last executing test programs: 2m18.161259135s ago: executing program 1 (id=584): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/157, 0x9d) setpriority(0x2, 0xff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) r2 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r2, r1, 0x0, 0x8010002b) 2m16.34771174s ago: executing program 1 (id=586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10b}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m15.895996929s ago: executing program 1 (id=588): r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x2, 0x0) readv(r0, &(0x7f0000001940)=[{&(0x7f0000000680)=""/13, 0xd}], 0x1) 2m15.619935784s ago: executing program 1 (id=591): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@nouid32}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r1, 0x0, 0x3, 0x800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)='\v', 0x1}], 0x1) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 2m14.648400334s ago: executing program 1 (id=592): syz_mount_image$ocfs2(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x108c8, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESHEX], 0x2, 0x445c, &(0x7f0000004480)="$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") r0 = syz_create_resource$binfmt(0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) io_setup(0x9, &(0x7f0000000300)=0x0) io_submit(r2, 0x1, &(0x7f00000019c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, r1, 0x0, 0x300}]) 2m14.011955596s ago: executing program 1 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_perm_addr}) 2m13.27521601s ago: executing program 32 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_perm_addr}) 21.436131105s ago: executing program 0 (id=811): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f00000000c0)=""/32, &(0x7f0000000080)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5) fallocate(r4, 0x3, 0x0, 0x200000) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000000c0)=@hci, 0x80, 0x0, 0x0, &(0x7f00000014c0)=""/115, 0x73}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x469, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0) 17.224537337s ago: executing program 0 (id=819): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0xbc7b000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r4) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001043, r9, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x70, 0x0, 0x41194010aa54bf81, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004020}, 0x44094) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) fcntl$F_GET_RW_HINT(r10, 0x40b, &(0x7f0000000180)) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1df, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 11.217340473s ago: executing program 4 (id=828): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x2, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="043e0a0300c8002c0000000000d11f5b32d5b2804abddb3445b8af012ae3407624dd2e525194cb1ef381a40c4211225c4ca7324d6823610132ad1e164e92df2e12cd2d7add45c24594208c60e74e9b2329a470ae787dccc0a17ef9cfb7289b3c60a00fd72d1f337a99703c511c2cc860f42c6902d826a54244df13be3a011adb596bce0a14eb8442e12ec9d8a80a420b176b68f23759fc3c41ad1b89cf499bd712be1d282d551ec7d5959c3500000000000000009f64b049c64eadb072aee6bc5fd136feb577e831f2f03d45e6d837677bb6722448a7ec1aeaf0a7418b70b83c54845a3ffe5d6dcba7049759646dad37e16f8d2c12da"], 0xd) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c00000034000701fffffffffeffffff017c"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f0000000040)={0x0, 0x4}) 10.037113276s ago: executing program 0 (id=830): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) read(r0, &(0x7f00000002c0)=""/157, 0x9d) setpriority(0x2, 0xff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r3, r2, 0x0, 0x8010002b) 9.947881668s ago: executing program 4 (id=831): syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file1\x00', 0x208000, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x41, 0x5eab, &(0x7f0000005e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x42, 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 9.504066917s ago: executing program 2 (id=832): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001b00), 0x8a201, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000e27f00000200000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r2, &(0x7f0000000500), &(0x7f00000003c0)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) 7.061465344s ago: executing program 4 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cdafda, 0x103) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x11d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) 6.819816889s ago: executing program 0 (id=836): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x8040480) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 6.767569349s ago: executing program 2 (id=837): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5) fallocate(r4, 0x3, 0x0, 0x200000) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000000c0)=@hci, 0x80, 0x0, 0x0, &(0x7f00000014c0)=""/115, 0x73}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x469, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0) 6.350389247s ago: executing program 3 (id=838): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000a80)=@urb_type_control={0x2, {}, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x2, 0x40000000, 0x0}) 5.604588742s ago: executing program 2 (id=839): syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000480)='./file1\x00', 0x8000, &(0x7f0000000180)={[{@gquota}, {@nodiscard}]}, 0x4, 0x9867, &(0x7f000001aa40)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), &(0x7f00000006c0)=ANY=[], 0x841, 0x3) listxattr(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) 5.552087603s ago: executing program 3 (id=840): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x4, 0xc8}}}, 0x6) 4.875362956s ago: executing program 4 (id=841): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x14, 0x1, 0x3d, 0x800000000}}, @mark={{0x10, 0x1, 0x24, 0xffffff1f}}], 0x24}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000080)) 4.870483776s ago: executing program 3 (id=842): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x2) 4.595183621s ago: executing program 3 (id=843): syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file1\x00', 0x208000, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x41, 0x5eab, &(0x7f0000005e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x42, 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 3.843955626s ago: executing program 0 (id=844): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) read(r0, &(0x7f00000002c0)=""/157, 0x9d) setpriority(0x2, 0xff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ppoll(&(0x7f00000001c0)=[{}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r3, r2, 0x0, 0x8010002b) 3.830940746s ago: executing program 4 (id=845): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001b00), 0x8a201, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000e27f00000200000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r2, &(0x7f0000000500), &(0x7f00000003c0)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) 3.671630619s ago: executing program 2 (id=846): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) gettid() recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0b0f"], 0xe) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_pidfd_open(r4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setns(r5, 0x4000000) socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000409674f4d893e3484b97cd000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001"], 0x50) 2.004963281s ago: executing program 3 (id=847): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5) fallocate(r4, 0x3, 0x0, 0x200000) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f00000000c0)=@hci, 0x80, 0x0, 0x0, &(0x7f00000014c0)=""/115, 0x73}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x469, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0) 346.670833ms ago: executing program 2 (id=848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 215.363186ms ago: executing program 0 (id=849): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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") socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_clone(0xba05d480, 0x0, 0x11, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 154.965817ms ago: executing program 3 (id=850): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0xfffffe04, 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x9, @sdr}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000002000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_flash={0x33, 0x1c00000, './file0\x00'}}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000940)=0x707987cd) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r7, &(0x7f00000000c0)={0x18}, 0xfffffdef) 106.659718ms ago: executing program 4 (id=851): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x55ba, &(0x7f000000ac40)="$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") 0s ago: executing program 2 (id=852): stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prlimit64(0x0, 0x8, &(0x7f0000000240)={0x4000008, 0x2eee}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f00000007c0)=""/154, 0x34, 0x9a, 0x1, 0x7, 0x10000}, 0x28) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r3, &(0x7f0000002000)=""/4096, 0x1000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="88000000000105013c0002802c00018014000300fe8000000000000000000000000000bb14000400ff0200000000f1000000000000000000010c000280050001000000000014001980080002000a010000080001002500000024000f800843c1f6ac0000060800014000000004080001400000043b0800014000004765"], 0x88}, 0x1, 0x0, 0x0, 0x4041}, 0x1) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000880)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable}, {@nodioread_nolock}]}, 0x0, 0x50f, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) kernel console output (not intermixed with test programs): sha256-avx2) checksum algorithm [ 178.071005][ T6629] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 178.098720][ T6629] F2FS-fs (loop2): invalid crc value [ 178.116897][ T6627] BTRFS info (device loop3): using free space tree [ 178.164929][ T6629] F2FS-fs (loop2): invalid journal entries nats 768 sits 6 [ 178.179296][ T6629] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-22) [ 178.237583][ T6627] BTRFS info (device loop3): enabling ssd optimizations [ 178.244650][ T6627] BTRFS info (device loop3): auto enabling async discard [ 178.389116][ T5794] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.781415][ T6663] loop2: detected capacity change from 0 to 1024 [ 179.007016][ T6663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 179.054586][ T6663] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.565857][ T6670] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 179.765903][ T6673] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 2: comm syz.2.173: lblock 2 mapped to illegal pblock 2 (length 4) [ 180.441875][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 180.560324][ T6667] loop1: detected capacity change from 0 to 32768 [ 181.695596][ T5843] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.945626][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 181.985887][ T5843] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 182.007157][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.023799][ T5843] usb 1-1: Product: syz [ 182.029008][ T5843] usb 1-1: Manufacturer: syz [ 182.033921][ T5843] usb 1-1: SerialNumber: syz [ 182.077037][ T5843] usb 1-1: config 0 descriptor?? [ 182.291443][ T5843] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 182.717817][ T5843] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 182.757552][ T5843] usb 1-1: USB disconnect, device number 3 [ 183.129357][ T6692] loop1: detected capacity change from 0 to 32768 [ 183.144887][ T6692] XFS: ikeep mount option is deprecated. [ 183.151836][ T6692] XFS: noikeep mount option is deprecated. [ 183.185205][ T6692] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 183.227727][ T6692] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.448603][ T6703] loop0: detected capacity change from 0 to 256 [ 183.484054][ T6703] exfat: Deprecated parameter 'namecase' [ 183.510602][ T6703] exfat: Bad value for 'gid' [ 183.526859][ T6692] XFS (loop1): Ending clean mount [ 184.274068][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 184.827677][ T6705] loop2: detected capacity change from 0 to 32768 [ 184.868078][ T6715] overlayfs: conflicting lowerdir path [ 184.869041][ T6705] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.179 (6705) [ 184.914623][ T6705] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.954517][ T6705] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 185.002051][ T6705] BTRFS info (device loop2): using free space tree [ 185.111571][ T6705] BTRFS info (device loop2): enabling ssd optimizations [ 185.148511][ T6705] BTRFS info (device loop2): auto enabling async discard [ 185.349382][ T5787] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.881036][ T6750] loop1: detected capacity change from 0 to 2048 [ 189.064195][ T6750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 189.362129][ T6758] loop0: detected capacity change from 0 to 8 [ 189.558324][ T6758] SQUASHFS error: xz decompression failed, data probably corrupt [ 189.566695][ T6758] SQUASHFS error: Failed to read block 0x108: -5 [ 189.573131][ T6758] SQUASHFS error: Unable to read metadata cache entry [106] [ 189.580646][ T6758] SQUASHFS error: Unable to read inode 0x11f [ 190.231611][ T6762] loop0: detected capacity change from 0 to 256 [ 190.283163][ T6762] exfat: Deprecated parameter 'namecase' [ 190.315633][ T6762] exfat: Bad value for 'gid' [ 190.896948][ T6759] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 191.005714][ T6759] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 654 with error 28 [ 191.027068][ T6759] EXT4-fs (loop1): This should not happen!! Data will be lost [ 191.027068][ T6759] [ 191.038444][ T6759] EXT4-fs (loop1): Total free blocks count 0 [ 191.047994][ T6759] EXT4-fs (loop1): Free/Dirty block details [ 191.065294][ T6759] EXT4-fs (loop1): free_blocks=2415919104 [ 191.073053][ T6759] EXT4-fs (loop1): dirty_blocks=656 [ 191.079696][ T6759] EXT4-fs (loop1): Block reservation details [ 191.087449][ T6759] EXT4-fs (loop1): i_reserved_data_blocks=41 [ 191.747740][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 82 with max blocks 20 with error 28 [ 192.022336][ T6766] loop0: detected capacity change from 0 to 32768 [ 192.034582][ T6769] loop2: detected capacity change from 0 to 32768 [ 192.042196][ T6769] XFS: ikeep mount option is deprecated. [ 192.048000][ T6769] XFS: noikeep mount option is deprecated. [ 192.100067][ T6766] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.190 (6766) [ 192.156597][ T6769] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 192.193954][ T6766] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.196113][ T6769] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.236380][ T6766] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 192.245085][ T6766] BTRFS info (device loop0): using free space tree [ 192.344698][ T6798] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 192.420589][ T6766] BTRFS info (device loop0): enabling ssd optimizations [ 192.446518][ T6766] BTRFS info (device loop0): auto enabling async discard [ 192.496455][ T6769] XFS (loop2): Ending clean mount [ 192.736200][ T5788] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.935621][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.256462][ T5914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5914) [ 193.991868][ T6802] loop1: detected capacity change from 0 to 32768 [ 194.228035][ T6802] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.564032][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.570686][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.879523][ T6802] XFS (loop1): Ending clean mount [ 195.083120][ T6802] XFS (loop1): Quotacheck needed: Please wait. [ 195.231974][ T6802] XFS (loop1): Quotacheck: Done. [ 195.689216][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 198.076631][ T6878] loop0: detected capacity change from 0 to 32768 [ 198.112781][ T6878] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.143483][ T6878] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 198.164264][ T6878] BTRFS info (device loop0): using free space tree [ 198.300951][ T6878] BTRFS info (device loop0): enabling ssd optimizations [ 198.314899][ T6878] BTRFS info (device loop0): auto enabling async discard [ 198.615888][ T5788] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.851469][ T6880] loop3: detected capacity change from 0 to 32768 [ 