last executing test programs: 16m20.033419341s ago: executing program 5 (id=5713): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 16m19.612656057s ago: executing program 5 (id=5717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x284, 0x30, 0x1, 0x0, 0x0, {}, [{0x270, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x1}, {0x4}, {0xc}, {0xc}}}, @m_csum={0xe4, 0x1d, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xe3d5, 0x20000000, 0x81c0, 0x9}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xfcfd, 0x1, 0x5, 0xe1}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8000, 0x7, 0xffff5825, 0x7e2}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfffffffc, 0x20000000, 0x5, 0x1}, 0x7}}]}, {0x46, 0x6, "b1cef20e62b9cad33fce0ee5208e98b46c083a3b87733948b05dcc0a80d0b93c35aca86d986ce9314249c4ce7abf2f02965216a176b0e0b55f3e19e67920c2c2f442"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x158, 0x8, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80, 0x6, 0x2, 0x7, 0x4}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x55, 0x8b, 0xd, 0x3}]}]}, {0xef, 0x6, "7f467fe8fcd7f04d76c8f95c2332748ca86656f590c7329b952883e11d8fed0588c1f8873fc8382930860353e16642e4250b66542ef0a4e6e50794d26357c3331f0b378897060af0960060b7ec3624523019597cef35a0e55414fbfc1f610ba1b62f0d2978581554e2fa1f522d76e657951d9c86308d6fc7b55429868e250dbeedd81effc0e915de10e77a770a89ffb61bef02f343e63729d4ec48ff0e9ba4797489370be60c1b5ca291e69663894623bf353f60c69541897cbe0f7d8925c725fde0c9acf32213fc288388e9d2bdeed298506d911815ad9c0dd6310dddadd5e3030dd5a7d6bfc78e760e9b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x284}}, 0x44004) 16m19.115632835s ago: executing program 5 (id=5722): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) readv(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/51, 0x33}], 0x3) 16m18.672978891s ago: executing program 5 (id=5726): syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x300000c, &(0x7f0000000080)=ANY=[], 0xfe, 0x26e, &(0x7f0000000640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 16m17.996227403s ago: executing program 5 (id=5733): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x7}}) 16m16.816762359s ago: executing program 5 (id=5745): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) mmap(&(0x7f000079d000/0x4000)=nil, 0x4000, 0x200000b, 0x4008032, r0, 0x0) 16m15.979175929s ago: executing program 32 (id=5745): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) mmap(&(0x7f000079d000/0x4000)=nil, 0x4000, 0x200000b, 0x4008032, r0, 0x0) 5.768317448s ago: executing program 1 (id=16363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x8000}]}}}]}, 0x44}}, 0x0) 5.212732774s ago: executing program 1 (id=16375): modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x1000, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000140)=""/4106, 0xfffffffffffffec9) 4.675473969s ago: executing program 1 (id=16381): r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x14b141) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0xffff, 0x6, 0x2, 0x0, 0x10, "f7005b000000000900", "1200", '\x00', "dea07e00", ["0500000400", "47979b000000000200", "0c436d743c97c443084000", "ff81000000008000"]}) 4.269891916s ago: executing program 1 (id=16386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.888425651s ago: executing program 1 (id=16391): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x1241071, 0x0, 0xf7, 0x0, &(0x7f00000000c0)) 3.044648311s ago: executing program 6 (id=16403): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") rename(&(0x7f0000002240)='./file1\x00', &(0x7f0000000040)='.\x02\x00') 3.004967354s ago: executing program 2 (id=16404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c001080"], 0x80}}, 0x0) 2.659091581s ago: executing program 2 (id=16407): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 2.399750411s ago: executing program 4 (id=16410): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$eJzs3V2IXFcBAOBzd3c2u2lrpjW1axrbpNW2/nTTbNb4EzQpCYKhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTUayc87MnZOZzMxmd+7O7vfB3TPnnnPnnDt75879O+cEYMOaWPq7uDhXhHDujZcPvf/AP2avzdnfylFf+jtVitVCCEWMT2Xv995kM7zywfPHuoVFWFj6m+Lh8UutZW8JIZwOO8L5UA/bzl146a2Fx46cOXx259uv7ru4OmsPAAAbyzfO71u8869/vvv2y6/dcyBsas1Px+f1NGOmedx/IB74p+P/idAZL0pT2XSWbypOE7Od+Sa75CuXU8vyTfUofzorv9Yj36Zw4/InS/O6rTeMs7Qd10MxMR9C2NyKT0zMzzfPycPSef10MX/qxMmnn62oosCK+/e9IYQdpeng2c74Wpv2r4E6LHNqrIE6jOV0YHRlXW40Vb7OI5oaW6reAwE05fcLr3M6v7Jwc1rvNjVY+Zcenei+PKyAUW//Q5U/XXH5Qfm/PmOPw8pZr1tTWq/0Pbo1xvP7CPnzS6/8oXO5tvxOR+fc/H5EbcB69rqPMC73F3rVc3LE9ViuXvXPt4v16isxTJ/DVztS7+34/uT/03H5HwPdfZhf/zeZTGt7Ch3x2s28V6Pi/Q+wduXPzTXS/dEof64vT9/UJ32mT/psn/TNfdJv6ZMOG9lvf/DT8GLRvt6Vn9MPez08XWe7LYYfGbI++fXIYcvPn/sd1s2Wnz9PDGvZ748+cfyLTz15ofn8f9Ha/q/G7T2dbtTjd+t8zJCuF+bX1VvP/tc7y5noke+OrD63dcm/9HprZ75ia/t9Qmk/c1095jqX29Ir3/bOfPUs32ycZrL65scnm7Pl0vFH2q+mz2sqW99ath7TWT3SfuX2GOb1gOVI22N6/r/dHqD5/H/aPudCrXj6xMnjj8R42k7/NFnbdG3+7hHXG1g5vb7/6fdrLnS2/7m1Nb82Ud4vbGnPL5r7hdfj+3XOX2iVU5pf+lFLv3Pfnpxdyj9/7Hsnn1qF9YaN7NkfP/edoydPHv++F8t+8bW1UY1hXqTTlrVSHy+GfbFjtYuoeMcErLpdLzQPAh4+8d2jzxx/5vipPXv37llY2PulPYu7lo7rd5WP7stOV1BbYCW1f/SrrgkAAAAAAAAAAAAwqB8ePnThnTe/8G6z/X+7/V9q/5+e/E3t/3+Stf/P28mndvCpHeDtXdKX8mQdrE5n+Wpx+mhW39QNQPFCM7wzW+5jMWyN4xfb/6fi8n5dU33uyubXekSz7gSu6y9lOuuDJB8v8L4Yno3hrwJUqJjtPjuGN+jfuviwtK2n/ilKTXgb+gceH+n/lvdflNp/d+3XqUt7bcbLKFosVr2OQHf/3FD9f/+rveKV18XUe5oabXk/27jbRKPnUfqgI9gArIyqx//8e2iWm65/nvrj12euTSnbpUc795d5/6UwjL+80xlf6+NPrnb5+bh9oy6/6vUf9fifrfHv4v4v7fd67/+yEfPqyyv3Pz+/+G6p2LBt0PLz9U/9QG8drvzLsfy0Ng+Gwcpv/DIrP78hNKD/ZuVvHrD869Z/+/LK/18sP31sD90/aPnNGhcTnfWYzdYj3f/LrxsnV7L1T3173qD8bz7Xbf2XOVDj1Vg+bGTjMs7ssLLjiNZBe7/xf4f9/b/Z8X9blc12a/lzGJ+P8bQjTs855OOdDFv/9HxF+h24M3v/os/vm/F/x9uXY9jv+5DG/03bYz3+5JfiS59lite6fLbrdV8D4+q9DXX/b1TTxeZp0PKWn6m+/qYhpsbkMpZrPWdVcf0bjcbqXtDqo9LCqfzzr/ruc9XnKfdVXH4/+fi/+TF8Pv5vnp6P/5un5+P/5umz8T/0fo/0fPzffHvOx//N0+/K3jcfH3iuT/rHu6QXoZ2+rfvyrdP2u/u8//Y+6Z/ok76zlb6/I0dKv+eGy7fz9Xr/O/qk398n/ZN90j/VJ/2BPukPldLLY0Cn9E9nyxdZ+nqX9j+9Pj9g/crb5/n+w8aR7v/0+v5vbadPl7OMtpbAanjltd0Hn/zNt+rN9v/Tresh6T7egRivxXOjH8V4ft87lOLX0t6M8b9l6VVfbwLa8v4z8t//B/ukA+MrPefl+w0bUDHTfXYM+/Vb1es4n/HymRh+Noafi+HDMZyP4a4Y7o7hwojqx+o4+Prv9r1YtM/3t2Tpgz5PnrcH6ugnKoSwZ8D65NcHhn2ePe/Hb1g3W/4ym4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUZmLp7+LiXBHCuTdePvTEkRO7rs3Z38pRX/o7VYrVWsuF8EgMJ2P4i/jiygfPHyuHV2NYhIVQhKI1Pzx+qVXSLSGE02FHOB/qYdu5Cy+9tfDYkTOHz+58+9V9F1fvEwAAAID17/8BAAD//092Bzk=") mount(0x0, &(0x7f0000000340)='./file0/file1\x00', 0x0, 0x6001, 0x0) 2.319056395s ago: executing program 0 (id=16411): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ppoll(&(0x7f0000000940)=[{r0}], 0x1, &(0x7f0000000980)={0x0, 0x3938700}, 0x0, 0x0) 2.179952563s ago: executing program 2 (id=16413): r0 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 2.079120733s ago: executing program 6 (id=16414): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') lseek(r0, 0x6, 0x3) 1.954521372s ago: executing program 3 (id=16415): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x6}, 0x8) 1.887038574s ago: executing program 0 (id=16416): r0 = syz_open_dev$radio(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000002c0)={0x0, "511299aa76a6d31300", 0x520, 0x6, 0x0, 0x4, 0x2}) 1.703197347s ago: executing program 2 (id=16417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008005}, 0x40800) 1.613430066s ago: executing program 4 (id=16418): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 1.555514474s ago: executing program 3 (id=16419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20000) 1.522659215s ago: executing program 6 (id=16420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 1.520603758s ago: executing program 0 (id=16421): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x0, 0x80, 0x20002, 0x0, 0x0, 0x8}, 0x1c) 1.466421292s ago: executing program 1 (id=16422): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 1.330717417s ago: executing program 2 (id=16423): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xf020000, 0x6, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x675653d35eb1ac7a, 0xfffffffb, '\x00', @value=0x80000001}}) 1.193172689s ago: executing program 3 (id=16424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.151878503s ago: executing program 0 (id=16425): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0098992e9e793afc10c520391b5c6180c537472cb892ff1d72b0a2250577b574809832563411f61815a4a52e59210aee1187d882"], 0xf, 0xa02, &(0x7f0000001ec0)="$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") mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22c0, 0x1) 1.151715757s ago: executing program 6 (id=16426): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 1.150060509s ago: executing program 4 (id=16427): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xdd, 0x9, 0xfffffff9}) 990.950459ms ago: executing program 2 (id=16428): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4459, &(0x7f0000004480)="$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") symlink(&(0x7f0000000440)='./file2\x00', &(0x7f0000000000)='./file2\x00') 953.090031ms ago: executing program 3 (id=16429): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=@ocfs2_parent={0x18, 0x2, {{0x3, 0x80, 0x3}, {0x8001, 0x8001, 0x8}}}, &(0x7f00000002c0), 0x400) 880.619953ms ago: executing program 4 (id=16430): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000003c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x40100, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}}, 0x24) 602.756469ms ago: executing program 6 (id=16431): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001000)={{{@in=@local, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xfffffffffffffe57) 574.987097ms ago: executing program 3 (id=16432): mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0xf88, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 541.907641ms ago: executing program 4 (id=16433): r0 = io_uring_setup(0x21f4, &(0x7f0000000180)={0x0, 0xd5ad, 0x80, 0x0, 0x77}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000540)={0x1, 0x0, 0x0, &(0x7f0000000440)=[{0x0}], &(0x7f0000000480)=[0xffffffffffffffff]}, 0x20) 463.395464ms ago: executing program 0 (id=16434): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)=ANY=[@ANYBLOB='\b']) 184.004332ms ago: executing program 6 (id=16435): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x2, 0x0, 0xc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x20000001000, 0x7, 0xfffffffd}) 97.059024ms ago: executing program 3 (id=16436): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0x1, 0x4) 60.526964ms ago: executing program 4 (id=16437): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, 0x0) 0s ago: executing program 0 (id=16438): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x7d, &(0x7f0000000000), 0x8) kernel console output (not intermixed with test programs): to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1741.420649][ T8180] loop1: detected capacity change from 0 to 256 [ 1741.420836][ T8174] FAT-fs (loop4): Directory bread(block 66) failed [ 1741.472568][ T8174] FAT-fs (loop4): Directory bread(block 67) failed [ 1741.482649][ T8167] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1741.508528][ T8174] FAT-fs (loop4): Directory bread(block 68) failed [ 1741.532171][ T8167] EXT4-fs (loop3): 1 truncate cleaned up [ 1741.553534][ T8176] rock: directory entry would overflow storage [ 1741.563266][ T8174] FAT-fs (loop4): Directory bread(block 69) failed [ 1741.583634][ T8176] rock: sig=0x3b10, size=4, remaining=3 [ 1741.589881][ T8167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1741.608204][ T8174] FAT-fs (loop4): Directory bread(block 70) failed [ 1741.646559][ T8174] FAT-fs (loop4): Directory bread(block 71) failed [ 1741.699576][ T8174] FAT-fs (loop4): Directory bread(block 72) failed [ 1741.740879][ T8174] FAT-fs (loop4): Directory bread(block 73) failed [ 1741.824117][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1741.939395][ T5956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1742.044807][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1742.068582][ T8188] xt_nfacct: accounting object `syz0' does not exist [ 1742.081312][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.129153][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1742.163856][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1742.207359][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1742.238478][ T10] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1742.260009][ T10] usb 7-1: Product: syz [ 1742.273056][ T10] usb 7-1: Manufacturer: syz [ 1742.290413][ T10] usb 7-1: SerialNumber: syz [ 1742.363045][ T10] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input110 [ 1742.528233][ T8200] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1742.587261][ T8200] overlayfs: missing 'lowerdir' [ 1742.742952][ T10] usb 7-1: USB disconnect, device number 37 [ 1742.882173][ T10] appletouch 7-1:1.0: input: appletouch disconnected [ 1743.111877][ T8214] loop2: detected capacity change from 0 to 256 [ 1743.419511][ T8186] loop1: detected capacity change from 0 to 32768 [ 1743.525410][ T8186] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1743.710508][ T8234] loop6: detected capacity change from 0 to 256 [ 1743.730545][ T8186] XFS (loop1): Ending clean mount [ 1744.148927][ T5948] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1744.847582][ T8266] loop4: detected capacity change from 0 to 64 [ 1745.155104][ T8270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14954'. [ 1745.585342][ T8278] loop1: detected capacity change from 0 to 256 [ 1745.627600][T17170] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1745.819868][T17170] usb 4-1: Using ep0 maxpacket: 32 [ 1745.847972][T17170] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 1745.859463][ T8254] loop0: detected capacity change from 0 to 32768 [ 1745.885680][T17170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.913664][T17170] usb 4-1: Product: syz [ 1745.928787][ T8254] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1745.941382][T17170] usb 4-1: Manufacturer: syz [ 1745.962358][T17170] usb 4-1: SerialNumber: syz [ 1746.025206][ T575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1746.043057][T17170] usb 4-1: config 0 descriptor?? [ 1746.100111][T17170] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1746.165091][ T8254] XFS (loop0): Ending clean mount [ 1746.339067][T17170] gspca_sn9c2028: read1 error -71 [ 1746.359414][T17170] gspca_sn9c2028: read1 error -71 [ 1746.393196][T17170] gspca_sn9c2028: read1 error -71 [ 1746.409526][T17170] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1746.449169][T17170] usb 4-1: USB disconnect, device number 52 [ 1746.527966][ T5945] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1746.765036][ T8311] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.14978'. [ 1746.776433][ T8311] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.14978'. [ 1747.421448][ T8323] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1747.702525][ T8329] sctp: [Deprecated]: syz.3.14987 (pid 8329) Use of int in max_burst socket option. [ 1747.702525][ T8329] Use struct sctp_assoc_value instead [ 1747.838088][ T8280] loop2: detected capacity change from 0 to 40427 [ 1747.872077][ T8280] F2FS-fs (loop2): invalid crc value [ 1748.074030][ T8338] loop0: detected capacity change from 0 to 128 [ 1748.143204][ T8338] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1748.186016][ T8338] ext4 filesystem being mounted at /2484/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1748.325830][ T5945] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1748.371571][ T8280] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1748.536268][ T8350] loop6: detected capacity change from 0 to 512 [ 1748.574503][ T8280] F2FS-fs (loop2): Start checkpoint disabled! [ 1748.608872][ T8350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1748.662454][ T8350] ext4 filesystem being mounted at /1471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1748.894541][ T8280] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1748.980537][T19407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1749.616103][ T8370] loop6: detected capacity change from 0 to 64 [ 1749.634338][ T8335] loop4: detected capacity change from 0 to 32768 [ 1749.757609][ T8335] jfs_strtoUCS: char2uni returned -22. [ 1749.799739][ T8335] charset = iso8859-6, char = 0xfc [ 1750.092781][ T8356] loop0: detected capacity change from 0 to 32768 [ 1750.170021][ T8356] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1750.280830][ T8385] netlink: 'syz.4.15007': attribute type 2 has an invalid length. [ 1750.432231][ T8358] loop1: detected capacity change from 0 to 32768 [ 1750.502345][ T8356] XFS (loop0): Ending clean mount [ 1750.525531][ T8358] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1750.548326][ T8393] Sensor A: ================= START STATUS ================= [ 1750.598517][ T8393] Sensor A: Test Pattern: CSC Colorbar [ 1750.610984][ T8393] Sensor A: Show Information: All [ 1750.619029][ T8393] Sensor A: Vertical Flip: true [ 1750.639574][ T8393] Sensor A: Horizontal Flip: false [ 1750.645767][ T8393] Sensor A: Brightness: 128 [ 1750.656774][ T8393] Sensor A: Contrast: 128 [ 1750.666540][ T8393] Sensor A: Hue: 0 [ 1750.670517][ T8393] Sensor A: Saturation: 128 [ 1750.682939][ T8393] Sensor A: Pixel Rate: 160000000 [ 1750.688405][ T8393] Sensor A: Horizontal Blanking: 800 [ 1750.733843][ T8358] XFS (loop1): Ending clean mount [ 1750.755918][ T8393] Sensor A: Vertical Blanking: 3223 [ 1750.779459][ T8393] Sensor A: ================== END STATUS ================== [ 1751.010863][ T8356] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x26/0xe0, xfs_rmapbt block 0x14 [ 1751.054749][ T8356] XFS (loop0): Unmount and run xfs_repair [ 1751.061000][ T8356] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1751.064415][ T5948] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1751.068955][ T8356] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 1751.091543][ T8356] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 1751.100553][ T8356] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1751.115926][ T8356] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 1751.125116][ T8356] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 1751.135771][ T8356] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 1751.166151][ T8356] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 1751.175508][ T8404] xt_TCPMSS: Only works on TCP SYN packets [ 1751.205048][ T8356] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 1751.270118][ T8356] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x14 len 4 error 74 [ 1751.341496][ T8356] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x990 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 1751.357063][ T8356] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 1751.459539][ T5945] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1751.750479][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1752.020351][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1752.065917][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1752.106339][ T10] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1752.121834][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.133547][ T8422] tmpfs: Bad value for 'mpol' [ 1752.172600][ T10] usb 5-1: Product: syz [ 1752.186111][ T184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1752.187785][ T10] usb 5-1: Manufacturer: syz [ 1752.246426][ T10] usb 5-1: SerialNumber: syz [ 1752.612424][ T8433] loop2: detected capacity change from 0 to 256 [ 1752.625807][ T10] usb 5-1: 0:1 : does not exist [ 1752.634079][ T10] usb 5-1: unit 6 not found! [ 1752.643723][ T10] usb 5-1: unit 0 not found! [ 1752.693287][ T8433] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1752.829880][ T10] usb 5-1: USB disconnect, device number 84 [ 1753.040488][ T6163] udevd[6163]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1753.582844][ T8449] loop2: detected capacity change from 0 to 4096 [ 1753.616641][ T8449] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1753.688922][ T8456] loop4: detected capacity change from 0 to 2048 [ 1753.737053][ T8456] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1753.842621][ T8461] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1753.867171][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1753.883678][ T8456] NILFS (loop4): the device already has a read/write mount. [ 1753.963887][ T8465] loop0: detected capacity change from 0 to 256 [ 1754.003089][ T8465] exfat: Deprecated parameter 'namecase' [ 1754.022194][ T8465] exfat: Deprecated parameter 'namecase' [ 1754.066570][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1754.127666][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1754.127996][ T8465] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1754.170697][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1754.235235][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1754.286607][ T10] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1754.326049][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.369680][ T10] usb 2-1: Product: syz [ 1754.389574][ T10] usb 2-1: Manufacturer: syz [ 1754.425746][ T10] usb 2-1: SerialNumber: syz [ 1754.485463][ T10] usb 2-1: config 0 descriptor?? [ 1754.543756][ T10] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1754.863151][ T10] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1755.065860][ T10] usb 2-1: USB disconnect, device number 77 [ 1755.284995][ T8490] loop2: detected capacity change from 0 to 4096 [ 1755.328298][ T8490] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1755.564899][ T8490] ntfs3(loop2): ino=1b, mi_enum_attr [ 1755.596294][ T8490] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1755.720182][ T8509] ksmbd: Unknown IPC event: 1, ignore. [ 1755.996363][ T8515] loop2: detected capacity change from 0 to 64 [ 1756.496938][ T8527] loop6: detected capacity change from 0 to 512 [ 1756.535200][ T8527] EXT4-fs: Ignoring removed nobh option [ 1756.628675][ T8527] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #3: comm syz.6.15069: corrupted inode contents [ 1756.663783][ T8499] loop4: detected capacity change from 0 to 32768 [ 1756.721814][ T8527] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1756.730099][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1756.730140][ C1] EXT4-fs (loop6): initial error at time 2000525427: ext4_do_update_inode:5690: inode 3 [ 1756.730221][ C1] EXT4-fs (loop6): last error at time 2000525427: ext4_do_update_inode:5690: inode 3 [ 1756.730818][ T8527] EXT4-fs (loop6): Remounting filesystem read-only [ 1756.733530][ T8527] Quota error (device loop6): write_blk: dquota write failed [ 1756.733826][ T8527] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota [ 1756.742209][ T8527] EXT4-fs (loop6): 1 truncate cleaned up [ 1756.756265][ T8527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1756.802975][ T8539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15073'. [ 1756.807546][ T8527] ext4 filesystem being mounted at /1490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1756.896420][ T8527] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1756.914244][ T8539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15073'. [ 1756.934638][ T8499] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1757.106020][ T8499] XFS (loop4): Ending clean mount [ 1757.232743][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1757.329676][ T5958] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1757.416184][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1757.418612][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1757.418668][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1757.418712][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1757.418761][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1757.421478][ T10] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1757.421526][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.421565][ T10] usb 4-1: Product: syz [ 1757.421595][ T10] usb 4-1: Manufacturer: syz [ 1757.421625][ T10] usb 4-1: SerialNumber: syz [ 1757.425478][ T10] usb 4-1: config 0 descriptor?? [ 1757.444615][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input111 [ 1757.490211][ T4977] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1757.497043][ T4977] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1757.534191][ T4977] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1757.570461][ T4977] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1757.780274][ T8549] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1757.836422][T31295] usb 4-1: USB disconnect, device number 53 [ 1758.355599][ T575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1758.432799][ T8551] loop1: detected capacity change from 0 to 32768 [ 1758.440494][ T8551] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.15075 (8551) [ 1758.477100][ T8551] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1758.477164][ T8551] BTRFS info (device loop1): using blake2b checksum algorithm [ 1758.633679][ T8551] BTRFS info (device loop1 state EC): setting nodatasum [ 1758.699984][ T8580] loop4: detected capacity change from 0 to 1764 [ 1758.749576][ T8551] BTRFS info (device loop1 state EC): setting nodatacow [ 1758.749625][ T8551] BTRFS info (device loop1 state EC): disabling log replay at mount time [ 1758.749659][ T8551] BTRFS info (device loop1 state EC): enabling free space tree [ 1758.749758][ T8551] BTRFS info (device loop1 state EC): ignoring data csums [ 1759.252448][ T5948] BTRFS info (device loop1 state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1759.862343][ T8596] IPVS: Error joining to the multicast group [ 1760.644324][ T8620] loop3: detected capacity change from 0 to 1764 [ 1760.768518][ T8594] loop4: detected capacity change from 0 to 32768 [ 1761.033566][ T8623] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1761.363337][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15108'. [ 1761.399562][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15108'. [ 1761.430056][ T8636] bridge5: entered promiscuous mode [ 1761.463728][ T8639] loop1: detected capacity change from 0 to 256 [ 1761.473037][ T8636] bridge5: entered allmulticast mode [ 1761.531913][ T8639] exfat: Deprecated parameter 'utf8' [ 1761.577640][ T8639] exfat: Deprecated parameter 'utf8' [ 1761.611404][ T8639] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1761.720607][ T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1761.913186][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1761.953108][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1761.987654][ T24] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1762.019389][ T24] usb 7-1: config 0 has no interface number 0 [ 1762.047943][ T24] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1762.086310][ T8652] loop3: detected capacity change from 0 to 1024 [ 1762.095369][ T24] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1762.110417][ T8652] EXT4-fs: Ignoring removed orlov option [ 1762.130111][ T24] usb 7-1: config 0 interface 88 has no altsetting 0 [ 1762.153385][ T24] usb 7-1: string descriptor 0 read error: -22 [ 1762.187400][ T24] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1762.217912][ T8652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1762.259573][ T24] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1762.332511][ T24] usb 7-1: config 0 descriptor?? [ 1762.428736][ T24] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input112 [ 1762.495327][ T5956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.511791][ T8666] loop1: detected capacity change from 0 to 512 [ 1762.577517][ T8666] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1762.603128][ T8662] loop0: detected capacity change from 0 to 4096 [ 1762.612056][ T8666] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1762.677821][ T8666] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1762.717045][ T8666] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.15123: Failed to acquire dquot type 1 [ 1762.739148][ T8671] loop4: detected capacity change from 0 to 128 [ 1762.770246][ T8666] loop1: lost filesystem error report for type 5 error -5 [ 1762.772560][T31295] usb 7-1: USB disconnect, device number 38 [ 1762.779987][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1762.780022][ C0] EXT4-fs (loop1): last error at time 2000525433: ext4_acquire_dquot:7032 [ 1762.825837][ T8666] EXT4-fs (loop1): 1 truncate cleaned up [ 1762.826142][ T8673] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1762.895644][ T8666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1762.923484][ T6232] udevd[6232]: Error opening device "/dev/input/event4": Input/output error [ 1762.956834][ T6232] udevd[6232]: Unable to EVIOCGABS device "/dev/input/event4" [ 1763.017215][ T8666] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1763.039108][ T6232] udevd[6232]: Unable to EVIOCGABS device "/dev/input/event4" [ 1763.058913][ T8666] EXT4-fs warning (device loop1): read_mmp_block:110: Error -117 while reading MMP block 8 [ 1763.099824][ T8676] bond5: Unable to set down delay as MII monitoring is disabled [ 1763.154127][ T8676] bond5 (unregistering): Released all slaves [ 1763.282360][ T5948] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1763.808453][ T8693] loop6: detected capacity change from 0 to 1024 [ 1763.868839][ T8691] loop0: detected capacity change from 0 to 4096 [ 1763.894597][ T8698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15136'. [ 1764.080159][ T8701] loop2: detected capacity change from 0 to 4096 [ 1764.167416][ T8704] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1764.300667][ T8708] kAFS: unable to lookup cell '/,' [ 1764.423771][ T8701] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1764.490796][ T582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1764.540491][ T8713] loop3: detected capacity change from 0 to 16 [ 1764.586779][ T8713] erofs (device loop3): DAX unsupported by block device. Turning off DAX. [ 1764.634500][ T8713] erofs (device loop3): mounted with root inode @ nid 36. [ 1764.649369][ T8716] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1764.715377][ T8701] Remounting filesystem read-only [ 1764.731172][ T8710] loop6: detected capacity change from 0 to 4096 [ 1764.912327][ T8714] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1764.952207][ T8713] erofs (device loop3): corrupted dir block 1490945 @ nid 36 [ 1764.979286][ T8714] ntfs3(loop4): Failed to load $Extend (-22). [ 1765.049683][ T8714] ntfs3(loop4): Failed to initialize $Extend. [ 1765.142806][ T8710] ntfs3(loop6): ino=5, "/" indx_read_ra [ 1765.218128][ T8710] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1765.446445][ T5958] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22. [ 1765.613559][ T8727] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15151'. [ 1766.545513][ T8756] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1766.838562][ T8766] set_capacity_and_notify: 3 callbacks suppressed [ 1766.838593][ T8766] loop0: detected capacity change from 0 to 512 [ 1766.932583][ T8766] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1766.999188][ T8766] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.15168: bad orphan inode 131083 [ 1767.093104][ T8766] loop0: lost filesystem error report for type 5 error -117 [ 1767.115911][ T8766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1767.268278][ T8766] EXT4-fs error (device loop0): ext4_find_dest_de:2049: inode #2: block 13: comm syz.0.15168: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 1767.519680][ T8780] loop2: detected capacity change from 0 to 2048 [ 1767.569961][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1767.604142][ T8780] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1767.672946][ T8784] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1768.168303][ T8800] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1768.685247][ T8819] netlink: 'syz.4.15194': attribute type 1 has an invalid length. [ 1768.871770][T17170] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1769.008281][ T8830] xt_l2tp: invalid flags combination: 4 [ 1769.041621][T17170] usb 7-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 1769.041677][T17170] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.041725][T17170] usb 7-1: Product: syz [ 1769.041756][T17170] usb 7-1: Manufacturer: syz [ 1769.041787][T17170] usb 7-1: SerialNumber: syz [ 1769.058292][T17170] usb 7-1: config 0 descriptor?? [ 1769.080149][T17170] cypress_cy7c63 7-1:0.0: Cypress CY7C63xxx device now attached [ 1769.336922][T31320] usb 7-1: USB disconnect, device number 39 [ 1769.338365][T31320] cypress_cy7c63 7-1:0.0: Cypress CY7C63xxx device now disconnected [ 1770.058778][ T8855] tmpfs: Bad value for 'size' [ 1770.110582][ T8824] loop0: detected capacity change from 0 to 40427 [ 1770.140277][ T8824] F2FS-fs (loop0): build fault injection rate: 14 [ 1770.172552][ T8824] F2FS-fs (loop0): build fault injection type: 0x0 [ 1770.217490][ T8824] F2FS-fs (loop0): invalid crc value [ 1770.232444][ T8858] loop6: detected capacity change from 0 to 64 [ 1770.645664][ T184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1770.748069][ T8824] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1770.973347][ T8824] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1770.996087][ T6098] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1771.178691][ T6098] usb 4-1: Using ep0 maxpacket: 16 [ 1771.230257][ T6098] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.266399][ T6098] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1771.275309][ T5945] syz-executor: attempt to access beyond end of device [ 1771.275309][ T5945] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1771.372194][ T6098] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1771.391843][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1771.391916][ T5945] Tainted: [L]=SOFTLOCKUP [ 1771.391932][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1771.391959][ T5945] Call Trace: [ 1771.391975][ T5945] [ 1771.391992][ T5945] dump_stack_lvl+0x100/0x190 [ 1771.392046][ T5945] f2fs_stop_checkpoint+0x600/0x9b0 [ 1771.392095][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.392153][ T5945] ? errseq_set+0xe3/0x150 [ 1771.392216][ T5945] ? errseq_set+0xe3/0x150 [ 1771.392283][ T5945] f2fs_write_end_io+0xf59/0x1340 [ 1771.392341][ T5945] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1771.392398][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.392455][ T5945] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1771.392501][ T5945] bio_endio+0x78f/0x8f0 [ 1771.392548][ T5945] submit_bio_noacct+0x64c/0x2000 [ 1771.392681][ T5945] f2fs_submit_write_bio+0x135/0x340 [ 1771.392726][ T5945] __submit_merged_bio+0x331/0x780 [ 1771.392780][ T5945] __submit_merged_write_cond+0x3fe/0x510 [ 1771.392837][ T5945] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1771.392896][ T5945] ? __pfx___might_resched+0x10/0x10 [ 1771.392949][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.393007][ T5945] f2fs_write_cache_pages+0x20e9/0x2630 [ 1771.393086][ T5945] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1771.393145][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.393194][ T5945] ? bpf_ksym_find+0x124/0x1c0 [ 1771.393249][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.393293][ T5945] ? __kasan_check_byte+0x13/0x50 [ 1771.393349][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.393397][ T5945] ? unwind_next_frame+0x3be/0x2090 [ 1771.393448][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.393493][ T5945] ? rcu_is_watching+0x12/0xc0 [ 1771.393546][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.393619][ T5945] ? bpf_ksym_find+0x124/0x1c0 [ 1771.393728][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.393779][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.393825][ T5945] ? add_lock_to_list+0x99/0x110 [ 1771.393885][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.393932][ T5945] ? rcu_is_watching+0x12/0xc0 [ 1771.393992][ T5945] f2fs_write_data_pages+0x799/0x16d0 [ 1771.394061][ T5945] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1771.394115][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.394169][ T5945] ? do_writepages+0x4b5/0x600 [ 1771.394227][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.394278][ T5945] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1771.394336][ T5945] do_writepages+0x278/0x600 [ 1771.394405][ T5945] ? __pfx_do_writepages+0x10/0x10 [ 1771.394466][ T5945] ? do_raw_spin_unlock+0x145/0x1e0 [ 1771.394521][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.394568][ T5945] ? _raw_spin_unlock+0x28/0x50 [ 1771.394645][ T5945] filemap_writeback+0x22d/0x2e0 [ 1771.394712][ T5945] ? __pfx_filemap_writeback+0x10/0x10 [ 1771.394774][ T5945] ? check_noncircular+0x97/0x160 [ 1771.394864][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.394911][ T5945] ? find_held_lock+0x2b/0x80 [ 1771.394967][ T5945] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 1771.395025][ T5945] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 1771.395080][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.395139][ T5945] f2fs_sync_dirty_inodes+0x469/0x990 [ 1771.395215][ T5945] block_operations+0x2a6/0xfc0 [ 1771.395270][ T5945] ? __bfs+0x150/0x2a0 [ 1771.395339][ T5945] ? __pfx_block_operations+0x10/0x10 [ 1771.395396][ T5945] ? check_noncircular+0x97/0x160 [ 1771.395484][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.395537][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.395583][ T5945] ? rcu_is_watching+0x12/0xc0 [ 1771.395646][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.395700][ T5945] f2fs_write_checkpoint+0x582/0x5550 [ 1771.395767][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.395816][ T5945] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1771.395867][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.395915][ T5945] ? __wait_for_common+0x1f3/0x4c0 [ 1771.395972][ T5945] ? __pfx_schedule_timeout+0x10/0x10 [ 1771.396027][ T5945] ? __pfx___wait_for_common+0x10/0x10 [ 1771.396087][ T5945] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1771.396157][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.396205][ T5945] ? rcu_is_watching+0x12/0xc0 [ 1771.396258][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.396305][ T5945] ? kthread_stop+0x280/0x640 [ 1771.396351][ T5945] kill_f2fs_super+0x3f1/0x4a0 [ 1771.396411][ T5945] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1771.396488][ T5945] ? lockdep_hardirqs_on+0x78/0x100 [ 1771.396547][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.396606][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.396670][ T5945] deactivate_locked_super+0xc1/0x1b0 [ 1771.396731][ T5945] deactivate_super+0xe7/0x110 [ 1771.396791][ T5945] cleanup_mnt+0x21f/0x450 [ 1771.396832][ T5945] task_work_run+0x150/0x240 [ 1771.396880][ T5945] ? __pfx_task_work_run+0x10/0x10 [ 1771.396930][ T5945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1771.396978][ T5945] ? rcu_is_watching+0x12/0xc0 [ 1771.397039][ T5945] exit_to_user_mode_loop+0x157/0x670 [ 1771.397087][ T5945] ? rcu_is_watching+0x12/0xc0 [ 1771.397148][ T5945] do_syscall_64+0x666/0x870 [ 1771.397213][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.397255][ T5945] RIP: 0033:0x7f3b4d99e097 [ 1771.397287][ T5945] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1771.397326][ T5945] RSP: 002b:00007fffe76a8d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1771.397363][ T5945] RAX: 0000000000000000 RBX: 00007f3b4da321ca RCX: 00007f3b4d99e097 [ 1771.397388][ T5945] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe76a8e00 [ 1771.397413][ T5945] RBP: 00007fffe76a8e00 R08: 00007fffe76a9e00 R09: 00000000ffffffff [ 1771.397439][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe76a9e90 [ 1771.397463][ T5945] R13: 00007f3b4da321ca R14: 0000000000198c97 R15: 00007fffe76a9ed0 [ 1771.397515][ T5945] [ 1771.397739][ T6098] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1771.797874][ T5945] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1772.194534][ T6098] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1772.208711][ T6098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.246348][ T6098] usb 4-1: Product: syz [ 1772.262887][ T6098] usb 4-1: Manufacturer: syz [ 1772.283651][ T6098] usb 4-1: SerialNumber: syz [ 1772.335926][ T6098] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1772.371891][ T6098] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1772.391412][ T6098] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 1772.407055][ T6098] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1772.432306][ T6098] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1772.460289][ T6098] usb 4-1: found format II with max.bitrate = 3, frame size=7 [ 1772.510177][ T6098] usb 4-1: selecting invalid altsetting 0 [ 1772.534549][ T8909] loop2: detected capacity change from 0 to 4096 [ 1772.547706][ T6098] usb 4-1: selecting invalid altsetting 0 [ 1772.691088][ T8909] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1772.759832][ T10] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1772.805249][ T8909] ntfs3(loop2): Failed to load $Extend (-22). [ 1772.822302][ T6098] usb 4-1: USB disconnect, device number 54 [ 1772.841362][ T8909] ntfs3(loop2): Failed to initialize $Extend. [ 1772.974904][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1772.998272][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 1773.034944][ T6284] udevd[6284]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1773.055815][T31295] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1773.077971][ T10] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1773.105433][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.133760][ T10] usb 2-1: Product: syz [ 1773.144156][ T10] usb 2-1: Manufacturer: syz [ 1773.171255][ T10] usb 2-1: SerialNumber: syz [ 1773.264456][T31295] usb 7-1: Using ep0 maxpacket: 8 [ 1773.282343][ T10] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1773.315831][T31295] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1773.339491][T31295] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.381176][T31295] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1773.424519][T31295] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1773.446622][T31295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.468125][T31295] usb 7-1: Product: syz [ 1773.490772][T31295] usb 7-1: Manufacturer: syz [ 1773.502340][T31295] usb 7-1: SerialNumber: syz [ 1773.507669][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1773.597051][ T8928] netlink: 108 bytes leftover after parsing attributes in process `syz.2.15244'. [ 1773.619611][ T8929] loop4: detected capacity change from 0 to 1024 [ 1773.775268][ T10] usb 2-1: us122l: couldn't allocate write buffer [ 1773.781570][ T8929] hfsplus: inconsistency in B*Tree (226,1,255,1,0) [ 1773.806252][ T10] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1773.824306][T31295] usb 7-1: cannot find UAC_HEADER [ 1773.830613][ T8929] hfsplus: xattr search failed [ 1773.859326][ T10] usb 2-1: USB disconnect, device number 78 [ 1773.953143][ T6163] udevd[6163]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1774.103268][T31295] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1774.106999][ T8935] netlink: 188 bytes leftover after parsing attributes in process `syz.0.15249'. [ 1774.124535][T31295] usb 7-1: USB disconnect, device number 40 [ 1774.309570][ T6163] udevd[6163]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1774.537312][ T8941] netlink: 'syz.1.15252': attribute type 2 has an invalid length. [ 1775.050560][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15260'. [ 1775.583346][ T8937] loop4: detected capacity change from 0 to 32768 [ 1775.720554][ T8937] ialloc: diAlloc returned -5! [ 1776.087067][ T8989] netlink: 784 bytes leftover after parsing attributes in process `syz.0.15277'. [ 1776.117445][ T582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1776.622536][ T9002] netlink: 'syz.1.15283': attribute type 1 has an invalid length. [ 1776.666278][ T9002] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15283'. [ 1776.794368][ T9009] netlink: 'syz.2.15286': attribute type 1 has an invalid length. [ 1777.162358][T31312] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1777.354209][T31312] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1777.399639][T31312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.435842][T31312] usb 4-1: Product: syz [ 1777.451746][T31312] usb 4-1: Manufacturer: syz [ 1777.465714][T31312] usb 4-1: SerialNumber: syz [ 1777.499471][T31312] usb 4-1: config 0 descriptor?? [ 1777.523356][T31312] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 055 [ 1777.605311][ T9033] loop4: detected capacity change from 0 to 2048 [ 1777.787104][ T9033] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1777.978141][T31312] (null): failure reading functionality [ 1778.006373][ T9044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1778.040441][T31312] i2c i2c-1: failure reading functionality [ 1778.098435][T31312] i2c i2c-1: connected i2c-tiny-usb device [ 1778.126170][T31312] usb 4-1: USB disconnect, device number 55 [ 1778.970898][ T9068] bond0: Error: CAN devices cannot be enslaved [ 1779.018629][ T9034] loop6: detected capacity change from 0 to 32768 [ 1779.136565][ T9034] jfs_create: dtInsert returned -EIO [ 1779.163371][ T9070] loop2: detected capacity change from 0 to 512 [ 1779.171520][ T9034] ERROR: (device loop6): txAbort: [ 1779.171520][ T9034] [ 1779.197904][ T9034] ERROR: (device loop6): remounting filesystem as read-only [ 1779.211367][ T9070] EXT4-fs: Ignoring removed bh option [ 1779.248499][ T9070] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1779.270869][ T9070] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #11: block 1: comm syz.2.15316: lblock 0 mapped to illegal pblock 1 (length 1) [ 1779.288971][ T9070] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1779.309682][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1779.322776][ T9070] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1779.325733][ C0] EXT4-fs (loop2): initial error at time 2000525448: ext4_map_blocks:791: inode 11: block 1 [ 1779.339387][ T9070] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.15316: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1779.348885][ C0] EXT4-fs (loop2): last error at time 2000525448: ext4_map_blocks:791: inode 11: block 1 [ 1779.364974][ T9070] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1779.381963][ T9070] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.2.15316: ea_inode dec ref err=-117 [ 1779.441047][ T9070] EXT4-fs (loop2): 1 orphan inode deleted [ 1779.516639][ T9070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1779.927228][ T5952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1780.152352][ T9093] loop6: detected capacity change from 0 to 1024 [ 1780.202766][ T9058] loop1: detected capacity change from 0 to 32768 [ 1780.288658][ T9058] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1780.301186][ T9093] hfsplus: inconsistency in B*Tree (226,1,255,1,0) [ 1780.317215][ T9093] hfsplus: xattr search failed [ 1780.381411][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15330'. [ 1780.430216][ T9058] XFS (loop1): Ending clean mount [ 1780.682515][ T5948] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1780.773470][ T9114] loop4: detected capacity change from 0 to 22 [ 1780.817419][ T9114] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1780.860834][ T9114] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1781.384399][T31312] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1781.434431][ T9124] loop1: detected capacity change from 0 to 4096 [ 1781.598286][T31312] usb 3-1: Using ep0 maxpacket: 16 [ 1781.631532][T31312] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1781.664388][T31312] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1781.697745][T31312] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1781.723680][T31312] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1781.778074][T31312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.807424][T31312] usb 3-1: Product: syz [ 1781.825817][T31312] usb 3-1: Manufacturer: syz [ 1781.842778][T31312] usb 3-1: SerialNumber: syz [ 1781.867434][ T9137] netlink: 'syz.6.15343': attribute type 21 has an invalid length. [ 1781.890973][T31312] usb 3-1: config 0 descriptor?? [ 1781.915896][ T9137] netlink: 156 bytes leftover after parsing attributes in process `syz.6.15343'. [ 1781.995666][ T9106] loop0: detected capacity change from 0 to 32768 [ 1782.086986][ T9106] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1782.273399][ T184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1782.392558][ T9106] XFS (loop0): Ending clean mount [ 1782.490934][T31312] usb 3-1: USB disconnect, device number 93 [ 1782.514659][ T9160] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1783.241298][ T5945] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1783.848941][ T9196] autofs4:pid:9196:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 1783.941544][ T9196] autofs4:pid:9196:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1784.127121][ T9200] binder: 9198:9200 ioctl c00c6211 0 returned -14 [ 1785.364958][ T9246] netlink: 'syz.1.15393': attribute type 21 has an invalid length. [ 1785.490833][ T9251] netlink: 'syz.3.15396': attribute type 49 has an invalid length. [ 1785.537563][ T9251] .`: (slave 30): Releasing backup interface [ 1785.638223][ T9251] : entered promiscuous mode [ 1785.657300][ T9251] : entered allmulticast mode [ 1785.664633][T28089] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 1786.347273][ T9283] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 1786.939781][ T9301] affs: No valid root block on device nbd6 [ 1787.721221][ T9334] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1788.046908][ T9343] loop2: detected capacity change from 0 to 24 [ 1788.424775][ T673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1788.727425][ T9308] loop0: detected capacity change from 0 to 32768 [ 1788.780996][ T9308] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15421 (9308) [ 1788.876715][ T9308] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1788.916927][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15445'. [ 1788.956823][ T9308] BTRFS info (device loop0): using crc32c checksum algorithm [ 1789.131817][ T9383] netlink: 9 bytes leftover after parsing attributes in process `syz.1.15446'. [ 1789.259504][ T9308] BTRFS info (device loop0): checking UUID tree [ 1789.303775][ T9308] BTRFS info (device loop0): allowing degraded mounts [ 1789.353095][ T9308] BTRFS info (device loop0): enabling ssd optimizations [ 1789.393964][ T9308] BTRFS info (device loop0): turning on async discard [ 1789.447932][ T9308] BTRFS info (device loop0): enabling free space tree [ 1789.493131][ T9308] BTRFS info (device loop0): trying to use backup root at mount time [ 1789.545245][ T9308] BTRFS info (device loop0): force zlib compression, level 3 [ 1789.850128][ T9405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1790.026999][ T9308] BTRFS info (device loop0 state M): trying to use backup root at mount time [ 1790.287591][ T5945] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1790.312507][ T9354] loop4: detected capacity change from 0 to 32768 [ 1790.356606][ T9354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15440 (9354) [ 1790.496642][ T9354] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1790.547141][ T9354] BTRFS info (device loop4): using sha256 checksum algorithm [ 1790.592637][T31312] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1790.778859][ T9354] BTRFS info (device loop4): enabling ssd optimizations [ 1790.829066][ T9354] BTRFS info (device loop4): turning on async discard [ 1790.844482][T31312] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1790.854589][ T9354] BTRFS info (device loop4): enabling free space tree [ 1790.909433][T31312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.970237][T31312] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1791.025212][T31312] usb 4-1: config 1 has no interface number 0 [ 1791.064082][T31312] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1791.142968][T31312] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1791.213683][ T5958] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1791.247087][T31312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1791.290179][T31312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.359950][T31312] usb 4-1: Product: syz [ 1791.393052][T31312] usb 4-1: Manufacturer: syz [ 1791.430931][T31312] usb 4-1: SerialNumber: syz [ 1791.541609][ T9459] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1792.147320][T31295] usb 4-1: USB disconnect, device number 56 [ 1793.099300][ T9495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1793.482864][ T9501] loop2: detected capacity change from 0 to 512 [ 1793.638597][ T9501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1793.763809][ T9501] ext4 filesystem being mounted at /2491/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1794.161651][ T5952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1794.577842][ T571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1794.845230][ T9541] loop3: detected capacity change from 0 to 1024 [ 1794.865799][ T9542] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1794.875399][ T9541] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1794.902233][ T9541] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1794.934507][ T9541] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.15502: iget: special inode unallocated [ 1794.962156][ T9546] loop2: detected capacity change from 0 to 128 [ 1794.976403][ T9541] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1794.976718][ T9541] EXT4-fs (loop3): Remounting filesystem read-only [ 1794.985973][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1794.986010][ C0] EXT4-fs (loop3): initial error at time 2000525719: ext4_get_journal_inode:5896: inode 32 [ 1794.986068][ C0] EXT4-fs (loop3): last error at time 2000525719: ext4_get_journal_inode:5896: inode 32 [ 1795.038098][ T9541] EXT4-fs (loop3): no journal found [ 1795.044670][ T9546] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1795.080984][ T9541] EXT4-fs (loop3): can't get journal size [ 1795.099207][ T9546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1795.144576][ T9541] EXT4-fs (loop3): filesystem is read-only [ 1795.152389][T31312] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1795.193815][ T9541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1795.327026][T31312] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1795.340009][T31312] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1795.350308][T31312] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1795.353435][ T9555] loop4: detected capacity change from 0 to 512 [ 1795.368179][T31312] usb 7-1: Manufacturer: syz [ 1795.381892][T31312] usb 7-1: SerialNumber: syz [ 1795.435145][ T9555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1795.468119][ T9555] ext4 filesystem being mounted at /2557/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1795.647232][ T5956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1795.684618][T31312] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 1795.713180][ T9568] loop0: detected capacity change from 0 to 8 [ 1795.768570][T31312] usb 7-1: USB disconnect, device number 41 [ 1795.815017][ T5958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1795.837472][ T9568] SQUASHFS error: Failed to read block 0x8f: -5 [ 1795.890329][ T30] audit: type=1800 audit(2000525720.441:318): pid=9568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.15513" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1796.282769][ T9580] loop0: detected capacity change from 0 to 64 [ 1796.791438][ T9598] loop3: detected capacity change from 0 to 8 [ 1796.791832][ T9597] loop2: detected capacity change from 0 to 256 [ 1796.892714][ T9597] exfat: Deprecated parameter 'utf8' [ 1796.920626][ T9597] exfat: Deprecated parameter 'utf8' [ 1797.089643][ T9606] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15533'. [ 1797.110799][ T9597] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1797.256067][ T9612] netlink: 'syz.3.15535': attribute type 28 has an invalid length. [ 1797.303076][ T9612] netlink: 'syz.3.15535': attribute type 3 has an invalid length. [ 1797.347274][ T9612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15535'. [ 1797.505489][ T9618] netlink: 72 bytes leftover after parsing attributes in process `syz.6.15538'. [ 1797.615718][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15541'. [ 1797.686124][ T9622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15541'. [ 1797.707258][ T9626] netlink: 'syz.3.15542': attribute type 5 has an invalid length. [ 1798.019928][ T9635] loop3: detected capacity change from 0 to 736 [ 1798.562280][ T9655] loop6: detected capacity change from 0 to 8 [ 1798.674348][ T9655] SQUASHFS error: Failed to read block 0x8f: -5 [ 1798.706881][ T6098] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1798.756525][ T30] audit: type=1800 audit(2000525723.128:319): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.15558" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 1798.862828][ T9661] loop1: detected capacity change from 0 to 136 [ 1798.908178][ T9661] Attempt to read inode for relocated directory [ 1798.932240][ T6098] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1798.970158][ T6098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.019806][ T6098] usb 1-1: Product: syz [ 1799.039241][ T6098] usb 1-1: Manufacturer: syz [ 1799.061686][ T6098] usb 1-1: SerialNumber: syz [ 1799.096676][ T6098] usb 1-1: config 0 descriptor?? [ 1799.148304][ T6098] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 078 [ 1799.314044][ T9672] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1799.359102][ T6098] (null): failure setting delay to 10us [ 1799.391489][ T6098] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1799.448980][ T6098] usb 1-1: USB disconnect, device number 78 [ 1799.686316][ T9649] loop2: detected capacity change from 0 to 32768 [ 1799.737406][ T9649] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15554 (9649) [ 1799.792429][ T9679] loop6: detected capacity change from 0 to 128 [ 1799.808579][ T9649] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1799.845566][ T9679] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1799.856900][ T9649] BTRFS info (device loop2): using crc32c checksum algorithm [ 1799.898860][ T9679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1799.969482][ T9658] loop4: detected capacity change from 0 to 32768 [ 1800.029658][ T9658] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15559 (9658) [ 1800.059370][ T184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1800.093813][ T9697] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1800.108316][ T9697] [U] J"—e:ÀÆ" [ 1800.132289][ T9658] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1800.159859][ T9649] BTRFS info (device loop2): checking UUID tree [ 1800.193662][ T9658] BTRFS info (device loop4): using sha256 checksum algorithm [ 1800.205158][ T9649] BTRFS info (device loop2): allowing degraded mounts [ 1800.255550][ T9649] BTRFS info (device loop2): enabling ssd optimizations [ 1800.292518][ T9649] BTRFS info (device loop2): turning on async discard [ 1800.350987][ T9649] BTRFS info (device loop2): enabling free space tree [ 1800.385857][ T9649] BTRFS info (device loop2): trying to use backup root at mount time [ 1800.429011][ T9649] BTRFS info (device loop2): force zlib compression, level 3 [ 1800.500496][ T9658] BTRFS info (device loop4): enabling ssd optimizations [ 1800.515941][ T9721] netlink: 'syz.3.15574': attribute type 1 has an invalid length. [ 1800.526168][ T9658] BTRFS info (device loop4): turning on async discard [ 1800.543925][ T9658] BTRFS info (device loop4): enabling free space tree [ 1800.871697][ T9729] netlink: 'syz.3.15577': attribute type 11 has an invalid length. [ 1800.934915][ T5958] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1800.947410][ T9729] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.15577'. [ 1801.062452][ T9649] BTRFS info (device loop2 state M): trying to use backup root at mount time [ 1801.343114][ T9731] loop1: detected capacity change from 0 to 4096 [ 1801.398207][ T9731] EXT4-fs (loop1): fragment/cluster size (1024) != block size (4096) [ 1801.429376][ T5952] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1801.451817][ T9738] loop3: detected capacity change from 0 to 64 [ 1801.560934][ T9738] syz.3.15582: attempt to access beyond end of device [ 1801.560934][ T9738] loop3: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1801.613029][ T9738] Buffer I/O error on dev loop3, logical block 8388608, async page read [ 1801.702678][ T9738] syz.3.15582: attempt to access beyond end of device [ 1801.702678][ T9738] loop3: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1801.816149][ T9738] Buffer I/O error on dev loop3, logical block 8388608, async page read [ 1801.923598][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1802.130136][ T10] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 1802.163703][ T10] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 1802.207257][ T10] usb 2-1: config 0 has no interface number 0 [ 1802.242012][ T10] usb 2-1: too many endpoints for config 0 interface 39 altsetting 147: 48, using maximum allowed: 30 [ 1802.322259][ T10] usb 2-1: config 0 interface 39 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1802.412205][ T10] usb 2-1: config 0 interface 39 has no altsetting 0 [ 1802.424566][ T9755] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1802.452911][ T10] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1802.507609][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.565893][ T10] usb 2-1: config 0 descriptor?? [ 1802.788197][ T10] usb 2-1: string descriptor 0 read error: -71 [ 1802.829751][ T10] ftdi_sio 2-1:0.39: FTDI USB Serial Device converter detected [ 1802.871602][ T10] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 1802.925776][ T10] usb 2-1: USB disconnect, device number 79 [ 1802.984626][ T10] ftdi_sio 2-1:0.39: device disconnected [ 1803.711621][ T9748] loop6: detected capacity change from 0 to 32768 [ 1803.855883][ T9748] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1803.860888][ T9790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1804.186422][ T9748] XFS (loop6): Ending clean mount [ 1804.394800][ T9802] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1804.431514][ T9802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1804.506249][ T9805] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 1804.679892][T19407] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1804.844622][ T9807] loop2: detected capacity change from 0 to 4096 [ 1804.947053][ T9818] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1804.963647][ T9771] loop3: detected capacity change from 0 to 32768 [ 1805.043657][ T9771] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15597 (9771) [ 1805.177787][ T9771] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1805.229182][ T9771] BTRFS info (device loop3): using crc32c checksum algorithm [ 1805.635645][ T9771] BTRFS info (device loop3): checking UUID tree [ 1805.671383][ T9771] BTRFS info (device loop3): allowing degraded mounts [ 1805.692421][ T9771] BTRFS info (device loop3): enabling ssd optimizations [ 1805.732594][ T9771] BTRFS info (device loop3): turning on async discard [ 1805.760793][ T9771] BTRFS info (device loop3): enabling free space tree [ 1805.797307][ T9771] BTRFS info (device loop3): trying to use backup root at mount time [ 1805.907923][ T9771] BTRFS info (device loop3): force zlib compression, level 3 [ 1806.202355][ T673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1806.389627][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1806.404649][ T9771] BTRFS info (device loop3 state M): trying to use backup root at mount time [ 1806.614075][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1806.650413][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1806.672666][ T5956] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1806.695170][ T10] usb 3-1: config 0 has no interface number 0 [ 1806.744175][ T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1806.776399][ T10] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1806.811273][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1806.881481][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1806.919427][ T9868] netlink: 176980 bytes leftover after parsing attributes in process `syz.1.15626'. [ 1806.921028][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.958986][ T9871] loop4: detected capacity change from 0 to 256 [ 1806.966686][ T10] usb 3-1: Product: syz [ 1806.970964][ T10] usb 3-1: Manufacturer: syz [ 1806.977651][ T9871] exfat: Deprecated parameter 'utf8' [ 1806.999849][ T10] usb 3-1: SerialNumber: syz [ 1807.018748][ T9871] exfat: Deprecated parameter 'namecase' [ 1807.053742][ T10] usb 3-1: config 0 descriptor?? [ 1807.069228][ T9871] exfat: Deprecated parameter 'namecase' [ 1807.092230][ T9851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1807.131771][ T9851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1807.271503][ T9871] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1807.449528][ T9851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1807.460129][ T9879] openvswitch: netlink: Multiple metadata blocks provided [ 1807.490734][ T9851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1807.784108][ T10] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1807.868985][ T10] usb 3-1: USB disconnect, device number 94 [ 1807.950407][ T9881] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1808.059829][ T9883] 8021q: adding VLAN 0 to HW filter on device .` [ 1808.325659][ T9883] vlan0: left promiscuous mode [ 1808.416017][ T9883] veth1_macvtap: entered promiscuous mode [ 1808.639695][ T9883] ip6erspan0: left allmulticast mode [ 1808.722781][ T9883] bridge2: left promiscuous mode [ 1808.722822][ T9883] bridge2: left allmulticast mode [ 1808.770457][ T9883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1808.778217][ T9883] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1809.131802][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15646'. [ 1809.149101][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1809.176843][ T9918] nbd: must specify a device to reconfigure [ 1809.314420][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1809.321661][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1809.326806][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.326849][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1809.326915][ T10] usb 1-1: No eUSB2 isoc ep 0x81 companion for config 1 interface 0 altsetting 0 [ 1809.336149][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1809.336200][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.336239][ T10] usb 1-1: Product: syz [ 1809.336269][ T10] usb 1-1: Manufacturer: syz [ 1809.336299][ T10] usb 1-1: SerialNumber: syz [ 1809.352952][ T582] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1809.367179][ T582] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1809.378857][T31295] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1809.429160][ T9921] sctp: [Deprecated]: syz.3.15650 (pid 9921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1809.429160][ T9921] Use struct sctp_sack_info instead [ 1809.596061][T31295] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1809.658514][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1809.658580][ T10] cdc_ncm 1-1:1.0: bind() failure [ 1809.742451][ T10] usb 1-1: USB disconnect, device number 79 [ 1809.781256][ T9931] loop6: detected capacity change from 0 to 736 [ 1809.858476][ T9933] netlink: 'syz.4.15656': attribute type 8 has an invalid length. [ 1810.112186][ T9935] loop3: detected capacity change from 0 to 2048 [ 1810.114988][ T9935] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27481, location=27481 [ 1810.137959][ T9935] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1810.222579][T31295] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1810.611713][ T9947] loop6: detected capacity change from 0 to 64 [ 1811.127453][ T9961] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 1811.166936][ T9961] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 1811.198616][ T9961] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1811.566482][ T30] audit: type=1326 audit(2000525735.122:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.1.15677" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd9ce59 code=0x7ffc0000 [ 1811.630398][ T9972] dummy0: left promiscuous mode [ 1811.647474][ T9972] dummy0: left allmulticast mode [ 1811.677270][ T30] audit: type=1326 audit(2000525735.150:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.1.15677" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd9ce59 code=0x7ffc0000 [ 1811.781052][ T30] audit: type=1326 audit(2000525735.159:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.1.15677" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd9ce59 code=0x7ffc0000 [ 1811.861709][ T30] audit: type=1326 audit(2000525735.169:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.1.15677" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd9ce59 code=0x7ffc0000 [ 1811.944359][ T30] audit: type=1326 audit(2000525735.169:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.1.15677" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f0f0cd9ce59 code=0x7ffc0000 [ 1812.041967][ T9972] 0·: left allmulticast mode [ 1812.053618][ T30] audit: type=1326 audit(2000525735.169:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.1.15677" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cd9ce59 code=0x7ffc0000 [ 1812.075121][ T9972] hsr_slave_0: left allmulticast mode [ 1812.121904][ T9972] hsr_slave_1: left allmulticast mode [ 1812.140264][ T30] audit: type=1326 audit(2000525735.169:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.1.15677" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0f0cd9ce59 code=0x7ffc0000 [ 1812.222972][ T30] audit: type=1326 audit(2000525735.169:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.1.15677" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0f0cd9ce59 code=0x7ffc0000 [ 1812.273984][ T9972] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1812.307874][ T9972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1812.349936][ T673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1812.360285][ T9972] xfrm1: left allmulticast mode [ 1812.452926][ T9972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1812.526521][ T9972] vti0: left promiscuous mode [ 1812.563870][ T9972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1812.655994][ T9972] bridge4: left promiscuous mode [ 1812.675617][ T9972] bridge4: left allmulticast mode [ 1812.705850][ T9972] bridge5: left promiscuous mode [ 1812.719764][ T9996] loop3: detected capacity change from 0 to 2048 [ 1812.723273][ T9972] bridge5: left allmulticast mode [ 1812.743109][ T9937] loop2: detected capacity change from 0 to 32768 [ 1812.761568][ T9976] loop4: detected capacity change from 0 to 32768 [ 1812.791505][ T9976] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15675 (9976) [ 1812.798917][ T9996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1812.843029][ T9996] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1812.856305][ T9937] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15658 (9937) [ 1812.866421][ T9976] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1812.889206][ T9976] BTRFS info (device loop4): using crc32c checksum algorithm [ 1812.902093][ T9987] ip6gre1: entered promiscuous mode [ 1812.909585][ T9987] ip6gre1: entered allmulticast mode [ 1813.154255][ T5956] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1813.179094][ T9976] BTRFS info (device loop4): checking UUID tree [ 1813.309622][ T9976] BTRFS info (device loop4): allowing degraded mounts [ 1813.316863][ T9976] BTRFS info (device loop4): enabling ssd optimizations [ 1813.324695][ T9976] BTRFS info (device loop4): turning on async discard [ 1813.333615][ T9976] BTRFS info (device loop4): enabling free space tree [ 1813.341431][ T9976] BTRFS info (device loop4): trying to use backup root at mount time [ 1813.349907][ T9976] BTRFS info (device loop4): force zlib compression, level 3 [ 1813.373248][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1813.403225][ T9937] BTRFS error (device loop2): open_ctree failed: -4 [ 1813.433526][T10015] geneve1: entered promiscuous mode [ 1813.761199][ T9976] BTRFS info (device loop4 state M): trying to use backup root at mount time [ 1814.048829][ T5958] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1814.812526][T10044] netlink: 'syz.2.15701': attribute type 2 has an invalid length. [ 1814.835846][T10044] netlink: 'syz.2.15701': attribute type 1 has an invalid length. [ 1815.192107][T10046] loop2: detected capacity change from 0 to 512 [ 1815.205324][T10046] EXT4-fs: Ignoring removed nobh option [ 1815.222925][T10046] EXT4-fs: Ignoring removed bh option [ 1815.257655][T10046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1815.325384][T10046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 1815.348259][T10046] ext4 filesystem being mounted at /2517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1815.441594][T10046] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1815.475008][T10046] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1815.509271][T10046] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.15702: Failed to acquire dquot type 0 [ 1815.651872][ T5952] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 1816.411157][T10054] loop2: detected capacity change from 0 to 32768 [ 1816.424314][T10054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15705 (10054) [ 1816.473375][T10054] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1816.488345][T10054] BTRFS info (device loop2): using sha256 checksum algorithm [ 1816.580994][T10054] BTRFS info (device loop2): enabling ssd optimizations [ 1816.599880][T10054] BTRFS info (device loop2): turning on async discard [ 1816.620026][T10054] BTRFS info (device loop2): enabling free space tree [ 1816.698669][ T5952] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1817.541690][T10080] netlink: 4975 bytes leftover after parsing attributes in process `syz.2.15710'. [ 1817.571651][T10080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1818.501402][ T673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1819.576585][T10032] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1820.149934][T10123] netlink: 'syz.1.15730': attribute type 7 has an invalid length. [ 1820.331090][T10123] : entered promiscuous mode [ 1820.808103][T10132] loop4: detected capacity change from 0 to 4096 [ 1820.848720][T10132] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1820.887861][T10132] ntfs3(loop4): ino=3, mi_enum_attr [ 1821.095372][T10132] ntfs3(loop4): ino=5, "/" indx_read_ra [ 1821.119860][T10132] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1821.178247][T10117] loop6: detected capacity change from 0 to 32768 [ 1821.228603][T10117] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.15727 (10117) [ 1821.323590][T10117] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1821.359789][T10117] BTRFS info (device loop6): using sha256 checksum algorithm [ 1821.434921][T10124] syz.2.15732 (10124): drop_caches: 2 [ 1821.573931][T10127] loop3: detected capacity change from 0 to 32768 [ 1821.620389][T10117] BTRFS info (device loop6): rebuilding free space tree [ 1821.667210][T10127] BTRFS info: device /dev/loop3 (7:3) using temp-fsid f9106006-d6f3-4925-8da5-c960378f1b35 [ 1821.713093][T10127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15734 (10127) [ 1821.750739][T10160] loop1: detected capacity change from 0 to 256 [ 1821.818150][T10127] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1821.834662][T10160] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1821.876893][T10127] BTRFS info (device loop3): using sha256 checksum algorithm [ 1821.928213][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1821.954133][T10117] BTRFS info (device loop6): enabling ssd optimizations [ 1822.026217][T10117] BTRFS info (device loop6): using spread ssd allocation scheme [ 1822.080644][T10127] BTRFS info (device loop3): enabling ssd optimizations [ 1822.090197][T10127] BTRFS info (device loop3): turning on async discard [ 1822.115017][T10117] BTRFS info (device loop6): turning on async discard [ 1822.124246][T10117] BTRFS info (device loop6): enabling free space tree [ 1822.131455][T10117] BTRFS info (device loop6): force clearing of disk cache [ 1822.147585][T10127] BTRFS info (device loop3): enabling free space tree [ 1822.330005][ T5956] BTRFS info (device loop3): last unmount of filesystem f9106006-d6f3-4925-8da5-c960378f1b35 [ 1822.499620][T10140] loop0: detected capacity change from 0 to 32768 [ 1822.594811][T19407] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1822.617423][T10189] ip6gre1: entered promiscuous mode [ 1822.622921][T10189] ip6gre1: entered allmulticast mode [ 1822.765724][T10140] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1823.250866][T10140] XFS (loop0): Ending clean mount [ 1823.341959][T10212] loop4: detected capacity change from 0 to 1024 [ 1823.377365][T10140] XFS (loop0): Quotacheck needed: Please wait. [ 1823.725960][T10221] netlink: 'syz.6.15760': attribute type 10 has an invalid length. [ 1823.863422][T10221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1824.017500][T10221] team0: Port device netdevsim1 added [ 1824.063469][T10140] XFS (loop0): Quotacheck: Done. [ 1824.262784][T10226] netlink: 'syz.1.15763': attribute type 12 has an invalid length. [ 1824.311736][T10228] loop4: detected capacity change from 0 to 1024 [ 1824.344484][T10228] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1824.662797][ T569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1824.690466][ T5945] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1825.698867][ T30] audit: type=1326 audit(2000525748.352:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.15776" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834559ce59 code=0x7ffc0000 [ 1825.798700][ T30] audit: type=1326 audit(2000525748.352:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.15776" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834559ce59 code=0x7ffc0000 [ 1825.828479][T10259] loop1: detected capacity change from 0 to 64 [ 1825.840618][T10257] loop0: detected capacity change from 0 to 64 [ 1825.906972][T10257] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1825.957878][T10261] loop6: detected capacity change from 0 to 64 [ 1825.985200][ T30] audit: type=1326 audit(2000525748.399:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.15776" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f834559ce59 code=0x7ffc0000 [ 1826.127110][ T30] audit: type=1326 audit(2000525748.399:331): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.15776" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834559ce59 code=0x7ffc0000 [ 1826.286360][ T30] audit: type=1326 audit(2000525748.399:332): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10253 comm="syz.4.15776" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834559ce59 code=0x7ffc0000 [ 1826.411970][T10232] loop3: detected capacity change from 0 to 32768 [ 1826.530336][T10232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15765 (10232) [ 1826.633242][T10232] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1826.665826][T10232] BTRFS info (device loop3): using sha256 checksum algorithm [ 1826.790519][T10269] loop0: detected capacity change from 0 to 4096 [ 1826.991929][T10293] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1827.049358][T10232] BTRFS info (device loop3): rebuilding free space tree [ 1827.150189][T10269] NILFS (loop0): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1827.537413][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15794'. [ 1827.576211][T10232] BTRFS info (device loop3): enabling ssd optimizations [ 1827.599552][T10232] BTRFS info (device loop3): using spread ssd allocation scheme [ 1827.623166][T10232] BTRFS info (device loop3): turning on async discard [ 1827.643766][T10232] BTRFS info (device loop3): enabling free space tree [ 1827.676338][T10232] BTRFS info (device loop3): force clearing of disk cache [ 1827.937520][T10317] tmpfs: Bad value for 'mpol' [ 1827.956513][ T5956] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1828.375384][T10323] loop2: detected capacity change from 0 to 4096 [ 1828.520941][T10332] netlink: 'syz.4.15806': attribute type 2 has an invalid length. [ 1828.551163][T10332] netlink: 'syz.4.15806': attribute type 1 has an invalid length. [ 1828.597589][T10323] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1828.611644][T10332] netlink: 'syz.4.15806': attribute type 1 has an invalid length. [ 1829.117488][T10344] No control pipe specified [ 1829.461405][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15816'. [ 1829.768230][T10360] loop1: detected capacity change from 0 to 1764 [ 1830.658254][T10386] loop0: detected capacity change from 0 to 2048 [ 1830.728002][T10386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1830.739907][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15835'. [ 1830.786129][T10386] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.15832: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1830.818243][ T569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1830.824045][T10386] EXT4-fs (loop0): Remounting filesystem read-only [ 1831.005986][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1831.152682][T10405] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15841'. [ 1831.229583][T10407] bridge3: entered promiscuous mode [ 1831.229680][T10407] bridge3: entered allmulticast mode [ 1831.276482][T10399] loop6: detected capacity change from 0 to 8192 [ 1831.331589][T10409] m1Ie5nè‹Ò: entered promiscuous mode [ 1832.199310][T10431] loop2: detected capacity change from 0 to 1024 [ 1832.218857][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15852'. [ 1832.329618][T10439] netlink: 169404 bytes leftover after parsing attributes in process `syz.1.15856'. [ 1832.628167][T10445] hub 8-0:1.0: USB hub found [ 1832.662461][T10445] hub 8-0:1.0: 1 port detected [ 1833.015441][T10454] xfrm0 speed is unknown, defaulting to 1000 [ 1833.148940][T10454] wlan1 speed is unknown, defaulting to 1000 [ 1833.501154][T10464] sit1: entered promiscuous mode [ 1833.604395][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15869'. [ 1833.666825][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15869'. [ 1833.824993][T10472] loop6: detected capacity change from 0 to 256 [ 1833.881549][T10472] exfat: Deprecated parameter 'utf8' [ 1833.980606][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15874'. [ 1833.994161][T10472] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 1834.052870][T10477] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15874'. [ 1834.063247][T10438] syz.3.15855 (10438): drop_caches: 2 [ 1834.084244][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15874'. [ 1834.862439][T10498] SET target dimension over the limit! [ 1834.875608][T10495] loop2: detected capacity change from 0 to 1024 [ 1834.875869][T10499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1835.275106][T10509] netlink: 'syz.2.15889': attribute type 2 has an invalid length. [ 1835.328035][T10509] netlink: 'syz.2.15889': attribute type 8 has an invalid length. [ 1835.358354][T10509] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15889'. [ 1835.788623][T10483] loop0: detected capacity change from 0 to 32768 [ 1835.863215][T10483] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1836.036782][T10483] XFS (loop0): Ending clean mount [ 1836.127226][T10483] XFS (loop0): Quotacheck needed: Please wait. [ 1836.292365][ T582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1836.410589][T17170] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1836.619976][T17170] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1836.664938][T17170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1836.682995][T10483] XFS (loop0): Quotacheck: Done. [ 1836.725235][T17170] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1836.777890][T10549] netlink: 'syz.6.15905': attribute type 1 has an invalid length. [ 1836.783802][T17170] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1836.820890][T17170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.847204][T17170] usb 3-1: Product: syz [ 1836.864417][T17170] usb 3-1: Manufacturer: syz [ 1836.882132][T17170] usb 3-1: SerialNumber: syz [ 1836.905186][T17170] usb 3-1: config 0 descriptor?? [ 1836.930922][T10535] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1836.986079][ T5945] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1837.152004][T10547] loop4: detected capacity change from 0 to 8192 [ 1837.345964][T31295] usb 3-1: USB disconnect, device number 95 [ 1837.577701][T10514] syz.1.15890 (10514): drop_caches: 2 [ 1838.322430][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1838.347287][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15915'. [ 1838.674735][T10578] netlink: 'syz.3.15919': attribute type 2 has an invalid length. [ 1838.676455][T10551] loop6: detected capacity change from 0 to 32768 [ 1838.702052][T10578] netlink: 'syz.3.15919': attribute type 8 has an invalid length. [ 1838.735816][T10578] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15919'. [ 1838.837060][T10584] netlink: 'syz.0.15923': attribute type 3 has an invalid length. [ 1838.868906][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15923'. [ 1839.015137][T10587] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15924'. [ 1839.351999][T10591] loop3: detected capacity change from 0 to 4096 [ 1839.388027][T10595] netlink: 'syz.0.15940': attribute type 1 has an invalid length. [ 1839.424033][T10600] dlm: no locking on control device [ 1839.428852][T10595] netlink: 96 bytes leftover after parsing attributes in process `syz.0.15940'. [ 1839.441418][T10591] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1839.469275][T10599] loop1: detected capacity change from 0 to 256 [ 1839.473602][T10595] netlink: 1 bytes leftover after parsing attributes in process `syz.0.15940'. [ 1839.519455][T10599] exfat: Deprecated parameter 'utf8' [ 1839.526106][T10595] netlink: 658 bytes leftover after parsing attributes in process `syz.0.15940'. [ 1839.570034][T10599] exfat: Deprecated parameter 'utf8' [ 1839.641873][T10591] ntfs3(loop3): ino=19, mi_enum_attr [ 1839.690617][T10599] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dfeff5, utbl_chksum : 0xe619d30d) [ 1839.919795][T10599] overlay: filesystem on ./file0 not supported [ 1840.366710][T10617] netlink: 'syz.0.15938': attribute type 2 has an invalid length. [ 1840.411388][T10617] netlink: 'syz.0.15938': attribute type 8 has an invalid length. [ 1840.439296][T10617] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15938'. [ 1840.503932][T10621] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2198483648 out of range (51000000..2150000000) [ 1840.882467][T10634] loop4: detected capacity change from 0 to 1764 [ 1840.970381][T10634] syz.4.15946: attempt to access beyond end of device [ 1840.970381][T10634] loop4: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 1840.970489][T10634] Buffer I/O error on dev loop4, logical block 1795162143, async page read [ 1840.980069][T10634] syz.4.15946: attempt to access beyond end of device [ 1840.980069][T10634] loop4: rw=0, sector=7180648572, nr_sectors = 4 limit=1764 [ 1840.980124][T10634] Buffer I/O error on dev loop4, logical block 1795162143, async page read [ 1841.000464][ T30] audit: type=1800 audit(2000525762.659:333): pid=10634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.15946" name="file0" dev="loop4" ino=1923 res=0 errno=0 [ 1841.149951][T10601] loop6: detected capacity change from 0 to 32768 [ 1841.247586][T10601] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1841.455309][T10601] XFS (loop6): Ending clean mount [ 1841.492976][T10601] XFS (loop6): Quotacheck needed: Please wait. [ 1841.539976][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15954'. [ 1841.829160][T10601] XFS (loop6): Quotacheck: Done. [ 1842.290033][T19407] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1842.705751][T10678] loop3: detected capacity change from 0 to 256 [ 1843.096262][T10684] veth1_macvtap: left promiscuous mode [ 1843.116194][T10686] dlm: plock device version mismatch: kernel (1.2.0), user (1.4194304.4294901762) [ 1843.340917][T10666] loop4: detected capacity change from 0 to 32768 [ 1843.979862][T10699] xfrm0 speed is unknown, defaulting to 1000 [ 1844.042298][T10699] wlan1 speed is unknown, defaulting to 1000 [ 1844.280953][T10713] --map-set only usable from mangle table [ 1844.805274][T10723] loop0: detected capacity change from 0 to 1024 [ 1844.838258][T10685] loop2: detected capacity change from 0 to 32768 [ 