ 331.929892][ T7945] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 331.949973][ T7945] ntfs3: Volume is dirty and "force" flag is not set! [ 332.237003][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.539'. [ 332.422108][ T7948] loop0: detected capacity change from 0 to 764 [ 334.333792][ T7965] rock: directory entry would overflow storage [ 334.390047][ T7965] rock: sig=0x4f50, size=4, remaining=3 [ 334.402226][ T7967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.544'. [ 334.436390][ T7965] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 335.042470][ T7978] loop0: detected capacity change from 0 to 128 [ 335.105160][ T7978] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.127749][ T7978] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 335.185809][ T7982] loop2: detected capacity change from 0 to 4096 [ 335.258381][ T7982] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 335.610812][ T7985] ntfs3: Volume is dirty and "force" flag is not set! [ 335.947300][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.549'. [ 336.720522][ T5792] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.943754][ T7994] loop3: detected capacity change from 0 to 128 [ 336.954952][ T7994] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 337.076370][ T7995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.550'. [ 337.183943][ T7994] vxfs: unsupported VxFS version (-1232326277) [ 337.808806][ T8000] loop1: detected capacity change from 0 to 512 [ 337.831230][ T8000] EXT4-fs: Ignoring removed bh option [ 337.909832][ T8000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.950525][ T8000] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.587721][ T8007] hub 1-0:1.0: USB hub found [ 338.597375][ T8007] hub 1-0:1.0: 1 port detected [ 338.706976][ T27] audit: type=1800 audit(1761937257.114:7): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.553" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 339.263322][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.359582][ T8017] loop2: detected capacity change from 0 to 256 [ 339.501270][ T8019] loop3: detected capacity change from 0 to 4096 [ 339.542064][ T8019] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 339.577577][ T8019] ntfs3: Volume is dirty and "force" flag is not set! [ 339.598341][ T8021] loop1: detected capacity change from 0 to 764 [ 339.922000][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'. [ 340.556730][ T8029] loop2: detected capacity change from 0 to 128 [ 340.568997][ T8028] rock: directory entry would overflow storage [ 340.575644][ T8028] rock: sig=0x4f50, size=4, remaining=3 [ 340.581278][ T8028] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 341.235140][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.563'. [ 342.031760][ T8045] loop3: detected capacity change from 0 to 256 [ 342.185506][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 342.376727][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 342.400526][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 342.412901][ T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.432730][ T23] usb 2-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 342.457716][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.484975][ T8060] loop3: detected capacity change from 0 to 128 [ 342.487694][ T23] usb 2-1: config 0 descriptor?? [ 342.536835][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 342.575759][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 342.597369][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 342.912424][ T8039] loop1: detected capacity change from 0 to 32768 [ 344.132520][ T23] usb 2-1: USB disconnect, device number 8 [ 344.397783][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'. [ 347.441740][ T8082] loop0: detected capacity change from 0 to 256 [ 347.670835][ T8086] loop3: detected capacity change from 0 to 128 [ 348.143341][ T8095] loop1: detected capacity change from 0 to 1024 [ 348.610228][ T8095] hfsplus: xattr searching failed [ 349.625441][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 350.102822][ T6522] hfsplus: bad catalog file entry [ 350.272886][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 350.282210][ T6522] hfsplus: b-tree write err: -5, ino 3 [ 350.308990][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 350.364445][ T8109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.588'. [ 351.062070][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 351.532384][ T8117] loop2: detected capacity change from 0 to 1024 [ 351.734601][ T8117] hfsplus: xattr searching failed [ 353.601302][ T1081] hfsplus: bad catalog file entry [ 353.718092][ T1081] hfsplus: b-tree write err: -5, ino 3 [ 353.938896][ T8120] loop0: detected capacity change from 0 to 128 [ 354.445181][ T8132] fuse: Bad value for 'fd' [ 355.995076][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.598'. [ 357.235976][ T8157] loop3: detected capacity change from 0 to 128 [ 357.272546][ T8155] loop0: detected capacity change from 0 to 1024 [ 357.661059][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 357.814331][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 357.823699][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 357.865991][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 358.070452][ T8171] loop3: detected capacity change from 0 to 764 [ 358.459968][ T8176] rock: directory entry would overflow storage [ 358.466409][ T8176] rock: sig=0x4f50, size=4, remaining=3 [ 358.471992][ T8176] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 358.660306][ T8178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.609'. [ 359.187883][ T8175] loop2: detected capacity change from 0 to 4096 [ 359.255772][ T8175] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 359.400854][ T8175] ntfs3: loop2: failed to convert "c46c" to cp855 [ 361.810140][ T8189] loop3: detected capacity change from 0 to 64 [ 361.935302][ T8189] hfs: get root inode failed [ 362.125765][ T8193] loop2: detected capacity change from 0 to 128 [ 364.491745][ T8191] loop0: detected capacity change from 0 to 32768 [ 364.721674][ T8191] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 364.843137][ T8215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.622'. [ 365.391001][ T8191] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 365.637758][ T8219] loop2: detected capacity change from 0 to 64 [ 365.648912][ T8191] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 365.673013][ T8219] hfs: get root inode failed [ 365.709244][ T5909] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 365.723254][ T5909] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 366.614516][ T5909] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 891ms [ 366.623113][ T5909] gfs2: fsid=syz:syz.0: jid=0: Done [ 366.656464][ T8191] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 366.696684][ T8191] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 366.877056][ T8228] loop2: detected capacity change from 0 to 1024 [ 366.908804][ T8228] EXT4-fs: Ignoring removed i_version option [ 366.937000][ T8228] EXT4-fs: inline encryption not supported [ 366.942891][ T8228] EXT4-fs: Ignoring removed i_version option [ 368.841767][ T8239] loop0: detected capacity change from 0 to 128 [ 370.495630][ T8252] fuse: Bad value for 'fd' [ 371.128656][ T8254] loop3: detected capacity change from 0 to 4096 [ 371.327466][ T8254] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 371.350501][ T8254] ntfs3: Volume is dirty and "force" flag is not set! [ 371.444221][ T5833] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 371.485384][ T8256] loop1: detected capacity change from 0 to 64 [ 371.642267][ T8260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.633'. [ 371.682019][ T8256] hfs: get root inode failed [ 372.542155][ T5833] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 372.571518][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.767279][ T8272] loop2: detected capacity change from 0 to 128 [ 372.817907][ T5833] usb 1-1: Product: syz [ 372.823535][ T5833] usb 1-1: Manufacturer: syz [ 372.828252][ T5833] usb 1-1: SerialNumber: syz [ 372.849319][ T5833] usb 1-1: config 0 descriptor?? [ 372.874918][ T5833] hub 1-1:0.0: bad descriptor, ignoring hub [ 372.963843][ T8274] loop1: detected capacity change from 0 to 1024 [ 374.273062][ T5833] hub: probe of 1-1:0.0 failed with error -5 [ 378.264541][ T8274] hfsplus: failed to load extents file [ 378.454072][ T5833] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 378.590152][ T5833] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 378.678477][ T5833] dib0700: firmware download failed at 7 with -22 [ 378.992220][ T8294] fuse: Bad value for 'fd' [ 379.004454][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.028897][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.303435][ T5833] usb 1-1: USB disconnect, device number 13 [ 379.683188][ T8298] loop2: detected capacity change from 0 to 4096 [ 379.772638][ T8298] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 379.788426][ T8298] ntfs3: Volume is dirty and "force" flag is not set! [ 379.971898][ T8300] loop3: detected capacity change from 0 to 64 [ 380.072180][ T8304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.644'. [ 380.301090][ T8300] hfs: get root inode failed [ 380.478273][ T8308] loop1: detected capacity change from 0 to 1024 [ 380.772414][ T8308] hfsplus: xattr searching failed [ 382.085907][ T8315] loop0: detected capacity change from 0 to 1024 [ 382.859047][ T8315] hfsplus: xattr searching failed [ 384.287085][ T6522] hfsplus: bad catalog file entry [ 384.319103][ T6522] hfsplus: b-tree write err: -5, ino 3 [ 385.562944][ T8326] loop1: detected capacity change from 0 to 128 [ 385.685353][ T8329] fuse: Bad value for 'fd' [ 385.942014][ T11] hfsplus: bad catalog file entry [ 386.424127][ T11] hfsplus: b-tree write err: -5, ino 3 [ 386.797885][ T8333] loop3: detected capacity change from 0 to 4096 [ 387.000838][ T8333] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 387.746669][ T8331] ntfs3: Volume is dirty and "force" flag is not set! [ 387.851833][ T8350] loop1: detected capacity change from 0 to 256 [ 389.517975][ T8359] loop2: detected capacity change from 0 to 64 [ 389.567560][ T8367] loop0: detected capacity change from 0 to 128 [ 389.784621][ T8359] hfs: get root inode failed [ 389.882058][ T8370] loop1: detected capacity change from 0 to 1024 [ 394.104092][ T8370] hfsplus: failed to load extents file [ 394.301968][ T5787] kworker/dying (5787) used greatest stack depth: 18840 bytes left [ 395.139666][ T8382] loop3: detected capacity change from 0 to 1024 [ 395.341967][ T8382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.475265][ T5909] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 395.597828][ T8385] loop0: detected capacity change from 0 to 4096 [ 395.631672][ T8385] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 395.658160][ T8385] ntfs3: Volume is dirty and "force" flag is not set! [ 395.694231][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 395.708435][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.725700][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.774041][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.810902][ T5909] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.889224][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.902316][ T8391] loop2: detected capacity change from 0 to 4096 [ 395.914382][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.933681][ T8391] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 395.966452][ T5909] usb 2-1: config 0 descriptor?? [ 396.060581][ T8391] ntfs3: loop2: failed to convert "c46c" to cp855 [ 396.846342][ T5909] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 396.858006][ T8395] loop3: detected capacity change from 0 to 1024 [ 396.902133][ T8395] hfsplus: xattr searching failed [ 396.927637][ T5909] microsoft 0003:045E:07DA.0004: unsupported Resolution Multiplier 0 [ 396.985235][ T5909] microsoft 0003:045E:07DA.0004: implement() called with n (152) > 32! (kworker/0:4) [ 397.013363][ T5909] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 397.152519][ T42] hfsplus: bad catalog file entry [ 397.152678][ T5909] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 397.159997][ T42] hfsplus: b-tree write err: -5, ino 3 [ 397.179956][ T8396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'. [ 397.288785][ T5909] microsoft 0003:045E:07DA.0004: no inputs found [ 397.331159][ T5909] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 397.342735][ T8401] loop2: detected capacity change from 0 to 128 [ 397.404900][ T8403] fuse: Bad value for 'fd' [ 397.583178][ T5909] usb 2-1: USB disconnect, device number 9 [ 398.266910][ T8397] fido_id[8397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 398.599039][ T8406] loop3: detected capacity change from 0 to 64 [ 398.647290][ T8406] hfs: get root inode failed [ 398.989122][ T8415] loop1: detected capacity change from 0 to 1024 [ 399.375708][ T8422] loop3: detected capacity change from 0 to 1024 [ 399.383793][ T8415] syz.1.681 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 399.421275][ T8423] loop2: detected capacity change from 0 to 1024 [ 399.511130][ T8423] hfsplus: xattr searching failed [ 399.542170][ T8422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.802400][ T8424] loop0: detected capacity change from 0 to 4096 [ 399.822944][ T8424] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 400.038192][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.053182][ T11] hfsplus: bad catalog file entry [ 400.063399][ T11] hfsplus: b-tree write err: -5, ino 3 [ 400.073290][ T7141] hfsplus: b-tree write err: -5, ino 4 [ 400.122975][ T8424] ntfs3: loop0: failed to convert "c46c" to cp855 [ 400.898955][ T8433] fuse: Bad value for 'fd' [ 401.168641][ T8431] loop1: detected capacity change from 0 to 128 [ 401.892338][ T8436] loop3: detected capacity change from 0 to 2048 [ 402.026319][ T8436] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 402.775941][ T8445] virt_wifi0 speed is unknown, defaulting to 1000 [ 403.346644][ T8447] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 403.374525][ T8436] syz.3.685: attempt to access beyond end of device [ 403.374525][ T8436] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 403.499646][ T8449] loop1: detected capacity change from 0 to 128 [ 403.608199][ T8436] syz.3.685: attempt to access beyond end of device [ 403.608199][ T8436] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 403.644561][ T8449] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.707030][ T8436] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0) [ 403.710939][ T8449] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.378063][ T8455] loop2: detected capacity change from 0 to 64 [ 404.448838][ T8455] hfs: get root inode failed [ 404.541711][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.768533][ T8458] loop2: detected capacity change from 0 to 1024 [ 404.809201][ T8458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.935310][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.012331][ T8461] loop1: detected capacity change from 0 to 4096 [ 405.121387][ T8461] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 405.138122][ T8461] ntfs3: Volume is dirty and "force" flag is not set! [ 405.983152][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.693'. [ 407.173475][ T8471] loop0: detected capacity change from 0 to 128 [ 407.472659][ T8474] loop2: detected capacity change from 0 to 1024 [ 407.576936][ T8474] hfsplus: xattr searching failed [ 408.071169][ T8473] loop3: detected capacity change from 0 to 4096 [ 408.168668][ T7141] hfsplus: bad catalog file entry [ 408.202722][ T7141] hfsplus: b-tree write err: -5, ino 3 [ 408.543489][ T8479] loop0: detected capacity change from 0 to 2048 [ 408.678802][ T8479] NILFS (loop0): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô" [ 408.863969][ T5796] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 409.914170][ T8488] loop2: detected capacity change from 0 to 1024 [ 409.979230][ T8488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.056507][ T8492] loop0: detected capacity change from 0 to 64 [ 410.139690][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.177800][ T8492] hfs: get root inode failed [ 410.495534][ T8495] program syz.3.701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.919049][ T8502] siw: device registration error -23 [ 411.738599][ T8507] loop0: detected capacity change from 0 to 128 [ 412.053672][ T8510] loop3: detected capacity change from 0 to 1024 [ 412.198294][ T8510] hfsplus: xattr searching failed [ 412.778460][ T42] hfsplus: bad catalog file entry [ 412.783628][ T42] hfsplus: b-tree write err: -5, ino 3 [ 414.161698][ T8527] loop1: detected capacity change from 0 to 1024 [ 414.199108][ T8527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.294327][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.681623][ T8536] loop0: detected capacity change from 0 to 64 [ 414.758231][ T8536] hfs: get root inode failed [ 415.206482][ T8545] loop3: detected capacity change from 0 to 764 [ 415.795703][ T8549] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20001 [ 415.804677][ T8549] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 416.142967][ T8550] rock: directory entry would overflow storage [ 416.149374][ T8550] rock: sig=0x4f50, size=4, remaining=3 [ 416.155077][ T8550] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 416.399162][ T5879] IPVS: starting estimator thread 0... [ 416.514334][ T8551] IPVS: using max 17 ests per chain, 40800 per kthread [ 419.644353][ T8566] loop0: detected capacity change from 0 to 256 [ 420.243265][ T8561] loop3: detected capacity change from 0 to 32768 [ 420.280158][ T8561] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.723 (8561) [ 420.329853][ T8561] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 420.358141][ T8561] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 420.441174][ T8561] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 420.481787][ T8561] BTRFS info (device loop3): use zstd compression, level 3 [ 420.498180][ T8561] BTRFS info (device loop3): using free space tree [ 420.618815][ T8571] loop1: detected capacity change from 0 to 128 [ 420.765095][ T8561] BTRFS info (device loop3): enabling ssd optimizations [ 420.785853][ T8561] BTRFS info (device loop3): auto enabling async discard [ 420.797944][ T8571] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.861973][ T8591] loop2: detected capacity change from 0 to 64 [ 420.889187][ T8571] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 421.143309][ T8591] hfs: get root inode failed [ 421.694567][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.746910][ T5786] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 421.934254][ T8597] loop1: detected capacity change from 0 to 764 [ 422.033714][ T5796] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop3 scanned by udevd (5796) [ 422.329808][ T8600] rock: directory entry would overflow storage [ 422.336305][ T8600] rock: sig=0x4f50, size=4, remaining=3 [ 422.341906][ T8600] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 422.596826][ T8603] binder: 8598:8603 unknown command 0 [ 422.703517][ T8603] binder: 8598:8603 ioctl c0306201 200000000080 returned -22 [ 422.740124][ T8606] binder: 8598:8606 ioctl c0306201 2000000003c0 returned -14 [ 423.984963][ T8619] loop1: detected capacity change from 0 to 128 [ 424.060479][ T8619] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 424.184060][ T8619] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 425.161181][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.621272][ T8632] autofs4:pid:8632:autofs_fill_super: called with bogus options [ 425.752978][ T8625] loop0: detected capacity change from 0 to 4096 [ 425.807685][ T8625] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 425.860229][ T8632] loop3: detected capacity change from 0 to 64 [ 426.240034][ T8632] hfs: get root inode failed [ 426.643953][ T8625] ntfs3: loop0: failed to convert "c46c" to cp855 [ 427.749962][ T8627] loop1: detected capacity change from 0 to 32768 [ 427.791534][ T8627] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 428.125641][ T5796] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 429.021848][ T8649] loop3: detected capacity change from 0 to 764 [ 429.211867][ T8654] loop2: detected capacity change from 0 to 128 [ 429.445414][ T8654] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 429.495824][ T8654] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 429.545953][ T8661] rock: directory entry would overflow storage [ 429.564403][ T8661] rock: sig=0x4f50, size=4, remaining=3 [ 429.570017][ T8661] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 429.848070][ T8663] loop0: detected capacity change from 0 to 1024 [ 429.889383][ T8663] hfsplus: xattr searching failed [ 430.610301][ T7141] hfsplus: bad catalog file entry [ 430.634145][ T7141] hfsplus: b-tree write err: -5, ino 3 [ 430.815405][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.676157][ T8674] loop0: detected capacity change from 0 to 1024 [ 432.025278][ T8674] hfsplus: xattr searching failed [ 433.075514][ T11] hfsplus: bad catalog file entry [ 433.080793][ T11] hfsplus: b-tree write err: -5, ino 3 [ 435.321432][ T8698] loop1: detected capacity change from 0 to 1024 [ 435.366261][ T8698] hfsplus: xattr searching failed [ 435.402840][ T8700] loop0: detected capacity change from 0 to 764 [ 435.681080][ T8702] rock: directory entry would overflow storage [ 435.687419][ T8702] rock: sig=0x4f50, size=4, remaining=3 [ 435.693040][ T8702] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 436.318263][ T8686] loop3: detected capacity change from 0 to 32768 [ 436.345952][ T8686] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 436.356324][ T8686] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 436.366130][ T8686] BTRFS info (device loop3): using free space tree [ 436.388518][ T7141] hfsplus: bad catalog file entry [ 436.393690][ T7141] hfsplus: b-tree write err: -5, ino 3 [ 436.453071][ T8686] BTRFS info (device loop3): enabling ssd optimizations [ 436.460292][ T8686] BTRFS info (device loop3): auto enabling async discard [ 436.932999][ T5786] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 437.546987][ T8741] loop0: detected capacity change from 0 to 1024 [ 437.602153][ T8741] hfsplus: failed to load root directory [ 438.334435][ T8740] loop1: detected capacity change from 0 to 4096 [ 438.398394][ T8740] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 438.713249][ T8740] ntfs3: loop1: failed to convert "c46c" to cp855 [ 440.290610][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.297241][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.390231][ T8765] loop2: detected capacity change from 0 to 1024 [ 441.489296][ T8765] hfsplus: xattr searching failed [ 442.633666][ T1115] hfsplus: bad catalog file entry [ 442.655513][ T1115] hfsplus: b-tree write err: -5, ino 3 [ 442.887372][ T8772] loop0: detected capacity change from 0 to 32768 [ 442.978007][ T8772] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.773 (8772) [ 443.036484][ T8772] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 443.052828][ T8772] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 443.066385][ T8772] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 443.078449][ T8772] BTRFS info (device loop0): use zstd compression, level 3 [ 443.087836][ T8772] BTRFS info (device loop0): using free space tree [ 443.159303][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.283426][ T8772] BTRFS info (device loop0): enabling ssd optimizations [ 443.316819][ T8772] BTRFS info (device loop0): auto enabling async discard [ 444.473334][ T5792] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 444.572180][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 444.575541][ T8815] fuse: Bad value for 'fd' [ 445.481967][ T5796] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (5796) [ 445.554149][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 445.580799][ T8817] loop3: detected capacity change from 0 to 764 [ 445.585387][ T23] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 445.620138][ T23] usb 2-1: config 0 has no interface number 0 [ 445.646791][ T23] usb 2-1: New USB device found, idVendor=13d3, idProduct=3423, bcdDevice= 2.73 [ 445.664025][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.696454][ T23] usb 2-1: Product: syz [ 445.922348][ T23] usb 2-1: Manufacturer: syz [ 445.927113][ T23] usb 2-1: SerialNumber: syz [ 446.333356][ T23] usb 2-1: config 0 descriptor?? [ 446.688665][ T8827] rock: directory entry would overflow storage [ 446.695186][ T8827] rock: sig=0x4f50, size=4, remaining=3 [ 446.700949][ T8827] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 446.756385][ T5833] usb 2-1: USB disconnect, device number 10 [ 447.079846][ T8831] loop1: detected capacity change from 0 to 64 [ 447.268928][ T8831] hfs: get root inode failed [ 447.352554][ T8836] loop3: detected capacity change from 0 to 4096 [ 447.457851][ T8836] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 447.472730][ T8836] ntfs3: Volume is dirty and "force" flag is not set! [ 447.661004][ T8837] loop2: detected capacity change from 0 to 1024 [ 447.722494][ T8822] hfsplus: xattr searching failed [ 447.830223][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.787'. [ 448.761922][ T1115] hfsplus: bad catalog file entry [ 448.784287][ T1115] hfsplus: b-tree write err: -5, ino 3 [ 449.987249][ T8855] fuse: Bad value for 'fd' [ 450.871402][ T8859] loop1: detected capacity change from 0 to 512 [ 450.915225][ T8859] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 451.383112][ T8864] loop0: detected capacity change from 0 to 764 [ 451.705721][ T8867] loop1: detected capacity change from 0 to 64 [ 451.760906][ T8868] rock: directory entry would overflow storage [ 451.767370][ T8868] rock: sig=0x4f50, size=4, remaining=3 [ 451.772980][ T8868] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 451.825979][ T8867] hfs: get root inode failed [ 451.885109][ T8871] loop3: detected capacity change from 0 to 4096 [ 451.968292][ T8871] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 451.988073][ T8871] ntfs3: Volume is dirty and "force" flag is not set! [ 452.321418][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.797'. [ 453.333538][ T8878] loop3: detected capacity change from 0 to 4096 [ 453.404810][ T8880] loop0: detected capacity change from 0 to 256 [ 453.417817][ T8878] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 453.434272][ T8878] ntfs3: Volume is dirty and "force" flag is not set! [ 453.487601][ T8880] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 453.830819][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.799'. [ 454.682362][ T8891] fuse: Bad value for 'fd' [ 455.839779][ T8900] binder: 8899:8900 unknown command 0 [ 455.857803][ T8900] binder: 8899:8900 ioctl c0306201 200000000080 returned -22 [ 456.272071][ T8898] loop2: detected capacity change from 0 to 32768 [ 456.386484][ T8898] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 456.500801][ T8906] loop1: detected capacity change from 0 to 64 [ 457.191800][ T8906] hfs: get root inode failed [ 457.319309][ T5790] ocfs2: Unmounting device (7,2) on (node local) [ 457.755607][ T8915] loop3: detected capacity change from 0 to 1024 [ 457.778932][ T8915] hfsplus: xattr searching failed [ 457.934164][ T8917] loop2: detected capacity change from 0 to 764 [ 458.469073][ T8922] rock: directory entry would overflow storage [ 458.476743][ T8922] rock: sig=0x4f50, size=4, remaining=3 [ 458.483231][ T8922] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 458.509873][ T6399] hfsplus: bad catalog file entry [ 458.538596][ T6399] hfsplus: b-tree write err: -5, ino 3 [ 459.429976][ T8925] loop3: detected capacity change from 0 to 4096 [ 459.485884][ T8925] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 459.505605][ T8925] ntfs3: Volume is dirty and "force" flag is not set! [ 459.766381][ T8927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.813'. [ 459.851837][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.811'. [ 460.730091][ T8941] fuse: Bad value for 'fd' [ 460.749701][ T8940] loop2: detected capacity change from 0 to 256 [ 460.915250][ T8940] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 461.629382][ T8952] loop3: detected capacity change from 0 to 64 [ 461.740831][ T8952] hfs: get root inode failed [ 461.836879][ T5791] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 463.526620][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 463.608191][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 463.637148][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 463.667274][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 463.856371][ T8967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.822'. [ 464.688192][ T8973] loop0: detected capacity change from 0 to 4096 [ 464.725287][ T8973] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 464.740764][ T8973] ntfs3: Volume is dirty and "force" flag is not set! [ 465.084744][ T8975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.824'. [ 465.731207][ T8977] loop2: detected capacity change from 0 to 512 [ 465.794922][ T8977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 465.938171][ T8977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.020193][ T8977] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.229089][ T8977] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 466.250259][ T8986] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 466.385777][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.947700][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 468.153026][ T9004] loop0: detected capacity change from 0 to 1024 [ 469.169868][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 469.183321][ T9007] loop1: detected capacity change from 0 to 256 [ 469.217987][ T9003] hfsplus: xattr searching failed [ 469.229721][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 469.272059][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 469.514272][ T6522] hfsplus: bad catalog file entry [ 469.525748][ T6522] hfsplus: b-tree write err: -5, ino 3 [ 469.721972][ T9007] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 470.053921][ T9011] loop0: detected capacity change from 0 to 4096 [ 470.154225][ T9011] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 470.170271][ T9011] ntfs3: Volume is dirty and "force" flag is not set! [ 470.471634][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.835'. [ 473.817188][ T9020] loop0: detected capacity change from 0 to 32768 [ 473.944344][ T9033] fuse: Bad value for 'fd' [ 474.468979][ T9020] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 474.484393][ T9020] (syz.0.837,9020,1):ocfs2_initialize_super:2285 ERROR: status = -12 [ 474.714827][ T9020] (syz.0.837,9020,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 474.904942][ T5797] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 475.050040][ T9043] loop2: detected capacity change from 0 to 1024 [ 475.168981][ T9043] hfsplus: xattr searching failed [ 475.202338][ T9041] loop0: detected capacity change from 0 to 4096 [ 475.834356][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 476.481901][ T9041] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 476.497407][ T9041] ntfs3: Volume is dirty and "force" flag is not set! [ 476.656544][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 476.679815][ T7141] hfsplus: bad catalog file entry [ 476.704050][ T7141] hfsplus: b-tree write err: -5, ino 3 [ 476.763641][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.845'. [ 477.261771][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 477.341746][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 477.458913][ T9060] loop0: detected capacity change from 0 to 256 [ 477.548788][ T9060] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 479.292833][ T9059] loop2: detected capacity change from 0 to 32768 [ 479.321004][ T9059] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.848 (9059) [ 479.338991][ T9059] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 479.350221][ T9059] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 479.359018][ T9059] BTRFS info (device loop2): setting nodatacow, compression disabled [ 479.367204][ T9059] BTRFS info (device loop2): force clearing of disk cache [ 479.377446][ T9059] BTRFS info (device loop2): enabling ssd optimizations [ 479.384846][ T9059] BTRFS info (device loop2): using spread ssd allocation scheme [ 479.394353][ T9059] BTRFS info (device loop2): turning off barriers [ 479.400843][ T9059] BTRFS info (device loop2): disabling free space tree [ 479.408025][ T9059] BTRFS info (device loop2): not using ssd optimizations [ 479.415151][ T9059] BTRFS info (device loop2): not using spread ssd allocation scheme [ 479.649271][ T9059] BTRFS info (device loop2): rebuilding free space tree [ 479.698249][ T9059] BTRFS info (device loop2): disabling free space tree [ 479.705407][ T9059] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 479.715245][ T9059] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 480.749837][ T5790] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 481.223181][ T9091] fuse: Bad value for 'fd' [ 481.459369][ T9094] loop0: detected capacity change from 0 to 1024 [ 481.532064][ T9094] hfsplus: unable to parse mount options [ 481.896040][ T9100] netlink: 'syz.1.856': attribute type 1 has an invalid length. [ 481.932534][ T9099] loop2: detected capacity change from 0 to 4096 [ 482.056079][ T9099] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 482.100078][ T9099] ntfs3: Volume is dirty and "force" flag is not set! [ 482.338115][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 482.372345][ T9103] loop0: detected capacity change from 0 to 1024 [ 482.439752][ T9106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'. [ 482.593909][ T9103] hfsplus: xattr searching failed [ 482.928274][ T1069] hfsplus: bad catalog file entry [ 483.064928][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 483.084152][ T1069] hfsplus: b-tree write err: -5, ino 3 [ 483.116714][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 483.156771][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 484.116924][ T9115] loop2: detected capacity change from 0 to 256 [ 484.312009][ T9115] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 484.897598][ T9120] loop0: detected capacity change from 0 to 1024 [ 485.076631][ T9120] hfsplus: xattr searching failed [ 485.191064][ T9123] loop3: detected capacity change from 0 to 764 [ 485.578870][ T9126] rock: directory entry would overflow storage [ 485.585182][ T9126] rock: sig=0x4f50, size=4, remaining=3 [ 485.590769][ T9126] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 486.628995][ T9141] loop3: detected capacity change from 0 to 1024 [ 486.705819][ T9141] hfsplus: xattr searching failed [ 486.856104][ T6522] hfsplus: bad catalog file entry [ 486.861223][ T6522] hfsplus: b-tree write err: -5, ino 3 [ 487.020252][ T9144] binder: 9143:9144 unknown command 0 [ 487.040538][ T9144] binder: 9143:9144 ioctl c0306201 200000000080 returned -22 [ 487.064519][ T9144] binder: 9143:9144 ioctl c0306201 2000000003c0 returned -14 [ 488.435647][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 488.552859][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 488.572955][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 488.593548][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 488.978765][ T9159] loop3: detected capacity change from 0 to 764 [ 489.074306][ T9157] loop2: detected capacity change from 0 to 4096 [ 489.082635][ T9157] EXT4-fs: Ignoring removed mblk_io_submit option [ 489.379648][ T9163] rock: directory entry would overflow storage [ 489.387048][ T9163] rock: sig=0x4f50, size=4, remaining=3 [ 489.392740][ T9163] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 489.587431][ T9157] EXT4-fs (loop2): Test dummy encryption mode enabled [ 489.658559][ T9157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.938183][ T9157] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 490.047459][ T6522] hfsplus: bad catalog file entry [ 490.079544][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.110991][ T6522] hfsplus: b-tree write err: -5, ino 3 [ 490.548204][ T9177] loop2: detected capacity change from 0 to 1024 [ 