198.859406][ T6880] XFS: ikeep mount option is deprecated. [ 198.865147][ T6880] XFS: noikeep mount option is deprecated. [ 198.962762][ T6880] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 199.009472][ T6880] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.045152][ T6907] loop0: detected capacity change from 0 to 764 [ 199.502772][ T6880] XFS (loop3): Ending clean mount [ 200.792509][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.604148][ T6921] loop2: detected capacity change from 0 to 32768 [ 202.300024][ T6921] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 202.300024][ T6921] [ 202.378234][ T6921] ERROR: (device loop2): remounting filesystem as read-only [ 202.475651][ T113] blkno = 5002c, nblocks = 1 [ 202.495529][ T113] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 202.495529][ T113] [ 202.616784][ T6923] loop0: detected capacity change from 0 to 32768 [ 202.903182][ T6929] loop3: detected capacity change from 0 to 4096 [ 203.893617][ T28] audit: type=1800 audit(1757897271.317:28): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.210" name="file1" dev="loop3" ino=0 res=0 errno=0 [ 205.550416][ T5836] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 206.012257][ T5836] usb 3-1: device descriptor read/64, error -71 [ 206.305613][ T5836] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.486651][ T5836] usb 3-1: device descriptor read/64, error -71 [ 206.495215][ T6954] loop0: detected capacity change from 0 to 32768 [ 206.502930][ T6954] XFS: ikeep mount option is deprecated. [ 206.508848][ T6954] XFS: noikeep mount option is deprecated. [ 206.542427][ T6954] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 206.561888][ T6954] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.618237][ T5836] usb usb3-port1: attempt power cycle [ 206.793264][ T6954] XFS (loop0): Ending clean mount [ 207.165900][ T5836] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 207.855979][ T5836] usb 3-1: device descriptor read/8, error -71 [ 207.883531][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.443668][ T6988] loop0: detected capacity change from 0 to 1024 [ 209.461406][ T6988] hfsplus: unable to parse mount options [ 210.780835][ T6994] loop3: detected capacity change from 0 to 256 [ 210.845944][ T6980] loop2: detected capacity change from 0 to 32768 [ 210.871413][ T5914] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.119435][ T6980] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 211.156124][ T6980] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 211.390476][ T6980] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 211.434430][ T5843] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 211.448119][ T5843] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 211.587822][ T5843] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 139ms [ 211.650943][ T5843] gfs2: fsid=syz:syz.0: jid=0: Done [ 211.660674][ T6980] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 211.779703][ T7003] netlink: 'syz.1.231': attribute type 10 has an invalid length. [ 211.841655][ T6980] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 212.008203][ T5105] Bluetooth: hci0: command 0x0406 tx timeout [ 212.014420][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 212.048141][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 212.055123][ T5105] Bluetooth: hci1: command 0x0406 tx timeout [ 212.168678][ T7008] loop3: detected capacity change from 0 to 8 [ 212.286228][ T7008] SQUASHFS error: xz decompression failed, data probably corrupt [ 212.294251][ T7008] SQUASHFS error: Failed to read block 0x108: -5 [ 212.300877][ T7008] SQUASHFS error: Unable to read metadata cache entry [106] [ 212.308614][ T7008] SQUASHFS error: Unable to read inode 0x11f [ 213.457357][ T6999] loop0: detected capacity change from 0 to 32768 [ 213.469074][ T6999] XFS: ikeep mount option is deprecated. [ 213.478658][ T6999] XFS: noikeep mount option is deprecated. [ 213.578399][ T6999] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 213.610380][ T6999] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.714482][ T6999] XFS (loop0): Ending clean mount [ 214.522011][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.247497][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 216.744409][ T7054] loop0: detected capacity change from 0 to 32768 [ 216.766712][ T7054] XFS: noikeep mount option is deprecated. [ 216.772728][ T7054] XFS: noikeep mount option is deprecated. [ 216.866697][ T7054] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.078027][ T7054] XFS (loop0): Ending clean mount [ 217.110042][ T7054] XFS (loop0): Quotacheck needed: Please wait. [ 217.193358][ T7054] XFS (loop0): Quotacheck: Done. [ 217.310085][ T28] audit: type=1804 audit(1757897284.727:29): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.242" name="/newroot/65/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 217.357099][ T7056] loop1: detected capacity change from 0 to 32768 [ 217.414340][ T7056] XFS: ikeep mount option is deprecated. [ 217.434758][ T7056] XFS: noikeep mount option is deprecated. [ 217.484924][ T7056] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 217.506874][ T7056] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.525627][ T7079] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 217.532743][ T7079] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 217.580720][ T7066] loop3: detected capacity change from 0 to 32768 [ 217.596341][ T7066] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.247 (7066) [ 217.599881][ T7079] vhci_hcd vhci_hcd.0: Device attached [ 217.670910][ T7066] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.687008][ T7066] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 217.696383][ T7066] BTRFS info (device loop3): using free space tree [ 217.740491][ T7080] vhci_hcd: connection closed [ 217.743443][ T1086] vhci_hcd: stop threads [ 217.767636][ T1086] vhci_hcd: release socket [ 217.773566][ T1086] vhci_hcd: disconnect device [ 217.806633][ T23] vhci_hcd: vhci_device speed not set [ 217.850480][ T7056] XFS (loop1): Ending clean mount [ 217.863910][ T7066] BTRFS info (device loop3): enabling ssd optimizations [ 217.906496][ T7066] BTRFS info (device loop3): auto enabling async discard [ 218.005811][ T7072] loop2: detected capacity change from 0 to 32768 [ 218.015883][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.078233][ T7072] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.111505][ T5794] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.401132][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.535739][ T7072] XFS (loop2): Ending clean mount [ 218.557150][ T7072] XFS (loop2): Quotacheck needed: Please wait. [ 218.730721][ T7072] XFS (loop2): Quotacheck: Done. [ 218.876212][ T7113] loop3: detected capacity change from 0 to 4096 [ 218.930709][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 221.632699][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 221.785993][ T7140] vim2m vim2m.0: vidioc_s_fmt queue busy [ 222.333814][ T7131] loop1: detected capacity change from 0 to 32768 [ 222.354594][ T7131] XFS: ikeep mount option is deprecated. [ 222.369891][ T7131] XFS: noikeep mount option is deprecated. [ 222.516625][ T7131] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 222.538114][ T7131] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.813270][ T7131] XFS (loop1): Ending clean mount [ 222.974021][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.113359][ T7154] loop2: detected capacity change from 0 to 32768 [ 224.870182][ T7154] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.106566][ T7154] XFS (loop2): Ending clean mount [ 225.169799][ T7154] XFS (loop2): Quotacheck needed: Please wait. [ 225.251630][ T7154] XFS (loop2): Quotacheck: Done. [ 225.404947][ T7181] loop3: detected capacity change from 0 to 256 [ 225.425012][ T7181] exfat: Deprecated parameter 'namecase' [ 225.459539][ T7181] exfat: Bad value for 'gid' [ 225.731864][ T5880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 225.970499][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.975776][ T5880] usb 2-1: device descriptor read/64, error -71 [ 226.375662][ T5880] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 226.535856][ T5880] usb 2-1: device descriptor read/64, error -71 [ 226.655917][ T5880] usb usb2-port1: attempt power cycle [ 226.877931][ T7188] loop3: detected capacity change from 0 to 32768 [ 227.065612][ T5880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 227.089212][ T7188] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 227.126749][ T7188] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 227.139931][ T5880] usb 2-1: device descriptor read/8, error -71 [ 227.435747][ T5880] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 227.455135][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 227.505788][ T5880] usb 2-1: device descriptor read/8, error -71 [ 228.409567][ T5880] usb usb2-port1: unable to enumerate USB device [ 229.140023][ T7209] overlayfs: overlapping lowerdir path [ 229.717513][ T7202] loop1: detected capacity change from 0 to 32768 [ 229.778395][ T7202] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 230.064617][ T7202] XFS (loop1): Ending clean mount [ 230.422665][ T7213] loop3: detected capacity change from 0 to 32768 [ 230.444882][ T5791] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 230.551155][ T7213] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.956722][ T7213] XFS (loop3): Ending clean mount [ 230.994219][ T7213] XFS (loop3): Quotacheck needed: Please wait. [ 231.191500][ T7213] XFS (loop3): Quotacheck: Done. [ 231.506086][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 232.091658][ T7238] loop1: detected capacity change from 0 to 32768 [ 232.103002][ T7238] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.281 (7238) [ 232.125225][ T7238] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.135551][ T7238] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 232.144497][ T7238] BTRFS info (device loop1): using free space tree [ 232.303595][ T7238] BTRFS info (device loop1): enabling ssd optimizations [ 232.310781][ T7238] BTRFS info (device loop1): auto enabling async discard [ 233.619603][ T7266] overlayfs: overlapping lowerdir path [ 234.185624][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 235.155571][ T9] usb 4-1: device descriptor read/64, error -71 [ 235.445921][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 236.072277][ T9] usb 4-1: device descriptor read/64, error -71 [ 236.225908][ T9] usb usb4-port1: attempt power cycle [ 236.248485][ T5791] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 237.340940][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 237.575639][ T9] usb 4-1: device not accepting address 6, error -71 [ 241.733939][ T7320] loop0: detected capacity change from 0 to 32768 [ 241.741716][ T7320] XFS: noikeep mount option is deprecated. [ 241.784976][ T7320] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.835901][ T5850] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 241.873352][ T7320] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 241.907009][ T7320] XFS (loop0): Starting recovery (logdev: internal) [ 241.950834][ T7320] XFS (loop0): Ending recovery (logdev: internal) [ 242.009219][ T5850] usb 2-1: device descriptor read/64, error -71 [ 242.081483][ T5788] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 242.298678][ T5850] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 242.478054][ T5850] usb 2-1: device descriptor read/64, error -71 [ 242.561124][ T7340] loop2: detected capacity change from 0 to 16 [ 242.591626][ T7340] erofs: (device loop2): mounted with root inode @ nid 36. [ 242.614134][ T5850] usb usb2-port1: attempt power cycle [ 242.692546][ T7341] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 242.703823][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 242.713120][ T7341] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 242.724338][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 242.734412][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 242.747513][ T7341] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 242.758457][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 242.767843][ T7341] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 242.779257][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 242.788712][ T7341] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 242.799658][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 242.808929][ T7341] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 242.819663][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 242.829992][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 242.839805][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 242.849924][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 242.859983][ T7341] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 242.870837][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 242.881498][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 242.891083][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 242.901033][ T7341] erofs: (device loop2): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 242.912161][ T7341] syz.2.305: attempt to access beyond end of device [ 242.912161][ T7341] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 242.926965][ T7341] syz.2.305: attempt to access beyond end of device [ 242.926965][ T7341] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 242.942020][ T7341] syz.2.305: attempt to access beyond end of device [ 242.942020][ T7341] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 242.956854][ T7341] syz.2.305: attempt to access beyond end of device [ 242.956854][ T7341] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 244.137225][ T5850] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.267432][ T5850] usb 2-1: device descriptor read/8, error -71 [ 244.545843][ T5850] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 244.588603][ T5850] usb 2-1: device descriptor read/8, error -71 [ 244.708236][ T5850] usb usb2-port1: unable to enumerate USB device [ 244.950570][ T7351] loop2: detected capacity change from 0 to 16 [ 245.668864][ T7351] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 245.742866][ T7353] overlayfs: overlapping lowerdir path [ 246.314654][ T7361] loop0: detected capacity change from 0 to 32768 [ 246.336561][ T7361] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.311 (7361) [ 246.366577][ T7351] erofs: DAX unsupported by block device. Turning off DAX. [ 246.373872][ T7361] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 246.384297][ T7361] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 246.393101][ T7361] BTRFS info (device loop0): using free space tree [ 246.603452][ T7351] erofs: (device loop2): mounted with root inode @ nid 36. [ 246.652353][ T7361] BTRFS info (device loop0): enabling ssd optimizations [ 246.661011][ T7361] BTRFS info (device loop0): auto enabling async discard [ 248.133611][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 248.797911][ T7400] loop3: detected capacity change from 0 to 16 [ 248.953587][ T7400] erofs: (device loop3): mounted with root inode @ nid 36. [ 249.413737][ T5850] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 249.867366][ T7400] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 249.878485][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 249.888413][ T7400] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 249.899425][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 249.909115][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 249.918929][ T7400] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 249.929947][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 249.939174][ T7400] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 249.950986][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 249.960522][ T7400] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 249.971414][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 249.980828][ T7400] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 249.991476][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 250.000952][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 250.010219][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 250.019915][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 250.029948][ T7400] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 250.040683][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 250.051430][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 250.060708][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 250.070806][ T7400] erofs: (device loop3): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 250.081028][ T7400] syz.3.316: attempt to access beyond end of device [ 250.081028][ T7400] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 250.096792][ T7400] syz.3.316: attempt to access beyond end of device [ 250.096792][ T7400] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 250.111486][ T7400] syz.3.316: attempt to access beyond end of device [ 250.111486][ T7400] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 250.126396][ T7400] syz.3.316: attempt to access beyond end of device [ 250.126396][ T7400] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 250.142725][ T5850] usb 1-1: no configurations [ 251.148117][ T5850] usb 1-1: can't read configurations, error -22 [ 252.108449][ T5850] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 252.356852][ T7418] overlayfs: overlapping lowerdir path [ 254.878037][ T7430] pimreg3: entered allmulticast mode [ 255.916493][ T7438] loop2: detected capacity change from 0 to 32768 [ 255.972786][ T7438] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.325 (7438) [ 256.000098][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.006602][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.037048][ T7438] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.048738][ T7438] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 256.057557][ T7438] BTRFS info (device loop2): using free space tree [ 256.539908][ T7438] BTRFS info (device loop2): enabling ssd optimizations [ 256.547119][ T7438] BTRFS info (device loop2): auto enabling async discard [ 257.804583][ T5787] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 258.355659][ T7313] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 258.382325][ T7461] loop1: detected capacity change from 0 to 32768 [ 258.487886][ T7461] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 258.487886][ T7461] [ 258.514090][ T7461] ERROR: (device loop1): remounting filesystem as read-only [ 258.559967][ T7313] usb 3-1: no configurations [ 258.585106][ T7313] usb 3-1: can't read configurations, error -22 [ 258.644450][ T113] blkno = 5002c, nblocks = 1 [ 258.662324][ T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 258.662324][ T113] [ 258.726056][ T7464] loop3: detected capacity change from 0 to 32768 [ 258.735712][ T7464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.328 (7464) [ 258.765652][ T7313] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 258.784494][ T7464] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.815604][ T7464] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 258.824325][ T7464] BTRFS info (device loop3): force clearing of disk cache [ 258.845792][ T7464] BTRFS error (device loop3): unrecognized metadata_ratio value 0x0000000080000000 [ 258.888398][ T7464] BTRFS error (device loop3): open_ctree failed: -34 [ 258.997930][ T7313] usb 3-1: no configurations [ 259.002639][ T7313] usb 3-1: can't read configurations, error -22 [ 259.013494][ T7313] usb usb3-port1: attempt power cycle [ 260.309548][ T7313] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 260.347100][ T7313] usb 3-1: no configurations [ 260.351771][ T7313] usb 3-1: can't read configurations, error -22 [ 260.521085][ T7313] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 260.567412][ T7313] usb 3-1: no configurations [ 260.572094][ T7313] usb 3-1: can't read configurations, error -22 [ 260.585831][ T7313] usb usb3-port1: unable to enumerate USB device [ 260.946831][ T7477] loop1: detected capacity change from 0 to 32768 [ 261.285350][ T7477] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 261.898633][ T7477] XFS (loop1): Ending clean mount [ 261.925423][ T7477] XFS (loop1): Quotacheck needed: Please wait. [ 262.183950][ T7477] XFS (loop1): Quotacheck: Done. [ 262.432282][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 263.615610][ T7512] loop2: detected capacity change from 0 to 4096 [ 263.640665][ T7512] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 264.193915][ T7522] ntfs3: loop2: failed to convert "c46c" to macromanian [ 264.225605][ T5883] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 264.738792][ T5883] usb 4-1: no configurations [ 264.829859][ T5883] usb 4-1: can't read configurations, error -22 [ 265.235707][ T5883] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 265.457077][ T5883] usb 4-1: no configurations [ 265.464522][ T5883] usb 4-1: can't read configurations, error -22 [ 265.501481][ T5883] usb usb4-port1: attempt power cycle [ 265.734546][ T7528] loop2: detected capacity change from 0 to 32768 [ 265.785189][ T7528] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 265.926186][ T5883] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 265.994475][ T5883] usb 4-1: no configurations [ 266.023433][ T5883] usb 4-1: can't read configurations, error -22 [ 266.042371][ T7528] XFS (loop2): Ending clean mount [ 266.083750][ T7528] XFS (loop2): Quotacheck needed: Please wait. [ 266.134701][ T7528] XFS (loop2): Quotacheck: Done. [ 266.225818][ T5883] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 266.323494][ T5883] usb 4-1: no configurations [ 266.337492][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 266.346423][ T5883] usb 4-1: can't read configurations, error -22 [ 266.353356][ T5883] usb usb4-port1: unable to enumerate USB device [ 268.341014][ T7570] pimreg3: entered allmulticast mode [ 271.086264][ T7574] loop2: detected capacity change from 0 to 32768 [ 271.145331][ T7574] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 271.244557][ T7574] XFS (loop2): Ending clean mount [ 271.383261][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 271.857853][ T7588] loop1: detected capacity change from 0 to 32768 [ 272.026714][ T7588] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 272.115672][ T7313] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 272.298397][ T7588] XFS (loop1): Ending clean mount [ 272.358343][ T7313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.377696][ T7588] XFS (loop1): Quotacheck needed: Please wait. [ 272.408017][ T7313] usb 3-1: config 0 has no interfaces? [ 272.440724][ T7313] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 272.475660][ T7313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.507317][ T7313] usb 3-1: config 0 descriptor?? [ 272.595979][ T7588] XFS (loop1): Quotacheck: Done. [ 272.990372][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.677255][ T7608] loop3: detected capacity change from 0 to 32768 [ 273.698235][ T7608] XFS: ikeep mount option is deprecated. [ 273.720829][ T7608] XFS: noikeep mount option is deprecated. [ 273.759115][ T7608] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 273.789033][ T7608] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 273.965940][ T7608] XFS (loop3): Ending clean mount [ 274.540064][ T7635] loop1: detected capacity change from 0 to 16 [ 274.561023][ T7635] erofs: (device loop1): mounted with root inode @ nid 36. [ 274.865919][ T7313] usb 3-1: USB disconnect, device number 12 [ 275.105018][ T7630] loop0: detected capacity change from 0 to 32768 [ 275.674393][ T7630] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 275.825729][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.129381][ T5788] (syz-executor,5788,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 276.240640][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 276.445868][ T7653] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 276.570935][ T7642] loop2: detected capacity change from 0 to 32768 [ 276.631749][ T7642] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.987351][ T7642] XFS (loop2): Ending clean mount [ 277.035677][ T7642] XFS (loop2): Quotacheck needed: Please wait. [ 277.119341][ T7642] XFS (loop2): Quotacheck: Done. [ 277.268672][ T7313] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 277.287025][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.500234][ T7313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.558969][ T7313] usb 1-1: config 0 has no interfaces? [ 277.564536][ T7313] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 277.600481][ T7313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.612744][ T7313] usb 1-1: config 0 descriptor?? [ 278.128133][ T5843] IPVS: starting estimator thread 0... [ 278.134400][ T7680] IPVS: nq: FWM 3 0x00000003 - no destination available [ 278.225786][ T7681] IPVS: using max 18 ests per chain, 43200 per kthread [ 278.515933][ T7676] loop3: detected capacity change from 0 to 32768 [ 278.529155][ T7676] XFS: ikeep mount option is deprecated. [ 278.551927][ T7676] XFS: noikeep mount option is deprecated. [ 278.603588][ T7676] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 278.617114][ T7676] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.753133][ T7676] XFS (loop3): Ending clean mount [ 278.925983][ T7683] loop2: detected capacity change from 0 to 32768 [ 278.960725][ T7683] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 279.096313][ T7683] XFS (loop2): Ending clean mount [ 279.149571][ T7683] XFS (loop2): Quotacheck needed: Please wait. [ 279.243204][ T7683] XFS (loop2): Quotacheck: Done. [ 279.511265][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.042828][ T7313] usb 1-1: USB disconnect, device number 6 [ 280.269344][ T7713] overlayfs: missing 'lowerdir' [ 280.329275][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.735099][ T7707] loop1: detected capacity change from 0 to 32768 [ 280.872614][ T7707] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 281.250214][ T5791] (syz-executor,5791,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 281.297081][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 281.356481][ T7715] loop0: detected capacity change from 0 to 40427 [ 281.399426][ T7715] F2FS-fs (loop0): build fault injection attr: rate: 329, type: 0x7ffff [ 282.366326][ T7731] syzkaller1: entered promiscuous mode [ 282.379338][ T7731] syzkaller1: entered allmulticast mode [ 282.547352][ T7721] loop2: detected capacity change from 0 to 32768 [ 282.642335][ T7721] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 283.514006][ T7721] XFS (loop2): Ending clean mount [ 283.539156][ T7721] XFS (loop2): Quotacheck needed: Please wait. [ 283.795075][ T7721] XFS (loop2): Quotacheck: Done. [ 284.282275][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 284.305255][ T7313] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 284.517871][ T7313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.555677][ T7313] usb 1-1: config 0 has no interfaces? [ 284.561243][ T7313] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 284.595761][ T7313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.636629][ T7313] usb 1-1: config 0 descriptor?? [ 284.700485][ T7742] loop3: detected capacity change from 0 to 32768 [ 284.740531][ T7742] XFS: ikeep mount option is deprecated. [ 284.765787][ T7742] XFS: noikeep mount option is deprecated. [ 284.818471][ T7742] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 284.841376][ T7762] overlayfs: missing 'lowerdir' [ 284.855990][ T7742] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 285.337882][ T7742] XFS (loop3): Ending clean mount [ 286.177380][ T7313] usb 1-1: USB disconnect, device number 7 [ 286.539816][ T7774] loop0: detected capacity change from 0 to 2048 [ 286.554799][ T7774] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 286.634889][ T7779] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.646675][ T5914] udevd[5914]: incorrect nilfs2 checksum on /dev/loop0 [ 286.662599][ T7774] netlink: 'syz.0.406': attribute type 10 has an invalid length. [ 286.678958][ T7774] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 286.776540][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.958886][ T7772] loop2: detected capacity change from 0 to 32768 [ 287.083563][ T7772] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 287.349701][ T5787] (syz-executor,5787,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 287.398489][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 287.808757][ T7789] overlayfs: missing 'lowerdir' [ 288.965544][ T7313] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 289.187753][ T7313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.205578][ T7313] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.245692][ T7313] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 289.254810][ T7313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.295885][ T7313] usb 4-1: config 0 descriptor?? [ 289.430110][ T7797] loop1: detected capacity change from 0 to 32768 [ 289.771066][ T7797] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 289.883407][ T7804] loop0: detected capacity change from 0 to 32768 [ 289.891010][ T7804] XFS: ikeep mount option is deprecated. [ 289.892567][ T7797] XFS (loop1): Ending clean mount [ 289.905573][ T7804] XFS: noikeep mount option is deprecated. [ 289.938697][ T7804] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 289.978888][ T7804] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 290.065166][ T5791] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 290.244204][ T7804] XFS (loop0): Ending clean mount [ 291.349666][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.485027][ T7827] loop2: detected capacity change from 0 to 40427 [ 291.535571][ T7827] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 291.547755][ T7829] loop1: detected capacity change from 0 to 32768 [ 291.749555][ T7313] usb 4-1: USB disconnect, device number 12 [ 291.769967][ T7829] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 291.968191][ T7835] overlay: Unknown parameter '/' [ 292.069545][ T5791] (syz-executor,5791,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 292.104493][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 292.387554][ T7847] loop1: detected capacity change from 0 to 1024 [ 292.427114][ T7847] hfsplus: unable to parse mount options [ 292.517702][ T7847] netlink: set zone limit has 8 unknown bytes [ 293.785675][ T7846] loop2: detected capacity change from 0 to 32768 [ 293.823906][ T7846] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.425 (7846) [ 293.877601][ T7846] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 293.906760][ T7844] loop3: detected capacity change from 0 to 32768 [ 293.909372][ T7846] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 293.932530][ T7844] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.424 (7844) [ 293.942937][ T7846] BTRFS info (device loop2): using free space tree [ 294.132010][ T7850] loop1: detected capacity change from 0 to 32768 [ 294.312855][ T5802] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (5802) [ 294.623150][ T7850] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 294.755727][ T7846] BTRFS info (device loop2): enabling ssd optimizations [ 294.965690][ T7846] BTRFS info (device loop2): auto enabling async discard [ 295.096339][ T7850] XFS (loop1): Ending clean mount [ 295.384336][ T5791] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.616519][ T5787] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.905590][ T967] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 296.170530][ T967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.195099][ T967] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.232129][ T967] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 296.244799][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.345050][ T967] usb 2-1: config 0 descriptor?? [ 297.116956][ T7887] loop0: detected capacity change from 0 to 32768 [ 297.217764][ T7887] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 297.244278][ T7882] loop3: detected capacity change from 0 to 32768 [ 297.257108][ T7882] XFS: ikeep mount option is deprecated. [ 297.263316][ T7882] XFS: noikeep mount option is deprecated. [ 297.354063][ T7882] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 297.368908][ T7882] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.465195][ T5788] (syz-executor,5788,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 297.492683][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 297.559450][ T7904] overlay: Unknown parameter '/' [ 297.622350][ T7882] XFS (loop3): Ending clean mount [ 298.140774][ T7907] loop2: detected capacity change from 0 to 2048 [ 298.159468][ T7907] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 298.204507][ T7910] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.233310][ T7909] loop0: detected capacity change from 0 to 4096 [ 298.258365][ T7909] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 298.278585][ T7907] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 298.336596][ T7907] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 298.656042][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 298.666720][ T7913] loop0: detected capacity change from 0 to 1024 [ 298.693981][ T7913] hfsplus: unable to parse mount options [ 298.764952][ T967] usb 2-1: USB disconnect, device number 10 [ 298.777610][ T7913] netlink: set zone limit has 8 unknown bytes [ 