last executing test programs: 9.94059293s ago: executing program 3 (id=4091): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@loopback, @multicast1}, &(0x7f0000000100)=0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x8802) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r2, &(0x7f0000001480)=[{&(0x7f0000000140)=""/102, 0x66}], 0x1, 0x0, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='GPL\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, 0x0, 0x0) 9.817281502s ago: executing program 2 (id=4093): syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x14000005) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r7, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioprio_get$uid(0x0, r8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d0000000000b549dc45f3d1dceaaa3b0813f33f2a20aa540b61f254e5e02cf1900ec1733b0587a71e6f3af4546591d3702561e0bafd618148c3feb2"], 0x74}}, 0x20000014) 8.669912831s ago: executing program 0 (id=4096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x2000490, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES8=0x0], 0x11, 0x489, &(0x7f0000000500)="$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") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.646431721s ago: executing program 2 (id=4097): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0xffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x5, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x100b, 0x40, 0x212c, 0x8, 0x8000100, 0x3, 0x0, 0x10, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180003, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xaa000000, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x6, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 8.536904353s ago: executing program 3 (id=4098): pipe2$9p(&(0x7f0000000000), 0x880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.009263342s ago: executing program 0 (id=4099): r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="b70b2cbd7000fcdbdf250f0000000e0002"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2000c88c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000035) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000cc00}, 0x0) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7.242744014s ago: executing program 2 (id=4101): syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x14000005) sendmmsg$unix(r6, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r4, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r8, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioprio_get$uid(0x0, r9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d0000000000b549dc45f3d1dceaaa3b0813f33f2a20aa540b61f254e5e02cf1900ec1733b0587a71e6f3af4546591d3702561e0bafd618148c3feb2"], 0x74}}, 0x20000014) 7.230052754s ago: executing program 3 (id=4102): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000400)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="49440fb4005cba20653d2326292c265c2c00e79feca4a2e1053fdd2c84e7a89aa4ee02cbb47695d7ade8fd4362d0e37fbbb365b529e3d4cfa7ec78bc709784cc24ff7cfd3accb1a53fcd27bcb1794fcc15fc6eeae6dd85887fec609d9df9eb63c1eb27e9a7e7c87e551a878c1ff1548dce0557af9986d21054cc6d2e9be1e16b9e2e6e9df5b4b95e1b", @ANYRESOCT, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b383c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bde666812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aafdfda02823a69030b19126f82a4", @ANYRESOCT=0x0, @ANYBLOB="1dd103b1e99d545d82b79c6b603b43c5482f6d96d0bb626eb29ee8d33a35c0fcd94e4e53132fb3b96090fa85e811e8efb077d82ec1797036fae26633898ca8999d2dcc0acf2860e866fde838afe4d142384f6f5ca9a45af26090d55284"], 0x21, 0x1508, &(0x7f0000002080)="$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") syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x609c, &(0x7f0000011b00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6.932629069s ago: executing program 0 (id=4104): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0xffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x5, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x100b, 0x40, 0x212c, 0x8, 0x8000100, 0x3, 0x0, 0x10, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180003, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xaa000000, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x6, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6.340910018s ago: executing program 2 (id=4105): syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x14000005) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r7, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioprio_get$uid(0x0, r8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d0000000000b549dc45f3d1dceaaa3b0813f33f2a20aa540b61f254e5e02cf1900ec1733b0587a71e6f3af4546591d3702561e0bafd618148c3feb2"], 0x74}}, 0x20000014) 5.500814322s ago: executing program 1 (id=4106): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@loopback, @multicast1}, &(0x7f0000000100)=0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x8802) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r2, &(0x7f0000001480)=[{&(0x7f0000000140)=""/102, 0x66}], 0x1, 0x0, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='GPL\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, 0x0, 0x0) 5.500220151s ago: executing program 0 (id=4107): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.416301503s ago: executing program 2 (id=4108): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3}) socket$isdn_base(0x22, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x3) 5.189357746s ago: executing program 1 (id=4109): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0xffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x5, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x100b, 0x40, 0x212c, 0x8, 0x8000100, 0x3, 0x0, 0x10, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180003, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xaa000000, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x6, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.340151156s ago: executing program 2 (id=4110): syz_usb_connect(0x5, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x13, 0x43, 0x63, 0x40, 0x41e, 0x400a, 0xa434, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x8, 0x9, 0x30, 0x5, [{{0x9, 0x4, 0x4f, 0x4, 0x0, 0xb3, 0xb5, 0x91, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x7, 0x80}, {0x6, 0x24, 0x1a, 0x7, 0x8}}]}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000003380)={0x10, 0x30, 0xfa00, {0x0, 0x4, {0xa, 0x4e22, 0x7fffffff, @mcast2, 0x81}}}, 0x38) 3.292046097s ago: executing program 3 (id=4111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000100003042cbd70000000000000007400", @ANYRES32=0x0, @ANYBLOB="2406040043020100680012800e00010069703667726574617000"], 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 3.10927325s ago: executing program 3 (id=4112): r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="b70b2cbd7000fcdbdf250f0000000e0002"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2000c88c) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000035) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r7) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000cc00}, 0x0) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.135910915s ago: executing program 1 (id=4113): syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x14000005) sendmmsg$unix(r6, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r4, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r8, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioprio_get$uid(0x0, r9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d0000000000b549dc45f3d1dceaaa3b0813f33f2a20aa540b61f254e5e02cf1900ec1733b0587a71e6f3af4546591d3702561e0bafd618148c3feb2"], 0x74}}, 0x20000014) 1.746310451s ago: executing program 3 (id=4114): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x15b) syz_open_dev$loop(0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0xd) 1.089287622s ago: executing program 1 (id=4115): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000100)={"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"}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x68, 0x10, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0xb2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x87, 0x1}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0x7, 0x1c, 0x10, 0x6}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 943.186484ms ago: executing program 0 (id=4116): syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x14000005) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) socket$inet6(0xa, 0x1, 0x0) shutdown(r7, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioprio_get$uid(0x0, r8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000060000000600000008000300", @ANYRES32, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32, @ANYBLOB="35000e00800000000802110000010802110000005050505050500000000000000000000064000100250301040e7206030303030303000000080026006c090000080027000100000008000c006400000008000d0000000000b549dc45f3d1dceaaa3b0813f33f2a20aa540b61f254e5e02cf1900ec1733b0587a71e6f3af4546591d3702561e0bafd618148c3feb2"], 0x74}}, 0x20000014) 148.037817ms ago: executing program 1 (id=4117): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r0, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x800000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 24.790429ms ago: executing program 1 (id=4118): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3}) socket$isdn_base(0x22, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x103) socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x3) 0s ago: executing program 0 (id=4119): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x13) tkill(r7, 0x12) waitid(0x0, r7, 0x0, 0x2100000a, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x200085, &(0x7f0000000200), 0xfe, 0x483, &(0x7f0000000dc0)="$eJzs3M9vFFUcAPDvTLtL+WWr4g8QFEUj8UdLyw85eMFo4kETE03EeKptIUihhtZECFH0gEdD4t14NPEPMF7Ei1FPJl71bkyI4QJycc3MzrSl3V3asu0W9vNJZvtm3tvO+857r33zZtsAutbu7CWJ2BIRf0REf3335gK761+uXz0/9u/V82NJ1Gpv/pPk5a5dPT9WFi3ftzl7ebty8/dZ4OK7EaOTkxNniv2hmVMfDE2fPff8iVOjxyeOT5weOXz4wP5d1UMjB28rvrIOWVzXdnw8tXP7q+9cen3s6KX3fvk2y9tS5M+Po112169uQ0+1+2QdtnVeOuntYEVYlr6IyJqrko///uiJjbN5/fHKZ03f2LxrA3eIWi2tbWiefaEG3MWy2fwy9a1KRYA1Vv6iz+5/y22Nph7rwpUjMbuOcb3Y6jm9kRZlKsU90mrIbqOOXrjxVbbFKq1DAADMd/lIRDzXaP6XxoPzyt1TPEMZiIh7i6cm90fEtoh4ICIv+1BEPLzM8y9cRl48/6n1ryCsJcvmfy8Wz7Zunv+Vs78Y6Cn2tubxV5JjJyYn9hXXZG9UNmT7wy3O8ePLv3/RLG/+/C/bsvOXc8GiHn/3zi3QVbOX8dGZ0duNu3Tl04gdvY3iT2bnvNn8eHtE7FjhOU48883OxUdv5Hcft46/hTZMymtfRzxdb/8LsSD+UtL0+eTwC4dGDg71xeTEvqGyVyz2628X32h2/tuKvw2uXK7Fpob9v4w/+S/pi5g+e+5k/rx2ehnfvHiUdPHPzxvf01TqX5bR/3NZ/68mb+XpanHso9GZmTPDEdXktcXHR+beW+6X5bP+v3dP4/F/X8xdiUciIuvEuyLi0Yh4rGi7xyPiiYjY0+Iy/PzSk+83y2ve/i1W5dsoi3+8ZfvHQJaaa/8sEWmRmD3SKtFz8qfvlxR/OZ4Xtf+BPLW3OLKUn39LqdcyezMAAADcsdL8M/BJOjibTtPBwfpn+LfFpnRyanrm2WNTH54er39WfiAqabnS1R/Hv4tiPXS4WBsu10dHFuzvz9eNI77s2ZjvD45NTY53OnjocpubjP/MXz2drh2w6vy9FnQv4x+6l/EP3cv4h+5l/EP3ajT+P+lAPYC1d4vf/xvXqh7A2jP/h+5l/EP3WtH439T+egBrqunfxqfNsyTWb+KHaos2vXWiuvTCka6TkO+aRCUaZvUu+Z9ZrDCxoWFWp38yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtMf/AQAA//87suAg") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) kernel