490.597689][ T9177] hfsplus: xattr searching failed [ 490.752049][ T11] hfsplus: bad catalog file entry [ 490.774229][ T11] hfsplus: b-tree write err: -5, ino 3 [ 494.237920][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 494.344015][ T5879] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 494.352250][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 494.394456][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 494.460371][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 494.586719][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.620303][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 494.654570][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 494.686059][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 494.719422][ T5879] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 494.740318][ T5879] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 494.759466][ T5879] usb 2-1: Manufacturer: syz [ 494.794808][ T5879] usb 2-1: config 0 descriptor?? [ 495.010974][ T9188] loop3: detected capacity change from 0 to 32768 [ 495.061364][ T9188] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 495.083856][ T5879] usb 2-1: USB disconnect, device number 11 [ 495.285504][ T5791] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 495.555519][ T9209] loop3: detected capacity change from 0 to 764 [ 496.599090][ T9218] rock: directory entry would overflow storage [ 496.605518][ T9218] rock: sig=0x4f50, size=4, remaining=3 [ 496.611096][ T9218] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 497.649074][ T9221] loop1: detected capacity change from 0 to 512 [ 497.705763][ T9221] EXT4-fs: Ignoring removed oldalloc option [ 497.838048][ T9224] loop0: detected capacity change from 0 to 4096 [ 498.001462][ T9224] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 498.017809][ T9221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.033195][ T9224] ntfs3: Volume is dirty and "force" flag is not set! [ 498.072316][ T9221] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 498.327749][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.893'. [ 498.954268][ T27] audit: type=1800 audit(1761937417.354:8): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.892" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 499.086439][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.402263][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 499.800752][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 500.035252][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 500.074770][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 501.741902][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.158678][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.771174][ T9268] loop1: detected capacity change from 0 to 4096 [ 503.885749][ T9268] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 503.900124][ T9268] ntfs3: Volume is dirty and "force" flag is not set! [ 504.160779][ T9272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.904'. [ 504.244059][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 504.502599][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.894004][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.953766][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.022616][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.049440][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.284666][ T23] usb 1-1: config 0 descriptor?? [ 505.391552][ T9288] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 506.379143][ T5879] IPVS: starting estimator thread 0... [ 506.410487][ T23] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 506.475023][ T9289] IPVS: using max 17 ests per chain, 40800 per kthread [ 507.049889][ T23] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 507.121429][ T23] usb 1-1: USB disconnect, device number 14 [ 508.344853][ T9297] fido_id[9297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 509.594559][ T9313] binder: 9312:9313 unknown command 0 [ 509.600027][ T9313] binder: 9312:9313 ioctl c0306201 200000000080 returned -22 [ 509.830646][ T9299] loop1: detected capacity change from 0 to 32768 [ 509.848571][ T9313] binder: BINDER_SET_CONTEXT_MGR already set [ 509.848803][ T9299] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 509.890777][ T9315] loop2: detected capacity change from 0 to 512 [ 509.898072][ T9313] binder: 9312:9313 ioctl 4018620d 200000000040 returned -16 [ 510.002568][ T6336] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 510.004286][ T9315] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 510.044378][ T9315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 510.128114][ T9315] EXT4-fs (loop2): 1 truncate cleaned up [ 510.152879][ T9315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.106552][ T9328] loop0: detected capacity change from 0 to 1024 [ 511.368482][ T9332] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 513.179558][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.194969][ T9328] hfsplus: xattr searching failed [ 515.203468][ T9344] loop3: detected capacity change from 0 to 40427 [ 515.231350][ T9344] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 515.243688][ T9344] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 515.255227][ T9352] loop2: detected capacity change from 0 to 4096 [ 515.261286][ T9344] F2FS-fs (loop3): invalid crc value [ 515.290751][ T9352] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 515.307893][ T9352] ntfs3: Volume is dirty and "force" flag is not set! [ 515.321349][ T9344] F2FS-fs (loop3): Found nat_bits in checkpoint [ 515.583863][ T9344] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 515.624077][ T9344] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 515.645668][ T9359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.925'. [ 516.607196][ T9362] binder: 9360:9362 unknown command 0 [ 516.612753][ T9362] binder: 9360:9362 ioctl c0306201 200000000080 returned -22 [ 516.623645][ T9362] binder: BINDER_SET_CONTEXT_MGR already set [ 516.629857][ T9362] binder: 9360:9362 ioctl 4018620d 200000000040 returned -16 [ 516.807960][ T6399] hfsplus: bad catalog file entry [ 516.813386][ T6399] hfsplus: b-tree write err: -5, ino 3 [ 518.686578][ T9370] loop2: detected capacity change from 0 to 32768 [ 518.696120][ T5786] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 518.712235][ T9370] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 518.737779][ T5786] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 518.748248][ T5786] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 518.758594][ T5786] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 518.770252][ T5786] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 518.782846][ T5786] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 518.793282][ T5786] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 518.903789][ T5791] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 520.942065][ T9382] loop2: detected capacity change from 0 to 4096 [ 520.959389][ T9382] EXT4-fs: Ignoring removed mblk_io_submit option [ 520.988784][ T9382] EXT4-fs (loop2): Test dummy encryption mode enabled [ 521.082023][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 521.227157][ T9382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.964876][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 