301.030772][ T7924] loop2: detected capacity change from 0 to 32768 [ 301.090685][ T7924] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 301.184975][ T7924] XFS (loop2): Ending clean mount [ 301.219366][ T7926] loop0: detected capacity change from 0 to 32768 [ 301.309553][ T7926] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 301.379573][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 301.394799][ T7930] loop3: detected capacity change from 0 to 32768 [ 301.405581][ T7930] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.435 (7930) [ 301.454180][ T7930] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 301.496545][ T7930] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 301.531289][ T5788] (syz-executor,5788,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 301.542295][ T7930] BTRFS info (device loop3): using free space tree [ 301.593379][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 301.775266][ T7930] BTRFS info (device loop3): enabling ssd optimizations [ 301.825526][ T7930] BTRFS info (device loop3): auto enabling async discard [ 301.969150][ T7930] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4) [ 302.001443][ T7962] usb usb8: usbfs: process 7962 (syz.1.446) did not claim interface 0 before use [ 302.143744][ T5794] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.271451][ T7967] loop1: detected capacity change from 0 to 1024 [ 302.286828][ T7967] hfsplus: unable to parse mount options [ 302.332163][ T7967] netlink: set zone limit has 8 unknown bytes [ 302.425914][ T5880] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 302.692198][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.815250][ T5880] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.925189][ T5880] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 303.035556][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 303.060857][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.199064][ T5880] usb 1-1: config 0 descriptor?? [ 303.763280][ T7963] loop2: detected capacity change from 0 to 32768 [ 303.785610][ T7963] XFS: ikeep mount option is deprecated. [ 303.791443][ T7963] XFS: noikeep mount option is deprecated. [ 303.831187][ T7963] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 303.846811][ T7963] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 303.869783][ T7970] loop1: detected capacity change from 0 to 32768 [ 304.125086][ T7963] XFS (loop2): Ending clean mount [ 304.881731][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.224830][ T7313] usb 1-1: USB disconnect, device number 8 [ 306.438026][ T7990] loop2: detected capacity change from 0 to 32768 [ 306.536167][ T7990] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 306.654866][ T7990] XFS (loop2): Ending clean mount [ 306.871956][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 307.092683][ T7997] loop0: detected capacity change from 0 to 32768 [ 307.126812][ T7997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.456 (7997) [ 307.171112][ T7997] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.183190][ T7997] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 307.195001][ T7997] BTRFS info (device loop0): using free space tree [ 307.365244][ T7997] BTRFS info (device loop0): enabling ssd optimizations [ 307.395570][ T7997] BTRFS info (device loop0): auto enabling async discard [ 307.454423][ T7997] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 307.569591][ T5788] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 308.475133][ T8029] loop0: detected capacity change from 0 to 512 [ 308.729819][ T8029] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 308.742520][ T8029] EXT4-fs (loop0): orphan cleanup on readonly fs [ 308.758035][ T8029] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 308.808428][ T8029] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 308.820065][ T8029] EXT4-fs error (device loop0): __ext4_iget:5053: inode #16: block 127754: comm syz.0.458: invalid block [ 308.844825][ T8029] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.458: couldn't read orphan inode 16 (err -117) [ 308.868309][ T8029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.238862][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.261573][ T8033] loop2: detected capacity change from 0 to 1024 [ 309.303540][ T8033] hfsplus: unable to parse mount options [ 309.407829][ T8033] netlink: set zone limit has 8 unknown bytes [ 309.715864][ T5843] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 309.938459][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.989616][ T5843] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 310.015836][ T5843] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 310.052936][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.116979][ T5843] usb 1-1: config 0 descriptor?? [ 310.196982][ T8027] loop3: detected capacity change from 0 to 32768 [ 310.214815][ T8027] XFS: ikeep mount option is deprecated. [ 310.220670][ T8027] XFS: noikeep mount option is deprecated. [ 310.625734][ T8027] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 310.678602][ T8027] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 310.882103][ T8027] XFS (loop3): Ending clean mount [ 311.675226][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 311.990547][ T8045] loop2: detected capacity change from 0 to 40427 [ 312.012257][ T8045] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 312.043594][ T8045] F2FS-fs (loop2): invalid crc value [ 312.064734][ T8045] F2FS-fs (loop2): Found nat_bits in checkpoint [ 312.255698][ T8045] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 313.173441][ T967] usb 1-1: USB disconnect, device number 9 [ 313.582348][ T28] audit: type=1804 audit(1757897381.007:30): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.463" name="/newroot/97/file1/file1" dev="loop2" ino=10 res=1 errno=0 [ 313.695471][ T8080] loop3: detected capacity change from 0 to 1024 [ 313.719525][ T8078] syz.2.463: attempt to access beyond end of device [ 313.719525][ T8078] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 313.729666][ T8080] hfsplus: unable to parse mount options [ 313.971295][ T8078] F2FS-fs (loop2): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0 [ 314.024156][ T8080] netlink: set zone limit has 8 unknown bytes [ 314.254852][ T5787] syz-executor: attempt to access beyond end of device [ 314.254852][ T5787] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 314.274137][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 314.284137][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 314.573491][ T8075] loop1: detected capacity change from 0 to 32768 [ 315.784748][ T8095] loop1: detected capacity change from 0 to 64 [ 315.808436][ T8091] loop0: detected capacity change from 0 to 4096 [ 315.812792][ T8095] hfs: unable to locate alternate MDB [ 315.827366][ T8091] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 315.850278][ T8095] hfs: continuing without an alternate MDB [ 315.983487][ T8091] ntfs3: loop0: failed to convert "c46c" to macgaelic [ 316.117027][ T7313] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 316.350673][ T7313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.385668][ T7313] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.420322][ T7313] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 316.438116][ T7313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.474992][ T7313] usb 4-1: config 0 descriptor?? [ 316.523879][ T8093] loop2: detected capacity change from 0 to 32768 [ 316.539448][ T8093] XFS: ikeep mount option is deprecated. [ 316.556802][ T8093] XFS: noikeep mount option is deprecated. [ 316.595648][ T8093] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 316.617837][ T8093] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.628915][ T8110] loop1: detected capacity change from 0 to 8 [ 316.897637][ T28] audit: type=1800 audit(1757897384.317:31): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.481" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 316.917007][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.962452][ T8093] XFS (loop2): Ending clean mount [ 317.025289][ T8110] SQUASHFS error: Failed to read block 0x2fc: -5 [ 317.059442][ T8110] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 317.092626][ T8110] SQUASHFS error: read_indexes: reading block [2fa:0] [ 317.108541][ T8101] loop0: detected capacity change from 0 to 32768 [ 317.128810][ T8110] SQUASHFS error: Failed to read block 0xfc: -5 [ 317.205248][ T8110] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 317.250088][ T8110] SQUASHFS error: read_indexes: reading block [2fa:0] [ 317.278682][ T8115] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 317.312503][ T8101] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 317.324555][ T8115] SQUASHFS error: read_indexes: reading block [2fa:0] [ 317.441965][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.448800][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.547526][ T8101] XFS (loop0): Ending clean mount [ 317.564751][ T8101] XFS (loop0): Quotacheck needed: Please wait. [ 317.638395][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 317.679280][ T8101] XFS (loop0): Quotacheck: Done. [ 318.437183][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 318.932189][ T7313] usb 4-1: USB disconnect, device number 13 [ 320.107144][ T8143] loop2: detected capacity change from 0 to 1024 [ 320.177580][ T8143] hfsplus: unable to parse mount options [ 320.260440][ T8143] netlink: set zone limit has 8 unknown bytes [ 321.341027][ T8150] loop3: detected capacity change from 0 to 32768 [ 321.360118][ T8150] XFS: ikeep mount option is deprecated. [ 321.383277][ T8150] XFS: noikeep mount option is deprecated. [ 321.566111][ T8170] loop1: detected capacity change from 0 to 1024 [ 321.706637][ T8170] EXT4-fs: Ignoring removed bh option [ 321.712436][ T8170] EXT4-fs: inline encryption not supported [ 322.213296][ T8170] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.303363][ T8170] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.496: lblock 2 mapped to illegal pblock 2 (length 1) [ 322.320881][ T8170] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 322.329435][ T8170] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.496: lblock 0 mapped to illegal pblock 48 (length 1) [ 322.349088][ T8170] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 322.358568][ T8170] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.496: Failed to acquire dquot type 0 [ 322.375362][ T8170] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 322.402642][ T8170] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.496: mark_inode_dirty error [ 322.415591][ T8170] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 322.428342][ T8170] EXT4-fs (loop1): 1 orphan inode deleted [ 322.463503][ T8170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.666819][ T8150] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 322.708369][ T8150] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 322.748300][ T6846] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 322.845508][ T6846] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 323.049658][ T6846] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:33: Failed to release dquot type 0 [ 324.027074][ T5883] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 324.441265][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.531889][ T5791] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 324.580367][ T5883] usb 3-1: device descriptor read/all, error -71 [ 324.612997][ T8150] XFS (loop3): Ending clean mount [ 324.663300][ T5791] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 324.746718][ T5791] EXT4-fs error (device loop1): ext4_quota_off:7224: inode #3: comm syz-executor: mark_inode_dirty error [ 324.809545][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 325.470507][ T8180] loop0: detected capacity change from 0 to 262144 [ 325.487282][ T8180] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.497 (8180) [ 325.516809][ T8180] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 325.527440][ T8180] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 325.536812][ T8180] BTRFS info (device loop0): turning on async discard [ 325.543634][ T8180] BTRFS info (device loop0): using free space tree [ 325.683744][ T8180] BTRFS info (device loop0): enabling ssd optimizations [ 326.098426][ T8208] warning: `syz.0.497' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 326.278777][ T28] audit: type=1804 audit(1757897393.557:32): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.497" name="/newroot/123/file0/file1" dev="loop0" ino=260 res=1 errno=0 [ 326.712331][ T8184] loop2: detected capacity change from 0 to 32768 [ 326.723074][ T8211] loop1: detected capacity change from 0 to 1024 [ 326.767810][ T8211] hfsplus: unable to parse mount options [ 326.797134][ T8184] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.501 (8184) [ 326.835058][ T8184] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 326.846128][ T8184] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 326.904386][ T5788] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 326.945053][ T5792] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 326.985891][ T8184] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 326.995365][ T8184] BTRFS info (device loop2): use zstd compression, level 3 [ 327.045625][ T8184] BTRFS info (device loop2): using free space tree [ 327.054805][ T8211] netlink: set zone limit has 8 unknown bytes [ 328.106056][ T8184] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 328.117479][ T8184] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 328.174407][ T8184] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 328.248451][ T8184] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 328.316936][ T8184] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 328.473744][ T5914] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 10 /dev/loop0 scanned by udevd (5914) [ 328.547814][ T8184] BTRFS error (device loop2): open_ctree failed: -12 [ 329.185593][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 329.392277][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.424637][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.455877][ T9] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 329.502012][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.538742][ T9] usb 1-1: config 0 descriptor?? [ 330.009310][ T8237] loop3: detected capacity change from 0 to 40427 [ 330.031179][ T8243] loop1: detected capacity change from 0 to 32768 [ 330.071563][ T8243] XFS: ikeep mount option is deprecated. [ 330.075571][ T8237] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 330.106620][ T8237] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 330.113865][ T8243] XFS: noikeep mount option is deprecated. [ 330.115312][ T8237] F2FS-fs (loop3): heap/no_heap options were deprecated [ 330.185576][ T8237] F2FS-fs (loop3): Image doesn't support compression [ 330.228537][ T8237] F2FS-fs (loop3): invalid crc value [ 330.238300][ T8243] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 330.286045][ T8237] F2FS-fs (loop3): Found nat_bits in checkpoint [ 330.295824][ T8243] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.488821][ T8237] F2FS-fs (loop3): Start checkpoint disabled! [ 330.588932][ T8237] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 330.618879][ T8237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 330.862820][ T8243] XFS (loop1): Ending clean mount [ 330.926598][ T9] usb 1-1: USB disconnect, device number 10 [ 331.999956][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 332.232529][ T8274] loop1: detected capacity change from 0 to 1024 [ 332.357940][ T8274] hfsplus: unable to parse mount options [ 332.506283][ T8274] netlink: set zone limit has 8 unknown bytes [ 332.974495][ T8278] loop2: detected capacity change from 0 to 65536 [ 332.985603][ T8277] loop3: detected capacity change from 0 to 1024 [ 333.129033][ T8277] EXT4-fs: Ignoring removed bh option [ 333.200288][ T8277] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 333.286251][ T8278] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 333.423163][ T8277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.625616][ T8278] XFS (loop2): Ending clean mount [ 333.889092][ T8277] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 334.133967][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.460332][ T5787] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 336.102134][ T8297] loop0: detected capacity change from 0 to 32768 [ 336.182387][ T8297] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 336.205664][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 336.279836][ T8307] loop3: detected capacity change from 0 to 32768 [ 336.306634][ T8307] XFS: ikeep mount option is deprecated. [ 