console output (not intermixed with test programs): man_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.192171][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.223971][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.241385][T15617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.599294][T15920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2590'. [ 1209.794649][T15617] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.009736][T15617] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.692953][T15617] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.768183][T15617] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.066061][T15937] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2593'. [ 1211.098950][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.125970][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.248665][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.304140][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.941328][T15831] block nbd0: Receive control failed (result -32) [ 1211.959424][T15940] block nbd0: shutting down sockets [ 1214.033179][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803082b400: rx timeout, send abort [ 1214.094587][T15988] loop0: detected capacity change from 0 to 4096 [ 1214.533284][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880603e1800: rx timeout, send abort [ 1214.543894][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803082b400: abort rx timeout. Force session deactivation [ 1214.828894][T15990] loop1: detected capacity change from 0 to 32768 [ 1214.836579][T16002] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2605'. [ 1214.864365][T15990] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.2604 (15990) [ 1214.940774][T15990] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1215.026130][T15990] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1215.041828][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880603e1800: abort rx timeout. Force session deactivation [ 1215.079178][T15990] BTRFS info (device loop1): using free space tree [ 1215.248968][T15990] BTRFS info (device loop1): enabling ssd optimizations [ 1215.288981][T15990] BTRFS info (device loop1): auto enabling async discard [ 1216.180723][T15831] block nbd3: Receive control failed (result -32) [ 1216.349151][T16031] block nbd3: shutting down sockets [ 1218.389872][T16043] atomic_op ffff88805d321198 conn xmit_atomic 0000000000000000 [ 1218.710859][T14880] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1220.681196][T12044] Bluetooth: hci3: command 0x0406 tx timeout [ 1222.364914][T16078] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2616'. [ 1222.497265][T16086] xt_policy: neither incoming nor outgoing policy selected [ 1223.394964][T16090] block nbd0: NBD_DISCONNECT [ 1223.421343][T16090] block nbd0: Disconnected due to user request. [ 1223.456014][T16090] block nbd0: shutting down sockets [ 1223.582302][T16097] loop2: detected capacity change from 0 to 256 [ 1223.884934][T16101] loop0: detected capacity change from 0 to 4096 [ 1224.784282][T16094] loop1: detected capacity change from 0 to 32768 [ 1224.818946][T16094] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.2620 (16094) [ 1224.890356][T16094] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1224.916042][T16094] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1224.948841][T16094] BTRFS info (device loop1): using free space tree [ 1225.276004][T16125] overlayfs: missing 'lowerdir' [ 1225.854807][T16094] BTRFS info (device loop1): enabling ssd optimizations [ 1225.903590][T16094] BTRFS info (device loop1): auto enabling async discard [ 1227.900366][T16139] loop0: detected capacity change from 0 to 4096 [ 1228.554865][T14880] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1229.157013][T16158] xt_policy: neither incoming nor outgoing policy selected [ 1229.205135][T16155] block nbd3: NBD_DISCONNECT [ 1229.283980][T16155] block nbd3: Disconnected due to user request. [ 1229.418245][T16155] block nbd3: shutting down sockets [ 1229.933935][T16161] trusted_key: encrypted_key: master key parameter is missing [ 1230.106217][T16164] xt_policy: neither incoming nor outgoing policy selected [ 1231.371704][T16175] overlayfs: missing 'lowerdir' [ 1233.537815][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2640'. [ 1233.722124][T16196] xt_policy: neither incoming nor outgoing policy selected [ 1235.047554][T16205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2642'. [ 1239.159332][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.175838][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.208641][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 1240.201096][T16243] xt_policy: neither incoming nor outgoing policy selected [ 1240.301141][T16248] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2653'. [ 1240.672139][T16250] trusted_key: encrypted_key: master key parameter is missing [ 1240.812441][T16257] xt_policy: neither incoming nor outgoing policy selected [ 1242.051565][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2656'. [ 1242.162760][ T8] IPVS: starting estimator thread 0... [ 1242.259793][T16263] IPVS: using max 35 ests per chain, 84000 per kthread [ 1244.517591][T16283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2662'. [ 1244.725971][T16284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2662'. [ 1245.285262][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2663'. [ 1245.850238][T16298] trusted_key: encrypted_key: master key parameter is missing [ 1246.114359][T16303] xt_policy: neither incoming nor outgoing policy selected [ 1247.412627][T16315] atomic_op ffff88807d2bc998 conn xmit_atomic 0000000000000000 [ 1249.248961][T12044] Bluetooth: hci0: command tx timeout [ 1249.372806][T16330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2673'. [ 1250.172472][T16336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'. [ 1250.193997][T16335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2673'. [ 1253.019142][T16366] atomic_op ffff888021715998 conn xmit_atomic 0000000000000000 [ 1254.530685][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2687'. [ 1255.723280][T16395] trusted_key: encrypted_key: master key parameter is missing [ 1255.741159][T16395] xt_policy: neither incoming nor outgoing policy selected [ 1256.378127][T16413] atomic_op ffff888023522198 conn xmit_atomic 0000000000000000 [ 1256.968379][ T8789] IPVS: starting estimator thread 0... [ 1257.009643][T16409] loop1: detected capacity change from 0 to 2048 [ 1257.072416][T16409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1257.088914][T16414] IPVS: using max 22 ests per chain, 52800 per kthread [ 1257.769338][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2700'. [ 1257.853051][T16427] xt_policy: neither incoming nor outgoing policy selected [ 1258.722672][T16406] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2696: bg 0: block 408: padding at end of block bitmap is not set [ 1258.869119][T16406] EXT4-fs (loop1): Remounting filesystem read-only [ 1259.733717][T14880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.834138][T16446] loop0: detected capacity change from 0 to 64 [ 1261.306215][T16454] atomic_op ffff88807d9c8198 conn xmit_atomic 0000000000000000 [ 1262.378851][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2711'. [ 1262.420976][T16461] xt_policy: neither incoming nor outgoing policy selected [ 1265.231294][T16477] loop2: detected capacity change from 0 to 64 [ 1266.347406][T16493] trusted_key: encrypted_key: master key parameter is missing [ 1266.362927][T16493] xt_policy: neither incoming nor outgoing policy selected [ 1266.743024][T16501] xt_policy: neither incoming nor outgoing policy selected [ 1266.775465][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 1267.530811][T15831] block nbd3: Receive control failed (result -32) [ 1267.587628][T16490] block nbd3: shutting down sockets [ 1267.687064][T16505] atomic_op ffff88807d0a1998 conn xmit_atomic 0000000000000000 [ 1268.561438][T16518] atomic_op ffff88802f961998 conn xmit_atomic 0000000000000000 [ 1269.038135][T16513] loop3: detected capacity change from 0 to 64 [ 1270.928329][T16536] trusted_key: encrypted_key: master key parameter is missing [ 1270.981124][T16536] xt_policy: neither incoming nor outgoing policy selected [ 1271.496451][T16547] atomic_op ffff888030f9c198 conn xmit_atomic 0000000000000000 [ 1271.550156][T16544] xt_policy: neither incoming nor outgoing policy selected [ 1274.989355][T16561] atomic_op ffff888078bde998 conn xmit_atomic 0000000000000000 [ 1275.705589][T16566] trusted_key: encrypted_key: master key parameter is missing [ 1275.787882][T16566] xt_policy: neither incoming nor outgoing policy selected [ 1277.068146][T16584] atomic_op ffff88806030a198 conn xmit_atomic 0000000000000000 [ 1277.086187][ T9] IPVS: starting estimator thread 0... [ 1277.239275][T16585] IPVS: using max 17 ests per chain, 40800 per kthread [ 1277.778957][T16590] fuse: Bad value for 'rootmode' [ 1278.230723][T16596] atomic_op ffff88802f5ed998 conn xmit_atomic 0000000000000000 [ 1278.474356][T15831] block nbd2: Receive control failed (result -32) [ 1278.644994][T16588] block nbd2: shutting down sockets [ 1280.115396][T16614] trusted_key: encrypted_key: master key parameter is missing [ 1280.257788][T16614] xt_policy: neither incoming nor outgoing policy selected [ 1281.966222][T16630] atomic_op ffff88801df21998 conn xmit_atomic 0000000000000000 [ 1283.088481][T15831] block nbd3: Receive control failed (result -32) [ 1283.132498][T16639] block nbd3: shutting down sockets [ 1285.271426][T16658] loop1: detected capacity change from 0 to 32768 [ 1285.404452][T16658] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.2764 (16658) [ 1286.002851][T16658] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1286.056943][T16658] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1286.079286][T16658] BTRFS info (device loop1): using free space tree [ 1286.239141][T16658] BTRFS info (device loop1): enabling ssd optimizations [ 1286.268029][T16658] BTRFS info (device