last executing test programs: 20m30.378881166s ago: executing program 32 (id=4968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 19m47.200455735s ago: executing program 33 (id=5474): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@null, 0x0, 'lo\x00'}) 19m18.063843085s ago: executing program 34 (id=5777): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) 16m14.313179834s ago: executing program 35 (id=8205): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="d2205d96c717ab96f0ded75d86dd4d2b328ff4735900d4ab501aa2421ed8b56c4e7b9d5e830ac5c8f56b914421881e5fa59fe31f72f8", 0x0, 0xd5b7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m14.468547659s ago: executing program 36 (id=11623): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x75, &(0x7f00000002c0)="1a00000002000000", 0x8) 10m37.836716518s ago: executing program 37 (id=12763): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)='\n', 0x160a}], 0x1) 10m3.654161577s ago: executing program 38 (id=13064): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 6m39.889253922s ago: executing program 39 (id=14950): socket(0x11, 0x800000003, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 6m34.184191517s ago: executing program 40 (id=14997): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@dev={0xac, 0x14, 0x14, 0x29}, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x16}, {0x0, 0x0, 0x0, 0x7e3}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@remote, 0x0, 0x2, 0xc5f560e7c15eb107, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 5m22.501701095s ago: executing program 3 (id=15513): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x1011]}, 0x8) unshare(0x20060400) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, 0x0) 5m22.191754698s ago: executing program 3 (id=15517): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x4}, 0x0}) 5m19.761978482s ago: executing program 3 (id=15533): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001180)={0x44, &(0x7f0000000440)={0x20, 0x30, 0x1, "95"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5m16.684185289s ago: executing program 3 (id=15545): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 5m16.043261915s ago: executing program 3 (id=15552): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 5m13.159643383s ago: executing program 3 (id=15581): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 5m12.302226727s ago: executing program 41 (id=15581): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 4m15.90473001s ago: executing program 4 (id=15966): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 4m15.572748229s ago: executing program 4 (id=15971): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)=0x2) 4m15.229414394s ago: executing program 4 (id=15977): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 4m14.958400903s ago: executing program 4 (id=15981): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 4m14.711525576s ago: executing program 4 (id=15985): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 4m13.883202812s ago: executing program 4 (id=15991): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd1, 0x0, 0x0) 4m12.984540987s ago: executing program 42 (id=15991): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd1, 0x0, 0x0) 3m37.011050188s ago: executing program 1 (id=16256): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r0, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="c3", 0x1}], 0x1, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}], 0x20, 0x4000001}}], 0x2, 0x40015) 3m36.623273274s ago: executing program 1 (id=16259): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x63bff000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r0, &(0x7f0000000f40)=""/243, 0xf3) 3m36.327171119s ago: executing program 1 (id=16263): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x1}]}, &(0x7f0000000000)=0x10) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 3m35.850882352s ago: executing program 1 (id=16269): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 3m34.969926693s ago: executing program 1 (id=16274): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004"], 0x188}}, 0x0) 3m32.213646279s ago: executing program 1 (id=16288): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f00000004c0)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}, {@shortname_winnt}, {@numtail}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '437'}}, {@shortname_mixed}, {@fat=@sys_immutable}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_win95}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3m31.228602092s ago: executing program 43 (id=16288): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f00000004c0)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}, {@shortname_winnt}, {@numtail}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '437'}}, {@shortname_mixed}, {@fat=@sys_immutable}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@shortname_win95}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2m3.910023321s ago: executing program 5 (id=17066): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x21445a, &(0x7f00000001c0)=ANY=[], 0x1, 0x1c4, &(0x7f00000003c0)="$eJzs209u00AUx/Gf4xAn5V+hwAIhtRISsGrTAJXY0aOE1lQoBiRg04pF6QU4A+diwwHIArFBXTBo/CcFuzahYI9Rvp+F7fq9Gb+RNfU4UQRgYT3Wmjx56tg/bvWX3694Fdnd5goDUDuT7r+bOX30pHlzAbSc/y3Zr7kuBEDDptsa2Of/5y9vd+T3ZuuC7Gi6LR1m8U5QWD9M30k3u1L81uD1k85+Xl98kO5m7b2lfPOv9szSLH4+F+7F/d+7nV3/gi7qki5rWVd0VSvp9Xdn7W/86fKnOCAAABaAp/XfxUsSzsXbgZ4+i8Kh/GLCkwdxlo1vlvbfi+Ojyri/Wl5fELdf33kZ7VYNA8ApOmee/wnfzr+jYUVG9fwH4M7r/YPJOIrCVy046P9ajwmk05IlfTKr0l9eNGjDkP/fg0D5M93JODLpBypz9WPvdyE0KG11pP1jY0wuZDupf8jH5t92eJg/Y1fTzu/pwcQ/KcP1fyYAddt4cyf9JuD5eC/cC1+MhsNHWw/vb26NNuI3+2TrukwANTh5+ruuBAAAAAAAAAAAAAAAnNU1XXddAgAAAICGNPG7ItdjBACgdX4EAAD//5qhEmQ=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) ftruncate(r0, 0x0) 2m3.398365622s ago: executing program 5 (id=17071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x82, 0xfffff004}, {0x6, 0x0, 0x8}]}) 2m2.760678636s ago: executing program 5 (id=17078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000002400028004"], 0x50}}, 0x0) 2m2.542991843s ago: executing program 5 (id=17081): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000080)='./file2\x00', 0x402, &(0x7f00000042c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="ec1a3881369fae6987d7a6922db874bcb0563edbf212875f142a04bbe14fd11ed31543677ddfbd12a760f13dd2fd476b0d7e088b2ac5eaebe64ab225975b882e26ccc04ae1e56422927a5de974cf1bc2873d781e837bdea83a1a8ff1fc5670132de294b6b2ae840099cb4d037cc46b3980928a506f800befa5037ecc4c128dc83d62f8d7ede6c05d595ab96a009e378894d776a0e83d4c1bbd9cfe6dbf29c3c5", @ANYBLOB="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", @ANYBLOB="650dff969a08ff9e724d5d7c4ef89e23d56dda29c31665f63ec8a6f772a525c5b7212d46fcdce41a1775bdc7ae8d824d46ff9c67feac09d995afa0aed98ce5381701ee97a11793808dbb0a95927953efd647f04a4d25be7c929451bd4f6a217f6976fe903f0542222969f6d90184c98b67298ed804d7b1b0e667a2c734bec13f27287182ddd1e4f5ecf7"], 0x1, 0x242, &(0x7f0000000e40)="$eJzsmL+LE0EUx7+zu5kkIqLNFTYKHhjRSy57KNeE8wTBysYTtdLgrceZvYskK5iA4mFjo52FYGPhP2BxxdV2/gOCFioIFqawEEQOVt7O7GbiJpdltfN9iuE7M2/m/ZjNKwKGYf5bPn/68fHJucWVUwD2YxZFvf7VBoRQ2jLsPzy/e/JZ4/yL1+9fvdk8cH/nz/voSBjuhuZCaQ//DoDKso0g8RTGZ3+RmNWTFRQTfRkWTmh9BQJVrW/AKsT3evgZKoDbELim19tkX63eWve96s22v0pinoY6DS4NI/lSfIMtgVU9pxuFsd/t9VtN3/c6hnD03pitXCJx1ppJ1a8AicGyhYaOluKj+K8+frRFK3Ft5mEl9avDQl0nsbCblAmLKMa1USUx8j/sDPO3i4l7etpW0x+brb4V05Is+b5nd3uN7/+kWKY4NJfveIXSOatXHgDQWweRJwwMTy3B6xQw3LLpSx0xPpr55jKADJ9OJBzjdTDeeEm/aI4EL6aymCCeZor570WuLGIxM9h5m976op9SMeZ4KKa7ECPfj9zLuJQ15jik/BUro9+yclZMTv51A++2Vf8IXwocB2TcPxyjf9WCjTu1bq8/t77RXPPWvE3XXTgjgIen3VrUiNSY6nvD/lyO+tM+oz8XJthKS+JeMwg6dTVKIVFGEHTcaO4aP5tL2+1v1/WxABcAHFMTapsyudFO+RBS2ViRLalK2ohhGIZhGIZhGIZhGIZhGCYrI394HoFAOB1XWf8OAAD//5X0aKk=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m2.103965184s ago: executing program 5 (id=17085): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) pwrite64(r0, &(0x7f0000000bc0)="cf", 0x1, 0x7fff) 2m1.201808609s ago: executing program 5 (id=17091): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[], 0x1, 0x26c, &(0x7f0000000340)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 2m0.509101723s ago: executing program 44 (id=17091): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[], 0x1, 0x26c, &(0x7f0000000340)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 6.118463938s ago: executing program 6 (id=18166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 5.905623857s ago: executing program 9 (id=18169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="d2ff03076003008cb89e08f088a8", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.760957047s ago: executing program 6 (id=18173): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="440000001000ffff27bd701bfedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x28801}, 0x8000002) 5.594594755s ago: executing program 9 (id=18176): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x524ec000) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.249495567s ago: executing program 6 (id=18179): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x4, 0x10000, 0x4}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) 5.081914274s ago: executing program 6 (id=18183): syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5.038261161s ago: executing program 9 (id=18184): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3000000, 0x0, 0x0, 0x3, 0x58, 0x1c, 0xa5, 0x18}) 4.784972352s ago: executing program 9 (id=18188): r0 = syz_io_uring_setup(0x26fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x200034b}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x32, {}, 0x1d1, 0xea78ef7866cc2dc2}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 4.425773671s ago: executing program 9 (id=18192): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0xf517, 0x0) 4.32602586s ago: executing program 6 (id=18193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x0, 0x0) 3.164259121s ago: executing program 8 (id=18205): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.026204333s ago: executing program 0 (id=18206): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}, @TCA_HHF_QUANTUM={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 2.864055209s ago: executing program 7 (id=18207): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/246, 0xf6) 2.773785739s ago: executing program 6 (id=18209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="060000004d90", 0x6) 2.162157465s ago: executing program 45 (id=18209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="060000004d90", 0x6) 2.154995761s ago: executing program 7 (id=18211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x331, 0x70bd25, 0x25dfdbfa, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000) 2.135700914s ago: executing program 0 (id=18212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 2.135388474s ago: executing program 2 (id=18213): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x3, 0x0, 0x5, 0x0, 0x0, "3eccc3f9ff00000500200800ffff00"}) 2.066163784s ago: executing program 9 (id=18214): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) 1.734921532s ago: executing program 2 (id=18215): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x600}, [@IFLA_TXQLEN={0x8, 0xd, 0x1000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x440d0}, 0x0) 1.734749228s ago: executing program 7 (id=18216): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1.433012726s ago: executing program 0 (id=18217): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000032780)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x1000}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@adinicb}, {@volume={'volume', 0x3d, 0x1}}, {@umask}, {@gid_forget}, {@unhide}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x4) 1.1814959s ago: executing program 7 (id=18218): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0xff8e}}, 0x40) 1.181001175s ago: executing program 2 (id=18219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x1}, 0x14}}, 0x0) 1.075109464s ago: executing program 8 (id=18220): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000400)='veth1_to_team\x00', 0x10) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x1c) 825.530864ms ago: executing program 2 (id=18221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2b, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 825.317504ms ago: executing program 0 (id=18222): unshare(0x400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x2c, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) 808.807148ms ago: executing program 8 (id=18223): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 715.91405ms ago: executing program 7 (id=18224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xdefd}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfff}]}, 0x3c}}, 0x400c890) 661.253827ms ago: executing program 0 (id=18225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x40000) 555.341651ms ago: executing program 8 (id=18226): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) 505.826795ms ago: executing program 2 (id=18227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 367.682547ms ago: executing program 0 (id=18228): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xf9, 0x577, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000a80)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x2c8, 0x9, 0x2, 0x1, 0x8}}, 0x118) 327.10206ms ago: executing program 7 (id=18229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800100004090000080011"], 0x44}}, 0x44000) 253.786151ms ago: executing program 8 (id=18230): openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x40f, 0x34c}) 216.173438ms ago: executing program 2 (id=18231): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x2010c48, &(0x7f00000001c0)={[{@dax_never}, {@gqnoenforce}, {@usrquota}, {@dax_always}, {@dax_always}, {@sysvgroups}]}, 0x1, 0x989b, &(0x7f0000013040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) fallocate(r0, 0x3, 0xc, 0xef9) 0s ago: executing program 8 (id=18232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x800) kernel console output (not intermixed with test programs): T9885] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1707.053349][ T9885] kill_f2fs_super+0x2cc/0x6d0 [ 1707.053377][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.053414][ T9885] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1707.053468][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.053497][ T9885] ? shrinker_free+0x2ce/0x3e0 [ 1707.053538][ T9885] deactivate_locked_super+0xbc/0x130 [ 1707.053576][ T9885] cleanup_mnt+0x425/0x4c0 [ 1707.053606][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.053634][ T9885] ? lockdep_hardirqs_on+0x9c/0x150 [ 1707.053676][ T9885] task_work_run+0x1d4/0x260 [ 1707.053720][ T9885] ? __pfx_task_work_run+0x10/0x10 [ 1707.053754][ T9885] ? __x64_sys_umount+0x122/0x160 [ 1707.053798][ T9885] ? exit_to_user_mode_loop+0x40/0x130 [ 1707.053830][ T9885] exit_to_user_mode_loop+0xe9/0x130 [ 1707.053857][ T9885] do_syscall_64+0x2bd/0xfa0 [ 1707.053892][ T9885] ? lockdep_hardirqs_on+0x9c/0x150 [ 1707.053927][ T9885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.053951][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.053980][ T9885] ? exc_page_fault+0xab/0x100 [ 1707.054018][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.054043][ T9885] RIP: 0033:0x7f43c47902f7 [ 1707.054066][ T9885] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1707.054088][ T9885] RSP: 002b:00007ffcda956158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1707.054115][ T9885] RAX: 0000000000000000 RBX: 00007f43c4811d7d RCX: 00007f43c47902f7 [ 1707.054134][ T9885] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcda956210 [ 1707.054150][ T9885] RBP: 00007ffcda956210 R08: 0000000000000000 R09: 0000000000000000 [ 1707.054167][ T9885] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcda9572a0 [ 1707.054185][ T9885] R13: 00007f43c4811d7d R14: 0000000000184455 R15: 00007ffcda9572e0 [ 1707.054232][ T9885] [ 1707.054243][ T9885] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1707.106233][T16600] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1707.252727][T16590] loop7: detected capacity change from 0 to 32768 [ 1707.300303][T16174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1707.444308][T16600] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1707.596566][T16590] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.17254 (16590) [ 1707.611304][T16174] veth0_vlan: entered promiscuous mode [ 1707.629218][T16174] veth1_vlan: entered promiscuous mode [ 1707.708200][T16590] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1707.771306][T16590] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1707.858384][T16174] veth0_macvtap: entered promiscuous mode [ 1707.912836][T16174] veth1_macvtap: entered promiscuous mode [ 1707.948653][T16174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1707.987073][T16174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1708.097353][T17585] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.122197][T16590] BTRFS info (device loop7): enabling ssd optimizations [ 1708.132564][T16590] BTRFS info (device loop7): turning on async discard [ 1708.139362][T16590] BTRFS info (device loop7): enabling free space tree [ 1708.150139][T17585] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.188203][T17585] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.251197][T17585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.443882][T13161] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1708.770587][T16636] loop6: detected capacity change from 0 to 1024 [ 1708.846340][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.885423][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.074294][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1709.082162][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.460389][T16654] loop0: detected capacity change from 0 to 512 [ 1709.483214][T16652] vlan2: entered promiscuous mode [ 1709.499937][T16652] gretap0: entered promiscuous mode [ 1709.518532][T16652] vlan2: entered allmulticast mode [ 1709.523901][T16652] gretap0: entered allmulticast mode [ 1709.539104][T16654] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.17272: bad orphan inode 15 [ 1709.556372][T16654] ext4_test_bit(bit=14, block=5) = 0 [ 1709.625983][T16654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1709.756972][T16654] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.17272: reserved inode found cleared - inode=1 [ 1709.829218][T16664] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1709.924093][T16664] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 1710.114389][T14144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1710.233593][ T6028] Bluetooth: hci2: command 0x040f tx timeout [ 1710.527561][T16676] loop8: detected capacity change from 0 to 4096 [ 1710.566333][T16676] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1710.602515][T16676] ntfs3(loop8): ino=3, mi_enum_attr [ 1710.692709][T16676] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1710.721027][T16676] ntfs3(loop8): ino=1f, "file2" failed to open parent directory r=5 to update [ 1710.885321][ T1111] ntfs3(loop8): ino=1f, failed to open parent directory r=5 to update [ 1710.937140][T16695] bridge0: port 3(ipvlan2) entered blocking state [ 1710.963216][T16695] bridge0: port 3(ipvlan2) entered disabled state [ 1710.991534][T16695] ipvlan2: entered allmulticast mode [ 1711.002246][T16695] bridge0: entered allmulticast mode [ 1711.033346][T16695] ipvlan2: left allmulticast mode [ 1711.064989][T16695] bridge0: left allmulticast mode [ 1711.398182][T16688] loop7: detected capacity change from 0 to 32766 [ 1711.429304][T16705] loop6: detected capacity change from 0 to 736 [ 1711.440214][ T6048] loop7: p1 p2 p3 < p5 p6 > [ 1711.451229][ T6048] loop7: p2 size 16775168 extends beyond EOD, truncated [ 1711.471367][T16703] [U] +ìÆH [ 1711.544486][ T6048] loop7: p5 start 4294970168 is beyond EOD, truncated [ 1711.758952][T16712] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (dt2814) [ 1712.148664][T16726] netlink: 'syz.7.17305': attribute type 2 has an invalid length. [ 1712.525451][ T7166] udevd[7166]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 1712.541148][ T6048] udevd[6048]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1712.578590][ T6043] udevd[6043]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 1712.591682][T16734] loop9: detected capacity change from 0 to 4096 [ 1712.592588][T12565] udevd[12565]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 1712.828055][T16734] ntfs3(loop9): failed to convert "0080" to cp1251 [ 1712.866130][T25923] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1712.882772][T16734] ntfs3(loop9): failed to convert name for inode 1e. [ 1712.939069][T16734] ntfs3(loop9): ino=1f, mi_enum_attr [ 1712.953927][T16750] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.17315'. [ 1713.029706][T25923] usb 7-1: Using ep0 maxpacket: 16 [ 1713.060456][T25923] usb 7-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1713.126268][T25923] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1713.155261][T25923] usb 7-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1713.186252][T25923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.242235][T25923] usb 7-1: config 0 descriptor?? [ 1713.314243][T16761] vivid-002: disconnect [ 1713.325692][T16758] vivid-002: reconnect [ 1713.616820][T16769] loop8: detected capacity change from 0 to 1024 [ 1713.646494][T16771] loop9: detected capacity change from 0 to 4096 [ 1713.733589][T16771] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1713.757992][T25923] logitech-djreceiver 0003:046D:C52B.002F: unknown main item tag 0x0 [ 1713.927161][T25923] usb 7-1: USB disconnect, device number 19 [ 1714.045440][ T9885] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.203012][T16778] loop0: detected capacity change from 0 to 4096 [ 1714.459825][T16792] loop2: detected capacity change from 0 to 8 [ 1714.492249][T16792] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1714.508996][ T6048] udevd[6048]: incorrect cramfs checksum on /dev/loop2 [ 1714.649559][ T6048] udevd[6048]: incorrect cramfs checksum on /dev/loop2 [ 1715.332478][T16789] loop7: detected capacity change from 0 to 32768 [ 1715.383461][T16789] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.17336 (16789) [ 1715.444034][T16789] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1715.481511][T16789] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1715.683286][T16800] loop8: detected capacity change from 0 to 32768 [ 1715.693475][T16789] BTRFS info (device loop7): rebuilding free space tree [ 1715.744446][T16800] BTRFS info: device /dev/loop8 (7:8) using temp-fsid 82c77239-6566-452c-abc1-be43fefa6a56 [ 1715.772256][T16789] BTRFS info (device loop7): disabling free space tree [ 1715.773580][T16797] loop9: detected capacity change from 0 to 32768 [ 1715.779194][T16789] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1715.805344][T16800] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.17342 (16800) [ 1715.832786][T16789] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1715.854174][T16800] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1715.916390][T16800] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1715.964294][T16797] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1715.976600][T16789] BTRFS info (device loop7): enabling ssd optimizations [ 1715.989250][T16789] BTRFS info (device loop7): turning on sync discard [ 1715.991407][T16803] loop0: detected capacity change from 0 to 32768 [ 1715.995960][T16789] BTRFS info (device loop7): force clearing of disk cache [ 1716.144534][T16797] XFS (loop9): Ending clean mount [ 1716.225721][T16803] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1716.349512][T16800] BTRFS info (device loop8): rebuilding free space tree [ 1716.379491][T16800] BTRFS info (device loop8): disabling free space tree [ 1716.386808][T16800] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1716.403945][T16800] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1716.406094][T16803] XFS (loop0): Ending clean mount [ 1716.415369][T13161] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1716.461144][T16800] BTRFS info (device loop8): enabling ssd optimizations [ 1716.492050][T16800] BTRFS info (device loop8): turning on sync discard [ 1716.516353][T16800] BTRFS info (device loop8): force clearing of disk cache [ 1716.612778][ T9885] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1716.624555][ T30] audit: type=1800 audit(1599.316:2554): pid=16800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.17342" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 1716.784060][T14144] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1716.915620][T19489] BTRFS info (device loop8): last unmount of filesystem 82c77239-6566-452c-abc1-be43fefa6a56 [ 1717.586874][T16866] orangefs_mount: mount request failed with -4 [ 1718.545681][T16900] loop8: detected capacity change from 0 to 2048 [ 1718.606782][T16900] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1718.694136][ T6048] udevd[6048]: incorrect nilfs2 checksum on /dev/loop8 [ 1718.792194][T16909] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1719.415042][T16909] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1719.443355][T16917] loop9: detected capacity change from 0 to 4096 [ 1719.461869][T16909] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1719.518273][T16917] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 1719.543954][T16909] Remounting filesystem read-only [ 1719.571039][T19489] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1719.617333][T16931] netlink: 'syz.7.17380': attribute type 3 has an invalid length. [ 1719.628624][T16930] loop6: detected capacity change from 0 to 64 [ 1719.922888][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17381'. [ 1719.976107][T16934] loop8: detected capacity change from 0 to 128 [ 1720.034941][T16934] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1720.108926][T16941] loop6: detected capacity change from 0 to 512 [ 1720.138191][T16934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1720.182546][T16941] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1720.223438][T25924] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1720.435358][T25924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.480092][T25924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.483455][T16941] EXT4-fs (loop6): 1 truncate cleaned up [ 1720.536190][T25924] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1720.580168][T25924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.624707][T16941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1720.648375][T25924] usb 8-1: config 0 descriptor?? [ 1720.707861][T16941] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1720.946698][ T9776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.101545][T25924] aquacomputer_d5next 0003:0C70:F0B6.0030: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.7-1/input0 [ 1721.206978][T16961] loop6: detected capacity change from 0 to 512 [ 1721.254862][T16961] EXT4-fs: inline encryption not supported [ 1721.284865][T16961] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1721.298714][T16964] loop8: detected capacity change from 0 to 64 [ 1721.307322][T16964] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 1721.316125][T25924] usb 8-1: USB disconnect, device number 35 [ 1721.397639][T16961] EXT4-fs (loop6): 1 truncate cleaned up [ 1721.429349][T16961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1721.440243][T16967] loop9: detected capacity change from 0 to 512 [ 1721.540073][T16962] fido_id[16962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1721.559212][T16967] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1721.567195][T16961] EXT4-fs warning (device loop6): ext4_empty_dir:3099: inode #2: comm syz.6.17392: directory missing '..' [ 1721.591569][T16967] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1721.840612][T16971] loop8: detected capacity change from 0 to 512 [ 1721.885347][T16971] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1721.910949][ T9776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.946786][ T49] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1722.096221][T16971] EXT4-fs (loop8): 1 truncate cleaned up [ 1722.135104][T16977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1722.142428][T16971] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1722.261030][T16978] loop6: detected capacity change from 0 to 256 [ 1722.331208][T16978] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1722.432227][T19489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1722.671052][ T30] audit: type=1326 audit(1604.891:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16986 comm="syz.6.17405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643b8efc9 code=0x7ffc0000 [ 1722.752725][ T30] audit: type=1326 audit(1604.891:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16986 comm="syz.6.17405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643b8efc9 code=0x7ffc0000 [ 1722.840951][ T30] audit: type=1326 audit(1604.900:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16986 comm="syz.6.17405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7643b8efc9 code=0x7ffc0000 [ 1722.905962][T16991] loop9: detected capacity change from 0 to 4096 [ 1722.954982][ T30] audit: type=1326 audit(1604.900:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16986 comm="syz.6.17405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643b8efc9 code=0x7ffc0000 [ 1722.955052][ T30] audit: type=1326 audit(1604.910:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16986 comm="syz.6.17405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643b8efc9 code=0x7ffc0000 [ 1722.955108][ T30] audit: type=1326 audit(1604.910:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16986 comm="syz.6.17405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f7643b8efc9 code=0x7ffc0000 [ 1722.955165][ T30] audit: type=1326 audit(1604.910:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16986 comm="syz.6.17405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643b8efc9 code=0x7ffc0000 [ 1723.396158][T16998] netlink: 16 bytes leftover after parsing attributes in process `syz.9.17409'. [ 1723.666083][T17006] loop6: detected capacity change from 0 to 256 [ 1723.858587][T17014] loop8: detected capacity change from 0 to 128 [ 1724.964413][T17051] tipc: Started in network mode [ 1724.993965][T17051] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1725.022898][T17051] tipc: Enabled bearer , priority 10 [ 1725.303406][T17023] loop6: detected capacity change from 0 to 32768 [ 1725.417521][T17023] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1725.523799][T17023] XFS (loop6): Ending clean mount [ 1725.627284][T17023] XFS (loop6): Quotacheck needed: Please wait. [ 1725.712328][T17080] loop7: detected capacity change from 0 to 512 [ 1725.857729][T17081] loop8: detected capacity change from 0 to 2048 [ 1725.901449][T17023] XFS (loop6): Quotacheck: Done. [ 1725.953005][T17080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1726.058917][T17089] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1726.143124][T17041] loop0: detected capacity change from 0 to 32768 [ 1726.254143][T17041] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1726.257834][T19524] tipc: Node number set to 10005162 [ 1726.280934][T13161] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1726.297130][ T9776] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1726.398921][T17041] XFS (loop0): Ending clean mount [ 1726.540866][T16633] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1726.655880][T17103] loop8: detected capacity change from 0 to 128 [ 1726.678226][T17101] loop7: detected capacity change from 0 to 512 [ 1726.720015][T17103] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1726.733930][T16633] usb 10-1: Using ep0 maxpacket: 32 [ 1726.747725][T16633] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.760834][T14144] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1726.824430][T17101] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1726.848173][T16633] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1726.853628][T17101] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1726.867955][T16633] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1726.885519][T16633] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1726.933248][T17101] Quota error (device loop7): dq_insert_tree: Quota tree root isn't allocated! [ 1726.939676][T16633] usb 10-1: Product: syz [ 1726.950627][T16633] usb 10-1: Manufacturer: syz [ 1726.957992][T17101] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 1727.008074][T16633] hub 10-1:4.0: USB hub found [ 1727.030733][T17101] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.17448: Failed to acquire dquot type 1 [ 1727.153919][T17101] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.17448: bg 0: block 40: padding at end of block bitmap is not set [ 1727.230402][T16633] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 1727.237325][T17088] loop2: detected capacity change from 0 to 32768 [ 1727.250250][T17101] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 1727.283146][T17101] EXT4-fs (loop7): 1 truncate cleaned up [ 1727.317398][T17101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1727.372770][T17088] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1727.467098][T17088] XFS (loop2): Ending clean mount [ 1727.507462][T17088] XFS (loop2): Quotacheck needed: Please wait. [ 1727.583899][T16633] usb 10-1: USB disconnect, device number 24 [ 1727.613752][T17088] XFS (loop2): Quotacheck: Done. [ 1727.771322][T13161] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1727.926129][T16174] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1728.548567][T17122] loop8: detected capacity change from 0 to 32768 [ 1728.661760][T17122] JBD2: Ignoring recovery information on journal [ 1728.731231][T17141] loop9: detected capacity change from 0 to 128 [ 1728.806909][T17142] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1728.818654][T17145] bond_slave_0: entered promiscuous mode [ 1728.825129][T17145] bond_slave_1: entered promiscuous mode [ 1728.833436][T17141] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1728.899941][T17141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1728.912612][T17122] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1728.934894][T17145] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1729.050946][T17145] bond_slave_0: left promiscuous mode [ 1729.056624][T17145] bond_slave_1: left promiscuous mode [ 1729.078514][ T2160] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1729.102238][ T2160] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1729.161764][ T2160] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1729.169265][ T2160] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1729.196897][T17153] loop2: detected capacity change from 0 to 16 [ 1729.242812][ T2160] rtc rtc0: __rtc_set_alarm: err=-22 [ 1729.255954][T17153] erofs (device loop2): mounted with root inode @ nid 36. [ 1729.297913][T19489] ocfs2: Unmounting device (7,8) on (node local) [ 1729.353258][ T30] audit: type=1400 audit(1611.066:2562): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26170749D4C1 pid=17152 comm="syz.2.17457" [ 1729.489383][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17468'. [ 1729.586943][T17155] loop9: detected capacity change from 0 to 256 [ 1730.381834][T17148] loop7: detected capacity change from 0 to 32768 [ 1730.427186][T17148] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.17467 (17148) [ 1730.490317][T17148] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1730.520428][T17148] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 1730.552810][ T30] audit: type=1326 audit(1612.164:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.2.17483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fbd8efc9 code=0x7ffc0000 [ 1730.621371][ T30] audit: type=1326 audit(1612.174:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.2.17483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88fbd8efc9 code=0x7ffc0000 [ 1730.677730][ T30] audit: type=1326 audit(1612.174:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.2.17483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fbd8efc9 code=0x7ffc0000 [ 1730.750934][ T30] audit: type=1326 audit(1612.174:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.2.17483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fbd8efc9 code=0x7ffc0000 [ 1730.839077][ T30] audit: type=1326 audit(1612.174:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.2.17483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f88fbd8efc9 code=0x7ffc0000 [ 1730.862885][ T30] audit: type=1326 audit(1612.174:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.2.17483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fbd8efc9 code=0x7ffc0000 [ 1730.897173][ T30] audit: type=1326 audit(1612.174:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17184 comm="syz.2.17483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fbd8efc9 code=0x7ffc0000 [ 1730.978621][T17148] BTRFS info (device loop7): rebuilding free space tree [ 1731.123977][T17148] BTRFS info (device loop7): disabling free space tree [ 1731.131004][T17148] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1731.209546][T17148] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1731.253673][T17148] BTRFS info (device loop7): enabling ssd optimizations [ 1731.260731][T17148] BTRFS info (device loop7): turning on sync discard [ 1731.280167][T17217] loop8: detected capacity change from 0 to 8 [ 1731.328546][T17148] BTRFS info (device loop7): force clearing of disk cache [ 1731.477651][ T30] audit: type=1800 audit(1613.023:2570): pid=17148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.17467" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 1731.753148][T17228] netlink: 4436 bytes leftover after parsing attributes in process `syz.8.17495'. [ 1731.791078][T17232] loop2: detected capacity change from 0 to 64 [ 1731.797411][T17228] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1731.898548][T13161] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1731.994603][T25924] kernel read not supported for file /vcs (pid: 25924 comm: kworker/1:4) [ 1732.449945][ T7440] Bluetooth: hci1: command 0x0406 tx timeout [ 1732.518529][T17246] loop0: detected capacity change from 0 to 128 [ 1732.524120][T17240] loop2: detected capacity change from 0 to 16 [ 1732.540727][T17246] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1732.564197][T17248] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1732.570891][T17248] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1732.578410][T17248] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 1732.586684][T17248] comedi comedi3: 8255: I/O port conflict (0xf0004,4) [ 1732.593687][T17248] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1732.600858][T17248] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1732.618849][T17248] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 1732.619040][T17240] erofs (device loop2): mounted with root inode @ nid 36. [ 1732.637846][T17248] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1732.655669][T17248] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 1732.664125][T17246] hpfs: filesystem error: improperly stopped [ 1732.678115][T17246] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1732.692917][T17248] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1732.712500][T17246] hpfs: You really don't want any checks? You are crazy... [ 1732.729116][T17246] hpfs: hpfs_map_sector(): read error [ 1732.757997][T17246] hpfs: code page support is disabled [ 1732.763622][T17246] hpfs: hpfs_map_4sectors(): unaligned read [ 1732.802090][T17246] hpfs: hpfs_map_4sectors(): unaligned read [ 1732.808058][T17246] hpfs: filesystem error: unable to find root dir [ 1732.936515][T17215] loop9: detected capacity change from 0 to 32768 [ 1733.031064][T17215] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1733.121546][T17215] XFS (loop9): Ending clean mount [ 1733.157115][T17215] XFS (loop9): Quotacheck needed: Please wait. [ 1733.216511][T17215] XFS (loop9): Quotacheck: Done. [ 1733.527251][ T9885] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1733.645147][T17263] loop0: detected capacity change from 0 to 512 [ 1733.689507][T17263] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1733.768805][T17263] EXT4-fs (loop0): 1 truncate cleaned up [ 1733.820974][T17263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1733.960624][T17244] loop8: detected capacity change from 0 to 40427 [ 1734.030008][T17244] F2FS-fs (loop8): invalid crc value [ 1734.112266][T14144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1734.428609][T17244] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1734.480552][T17244] F2FS-fs (loop8): Start checkpoint disabled! [ 1734.503098][T17244] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 1734.572552][T17244] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1734.674214][T17285] loop7: detected capacity change from 0 to 512 [ 1734.701398][T17244] F2FS-fs (loop8): Stopped filesystem due to reason: 0 [ 1734.754570][T17285] EXT4-fs: Ignoring removed oldalloc option [ 1734.800538][T17285] EXT4-fs: Ignoring removed orlov option [ 1734.832732][T17285] EXT4-fs: Invalid want_extra_isize 8 [ 1735.101942][T17295] loop6: detected capacity change from 0 to 1024 [ 1735.136177][T17295] EXT4-fs: Ignoring removed orlov option [ 1735.211314][T17295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1735.391392][ T9776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1735.434142][T25923] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1735.481430][T17308] loop2: detected capacity change from 0 to 512 [ 1735.559957][T17308] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 1735.640572][T25923] usb 10-1: Using ep0 maxpacket: 16 [ 1735.646489][T17308] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #13: comm syz.2.17529: iget: bad i_size value: 12154757448730 [ 1735.669668][T25923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.705993][T17308] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.17529: couldn't read orphan inode 13 (err -117) [ 1735.732192][T25923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.778795][T17308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1735.788485][T25923] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1735.800226][T17308] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 1735.854416][T25923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.886758][T16174] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1735.909187][T25923] usb 10-1: config 0 descriptor?? [ 1735.965092][ T9857] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1736.152183][ T9857] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1736.192021][ T9857] usb 8-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 1736.201993][ T9857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.250192][ T9857] usb 8-1: config 0 descriptor?? [ 1736.364746][T17324] vlan2: entered promiscuous mode [ 1736.384884][T17324] syz_tun: entered promiscuous mode [ 1736.411543][T25923] hid-multitouch 0003:1FD2:6007.0031: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.9-1/input0 [ 1736.630239][T25923] usb 10-1: USB disconnect, device number 25 [ 1736.672691][T17328] loop8: detected capacity change from 0 to 4096 [ 1736.751988][ T9857] lenovo 0003:17EF:60B5.0032: hidraw0: USB HID v1.01 Device [HID 17ef:60b5] on usb-dummy_hcd.7-1/input0 [ 1736.757714][T17333] loop6: detected capacity change from 0 to 1764 [ 1736.775513][T17328] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1736.860221][T17335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17538'. [ 1736.954793][ T9857] usb 8-1: USB disconnect, device number 36 [ 1737.164767][T17336] fido_id[17336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1737.247390][T17342] sp0: Synchronizing with TNC [ 1737.283913][T17342] sp0: Found TNC [ 1737.306872][T17341] [U] è` [ 1737.520854][T17352] netlink: 76 bytes leftover after parsing attributes in process `syz.8.17546'. [ 1737.936912][T25923] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1738.072921][T17340] loop6: detected capacity change from 0 to 32768 [ 1738.102147][T17340] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.17540 (17340) [ 1738.126846][T25923] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1738.149886][T25923] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1738.176780][T17340] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1738.195581][T25923] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1738.211626][T17340] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1738.235826][T25923] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1738.250412][T25923] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.296583][T25923] usb 10-1: Product: syz [ 1738.309895][T25923] usb 10-1: Manufacturer: syz [ 1738.324132][T25923] usb 10-1: SerialNumber: syz [ 1738.334428][T25923] usb 10-1: config 0 descriptor?? [ 1738.341216][T17356] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1738.350896][T17356] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1738.387574][T25923] usb 10-1: ucan: probing device on interface #0 [ 1738.479964][T17340] BTRFS info (device loop6): enabling ssd optimizations [ 1738.498353][T17340] BTRFS info (device loop6): turning on async discard [ 1738.513554][T17340] BTRFS info (device loop6): enabling free space tree [ 1738.629134][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17560'. [ 1738.655537][T17397] nbd: socks must be embedded in a SOCK_ITEM attr [ 1738.684466][ T9857] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1738.836754][ T9776] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1738.871354][ T9857] usb 9-1: Using ep0 maxpacket: 8 [ 1738.906385][ T9857] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.928600][ T9857] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1738.996516][ T9857] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.007909][T17404] loop2: detected capacity change from 0 to 1024 [ 1739.038540][ T9857] usb 9-1: config 0 descriptor?? [ 1739.065736][T25923] ucan 10-1:0.0: probe with driver ucan failed with error -71 [ 1739.079844][ T9857] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1739.139604][T25923] usb 10-1: USB disconnect, device number 26 [ 1739.219595][T17583] hfsplus: b-tree write err: -5, ino 4 [ 1739.495327][T17380] loop7: detected capacity change from 0 to 32768 [ 1739.577407][T17380] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1739.745834][ T9857] gspca_vc032x: reg_r err -71 [ 1739.752255][ T9857] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 1739.766160][ T9857] usb 9-1: USB disconnect, device number 49 [ 1739.847474][T17380] XFS (loop7): Ending clean mount [ 1740.089202][T17427] macsec1: entered allmulticast mode [ 1740.098282][T13161] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1740.129969][T17427] macsec0: entered allmulticast mode [ 1740.181628][T17427] veth1_macvtap: entered allmulticast mode [ 1740.384269][T17431] loop2: detected capacity change from 0 to 512 [ 1740.497160][T17431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1740.955728][T16174] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1741.145061][T17455] loop7: detected capacity change from 0 to 64 [ 1741.178125][ T7440] Bluetooth: hci0: command 0x0405 tx timeout [ 1741.251890][T17455] hfs: unable to locate alternate MDB [ 1741.257317][T17455] hfs: continuing without an alternate MDB [ 1741.614881][T17471] [U] [ 1741.618847][T17471] [U] [ 1741.621579][T17471] [U] [ 1741.624287][T17471] [U] [ 1741.626996][T17471] [U] [ 1741.629724][T17471] [U] [ 1741.632434][T17471] [U] [ 1741.635134][T17471] [U] [ 1741.697811][T17471] [U] [ 1741.700572][T17471] [U] [ 1741.703284][T17471] [U] [ 1741.736291][T17470] [U] [ 1741.776680][T17477] netlink: 'syz.6.17593': attribute type 2 has an invalid length. [ 1742.026224][ T2160] kernel write not supported for file /radio1 (pid: 2160 comm: kworker/0:3) [ 1742.070159][T17486] loop9: detected capacity change from 0 to 512 [ 1742.110550][T17486] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 1742.178415][T17490] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1742.507717][T17496] loop8: detected capacity change from 0 to 4096 [ 1742.531644][ T2160] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1742.665782][T17502] loop6: detected capacity change from 0 to 256 [ 1742.695522][T17502] exfat: Deprecated parameter 'utf8' [ 1742.742255][T17496] ntfs3(loop8): failed to convert name for inode 1e. [ 1742.759673][ T2160] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 1742.762214][T17496] ntfs3(loop8): ino=1f, mi_enum_attr [ 1742.787569][T17502] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1742.792051][ T2160] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 1742.819337][T17496] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1742.844362][ T2160] usb 8-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1742.869119][ T2160] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.907742][ T2160] usb 8-1: config 0 descriptor?? [ 1743.397238][ T2160] magicmouse 0003:05AC:0269.0033: hidraw0: USB HID v11.da Device [HID 05ac:0269] on usb-dummy_hcd.7-1/input0 [ 1743.587119][ T2160] usb 8-1: USB disconnect, device number 37 [ 1743.620283][T17518] fido_id[17518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1743.668137][T17504] loop2: detected capacity change from 0 to 32768 [ 1743.690421][T17524] loop6: detected capacity change from 0 to 256 [ 1743.731591][T17504] ERROR: (device loop2): dbAllocAG: allocation request is larger than the allocation group size [ 1743.731591][T17504] [ 1743.806244][T17504] ERROR: (device loop2): dbDiscardAG: -EIO [ 1743.806244][T17504] [ 1743.827626][T17524] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1744.094262][T17531] loop2: detected capacity change from 0 to 1024 [ 1744.182500][T17531] hfsplus: bad catalog entry type [ 1744.314745][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1744.647627][T17549] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1744.881100][T17557] loop0: detected capacity change from 0 to 1024 [ 1745.017464][T17563] loop6: detected capacity change from 0 to 2048 [ 1745.074826][T17565] loop9: detected capacity change from 0 to 1024 [ 1745.090642][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1745.107370][T17563] EXT4-fs: Ignoring removed bh option [ 1745.167776][T17565] hfsplus: bad catalog entry type [ 1745.212813][T17563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1745.263459][T17568] pimreg3: entered allmulticast mode [ 1745.331077][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1745.487817][ T9776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1745.548817][T17579] support for cryptoloop has been removed. Use dm-crypt instead. [ 1746.004695][T17547] loop2: detected capacity change from 0 to 32768 [ 1746.033993][T17547] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1746.131925][T17602] loop8: detected capacity change from 0 to 1024 [ 1746.172302][T17547] XFS (loop2): Ending clean mount [ 1746.479745][T16174] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1746.716340][T17620] loop6: detected capacity change from 0 to 256 [ 1746.775186][T17620] exfat: Deprecated parameter 'utf8' [ 1746.798325][T17620] exfat: Deprecated parameter 'utf8' [ 1746.827808][T17623] loop0: detected capacity change from 0 to 1024 [ 1746.854115][ C1] vkms_vblank_simulate: vblank timer overrun [ 1746.903001][T17620] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1746.909501][T17623] hfsplus: bad catalog entry type [ 1747.048849][ C1] vkms_vblank_simulate: vblank timer overrun [ 1747.165894][T17585] hfsplus: b-tree write err: -5, ino 4 [ 1747.357255][T17632] xt_cgroup: invalid path, errno=-2 [ 1747.385579][T17636] loop2: detected capacity change from 0 to 64 [ 1747.810492][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17670'. [ 1747.876186][T17624] loop8: detected capacity change from 0 to 32768 [ 1747.898495][T17624] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.17658 (17624) [ 1747.950692][T17624] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1747.987871][T17624] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 1748.254600][T17624] BTRFS info (device loop8): enabling ssd optimizations [ 1748.287027][T17624] BTRFS info (device loop8): turning on async discard [ 1748.293861][T17624] BTRFS info (device loop8): enabling free space tree [ 1748.373000][T17624] BTRFS info (device loop8): use lzo compression, level 1 [ 1748.463316][T17646] loop9: detected capacity change from 0 to 32768 [ 1748.578122][T17585] JFS: metapage_get_blocks failed [ 1748.583406][T17585] JFS: metapage_get_blocks failed [ 1748.620499][ T112] blkno = 50030, nblocks = 1 [ 1748.625154][ T112] ERROR: (device loop9): dbUpdatePMap: blocks are outside the map [ 1748.625154][ T112] [ 1748.636391][T17646] JFS: metapage_get_blocks failed [ 1748.674718][ T112] ERROR: (device loop9): remounting filesystem as read-only [ 1748.711186][ T112] blkno = 5002c, nblocks = 4 [ 1748.718859][T19489] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1748.748412][ T112] ERROR: (device loop9): dbUpdatePMap: blocks are outside the map [ 1748.748412][ T112] [ 1748.845417][T17680] netlink: 36 bytes leftover after parsing attributes in process `syz.6.17676'. [ 1748.955382][T17646] JFS: metapage_get_blocks failed [ 1748.973916][T17646] JFS: metapage_get_blocks failed [ 1749.242670][T17690] loop2: detected capacity change from 0 to 512 [ 1749.260032][T17690] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1749.308842][T17688] loop7: detected capacity change from 0 to 4096 [ 1749.378050][T17690] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.17682: invalid indirect mapped block 4294967295 (level 0) [ 1749.413006][T17690] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.17682: invalid indirect mapped block 4294967295 (level 1) [ 1749.495625][T17690] EXT4-fs (loop2): 1 orphan inode deleted [ 1749.543409][T17690] EXT4-fs (loop2): 1 truncate cleaned up [ 1749.552025][T17690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1749.707197][T17690] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.17682: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 1749.997005][T16174] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1750.260888][T17705] loop2: detected capacity change from 0 to 2048 [ 1750.273978][T17705] EXT4-fs: inline encryption not supported [ 1750.387683][T17705] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1750.478143][ T9857] kernel write not supported for file /sequencer (pid: 9857 comm: kworker/1:5) [ 1750.552758][T17705] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.17688: bg 0: block 120: padding at end of block bitmap is not set [ 1750.660129][T17723] loop9: detected capacity change from 0 to 64 [ 1750.666836][T17705] EXT4-fs (loop2): Remounting filesystem read-only [ 1750.684561][T17705] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 1750.880954][T16174] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 1751.238258][T17737] loop7: detected capacity change from 0 to 4096 [ 1751.261201][T17737] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1751.326810][T17737] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1751.372639][T17737] System zones: 0-5 [ 1751.395891][T17748] loop8: detected capacity change from 0 to 1024 [ 1751.405306][T17748] EXT4-fs: Ignoring removed orlov option [ 1751.434635][T17737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1751.478684][T17748] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1751.770253][T13161] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1751.844057][T19489] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1751.932348][T17739] loop0: detected capacity change from 0 to 32768 [ 1751.972107][T17739] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1752.024723][T17739] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1752.268692][T14144] ocfs2: Unmounting device (7,0) on (node local) [ 1752.381442][T17768] netlink: 'syz.6.17715': attribute type 8 has an invalid length. [ 1752.543743][T17773] ALSA: seq fatal error: cannot create timer (-22) [ 1752.562857][T17774] loop9: detected capacity change from 0 to 64 [ 1752.695999][T17752] loop2: detected capacity change from 0 to 32768 [ 1752.803633][T17752] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1752.983001][T17752] XFS (loop2): Ending clean mount [ 1753.034264][T17752] XFS (loop2): Quotacheck needed: Please wait. [ 1753.352105][T17752] XFS (loop2): Quotacheck: Done. [ 1753.633265][T16174] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1753.936274][T17816] loop6: detected capacity change from 0 to 1024 [ 1754.050383][T17822] CUSE: info not properly terminated [ 1754.187148][T17816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1754.498760][ T9776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1754.739781][T17842] loop2: detected capacity change from 0 to 1024 [ 1754.769453][T17842] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1754.793169][T17842] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 1754.827145][T17842] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1754.856589][T17842] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: inode #5: comm syz.2.17745: unexpected bad inode w/o EXT4_IGET_BAD [ 1754.894628][T17842] EXT4-fs (loop2): no journal found [ 1754.899507][T17808] loop7: detected capacity change from 0 to 32768 [ 1754.908227][T17842] EXT4-fs (loop2): can't get journal size [ 1754.945775][T17842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1754.964864][T17839] loop9: detected capacity change from 0 to 8192 [ 1755.008340][T17808] read_mapping_page failed! [ 1755.025378][T17808] ERROR: (device loop7): txCommit: [ 1755.025378][T17808] [ 1755.045407][T17849] loop8: detected capacity change from 0 to 164 [ 1755.065083][T17849] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 1755.302239][T16174] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1755.608226][T17856] loop6: detected capacity change from 0 to 512 [ 1755.661377][T17856] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1755.671739][T17856] EXT4-fs (loop6): invalid journal inode [ 1755.709277][T17856] EXT4-fs (loop6): can't get journal size [ 1755.764923][T17856] EXT4-fs (loop6): 1 truncate cleaned up [ 1755.772801][T17856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1755.862407][T17865] loop0: detected capacity change from 0 to 128 [ 1755.900364][T17865] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1755.906970][ T30] audit: type=1800 audit(1635.572:2571): pid=17856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.17754" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1755.937757][ T5194] udevd[5194]: worker [6044] terminated by signal 33 (Unknown signal 33) [ 1755.964416][T17865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1756.006327][ T5194] udevd[5194]: worker [6044] failed while handling '/devices/virtual/block/loop6' [ 1756.098926][ T9776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1756.141495][T17875] netlink: 'syz.8.17759': attribute type 11 has an invalid length. [ 1756.214683][T17875] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.17759'. [ 1756.815162][T17893] loop2: detected capacity change from 0 to 2048 [ 1756.850464][T17897] loop8: detected capacity change from 0 to 2048 [ 1756.857607][T17893] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1756.891808][T17897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1756.963978][T17897] UDF-fs: error (device loop8): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 1756.970919][T17893] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (0) does not match entry length (44) [ 1757.442845][T17884] loop7: detected capacity change from 0 to 32768 [ 1757.508652][T17884] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1757.551562][T17884] CIFS mount error: No usable UNC path provided in device string! [ 1757.551562][T17884] [ 1757.580636][T17881] loop6: detected capacity change from 0 to 32768 [ 1757.640690][T17913] loop9: detected capacity change from 0 to 512 [ 1757.658974][T17884] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1757.694540][T17881] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 1757.743554][T17913] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1757.777515][T17881] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 1757.832046][T17913] EXT4-fs (loop9): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1757.928670][T17913] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.17776: Directory hole found for htree leaf block 0 [ 1757.995523][T13161] ocfs2: Unmounting device (7,7) on (node local) [ 1758.009444][T17913] EXT4-fs (loop9): Remounting filesystem read-only [ 1758.078104][T17920] sp0: Synchronizing with TNC [ 1758.121748][T17919] [U] è` [ 1758.166418][ T9885] EXT4-fs (loop9): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1758.256037][ T9776] ocfs2: Unmounting device (7,6) on (node local) [ 1758.549913][T17911] loop2: detected capacity change from 0 to 32768 [ 1758.624409][T17911] [ 1758.624409][T17911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.624409][T17911] [ 1758.736569][T17911] [ 1758.736569][T17911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.736569][T17911] [ 1758.772126][T17911] [ 1758.772126][T17911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.772126][T17911] [ 1758.790061][T17929] loop7: detected capacity change from 0 to 4096 [ 1758.796890][T17911] [ 1758.796890][T17911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.796890][T17911] [ 1758.825229][T17929] NILFS (loop7): invalid segment: Checksum error in segment payload [ 1758.833669][T17911] [ 1758.833669][T17911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.833669][T17911] [ 1758.861846][T17929] NILFS (loop7): trying rollback from an earlier position [ 1758.872982][T17911] [ 1758.872982][T17911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.872982][T17911] [ 1758.916887][T17911] [ 1758.916887][T17911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.916887][T17911] [ 1758.940393][T17929] NILFS (loop7): recovery complete [ 1758.980799][ T111] [ 1758.980799][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1758.980799][ T111] [ 1759.012865][T17933] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1759.160710][T16174] [ 1759.160710][T16174] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1759.160710][T16174] [ 1759.194386][T17937] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1759.240366][T16174] [ 1759.240366][T16174] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1759.240366][T16174] [ 1759.716109][T17949] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (dt2814) [ 1759.823730][T17945] loop6: detected capacity change from 0 to 4096 [ 1759.884798][T17945] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1759.929815][T17925] loop9: detected capacity change from 0 to 32768 [ 1759.975592][T17945] ntfs3(loop6): Failed to load $Extend (-22). [ 1759.981716][T17945] ntfs3(loop6): Failed to initialize $Extend. [ 1760.007819][T17925] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1760.140955][T17925] XFS (loop9): Ending clean mount [ 1760.192028][T17925] XFS (loop9): Quotacheck needed: Please wait. [ 1760.201834][T17967] netlink: 156 bytes leftover after parsing attributes in process `syz.7.17797'. [ 1760.397306][T17925] XFS (loop9): Quotacheck: Done. [ 1760.609517][ T9885] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1760.871344][T17983] loop0: detected capacity change from 0 to 4096 [ 1761.084847][T17983] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1761.130805][T17993] loop7: detected capacity change from 0 to 1024 [ 1761.159807][T17983] ntfs3(loop0): ino=1a, mi_enum_attr [ 1761.263386][T17983] ntfs3(loop0): ino=1a, mi_enum_attr [ 1761.268778][T17983] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 1761.428699][T17993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1761.755111][T13161] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1761.775788][T17985] loop8: detected capacity change from 0 to 32768 [ 1761.858502][T17985] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.17807 (17985) [ 1762.018841][T18014] netlink: 28 bytes leftover after parsing attributes in process `syz.6.17819'. [ 1762.026516][T17985] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1762.079731][T18016] loop7: detected capacity change from 0 to 512 [ 1762.097922][T17985] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1762.141683][T17985] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1762.212884][T18016] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1762.293115][T18027] loop2: detected capacity change from 0 to 64 [ 1762.342363][T18016] EXT4-fs warning (device loop7): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 1762.433971][T13161] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.541657][T17985] BTRFS info (device loop8): rebuilding free space tree [ 1762.613383][T17985] BTRFS info (device loop8): disabling free space tree [ 1762.628031][T18046] Bluetooth: MGMT ver 1.23 [ 1762.660522][T17985] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1762.697176][T17985] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1762.746460][T17985] BTRFS info (device loop8): enabling ssd optimizations [ 1762.802831][T17985] BTRFS info (device loop8): enabling disk space caching [ 1762.810006][T17985] BTRFS info (device loop8): force clearing of disk cache [ 1762.840991][T18048] loop0: detected capacity change from 0 to 4096 [ 1762.881915][T18048] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1762.918914][T17985] BTRFS info (device loop8): enabling auto defrag [ 1762.950811][T17985] BTRFS info (device loop8): max_inline set to 727 [ 1763.024141][T18057] RDS: rds_bind could not find a transport for ::c00d:0:20:0, load rds_tcp or rds_rdma? [ 1763.181413][ T49] BTRFS info (device loop8): qgroup scan completed (inconsistency flag cleared) [ 1763.266455][T19489] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1763.291924][T18062] loop7: detected capacity change from 0 to 64 [ 1763.379955][T18066] netlink: 'syz.2.17834': attribute type 3 has an invalid length. [ 1763.390469][T18065] loop6: detected capacity change from 0 to 64 [ 1763.430942][ T30] audit: type=1800 audit(1642.522:2572): pid=18065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.17833" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 1763.761561][T18076] loop6: detected capacity change from 0 to 512 [ 1763.840358][T18076] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1763.931301][T18076] EXT4-fs (loop6): 1 truncate cleaned up [ 1763.960628][T18076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1764.104266][T18076] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.6.17841: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1764.158356][T18087] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17844'. [ 1764.195304][ T30] audit: type=1326 audit(1643.223:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18084 comm="syz.7.17845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34d8efc9 code=0x7ffc0000 [ 1764.318761][ T30] audit: type=1326 audit(1643.223:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18084 comm="syz.7.17845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34d8efc9 code=0x7ffc0000 [ 1764.350490][ T7440] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 1764.380371][T18076] EXT4-fs (loop6): Remounting filesystem read-only [ 1764.473317][T18096] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17849'. [ 1764.500733][ T9776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1764.766382][T18094] loop0: detected capacity change from 0 to 4096 [ 1764.813340][T18104] netlink: 536 bytes leftover after parsing attributes in process `syz.9.17852'. [ 1764.814085][T18094] ntfs3(loop0): Failed to load $MFT (-22). [ 1764.925246][T18104] netlink: 124 bytes leftover after parsing attributes in process `syz.9.17852'. [ 1765.546247][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17859'. [ 1765.574833][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17859'. [ 1765.727388][T18092] loop8: detected capacity change from 0 to 32768 [ 1765.769955][T18092] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.17846 (18092) [ 1765.849845][T18123] netlink: 'syz.7.17862': attribute type 30 has an invalid length. [ 1765.892794][T18092] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1765.905701][T18098] loop2: detected capacity change from 0 to 32768 [ 1765.948489][T18092] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm [ 1765.998022][T18130] netlink: 182 bytes leftover after parsing attributes in process `syz.0.17863'. [ 1766.013783][T18103] loop6: detected capacity change from 0 to 32768 [ 1766.073379][T18103] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.17851 (18103) [ 1766.119133][T18098] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1766.171705][T18103] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1766.194706][T18103] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 1766.247141][T18098] XFS (loop2): Ending clean mount [ 1766.286431][T18092] BTRFS info (device loop8): enabling ssd optimizations [ 1766.329219][T18092] BTRFS info (device loop8): turning off barriers [ 1766.379662][T18092] BTRFS info (device loop8): disabling tree log [ 1766.385970][T18092] BTRFS info (device loop8): turning on async discard [ 1766.397761][T18092] BTRFS info (device loop8): enabling free space tree [ 1766.404700][T18092] BTRFS info (device loop8): max_inline set to 4096 [ 1766.459158][T18103] BTRFS info (device loop6): enabling ssd optimizations [ 1766.487108][T18103] BTRFS info (device loop6): turning on async discard [ 1766.552983][T18103] BTRFS info (device loop6): enabling free space tree [ 1766.605796][T16174] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1766.816565][T18178] netlink: 504 bytes leftover after parsing attributes in process `syz.0.17869'. [ 1766.886133][ T9776] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1767.107110][T18180] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1767.114556][T18180] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1767.157392][T19489] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1767.172032][T18180] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1767.863487][T18198] loop2: detected capacity change from 0 to 512 [ 1767.949412][T18198] EXT4-fs: Ignoring removed oldalloc option [ 1767.994667][T18198] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1768.126623][T18198] EXT4-fs (loop2): 1 truncate cleaned up [ 1768.140215][T18173] loop7: detected capacity change from 0 to 32768 [ 1768.191660][T18198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1768.257339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.406390][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.590942][T16174] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1768.670855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.744048][T18219] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1768.750650][T18219] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1768.791586][T18219] vhci_hcd vhci_hcd.0: Device attached [ 1768.851647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.952101][T18225] loop2: detected capacity change from 0 to 256 [ 1769.001438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.132281][T18225] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 1769.144734][T25923] usb 46-1: SetAddress Request (2) to port 0 [ 