336.312390][ T8307] XFS: noikeep mount option is deprecated. [ 336.377072][ T8307] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 336.391318][ T5788] (syz-executor,5788,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 336.394588][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.411266][ T8307] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.439587][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 336.452438][ T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 336.515712][ T23] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 336.524997][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.662331][ T23] usb 2-1: config 0 descriptor?? [ 337.213808][ T6847] wlan1: Trigger new scan to find an IBSS to join [ 337.300551][ T8307] XFS (loop3): Ending clean mount [ 337.700891][ T8327] loop0: detected capacity change from 0 to 1024 [ 337.751123][ T8327] hfsplus: unable to parse mount options [ 337.822861][ T8327] netlink: set zone limit has 8 unknown bytes [ 338.037979][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 339.506362][ T23] usb 2-1: USB disconnect, device number 11 [ 341.251828][ T6856] wlan1: Trigger new scan to find an IBSS to join [ 341.494243][ T8348] loop1: detected capacity change from 0 to 2048 [ 341.536957][ T8348] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 341.611209][ T8350] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.094504][ T8359] loop0: detected capacity change from 0 to 1024 [ 342.126846][ T8359] hfsplus: unable to parse mount options [ 342.158821][ T8359] netlink: set zone limit has 8 unknown bytes [ 342.259013][ T12] wlan1: Creating new IBSS network, BSSID ca:64:d5:79:c3:0a [ 342.395569][ T5880] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 343.112995][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.134582][ T5880] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.155517][ T5880] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 343.174893][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.185917][ T8345] loop3: detected capacity change from 0 to 32768 [ 343.206536][ T5880] usb 3-1: config 0 descriptor?? [ 343.325976][ T8357] loop1: detected capacity change from 0 to 32768 [ 343.344669][ T8357] XFS: ikeep mount option is deprecated. [ 343.379687][ T8357] XFS: noikeep mount option is deprecated. [ 343.414560][ T8357] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 343.438585][ T8357] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 343.610709][ T8357] XFS (loop1): Ending clean mount [ 344.208443][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 344.528373][ T8380] loop0: detected capacity change from 0 to 64 [ 345.444403][ T8383] tipc: Started in network mode [ 345.455926][ T8383] tipc: Node identity 3a38f4e39cc6, cluster identity 4711 [ 345.463381][ T8383] tipc: Enabled bearer , priority 0 [ 345.492345][ T5850] usb 3-1: USB disconnect, device number 15 [ 345.519420][ T8385] syzkaller0: entered promiscuous mode [ 345.525057][ T8385] syzkaller0: entered allmulticast mode [ 345.625301][ T8383] tipc: Resetting bearer [ 345.653195][ T8382] tipc: Resetting bearer [ 345.968425][ T8382] tipc: Disabling bearer [ 346.913470][ T8398] loop0: detected capacity change from 0 to 1024 [ 346.934583][ T8398] hfsplus: unable to parse mount options [ 347.067502][ T8398] netlink: set zone limit has 8 unknown bytes [ 351.059709][ T8421] loop3: detected capacity change from 0 to 2048 [ 351.100385][ T8421] NILFS (loop3): invalid segment: Magic number mismatch [ 351.108298][ T5883] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 351.126813][ T8421] NILFS (loop3): trying rollback from an earlier position [ 351.166335][ T8421] NILFS (loop3): recovery complete [ 351.195572][ T8424] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.508750][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.524291][ T5883] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 351.533553][ T5883] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 351.548371][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.561277][ T5883] usb 1-1: config 0 descriptor?? [ 352.767512][ T8432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.560'. [ 353.366178][ T5880] usb 1-1: USB disconnect, device number 11 [ 353.804696][ T8441] loop0: detected capacity change from 0 to 64 [ 354.070553][ T8441] hfs: invalid btree extent records (0 size) [ 354.110487][ T8441] hfs: unable to open catalog tree [ 354.146903][ T8441] hfs: can't find a HFS filesystem on dev loop0 [ 354.818588][ T8448] loop0: detected capacity change from 0 to 4096 [ 354.834136][ T8448] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 355.360399][ T8454] loop1: detected capacity change from 0 to 1024 [ 355.377800][ T8454] hfsplus: unable to parse mount options [ 355.418768][ T8452] loop0: detected capacity change from 0 to 4096 [ 355.488228][ T8454] netlink: set zone limit has 8 unknown bytes [ 355.583648][ T8455] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.213154][ T28] audit: type=1800 audit(1757897423.637:33): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.566" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 356.282808][ T28] audit: type=1800 audit(1757897423.637:34): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.566" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 357.600476][ T8464] loop1: detected capacity change from 0 to 32768 [ 357.635633][ T5883] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 357.679020][ T8464] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 357.841301][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.851881][ T5883] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 357.864429][ T5791] (syz-executor,5791,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 357.866236][ T5883] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 357.889768][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.916670][ T5883] usb 3-1: config 0 descriptor?? [ 357.962747][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 358.588874][ T8474] loop1: detected capacity change from 0 to 2048 [ 358.641270][ T8474] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 358.699215][ T8475] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.177364][ T9] usb 3-1: USB disconnect, device number 16 [ 360.199598][ T8481] loop1: detected capacity change from 0 to 40427 [ 360.258988][ T8481] F2FS-fs (loop1): invalid crc value [ 360.284476][ T8481] F2FS-fs (loop1): Found nat_bits in checkpoint [ 360.375867][ T5880] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 360.406430][ T8490] loop0: detected capacity change from 0 to 1024 [ 360.426633][ T8490] hfsplus: unable to parse mount options [ 360.461083][ T8481] F2FS-fs (loop1): Start checkpoint disabled! [ 360.470727][ T8490] netlink: set zone limit has 8 unknown bytes [ 360.511947][ T8481] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 360.585528][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 360.608815][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 360.643370][ T5880] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0104, bcdDevice=30.00 [ 360.667796][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.706572][ T5880] usb 4-1: Product: syz [ 360.710948][ T5880] usb 4-1: Manufacturer: syz [ 360.725679][ T5880] usb 4-1: SerialNumber: syz [ 361.109386][ T12] kworker/u4:1: attempt to access beyond end of device [ 361.109386][ T12] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 361.127891][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 362.766645][ T8504] loop1: detected capacity change from 0 to 32768 [ 362.880494][ T8504] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 363.153038][ T5791] (syz-executor,5791,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 363.288820][ T5880] ftdi_sio 4-1:6.0: FTDI USB Serial Device converter detected [ 363.323781][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 363.375961][ T5880] usb 4-1: Detected FT2232HP [ 363.383318][ T5880] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 363.468017][ T5880] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 363.494303][ T8506] loop0: detected capacity change from 0 to 32768 [ 363.518503][ T5880] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 363.580018][ T5880] usb 4-1: USB disconnect, device number 14 [ 363.627717][ T5880] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 363.675084][ T5880] ftdi_sio 4-1:6.0: device disconnected [ 364.323092][ T5880] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 364.519846][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.582682][ T5880] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.631621][ T5880] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 364.680141][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.731059][ T5880] usb 4-1: config 0 descriptor?? [ 365.443535][ T8526] loop2: detected capacity change from 0 to 1024 [ 365.462236][ T8526] hfsplus: unable to parse mount options [ 365.500004][ T8526] netlink: set zone limit has 8 unknown bytes [ 365.791794][ T8531] loop1: detected capacity change from 0 to 1024 [ 365.806794][ T8531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.856168][ T8531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.056585][ T8531] loop1: detected capacity change from 1024 to 64 [ 366.093909][ T8537] syz.1.591: attempt to access beyond end of device [ 366.093909][ T8537] loop1: rw=524288, sector=224, nr_sectors = 2 limit=64 [ 366.131786][ T8537] syz.1.591: attempt to access beyond end of device [ 366.131786][ T8537] loop1: rw=0, sector=224, nr_sectors = 2 limit=64 [ 366.147711][ T8537] syz.1.591: attempt to access beyond end of device [ 366.147711][ T8537] loop1: rw=0, sector=224, nr_sectors = 2 limit=64 [ 366.169578][ T8537] syz.1.591: attempt to access beyond end of device [ 366.169578][ T8537] loop1: rw=0, sector=224, nr_sectors = 2 limit=64 [ 366.192065][ T8537] syz.1.591: attempt to access beyond end of device [ 366.192065][ T8537] loop1: rw=0, sector=224, nr_sectors = 2 limit=64 [ 366.206848][ T8537] syz.1.591: attempt to access beyond end of device [ 366.206848][ T8537] loop1: rw=0, sector=224, nr_sectors = 2 limit=64 [ 366.221703][ T8537] syz.1.591: attempt to access beyond end of device [ 366.221703][ T8537] loop1: rw=0, sector=224, nr_sectors = 2 limit=64 [ 366.241506][ T8537] syz.1.591: attempt to access beyond end of device [ 366.241506][ T8537] loop1: rw=0, sector=224, nr_sectors = 2 limit=64 [ 366.285195][ T8537] syz.1.591: attempt to access beyond end of device [ 366.285195][ T8537] loop1: rw=0, sector=224, nr_sectors = 2 limit=64 [ 366.578226][ T8537] syz.1.591: attempt to access beyond end of device [ 366.578226][ T8537] loop1: rw=0, sector=224, nr_sectors = 2 limit=64 [ 366.602550][ T8537] syz.1.591: attempt to access beyond end of device [ 366.602550][ T8537] loop1: rw=0, sector=224, nr_sectors = 2 limit=64 [ 366.664861][ T5791] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /169/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 366.771076][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.849462][ T8534] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 366.933971][ T5883] usb 4-1: USB disconnect, device number 15 [ 367.488957][ T6856] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.998476][ T6856] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.153936][ T8557] loop3: detected capacity change from 0 to 1024 [ 368.174475][ T6856] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.186880][ T8557] hfsplus: unable to parse mount options [ 368.242744][ T8270] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 368.296678][ T8557] netlink: set zone limit has 8 unknown bytes [ 368.404725][ T6856] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.126322][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.141024][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.149778][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.158980][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.185211][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 369.194391][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.264404][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 369.487616][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.518357][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.550733][ T23] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 369.567776][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.597602][ T23] usb 1-1: config 0 descriptor?? [ 369.866265][ T8570] loop2: detected capacity change from 0 to 32768 [ 370.029815][ T8570] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 370.311307][ T5787] (syz-executor,5787,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 370.350872][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 370.631399][ T8571] chnl_net:caif_netlink_parms(): no params data found [ 371.815188][ T50] Bluetooth: hci1: command tx timeout [ 371.998647][ T8606] loop3: detected capacity change from 0 to 1024 [ 372.029546][ T8606] hfsplus: unable to parse mount options [ 372.064455][ T8606] netlink: set zone limit has 8 unknown bytes [ 372.095381][ T9] usb 1-1: USB disconnect, device number 12 [ 372.377643][ T6846] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 372.806999][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.834745][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.867519][ T8571] bridge_slave_0: entered allmulticast mode [ 372.875073][ T8571] bridge_slave_0: entered promiscuous mode [ 373.143024][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.166669][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.192559][ T8571] bridge_slave_1: entered allmulticast mode [ 373.213957][ T8571] bridge_slave_1: entered promiscuous mode [ 373.324642][ T8627] loop3: detected capacity change from 0 to 4096 [ 373.431084][ T8571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.491543][ T6856] hsr_slave_0: left promiscuous mode [ 373.523030][ T6856] hsr_slave_1: left promiscuous mode [ 373.548844][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.575903][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.608766][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.635775][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.671181][ T6856] bridge_slave_1: left allmulticast mode [ 373.708684][ T6856] bridge_slave_1: left promiscuous mode [ 373.717143][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.780440][ T6856] bridge_slave_0: left allmulticast mode [ 373.796791][ T6856] bridge_slave_0: left promiscuous mode [ 373.802623][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.835545][ T50] Bluetooth: hci1: command tx timeout [ 373.904207][ T6856] veth1_macvtap: left promiscuous mode [ 373.910777][ T6856] veth0_macvtap: left promiscuous mode [ 373.919493][ T6856] veth1_vlan: left promiscuous mode [ 373.925140][ T6856] veth0_vlan: left promiscuous mode [ 375.383892][ T6856] pimreg3 (unregistering): left allmulticast mode [ 375.446701][ T8633] loop3: detected capacity change from 0 to 32768 [ 375.535688][ T8633] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 375.723232][ T5794] (syz-executor,5794,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 375.776877][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 375.917075][ T50] Bluetooth: hci1: command tx timeout [ 375.955579][ T5880] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 376.158969][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.174824][ T5880] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 376.195310][ T5880] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 376.207402][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.233741][ T5880] usb 1-1: config 0 descriptor?? [ 376.240451][ T8647] loop3: detected capacity change from 0 to 1024 [ 376.270469][ T8647] hfsplus: unable to parse mount options [ 376.346445][ T8647] netlink: set zone limit has 8 unknown bytes [ 376.627070][ T8649] input: syz0 as /devices/virtual/input/input6 [ 377.011325][ T6856] team0 (unregistering): Port device team_slave_1 removed [ 377.140244][ T6856] team0 (unregistering): Port device team_slave_0 removed [ 377.223876][ T6856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.509307][ T6856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.101542][ T50] Bluetooth: hci1: command tx timeout [ 378.905187][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.912151][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.034272][ T23] usb 1-1: USB disconnect, device number 13 [ 379.552277][ T8676] loop0: detected capacity change from 0 to 1024 [ 379.583363][ T8676] hfsplus: unable to parse mount options [ 379.645607][ T8270] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 379.682368][ T8676] netlink: set zone limit has 8 unknown bytes [ 380.202415][ T8673] loop3: detected capacity change from 0 to 32768 [ 380.289793][ T6856] bond0 (unregistering): Released all slaves [ 380.297694][ T8673] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 380.507242][ T5794] (syz-executor,5794,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 380.568982][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 380.590768][ T8571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.957827][ T8571] team0: Port device team_slave_0 added [ 381.038084][ T8571] team0: Port device team_slave_1 added [ 381.360039][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.425915][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.510225][ T8571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.091323][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.098484][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.124909][ T8571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.468508][ T8571] hsr_slave_0: entered promiscuous mode [ 382.495977][ T8571] hsr_slave_1: entered promiscuous mode [ 382.515581][ T8571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.544132][ T8571] Cannot create hsr debugfs directory [ 382.630296][ T6856] IPVS: stop unused estimator thread 0... [ 382.696069][ T5880] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 382.910590][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.935709][ T5880] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 382.965270][ T5880] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 382.995618][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.026986][ T5880] usb 3-1: config 0 descriptor?? [ 383.110858][ T8571] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.140919][ T8571] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.171002][ T8571] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.209248][ T8571] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.698857][ T8571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.774496][ T8571] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.816014][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.823219][ T6847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.871418][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.879929][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.957213][ T8716] loop3: detected capacity change from 0 to 32768 [ 384.033198][ T8716] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 384.275968][ T8716] XFS (loop3): Ending clean mount [ 384.441228][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 384.669889][ T8571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.938878][ T8735] loop0: detected capacity change from 0 to 32768 [ 385.240969][ T8735] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 385.496623][ T5788] (syz-executor,5788,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 385.544252][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 385.660952][ T5880] usb 3-1: USB disconnect, device number 17 [ 385.740611][ T8571] veth0_vlan: entered promiscuous mode [ 385.781041][ T8571] veth1_vlan: entered promiscuous mode [ 385.899297][ T8571] veth0_macvtap: entered promiscuous mode [ 385.944052][ T8571] veth1_macvtap: entered promiscuous mode [ 386.040738][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.070875][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.107045][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.135243][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.165652][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.186093][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.225712][ T8571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.087980][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.098834][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.108765][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.119293][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.129188][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.139735][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.151316][ T8571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.182991][ T8789] pimreg3: entered allmulticast mode [ 387.273315][ T8571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.332004][ T8571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.365193][ T8571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.388730][ T8571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.745214][ T6856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.800017][ T6856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.048178][ T6846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.095791][ T6846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.622307][ T8792] loop0: detected capacity change from 0 to 32768 [ 388.752102][ T8792] ERROR: (device loop0): dbAllocAG: unable to allocate blocks [ 388.752102][ T8792] [ 388.814651][ T8792] jfs_create: dtInsert returned -EIO [ 388.834682][ T8792] ERROR: (device loop0): jfs_create: [ 388.834682][ T8792] [ 390.073297][ T8804] loop4: detected capacity change from 0 to 32768 [ 390.339326][ T8825] loop0: detected capacity change from 0 to 512 [ 390.414373][ T8825] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 390.435812][ T8825] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 390.488140][ T8825] EXT4-fs (loop0): 1 truncate cleaned up [ 390.498833][ T8825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.925986][ T8832] netlink: 14 bytes leftover after parsing attributes in process `syz.0.642'. [ 391.532456][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.621813][ T967] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 391.690850][ T8822] loop3: detected capacity change from 0 to 32768 [ 391.740508][ T8839] loop0: detected capacity change from 0 to 1024 [ 391.759683][ T8822] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 391.818339][ T8839] hfsplus: unable to parse mount options [ 391.840678][ T967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.897063][ T967] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.930438][ T8839] netlink: set zone limit has 8 unknown bytes [ 391.941688][ T967] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 391.996029][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.041178][ T967] usb 3-1: config 0 descriptor?? [ 392.105952][ T5794] (syz-executor,5794,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 392.169079][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 392.439831][ T8855] loop3: detected capacity change from 0 to 256 [ 392.549578][ T967] usb 3-1: USB disconnect, device number 18 [ 392.674959][ T8852] loop0: detected capacity change from 0 to 4096 [ 392.789327][ T8852] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 393.213423][ T8865] netlink: 'syz.0.647': attribute type 4 has an invalid length. [ 393.221897][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.647'. [ 394.616016][ T5850] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 395.046317][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 395.846416][ T5850] usb 3-1: unable to get BOS descriptor or descriptor too short [ 395.865250][ T5850] usb 3-1: config 4 has an invalid interface number: 84 but max is 0 [ 395.881668][ T5850] usb 3-1: config 4 has no interface number 0 [ 395.915523][ T5850] usb 3-1: config 4 interface 84 has no altsetting 0 [ 395.933862][ T5850] usb 3-1: New USB device found, idVendor=1608, idProduct=0205, bcdDevice=a6.ca [ 395.966921][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.975006][ T5850] usb 3-1: Product: syz [ 396.015465][ T5850] usb 3-1: Manufacturer: syz [ 396.020204][ T5850] usb 3-1: SerialNumber: syz [ 396.280909][ T5850] io_ti 3-1:4.84: required endpoints missing [ 396.317643][ T5850] usb 3-1: USB disconnect, device number 19 [ 396.554949][ T8899] loop3: detected capacity change from 0 to 1024 [ 396.632253][ T8899] hfsplus: unable to parse mount options [ 396.734270][ T8899] netlink: set zone limit has 8 unknown bytes [ 397.505658][ T5850] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 397.550086][ T8893] loop0: detected capacity change from 0 to 32768 [ 397.674818][ T8893] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 397.718017][ T5850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.745811][ T5850] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 397.785846][ T5850] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 397.794987][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.838154][ T5850] usb 4-1: config 0 descriptor?? [ 397.971421][ T8903] loop4: detected capacity change from 0 to 32768 [ 397.989287][ T5788] (syz-executor,5788,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 398.035748][ T8903] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 398.045268][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 398.055254][ T8907] loop2: detected capacity change from 0 to 32768 [ 398.356454][ T5880] usb 4-1: USB disconnect, device number 16 [ 398.600369][ T8903] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 398.704751][ T8903] XFS (loop4): Starting recovery (logdev: internal) [ 398.764462][ T8903] XFS (loop4): Ending recovery (logdev: internal) [ 398.807269][ T8903] XFS (loop4): Quotacheck needed: Please wait. [ 398.937574][ T8903] XFS (loop4): Quotacheck: Done. [ 399.401910][ T50] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 399.410623][ T50] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 399.929013][ T8571] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 401.767066][ T8946] loop0: detected capacity change from 0 to 32768 [ 401.815683][ T8946] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.662 (8946) [ 401.962245][ T8946] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 402.002271][ T8946] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 402.045128][ T8946] BTRFS info (device loop0): enabling auto defrag [ 402.058885][ T8946] BTRFS info (device loop0): doing ref verification [ 402.070363][ T8946] BTRFS info (device loop0): force clearing of disk cache [ 402.087768][ T8946] BTRFS info (device loop0): max_inline at 4096 [ 402.094246][ T8946] BTRFS info (device loop0): disabling free space tree [ 402.223690][ T8975] loop3: detected capacity change from 0 to 1024 [ 402.231607][ T8975] hfsplus: unable to parse mount options [ 402.256257][ T8975] netlink: set zone limit has 8 unknown bytes [ 402.272818][ T8946] BTRFS info (device loop0): enabling ssd optimizations [ 402.316861][ T8946] BTRFS info (device loop0): auto enabling async discard [ 402.391499][ T8946] BTRFS info (device loop0): rebuilding free space tree [ 402.460903][ T8946] BTRFS info (device loop0): disabling free space tree [ 402.496181][ T8946] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 402.528825][ T8946] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 403.122125][ T8980] overlayfs: cleanup of 'work/#5' failed (-4) [ 403.191137][ T8990] input: syz1 as /devices/virtual/input/input7 [ 403.442440][ T50] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 403.454401][ T50] Bluetooth: hci0: Injecting HCI hardware error event [ 403.466110][ T5799] Bluetooth: hci0: hardware error 0x00 [ 403.545291][ T6857] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 403.715689][ T967] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 403.749551][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 403.801734][ T8979] loop3: detected capacity change from 0 to 32768 [ 403.945312][ T967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.974785][ T8979] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 403.996080][ T967] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 404.005161][ T967] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 404.066829][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.096884][ T967] usb 5-1: config 0 descriptor?? [ 404.221798][ T5794] (syz-executor,5794,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 404.308213][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 404.596882][ T5880] usb 5-1: USB disconnect, device number 2 [ 405.525601][ T5799] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 405.930209][ T9013] loop2: detected capacity change from 0 to 32768 [ 406.049855][ T9023] loop0: detected capacity change from 0 to 1024 [ 406.067699][ T9023] hfsplus: unable to parse mount options [ 406.128133][ T9023] netlink: set zone limit has 8 unknown bytes [ 407.854199][ T9030] loop0: detected capacity change from 0 to 32768 [ 407.950495][ T9030] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 408.283624][ T5788] (syz-executor,5788,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 408.347697][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 408.705782][ T5880] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 408.916409][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 408.924343][ T5880] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 408.935931][ T5880] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 408.949759][ T5880] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.105575][ T5843] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 409.180844][ T5880] usb 3-1: config 1 interface 0 has no altsetting 0 [ 409.192129][ T5880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 409.202412][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.210620][ T5880] usb 3-1: Product: syz [ 409.214830][ T5880] usb 3-1: Manufacturer: syz [ 409.220204][ T5880] usb 3-1: SerialNumber: syz [ 409.347884][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.359051][ T5843] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.376935][ T5843] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 409.395563][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.416785][ T5843] usb 1-1: config 0 descriptor?? [ 409.479886][ T5880] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 409.676521][ T5880] usb 3-1: USB disconnect, device number 20 [ 409.696208][ T5880] usblp0: removed [ 409.728952][ T9077] loop3: detected capacity change from 0 to 1024 [ 409.793359][ T9077] hfsplus: unable to parse mount options [ 409.913440][ T9077] netlink: set zone limit has 8 unknown bytes [ 411.232115][ T9094] loop3: detected capacity change from 0 to 32768 [ 411.585916][ T9101] loop4: detected capacity change from 0 to 32768 [ 411.654247][ T9101] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 411.856634][ T9101] XFS (loop4): Ending clean mount [ 411.918569][ T55] usb 1-1: USB disconnect, device number 14 [ 412.868450][ T9124] syz.4.689 (9124) used greatest stack depth: 20296 bytes left [ 413.024824][ T8571] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 413.991408][ T9131] loop0: detected capacity change from 0 to 32768 [ 414.064717][ T9131] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 414.346342][ T5788] (syz-executor,5788,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 414.403975][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 414.683352][ T9139] loop2: detected capacity change from 0 to 32768 [ 414.730734][ T9139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.693 (9139) [ 414.816126][ T9139] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 414.859491][ T9139] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 414.908119][ T9139] BTRFS info (device loop2): setting nodatacow, compression disabled [ 414.945551][ T9139] BTRFS info (device loop2): max_inline at 0 [ 414.951660][ T9139] BTRFS info (device loop2): enabling disk space caching [ 415.003371][ T9139] BTRFS info (device loop2): turning off barriers [ 415.033180][ T9139] BTRFS info (device loop2): turning on flush-on-commit [ 415.055520][ T9139] BTRFS info (device loop2): doing ref verification [ 415.062210][ T9139] BTRFS info (device loop2): force clearing of disk cache [ 415.077375][ T9163] loop0: detected capacity change from 0 to 1024 [ 415.112816][ T9163] hfsplus: unable to parse mount options [ 415.123753][ T9139] BTRFS info (device loop2): enabling ssd optimizations [ 415.146941][ T9139] BTRFS info (device loop2): max_inline at 4096 [ 415.195725][ T9139] BTRFS info (device loop2): disk space caching is enabled [ 415.218558][ T9163] netlink: set zone limit has 8 unknown bytes [ 416.139085][ T9139] BTRFS info (device loop2): auto enabling async discard [ 416.208086][ T9139] BTRFS info (device loop2): rebuilding free space tree [ 416.304327][ T9139] BTRFS info (device loop2): disabling free space tree [ 416.334591][ T9139] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 416.375686][ T9139] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 416.670162][ T5787] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 416.736562][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 416.959860][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.000729][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.033179][ T9] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 417.066461][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.113115][ T9] usb 1-1: config 0 descriptor?? [ 417.256007][ T9207] binder: BINDER_SET_CONTEXT_MGR already set [ 417.284304][ T9207] binder: 9202:9207 ioctl 4018620d 200000000040 returned -16 [ 417.566347][ T9207] binder: 9202:9207 ioctl c018620c 200000000280 returned -1 [ 418.017874][ T9198] loop4: detected capacity change from 0 to 32768 [ 418.075836][ T9198] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.700 (9198) [ 418.271558][ T9198] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 418.313664][ T9198] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 418.341198][ T9198] BTRFS info (device loop4): enabling disk space caching [ 418.415152][ T9198] BTRFS info (device loop4): doing ref verification [ 418.469465][ T9198] BTRFS info (device loop4): turning on sync discard [ 418.486220][ T9198] BTRFS info (device loop4): force clearing of disk cache [ 418.512514][ T9198] BTRFS info (device loop4): setting nodatacow, compression disabled [ 418.559186][ T9198] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 418.620363][ T9198] BTRFS info (device loop4): use lzo compression, level 0 [ 418.663641][ T9198] BTRFS info (device loop4): turning off barriers [ 418.716280][ T9198] BTRFS info (device loop4): disk space caching is enabled [ 419.015657][ T9198] BTRFS info (device loop4): enabling ssd optimizations [ 419.059085][ T9198] BTRFS info (device loop4): rebuilding free space tree [ 419.183996][ T9198] BTRFS info (device loop4): disabling free space tree [ 419.216882][ T9198] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 419.266390][ T9198] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 419.547911][ T55] usb 1-1: USB disconnect, device number 15 [ 419.694686][ T8571] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 420.350102][ T9261] netlink: set zone limit has 8 unknown bytes [ 420.579842][ T9240] loop2: detected capacity change from 0 to 32768 [ 420.694253][ T9240] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 421.147984][ T9276] loop4: detected capacity change from 0 to 16 [ 421.184756][ T5787] (syz-executor,5787,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 421.226305][ T9276] erofs: (device loop4): mounted with root inode @ nid 36. [ 421.291480][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 421.379786][ T9271] loop3: detected capacity change from 0 to 40427 [ 421.408272][ T9271] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 421.416283][ T9271] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 421.446118][ T9271] F2FS-fs (loop3): invalid crc value [ 421.499545][ T9271] F2FS-fs (loop3): Found nat_bits in checkpoint [ 421.559291][ T9271] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 421.567323][ T9271] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 424.714877][ T9310] loop2: detected capacity change from 0 to 1024 [ 424.749223][ T9310] hfsplus: unable to parse mount options [ 424.842804][ T9310] netlink: set zone limit has 8 unknown bytes [ 425.445544][ T5880] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 425.710759][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.725132][ T5880] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 425.736862][ T5880] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 425.748841][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.916336][ T5880] usb 4-1: config 0 descriptor?? [ 427.328675][ T9329] loop0: detected capacity change from 0 to 32768 [ 427.387719][ T9329] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 427.643982][ T5788] (syz-executor,5788,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 427.679424][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 428.275894][ T5880] usb 4-1: USB disconnect, device number 17 [ 429.523212][ T9352] loop2: detected capacity change from 0 to 128 [ 429.554077][ T9352] EXT4-fs: Ignoring removed nobh option [ 429.602582][ T9352] EXT4-fs: inline encryption not supported [ 429.645616][ T9352] EXT4-fs: Ignoring removed bh option [ 429.705878][ T9352] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 429.780034][ T9352] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 429.915498][ T9352] syz.2.724 (pid 9352) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 430.132858][ T9352] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 430.244474][ T5787] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.143256][ T9367] loop4: detected capacity change from 0 to 4096 [ 431.196980][ T9367] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.319040][ T9363] loop2: detected capacity change from 0 to 32768 [ 431.388782][ T9367] EXT4-fs (loop4): Test dummy encryption mode enabled [ 431.423780][ T9367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.793393][ T9367] fscrypt (loop4): Error allocating 'xts(aes)' transform: -4 [ 431.816978][ T9374] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 431.862974][ T28] audit: type=1800 audit(1757897499.287:35): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.727" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 432.016105][ T8571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.504338][ T9370] loop0: detected capacity change from 0 to 40427 [ 432.539827][ T9370] F2FS-fs (loop0): invalid crc value [ 432.562937][ T9370] F2FS-fs (loop0): Found nat_bits in checkpoint [ 432.655633][ T5880] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 432.705854][ T9370] F2FS-fs (loop0): Start checkpoint disabled! [ 432.717567][ T9370] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 432.857439][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.883174][ T5880] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 432.905460][ T5880] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 432.925590][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.942126][ T9384] loop4: detected capacity change from 0 to 32768 [ 432.960108][ T5880] usb 4-1: config 0 descriptor?? [ 433.022084][ T9384] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 433.314248][ T12] bio_check_eod: 1 callbacks suppressed [ 433.314269][ T12] kworker/u4:1: attempt to access beyond end of device [ 433.314269][ T12] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 433.358538][ T8571] (syz-executor,8571,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 433.381192][ T8571] ocfs2: Unmounting device (7,4) on (node local) [ 433.391575][ T12] kworker/u4:1: attempt to access beyond end of device [ 433.391575][ T12] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 433.406612][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 433.474011][ T5843] usb 4-1: USB disconnect, device number 18 [ 434.654083][ T6856] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.854240][ T9413] Driver unsupported XDP return value 0 on prog (id 91) dev N/A, expect packet loss! [ 436.457258][ T9419] loop2: detected capacity change from 0 to 2048 [ 436.520014][ T9420] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 438.948020][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 439.012971][ T9436] loop3: detected capacity change from 0 to 32768 [ 439.158413][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.187060][ T5880] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 439.236031][ T5880] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 439.299762][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.487814][ T5880] usb 5-1: config 0 descriptor?? [ 440.006199][ T5880] usb 5-1: USB disconnect, device number 3 [ 440.321026][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.327795][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.904423][ T9449] loop4: detected capacity change from 0 to 2048 [ 441.025525][ T9451] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 441.474414][ T9459] loop4: detected capacity change from 0 to 64 [ 444.156440][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 445.189815][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.204747][ T9491] loop3: detected capacity change from 0 to 1024 [ 445.221366][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.230218][ T9491] hfsplus: unable to parse mount options [ 445.250992][ T9] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 445.275200][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.335636][ T9] usb 3-1: config 0 descriptor?? [ 445.820865][ T9] usb 3-1: USB disconnect, device number 21 [ 451.213990][ T9524] binder: 9520:9524 ioctl 4018620d 0 returned -22 [ 451.249642][ T9532] loop4: detected capacity change from 0 to 1024 [ 451.257314][ T9524] binder: 9520:9524 ioctl c018620c 200000000280 returned -1 [ 451.270439][ T9532] hfsplus: unable to parse mount options [ 451.318867][ T9532] netlink: set zone limit has 8 unknown bytes [ 451.515558][ T967] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 452.997732][ T967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.012977][ T967] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 453.022483][ T967] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 453.031853][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.061735][ T967] usb 3-1: config 0 descriptor?? [ 453.432409][ T9542] loop0: detected capacity change from 0 to 16 [ 453.467868][ T9542] erofs: (device loop0): mounted with root inode @ nid 36. [ 454.316460][ T9541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.707551][ T5779] usb 3-1: USB disconnect, device number 22 [ 457.932113][ T9568] loop3: detected capacity change from 0 to 1024 [ 457.965071][ T9568] hfsplus: unable to parse mount options [ 458.020565][ T9568] netlink: set zone limit has 8 unknown bytes [ 458.231829][ T9545] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 8200 of nid 36 [ 459.925539][ T9571] loop3: detected capacity change from 0 to 32768 [ 461.122229][ T967] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 462.565302][ T967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.576381][ T967] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.585503][ T967] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 462.599472][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.630667][ T967] usb 3-1: config 0 descriptor?? [ 462.877432][ T55] usb 3-1: USB disconnect, device number 23 [ 463.422960][ T9605] loop3: detected capacity change from 0 to 64 [ 463.777326][ T9605] block device autoloading is deprecated and will be removed. [ 463.831921][ T9605] syz.3.784: attempt to access beyond end of device [ 463.831921][ T9605] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 466.119155][ T9609] loop3: detected capacity change from 0 to 32768 [ 466.179946][ T9609] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 469.968378][ T6847] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 470.123012][ T9609] XFS (loop3): Ending clean mount [ 470.191027][ T9609] XFS (loop3): Quotacheck needed: Please wait. [ 470.536900][ T9609] XFS (loop3): Quotacheck: Done. [ 471.381261][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 474.983522][ T9681] loop4: detected capacity change from 0 to 256 [ 475.022170][ T9681] exfat: Deprecated parameter 'namecase' [ 476.094397][ T9681] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eaaf3db, utbl_chksum : 0xe619d30d) [ 477.279287][ T2929] Bluetooth: hci4: Frame reassembly failed (-84) [ 477.347011][ T9696] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 479.285718][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 482.688707][ T9725] loop4: detected capacity change from 0 to 2048 [ 482.709664][ T9725] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576 [ 482.753288][ T9725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 484.523351][ T9748] loop3: detected capacity change from 0 to 16 [ 484.541028][ T9748] erofs: (device loop3): mounted with root inode @ nid 36. [ 484.620984][ T9750] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 484.631870][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 484.641949][ T9750] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 484.652999][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 484.662520][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 484.672578][ T9750] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 484.683529][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 484.694103][ T9750] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 484.704991][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 484.714406][ T9750] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 484.725829][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 484.735162][ T9750] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 484.746610][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 484.756142][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 484.765564][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 484.779707][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 484.789893][ T9750] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 484.801273][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 484.811382][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 484.811487][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 484.821476][ T9750] erofs: (device loop3): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 484.822731][ T9750] syz.3.821: attempt to access beyond end of device [ 484.822731][ T9750] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 484.823434][ T9750] syz.3.821: attempt to access beyond end of device [ 484.823434][ T9750] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 484.823967][ T9750] syz.3.821: attempt to access beyond end of device [ 484.823967][ T9750] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 484.824381][ T9750] syz.3.821: attempt to access beyond end of device [ 484.824381][ T9750] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 490.063592][ T9767] loop2: detected capacity change from 0 to 32768 [ 490.190201][ T9767] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 490.342993][ T9767] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 491.257219][ T9767] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #73491649 [ 491.286344][ T9767] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 491.362942][ T9767] OCFS2: File system is now read-only. [ 491.416747][ T9767] (syz.2.824,9767,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 491.425081][ T9767] (syz.2.824,9767,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 491.475211][ T9767] (syz.2.824,9767,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 491.498896][ T9767] (syz.2.824,9767,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 491.534579][ T9767] (syz.2.824,9767,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 491.550851][ T9767] (syz.2.824,9767,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 491.559421][ T9767] (syz.2.824,9767,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 491.572106][ T9767] (syz.2.824,9767,0):ocfs2_mknod:385 ERROR: status = -30 [ 491.600458][ T9767] (syz.2.824,9767,0):ocfs2_mknod:502 ERROR: status = -30 [ 491.659240][ T9767] (syz.2.824,9767,0):ocfs2_create:676 ERROR: status = -30 [ 491.770095][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 492.551931][ T9783] loop4: detected capacity change from 0 to 32768 [ 494.236157][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 495.965456][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.835'. [ 496.008644][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 497.106470][ T9816] loop2: detected capacity change from 0 to 32768 [ 497.164157][ T9816] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 497.231334][ T9816] XFS (loop2): Ending clean mount [ 497.285960][ T9816] XFS (loop2): Quotacheck needed: Please wait. [ 497.487196][ T9816] XFS (loop2): Quotacheck: Done. [ 497.626635][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 498.014204][ T9825] loop3: detected capacity change from 0 to 32768 [ 501.553921][ T9864] loop3: detected capacity change from 0 to 1024 [ 501.639525][ T9865] loop2: detected capacity change from 0 to 512 [ 501.752857][ T6857] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.784484][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.795402][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.847434][ T9865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.867217][ T9865] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.248693][ T9859] loop4: detected capacity change from 0 to 32768 [ 502.275919][ T9859] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.851 (9859) [ 502.313783][ T9857] loop0: detected capacity change from 0 to 32768 [ 502.318397][ T9859] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 502.407590][ T9859] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 502.440725][ T9857] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 502.538262][ T9859] BTRFS info (device loop4): using free space tree [ 502.769162][ T9857] [ 502.771564][ T9857] ====================================================== [ 