loop1): auto enabling async discard [ 1287.118641][T16682] block nbd0: shutting down sockets [ 1288.325974][T14880] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1289.732280][T16704] fuse: Unknown parameter 'grou00000000000000000000' [ 1289.826305][T16709] atomic_op ffff888023cd0998 conn xmit_atomic 0000000000000000 [ 1290.836501][T16718] loop0: detected capacity change from 0 to 64 [ 1291.683203][T16726] fuse: Unknown parameter 'use00000000000000000000' [ 1291.918184][T16730] trusted_key: encrypted_key: master key parameter is missing [ 1292.039782][T16731] xt_policy: neither incoming nor outgoing policy selected [ 1292.059569][T15831] block nbd3: Receive control failed (result -32) [ 1292.067653][T16723] block nbd3: shutting down sockets [ 1292.469562][T16736] block nbd3: NBD_DISCONNECT [ 1292.474871][T16736] block nbd3: Disconnected due to user request. [ 1292.495829][T16736] block nbd3: shutting down sockets [ 1292.498880][T16739] fuse: Unknown parameter 'grou00000000000000000000' [ 1292.988099][T16747] atomic_op ffff8880789dc198 conn xmit_atomic 0000000000000000 [ 1295.394149][T16768] loop0: detected capacity change from 0 to 64 [ 1296.836437][T16779] fuse: Unknown parameter 'grou00000000000000000000' [ 1297.163276][T16786] atomic_op ffff88807a751198 conn xmit_atomic 0000000000000000 [ 1297.784010][T16788] loop0: detected capacity change from 0 to 1024 [ 1297.915060][T16788] hfsplus: xattr searching failed [ 1300.713771][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.721891][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.029116][T16808] loop1: detected capacity change from 0 to 64 [ 1301.454163][T16817] atomic_op ffff88802fa29998 conn xmit_atomic 0000000000000000 [ 1302.793601][T12044] Bluetooth: hci0: command 0x0406 tx timeout [ 1303.891871][T16839] atomic_op ffff88807c8f9998 conn xmit_atomic 0000000000000000 [ 1304.918909][T12044] Bluetooth: hci0: command 0x0406 tx timeout [ 1305.535886][T16846] loop3: detected capacity change from 0 to 1024 [ 1305.562259][T16846] hfsplus: xattr searching failed [ 1305.589546][T16828] loop0: detected capacity change from 0 to 32768 [ 1306.485219][ T7547] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by udevd (7547) [ 1307.388577][T16864] atomic_op ffff888053327198 conn xmit_atomic 0000000000000000 [ 1307.920604][T16868] loop1: detected capacity change from 0 to 64 [ 1309.705613][T16875] atomic_op ffff88807eeed998 conn xmit_atomic 0000000000000000 [ 1311.492927][T16881] loop0: detected capacity change from 0 to 1024 [ 1311.564868][T16879] nbd: must specify an index to disconnect [ 1312.059624][T16881] hfsplus: xattr searching failed [ 1312.339565][T12044] block nbd1: Receive control failed (result -32) [ 1312.357269][T16883] block nbd1: shutting down sockets [ 1313.431561][T16886] loop3: detected capacity change from 0 to 32768 [ 1313.497374][T16886] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1313.548955][T16886] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1313.557804][T16886] BTRFS info (device loop3): using free space tree [ 1314.030442][T16922] atomic_op ffff88805bb1d198 conn xmit_atomic 0000000000000000 [ 1314.259030][T16886] BTRFS info (device loop3): enabling ssd optimizations [ 1314.665366][T16886] BTRFS info (device loop3): auto enabling async discard [ 1319.388660][T16940] loop2: detected capacity change from 0 to 64 [ 1319.422669][T15617] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1319.829150][T16945] nbd: must specify an index to disconnect [ 1320.039837][T16948] fuse: Unknown parameter 'group_id00000000000000000000' [ 1320.365289][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2834'. [ 1320.510759][T12044] block nbd3: Receive control failed (result -32) [ 1320.511261][T16944] block nbd3: shutting down sockets [ 1320.871680][T16966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2835'. [ 1321.435621][T16965] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2836'. [ 1323.497665][T16982] fuse: Unknown parameter 'group_id00000000000000000000' [ 1324.785229][T16993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2845'. [ 1325.589355][T17003] atomic_op ffff8880602c6198 conn xmit_atomic 0000000000000000 [ 1327.221942][T17015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2848'. [ 1327.478162][T17016] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2849'. [ 1328.552147][T17027] atomic_op ffff88807cab7998 conn xmit_atomic 0000000000000000 [ 1331.151480][T17040] fuse: Unknown parameter 'group_id00000000000000000000' [ 1331.377782][T17049] loop1: detected capacity change from 0 to 64 [ 1332.062420][T17059] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2859'. [ 1334.677055][T17076] atomic_op ffff888023361998 conn xmit_atomic 0000000000000000 [ 1335.702669][T17083] fuse: Bad value for 'user_id' [ 1338.809297][T17110] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2871'. [ 1339.356341][T17120] atomic_op ffff888023c9f998 conn xmit_atomic 0000000000000000 [ 1341.301789][T17137] fuse: Bad value for 'fd' [ 1342.384379][T17154] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2882'. [ 1343.001713][T17162] trusted_key: encrypted_key: master key parameter is missing [ 1343.783480][T17165] xt_policy: neither incoming nor outgoing policy selected [ 1344.182188][T17171] loop3: detected capacity change from 0 to 256 [ 1345.863302][T17183] loop1: detected capacity change from 0 to 256 [ 1348.160635][T17207] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2895'. [ 1349.087951][T17210] trusted_key: encrypted_key: master key parameter is missing [ 1349.727771][T17216] xt_policy: neither incoming nor outgoing policy selected [ 1351.080133][T12044] Bluetooth: hci0: command 0x0406 tx timeout [ 1351.673305][T17233] xt_policy: neither incoming nor outgoing policy selected [ 1353.727383][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 1353.766402][T17253] atomic_op ffff88807cc90998 conn xmit_atomic 0000000000000000 [ 1354.319919][T17256] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2905'. [ 1354.892186][T17259] trusted_key: encrypted_key: master key parameter is missing [ 1355.619886][T17267] xt_policy: neither incoming nor outgoing policy selected [ 1357.201623][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2917'. [ 1357.399311][T17287] xt_policy: neither incoming nor outgoing policy selected [ 1357.876900][T17265] loop1: detected capacity change from 0 to 32768 [ 1357.942265][T17292] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1358.333413][T17298] atomic_op ffff88807d89b198 conn xmit_atomic 0000000000000000 [ 1358.796427][T12671] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by udevd (12671) [ 1359.042863][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2921'. [ 1361.417450][T17326] loop0: detected capacity change from 0 to 64 [ 1361.979776][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.986545][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.609868][T17340] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2931'. [ 1364.229472][T17325] loop1: detected capacity change from 0 to 32768 [ 1364.338894][T17325] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1364.368876][T17325] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1364.451228][T17325] BTRFS info (device loop1): using free space tree [ 1364.458294][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1364.795719][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1365.080811][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1365.885068][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1366.001432][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1366.414665][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1366.415206][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1366.559178][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1366.589968][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2937'. [ 1366.643895][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1366.644338][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1366.863492][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1366.870902][T17373] loop2: detected capacity change from 0 to 4096 [ 1366.931929][T17325] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1367.121400][T17325] BTRFS error (device loop1): open_ctree failed: -12 [ 1368.894538][T17384] trusted_key: encrypted_key: master key parameter is missing [ 1368.949730][T17387] fuse: Unknown parameter '0x0000000000000003' [ 1369.053928][T17386] xt_policy: neither incoming nor outgoing policy selected [ 1369.400825][T17395] block nbd2: NBD_DISCONNECT [ 1369.426785][T17389] block nbd2: shutting down sockets [ 1369.434183][T17395] block nbd2: Send disconnect failed -32 [ 1372.174648][T17411] atomic_op ffff8880532b1198 conn xmit_atomic 0000000000000000 [ 1373.585370][T17422] loop3: detected capacity change from 0 to 4096 [ 1375.138834][T17431] xt_policy: neither incoming nor outgoing policy selected [ 1377.472898][T17439] block nbd3: NBD_DISCONNECT [ 1377.498851][T17437] block nbd3: shutting down sockets [ 1377.518839][T17439] block nbd3: Send disconnect failed -32 [ 1380.087569][T17454] loop3: detected capacity change from 0 to 64 [ 1381.279116][T17466] xt_policy: neither incoming nor outgoing policy selected [ 1382.369917][T17464] loop0: detected capacity change from 0 to 4096 [ 1387.088849][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1387.283053][T17506] loop2: detected capacity change from 0 to 4096 [ 1387.328816][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1387.544964][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1387.554542][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.594239][T17510] atomic_op ffff88807d9ce198 conn xmit_atomic 0000000000000000 [ 1387.612135][ T9] usb 4-1: config 0 descriptor?? [ 1387.626435][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1388.037034][ T9] gspca_sq930x: ucbus_write failed -71 [ 1388.056944][ T9] sq930x: probe of 4-1:0.0 failed with error -71 [ 1388.093352][ T9] usb 4-1: USB disconnect, device number 5 [ 1389.211118][T17519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2978'. [ 1389.378314][T17519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.386827][T17519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.900630][T17527] fuse: Unknown parameter 'fd0x0000000000000003' [ 1391.970607][T17532] loop0: detected capacity change from 0 to 64 [ 1392.267170][T17543] loop1: detected capacity change from 0 to 4096 [ 1393.663921][T17544] loop3: detected capacity change from 0 to 32768 [ 1393.707560][T17544] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.2986 (17544) [ 