1769.174451][T25923] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1769.211293][T18232] loop8: detected capacity change from 0 to 256 [ 1769.266335][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.294443][T18232] exfat: Deprecated parameter 'utf8' [ 1769.344105][T18232] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 1769.358636][T18225] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 1769.410861][T18225] exFAT-fs (loop2): Filesystem has been set read-only [ 1769.424691][T18225] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 1769.790600][ C1] vkms_vblank_simulate: vblank timer overrun [ 1769.800573][T18243] loop0: detected capacity change from 0 to 1024 [ 1769.814895][T18243] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1769.826588][T18243] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1769.861195][T18244] macsec1: entered allmulticast mode [ 1769.876280][T18243] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: inode #32: comm syz.0.17899: iget: special inode unallocated [ 1769.878895][T18244] hsr0: entered allmulticast mode [ 1769.908408][T18243] EXT4-fs (loop0): Remounting filesystem read-only [ 1769.956734][T18244] hsr_slave_0: entered allmulticast mode [ 1769.970262][T18243] EXT4-fs (loop0): no journal found [ 1769.985506][T18243] EXT4-fs (loop0): can't get journal size [ 1769.996016][T18244] hsr_slave_1: entered allmulticast mode [ 1770.014584][T18243] EXT4-fs (loop0): filesystem is read-only [ 1770.022896][T18243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1770.138018][T14144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1770.259189][T18251] loop2: detected capacity change from 0 to 1024 [ 1770.263381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1770.310359][T18251] EXT4-fs: Ignoring removed orlov option [ 1770.391499][T18251] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002] [ 1770.428492][T18251] System zones: 0-1, 3-12 [ 1770.439853][ C1] vkms_vblank_simulate: vblank timer overrun [ 1770.478600][T18230] loop9: detected capacity change from 0 to 32768 [ 1770.485007][T18251] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1770.678447][T18230] MetaData crosses page boundary!! [ 1770.689975][T18230] lblock = 621d00, size = 28672 [ 1770.717316][T18230] CPU: 1 UID: 0 PID: 18230 Comm: syz.9.17892 Not tainted syzkaller #0 PREEMPT(full) [ 1770.717353][T18230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1770.717369][T18230] Call Trace: [ 1770.717381][T18230] [ 1770.717394][T18230] dump_stack_lvl+0x189/0x250 [ 1770.717442][T18230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1770.717489][T18230] ? __pfx__printk+0x10/0x10 [ 1770.717525][T18230] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1770.717562][T18230] __get_metapage+0x9ea/0xde0 [ 1770.717610][T18230] dtSearch+0x591/0x21b0 [ 1770.717661][T18230] ? __kmalloc_noprof+0x432/0x7f0 [ 1770.717720][T18230] jfs_lookup+0x155/0x380 [ 1770.717762][T18230] ? __pfx_jfs_lookup+0x10/0x10 [ 1770.717796][T18230] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1770.717854][T18230] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1770.717887][T18230] ? do_raw_spin_unlock+0x122/0x240 [ 1770.717927][T18230] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1770.717955][T18230] ? _raw_spin_unlock+0x28/0x50 [ 1770.717985][T18230] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1770.718013][T18230] ? d_alloc+0x144/0x190 [ 1770.718045][T18230] lookup_one_qstr_excl+0x131/0x360 [ 1770.718075][T18230] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1770.718108][T18230] filename_create+0x224/0x3c0 [ 1770.718150][T18230] ? __pfx_filename_create+0x10/0x10 [ 1770.718196][T18230] do_mknodat+0x184/0x4d0 [ 1770.718232][T18230] ? __pfx_do_mknodat+0x10/0x10 [ 1770.718263][T18230] ? getname_flags+0x1e5/0x540 [ 1770.718294][T18230] __x64_sys_mknod+0x8c/0xa0 [ 1770.718330][T18230] do_syscall_64+0xfa/0xfa0 [ 1770.718365][T18230] ? lockdep_hardirqs_on+0x9c/0x150 [ 1770.718400][T18230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.718424][T18230] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1770.718452][T18230] ? exc_page_fault+0xab/0x100 [ 1770.718494][T18230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.718518][T18230] RIP: 0033:0x7f43c478efc9 [ 1770.718542][T18230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1770.718564][T18230] RSP: 002b:00007f43c56ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1770.718593][T18230] RAX: ffffffffffffffda RBX: 00007f43c49e5fa0 RCX: 00007f43c478efc9 [ 1770.718612][T18230] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000000080 [ 1770.718628][T18230] RBP: 00007f43c4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1770.718645][T18230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.718661][T18230] R13: 00007f43c49e6038 R14: 00007f43c49e5fa0 R15: 00007ffcda956ec8 [ 1770.718701][T18230] [ 1770.718712][T18230] bread failed! [ 1771.024219][T18230] jfs_lookup: dtSearch returned -5 [ 1771.123766][T16174] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 1771.399305][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.473290][T18249] loop7: detected capacity change from 0 to 40427 [ 1771.495436][T18249] F2FS-fs (loop7): Image doesn't support compression [ 1771.534104][T18249] F2FS-fs (loop7): build fault injection rate: 690 [ 1771.594153][T18274] loop0: detected capacity change from 0 to 256 [ 1771.642555][T18274] exfat: Deprecated parameter 'namecase' [ 1771.662842][T18249] F2FS-fs (loop7): invalid crc value [ 1771.667850][T18274] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 1771.948913][T18281] loop2: detected capacity change from 0 to 512 [ 1771.990711][T18281] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.17914: corrupted in-inode xattr: invalid ea_ino [ 1772.010964][T18281] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.17914: couldn't read orphan inode 15 (err -117) [ 1772.026363][T18249] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1772.036163][T18281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1772.077156][T18220] vhci_hcd: connection reset by peer [ 1772.155971][ C1] vkms_vblank_simulate: vblank timer overrun [ 1772.183522][ T1147] vhci_hcd: stop threads [ 1772.187895][ T1147] vhci_hcd: release socket [ 1772.266773][T18249] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1772.367697][ C1] vkms_vblank_simulate: vblank timer overrun [ 1772.376441][ T1147] vhci_hcd: disconnect device [ 1772.410090][T18284] loop0: detected capacity change from 0 to 736 [ 1772.460589][ C1] vkms_vblank_simulate: vblank timer overrun [ 1772.742332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1772.825592][T13161] syz-executor: attempt to access beyond end of device [ 1772.825592][T13161] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1772.877801][T13161] CPU: 1 UID: 0 PID: 13161 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1772.877854][T13161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1772.877874][T13161] Call Trace: [ 1772.877889][T13161] [ 1772.877903][T13161] dump_stack_lvl+0x189/0x250 [ 1772.877965][T13161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1772.877999][T13161] ? __pfx_queue_work_on+0x10/0x10 [ 1772.878030][T13161] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1772.878070][T13161] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1772.878116][T13161] f2fs_handle_critical_error+0x37c/0x540 [ 1772.878165][T13161] f2fs_write_end_io+0x886/0xb60 [ 1772.878215][T13161] __submit_merged_bio+0x27a/0x6a0 [ 1772.878264][T13161] __submit_merged_write_cond+0x255/0x530 [ 1772.878307][T13161] f2fs_write_data_pages+0x261d/0x3000 [ 1772.878372][T13161] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1772.878411][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.878477][T13161] ? __mod_zone_page_state+0xd7/0x140 [ 1772.878527][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.878563][T13161] ? folios_put_refs+0x58b/0x670 [ 1772.878607][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.878635][T13161] ? __lock_acquire+0xab9/0xd20 [ 1772.878672][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.878700][T13161] ? do_raw_spin_lock+0x121/0x290 [ 1772.878739][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.878769][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.878793][T13161] ? do_raw_spin_unlock+0x122/0x240 [ 1772.878827][T13161] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1772.878855][T13161] do_writepages+0x32e/0x550 [ 1772.878896][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.878927][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.878954][T13161] ? do_raw_spin_unlock+0x122/0x240 [ 1772.878992][T13161] filemap_fdatawrite+0x199/0x240 [ 1772.879028][T13161] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1772.879102][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.879137][T13161] ? do_raw_spin_unlock+0x122/0x240 [ 1772.879173][T13161] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1772.879217][T13161] f2fs_write_checkpoint+0x93e/0x2440 [ 1772.879241][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.879266][T13161] ? __lock_acquire+0xab9/0xd20 [ 1772.879322][T13161] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1772.879405][T13161] kill_f2fs_super+0x2cc/0x6d0 [ 1772.879435][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.879468][T13161] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1772.879512][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.879554][T13161] ? shrinker_free+0x2ce/0x3e0 [ 1772.879587][T13161] deactivate_locked_super+0xbc/0x130 [ 1772.879626][T13161] cleanup_mnt+0x425/0x4c0 [ 1772.879657][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.879684][T13161] ? lockdep_hardirqs_on+0x9c/0x150 [ 1772.879725][T13161] task_work_run+0x1d4/0x260 [ 1772.879769][T13161] ? __pfx_task_work_run+0x10/0x10 [ 1772.879801][T13161] ? __x64_sys_umount+0x122/0x160 [ 1772.879841][T13161] ? exit_to_user_mode_loop+0x40/0x130 [ 1772.879871][T13161] exit_to_user_mode_loop+0xe9/0x130 [ 1772.879901][T13161] do_syscall_64+0x2bd/0xfa0 [ 1772.879937][T13161] ? lockdep_hardirqs_on+0x9c/0x150 [ 1772.879969][T13161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.879992][T13161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1772.880019][T13161] ? exc_page_fault+0xab/0x100 [ 1772.880053][T13161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.880076][T13161] RIP: 0033:0x7f8d34d902f7 [ 1772.880112][T13161] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1772.880134][T13161] RSP: 002b:00007ffe64c5d3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1772.880165][T13161] RAX: 0000000000000000 RBX: 00007f8d34e11d7d RCX: 00007f8d34d902f7 [ 1772.880182][T13161] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe64c5d4a0 [ 1772.880198][T13161] RBP: 00007ffe64c5d4a0 R08: 0000000000000000 R09: 0000000000000000 [ 1772.880213][T13161] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe64c5e530 [ 1772.880229][T13161] R13: 00007f8d34e11d7d R14: 000000000019311d R15: 00007ffe64c5e570 [ 1772.880267][T13161] [ 1772.880884][T13161] F2FS-fs (loop7): Remounting filesystem read-only [ 1772.972101][T16174] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1773.053889][T18272] loop8: detected capacity change from 0 to 32768 [ 1773.255919][ C1] vkms_vblank_simulate: vblank timer overrun [ 1773.395129][T18300] loop6: detected capacity change from 0 to 1764 [ 1773.461203][T18272] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 1773.744136][T19489] ocfs2: Unmounting device (7,8) on (node local) [ 1774.018919][T18305] loop2: detected capacity change from 0 to 8192 [ 1774.668800][T18291] loop9: detected capacity change from 0 to 40427 [ 1774.677441][T18329] loop0: detected capacity change from 0 to 256 [ 1774.721904][T25923] usb 46-1: device descriptor read/8, error -110 [ 1774.743613][T18329] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1774.756895][T18291] F2FS-fs (loop9): invalid crc value [ 1774.849871][ T30] audit: type=1800 audit(1653.063:2575): pid=18329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17934" name="file1" dev="loop0" ino=1049113 res=0 errno=0 [ 1775.098834][T18291] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1775.198801][T25923] usb usb46-port1: attempt power cycle [ 1775.222365][T18291] F2FS-fs (loop9): Start checkpoint disabled! [ 1775.234028][T18291] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1775.245467][T18291] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1775.670284][T18347] loop0: detected capacity change from 0 to 2048 [ 1775.743707][T18347] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1775.806000][T18323] loop2: detected capacity change from 0 to 40427 [ 1775.829388][T18323] F2FS-fs (loop2): Image doesn't support compression [ 1775.837733][T18354] loop7: detected capacity change from 0 to 512 [ 1775.851040][T25923] usb usb46-port1: unable to enumerate USB device [ 1775.869633][T18323] F2FS-fs (loop2): build fault injection rate: 690 [ 1775.884192][T18354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1775.900865][T18323] F2FS-fs (loop2): invalid crc value [ 1775.983209][T18354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1776.274430][T18323] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1776.290272][T13161] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1776.332797][T18323] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1776.352671][T18365] loop0: detected capacity change from 0 to 1024 [ 1776.576043][T16174] syz-executor: attempt to access beyond end of device [ 1776.576043][T16174] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1776.627643][T18372] loop7: detected capacity change from 0 to 128 [ 1776.634107][T16174] CPU: 1 UID: 0 PID: 16174 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1776.634138][T16174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1776.634155][T16174] Call Trace: [ 1776.634166][T16174] [ 1776.634177][T16174] dump_stack_lvl+0x189/0x250 [ 1776.634224][T16174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1776.634260][T16174] ? __pfx_queue_work_on+0x10/0x10 [ 1776.634289][T16174] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1776.634324][T16174] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1776.634369][T16174] f2fs_handle_critical_error+0x37c/0x540 [ 1776.634416][T16174] f2fs_write_end_io+0x886/0xb60 [ 1776.634472][T16174] __submit_merged_bio+0x27a/0x6a0 [ 1776.634521][T16174] __submit_merged_write_cond+0x255/0x530 [ 1776.634566][T16174] f2fs_write_data_pages+0x261d/0x3000 [ 1776.634632][T16174] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1776.634672][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.634700][T16174] ? kernel_text_address+0xa5/0xe0 [ 1776.634771][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.634798][T16174] ? stack_depot_save_flags+0x40/0x860 [ 1776.634846][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.634893][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.634921][T16174] ? __lock_acquire+0xab9/0xd20 [ 1776.634957][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.634984][T16174] ? do_raw_spin_lock+0x121/0x290 [ 1776.635026][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.635059][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.635088][T16174] ? do_raw_spin_unlock+0x122/0x240 [ 1776.635124][T16174] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1776.635152][T16174] do_writepages+0x32e/0x550 [ 1776.635191][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.635224][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.635251][T16174] ? do_raw_spin_unlock+0x122/0x240 [ 1776.635291][T16174] filemap_fdatawrite+0x199/0x240 [ 1776.635329][T16174] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1776.635409][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.635444][T16174] ? do_raw_spin_unlock+0x122/0x240 [ 1776.635485][T16174] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1776.635530][T16174] f2fs_write_checkpoint+0x93e/0x2440 [ 1776.635557][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.635585][T16174] ? __lock_acquire+0xab9/0xd20 [ 1776.635642][T16174] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1776.635735][T16174] kill_f2fs_super+0x2cc/0x6d0 [ 1776.635764][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.635799][T16174] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1776.635851][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.635880][T16174] ? shrinker_free+0x2ce/0x3e0 [ 1776.635914][T16174] deactivate_locked_super+0xbc/0x130 [ 1776.635950][T16174] cleanup_mnt+0x425/0x4c0 [ 1776.635984][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.636012][T16174] ? lockdep_hardirqs_on+0x9c/0x150 [ 1776.636050][T16174] task_work_run+0x1d4/0x260 [ 1776.636095][T16174] ? __pfx_task_work_run+0x10/0x10 [ 1776.636130][T16174] ? __x64_sys_umount+0x122/0x160 [ 1776.636169][T16174] ? exit_to_user_mode_loop+0x40/0x130 [ 1776.636198][T16174] exit_to_user_mode_loop+0xe9/0x130 [ 1776.636223][T16174] do_syscall_64+0x2bd/0xfa0 [ 1776.636257][T16174] ? lockdep_hardirqs_on+0x9c/0x150 [ 1776.636294][T16174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.636317][T16174] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1776.636344][T16174] ? exc_page_fault+0xab/0x100 [ 1776.636380][T16174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.636405][T16174] RIP: 0033:0x7f88fbd902f7 [ 1776.636428][T16174] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1776.636450][T16174] RSP: 002b:00007ffdbcc13aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1776.636494][T16174] RAX: 0000000000000000 RBX: 00007f88fbe11d7d RCX: 00007f88fbd902f7 [ 1776.636512][T16174] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbcc13b60 [ 1776.636528][T16174] RBP: 00007ffdbcc13b60 R08: 0000000000000000 R09: 0000000000000000 [ 1776.636544][T16174] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbcc14bf0 [ 1776.636561][T16174] R13: 00007f88fbe11d7d R14: 0000000000193f16 R15: 00007ffdbcc14c30 [ 1776.636601][T16174] [ 1777.048905][T16174] F2FS-fs (loop2): Remounting filesystem read-only [ 1777.063126][T18372] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1777.097427][T18372] hpfs: filesystem error: improperly stopped [ 1777.116859][T18372] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1777.146916][T18372] hpfs: You really don't want any checks? You are crazy... [ 1777.196143][T18372] hpfs: hpfs_map_sector(): read error [ 1777.214437][T18372] hpfs: code page support is disabled [ 1777.221429][T25923] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1777.234129][T18372] hpfs: hpfs_map_4sectors(): unaligned read [ 1777.247455][T18372] hpfs: hpfs_map_4sectors(): unaligned read [ 1777.253494][T18372] hpfs: filesystem error: unable to find root dir [ 1777.262965][T18377] loop0: detected capacity change from 0 to 512 [ 1777.286887][T18372] hpfs: hpfs_map_4sectors(): unaligned read [ 1777.384024][T25923] usb 10-1: Using ep0 maxpacket: 32 [ 1777.384909][T18377] EXT4-fs (loop0): 1 orphan inode deleted [ 1777.406319][T25923] usb 10-1: config 4 has an invalid interface number: 128 but max is 0 [ 1777.414666][T25923] usb 10-1: config 4 has no interface number 0 [ 1777.421164][T25923] usb 10-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1777.432894][T25923] usb 10-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1777.443089][T25923] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1777.454292][T25923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.472356][T25923] hub 10-1:4.128: USB hub found [ 1777.488933][T18377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1777.529088][T18377] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0000601b, b_size=4096, device loop0 blocksize: 4096 [ 1777.600830][T18377] grow_buffers: requested out-of-range block 144115188075855872 for device loop0 [ 1777.610294][T18377] EXT4-fs warning (device loop0): ext4_resize_fs:2019: can't read last block, resize aborted [ 1777.630153][T18383] loop8: detected capacity change from 0 to 8 [ 1777.688716][T18383] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1777.710923][T25923] hub 10-1:4.128: 2 ports detected [ 1777.716175][T25923] hub 10-1:4.128: Using single TT (err -22) [ 1777.741088][T18383] SQUASHFS error: Failed to read block 0x91: -5 [ 1777.758425][T18383] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1777.791999][T14144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1777.810963][T18383] SQUASHFS error: Unable to read inode 0x11f [ 1778.171714][T25923] usb 10-1: USB disconnect, device number 27 [ 1778.304105][T18392] loop6: detected capacity change from 0 to 4096 [ 1778.332959][T18403] loop7: detected capacity change from 0 to 128 [ 1778.351725][T18403] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1778.352277][T18392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1778.391879][T18403] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1778.494139][ T1147] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1778.536814][ T9776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1779.450631][T18433] loop8: detected capacity change from 0 to 256 [ 1779.473133][T18434] loop9: detected capacity change from 0 to 256 [ 1779.511371][T18433] exFAT-fs (loop8): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 1779.548166][T18434] exfat: Deprecated parameter 'utf8' [ 1779.667379][T18434] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1779.897079][T18411] loop2: detected capacity change from 0 to 32768 [ 1779.932879][T18412] loop0: detected capacity change from 0 to 32768 [ 1779.966763][T18411] (syz.2.17970,18411,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1779.987043][T18412] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17969 (18412) [ 1780.022600][T18411] (syz.2.17970,18411,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1780.077169][T18412] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1780.115447][T18412] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 1780.133128][T18411] JBD2: Ignoring recovery information on journal [ 1780.247212][T18411] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1780.414239][T18412] BTRFS info (device loop0): enabling ssd optimizations [ 1780.466178][T18427] loop6: detected capacity change from 0 to 32768 [ 1780.495708][T18412] BTRFS info (device loop0): turning on async discard [ 1780.532163][T18412] BTRFS info (device loop0): enabling free space tree [ 1780.538322][T18427] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1780.690742][T18427] XFS (loop6): Ending clean mount [ 1780.708783][T18476] loop8: detected capacity change from 0 to 1024 [ 1780.829681][T18476] hfsplus: bad catalog entry type [ 1780.835702][T14144] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1780.851522][T16174] ocfs2: Unmounting device (7,2) on (node local) [ 1781.103955][ T66] hfsplus: b-tree write err: -5, ino 4 [ 1781.219722][T18479] loop9: detected capacity change from 0 to 4096 [ 1781.317286][T18479] NILFS (loop9): invalid segment: Checksum error in segment payload [ 1781.330801][T18479] NILFS (loop9): trying rollback from an earlier position [ 1781.432224][T18479] NILFS (loop9): recovery complete [ 1781.502763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1781.547784][T18487] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1781.624345][ T9776] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1781.935634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1782.022988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1782.495186][ C1] vkms_vblank_simulate: vblank timer overrun [ 1782.689529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1782.987529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1783.272639][T18525] loop8: detected capacity change from 0 to 64 [ 1783.305518][ T2160] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1783.336884][T18522] loop7: detected capacity change from 0 to 4096 [ 1783.451799][T18522] ntfs3(loop7): ino=1a, mi_enum_attr [ 1783.457193][T18522] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1783.487711][T18527] loop6: detected capacity change from 0 to 256 [ 1783.517946][T18527] exfat: Deprecated parameter 'utf8' [ 1783.592002][ T2160] usb 10-1: Using ep0 maxpacket: 8 [ 1783.647264][ C1] vkms_vblank_simulate: vblank timer overrun [ 1783.666344][ T2160] usb 10-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1783.679743][T18527] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 1783.695527][ T2160] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.722044][ T2160] usb 10-1: Product: syz [ 1783.749873][T18529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1783.771211][ T2160] usb 10-1: Manufacturer: syz [ 1783.779980][ T2160] usb 10-1: SerialNumber: syz [ 1783.805643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1783.992726][ C1] vkms_vblank_simulate: vblank timer overrun [ 1784.067272][ C1] vkms_vblank_simulate: vblank timer overrun [ 1784.214972][ C1] vkms_vblank_simulate: vblank timer overrun [ 1784.257853][T18536] loop7: detected capacity change from 0 to 2048 [ 1784.280325][T18536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1784.310237][ T2160] mxuport 10-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1784.344161][ T2160] mxuport 10-1:254.0: probe with driver mxuport failed with error -5 [ 1784.360691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1784.556582][T25924] usb 10-1: USB disconnect, device number 28 [ 1784.651205][T18542] loop7: detected capacity change from 0 to 4096 [ 1784.664236][T18542] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1784.693384][T18542] ntfs3(loop7): ino=19, mi_enum_attr [ 1784.706426][T18542] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1784.792631][T18546] tipc: Started in network mode [ 1784.798912][T18546] tipc: Node identity 1, cluster identity 4711 [ 1784.806182][T18546] tipc: Node number set to 1 [ 1784.811939][T18546] tipc: Cannot configure node identity twice [ 1785.083736][T18554] loop7: detected capacity change from 0 to 4096 [ 1785.095830][T18554] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 1785.489174][T18562] netlink: 'syz.7.18029': attribute type 11 has an invalid length. [ 1785.533317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1785.536573][T18562] netlink: 'syz.7.18029': attribute type 11 has an invalid length. [ 1785.559142][T18562] netlink: 204 bytes leftover after parsing attributes in process `syz.7.18029'. [ 1785.862496][T18552] loop8: detected capacity change from 0 to 32768 [ 1785.881459][T18572] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1785.921955][T18572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1785.936579][T18574] loop7: detected capacity change from 0 to 1024 [ 1785.975179][T18552] ERROR: (device loop8): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 1785.975179][T18552] [ 1786.043010][T18574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1786.259186][T13161] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1786.319577][ C1] vkms_vblank_simulate: vblank timer overrun [ 1786.347582][T18585] loop0: detected capacity change from 0 to 256 [ 1786.434519][T18585] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1787.330939][T18607] loop0: detected capacity change from 0 to 1024 [ 1787.361469][T18581] loop2: detected capacity change from 0 to 40427 [ 1787.402977][T18581] F2FS-fs (loop2): build fault injection rate: 14 [ 1787.456218][T18581] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 1787.503433][T18581] F2FS-fs (loop2): invalid crc value [ 1787.568601][T18589] loop9: detected capacity change from 0 to 32768 [ 1787.589009][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 1787.608444][T18613] loop8: detected capacity change from 0 to 512 [ 1787.625492][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 1787.649297][T18589] (syz.9.18042,18589,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1787.732546][T18589] (syz.9.18042,18589,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1787.794548][T18589] JBD2: Ignoring recovery information on journal [ 1788.017624][T18581] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1788.079988][T18589] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1788.099603][T18581] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 1788.148407][T18628] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (dt2814) [ 1788.203817][T18581] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1788.481576][ T9885] ocfs2: Unmounting device (7,9) on (node local) [ 1788.622177][ C0] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60 [ 1788.632835][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 1788.632869][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1788.632885][ C0] Call Trace: [ 1788.632896][ C0] [ 1788.632907][ C0] dump_stack_lvl+0x189/0x250 [ 1788.632956][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1788.632991][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 1788.633021][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1788.633055][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1788.633100][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 1788.633151][ C0] f2fs_write_end_io+0x886/0xb60 [ 1788.633197][ C0] blk_update_request+0x57e/0xe60 [ 1788.633248][ C0] blk_mq_end_request+0x3e/0x70 [ 1788.633282][ C0] blk_done_softirq+0x10a/0x160 [ 1788.633315][ C0] handle_softirqs+0x286/0x870 [ 1788.633348][ C0] ? run_ksoftirqd+0x9b/0x100 [ 1788.633386][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1788.633417][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1788.633444][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.633478][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1788.633505][ C0] run_ksoftirqd+0x9b/0x100 [ 1788.633537][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1788.633576][ C0] smpboot_thread_fn+0x542/0xa60 [ 1788.633607][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1788.633646][ C0] kthread+0x711/0x8a0 [ 1788.633685][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1788.633713][ C0] ? __pfx_kthread+0x10/0x10 [ 1788.633745][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.633778][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1788.633814][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.633843][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1788.633875][ C0] ? __pfx_kthread+0x10/0x10 [ 1788.633911][ C0] ret_from_fork+0x4bc/0x870 [ 1788.633942][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1788.633978][ C0] ? __switch_to_asm+0x39/0x70 [ 1788.633999][ C0] ? __switch_to_asm+0x33/0x70 [ 1788.634019][ C0] ? __pfx_kthread+0x10/0x10 [ 1788.634055][ C0] ret_from_fork_asm+0x1a/0x30 [ 1788.634095][ C0] [ 1788.634106][ C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1788.680340][T18643] loop0: detected capacity change from 0 to 512 [ 1788.680941][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 1788.680971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1788.680985][ C0] Call Trace: [ 1788.680997][ C0] [ 1788.681008][ C0] dump_stack_lvl+0x189/0x250 [ 1788.681052][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1788.681087][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 1788.681114][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1788.681147][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1788.681191][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 1788.681238][ C0] f2fs_write_end_io+0x886/0xb60 [ 1788.681283][ C0] blk_update_request+0x57e/0xe60 [ 1788.681332][ C0] blk_mq_end_request+0x3e/0x70 [ 1788.681364][ C0] blk_done_softirq+0x10a/0x160 [ 1788.681396][ C0] handle_softirqs+0x286/0x870 [ 1788.681429][ C0] ? run_ksoftirqd+0x9b/0x100 [ 1788.681466][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1788.681497][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1788.681523][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.681556][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1788.681583][ C0] run_ksoftirqd+0x9b/0x100 [ 1788.681613][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1788.681652][ C0] smpboot_thread_fn+0x542/0xa60 [ 1788.681682][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1788.681720][ C0] kthread+0x711/0x8a0 [ 1788.681759][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1788.681787][ C0] ? __pfx_kthread+0x10/0x10 [ 1788.681822][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.681855][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1788.681885][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.681913][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1788.681945][ C0] ? __pfx_kthread+0x10/0x10 [ 1788.681980][ C0] ret_from_fork+0x4bc/0x870 [ 1788.682010][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1788.682045][ C0] ? __switch_to_asm+0x39/0x70 [ 1788.682065][ C0] ? __switch_to_asm+0x33/0x70 [ 1788.682085][ C0] ? __pfx_kthread+0x10/0x10 [ 1788.682120][ C0] ret_from_fork_asm+0x1a/0x30 [ 1788.682162][ C0] [ 1788.682173][ C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1788.865986][T18643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1788.867342][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 1788.867371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1788.867387][ C0] Call Trace: [ 1788.867398][ C0] [ 1788.867409][ C0] dump_stack_lvl+0x189/0x250 [ 1788.867451][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1788.867486][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 1788.867514][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1788.867548][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1788.867592][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 1788.867642][ C0] f2fs_write_end_io+0x886/0xb60 [ 1788.867687][ C0] blk_update_request+0x57e/0xe60 [ 1788.867736][ C0] blk_mq_end_request+0x3e/0x70 [ 1788.867769][ C0] blk_done_softirq+0x10a/0x160 [ 1788.867810][ C0] handle_softirqs+0x286/0x870 [ 1788.867844][ C0] ? run_ksoftirqd+0x9b/0x100 [ 1788.867880][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1788.867912][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1788.867939][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.867972][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1788.867999][ C0] run_ksoftirqd+0x9b/0x100 [ 1788.868033][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1788.868073][ C0] smpboot_thread_fn+0x542/0xa60 [ 1788.868103][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1788.868141][ C0] kthread+0x711/0x8a0 [ 1788.868182][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1788.868210][ C0] ? __pfx_kthread+0x10/0x10 [ 1788.868240][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.868273][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1788.868303][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1788.868331][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1788.868362][ C0] ? __pfx_kthread+0x10/0x10 [ 1788.868397][ C0] ret_from_fork+0x4bc/0x870 [ 1788.868427][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1788.868462][ C0] ? __switch_to_asm+0x39/0x70 [ 1788.868483][ C0] ? __switch_to_asm+0x33/0x70 [ 1788.868504][ C0] ? __pfx_kthread+0x10/0x10 [ 1788.868538][ C0] ret_from_fork_asm+0x1a/0x30 [ 1788.868580][ C0] [ 1788.868647][ C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1789.276071][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 1789.276103][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1789.276119][ C0] Call Trace: [ 1789.276129][ C0] [ 1789.276139][ C0] dump_stack_lvl+0x189/0x250 [ 1789.276185][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1789.276220][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 1789.276247][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1789.276279][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1789.276323][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 1789.276369][ C0] f2fs_write_end_io+0x886/0xb60 [ 1789.276415][ C0] blk_update_request+0x57e/0xe60 [ 1789.276486][ C0] blk_mq_end_request+0x3e/0x70 [ 1789.276528][ C0] blk_done_softirq+0x10a/0x160 [ 1789.276563][ C0] handle_softirqs+0x286/0x870 [ 