1844.957267][T10685] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1845.238093][T10685] XFS (loop2): Ending clean mount [ 1845.261198][T10685] XFS (loop2): Quotacheck needed: Please wait. [ 1845.764995][ T5287] veth1_macvtap: entered promiscuous mode [ 1846.091211][T10685] XFS (loop2): Quotacheck: Done. [ 1846.504004][ T5952] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1846.540813][ T134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1846.776128][T10721] loop1: detected capacity change from 0 to 32768 [ 1846.849157][T10752] syz.0.15991 (10752): drop_caches: 2 [ 1846.866597][T10721] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1847.124025][T10721] XFS (loop1): Ending clean mount [ 1847.417246][T10794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1847.448577][T10795] loop0: detected capacity change from 0 to 512 [ 1847.486516][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16007'. [ 1847.549704][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16007'. [ 1847.561434][T10795] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1847.587757][T10795] EXT4-fs (loop0): group descriptors corrupted! [ 1847.597124][T10798] netlink: 1 bytes leftover after parsing attributes in process `syz.6.16007'. [ 1847.901958][ T5948] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1848.187117][T10814] loop4: detected capacity change from 0 to 512 [ 1848.201828][T10812] loop0: detected capacity change from 0 to 1024 [ 1848.842157][T10827] Unsupported ieee802154 address type: 0 [ 1849.224043][T10812] hfsplus: xattr search failed [ 1849.308918][T10812] hfsplus: found bad thread record in catalog [ 1849.582840][T10812] hfsplus: found bad thread record in catalog [ 1849.632788][T10812] hfsplus: found bad thread record in catalog [ 1849.830401][ T582] hfsplus: found bad thread record in catalog [ 1849.974471][T17170] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1850.049446][T10850] netlink: 10 bytes leftover after parsing attributes in process `syz.6.16027'. [ 1850.156055][T17170] usb 2-1: Using ep0 maxpacket: 16 [ 1850.178313][T17170] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 1850.200566][T17170] usb 2-1: config 0 has no interface number 0 [ 1850.225004][T17170] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1850.270686][T17170] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1850.324642][T17170] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1850.364442][T17170] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1850.398061][T17170] usb 2-1: Product: syz [ 1850.415233][T17170] usb 2-1: Manufacturer: syz [ 1850.429401][T17170] usb 2-1: SerialNumber: syz [ 1850.458639][T17170] usb 2-1: config 0 descriptor?? [ 1850.475558][T10828] loop2: detected capacity change from 0 to 32768 [ 1850.486543][T17170] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 1850.511915][T17170] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 1850.555657][T17170] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 1850.591802][T10828] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt [ 1850.591802][T10828] [ 1850.614968][T17170] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1850.647123][T10828] xtLookup: xtSearch returned -5 [ 1850.658489][T17170] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 1850.670390][T10828] add_index: get/read_metapage failed! [ 1850.686306][T10828] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt [ 1850.686306][T10828] [ 1850.689336][T10837] loop3: detected capacity change from 0 to 32768 [ 1850.715622][T17170] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1850.757313][T10828] xtLookup: xtSearch returned -5 [ 1850.767977][T17170] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 1850.794462][T10828] free_index: error reading directory table [ 1850.808951][T10837] jfs_strtoUCS: char2uni returned -22. [ 1850.819507][T17170] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1850.833549][T10828] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt [ 1850.833549][T10828] [ 1850.836232][T10837] charset = euc-jp, char = 0xd4 [ 1850.880618][T10828] xtLookup: xtSearch returned -5 [ 1850.894736][T17170] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 1850.914661][T10828] free_index: error reading directory table [ 1850.943433][T17170] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1850.960314][T10828] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt [ 1850.960314][T10828] [ 1851.007132][T10828] xtLookup: xtSearch returned -5 [ 1851.015760][T17170] usb 2-1: USB disconnect, device number 80 [ 1851.039972][T10828] free_index: error reading directory table [ 1851.071945][T10828] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt [ 1851.071945][T10828] [ 1851.094238][T17170] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1851.135852][T10828] xtLookup: xtSearch returned -5 [ 1851.160269][T10828] free_index: error reading directory table [ 1851.183895][T10828] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt [ 1851.183895][T10828] [ 1851.248384][T10828] xtLookup: xtSearch returned -5 [ 1851.276635][T17170] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1851.286466][T10828] free_index: error reading directory table [ 1851.382352][T17170] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1851.400499][T10854] loop4: detected capacity change from 0 to 32768 [ 1851.437900][T10854] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16029 (10854) [ 1851.475470][T17170] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1851.518926][T10854] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1851.541974][T17170] keyspan 2-1:0.107: device disconnected [ 1851.565295][T10854] BTRFS info (device loop4): using sha256 checksum algorithm [ 1851.832168][T10854] BTRFS info (device loop4): enabling ssd optimizations [ 1851.877544][T10854] BTRFS info (device loop4): turning on async discard [ 1851.921563][T10854] BTRFS info (device loop4): enabling free space tree [ 1852.328342][ T5958] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1852.474106][T10862] loop0: detected capacity change from 0 to 32768 [ 1852.668247][T10862] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 03c0dd70-c5f7-4cac-aa27-fd1c1899f855 [ 1852.690057][ T673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1852.710251][T10862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.16032 (10862) [ 1852.759935][T10907] netlink: 'syz.1.16046': attribute type 2 has an invalid length. [ 1852.832214][T10862] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1852.862871][T10862] BTRFS info (device loop0): using sha256 checksum algorithm [ 1853.168552][T10928] QAT: failed to copy from user cfg_data. [ 1853.257231][T10862] BTRFS info (device loop0): enabling ssd optimizations [ 1853.285398][T10862] BTRFS info (device loop0): turning on async discard [ 1853.306713][T10862] BTRFS info (device loop0): enabling free space tree [ 1854.101454][ T5945] BTRFS info (device loop0): last unmount of filesystem 03c0dd70-c5f7-4cac-aa27-fd1c1899f855 [ 1855.119207][T10925] loop3: detected capacity change from 0 to 32768 [ 1855.259260][T10925] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1855.450354][T17170] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 1855.484758][T10925] XFS (loop3): Ending clean mount [ 1855.545251][T10925] XFS (loop3): Quotacheck needed: Please wait. [ 1855.619952][T10943] loop6: detected capacity change from 0 to 32768 [ 1855.628611][T17170] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.654507][T17170] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1855.689893][T17170] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1855.739395][T17170] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1855.750222][T10943] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1855.830040][T17170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.847664][T10925] XFS (loop3): Quotacheck: Done. [ 1855.853600][T10943] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1855.935662][T10964] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1856.024235][T17170] hub 5-1:1.0: bad descriptor, ignoring hub [ 1856.104060][T17170] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1856.175832][T17170] cdc_wdm 5-1:1.0: skipping garbage [ 1856.203135][T17170] cdc_wdm 5-1:1.0: skipping garbage [ 1856.278876][T17170] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1856.315872][T10987] loop1: detected capacity change from 0 to 2048 [ 1856.326632][T17170] cdc_wdm 5-1:1.0: Unknown control protocol [ 1856.336528][T10943] XFS (loop6): Ending clean mount [ 1856.398508][T10987] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1856.406853][T17170] usb 5-1: USB disconnect, device number 85 [ 1856.465671][T10987] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1856.479409][ T5956] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1856.590351][T19407] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1856.608141][T10952] loop0: detected capacity change from 0 to 32768 [ 1856.641358][T10952] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.16057 (10952) [ 1856.645871][ T24] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1856.745376][T10952] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1856.759646][T10952] BTRFS info (device loop0): using sha256 checksum algorithm [ 1856.881623][ T24] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1856.892451][ T24] usb 3-1: config 0 has no interface number 0 [ 1856.921142][ T24] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1856.933881][ T24] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1856.947952][ T24] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1856.988872][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.026341][ T24] usb 3-1: Product: syz [ 1857.031186][ T24] usb 3-1: Manufacturer: syz [ 1857.037332][ T24] usb 3-1: SerialNumber: syz [ 1857.056927][ T24] usb 3-1: config 0 descriptor?? [ 1857.073966][T10989] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1857.176875][ T24] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1857.286805][T10952] BTRFS info (device loop0): enabling ssd optimizations [ 1857.298759][T10952] BTRFS info (device loop0): turning on async discard [ 1857.343892][T10952] BTRFS info (device loop0): enabling free space tree [ 1857.380383][ T24] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1857.424046][ T24] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1857.520883][ T24] usb 3-1: USB disconnect, device number 96 [ 1857.572333][ T30] audit: type=1326 audit(2000525778.201:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.4.16073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834559ce59 code=0x7ffc0000 [ 1857.629574][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1857.688027][ T24] cyberjack 3-1:0.69: device disconnected [ 1857.723283][ T30] audit: type=1326 audit(2000525778.201:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.4.16073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834559ce59 code=0x7ffc0000 [ 1857.764538][ T5945] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1857.834753][ T30] audit: type=1326 audit(2000525778.201:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.4.16073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f834559ce59 code=0x7ffc0000 [ 1857.949472][ T30] audit: type=1326 audit(2000525778.201:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.4.16073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834559ce59 code=0x7ffc0000 [ 1858.054443][T11014] loop4: detected capacity change from 0 to 1024 [ 1858.079024][ T30] audit: type=1326 audit(2000525778.201:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11009 comm="syz.4.16073" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834559ce59 code=0x7ffc0000 [ 1858.519393][T11030] IPVS: length: 126 != 8 [ 1858.685075][T11032] loop2: detected capacity change from 0 to 16 [ 1858.737623][T11032] erofs (device loop2): mounted with root inode @ nid 36. [ 1858.831937][ T134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1858.851870][T11038] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1859.416841][T11053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1860.281460][T31295] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1860.342893][T11036] loop1: detected capacity change from 0 to 32768 [ 1860.459946][T11036] JFS: metapage_get_blocks failed [ 1860.495116][T31295] usb 3-1: Using ep0 maxpacket: 32 [ 1860.507066][T11036] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 1860.507066][T11036] [ 1860.538853][T31295] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 1860.562523][T31295] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.583943][T31295] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1860.593317][T11036] ERROR: (device loop1): remounting filesystem as read-only [ 1860.635037][T31295] usb 3-1: config 0 has no interface number 0 [ 1860.679719][T31295] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1860.711902][T31295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.749162][T31295] usb 3-1: Product: syz [ 1860.759876][T31295] usb 3-1: Manufacturer: syz [ 1860.766673][T31295] usb 3-1: SerialNumber: syz [ 1860.771764][ T115] blkno = 5002c, nblocks = 1 [ 1860.784110][ T115] ERROR: (device loop1): dbUpdatePMap.cold: blocks are outside the map [ 1860.784110][ T115] [ 1860.817161][T31295] usb 3-1: config 0 descriptor?? [ 1860.996603][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1861.072342][T31295] snd-usb-6fire 3-1:0.111: unknown device firmware state received from device: [ 1861.102542][T31295] 31 db 99 aa dd 09 f1 37 [ 1861.120281][T31295] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -5 [ 1861.190124][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1861.211714][ T10] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1861.248306][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1861.280462][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1861.315237][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1861.347195][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1861.361729][T31295] usb 3-1: USB disconnect, device number 97 [ 1861.385070][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.405276][ T10] usb 4-1: Product: syz [ 1861.414951][ T10] usb 4-1: Manufacturer: syz [ 1861.426303][ T10] usb 4-1: SerialNumber: syz [ 1861.454485][ T10] usb 4-1: config 0 descriptor?? [ 1861.479973][T11088] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1861.587566][T11103] xt_TCPMSS: Only works on TCP SYN packets [ 1861.791884][ T10] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 1861.835747][ T10] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 1861.887726][ T10] usb 4-1: USB disconnect, device number 57 [ 1862.774301][T11135] netlink: 'syz.6.16131': attribute type 7 has an invalid length. [ 1863.709671][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1863.725578][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16145'. [ 1863.908455][ T24] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1863.966575][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.983299][ T24] usb 7-1: Product: syz [ 1863.997800][ T24] usb 7-1: Manufacturer: syz [ 1864.005794][T11125] loop2: detected capacity change from 0 to 32768 [ 1864.022453][ T24] usb 7-1: SerialNumber: syz [ 1864.050296][ T24] usb 7-1: config 0 descriptor?? [ 1864.059346][T11125] (syz.2.16127,11125,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1864.125366][T11125] (syz.2.16127,11125,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1864.287373][T11125] JBD2: Ignoring recovery information on journal [ 1864.384427][ T24] usb 7-1: ignoring: probably an ADSL modem [ 1864.402595][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16152'. [ 1864.471376][T11184] netdevsim netdevsim1: Direct firmware load for / [ 1864.471376][T11184] failed with error -2 [ 1864.544559][T11184] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 1864.544559][T11184] [ 1864.576795][T11125] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1864.640358][ T24] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1864.718366][ T24] usb 7-1: USB disconnect, device number 42 [ 1864.870815][T11125] (syz.2.16127,11125,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1864.900240][T11198] Device name not specified. [ 1864.900240][T11198] [ 1864.950130][T11125] (syz.2.16127,11125,1):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1864.980769][ T134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1864.996555][T11125] (syz.2.16127,11125,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1865.090025][T11125] (syz.2.16127,11125,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1865.128685][T11125] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 4 [ 1865.139574][T11125] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1865.149583][T11125] (syz.2.16127,11125,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 1865.189945][T11125] (syz.2.16127,11125,0):ocfs2_mknod:318 ERROR: status = -5 [ 1865.215534][T11125] (syz.2.16127,11125,0):ocfs2_mknod:506 ERROR: status = -5 [ 1865.233949][T11209] [U] [ 1865.236774][T11209] [U] [ 1865.239553][T11209] [U] [ 1865.242381][T11209] [U] [ 1865.258224][T11125] (syz.2.16127,11125,0):ocfs2_mkdir:662 ERROR: status = -5 [ 1865.286187][T11209] [U] [ 1865.289017][T11209] [U] [ 1865.291770][T11209] [U] [ 1865.294547][T11209] [U] [ 1865.361600][T11209] [U] [ 1865.364392][T11209] [U] [ 1865.367126][T11209] [U] [ 1865.436896][T11208] [U] [ 1865.885569][ T5952] ocfs2: Unmounting device (7,2) on (node local) [ 1867.793223][T11241] loop6: detected capacity change from 0 to 32768 [ 1867.833520][T11241] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.16172 (11241) [ 1867.924478][T11241] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1867.969219][T11241] BTRFS info (device loop6): using sha256 checksum algorithm [ 1867.973109][ T10] wlan1 speed is unknown, defaulting to 1000 [ 