1393.905517][T17544] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1393.990744][T17544] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1393.999943][T17544] BTRFS info (device loop3): using free space tree [ 1395.317259][T17544] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1395.320646][T17544] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1395.334480][T17544] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1395.461508][T17544] BTRFS error (device loop3): open_ctree failed: -12 [ 1395.999536][T12671] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by udevd (12671) [ 1398.389718][T17580] loop3: detected capacity change from 32768 to 0 [ 1398.985418][T17600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2994'. [ 1399.043405][T17602] overlayfs: failed to resolve './file0': -2 [ 1399.595833][T17606] loop1: detected capacity change from 0 to 4096 [ 1399.794780][T17609] atomic_op ffff888021714998 conn xmit_atomic 0000000000000000 [ 1400.261591][T17613] atomic_op ffff88801e645998 conn xmit_atomic 0000000000000000 [ 1404.831976][T17648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3007'. [ 1405.029587][T17645] overlayfs: failed to resolve './file0': -2 [ 1406.904512][T17654] loop3: detected capacity change from 0 to 4096 [ 1407.451233][T17667] atomic_op ffff888077824198 conn xmit_atomic 0000000000000000 [ 1408.990064][T17679] xt_policy: neither incoming nor outgoing policy selected [ 1413.539371][T17703] loop1: detected capacity change from 0 to 4096 [ 1414.347326][T17714] loop3: detected capacity change from 0 to 256 [ 1422.381460][T17765] atomic_op ffff88805f5f7998 conn xmit_atomic 0000000000000000 [ 1422.716398][T17770] loop0: detected capacity change from 0 to 1024 [ 1422.801733][T17770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1422.829851][T17770] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1423.406735][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.413189][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.421719][T17770] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 1: comm syz.0.3039: lblock 1 mapped to illegal pblock 1 (length 15) [ 1423.457450][T17770] EXT4-fs error (device loop0): ext4_ext_remove_space:2929: inode #15: comm syz.0.3039: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1423.656528][T17774] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1423.710842][T14639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.005181][T17788] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3042'. [ 1426.383419][T17800] loop3: detected capacity change from 0 to 256 [ 1427.826156][T17804] loop2: detected capacity change from 0 to 32768 [ 1427.838592][T17811] loop3: detected capacity change from 0 to 4096 [ 1427.918299][T17804] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1427.931930][T17804] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1427.941303][T17804] BTRFS info (device loop2): using free space tree [ 1428.954376][T17804] BTRFS info (device loop2): enabling ssd optimizations [ 1428.981558][T17804] BTRFS info (device loop2): auto enabling async discard [ 1430.077945][T17844] xt_policy: neither incoming nor outgoing policy selected [ 1430.942210][T15256] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1432.045308][T17855] atomic_op ffff88807c4e1998 conn xmit_atomic 0000000000000000 [ 1432.323394][T17858] atomic_op ffff88801cea9198 conn xmit_atomic 0000000000000000 [ 1433.406378][T17863] loop2: detected capacity change from 0 to 4096 [ 1434.710735][T17878] xt_policy: neither incoming nor outgoing policy selected [ 1436.263423][T17887] loop1: detected capacity change from 0 to 4096 [ 1436.301591][T17884] atomic_op ffff88807bc59198 conn xmit_atomic 0000000000000000 [ 1436.575945][T17892] atomic_op ffff888068f5e198 conn xmit_atomic 0000000000000000 [ 1438.185440][T17906] loop0: detected capacity change from 0 to 4096 [ 1438.199302][T17907] block nbd2: NBD_DISCONNECT [ 1438.204659][T17907] block nbd2: Disconnected due to user request. [ 1438.211273][T17907] block nbd2: shutting down sockets [ 1439.103425][T17916] atomic_op ffff888052f92198 conn xmit_atomic 0000000000000000 [ 1439.530739][T17920] xt_policy: neither incoming nor outgoing policy selected [ 1440.881154][T17931] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3079'. [ 1441.311059][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3078'. [ 1442.501010][T17952] loop3: detected capacity change from 0 to 4096 [ 1444.783236][T17964] xt_policy: neither incoming nor outgoing policy selected [ 1445.242970][T17958] loop2: detected capacity change from 0 to 4096 [ 1445.760228][T17969] xt_policy: neither incoming nor outgoing policy selected [ 1448.302022][T17988] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3093'. [ 1448.739493][T17990] loop1: detected capacity change from 0 to 2048 [ 1448.792251][T17990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1449.007121][T17995] fuse: Unknown parameter 'user_id00000000000000000000' [ 1452.935767][T18037] loop0: detected capacity change from 0 to 512 [ 1453.595737][T18037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1453.779746][T18037] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1454.094248][T14639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.890911][T18072] atomic_op ffff888052551998 conn xmit_atomic 0000000000000000 [ 1456.935192][T18071] loop3: detected capacity change from 0 to 64 [ 1462.607286][T18124] loop0: detected capacity change from 0 to 64 [ 1462.632208][T18123] fuse: Bad value for 'fd' [ 1463.086295][T18133] trusted_key: encrypted_key: master key parameter is missing [ 1463.236958][T18134] xt_policy: neither incoming nor outgoing policy selected [ 1464.000370][T18137] atomic_op ffff888068f5e998 conn xmit_atomic 0000000000000000 [ 1464.199203][T15831] Bluetooth: hci0: command 0x0406 tx timeout [ 1467.331331][T18163] loop0: detected capacity change from 0 to 64 [ 1473.319889][T18217] atomic_op ffff88807cf44998 conn xmit_atomic 0000000000000000 [ 1475.047536][T18226] loop3: detected capacity change from 0 to 32768 [ 1475.057182][T18226] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.3159 (18226) [ 1475.077865][T18226] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1475.088595][T18226] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1475.143894][T18226] BTRFS info (device loop3): using free space tree [ 1475.297904][T18226] BTRFS info (device loop3): enabling ssd optimizations [ 1475.341878][T18226] BTRFS info (device loop3): auto enabling async discard [ 1478.215981][T18258] xt_policy: neither incoming nor outgoing policy selected [ 1479.056238][T18254] loop2: detected capacity change from 0 to 64 [ 1479.113643][T15617] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1483.300304][T18283] block nbd2: NBD_DISCONNECT [ 1485.493381][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.500939][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.606741][T18290] fuse: Unknown parameter '0x0000000000000005' [ 1485.832296][T18296] xt_policy: neither incoming nor outgoing policy selected [ 1488.254625][T18308] atomic_op ffff88807f62d998 conn xmit_atomic 0000000000000000 [ 1488.566307][T18298] loop3: detected capacity change from 0 to 32768 [ 1488.643242][T18298] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.3174 (18298) [ 1489.017463][T18298] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1489.134477][T18298] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1489.302511][T18298] BTRFS info (device loop3): using free space tree [ 1489.460628][T18298] BTRFS info (device loop3): enabling ssd optimizations [ 1489.488901][T18298] BTRFS info (device loop3): auto enabling async discard [ 1493.156697][T18340] block nbd2: NBD_DISCONNECT [ 1493.628721][T18343] fuse: Unknown parameter '0x0000000000000005' [ 1495.166261][T15617] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1495.417695][T18352] xt_policy: neither incoming nor outgoing policy selected [ 1498.329674][T18360] trusted_key: encrypted_key: master key parameter is missing [ 1498.410029][T18360] xt_policy: neither incoming nor outgoing policy selected [ 1499.850020][T18372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3189'. [ 1500.348722][T18377] atomic_op ffff88801ef89198 conn xmit_atomic 0000000000000000 [ 1501.417484][T18386] atomic_op ffff88807e30c198 conn xmit_atomic 0000000000000000 [ 1502.553259][T18382] loop2: detected capacity change from 0 to 32768 [ 1502.606066][T18382] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.3192 (18382) [ 1502.692831][T18382] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1502.739385][T18382] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1502.884190][T18382] BTRFS info (device loop2): using free space tree [ 1503.347375][T18382] BTRFS info (device loop2): enabling ssd optimizations [ 1503.384902][T18382] BTRFS info (device loop2): auto enabling async discard [ 1503.730889][T18413] trusted_key: encrypted_key: master key parameter is missing [ 1507.503473][T18417] xt_policy: neither incoming nor outgoing policy selected [ 1507.718335][T15256] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1507.983723][T18427] loop0: detected capacity change from 0 to 64 [ 1508.291438][T18431] fuse: Unknown parameter '0x0000000000000005' [ 1509.854782][T18444] atomic_op ffff88807aaf1198 conn xmit_atomic 0000000000000000 [ 1510.910028][T18448] loop2: detected capacity change from 0 to 4096 [ 1511.889738][T18457] trusted_key: encrypted_key: master key parameter is missing [ 1511.943812][T18458] xt_policy: neither incoming nor outgoing policy selected [ 1512.637596][T18457] xt_policy: neither incoming nor outgoing policy selected [ 1512.793397][T18460] fuse: Unknown parameter '0x0000000000000005' [ 1513.005948][T18468] loop0: detected capacity change from 0 to 256 [ 1513.072444][T18465] block nbd2: shutting down sockets [ 1513.863305][T18475] loop2: detected capacity change from 0 to 64 [ 1514.605803][T18488] loop0: detected capacity change from 0 to 4096 [ 1516.847185][T18503] atomic_op ffff88805d95f998 conn xmit_atomic 0000000000000000 [ 1516.864147][T18501] trusted_key: encrypted_key: master key parameter is missing [ 1517.192801][T18505] xt_policy: neither incoming nor outgoing policy selected [ 1517.706025][T18508] fuse: Unknown parameter '0x0000000000000004' [ 1517.754160][T18510] block nbd2: shutting down sockets [ 1518.015335][T15831] Bluetooth: Frame is too long (len 16, expected len 4) [ 1519.270152][T18524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3224'. [ 1519.585513][T18529] loop3: detected capacity change from 0 to 64 [ 1520.602647][T18537] atomic_op ffff88807e227998 conn xmit_atomic 0000000000000000 [ 1521.920693][T18547] trusted_key: encrypted_key: master key parameter is missing [ 1521.984073][T18548] atomic_op ffff888025c3d998 conn xmit_atomic 0000000000000000 [ 1522.256926][T18549] xt_policy: neither incoming nor outgoing policy selected [ 1522.892781][T18555] fuse: Unknown parameter 'fd0x0000000000000005' [ 1523.436811][T18566] loop0: detected capacity change from 0 to 4096 [ 1523.649910][T15831] block nbd2: Receive control failed (result -32) [ 1523.684580][T18562] block nbd2: shutting down sockets [ 1524.250576][T18576] xt_policy: neither incoming nor outgoing policy selected [ 1525.564729][T18585] trusted_key: encrypted_key: master key parameter is missing [ 1526.387824][T18589] xt_policy: neither incoming nor outgoing policy selected [ 1526.724964][T18592] fuse: Unknown parameter 'fd0x0000000000000005' [ 1527.232483][T18601] block nbd2: shutting down sockets [ 1528.384772][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3247'. [ 1528.478408][T18618] overlayfs: failed to resolve './file0': -2 [ 1529.137652][T18622] xt_policy: neither incoming nor outgoing policy selected [ 1531.423244][T18632] trusted_key: encrypted_key: master key parameter is missing [ 1531.471269][T18634] fuse: Unknown parameter 'fd0x0000000000000004' [ 1531.510510][T18635] xt_policy: neither incoming nor outgoing policy selected [ 1532.866652][T12044] Bluetooth: Frame is too long (len 16, expected len 4) [ 1532.960380][T18648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3258'. [ 1533.205123][T15831] block nbd0: Receive control failed (result -32) [ 1533.228136][T18643] block nbd0: shutting down sockets [ 1535.400241][T18670] trusted_key: encrypted_key: master key parameter is missing [ 1535.516950][T18671] xt_policy: neither incoming nor outgoing policy selected [ 1536.772564][T18682] atomic_op ffff88802c91f198 conn xmit_atomic 0000000000000000 [ 1539.622632][T18700] atomic_op ffff88807a6f8998 conn xmit_atomic 0000000000000000 [ 1540.397336][T18704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3272'. [ 1540.781657][T18704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.789600][T18704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.827560][T18716] xt_policy: neither incoming nor outgoing policy selected [ 1542.680401][T18732] atomic_op ffff88807b774198 conn xmit_atomic 0000000000000000 [ 1543.383202][T18738] atomic_op ffff8880789ec998 conn xmit_atomic 0000000000000000 [ 1544.952466][T18751] xt_policy: neither incoming nor outgoing policy selected [ 1546.379460][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.386641][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.318182][T18779] atomic_op ffff88807dcab998 conn xmit_atomic 0000000000000000 [ 1548.413081][T18782] loop0: detected capacity change from 0 to 4096 [ 1548.647913][T18787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3295'. [ 1548.660061][T18787] overlayfs: failed to resolve './file0': -2 [ 1549.478851][T12044] Bluetooth: hci0: command 0x0406 tx timeout [ 1550.261373][T18806] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3301'. [ 1553.147258][T18829] loop0: detected capacity change from 0 to 4096 [ 1554.040474][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3309'. [ 1554.132779][T18837] overlayfs: failed to resolve './file0': -2 [ 1558.133708][T18850] atomic_op ffff8880211df998 conn xmit_atomic 0000000000000000 [ 1561.977175][T18883] loop2: detected capacity change from 0 to 4096 [ 1562.141202][T12044] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 1565.650202][T18915] atomic_op ffff88807c7eb998 conn xmit_atomic 0000000000000000 [ 1566.281514][T18929] xt_policy: neither incoming nor outgoing policy selected [ 1566.354328][T18932] atomic_op ffff88801d74b998 conn xmit_atomic 0000000000000000 [ 1566.456178][T18931] loop0: detected capacity change from 0 to 4096 [ 1571.112445][T18972] loop2: detected capacity change from 0 to 2048 [ 1571.181248][T18981] atomic_op ffff888020f12998 conn xmit_atomic 0000000000000000 [ 1572.243220][T18972] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1572.351864][T18972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1572.878826][ T28] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1573.061129][ T28] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1573.077111][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.105457][ T28] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1573.138429][ T28] usb 3-1: config 1 has no interface number 1 [ 1573.158514][ T28] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1573.228719][ T28] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1573.237909][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.380170][ T28] usb 3-1: Product: syz [ 1573.384496][ T28] usb 3-1: Manufacturer: syz [ 1573.427561][ T28] usb 3-1: SerialNumber: syz [ 1573.790140][ T28] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1573.797909][ T28] usb 3-1: MIDIStreaming interface descriptor not found [ 1573.938055][ T28] usb 3-1: USB disconnect, device number 9 [ 1573.957287][T19002] atomic_op ffff888027285198 conn xmit_atomic 0000000000000000 [ 1575.312694][T19010] loop3: detected capacity change from 0 to 256 [ 1577.115326][T19027] atomic_op ffff88807ef1a198 conn xmit_atomic 0000000000000000 [ 1579.168157][T19058] loop2: detected capacity change from 0 to 256 [ 1581.114600][T19074] atomic_op ffff88807e246198 conn xmit_atomic 0000000000000000 [ 1581.752438][T19085] atomic_op ffff888068191198 conn xmit_atomic 0000000000000000 [ 1583.044997][T19091] trusted_key: encrypted_key: master key parameter is missing [ 1583.270887][T19093] xt_policy: neither incoming nor outgoing policy selected [ 1584.498901][T19101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3375'. [ 1585.883351][T19101] overlayfs: failed to resolve './file0': -2 [ 1586.558021][T19113] loop3: detected capacity change from 0 to 256 [ 1588.942522][T19135] trusted_key: encrypted_key: master key parameter is missing [ 1589.046151][T19136] xt_policy: neither incoming nor outgoing policy selected [ 1590.449586][T19142] atomic_op ffff8880525e1198 conn xmit_atomic 0000000000000000 [ 1592.374724][T19153] loop2: detected capacity change from 0 to 8 [ 1593.234944][T19157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3388'. [ 1593.412039][T19157] overlayfs: failed to resolve './file0': -2 [ 1594.106494][T19173] atomic_op ffff88807d9cf198 conn xmit_atomic 0000000000000000 [ 1594.534998][T19167] trusted_key: encrypted_key: master key parameter is missing [ 1594.670254][T19175] xt_policy: neither incoming nor outgoing policy selected [ 1599.685856][T19216] trusted_key: encrypted_key: master key parameter is missing [ 1599.890536][T19219] xt_policy: neither incoming nor outgoing policy selected [ 1602.498505][T19235] atomic_op ffff888025ee5998 conn xmit_atomic 0000000000000000 [ 1603.323764][T19240] xt_policy: neither incoming nor outgoing policy selected [ 1606.476288][T19263] atomic_op ffff888021710998 conn xmit_atomic 0000000000000000 [ 1607.372265][T19279] atomic_op ffff88807e336998 conn xmit_atomic 0000000000000000 [ 1607.723269][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.736267][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.193751][T19287] loop3: detected capacity change from 0 to 256 [ 1610.118261][T19305] atomic_op ffff888077f73998 conn xmit_atomic 0000000000000000 [ 1611.311416][T19314] atomic_op ffff88807b6a0198 conn xmit_atomic 0000000000000000 [ 1613.788261][T19343] atomic_op ffff88805ed31198 conn xmit_atomic 0000000000000000 [ 1614.544775][T19355] atomic_op ffff88807f47b198 conn xmit_atomic 0000000000000000 [ 1615.642000][T19363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.751816][T19363] batadv_slave_1: entered allmulticast mode [ 1617.247806][T19375] loop2: detected capacity change from 0 to 4096 [ 1617.295672][T19382] xt_policy: neither incoming nor outgoing policy selected [ 1617.354678][T19375] ntfs3: Unknown parameter 'disš#–˜HðÞžSöÑcard' [ 1617.471810][T19381] loop0: detected capacity change from 0 to 4096 [ 1619.953527][T19405] loop2: detected capacity change from 0 to 512 [ 1619.989101][T19405] EXT4-fs: Ignoring removed nobh option [ 1620.057710][T19405] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1620.061006][T19396] loop3: detected capacity change from 0 to 32768 [ 1620.078223][T19396] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.3456 (19396) [ 1620.091830][T19405] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1620.139364][T19396] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1620.148433][T19405] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3459: Corrupt directory, running e2fsck is recommended [ 1620.166053][T19396] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1620.175272][T19396] BTRFS info (device loop3): using free space tree [ 1620.182883][T19405] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1620.199120][T19405] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.3459: corrupted in-inode xattr: invalid ea_ino [ 1620.216532][T19405] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3459: couldn't read orphan inode 15 (err -117) [ 1620.232888][T19405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1620.328867][T19396] BTRFS info (device loop3): enabling ssd optimizations [ 1620.437590][T19396] BTRFS info (device loop3): auto enabling async discard [ 1623.157577][T19405] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1623.169188][T19405] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1623.179345][T19405] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3459: Corrupt directory, running e2fsck is recommended [ 1624.701813][T15256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1624.845948][T15617] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1625.062708][T19440] loop2: detected capacity change from 0 to 4096 [ 1625.189190][T12671] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop3 scanned by udevd (12671) [ 1625.614550][T19449] atomic_op ffff88805d307198 conn xmit_atomic 0000000000000000 [ 1628.199816][T15831] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1628.952756][T19478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3477'. [ 1629.780334][T19490] atomic_op ffff8880226e7998 conn xmit_atomic 0000000000000000 [ 1630.589076][T15831] Bluetooth: hci0: command 0x0406 tx timeout [ 1630.653695][T19468] loop3: detected capacity change from 0 to 32768 [ 1630.971962][T19468] BTRFS error (device loop3): open_ctree failed: -4 [ 1631.026729][T12671] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by udevd (12671) [ 1631.496613][T19514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3486'. [ 1632.949935][T19525] loop0: detected capacity change from 0 to 4096 [ 