502.778609][ T9857] WARNING: possible circular locking dependency detected [ 502.785668][ T9857] syzkaller #0 Not tainted [ 502.790114][ T9857] ------------------------------------------------------ [ 502.797162][ T9857] syz.0.849/9857 is trying to acquire lock: [ 502.803087][ T9857] ffff88805d70ea20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 502.814726][ T9857] [ 502.814726][ T9857] but task is already holding lock: [ 502.822207][ T9857] ffff88805d70eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 502.832848][ T9864] hfsplus: b-tree write err: -5, ino 3 [ 502.838345][ T9857] [ 502.838345][ T9857] which lock already depends on the new lock. [ 502.838345][ T9857] [ 502.848753][ T9857] [ 502.848753][ T9857] the existing dependency chain (in reverse order) is: [ 502.857810][ T9857] [ 502.857810][ T9857] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 502.865641][ T9857] down_read+0x46/0x2e0 [ 502.870350][ T9857] ocfs2_init_acl+0x2fa/0x720 [ 502.875594][ T9857] ocfs2_mknod+0x12e5/0x20f0 [ 502.880728][ T9857] ocfs2_create+0x196/0x410 [ 502.885768][ T9857] path_openat+0x1277/0x3190 [ 502.890898][ T9857] do_filp_open+0x1c5/0x3d0 [ 502.895982][ T9857] do_sys_openat2+0x12c/0x1c0 [ 502.901199][ T9857] __x64_sys_openat+0x139/0x160 [ 502.906601][ T9857] do_syscall_64+0x55/0xb0 [ 502.911561][ T9857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.917999][ T9857] [ 502.917999][ T9857] -> #3 (jbd2_handle){++++}-{0:0}: [ 502.925326][ T9857] start_this_handle+0x1e9d/0x20c0 [ 502.930982][ T9857] jbd2__journal_start+0x2bb/0x5b0 [ 502.936629][ T9857] jbd2_journal_start+0x2a/0x40 [ 502.942092][ T9857] ocfs2_start_trans+0x376/0x6c0 [ 502.947570][ T9857] ocfs2_reserve_suballoc_bits+0x715/0x4360 [ 502.954005][ T9857] ocfs2_reserve_new_inode+0x4f5/0xc80 [ 502.960016][ T9857] ocfs2_mknod+0x83b/0x20f0 [ 502.965074][ T9857] ocfs2_create+0x196/0x410 [ 502.970111][ T9857] path_openat+0x1277/0x3190 [ 502.975250][ T9857] do_filp_open+0x1c5/0x3d0 [ 502.980300][ T9857] do_sys_openat2+0x12c/0x1c0 [ 502.985512][ T9857] __x64_sys_open+0x11f/0x140 [ 502.990735][ T9857] do_syscall_64+0x55/0xb0 [ 502.995681][ T9857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.002110][ T9857] [ 503.002110][ T9857] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 503.010638][ T9857] down_read+0x46/0x2e0 [ 503.015362][ T9857] ocfs2_start_trans+0x36a/0x6c0 [ 503.020868][ T9857] ocfs2_reserve_suballoc_bits+0x715/0x4360 [ 503.027311][ T9857] ocfs2_reserve_new_inode+0x4f5/0xc80 [ 503.033330][ T9857] ocfs2_mknod+0x83b/0x20f0 [ 503.038366][ T9857] ocfs2_create+0x196/0x410 [ 503.043408][ T9857] path_openat+0x1277/0x3190 [ 503.048624][ T9857] do_filp_open+0x1c5/0x3d0 [ 503.053760][ T9857] do_sys_openat2+0x12c/0x1c0 [ 503.058983][ T9857] __x64_sys_open+0x11f/0x140 [ 503.064211][ T9857] do_syscall_64+0x55/0xb0 [ 503.069180][ T9857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.075622][ T9857] [ 503.075622][ T9857] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 503.083117][ T9857] ocfs2_start_trans+0x26b/0x6c0 [ 503.088598][ T9857] ocfs2_truncate_file+0x611/0x13a0 [ 503.094339][ T9857] ocfs2_setattr+0x150d/0x1b20 [ 503.099638][ T9857] notify_change+0xb0d/0xe10 [ 503.104758][ T9857] do_truncate+0x19b/0x220 [ 503.109792][ T9857] path_openat+0x298c/0x3190 [ 503.114963][ T9857] do_filp_open+0x1c5/0x3d0 [ 503.120009][ T9857] do_sys_openat2+0x12c/0x1c0 [ 503.125226][ T9857] __x64_sys_openat+0x139/0x160 [ 503.130610][ T9857] do_syscall_64+0x55/0xb0 [ 503.135561][ T9857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.141996][ T9857] [ 503.141996][ T9857] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 503.150791][ T9857] __lock_acquire+0x2ddb/0x7c80 [ 503.156184][ T9857] lock_acquire+0x197/0x410 [ 503.161218][ T9857] down_write+0x97/0x1f0 [ 503.166017][ T9857] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 503.172525][ T9857] ocfs2_truncate_file+0xd84/0x13a0 [ 503.178344][ T9857] ocfs2_setattr+0x150d/0x1b20 [ 503.183647][ T9857] notify_change+0xb0d/0xe10 [ 503.188766][ T9857] do_truncate+0x19b/0x220 [ 503.193713][ T9857] path_openat+0x298c/0x3190 [ 503.198926][ T9857] do_filp_open+0x1c5/0x3d0 [ 503.203963][ T9857] do_sys_openat2+0x12c/0x1c0 [ 503.209172][ T9857] __x64_sys_openat+0x139/0x160 [ 503.214556][ T9857] do_syscall_64+0x55/0xb0 [ 503.219507][ T9857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.225939][ T9857] [ 503.225939][ T9857] other info that might help us debug this: [ 503.225939][ T9857] [ 503.236257][ T9857] Chain exists of: [ 503.236257][ T9857] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 503.236257][ T9857] [ 503.250263][ T9857] Possible unsafe locking scenario: [ 503.250263][ T9857] [ 503.257822][ T9857] CPU0 CPU1 [ 503.263277][ T9857] ---- ---- [ 503.268651][ T9857] lock(&oi->ip_xattr_sem); [ 503.273255][ T9857] lock(jbd2_handle); [ 503.279878][ T9857] lock(&oi->ip_xattr_sem); [ 503.287004][ T9857] lock(&ocfs2_file_ip_alloc_sem_key); [ 503.292562][ T9857] [ 503.292562][ T9857] *** DEADLOCK *** [ 503.292562][ T9857] [ 503.300794][ T9857] 3 locks held by syz.0.849/9857: [ 503.305819][ T9857] #0: ffff8880636ba418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 503.315076][ T9857] #1: ffff88805d70ed98 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: do_truncate+0x187/0x220 [ 503.325448][ T9857] #2: ffff88805d70eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 503.336513][ T9857] [ 503.336513][ T9857] stack backtrace: [ 503.342417][ T9857] CPU: 0 PID: 9857 Comm: syz.0.849 Not tainted syzkaller #0 [ 503.349710][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.359821][ T9857] Call Trace: [ 503.363136][ T9857] [ 503.366086][ T9857] dump_stack_lvl+0x16c/0x230 [ 503.370786][ T9857] ? load_image+0x3b0/0x3b0 [ 503.375296][ T9857] ? show_regs_print_info+0x20/0x20 [ 503.380535][ T9857] ? print_circular_bug+0x12b/0x1a0 [ 503.385756][ T9857] check_noncircular+0x2bd/0x3c0 [ 503.390713][ T9857] ? print_deadlock_bug+0x5d0/0x5d0 [ 503.395936][ T9857] ? lockdep_lock+0xe0/0x220 [ 503.400538][ T9857] ? lockdep_unlock+0x137/0x2d0 [ 503.405398][ T9857] ? _find_first_zero_bit+0xd3/0x100 [ 503.410703][ T9857] __lock_acquire+0x2ddb/0x7c80 [ 503.415668][ T9857] ? verify_lock_unused+0x140/0x140 [ 503.420976][ T9857] lock_acquire+0x197/0x410 [ 503.425498][ T9857] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 503.431672][ T9857] ? __might_sleep+0xe0/0xe0 [ 503.436275][ T9857] ? read_lock_is_recursive+0x20/0x20 [ 503.441667][ T9857] down_write+0x97/0x1f0 [ 503.445923][ T9857] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 503.452094][ T9857] ? down_read_killable+0x340/0x340 [ 503.457307][ T9857] ? ocfs2_truncate_file+0xcaa/0x13a0 [ 503.462957][ T9857] ? __lock_acquire+0x7c80/0x7c80 [ 503.468012][ T9857] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 503.474012][ T9857] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 503.479921][ T9857] ? up_write+0x1c3/0x410 [ 503.484390][ T9857] ocfs2_truncate_file+0xd84/0x13a0 [ 503.489821][ T9857] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 503.495600][ T9857] ? ocfs2_simple_size_update+0x470/0x470 [ 503.501371][ T9857] ? do_raw_spin_unlock+0x121/0x230 [ 503.506600][ T9857] ? _raw_spin_unlock+0x28/0x40 [ 503.511464][ T9857] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 503.517207][ T9857] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 503.522770][ T9857] ? ocfs2_rw_lock+0x138/0x240 [ 503.527550][ T9857] ? dquot_initialize+0x20/0x20 [ 503.532418][ T9857] ? ocfs2_create_new_inode_locks+0x640/0x640 [ 503.538495][ T9857] ? setattr_prepare+0x1e6/0xac0 [ 503.543448][ T9857] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 503.550057][ T9857] ocfs2_setattr+0x150d/0x1b20 [ 503.554855][ T9857] ? ocfs2_extend_allocation+0x1760/0x1760 [ 503.560674][ T9857] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 503.566501][ T9857] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 503.572769][ T9857] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 503.578766][ T9857] ? current_time+0x18e/0x270 [ 503.583463][ T9857] ? inode_set_ctime_current+0x2d0/0x2d0 [ 503.589110][ T9857] ? evm_inode_setattr+0x94/0x6a0 [ 503.594157][ T9857] ? bpf_lsm_inode_setattr+0x9/0x10 [ 503.599366][ T9857] ? try_break_deleg+0x79/0x120 [ 503.604236][ T9857] ? ocfs2_extend_allocation+0x1760/0x1760 [ 503.610152][ T9857] notify_change+0xb0d/0xe10 [ 503.614807][ T9857] do_truncate+0x19b/0x220 [ 503.619257][ T9857] ? put_page_bootmem+0x2c0/0x2c0 [ 503.624296][ T9857] ? apparmor_file_truncate+0x23f/0x2d0 [ 503.629867][ T9857] ? ima_bprm_check+0x1f0/0x1f0 [ 503.634740][ T9857] path_openat+0x298c/0x3190 [ 503.639362][ T9857] ? __kasan_slab_alloc+0x6c/0x80 [ 503.644437][ T9857] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.650571][ T9857] ? verify_lock_unused+0x140/0x140 [ 503.655785][ T9857] ? do_filp_open+0x3d0/0x3d0 [ 503.660484][ T9857] ? __virt_addr_valid+0x18c/0x540 [ 503.665619][ T9857] do_filp_open+0x1c5/0x3d0 [ 503.670146][ T9857] ? vfs_tmpfile+0x490/0x490 [ 503.674767][ T9857] ? _raw_spin_unlock+0x28/0x40 [ 503.679670][ T9857] ? alloc_fd+0x58f/0x630 [ 503.684054][ T9857] do_sys_openat2+0x12c/0x1c0 [ 503.688767][ T9857] ? do_sys_open+0xe0/0xe0 [ 503.693209][ T9857] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 503.699299][ T9857] ? lock_chain_count+0x20/0x20 [ 503.704169][ T9857] __x64_sys_openat+0x139/0x160 [ 503.709125][ T9857] do_syscall_64+0x55/0xb0 [ 503.713556][ T9857] ? clear_bhb_loop+0x40/0x90 [ 503.718244][ T9857] ? clear_bhb_loop+0x40/0x90 [ 503.722931][ T9857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.728848][ T9857] RIP: 0033:0x7f747338eba9 [ 503.733288][ T9857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.753431][ T9857] RSP: 002b:00007f74742a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 503.761862][ T9857] RAX: ffffffffffffffda RBX: 00007f74735d5fa0 RCX: 00007f747338eba9 [ 503.769847][ T9857] RDX: 0000000000007a05 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 503.777830][ T9857] RBP: 00007f7473411e19 R08: 0000000000000000 R09: 0000000000000000 [ 503.785812][ T9857] R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000000 [ 503.793796][ T9857] R13: 00007f74735d6038 R14: 00007f74735d5fa0 R15: 00007ffc469721e8 [ 503.801790][ T9857] [ 503.893467][ T9859] BTRFS info (device loop4): enabling ssd optimizations [ 503.901806][ T9859] BTRFS info (device loop4): auto enabling async discard [ 503.927459][ T6847] BTRFS warning (device loop4): checksum verify failed on logical 5308416 mirror 1 wanted 0x77808b7ecca445f549ae3d233ea0eb27adb628f92d0be59092c566b0ee5e6744 found 0x033ba023a630aa638f6b0f1213e13e9dac7af91824f2c986c90dd594e54b2e86 level 0 [ 504.074692][ T9859] BTRFS: error (device loop4) in btrfs_fill_super:1172: errno=-5 IO failure [ 504.096001][ T9859] BTRFS error (device loop4: state E): commit super ret -30 [ 504.105473][ T9879] loop0: detected capacity change from 32768 to 0 [ 504.137364][ T9880] syz.0.849: attempt to access beyond end of device [ 504.137364][ T9880] loop0: rw=0, sector=71, nr_sectors = 1 limit=0 [ 504.194517][ T9880] (syz.0.849,9880,1):ocfs2_assign_bh:2416 ERROR: status = -5 [ 504.239715][ T9880] (syz.0.849,9880,1):ocfs2_inode_lock_full_nested:2511 ERROR: status = -5 [ 504.275759][ T9880] (syz.0.849,9880,0):ocfs2_reserve_suballoc_bits:789 ERROR: status = -5 [ 504.300330][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.311050][ T9857] (syz.0.849,9857,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 504.335556][ T9880] (syz.0.849,9880,1):ocfs2_reserve_cluster_bitmap_bits:1133 ERROR: status = -5 [ 504.361450][ T9880] (syz.0.849,9880,1):ocfs2_local_alloc_reserve_for_window:1123 ERROR: status = -5 [ 504.398257][ T9880] (syz.0.849,9880,0):ocfs2_local_alloc_reserve_for_window:1139 ERROR: status = -5 [ 504.436193][ T9880] (syz.0.849,9880,0):ocfs2_local_alloc_slide_window:1254 ERROR: status = -5 [ 504.453979][ T9880] (syz.0.849,9880,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5 [ 504.485453][ T9880] (syz.0.849,9880,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5 [ 504.494128][ T9880] (syz.0.849,9880,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 504.517108][ T9880] (syz.0.849,9880,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 504.549993][ T9880] (syz.0.849,9880,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 504.591082][ T9880] (syz.0.849,9880,1):ocfs2_lock_allocators:2672 ERROR: status = -5 [ 504.624335][ T9880] (syz.0.849,9880,1):ocfs2_write_begin_nolock:1744 ERROR: status = -5 [ 504.635814][ T9880] (syz.0.849,9880,1):ocfs2_dio_wr_get_block:2243 ERROR: status = -5 [ 504.645089][ T9880] (syz.0.849,9880,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 504.645746][ T9880] syz.0.849 (9880) used greatest stack depth: 19784 bytes left [ 504.675951][ T5788] syz-executor: attempt to access beyond end of device [ 504.675951][ T5788] loop0: rw=0, sector=17057, nr_sectors = 1 limit=0 [ 504.689424][ T5788] (syz-executor,5788,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 504.700012][ T5788] syz-executor: attempt to access beyond end of device [ 504.700012][ T5788] loop0: rw=0, sector=17057, nr_sectors = 1 limit=0 [ 504.723346][ T5788] (syz-executor,5788,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 504.999232][ T9871] jbd2/loop0-75: attempt to access beyond end of device [ 504.999232][ T9871] loop0: rw=38913, sector=649, nr_sectors = 1 limit=0 [ 505.013098][ T9871] jbd2/loop0-75: attempt to access beyond end of device [ 505.013098][ T9871] loop0: rw=38913, sector=650, nr_sectors = 1 limit=0 [ 505.027337][ T9871] jbd2/loop0-75: attempt to access beyond end of device [ 505.027337][ T9871] loop0: rw=38913, sector=651, nr_sectors = 1 limit=0 [ 505.041635][ T9871] jbd2/loop0-75: attempt to access beyond end of device [ 505.041635][ T9871] loop0: rw=38913, sector=652, nr_sectors = 1 limit=0 [ 505.043314][ T1086] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.055705][ T9871] Aborting journal on device loop0-75. [ 505.072136][ T9871] jbd2/loop0-75: attempt to access beyond end of device [ 505.072136][ T9871] loop0: rw=169985, sector=640, nr_sectors = 1 limit=0 [ 505.085988][ T9871] Buffer I/O error on dev loop0, logical block 640, lost sync page write [ 505.094438][ T9871] JBD2: I/O error when updating journal superblock for loop0-75. [ 505.102820][ T5788] syz-executor: attempt to access beyond end of device [ 505.102820][ T5788] loop0: rw=0, sector=71, nr_sectors = 1 limit=0 [ 505.117088][ T5788] (syz-executor,5788,0):ocfs2_assign_bh:2416 ERROR: status = -5 [ 505.125671][ T5788] (syz-executor,5788,0):ocfs2_inode_lock_full_nested:2511 ERROR: status = -5 [ 505.134577][ T5788] (syz-executor,5788,0):ocfs2_shutdown_local_alloc:411 ERROR: status = -5 [ 505.143572][ T5788] syz-executor: attempt to access beyond end of device [ 505.143572][ T5788] loop0: rw=1, sector=17024, nr_sectors = 1 limit=0 [ 505.158579][ T5788] Buffer I/O error on dev loop0, logical block 17024, lost sync page write [ 505.167316][ T5788] (syz-executor,5788,1):ocfs2_write_block:78 ERROR: status = -5 [ 505.175000][ T5788] (syz-executor,5788,1):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 505.176961][ T1086] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.183437][ T5788] (syz-executor,5788,1):ocfs2_put_slot:517 ERROR: status = -5 [ 505.202558][ T5788] (syz-executor,5788,0):ocfs2_journal_shutdown:1107 ERROR: status = -5 [ 505.212148][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 505.261948][ T1086] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.334102][ T1086] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.117801][ T1086] bond0: (slave wlan1): Releasing backup interface [ 506.276250][ T1086] hsr_slave_0: left promiscuous mode [ 506.282308][ T1086] hsr_slave_1: left promiscuous mode [ 506.301188][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.315426][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.336326][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.343790][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.366534][ T1086] bridge_slave_1: left allmulticast mode [ 506.372245][ T1086] bridge_slave_1: left promiscuous mode [ 506.385831][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.405962][ T1086] bridge_slave_0: left allmulticast mode [ 506.411668][ T1086] bridge_slave_0: left promiscuous mode [ 506.425566][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.440577][ T1086] veth1_macvtap: left promiscuous mode [ 506.446222][ T1086] veth0_macvtap: left promiscuous mode [ 506.452302][ T1086] veth1_vlan: left promiscuous mode [ 506.475549][ T1086] veth0_vlan: left promiscuous mode [ 506.809651][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 506.850410][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 506.898712][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.928647][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.080182][ T1086] bond0 (unregistering): Released all slaves