1868.005420][T11249] loop4: detected capacity change from 0 to 32768 [ 1868.063546][ T10] syz0: Port: 1 Link DOWN [ 1868.079570][T11249] (syz.4.16176,11249,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1868.134937][T11249] (syz.4.16176,11249,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1868.151215][T11297] loop2: detected capacity change from 0 to 64 [ 1868.182192][T11241] BTRFS info (device loop6): enabling ssd optimizations [ 1868.240240][T11241] BTRFS info (device loop6): turning on async discard [ 1868.249364][T11249] JBD2: Ignoring recovery information on journal [ 1868.252523][T11241] BTRFS info (device loop6): enabling free space tree [ 1868.332909][T11249] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1868.375030][T11261] loop0: detected capacity change from 0 to 32768 [ 1868.446984][T11261] (syz.0.16180,11261,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1868.535644][T11261] (syz.0.16180,11261,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1868.622622][T11249] (syz.4.16176,11249,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1868.642772][T11261] debugfs: '9357E9D751824C228242B9B0D0FB6750' already exists in 'ocfs2' [ 1868.673473][T11249] (syz.4.16176,11249,0):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1868.729252][T11249] (syz.4.16176,11249,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1868.782003][T11261] JBD2: Ignoring recovery information on journal [ 1868.845995][T11249] (syz.4.16176,11249,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1868.889990][T11249] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 4 [ 1868.944991][T11249] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1869.002863][T11261] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1869.010009][T11249] (syz.4.16176,11249,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 1869.059374][T11249] (syz.4.16176,11249,0):ocfs2_mknod:318 ERROR: status = -5 [ 1869.098849][T19407] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1869.100513][T11249] (syz.4.16176,11249,0):ocfs2_mknod:506 ERROR: status = -5 [ 1869.175459][T11249] (syz.4.16176,11249,0):ocfs2_mkdir:662 ERROR: status = -5 [ 1869.943675][T11325] Scaler: ================= START STATUS ================= [ 1869.974891][T11325] Scaler: ================== END STATUS ================== [ 1869.987041][ T5945] ocfs2: Unmounting device (7,0) on (node local) [ 1870.041751][ T5958] ocfs2: Unmounting device (7,4) on (node local) [ 1871.133136][ T584] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1871.770366][T11372] loop4: detected capacity change from 0 to 1024 [ 1871.826590][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1872.029866][ T24] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1872.222562][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1872.256504][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.308665][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1872.345995][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.381169][ T24] usb 3-1: Product: syz [ 1872.387556][T11395] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1872.404493][ T24] usb 3-1: Manufacturer: syz [ 1872.424539][ T24] usb 3-1: SerialNumber: syz [ 1872.461499][ T24] usb 3-1: config 0 descriptor?? [ 1872.506731][ T24] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1872.724257][ T24] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 1872.749855][ T24] quatech2 3-1:0.0: probe with driver quatech2 failed with error -8 [ 1872.972595][ T24] usb 3-1: USB disconnect, device number 98 [ 1873.240872][T11420] loop4: detected capacity change from 0 to 256 [ 1873.348644][T11420] FAT-fs (loop4): Directory bread(block 64) failed [ 1873.375466][T11420] FAT-fs (loop4): Directory bread(block 65) failed [ 1873.405943][T11420] FAT-fs (loop4): Directory bread(block 66) failed [ 1873.433305][T11420] FAT-fs (loop4): Directory bread(block 67) failed [ 1873.464529][T11420] FAT-fs (loop4): Directory bread(block 68) failed [ 1873.511911][T11420] FAT-fs (loop4): Directory bread(block 69) failed [ 1873.543961][T11420] FAT-fs (loop4): Directory bread(block 70) failed [ 1873.586626][T11420] FAT-fs (loop4): Directory bread(block 71) failed [ 1873.609963][T11420] FAT-fs (loop4): Directory bread(block 72) failed [ 1873.635698][T11420] FAT-fs (loop4): Directory bread(block 73) failed [ 1873.911171][T11443] loop1: detected capacity change from 0 to 512 [ 1873.940209][T11443] EXT4-fs: Ignoring removed bh option [ 1873.955539][T11443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1874.023019][T11443] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1874.254695][T11443] EXT4-fs (loop1): 1 truncate cleaned up [ 1874.336981][T11443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1874.940945][T11439] loop2: detected capacity change from 0 to 32768 [ 1874.977939][T11439] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.16257 (11439) [ 1875.023783][ T5948] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1875.045884][T11470] loop6: detected capacity change from 0 to 256 [ 1875.095902][T11439] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1875.144841][T11439] BTRFS info (device loop2): using sha256 checksum algorithm [ 1875.375730][T11439] BTRFS info (device loop2): enabling ssd optimizations [ 1875.438777][T11439] BTRFS info (device loop2): turning on async discard [ 1875.484339][T11439] BTRFS info (device loop2): enabling free space tree [ 1875.591846][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16277'. [ 1875.797792][ T5952] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1875.978017][T11507] macvtap0: entered promiscuous mode [ 1876.233756][T11459] loop0: detected capacity change from 0 to 32768 [ 1876.376656][T11459] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1876.423887][T11518] IPv6: NLM_F_CREATE should be specified when creating new route [ 1876.473359][T11521] syz.3.16288 (11521): /proc/11519/oom_adj is deprecated, please use /proc/11519/oom_score_adj instead. [ 1876.508553][T11523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16283'. [ 1876.608707][T11459] XFS (loop0): invalid iclog size (4096 bytes), using lsunit (32768 bytes) [ 1876.700992][T11459] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1876.901708][T11459] XFS (loop0): Starting recovery (logdev: internal) [ 1877.056988][T11459] XFS (loop0): Ending recovery (logdev: internal) [ 1877.204011][T11459] XFS (loop0): Quotacheck needed: Please wait. [ 1877.287047][ T575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1877.419118][T11541] tc_dump_action: action bad kind [ 1877.619866][T11459] XFS (loop0): Quotacheck: Done. [ 1877.704146][ T5945] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1878.936858][T11584] xfrm0 speed is unknown, defaulting to 1000 [ 1878.973732][ T24] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 1879.024275][T11584] wlan1 speed is unknown, defaulting to 1000 [ 1879.134825][T11596] openvswitch: netlink: Flow key attr not present in new flow. [ 1879.167316][ T24] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1879.176936][ T24] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1879.185891][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1879.195328][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1879.199498][T11590] loop6: detected capacity change from 0 to 4096 [ 1879.228483][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1879.276143][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1879.304184][T11597] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1879.320564][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1879.364535][ T24] usb 4-1: language id specifier not provided by device, defaulting to English [ 1879.400311][ T24] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1879.419326][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.429432][ T24] usb 4-1: Manufacturer: 躔 [ 1879.466383][ T24] usb 4-1: config 0 descriptor?? [ 1879.494402][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 1879.521611][T11601] loop2: detected capacity change from 0 to 2048 [ 1879.525549][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1879.580166][ T24] input: 躔 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input115 [ 1879.650085][T11601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1879.883688][ T10] usb 4-1: USB disconnect, device number 58 [ 1880.743318][T11630] netlink: 'syz.0.16347': attribute type 1 has an invalid length. [ 1880.781511][T11630] netlink: 96 bytes leftover after parsing attributes in process `syz.0.16347'. [ 1880.791422][T11630] netlink: 658 bytes leftover after parsing attributes in process `syz.0.16347'. [ 1880.811655][T11630] netlink: 1 bytes leftover after parsing attributes in process `syz.0.16347'. [ 1881.028185][T11641] netlink: 512 bytes leftover after parsing attributes in process `syz.1.16339'. [ 1881.310714][T11648] binder: 11647:11648 ioctl 400c620e 200000000080 returned -22 [ 1881.580004][T11654] netlink: 'syz.3.16348': attribute type 1 has an invalid length. [ 1881.625123][T11654] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16348'. [ 1881.930627][T11631] loop4: detected capacity change from 0 to 32768 [ 1881.978092][T11631] (syz.4.16335,11631,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1882.046721][T11631] (syz.4.16335,11631,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1882.166825][T11631] JBD2: Ignoring recovery information on journal [ 1882.229556][T11666] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1882.298152][T11631] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1882.755462][ T134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1882.859914][ T5958] ocfs2: Unmounting device (7,4) on (node local) [ 1885.637429][T11687] bond4: down delay (32768) is not a multiple of miimon (100), value rounded to 32700 ms [ 1885.704731][T11687] bond4: entered promiscuous mode [ 1885.736634][T11687] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1886.133177][T11708] loop0: detected capacity change from 0 to 1024 [ 1886.174164][T11708] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1886.267189][T11708] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 1886.403694][T11718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1887.423426][T11746] loop4: detected capacity change from 0 to 4096 [ 1887.455777][T11746] EXT4-fs: Ignoring removed bh option [ 1887.494016][T11754] loop3: detected capacity change from 0 to 1024 [ 1887.521301][T11754] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1887.546403][T11746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1887.622196][T11754] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 1887.753199][ T5958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1888.204591][T11773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16402'. [ 1888.224532][ T134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1888.354924][T11776] loop6: detected capacity change from 0 to 512 [ 1888.374952][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16404'. [ 1888.408477][T11776] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1888.473486][T11776] EXT4-fs (loop6): 1 truncate cleaned up [ 1888.557503][T11776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1888.673490][T11776] EXT4-fs error (device loop6): ext4_generic_delete_entry:2672: inode #2: block 13: comm syz.6.16403: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1888.763489][T11750] loop1: detected capacity change from 0 to 32768 [ 1888.796746][T11750] (syz.1.16391,11750,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1888.871129][T11750] (syz.1.16391,11750,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1888.896087][T11776] EXT4-fs (loop6): Remounting filesystem read-only [ 1888.954766][T11776] EXT4-fs warning (device loop6): ext4_rename_delete:3737: inode #2: comm syz.6.16403: Deleting old file: nlink 4, error=-117 [ 1888.994878][T11750] JBD2: Ignoring recovery information on journal [ 1889.115513][T11750] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1889.125838][T11790] loop4: detected capacity change from 0 to 2048 [ 1889.133555][T19407] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1889.240282][T11798] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1889.885026][T11816] netlink: 'syz.6.16420': attribute type 4 has an invalid length. [ 1889.933685][ T5948] ocfs2: Unmounting device (7,1) on (node local) [ 1890.253160][T11824] loop0: detected capacity change from 0 to 2048 [ 1890.339704][T11824] NILFS (loop0): invalid segment: Magic number mismatch [ 1890.385539][T11824] NILFS (loop0): trying rollback from an earlier position [ 1890.444152][T11824] NILFS (loop0): recovery complete [ 1890.481621][T11834] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1891.045598][T11846] loop1: detected capacity change from 0 to 64 [ 1891.101853][T11846] hfs: unable to locate alternate MDB [ 1891.162307][T11846] hfs: continuing without an alternate MDB [ 1891.261991][T11849] loop6: detected capacity change from 0 to 512 [ 1891.262303][ T30] audit: type=1800 audit(2000525809.745:339): pid=11846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16422" name="file1" dev="loop1" ino=22 res=0 errno=0 [ 1891.355850][T11849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1891.440889][T11849] ext4 filesystem being mounted at /1716/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1891.448636][ T584] [ 1891.453982][ T584] ====================================================== [ 1891.461117][ T584] WARNING: possible circular locking dependency detected [ 1891.468171][ T584] syzkaller #0 Tainted: G L [ 1891.474976][ T584] ------------------------------------------------------ [ 1891.482028][ T584] kworker/u8:19/584 is trying to acquire lock: [ 1891.488242][ T584] ffff88807c4a7170 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 1891.499064][ T584] [ 1891.499064][ T584] but task is already holding lock: [ 1891.506499][ T584] ffff8880315240a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1891.515921][ T584] [ 1891.515921][ T584] which lock already depends on the new lock. [ 1891.515921][ T584] [ 1891.526429][ T584] [ 1891.526429][ T584] the existing dependency chain (in reverse order) is: [ 1891.535603][ T584] [ 1891.535603][ T584] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 1891.543602][ T584] __mutex_lock+0x1a4/0x1b10 [ 1891.548837][ T584] hfs_find_init+0x273/0x330 [ 1891.554189][ T584] hfs_ext_read_extent+0x19d/0x9d0 [ 1891.560348][ T584] hfs_get_block+0x576/0x830 [ 1891.565858][ T584] block_read_full_folio+0x36c/0x8e0 [ 1891.571789][ T584] filemap_read_folio+0xfc/0x3b0 [ 1891.577281][ T584] do_read_cache_folio+0x2d7/0x6b0 [ 1891.583151][ T584] read_cache_page+0x5b/0x1b0 [ 1891.588382][ T584] __hfs_bnode_create+0x718/0x9a0 [ 1891.593981][ T584] hfs_bnode_find+0x2d5/0xd30 [ 1891.599296][ T584] hfs_brec_find+0x39d/0x620 [ 1891.604514][ T584] hfs_brec_read+0x26/0x120 [ 1891.609587][ T584] hfs_cat_find_brec+0xdc/0x2a0 [ 1891.615088][ T584] hfs_fill_super+0x58d/0x7e0 [ 1891.620330][ T584] get_tree_bdev_flags+0x38c/0x620 [ 1891.626012][ T584] vfs_get_tree+0x92/0x320 [ 1891.630980][ T584] path_mount+0x7d0/0x23d0 [ 1891.635940][ T584] __x64_sys_mount+0x293/0x310 [ 1891.641247][ T584] do_syscall_64+0x115/0x870 [ 1891.646389][ T584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1891.652868][ T584] [ 1891.652868][ T584] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 1891.662292][ T584] __lock_acquire+0x14b8/0x2630 [ 1891.667704][ T584] lock_acquire+0x1b1/0x370 [ 1891.672813][ T584] __mutex_lock+0x1a4/0x1b10 [ 1891.678071][ T584] hfs_extend_file+0xa6/0xcf0 [ 1891.683416][ T584] hfs_bmap_reserve+0x2ab/0x3a0 [ 1891.688916][ T584] __hfs_ext_write_extent+0x3c4/0x510 [ 1891.694986][ T584] hfs_ext_write_extent+0x1b7/0x200 [ 1891.700839][ T584] hfs_write_inode+0xce/0xab0 [ 1891.706251][ T584] __writeback_single_inode+0xcd4/0x1350 [ 1891.712644][ T584] writeback_sb_inodes+0x766/0x1c60 [ 1891.718521][ T584] wb_writeback+0x1bf/0xb90 [ 1891.723661][ T584] wb_workfn+0x14f/0xc00 [ 1891.728811][ T584] process_one_work+0xa0e/0x1980 [ 1891.734363][ T584] worker_thread+0x5ef/0xe50 [ 1891.739602][ T584] kthread+0x370/0x450 [ 1891.744228][ T584] ret_from_fork+0x72b/0xd50 [ 1891.749384][ T584] ret_from_fork_asm+0x1a/0x30 [ 1891.754712][ T584] [ 1891.754712][ T584] other info that might help us debug this: [ 1891.754712][ T584] [ 1891.764945][ T584] Possible unsafe locking scenario: [ 1891.764945][ T584] [ 1891.772501][ T584] CPU0 CPU1 [ 1891.778015][ T584] ---- ---- [ 1891.783393][ T584] lock(&tree->tree_lock/1); [ 1891.788108][ T584] lock(&HFS_I(tree->inode)->extents_lock); [ 1891.796981][ T584] lock(&tree->tree_lock/1); [ 1891.804228][ T584] lock(&HFS_I(tree->inode)->extents_lock); [ 1891.810230][ T584] [ 1891.810230][ T584] *** DEADLOCK *** [ 1891.810230][ T584] [ 1891.818388][ T584] 3 locks held by kworker/u8:19/584: [ 1891.823718][ T584] #0: ffff888020aa8940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1891.834597][ T584] #1: ffffc90003d37d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1891.846547][ T584] #2: ffff8880315240a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1891.856417][ T584] [ 1891.856417][ T584] stack backtrace: [ 1891.862317][ T584] CPU: 1 UID: 0 PID: 584 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 1891.862374][ T584] Tainted: [L]=SOFTLOCKUP [ 1891.862388][ T584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1891.862414][ T584] Workqueue: writeback wb_workfn (flush-7:1) [ 1891.862482][ T584] Call Trace: [ 1891.862497][ T584] [ 1891.862511][ T584] dump_stack_lvl+0x100/0x190 [ 1891.862549][ T584] print_circular_bug.cold+0x178/0x1c7 [ 1891.862616][ T584] check_noncircular+0x146/0x160 [ 1891.862653][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.862705][ T584] __lock_acquire+0x14b8/0x2630 [ 1891.862750][ T584] ? __pfx_stack_trace_save+0x10/0x10 [ 1891.862814][ T584] lock_acquire+0x1b1/0x370 [ 1891.862852][ T584] ? hfs_extend_file+0xa6/0xcf0 [ 1891.862914][ T584] ? __pfx___might_resched+0x10/0x10 [ 1891.862962][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.863007][ T584] ? add_lock_to_list+0x99/0x110 [ 1891.863069][ T584] __mutex_lock+0x1a4/0x1b10 [ 1891.863126][ T584] ? hfs_extend_file+0xa6/0xcf0 [ 1891.863181][ T584] ? hfs_extend_file+0xa6/0xcf0 [ 1891.863238][ T584] ? hfs_write_inode+0xce/0xab0 [ 1891.863270][ T584] ? __writeback_single_inode+0xcd4/0x1350 [ 1891.863332][ T584] ? __pfx___mutex_lock+0x10/0x10 [ 1891.863393][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.863437][ T584] ? lock_acquire+0x1b1/0x370 [ 1891.863480][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.863523][ T584] ? trace_contention_end+0x122/0x170 [ 1891.863568][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.863616][ T584] ? hfs_extend_file+0xa6/0xcf0 [ 1891.863670][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.863713][ T584] hfs_extend_file+0xa6/0xcf0 [ 1891.863771][ T584] ? __pfx_hfs_extend_file+0x10/0x10 [ 1891.863826][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.863877][ T584] hfs_bmap_reserve+0x2ab/0x3a0 [ 1891.863933][ T584] __hfs_ext_write_extent+0x3c4/0x510 [ 1891.863989][ T584] ? hfs_find_init+0x273/0x330 [ 1891.864029][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.864076][ T584] hfs_ext_write_extent+0x1b7/0x200 [ 1891.864132][ T584] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1891.864194][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.864238][ T584] ? __mpage_writepages+0x1a8/0x210 [ 1891.864273][ T584] ? __pfx___mpage_writepages+0x10/0x10 [ 1891.864310][ T584] hfs_write_inode+0xce/0xab0 [ 1891.864348][ T584] ? __pfx_hfs_write_inode+0x10/0x10 [ 1891.864381][ T584] ? __lock_acquire+0x4a5/0x2630 [ 1891.864433][ T584] ? __writeback_single_inode+0x454/0x1350 [ 1891.864490][ T584] ? __writeback_single_inode+0x454/0x1350 [ 1891.864546][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.864596][ T584] __writeback_single_inode+0xcd4/0x1350 [ 1891.864658][ T584] ? __pfx___writeback_single_inode+0x10/0x10 [ 1891.864715][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.864758][ T584] ? do_raw_spin_unlock+0x145/0x1e0 [ 1891.864807][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.864854][ T584] writeback_sb_inodes+0x766/0x1c60 [ 1891.864921][ T584] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1891.864977][ T584] ? wakeup_preempt_fair+0x630/0x1050 [ 1891.865059][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.865103][ T584] ? rcu_is_watching+0x12/0xc0 [ 1891.865153][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.865197][ T584] ? queue_io+0x287/0x540 [ 1891.865244][ T584] wb_writeback+0x1bf/0xb90 [ 1891.865306][ T584] ? __pfx_wb_writeback+0x10/0x10 [ 1891.865371][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.865415][ T584] ? mark_held_locks+0x40/0x70 [ 1891.865454][ T584] ? _raw_spin_unlock_irq+0x23/0x50 [ 1891.865503][ T584] wb_workfn+0x14f/0xc00 [ 1891.865561][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.865605][ T584] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1891.865656][ T584] ? __pfx_wb_workfn+0x10/0x10 [ 1891.865713][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.865759][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.865804][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.865848][ T584] ? rcu_is_watching+0x12/0xc0 [ 1891.865897][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.865945][ T584] process_one_work+0xa0e/0x1980 [ 1891.865997][ T584] ? __pfx_process_one_work+0x10/0x10 [ 1891.866038][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.866089][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.866136][ T584] worker_thread+0x5ef/0xe50 [ 1891.866183][ T584] ? __pfx_worker_thread+0x10/0x10 [ 1891.866226][ T584] ? kthread+0x13a/0x450 [ 1891.866260][ T584] ? __pfx_worker_thread+0x10/0x10 [ 1891.866301][ T584] kthread+0x370/0x450 [ 1891.866336][ T584] ? __pfx_kthread+0x10/0x10 [ 1891.866378][ T584] ret_from_fork+0x72b/0xd50 [ 1891.866420][ T584] ? __pfx_ret_from_fork+0x10/0x10 [ 1891.866462][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1891.866505][ T584] ? __switch_to+0x800/0x1100 [ 1891.866554][ T584] ? __switch_to_asm+0x39/0x70 [ 1891.866601][ T584] ? __pfx_kthread+0x10/0x10 [ 1891.866639][ T584] ret_from_fork_asm+0x1a/0x30 [ 1891.866698][ T584] [ 1892.400228][T11828] loop2: detected capacity change from 0 to 32768 [ 1892.411761][ T584] hfs: new node 0 already hashed? [ 1892.417432][ T584] ------------[ cut here ]------------ [ 1892.423124][ T584] 1 [ 1892.423139][ T584] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#0: kworker/u8:19/584 [ 1892.435866][ T584] Modules linked in: [ 1892.439823][ T584] CPU: 0 UID: 0 PID: 584 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 1892.451197][ T584] Tainted: [L]=SOFTLOCKUP [ 1892.455596][ T584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1892.466114][ T584] Workqueue: writeback wb_workfn (flush-7:1) [ 1892.472902][ T584] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1892.479167][ T584] Code: f5 84 63 0a e9 a7 3d d1 01 e8 7b 12 e1 00 4c 89 f7 e8 e3 84 63 0a e8 6e 12 e1 00 89 ee 48 c7 c7 80 e7 d1 8b e8 40 e1 fa ff 90 <0f> 0b 90 e9 a9 40 d1 01 e8 52 12 e1 00 e8 2d 4b 4d 00 e9 05 43 d1 [ 1892.499166][ T584] RSP: 0018:ffffc90003d37020 EFLAGS: 00010282 [ 1892.505740][ T584] RAX: 000000000000001f RBX: ffff888030e82f00 RCX: 0000000000000000 [ 1892.514277][ T584] RDX: 000000000000001f RSI: ffffffff81e71a69 RDI: fffff520007a6df5 [ 1892.522327][ T584] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1892.530629][ T584] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1892.538919][ T584] R13: ffff888031524000 R14: ffff8880315240d8 R15: 0000000000000000 [ 1892.547642][ T584] FS: 0000000000000000(0000) GS:ffff888124384000(0000) knlGS:0000000000000000 [ 1892.557094][ T584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1892.563874][ T584] CR2: 00007f9807185b00 CR3: 000000007673e000 CR4: 0000000000350ef0 [ 1892.572031][ T584] Call Trace: [ 1892.575350][ T584] [ 1892.578430][ T584] ? _raw_spin_unlock+0x28/0x50 [ 1892.583456][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.589209][ T584] ? hfs_bnode_put+0x208/0x480 [ 1892.594056][ T584] hfs_bmap_alloc+0x5a7/0x6b0 [ 1892.598791][ T584] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1892.604441][ T584] ? __asan_memcpy+0x3c/0x60 [ 1892.609131][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.614865][ T584] ? hfs_bnode_read.part.0+0x298/0x330 [ 1892.620585][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.626333][ T584] ? folio_mark_accessed+0xf3/0x1040 [ 1892.631711][ T584] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1892.637516][ T584] ? rcu_is_watching+0x12/0xc0 [ 1892.642417][ T584] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1892.648929][ T584] ? do_raw_spin_unlock+0x145/0x1e0 [ 1892.654239][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.660096][ T584] ? _raw_spin_unlock+0x28/0x50 [ 1892.665193][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.671533][ T584] ? hfs_bnode_put+0x208/0x480 [ 1892.676467][ T584] hfs_brec_insert+0x8ba/0xc20 [ 1892.681339][ T584] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1892.686703][ T584] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1892.691810][ T584] __hfs_ext_write_extent+0x3ef/0x510 [ 1892.697367][ T584] ? hfs_find_init+0x273/0x330 [ 1892.702255][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.708162][ T584] hfs_ext_write_extent+0x1b7/0x200 [ 1892.713520][ T584] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1892.719386][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.725246][ T584] ? __mpage_writepages+0x1a8/0x210 [ 1892.730630][ T584] ? __pfx___mpage_writepages+0x10/0x10 [ 1892.736496][ T584] hfs_write_inode+0xce/0xab0 [ 1892.741459][ T584] ? __pfx_hfs_write_inode+0x10/0x10 [ 1892.746860][ T584] ? __lock_acquire+0x4a5/0x2630 [ 1892.752008][ T584] ? __writeback_single_inode+0x454/0x1350 [ 1892.757896][ T584] ? __writeback_single_inode+0x454/0x1350 [ 1892.764019][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.769749][ T584] __writeback_single_inode+0xcd4/0x1350 [ 1892.773125][T11828] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1892.775588][ T584] ? __pfx___writeback_single_inode+0x10/0x10 [ 1892.786123][T11828] JBD2: Ignoring recovery information on journal [ 1892.789921][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.802235][ T584] ? do_raw_spin_unlock+0x145/0x1e0 [ 1892.807550][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.813274][ T584] writeback_sb_inodes+0x766/0x1c60 [ 1892.818578][ T584] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1892.824329][ T584] ? wakeup_preempt_fair+0x630/0x1050 [ 1892.829263][T11828] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1892.829877][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.844608][ T584] ? rcu_is_watching+0x12/0xc0 [ 1892.849534][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.855317][ T584] ? queue_io+0x287/0x540 [ 1892.859770][ T584] wb_writeback+0x1bf/0xb90 [ 1892.864336][ T584] ? __pfx_wb_writeback+0x10/0x10 [ 1892.869522][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.875287][ T584] ? mark_held_locks+0x40/0x70 [ 1892.880173][ T584] ? _raw_spin_unlock_irq+0x23/0x50 [ 1892.885492][ T584] wb_workfn+0x14f/0xc00 [ 1892.889964][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.895732][ T584] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1892.901764][ T584] ? __pfx_wb_workfn+0x10/0x10 [ 1892.906631][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.912908][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.918690][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.924990][ T584] ? rcu_is_watching+0x12/0xc0 [ 1892.929820][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.935724][ T584] process_one_work+0xa0e/0x1980 [ 1892.941397][ T584] ? __pfx_process_one_work+0x10/0x10 [ 1892.946869][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.952587][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1892.958319][ T584] worker_thread+0x5ef/0xe50 [ 1892.963003][ T584] ? __pfx_worker_thread+0x10/0x10 [ 1892.968150][ T584] ? kthread+0x13a/0x450 [ 1892.972496][ T584] ? __pfx_worker_thread+0x10/0x10 [ 1892.978173][ T584] kthread+0x370/0x450 [ 1892.982368][ T584] ? __pfx_kthread+0x10/0x10 [ 1892.987036][ T584] ret_from_fork+0x72b/0xd50 [ 1892.991705][ T584] ? __pfx_ret_from_fork+0x10/0x10 [ 1892.997023][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.002734][ T584] ? __switch_to+0x800/0x1100 [ 1893.007823][ T584] ? __switch_to_asm+0x39/0x70 [ 1893.012696][ T584] ? __pfx_kthread+0x10/0x10 [ 1893.017347][ T584] ret_from_fork_asm+0x1a/0x30 [ 1893.022255][ T584] [ 1893.025350][ T584] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1893.032896][ T584] CPU: 0 UID: 0 PID: 584 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 1893.043950][ T584] Tainted: [L]=SOFTLOCKUP [ 1893.048287][ T584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1893.058786][ T584] Workqueue: writeback wb_workfn (flush-7:1) [ 1893.065067][ T584] Call Trace: [ 1893.068371][ T584] [ 1893.071309][ T584] dump_stack_lvl+0x100/0x190 [ 1893.076042][ T584] vpanic+0x552/0x970 [ 1893.080063][ T584] ? __pfx_vpanic+0x10/0x10 [ 1893.084607][ T584] ? lock_release+0x245/0x310 [ 1893.089337][ T584] panic+0xd1/0xe0 [ 1893.093124][ T584] ? __pfx_panic+0x10/0x10 [ 1893.097664][ T584] ? check_panic_on_warn+0x1f/0x90 [ 1893.102914][ T584] check_panic_on_warn.cold+0x19/0x34 [ 1893.108344][ T584] ? hfs_bnode_create.cold+0x41/0x49 [ 1893.113711][ T584] __warn.cold+0x191/0x328 [ 1893.118244][ T584] __report_bug+0x296/0x3d0 [ 1893.122816][ T584] ? hfs_bnode_create.cold+0x41/0x49 [ 1893.128152][ T584] ? __pfx___report_bug+0x10/0x10 [ 1893.133208][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.138871][ T584] ? preempt_schedule_thunk+0x16/0x30 [ 1893.144308][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.149989][ T584] ? preempt_count_add+0x76/0x150 [ 1893.155039][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.160735][ T584] ? __wake_up_klogd+0xe2/0x140 [ 1893.165616][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.171279][ T584] ? vprintk_emit+0x1c9/0x6b0 [ 1893.176001][ T584] ? __pfx_vprintk_emit+0x10/0x10 [ 1893.181105][ T584] ? hfs_bnode_create.cold+0x41/0x49 [ 1893.186448][ T584] report_bug+0xb2/0x220 [ 1893.190765][ T584] ? hfs_bnode_create.cold+0x41/0x49 [ 1893.196115][ T584] handle_bug+0x16a/0x2a0 [ 1893.200595][ T584] exc_invalid_op+0x17/0x50 [ 1893.205137][ T584] asm_exc_invalid_op+0x1a/0x20 [ 1893.210055][ T584] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1893.216035][ T584] Code: f5 84 63 0a e9 a7 3d d1 01 e8 7b 12 e1 00 4c 89 f7 e8 e3 84 63 0a e8 6e 12 e1 00 89 ee 48 c7 c7 80 e7 d1 8b e8 40 e1 fa ff 90 <0f> 0b 90 e9 a9 40 d1 01 e8 52 12 e1 00 e8 2d 4b 4d 00 e9 05 43 d1 [ 1893.235714][ T584] RSP: 0018:ffffc90003d37020 EFLAGS: 00010282 [ 1893.241830][ T584] RAX: 000000000000001f RBX: ffff888030e82f00 RCX: 0000000000000000 [ 1893.249876][ T584] RDX: 000000000000001f RSI: ffffffff81e71a69 RDI: fffff520007a6df5 [ 1893.257890][ T584] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1893.266027][ T584] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1893.274073][ T584] R13: ffff888031524000 R14: ffff8880315240d8 R15: 0000000000000000 [ 1893.282070][ T584] ? vprintk_emit+0x1c9/0x6b0 [ 1893.286803][ T584] ? _raw_spin_unlock+0x28/0x50 [ 1893.291689][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.297353][ T584] ? hfs_bnode_put+0x208/0x480 [ 1893.302180][ T584] hfs_bmap_alloc+0x5a7/0x6b0 [ 1893.307030][ T584] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1893.312312][ T584] ? __asan_memcpy+0x3c/0x60 [ 1893.316950][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.322616][ T584] ? hfs_bnode_read.part.0+0x298/0x330 [ 1893.328314][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.333978][ T584] ? folio_mark_accessed+0xf3/0x1040 [ 1893.339300][ T584] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1893.345068][ T584] ? rcu_is_watching+0x12/0xc0 [ 1893.349866][ T584] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1893.356279][ T584] ? do_raw_spin_unlock+0x145/0x1e0 [ 1893.361530][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.367301][ T584] ? _raw_spin_unlock+0x28/0x50 [ 1893.372183][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.377850][ T584] ? hfs_bnode_put+0x208/0x480 [ 1893.382698][ T584] hfs_brec_insert+0x8ba/0xc20 [ 1893.387526][ T584] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1893.392855][ T584] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1893.397986][ T584] __hfs_ext_write_extent+0x3ef/0x510 [ 1893.403398][ T584] ? hfs_find_init+0x273/0x330 [ 1893.408182][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.413848][ T584] hfs_ext_write_extent+0x1b7/0x200 [ 1893.419105][ T584] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1893.424959][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.430638][ T584] ? __mpage_writepages+0x1a8/0x210 [ 1893.435854][ T584] ? __pfx___mpage_writepages+0x10/0x10 [ 1893.441416][ T584] hfs_write_inode+0xce/0xab0 [ 1893.446227][ T584] ? __pfx_hfs_write_inode+0x10/0x10 [ 1893.451691][ T584] ? __lock_acquire+0x4a5/0x2630 [ 1893.456843][ T584] ? __writeback_single_inode+0x454/0x1350 [ 1893.462899][ T584] ? __writeback_single_inode+0x454/0x1350 [ 1893.468882][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.474869][ T584] __writeback_single_inode+0xcd4/0x1350 [ 1893.481003][ T584] ? __pfx___writeback_single_inode+0x10/0x10 [ 1893.487331][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.493086][ T584] ? do_raw_spin_unlock+0x145/0x1e0 [ 1893.498356][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.504032][ T584] writeback_sb_inodes+0x766/0x1c60 [ 1893.509297][ T584] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1893.515030][ T584] ? wakeup_preempt_fair+0x630/0x1050 [ 1893.520498][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.526266][ T584] ? rcu_is_watching+0x12/0xc0 [ 1893.531220][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.536936][ T584] ? queue_io+0x287/0x540 [ 1893.541304][ T584] wb_writeback+0x1bf/0xb90 [ 1893.545867][ T584] ? __pfx_wb_writeback+0x10/0x10 [ 1893.551025][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.556704][ T584] ? mark_held_locks+0x40/0x70 [ 1893.561493][ T584] ? _raw_spin_unlock_irq+0x23/0x50 [ 1893.566725][ T584] wb_workfn+0x14f/0xc00 [ 1893.571015][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.576669][ T584] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1893.582532][ T584] ? __pfx_wb_workfn+0x10/0x10 [ 1893.587333][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.592988][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.598642][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.604298][ T584] ? rcu_is_watching+0x12/0xc0 [ 1893.609117][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.614776][ T584] process_one_work+0xa0e/0x1980 [ 1893.619746][ T584] ? __pfx_process_one_work+0x10/0x10 [ 1893.625139][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.630913][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.636602][ T584] worker_thread+0x5ef/0xe50 [ 1893.641279][ T584] ? __pfx_worker_thread+0x10/0x10 [ 1893.646460][ T584] ? kthread+0x13a/0x450 [ 1893.650745][ T584] ? __pfx_worker_thread+0x10/0x10 [ 1893.655901][ T584] kthread+0x370/0x450 [ 1893.660086][ T584] ? __pfx_kthread+0x10/0x10 [ 1893.664723][ T584] ret_from_fork+0x72b/0xd50 [ 1893.669349][ T584] ? __pfx_ret_from_fork+0x10/0x10 [ 1893.674498][ T584] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1893.680162][ T584] ? __switch_to+0x800/0x1100 [ 1893.684928][ T584] ? __switch_to_asm+0x39/0x70 [ 1893.689913][ T584] ? __pfx_kthread+0x10/0x10 [ 1893.694530][ T584] ret_from_fork_asm+0x1a/0x30 [ 1893.699526][ T584] [ 1893.702902][ T584] Kernel Offset: disabled [ 1893.707245][ T584] Rebooting in 86400 seconds..