1635.199027][T19534] loop2: detected capacity change from 0 to 32768 [ 1635.235629][T19534] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1635.268320][T19534] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1635.309691][T19534] BTRFS info (device loop2): using free space tree [ 1635.462744][T19534] BTRFS info (device loop2): enabling ssd optimizations [ 1635.491860][T19568] loop3: detected capacity change from 0 to 128 [ 1635.498448][T19534] BTRFS info (device loop2): auto enabling async discard [ 1635.597524][T19568] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1635.726003][T19568] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1637.311963][T15617] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1639.149387][T15256] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1639.218960][T19576] xt_policy: neither incoming nor outgoing policy selected [ 1640.410486][T19589] loop0: detected capacity change from 0 to 2048 [ 1640.476631][T19589] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1640.508747][T19589] NILFS (loop0): mounting unchecked fs [ 1640.556312][T19589] NILFS (loop0): recovery complete [ 1640.623652][T19593] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1640.729648][ T27] audit: type=1800 audit(1753127045.624:15): pid=19589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3503" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1641.313869][T19600] loop0: detected capacity change from 0 to 256 [ 1641.339460][T19600] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1641.392182][T19600] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1641.434299][T19600] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1641.470830][T19602] loop3: detected capacity change from 0 to 2048 [ 1641.515877][ T27] audit: type=1800 audit(1753127046.404:16): pid=19600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3506" name="file1" dev="loop0" ino=1048840 res=0 errno=0 [ 1641.537472][T19602] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1641.577172][T19600] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 1641.598683][T19602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1641.607769][T19600] exFAT-fs (loop0): Filesystem has been set read-only [ 1641.875646][T19605] loop3: detected capacity change from 0 to 2048 [ 1641.966193][T19605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1642.181683][T19612] xt_policy: neither incoming nor outgoing policy selected [ 1642.378667][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1642.393381][T19607] loop0: detected capacity change from 0 to 32768 [ 1642.421504][T19607] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.3509 (19607) [ 1642.474028][T19607] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1642.508006][T19607] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1642.539574][T19607] BTRFS info (device loop0): using free space tree [ 1642.585294][ T8] usb 4-1: config 0 has an invalid interface number: 197 but max is 0 [ 1642.607442][ T8] usb 4-1: config 0 has no interface number 0 [ 1642.638124][T19607] BTRFS info (device loop0): enabling ssd optimizations [ 1642.645439][ T8] usb 4-1: config 0 interface 197 has no altsetting 0 [ 1642.668736][T19607] BTRFS info (device loop0): auto enabling async discard [ 1642.698641][ T8] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=86.12 [ 1642.715730][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.744353][ T8] usb 4-1: Product: syz [ 1642.749150][ T8] usb 4-1: Manufacturer: syz [ 1642.753782][ T8] usb 4-1: SerialNumber: syz [ 1642.812908][ T8] usb 4-1: config 0 descriptor?? [ 1643.484403][ T8] redrat3 4-1:0.197: Couldn't find all endpoints [ 1643.569433][T19610] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1643.830540][ T8] usb 4-1: USB disconnect, device number 6 [ 1644.007239][T19610] EXT4-fs (loop3): Remounting filesystem read-only [ 1644.868267][T15617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1645.144072][T14639] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1645.215574][T19648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3515'. [ 1646.129074][ T54] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1646.322431][ T54] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1646.332826][ T54] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1646.344242][ T54] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1646.370377][ T54] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1646.381536][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.541748][ T54] usb 4-1: Product: syz [ 1646.546182][ T54] usb 4-1: Manufacturer: syz [ 1646.552639][ T54] usb 4-1: SerialNumber: syz [ 1646.615505][T19661] xt_policy: neither incoming nor outgoing policy selected [ 1646.665718][ T54] hub 4-1:1.0: bad descriptor, ignoring hub [ 1646.715624][ T54] hub: probe of 4-1:1.0 failed with error -5 [ 1647.175244][ T54] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1647.383144][ T54] usb 4-1: USB disconnect, device number 7 [ 1647.422169][ T54] usblp0: removed [ 1648.113825][T19671] loop3: detected capacity change from 0 to 128 [ 1648.158904][T19671] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4634: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1648.219054][T19671] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 1649.832938][T19691] atomic_op ffff88802fa28998 conn xmit_atomic 0000000000000000 [ 1650.566762][T19491] Bluetooth: hci4: unexpected event 0x10 length: 6 > 1 [ 1650.569532][T12044] Bluetooth: hci4: hardware error 0x00 [ 1650.692816][T19695] xt_policy: neither incoming nor outgoing policy selected [ 1650.822023][ T27] audit: type=1326 audit(1753127055.674:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.0.3527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7c378e9a9 code=0x0 [ 1651.046772][T19698] trusted_key: encrypted_key: master key parameter is missing [ 1651.403354][T19698] xt_policy: neither incoming nor outgoing policy selected [ 1651.778733][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1651.990648][ T8] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1652.051230][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.083771][ T8] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1652.113694][ T8] usb 3-1: config 1 has no interface number 1 [ 1652.145681][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1652.225075][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1652.257086][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.284217][ T8] usb 3-1: Product: syz [ 1652.319442][ T8] usb 3-1: Manufacturer: syz [ 1652.362110][ T8] usb 3-1: SerialNumber: syz [ 1652.636588][ T8] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1652.653575][ T8] usb 3-1: MIDIStreaming interface descriptor not found [ 1652.772742][ T8] usb 3-1: USB disconnect, device number 10 [ 1652.918713][T12044] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1653.008839][T19719] loop3: detected capacity change from 0 to 256 [ 1653.114717][T19719] FAT-fs (loop3): Directory bread(block 64) failed [ 1653.122250][T19719] FAT-fs (loop3): Directory bread(block 65) failed [ 1653.158452][T19719] FAT-fs (loop3): Directory bread(block 66) failed [ 1653.198337][T19719] FAT-fs (loop3): Directory bread(block 67) failed [ 1653.209349][T19719] FAT-fs (loop3): Directory bread(block 68) failed [ 1653.215927][T19719] FAT-fs (loop3): Directory bread(block 69) failed [ 1653.268897][T19719] FAT-fs (loop3): Directory bread(block 70) failed [ 1653.275487][T19719] FAT-fs (loop3): Directory bread(block 71) failed [ 1653.286734][T19719] FAT-fs (loop3): Directory bread(block 72) failed [ 1653.334607][T19719] FAT-fs (loop3): Directory bread(block 73) failed [ 1653.688529][T19728] atomic_op ffff88807aa6e998 conn xmit_atomic 0000000000000000 [ 1654.241496][T19727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3537'. [ 1654.413488][T19734] xt_policy: neither incoming nor outgoing policy selected [ 1655.243050][T19741] loop3: detected capacity change from 0 to 64 [ 1655.601794][ T27] audit: type=1800 audit(1753127060.494:18): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3541" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1655.717728][T19748] loop0: detected capacity change from 0 to 512 [ 1658.058068][T19763] loop3: detected capacity change from 0 to 4096 [ 1658.649434][T19756] kthread_run failed with err -4 [ 1658.810961][T19768] xt_policy: neither incoming nor outgoing policy selected [ 1659.082614][T19771] loop2: detected capacity change from 0 to 2048 [ 1660.640139][T19779] netlink: 'syz.1.3552': attribute type 1 has an invalid length. [ 1660.929767][T19771] UDF-fs: iocharset cì866 not found [ 1661.741985][T19779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1662.519092][T19771] loop2: detected capacity change from 0 to 32768 [ 1662.544114][T19781] veth3: entered promiscuous mode [ 1662.557447][T19771] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3551 (19771) [ 1662.620268][T19781] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1662.675917][T19783] vlan2: entered allmulticast mode [ 1662.692891][T19771] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1662.749868][T19783] bond1: entered allmulticast mode [ 1662.957256][T19771] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1663.031338][T19783] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1663.083347][T19771] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1663.348695][T19771] BTRFS info (device loop2): max_inline at 0 [ 1663.368687][T19771] BTRFS info (device loop2): enabling disk space caching [ 1663.376082][T19771] BTRFS info (device loop2): turning off barriers [ 1663.382962][T19771] BTRFS info (device loop2): turning on flush-on-commit [ 1663.390396][T19771] BTRFS info (device loop2): doing ref verification [ 1663.397308][T19771] BTRFS info (device loop2): force clearing of disk cache [ 1663.405048][T19771] BTRFS info (device loop2): enabling ssd optimizations [ 1663.419694][T19771] BTRFS info (device loop2): max_inline at 4096 [ 1663.438996][T19771] BTRFS info (device loop2): disk space caching is enabled [ 1663.496618][T19771] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1663.498524][T19771] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1663.564123][T19771] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1663.606179][T19771] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1663.621540][T19771] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1663.647151][T19771] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1663.698047][T19771] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1663.734963][T19771] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1663.758940][T19771] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1663.830756][T19771] BTRFS