1789.276600][ C0] ? run_ksoftirqd+0x9b/0x100 [ 1789.276640][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1789.276675][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1789.276703][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1789.276741][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1789.276768][ C0] run_ksoftirqd+0x9b/0x100 [ 1789.276801][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1789.276843][ C0] smpboot_thread_fn+0x542/0xa60 [ 1789.276875][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1789.276915][ C0] kthread+0x711/0x8a0 [ 1789.276954][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1789.276985][ C0] ? __pfx_kthread+0x10/0x10 [ 1789.277019][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1789.277055][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1789.277088][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1789.277118][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1789.277152][ C0] ? __pfx_kthread+0x10/0x10 [ 1789.277190][ C0] ret_from_fork+0x4bc/0x870 [ 1789.277223][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1789.277261][ C0] ? __switch_to_asm+0x39/0x70 [ 1789.277283][ C0] ? __switch_to_asm+0x33/0x70 [ 1789.277304][ C0] ? __pfx_kthread+0x10/0x10 [ 1789.277342][ C0] ret_from_fork_asm+0x1a/0x30 [ 1789.277388][ C0] [ 1789.277400][ C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1789.360227][T18653] loop7: detected capacity change from 0 to 128 [ 1789.421691][T18653] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1789.425473][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 1789.425502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1789.425518][ C0] Call Trace: [ 1789.425529][ C0] [ 1789.425540][ C0] dump_stack_lvl+0x189/0x250 [ 1789.425584][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1789.425619][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 1789.425647][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1789.425680][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1789.425724][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 1789.425776][ C0] f2fs_write_end_io+0x886/0xb60 [ 1789.425821][ C0] blk_update_request+0x57e/0xe60 [ 1789.425870][ C0] blk_mq_end_request+0x3e/0x70 [ 1789.425904][ C0] blk_done_softirq+0x10a/0x160 [ 1789.425936][ C0] handle_softirqs+0x286/0x870 [ 1789.425969][ C0] ? run_ksoftirqd+0x9b/0x100 [ 1789.426006][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1789.426038][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1789.426064][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1789.426097][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1789.426124][ C0] run_ksoftirqd+0x9b/0x100 [ 1789.426154][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1789.426194][ C0] smpboot_thread_fn+0x542/0xa60 [ 1789.426224][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1789.426262][ C0] kthread+0x711/0x8a0 [ 1789.426300][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1789.426329][ C0] ? __pfx_kthread+0x10/0x10 [ 1789.426359][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1789.426391][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1789.426421][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1789.426448][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1789.426479][ C0] ? __pfx_kthread+0x10/0x10 [ 1789.426514][ C0] ret_from_fork+0x4bc/0x870 [ 1789.426544][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1789.426579][ C0] ? __switch_to_asm+0x39/0x70 [ 1789.426600][ C0] ? __switch_to_asm+0x33/0x70 [ 1789.426619][ C0] ? __pfx_kthread+0x10/0x10 [ 1789.426654][ C0] ret_from_fork_asm+0x1a/0x30 [ 1789.426696][ C0] [ 1789.426706][ C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1789.487096][T18653] FAT-fs (loop7): Filesystem has been set read-only [ 1789.499143][T16174] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint [ 1789.566959][T18653] syz.7.18070: attempt to access beyond end of device [ 1789.566959][T18653] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1789.764803][T14144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1789.792270][T18653] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1789.810790][T18653] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1789.857171][T18653] syz.7.18070: attempt to access beyond end of device [ 1789.857171][T18653] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1789.861491][T18657] loop9: detected capacity change from 0 to 256 [ 1789.895121][ T30] audit: type=1800 audit(1666.945:2576): pid=18653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.18070" name="file2" dev="loop7" ino=1049127 res=0 errno=0 [ 1789.920219][T18657] exfat: Deprecated parameter 'namecase' [ 1789.925940][T18657] exfat: Deprecated parameter 'utf8' [ 1789.969077][T18641] loop8: detected capacity change from 0 to 32768 [ 1789.972664][T18657] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1790.022022][T18641] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.18065 (18641) [ 1790.106784][T18641] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1790.146467][T18641] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1790.504460][T18641] BTRFS info (device loop8): enabling ssd optimizations [ 1790.511464][T18641] BTRFS info (device loop8): turning on async discard [ 1790.568819][T18641] BTRFS info (device loop8): enabling free space tree [ 1790.733331][T18641] BTRFS warning (device loop8): can't clear the default_subvol,compress_zstd feature bits while mounted [ 1790.886642][T19489] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1791.665334][ T6268] kernel read not supported for file /media6 (pid: 6268 comm: kworker/1:6) [ 1792.248089][T18693] loop9: detected capacity change from 0 to 32768 [ 1792.498450][T18740] netlink: 'syz.7.18101': attribute type 32 has an invalid length. [ 1792.507138][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18101'. [ 1792.589192][T18740] bond2: option coupled_control: invalid value (133) [ 1792.675350][T18715] loop6: detected capacity change from 0 to 32768 [ 1792.697426][T18715] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.18091 (18715) [ 1792.732874][T18740] bond2 (unregistering): Released all slaves [ 1792.757769][ T2160] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1792.767044][T18715] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1792.800223][T18715] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1792.944315][ T2160] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1792.971391][T18715] BTRFS info (device loop6): enabling ssd optimizations [ 1792.972578][ T2160] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1793.016681][ T2160] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.022937][T18715] BTRFS info (device loop6): turning on async discard [ 1793.039404][ T2160] usb 9-1: config 220 has no interface number 2 [ 1793.045702][ T2160] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1793.058935][ T2160] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1793.065842][ T2160] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1793.070076][T18715] BTRFS info (device loop6): enabling free space tree [ 1793.072806][ T2160] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1793.075422][ T2160] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1793.099153][ T2160] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.110177][ T2160] usb 9-1: Product: syz [ 1793.114776][ T2160] usb 9-1: Manufacturer: syz [ 1793.120044][ T2160] usb 9-1: SerialNumber: syz [ 1793.365731][ T2160] usb 9-1: selecting invalid altsetting 0 [ 1793.372117][ T2160] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1793.399886][ T2160] uvcvideo 9-1:220.0: No valid video chain found. [ 1793.410720][ T9776] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1793.436105][ T2160] usb 9-1: selecting invalid altsetting 0 [ 1793.444783][ T2160] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1793.510781][ T2160] usb 9-1: USB disconnect, device number 50 [ 1794.573488][T18769] loop7: detected capacity change from 0 to 32768 [ 1794.684008][T18769] JBD2: Ignoring recovery information on journal [ 1794.719340][T18771] loop2: detected capacity change from 0 to 32768 [ 1794.802536][T18771] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1794.880140][T18769] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1795.006620][T18771] XFS (loop2): Ending clean mount [ 1795.038341][T18769] (syz.7.18108,18769,1):ocfs2_group_add:495 ERROR: The disk is too old and small. Force to do offline resize. [ 1795.160705][T13161] ocfs2: Unmounting device (7,7) on (node local) [ 1795.298910][T16174] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1795.337140][T25924] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 1795.555379][T25924] usb 9-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1795.573720][T25924] usb 9-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1795.637316][T25924] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1795.672248][T25924] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 1795.697030][T25924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.745888][T25924] usb 9-1: config 0 descriptor?? [ 1795.752427][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18128'. [ 1796.016842][T18824] loop2: detected capacity change from 0 to 256 [ 1796.218195][T18824] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea62c, utbl_chksum : 0x7319d30d) [ 1796.303022][T25924] corsair-cpro 0003:1B1C:1D00.0034: item fetching failed at offset 1/5 [ 1796.366724][T25924] corsair-cpro 0003:1B1C:1D00.0034: probe with driver corsair-cpro failed with error -22 [ 1796.378879][T18836] loop0: detected capacity change from 0 to 256 [ 1796.432387][T18836] exfat: Deprecated parameter 'namecase' [ 1796.454073][T19524] usb 9-1: USB disconnect, device number 51 [ 1796.482686][T18836] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1796.595953][T18812] loop6: detected capacity change from 0 to 32768 [ 1796.725517][T18812] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1796.863420][T18812] XFS (loop6): Ending clean mount [ 1797.098759][ T9776] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1797.674149][T18879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18153'. [ 1798.017614][T18893] loop0: detected capacity change from 0 to 512 [ 1798.088560][T18893] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1798.148455][T18893] EXT4-fs (loop0): 1 truncate cleaned up [ 1798.170328][T18893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1798.283540][T18893] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.0.18158: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1798.365866][T18893] EXT4-fs error (device loop0) in ext4_delete_entry:2739: Corrupt filesystem [ 1798.469191][T18911] tipc: Enabling of bearer rejected, failed to enable media [ 1798.612927][T14144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1798.778615][T18921] ipvlan2: entered promiscuous mode [ 1799.081758][T18935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18177'. [ 1799.383158][T18944] netlink: 48 bytes leftover after parsing attributes in process `syz.7.18181'. [ 1799.622194][T18947] loop6: detected capacity change from 0 to 4096 [ 1799.682534][T18923] loop8: detected capacity change from 0 to 32768 [ 1799.721398][T18923] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.18175 (18923) [ 1799.760517][T18960] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1799.794128][T18947] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 1799.832602][T18923] BTRFS info (device loop8): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1799.856286][T18947] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 1799.871725][T18923] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 1800.160203][T18923] BTRFS info (device loop8): enabling ssd optimizations [ 1800.201191][T18923] BTRFS info (device loop8): turning on async discard [ 1800.208018][T18923] BTRFS info (device loop8): enabling free space tree [ 1800.215274][ T9776] NILFS (loop6): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 1800.258922][ T9776] NILFS (loop6): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 1800.295370][T18923] BTRFS info (device loop8): use lzo compression, level 1 [ 1800.308527][ T9776] NILFS (loop6): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1800.355286][ T9776] NILFS (loop6): nilfs_palloc_commit_free_entry (ino=6): entry number 16 already freed [ 1800.376124][ T9776] NILFS (loop6): nilfs_palloc_commit_free_entry (ino=6): entry number 17 already freed [ 1800.415032][ T9776] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 11 [ 1800.490261][ T9776] Remounting filesystem read-only [ 1800.508738][ T9776] NILFS error (device loop6): nilfs_lookup: deleted inode referenced: 11 [ 1800.565658][T19489] BTRFS info (device loop8): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 1800.581358][T18991] netlink: 'syz.0.18197': attribute type 3 has an invalid length. [ 1800.721392][T18994] loop2: detected capacity change from 0 to 128 [ 1800.883569][T18994] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1800.953423][T18994] EXT4-fs warning (device loop2): verify_group_input:156: Last group not full [ 1801.047599][T19000] loop0: detected capacity change from 0 to 1024 [ 1801.105221][T16174] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1801.118042][T19000] hfsplus: Unknown parameter 'ï{Ü [ 1801.118042][T19000] OB·ìº­è¯—r4´|¡K™¿¦!B‘¸Z"EÂk(–Œañ«Ç3.<8' [ 1801.391403][ T9776] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 1801.664300][T25924] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 1801.684833][T18979] loop9: detected capacity change from 0 to 40427 [ 1801.881671][T25924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1801.917270][T25924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1801.973944][T25924] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1802.017436][T25924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.054166][T25924] usb 9-1: config 0 descriptor?? [ 1802.098658][T18979] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1802.116847][T18979] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1802.134394][ T1111] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.396412][ T9885] syz-executor: attempt to access beyond end of device [ 1802.396412][ T9885] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1802.432221][ T9885] CPU: 1 UID: 0 PID: 9885 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1802.432258][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1802.432279][ T9885] Call Trace: [ 1802.432290][ T9885] [ 1802.432301][ T9885] dump_stack_lvl+0x189/0x250 [ 1802.432349][ T9885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1802.432386][ T9885] ? __pfx_queue_work_on+0x10/0x10 [ 1802.432415][ T9885] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1802.432450][ T9885] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1802.432502][ T9885] f2fs_handle_critical_error+0x37c/0x540 [ 1802.432557][ T9885] f2fs_write_end_io+0x886/0xb60 [ 1802.432611][ T9885] __submit_merged_bio+0x27a/0x6a0 [ 1802.432660][ T9885] __submit_merged_write_cond+0x255/0x530 [ 1802.432708][ T9885] f2fs_write_data_pages+0x261d/0x3000 [ 1802.432781][ T9885] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1802.432870][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.432903][ T9885] ? folio_unqueue_deferred_split+0x93/0x230 [ 1802.432938][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.432966][ T9885] ? folios_put_refs+0x584/0x670 [ 1802.433014][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.433041][ T9885] ? __lock_acquire+0xab9/0xd20 [ 1802.433078][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.433107][ T9885] ? do_raw_spin_lock+0x121/0x290 [ 1802.433149][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.433183][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.433211][ T9885] ? do_raw_spin_unlock+0x122/0x240 [ 1802.433247][ T9885] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1802.433275][ T9885] do_writepages+0x32e/0x550 [ 1802.433316][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.433351][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.433379][ T9885] ? do_raw_spin_unlock+0x122/0x240 [ 1802.433422][ T9885] filemap_fdatawrite+0x199/0x240 [ 1802.433458][ T9885] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1802.433561][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.433598][ T9885] ? do_raw_spin_unlock+0x122/0x240 [ 1802.433642][ T9885] f2fs_sync_dirty_inodes+0x31f/0x830 [ 1802.433693][ T9885] f2fs_write_checkpoint+0x93e/0x2440 [ 1802.433719][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.433747][ T9885] ? __lock_acquire+0xab9/0xd20 [ 1802.433814][ T9885] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1802.433925][ T9885] kill_f2fs_super+0x2cc/0x6d0 [ 1802.433954][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.433992][ T9885] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1802.434046][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.434074][ T9885] ? shrinker_free+0x2ce/0x3e0 [ 1802.434110][ T9885] deactivate_locked_super+0xbc/0x130 [ 1802.434149][ T9885] cleanup_mnt+0x425/0x4c0 [ 1802.434178][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.434207][ T9885] ? lockdep_hardirqs_on+0x9c/0x150 [ 1802.434249][ T9885] task_work_run+0x1d4/0x260 [ 1802.434292][ T9885] ? __pfx_task_work_run+0x10/0x10 [ 1802.434328][ T9885] ? __x64_sys_umount+0x122/0x160 [ 1802.434370][ T9885] ? exit_to_user_mode_loop+0x40/0x130 [ 1802.434401][ T9885] exit_to_user_mode_loop+0xe9/0x130 [ 1802.434428][ T9885] do_syscall_64+0x2bd/0xfa0 [ 1802.434463][ T9885] ? lockdep_hardirqs_on+0x9c/0x150 [ 1802.434497][ T9885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.434530][ T9885] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1802.434559][ T9885] ? exc_page_fault+0xab/0x100 [ 1802.434597][ T9885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.434622][ T9885] RIP: 0033:0x7f43c47902f7 [ 1802.434645][ T9885] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1802.434667][ T9885] RSP: 002b:00007ffcda956158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1802.434694][ T9885] RAX: 0000000000000000 RBX: 00007f43c4811d7d RCX: 00007f43c47902f7 [ 1802.434712][ T9885] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcda956210 [ 1802.434729][ T9885] RBP: 00007ffcda956210 R08: 0000000000000000 R09: 0000000000000000 [ 1802.434746][ T9885] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcda9572a0 [ 1802.434764][ T9885] R13: 00007f43c4811d7d R14: 0000000000199c29 R15: 00007ffcda9572e0 [ 1802.434812][ T9885] [ 1802.864042][ T9885] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1802.969030][ T1111] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.038944][T19028] syz_tun: refused to change device tx_queue_len [ 1803.088178][T25924] usbhid 9-1:0.0: can't add hid device: -71 [ 1803.094690][T25924] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1803.116364][T25924] usb 9-1: USB disconnect, device number 52 [ 1803.163084][T19033] loop0: detected capacity change from 0 to 2048 [ 1803.189343][ T7440] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1803.227820][ T7440] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1803.267552][ T7440] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1803.293988][ T7440] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1803.310828][T19033] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1803.320731][ T7440] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1803.336904][ T1111] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.742360][ T1111] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.960083][T19054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18227'. [ 1803.990007][T19054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18227'. [ 1804.233033][T19057] loop0: detected capacity change from 0 to 1024 [ 1804.382434][T19057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1804.454793][T19056] [ 1804.457182][T19056] ====================================================== [ 1804.464283][T19056] WARNING: possible circular locking dependency detected [ 1804.471305][T19056] syzkaller #0 Not tainted [ 1804.475719][T19056] ------------------------------------------------------ [ 1804.482736][T19056] syz.0.18228/19056 is trying to acquire lock: [ 1804.488890][T19056] ffff888056b1f388 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0 [ 1804.498681][T19056] [ 1804.498681][T19056] but task is already holding lock: [ 1804.506085][T19056] ffff888041c5eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 1804.516135][T19056] [ 1804.516135][T19056] which lock already depends on the new lock. [ 1804.516135][T19056] [ 1804.526546][T19056] [ 1804.526546][T19056] the existing dependency chain (in reverse order) is: [ 1804.535565][T19056] [ 1804.535565][T19056] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1804.544010][T19056] lock_acquire+0x120/0x360 [ 1804.549035][T19056] percpu_down_read_internal+0x48/0x1c0 [ 1804.555109][T19056] ext4_writepages+0x1cc/0x350 [ 1804.560405][T19056] do_writepages+0x32e/0x550 [ 1804.565526][T19056] __writeback_single_inode+0x145/0xff0 [ 1804.571600][T19056] writeback_single_inode+0x1f9/0x6a0 [ 1804.577501][T19056] write_inode_now+0x160/0x1d0 [ 1804.582789][T19056] iput+0x830/0xc50 [ 1804.587120][T19056] ext4_xattr_block_set+0x1fce/0x2ac0 [ 1804.593011][T19056] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 1804.599428][T19056] __ext4_expand_extra_isize+0x30d/0x400 [ 1804.605585][T19056] __ext4_mark_inode_dirty+0x46c/0x700 [ 1804.611570][T19056] ext4_evict_inode+0x80d/0xee0 [ 1804.616944][T19056] evict+0x504/0x9c0 [ 1804.621449][T19056] ext4_orphan_cleanup+0xc20/0x1460 [ 1804.627178][T19056] ext4_fill_super+0x5920/0x61e0 [ 1804.632642][T19056] get_tree_bdev_flags+0x40e/0x4d0 [ 1804.638369][T19056] vfs_get_tree+0x92/0x2b0 [ 1804.643310][T19056] do_new_mount+0x302/0xa10 [ 1804.648337][T19056] __se_sys_mount+0x313/0x410 [ 1804.653526][T19056] do_syscall_64+0xfa/0xfa0 [ 1804.658552][T19056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.664958][T19056] [ 1804.664958][T19056] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 1804.672526][T19056] validate_chain+0xb9b/0x2140 [ 1804.677826][T19056] __lock_acquire+0xab9/0xd20 [ 1804.683114][T19056] lock_acquire+0x120/0x360 [ 1804.688132][T19056] down_write+0x96/0x1f0 [ 1804.692884][T19056] ext4_destroy_inline_data+0x28/0xe0 [ 1804.698782][T19056] ext4_do_writepages+0x526/0x4610 [ 1804.704430][T19056] ext4_writepages+0x205/0x350 [ 1804.709717][T19056] do_writepages+0x32e/0x550 [ 1804.714828][T19056] filemap_flush+0x191/0x230 [ 1804.719937][T19056] ext4_release_file+0x82/0x310 [ 1804.725310][T19056] __fput+0x44c/0xa70 [ 1804.729894][T19056] task_work_run+0x1d4/0x260 [ 1804.735006][T19056] exit_to_user_mode_loop+0xe9/0x130 [ 1804.740806][T19056] do_syscall_64+0x2bd/0xfa0 [ 1804.745920][T19056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.752322][T19056] [ 1804.752322][T19056] other info that might help us debug this: [ 1804.752322][T19056] [ 1804.762534][T19056] Possible unsafe locking scenario: [ 1804.762534][T19056] [ 1804.769966][T19056] CPU0 CPU1 [ 1804.775313][T19056] ---- ---- [ 1804.780668][T19056] rlock(&sbi->s_writepages_rwsem); [ 1804.785956][T19056] lock(&ei->xattr_sem); [ 1804.792806][T19056] lock(&sbi->s_writepages_rwsem); [ 1804.800534][T19056] lock(&ei->xattr_sem); [ 1804.804867][T19056] [ 1804.804867][T19056] *** DEADLOCK *** [ 1804.804867][T19056] [ 1804.813004][T19056] 1 lock held by syz.0.18228/19056: [ 1804.818203][T19056] #0: ffff888041c5eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 1804.828683][T19056] [ 1804.828683][T19056] stack backtrace: [ 1804.834563][T19056] CPU: 1 UID: 0 PID: 19056 Comm: syz.0.18228 Not tainted syzkaller #0 PREEMPT(full) [ 1804.834589][T19056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1804.834603][T19056] Call Trace: [ 1804.834615][T19056] [ 1804.834625][T19056] dump_stack_lvl+0x189/0x250 [ 1804.834662][T19056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1804.834693][T19056] ? __pfx__printk+0x10/0x10 [ 1804.834716][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.834743][T19056] ? print_lock_name+0xde/0x100 [ 1804.834766][T19056] print_circular_bug+0x2ee/0x310 [ 1804.834797][T19056] check_noncircular+0x134/0x160 [ 1804.834828][T19056] validate_chain+0xb9b/0x2140 [ 1804.834854][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.834883][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.834907][T19056] ? __lock_acquire+0xab9/0xd20 [ 1804.834932][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.834959][T19056] __lock_acquire+0xab9/0xd20 [ 1804.834984][T19056] ? ext4_destroy_inline_data+0x28/0xe0 [ 1804.835014][T19056] lock_acquire+0x120/0x360 [ 1804.835035][T19056] ? ext4_destroy_inline_data+0x28/0xe0 [ 1804.835065][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835096][T19056] down_write+0x96/0x1f0 [ 1804.835116][T19056] ? ext4_destroy_inline_data+0x28/0xe0 [ 1804.835146][T19056] ? __pfx_down_write+0x10/0x10 [ 1804.835180][T19056] ? ext4_journal_check_start+0x1cf/0x2b0 [ 1804.835207][T19056] ext4_destroy_inline_data+0x28/0xe0 [ 1804.835239][T19056] ext4_do_writepages+0x526/0x4610 [ 1804.835273][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835299][T19056] ? __pfx___calc_delta+0x10/0x10 [ 1804.835353][T19056] ? rcu_read_lock_sched_held+0x89/0x100 [ 1804.835395][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835440][T19056] ? save_fpregs_to_fpstate+0xa3/0x210 [ 1804.835499][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835527][T19056] ? __lock_acquire+0xab9/0xd20 [ 1804.835553][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835584][T19056] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1804.835620][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835645][T19056] ? look_up_lock_class+0x74/0x170 [ 1804.835674][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835699][T19056] ? register_lock_class+0x51/0x320 [ 1804.835722][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835747][T19056] ? __lock_acquire+0xab9/0xd20 [ 1804.835770][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835799][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835824][T19056] ? rcu_read_lock_any_held+0xb3/0x120 [ 1804.835855][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835884][T19056] ext4_writepages+0x205/0x350 [ 1804.835913][T19056] ? __pfx_ext4_writepages+0x10/0x10 [ 1804.835944][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.835969][T19056] ? __lock_acquire+0xab9/0xd20 [ 1804.835993][T19056] ? __pfx_ext4_writepages+0x10/0x10 [ 1804.836020][T19056] do_writepages+0x32e/0x550 [ 1804.836051][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.836078][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.836103][T19056] ? do_raw_spin_unlock+0x122/0x240 [ 1804.836135][T19056] filemap_flush+0x191/0x230 [ 1804.836164][T19056] ? __pfx_filemap_flush+0x10/0x10 [ 1804.836216][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.836241][T19056] ? rcu_is_watching+0x15/0xb0 [ 1804.836265][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.836293][T19056] ext4_release_file+0x82/0x310 [ 1804.836326][T19056] ? __pfx_ext4_release_file+0x10/0x10 [ 1804.836360][T19056] __fput+0x44c/0xa70 [ 1804.836391][T19056] task_work_run+0x1d4/0x260 [ 1804.836425][T19056] ? __pfx_task_work_run+0x10/0x10 [ 1804.836459][T19056] ? exit_to_user_mode_loop+0x40/0x130 [ 1804.836502][T19056] exit_to_user_mode_loop+0xe9/0x130 [ 1804.836523][T19056] do_syscall_64+0x2bd/0xfa0 [ 1804.836554][T19056] ? lockdep_hardirqs_on+0x9c/0x150 [ 1804.836583][T19056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.836604][T19056] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1804.836629][T19056] ? exc_page_fault+0xab/0x100 [ 1804.836658][T19056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.836679][T19056] RIP: 0033:0x7fe3fe98efc9 [ 1804.836701][T19056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1804.836720][T19056] RSP: 002b:00007ffcb6986908 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1804.836743][T19056] RAX: 0000000000000000 RBX: 000000000019a2d4 RCX: 00007fe3fe98efc9 [ 1804.836758][T19056] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1804.836772][T19056] RBP: 00007fe3febe7da0 R08: 0000000000000001 R09: 00000003b6986bff [ 1804.836787][T19056] R10: 0000001b2e020000 R11: 0000000000000246 R12: 00007fe3febe5fac [ 1804.836802][T19056] R13: 00007fe3febe5fa0 R14: ffffffffffffffff R15: 00007ffcb6986a20 [ 1804.836828][T19056] [ 1805.335147][T19060] loop2: detected capacity change from 0 to 32768 [ 1805.347708][T19056] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1805.376239][T19056] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1805.390384][T19056] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1805.390384][T19056] [ 1805.411871][T19056] EXT4-fs (loop0): Total free blocks count 0 [ 1805.432083][T19056] EXT4-fs (loop0): Free/Dirty block details [ 1805.440809][T19056] EXT4-fs (loop0): free_blocks=68451041280 [ 1805.457749][T19056] EXT4-fs (loop0): dirty_blocks=16 [ 1805.467758][T19056] EXT4-fs (loop0): Block reservation details [ 1805.473843][T19056] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1805.515371][ T1111] bridge_slave_1: left allmulticast mode [ 1805.517387][T14144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1805.521288][ T1111] bridge_slave_1: left promiscuous mode [ 1805.540722][T19060] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1805.549486][T19060] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1805.560478][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.576512][T12912] Bluetooth: hci4: command tx timeout [ 1805.577029][ T1111] bridge_slave_0: left allmulticast mode [ 1805.588061][ T1111] bridge_slave_0: left promiscuous mode [ 1805.593786][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.635315][T19060] XFS (loop2): Ending clean mount [ 1805.645478][T19060] XFS (loop2): Quotacheck needed: Please wait. [ 1805.657830][T19060] XFS (loop2): Quotacheck: Done. [ 1805.691193][ C0] vkms_vblank_simulate: vblank timer overrun [ 1805.702537][T16174] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1805.715513][ T2160] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1805.811389][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1805.824561][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1805.835341][ T1111] bond0 (unregistering): Released all slaves [ 1805.850340][T19031] chnl_net:caif_netlink_parms(): no params data found [ 1805.927074][ C0] vkms_vblank_simulate: vblank timer overrun [ 1805.937417][ T2160] usb 10-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1805.946727][ T2160] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.955004][ T2160] usb 10-1: Product: syz [ 1805.959339][ T2160] usb 10-1: Manufacturer: syz [ 1805.964132][ T2160] usb 10-1: SerialNumber: syz [ 1805.971159][T19031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.978689][T19031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.981470][ T2160] usb 10-1: config 0 descriptor?? [ 1805.992050][T19031] bridge_slave_0: entered allmulticast mode [ 1805.994177][ T2160] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1806.002744][T19031] bridge_slave_0: entered promiscuous mode [ 1806.049111][T19031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1806.057085][T19031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.064776][T19031] bridge_slave_1: entered allmulticast mode [ 1806.072304][T19031] bridge_slave_1: entered promiscuous mode [ 1806.135528][T19031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1806.169555][T19031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1806.198571][T19031] team0: Port device team_slave_0 added [ 1806.207499][T19031] team0: Port device team_slave_1 added [ 1806.254638][ C0] vkms_vblank_simulate: vblank timer overrun [ 1806.266328][ T1111] hsr_slave_0: left promiscuous mode [ 1806.274148][ T1111] hsr_slave_1: left promiscuous mode [ 1806.280317][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1806.287824][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.296085][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1806.303604][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.317604][ T1111] veth1_macvtap: left promiscuous mode [ 1806.323330][ T1111] veth0_macvtap: left promiscuous mode [ 1806.329240][ T1111] veth1_vlan: left promiscuous mode [ 1806.334840][ T1111] veth0_vlan: left promiscuous mode [ 1806.433975][ T2160] sonixb 10-1:0.0: Error writing register 01: -71 [ 1806.440945][ T2160] sonixb 10-1:0.0: probe with driver sonixb failed with error -71 [ 1806.452307][ T2160] usb 10-1: USB disconnect, device number 29 [ 1806.521085][ C0] vkms_vblank_simulate: vblank timer overrun [ 1806.645790][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 1806.686968][ C0] vkms_vblank_simulate: vblank timer overrun [ 1806.726554][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 1806.854869][ C0] vkms_vblank_simulate: vblank timer overrun [ 1806.902171][ C0] vkms_vblank_simulate: vblank timer overrun [ 1806.939515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.021225][T19031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.030947][T19031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.060735][T19031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.083627][T19031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1807.090727][T19031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.119038][T19031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1807.228534][T19031] hsr_slave_0: entered promiscuous mode [ 1807.236052][T19031] hsr_slave_1: entered promiscuous mode [ 1807.242764][T19031] debugfs: 'hsr0' already exists in 'hsr' [ 1807.248868][T19031] Cannot create hsr debugfs directory [ 1807.446937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.486497][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.756416][T19031] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1807.802845][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.812771][T19031] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1807.823298][T19031] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1807.829591][T12912] Bluetooth: hci4: command tx timeout [ 1807.839625][T19031] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1807.927719][T19031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1807.952222][T19031] 8021q: adding VLAN 0 to HW filter on device team0 [ 1807.966278][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.973596][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1807.993919][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.001239][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1808.167258][T19031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1808.207984][T19031] veth0_vlan: entered promiscuous mode [ 1808.221924][T19031] veth1_vlan: entered promiscuous mode [ 1808.248473][T19031] veth0_macvtap: entered promiscuous mode [ 1808.258770][T19031] veth1_macvtap: entered promiscuous mode [ 1808.278110][T19031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1808.293142][T19031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.308798][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.317779][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.329552][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.338661][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.372813][T19031] ieee80211 phy93: Selected rate control algorithm 'minstrel_ht' [ 1808.404165][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.406194][T19031] ieee80211 phy94: Selected rate control algorithm 'minstrel_ht' [ 1808.414275][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1808.445115][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1808.453608][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1810.082010][T12912] Bluetooth: hci4: command tx timeout [ 1812.335451][T12912] Bluetooth: hci4: command tx timeout