521.996814][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 522.008525][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 522.191175][ T9397] binder: BINDER_SET_CONTEXT_MGR already set [ 522.200605][ T9382] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 522.214985][ T9397] binder: 9396:9397 ioctl 4018620d 200000000040 returned -16 [ 522.254500][ T9397] binder: 9396:9397 ioctl c0306201 2000000003c0 returned -14 [ 522.376169][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.497182][ T9402] loop1: detected capacity change from 0 to 128 [ 524.494715][ T9420] loop2: detected capacity change from 0 to 1024 [ 524.582728][ T9420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.839094][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.029414][ T9432] binder: 9428:9432 ioctl c0306201 2000000003c0 returned -14 [ 525.080638][ T9429] loop2: detected capacity change from 0 to 4096 [ 525.105134][ T9429] EXT4-fs: Ignoring removed mblk_io_submit option [ 525.142276][ T9429] EXT4-fs (loop2): Test dummy encryption mode enabled [ 525.191096][ T9429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.948145][ T9429] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 526.245792][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.311297][ T9431] loop0: detected capacity change from 0 to 32768 [ 526.376807][ T9431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.947 (9431) [ 526.469710][ T9431] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 526.504051][ T9431] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 526.512828][ T9431] BTRFS info (device loop0): use zlib compression, level 3 [ 526.776751][ T9431] BTRFS info (device loop0): setting nodatasum [ 526.782996][ T9431] BTRFS info (device loop0): turning off barriers [ 526.798984][ T9431] BTRFS info (device loop0): using free space tree [ 527.641419][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b4c6c00: rx timeout, send abort [ 527.656069][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802619f000: rx timeout, send abort [ 527.665960][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804b4c6c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 527.682018][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802619f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 527.996880][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 528.017799][ T9454] netlink: 68 bytes leftover after parsing attributes in process `syz.3.951'. [ 528.037245][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 528.038011][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 528.263310][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 528.396203][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 528.407237][ T5833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 528.462894][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 528.463684][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 528.510509][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 528.560901][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 528.570374][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 528.580506][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 528.591080][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 528.601499][ T9431] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 528.784913][ T9431] BTRFS error (device loop0): open_ctree failed: -12 [ 529.067405][ T9475] loop1: detected capacity change from 0 to 1024 [ 529.924302][ T5833] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 529.946587][ T5833] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 529.959547][ T5833] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.974108][ T5833] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 529.983292][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.305270][ T9475] hfsplus: xattr searching failed [ 530.720234][ T5833] usb 3-1: can't set config #27, error -71 [ 530.781495][ T5833] usb 3-1: USB disconnect, device number 3 [ 530.977763][ T9482] loop3: detected capacity change from 0 to 1024 [ 531.885695][ T9482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.076129][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.167367][ T9487] loop2: detected capacity change from 0 to 128 [ 532.240781][ T9487] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 532.311405][ T9487] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 532.606252][ T1091] hfsplus: bad catalog file entry [ 532.695783][ T9494] loop3: detected capacity change from 0 to 512 [ 532.738114][ T1091] hfsplus: b-tree write err: -5, ino 3 [ 534.092203][ T9494] ------------[ cut here ]------------ [ 534.098556][ T9494] EA inode 11 i_nlink=2 [ 534.127256][ T9494] WARNING: CPU: 0 PID: 9494 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 534.142730][ T9494] Modules linked in: [ 534.147046][ T9494] CPU: 0 PID: 9494 Comm: syz.3.957 Not tainted syzkaller #0 [ 534.154599][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 534.164736][ T9494] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 534.171386][ T9494] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 86 3b 9a ff 49 8b 37 48 c7 c7 20 c4 be 8a 89 da e8 f5 5e 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 9f 1e 2c 08 [ 534.191309][ T9494] RSP: 0018:ffffc90004d871c0 EFLAGS: 00010246 [ 534.197467][ T9494] RAX: 018efe8e41152200 RBX: 0000000000000002 RCX: 0000000000080000 [ 534.205909][ T9494] RDX: ffffc9000ce2b000 RSI: 000000000004ba69 RDI: 000000000004ba6a [ 534.214195][ T9494] RBP: ffffc90004d872b8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 534.222231][ T9494] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 534.230300][ T9494] R13: ffff88807860a2a8 R14: ffff88807860a0b0 R15: ffff88807860a100 [ 534.239445][ T9494] FS: 00007f7d3646a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 534.248720][ T9494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.255394][ T9494] CR2: 00007f1fa31eef98 CR3: 000000002b311000 CR4: 00000000003506f0 [ 534.263418][ T9494] Call Trace: [ 534.266784][ T9494] [ 534.269763][ T9494] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 534.275557][ T9494] ? ext4_xattr_inode_iget+0x3df/0x600 [ 534.281105][ T9494] ext4_xattr_set_entry+0xcda/0x1e90 [ 534.286552][ T9494] ext4_xattr_ibody_set+0x254/0x6a0 [ 534.291832][ T9494] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 534.297865][ T9494] __ext4_expand_extra_isize+0x306/0x400 [ 534.303566][ T9494] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 534.309156][ T9494] ext4_evict_inode+0x7ed/0xea0 [ 534.314132][ T9494] ? _raw_spin_unlock+0x28/0x40 [ 534.319065][ T9494] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 534.325064][ T9494] ? do_raw_spin_unlock+0x121/0x230 [ 534.330514][ T9494] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 534.336511][ T9494] evict+0x486/0x870 [ 534.341314][ T9494] ? __lock_acquire+0x7c80/0x7c80 [ 534.346555][ T9494] ? proc_nr_inodes+0x230/0x230 [ 534.351457][ T9494] ? do_raw_spin_unlock+0x121/0x230 [ 534.356822][ T9494] ? _raw_spin_unlock+0x28/0x40 [ 534.361730][ T9494] ? iput+0x70a/0x920 [ 534.365966][ T9494] ext4_orphan_cleanup+0xbd4/0x1400 [ 534.371268][ T9494] ? ext4_orphan_del+0xba0/0xba0 [ 534.376533][ T9494] ? ext4_register_li_request+0x183/0x940 [ 534.382335][ T9494] ? errseq_check_and_advance+0x66/0x120 [ 534.388152][ T9494] ext4_fill_super+0x5de4/0x66c0 [ 534.393459][ T9494] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 534.400026][ T9494] ? __might_sleep+0xe0/0xe0 [ 534.404757][ T9494] ? read_lock_is_recursive+0x20/0x20 [ 534.410240][ T9494] ? snprintf+0xdb/0x120 [ 534.414634][ T9494] ? vscnprintf+0x80/0x80 [ 534.419040][ T9494] ? down_write+0x162/0x1f0 [ 534.423618][ T9494] ? down_read_killable+0x340/0x340 [ 534.429050][ T9494] ? setup_bdev_super+0x56b/0x660 [ 534.434354][ T9494] get_tree_bdev+0x3e4/0x510 [ 534.439007][ T9494] ? vfs_parse_fs_string+0x160/0x160 [ 534.445489][ T9494] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 534.451800][ T9494] ? setup_bdev_super+0x660/0x660 [ 534.457122][ T9494] ? apparmor_capable+0x137/0x1a0 [ 534.462218][ T9494] ? bpf_lsm_capable+0x9/0x10 [ 534.467423][ T9494] ? security_capable+0x89/0xb0 [ 534.472342][ T9494] vfs_get_tree+0x8c/0x280 [ 534.477289][ T9494] do_new_mount+0x24b/0xa40 [ 534.482377][ T9494] __se_sys_mount+0x2da/0x3c0 [ 534.488389][ T9494] ? __x64_sys_mount+0xc0/0xc0 [ 534.493222][ T9494] ? lockdep_hardirqs_on+0x98/0x150 [ 534.498834][ T9494] ? __x64_sys_mount+0x20/0xc0 [ 534.503677][ T9494] do_syscall_64+0x55/0xb0 [ 534.508658][ T9494] ? clear_bhb_loop+0x40/0x90 [ 534.513413][ T9494] ? clear_bhb_loop+0x40/0x90 [ 534.518598][ T9494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.525011][ T9494] RIP: 0033:0x7f7d3559076a [ 534.529822][ T9494] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.549968][ T9494] RSP: 002b:00007f7d36469e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 534.559839][ T9494] RAX: ffffffffffffffda RBX: 00007f7d36469ef0 RCX: 00007f7d3559076a [ 534.568536][ T9494] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7d36469eb0 [ 534.577131][ T9494] RBP: 0000200000000180 R08: 00007f7d36469ef0 R09: 0000000001a08700 [ 534.585566][ T9494] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 534.593602][ T9494] R13: 00007f7d36469eb0 R14: 0000000000000470 R15: 0000200000000700 [ 534.601921][ T9494] [ 534.605403][ T9494] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 534.612725][ T9494] CPU: 0 PID: 9494 Comm: syz.3.957 Not tainted syzkaller #0 [ 534.620047][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 534.630143][ T9494] Call Trace: [ 534.633472][ T9494] [ 534.636528][ T9494] dump_stack_lvl+0x16c/0x230 [ 534.641273][ T9494] ? show_regs_print_info+0x20/0x20 [ 534.646535][ T9494] ? load_image+0x3b0/0x3b0 [ 534.651121][ T9494] panic+0x2c0/0x710 [ 534.655161][ T9494] ? bpf_jit_dump+0xd0/0xd0 [ 534.659734][ T9494] __warn+0x2e0/0x470 [ 534.663765][ T9494] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 534.669810][ T9494] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 534.675891][ T9494] report_bug+0x2be/0x4f0 [ 534.680291][ T9494] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 534.686338][ T9494] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 534.692377][ T9494] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 534.698418][ T9494] handle_bug+0xcf/0x120 [ 534.702726][ T9494] exc_invalid_op+0x1a/0x50 [ 534.707270][ T9494] asm_exc_invalid_op+0x1a/0x20 [ 534.712147][ T9494] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 534.718765][ T9494] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 86 3b 9a ff 49 8b 37 48 c7 c7 20 c4 be 8a 89 da e8 f5 5e 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 9f 1e 2c 08 [ 534.738478][ T9494] RSP: 0018:ffffc90004d871c0 EFLAGS: 00010246 [ 534.744567][ T9494] RAX: 018efe8e41152200 RBX: 0000000000000002 RCX: 0000000000080000 [ 534.752649][ T9494] RDX: ffffc9000ce2b000 RSI: 000000000004ba69 RDI: 000000000004ba6a [ 534.760658][ T9494] RBP: ffffc90004d872b8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 534.768658][ T9494] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 534.776656][ T9494] R13: ffff88807860a2a8 R14: ffff88807860a0b0 R15: ffff88807860a100 [ 534.784678][ T9494] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 534.790363][ T9494] ? ext4_xattr_inode_iget+0x3df/0x600 [ 534.795862][ T9494] ext4_xattr_set_entry+0xcda/0x1e90 [ 534.801190][ T9494] ext4_xattr_ibody_set+0x254/0x6a0 [ 534.806426][ T9494] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 534.812554][ T9494] __ext4_expand_extra_isize+0x306/0x400 [ 534.818311][ T9494] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 534.823809][ T9494] ext4_evict_inode+0x7ed/0xea0 [ 534.828693][ T9494] ? _raw_spin_unlock+0x28/0x40 [ 534.833574][ T9494] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 534.839494][ T9494] ? do_raw_spin_unlock+0x121/0x230 [ 534.844715][ T9494] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 534.850658][ T9494] evict+0x486/0x870 [ 534.854584][ T9494] ? __lock_acquire+0x7c80/0x7c80 [ 534.859709][ T9494] ? proc_nr_inodes+0x230/0x230 [ 534.864577][ T9494] ? do_raw_spin_unlock+0x121/0x230 [ 534.869798][ T9494] ? _raw_spin_unlock+0x28/0x40 [ 534.874668][ T9494] ? iput+0x70a/0x920 [ 534.878680][ T9494] ext4_orphan_cleanup+0xbd4/0x1400 [ 534.883916][ T9494] ? ext4_orphan_del+0xba0/0xba0 [ 534.888881][ T9494] ? ext4_register_li_request+0x183/0x940 [ 534.894729][ T9494] ? errseq_check_and_advance+0x66/0x120 [ 534.900388][ T9494] ext4_fill_super+0x5de4/0x66c0 [ 534.905366][ T9494] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 534.911626][ T9494] ? __might_sleep+0xe0/0xe0 [ 534.916359][ T9494] ? read_lock_is_recursive+0x20/0x20 [ 534.921753][ T9494] ? snprintf+0xdb/0x120 [ 534.926023][ T9494] ? vscnprintf+0x80/0x80 [ 534.930378][ T9494] ? down_write+0x162/0x1f0 [ 534.934908][ T9494] ? down_read_killable+0x340/0x340 [ 534.940141][ T9494] ? setup_bdev_super+0x56b/0x660 [ 534.945196][ T9494] get_tree_bdev+0x3e4/0x510 [ 534.949804][ T9494] ? vfs_parse_fs_string+0x160/0x160 [ 534.955123][ T9494] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 534.961385][ T9494] ? setup_bdev_super+0x660/0x660 [ 534.966424][ T9494] ? apparmor_capable+0x137/0x1a0 [ 534.971467][ T9494] ? bpf_lsm_capable+0x9/0x10 [ 534.976166][ T9494] ? security_capable+0x89/0xb0 [ 534.981038][ T9494] vfs_get_tree+0x8c/0x280 [ 534.985473][ T9494] do_new_mount+0x24b/0xa40 [ 534.990009][ T9494] __se_sys_mount+0x2da/0x3c0 [ 534.994709][ T9494] ? __x64_sys_mount+0xc0/0xc0 [ 534.999492][ T9494] ? lockdep_hardirqs_on+0x98/0x150 [ 535.004709][ T9494] ? __x64_sys_mount+0x20/0xc0 [ 535.009507][ T9494] do_syscall_64+0x55/0xb0 [ 535.013978][ T9494] ? clear_bhb_loop+0x40/0x90 [ 535.018690][ T9494] ? clear_bhb_loop+0x40/0x90 [ 535.023388][ T9494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.029300][ T9494] RIP: 0033:0x7f7d3559076a [ 535.033728][ T9494] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.053438][ T9494] RSP: 002b:00007f7d36469e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 535.061875][ T9494] RAX: ffffffffffffffda RBX: 00007f7d36469ef0 RCX: 00007f7d3559076a [ 535.069869][ T9494] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7d36469eb0 [ 535.077899][ T9494] RBP: 0000200000000180 R08: 00007f7d36469ef0 R09: 0000000001a08700 [ 535.085895][ T9494] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 535.093889][ T9494] R13: 00007f7d36469eb0 R14: 0000000000000470 R15: 0000200000000700 [ 535.101916][ T9494] [ 535.105240][ T9494] Kernel Offset: disabled [ 535.109727][ T9494] Rebooting in 86400 seconds..