error (device loop2): open_ctree failed: -12 [ 1665.286310][T19825] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1665.679126][ T5787] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1665.822120][T19835] trusted_key: encrypted_key: master key parameter is missing [ 1666.041669][ T5787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1666.065600][T19835] xt_policy: neither incoming nor outgoing policy selected [ 1666.074078][ T5787] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1666.115070][ T5787] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1666.134077][ T5787] usb 4-1: string descriptor 0 read error: -22 [ 1666.146427][ T5787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1666.177552][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.568514][ T54] usb 4-1: USB disconnect, device number 8 [ 1667.477212][T19855] dummy0 speed is unknown, defaulting to 1000 [ 1667.488899][T19855] dummy0 speed is unknown, defaulting to 1000 [ 1667.524934][T19855] dummy0 speed is unknown, defaulting to 1000 [ 1667.736720][T19855] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1668.654595][T19855] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1668.878746][T19864] xt_policy: neither incoming nor outgoing policy selected [ 1668.921269][T19867] trusted_key: encrypted_key: master key parameter is missing [ 1668.952053][T19867] xt_policy: neither incoming nor outgoing policy selected [ 1669.015386][T19855] dummy0 speed is unknown, defaulting to 1000 [ 1669.057180][T19855] dummy0 speed is unknown, defaulting to 1000 [ 1669.091901][T19855] dummy0 speed is unknown, defaulting to 1000 [ 1669.125350][T19855] dummy0 speed is unknown, defaulting to 1000 [ 1669.172793][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.179595][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.633075][T19877] dummy0 speed is unknown, defaulting to 1000 [ 1669.888169][T19880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3575'. [ 1669.906462][T19880] overlayfs: failed to resolve './file0': -2 [ 1670.675392][T19883] loop2: detected capacity change from 0 to 256 [ 1673.938025][T19888] loop2: detected capacity change from 0 to 4096 [ 1675.776905][ T27] audit: type=1800 audit(1753127080.664:19): pid=19888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3578" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 1675.780487][T19886] loop0: detected capacity change from 0 to 32768 [ 1676.051531][T19886] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3577 (19886) [ 1676.166270][T19886] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1676.208950][T19907] xt_policy: neither incoming nor outgoing policy selected [ 1676.279052][T19886] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1676.308777][T19886] BTRFS info (device loop0): setting nodatacow, compression disabled [ 1676.316924][T19886] BTRFS info (device loop0): setting datacow [ 1676.351823][T19886] BTRFS info (device loop0): doing ref verification [ 1676.385707][T19886] BTRFS info (device loop0): force clearing of disk cache [ 1676.419190][T19886] BTRFS info (device loop0): turning off barriers [ 1676.438982][T19886] BTRFS info (device loop0): enabling ssd optimizations [ 1676.446260][T19886] BTRFS info (device loop0): using spread ssd allocation scheme [ 1676.491682][T19886] BTRFS info (device loop0): not using ssd optimizations [ 1676.549394][T19886] BTRFS info (device loop0): not using spread ssd allocation scheme [ 1676.558290][T19911] trusted_key: encrypted_key: master key parameter is missing [ 1676.588881][T19886] BTRFS info (device loop0): using free space tree [ 1676.608941][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1676.609817][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1676.659458][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1676.838733][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1676.860570][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1676.879008][T19917] xt_policy: neither incoming nor outgoing policy selected [ 1677.665968][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1677.666502][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1677.721292][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1677.731184][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1677.805443][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1677.826337][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1677.907914][T19886] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1677.929019][T19886] BTRFS error (device loop0): open_ctree failed: -12 [ 1678.104119][T19937] loop2: detected capacity change from 0 to 256 [ 1679.831237][ T27] audit: type=1800 audit(1753127084.714:20): pid=19954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3591" name="bus" dev="overlay" ino=1502 res=0 errno=0 [ 1680.636795][T19956] loop0: detected capacity change from 0 to 4096 [ 1680.647481][T19955] loop3: detected capacity change from 0 to 4096 [ 1680.672735][T19955] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1680.742105][T19956] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1680.797357][ T27] audit: type=1800 audit(1753127085.684:21): pid=19956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3593" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 1680.976570][T19960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3594'. [ 1681.922144][T19963] overlay: ./file0 is not a directory [ 1683.675085][T19972] loop0: detected capacity change from 0 to 40427 [ 1683.701756][T19972] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1683.711693][T19972] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1683.756684][T19972] F2FS-fs (loop0): invalid crc value [ 1683.785622][T19972] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1683.950908][T19972] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1683.977332][T19972] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1684.100466][T19981] loop3: detected capacity change from 0 to 32768 [ 1684.119465][T19972] syz.0.3597: attempt to access beyond end of device [ 1684.119465][T19972] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1684.140470][T19981] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.3600 (19981) [ 1684.190401][T19981] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1684.200904][T19981] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1684.201462][T19989] syz.0.3597: attempt to access beyond end of device [ 1684.201462][T19989] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1684.209839][T19981] BTRFS info (device loop3): using free space tree [ 1684.306781][T19981] BTRFS info (device loop3): enabling ssd optimizations [ 1684.321758][T19989] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1684.342745][T19981] BTRFS info (device loop3): auto enabling async discard [ 1689.794997][T15617] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1690.077546][T12671] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop3 scanned by udevd (12671) [ 1690.421022][T20020] atomic_op ffff88807dca9198 conn xmit_atomic 0000000000000000 [ 1691.178052][T20024] loop0: detected capacity change from 0 to 2048 [ 1691.263241][T20024] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1691.335218][T20024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1691.473358][T20027] [U]  [ 1692.243936][T20036] xt_policy: neither incoming nor outgoing policy selected [ 1692.427348][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1692.449138][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1692.567945][T20042] ceph: No mds server is up or the cluster is laggy [ 1693.699437][T20056] loop3: detected capacity change from 0 to 256 [ 1693.873817][T20056] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1694.029786][T20056] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1694.082607][T20056] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1694.270750][T20040] loop2: detected capacity change from 0 to 40427 [ 1694.285408][T20040] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 1694.325565][T20040] F2FS-fs (loop2): invalid crc value [ 1694.334773][T20040] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1694.418406][T20040] F2FS-fs (loop2): Start checkpoint disabled! [ 1694.445608][T20040] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1695.583814][ T59] kworker/u4:4: attempt to access beyond end of device [ 1695.583814][ T59] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1695.598303][ T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1695.605631][ T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1696.138050][T20084] loop3: detected capacity change from 0 to 512 [ 1696.163321][T20084] EXT4-fs: Ignoring removed nobh option [ 1696.193410][T20084] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1696.205615][T20084] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 1696.216302][T20084] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3628: Corrupt directory, running e2fsck is recommended [ 1696.256244][T20084] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1696.275026][T20084] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.3628: corrupted in-inode xattr: invalid ea_ino [ 1696.311344][T20084] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3628: couldn't read orphan inode 15 (err -117) [ 1696.334594][T20084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1696.850262][T20098] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1696.864214][T20098] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 1696.876794][T20098] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3628: Corrupt directory, running e2fsck is recommended [ 1697.216120][T20088] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1697.333036][T15617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1697.349114][T20102] xt_policy: neither incoming nor outgoing policy selected [ 1697.543128][T20106] loop0: detected capacity change from 0 to 256 [ 1697.564039][T20106] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1697.612843][T20106] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1697.744272][T20106] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1697.875409][ T27] audit: type=1800 audit(1753127102.764:22): pid=20106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3635" name="file1" dev="loop0" ino=1048886 res=0 errno=0 [ 1699.200822][T20127] atomic_op ffff88805f719998 conn xmit_atomic 0000000000000000 [ 1699.265153][T12044] Bluetooth: hci0: command 0x0406 tx timeout [ 1700.006788][T20123] loop2: detected capacity change from 0 to 32768 [ 1700.074047][T20123] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1700.258732][T20123] XFS (loop2): Ending clean mount [ 1700.293858][T20123] XFS (loop2): Quotacheck needed: Please wait. [ 1700.405275][T20123] XFS (loop2): Quotacheck: Done. [ 1700.555171][T15256] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1700.984838][T20148] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3646'. [ 1701.326011][T20150] loop0: detected capacity change from 0 to 256 [ 1701.373121][T20150] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1701.433369][T20150] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1701.462583][T20150] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1701.638747][ T27] audit: type=1800 audit(1753127106.464:23): pid=20150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3647" name="file1" dev="loop0" ino=1048887 res=0 errno=0 [ 1702.652913][T20164] atomic_op ffff88807d9c3998 conn xmit_atomic 0000000000000000 [ 1703.678124][T20171] loop3: detected capacity change from 0 to 164 [ 1703.753528][T20171] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1703.852546][T20171] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1703.897468][T20171] rock: directory entry would overflow storage [ 1703.908657][T20171] rock: sig=0x4f50, size=4, remaining=3 [ 1703.914270][T20171] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1705.181328][T20184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3657'. [ 1706.876647][T20203] atomic_op ffff88807cf1c998 conn xmit_atomic 0000000000000000 [ 1708.042385][T20214] loop2: detected capacity change from 0 to 256 [ 1708.208625][T20214] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1708.295625][T20214] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1708.942496][T20214] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1709.103933][ T27] audit: type=1800 audit(1753127113.924:24): pid=20214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3668" name="file1" dev="loop2" ino=1048891 res=0 errno=0 [ 1710.152671][T20212] loop0: detected capacity change from 0 to 32768 [ 1710.404597][T20212] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1711.038863][ T8789] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1711.364114][ T8789] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1711.404808][ T8789] usb 3-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1711.419287][T20212] XFS (loop0): Ending clean mount [ 1711.450189][ T8789] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1711.495736][T20212] XFS (loop0): Quotacheck needed: Please wait. [ 1711.516107][ T8789] usb 3-1: string descriptor 0 read error: -22 [ 1711.545275][ T8789] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1711.577525][ T8789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.619543][T20212] XFS (loop0): Quotacheck: Done. [ 1711.719815][T14639] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1711.833052][ T8789] usb 3-1: USB disconnect, device number 11 [ 1712.083209][T20244] loop3: detected capacity change from 0 to 32768 [ 1712.095048][T20244] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1712.111100][T20244] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1712.128872][T20244] BTRFS info (device loop3): using free space tree [ 1712.197174][T20244] BTRFS info (device loop3): enabling ssd optimizations [ 1712.204974][T20244] BTRFS info (device loop3): auto enabling async discard [ 1714.702803][T15617] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1718.847902][T20303] trusted_key: syz.3.3687 sent an empty control message without MSG_MORE. [ 1719.164007][T20306] atomic_op ffff88807f604998 conn xmit_atomic 0000000000000000 [ 1719.817487][T20309] loop0: detected capacity change from 0 to 512 [ 1719.825096][T20309] EXT4-fs: Ignoring removed nobh option [ 1719.857977][T20309] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1719.888923][T20309] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1719.909791][T20309] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3688: Corrupt directory, running e2fsck is recommended [ 1719.961231][T20309] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1720.002145][T20309] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.3688: corrupted in-inode xattr: invalid ea_ino [ 1720.063715][T20309] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3688: couldn't read orphan inode 15 (err -117) [ 1720.090900][T20309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1721.532981][T20324] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1721.547281][T20324] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1721.559396][T20324] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3688: Corrupt directory, running e2fsck is recommended [ 1722.053806][T14639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1724.737811][T20352] loop2: detected capacity change from 0 to 4096 [ 1726.008985][T20365] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1728.661658][T20400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3713'. [ 1730.197184][T20408] loop2: detected capacity change from 0 to 40427 [ 1730.222108][T20408] F2FS-fs (loop2): heap/no_heap options were deprecated [ 1730.248706][T20408] F2FS-fs (loop2): invalid crc value [ 1730.262015][T20408] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1730.443242][T20408] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1730.505677][ T27] audit: type=1800 audit(1753127135.394:25): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3716" name="file1" dev="loop2" ino=14 res=0 errno=0 [ 1730.605212][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.612039][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.635404][T20421] syz.2.3716: attempt to access beyond end of device [ 1730.635404][T20421] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1731.437342][T20421] syz.2.3716: attempt to access beyond end of device [ 1731.437342][T20421] loop2: rw=2049, sector=84808, nr_sectors = 2000 limit=40427 [ 1731.555683][T20421] syz.2.3716: attempt to access beyond end of device [ 1731.555683][T20421] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1731.634250][T20408] syz.2.3716: attempt to access beyond end of device [ 1731.634250][T20408] loop2: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 1732.574869][T15256] syz-executor: attempt to access beyond end of device [ 1732.574869][T15256] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 1732.603392][T15256] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1732.611273][T15256] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1732.803544][T20432] loop3: detected capacity change from 0 to 256 [ 1734.271008][T20450] loop3: detected capacity change from 0 to 64 [ 1734.442477][T20449] macsec0: entered promiscuous mode [ 1734.447935][T20449] macsec0: entered allmulticast mode [ 1734.453684][T20449] veth1_macvtap: entered allmulticast mode [ 1734.545067][T20453] atomic_op ffff888077cac198 conn xmit_atomic 0000000000000000 [ 1738.416412][T20471] loop0: detected capacity change from 0 to 4096 [ 1738.520251][T20474] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1738.838926][T15934] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1738.880826][T20478] loop0: detected capacity change from 0 to 512 [ 1738.910695][T20478] EXT4-fs: Ignoring removed mblk_io_submit option [ 1738.934778][T20478] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1738.968641][T20478] EXT4-fs (loop0): DAX unsupported by block device. [ 1739.028869][T15934] usb 4-1: Using ep0 maxpacket: 8 [ 1739.040499][T15934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1739.056250][T15934] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1739.088731][T15934] usb 4-1: can't read configurations, error -71 [ 1740.756056][T20492] xt_policy: neither incoming nor outgoing policy selected [ 1743.006793][T20509] loop3: detected capacity change from 0 to 256 [ 1743.158293][T20509] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1743.238689][T19491] Bluetooth: hci0: command 0x0406 tx timeout [ 1743.275983][T20509] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1743.331195][T20509] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1743.394887][T20513] loop0: detected capacity change from 0 to 256 [ 1743.432906][ T27] audit: type=1800 audit(1753127148.324:26): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3743" name="file1" dev="loop3" ino=1048911 res=0 errno=0 [ 1743.554584][T20503] loop2: detected capacity change from 0 to 32768 [ 1743.824768][T20503] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.3741 (20503) [ 1744.662781][T20503] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1744.746037][T20503] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1744.791724][T20503] BTRFS info (device loop2): using free space tree [ 1744.840610][T20503] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1744.841367][T20503] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1744.851019][T20503] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1744.860960][T20503] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1744.871124][T20503] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1744.881353][T20503] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1744.892925][T20503] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1744.904241][T20503] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1744.915410][T20503] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1745.149338][T20543] xt_policy: neither incoming nor outgoing policy selected [ 1745.705622][T20503] BTRFS error (device loop2): open_ctree failed: -12 [ 1745.858244][ T7547] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by udevd (7547) [ 1747.508308][T20564] loop3: detected capacity change from 0 to 256 [ 1747.548474][T20564] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1747.594541][T20564] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1747.665143][T20564] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1747.776947][ T27] audit: type=1800 audit(1753127152.664:27): pid=20564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3755" name="file1" dev="loop3" ino=1048916 res=0 errno=0 [ 1748.147710][T20571] atomic_op ffff888023bd4998 conn xmit_atomic 0000000000000000 [ 1748.817578][T20570] dummy0 speed is unknown, defaulting to 1000 [ 1748.883408][T20573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3757'. [ 1748.927847][T20573] overlayfs: failed to resolve './file0': -2 [ 1750.035273][T20585] xt_policy: neither incoming nor outgoing policy selected [ 1751.485270][T20596] loop3: detected capacity change from 0 to 256 [ 1751.528106][T20596] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1751.556803][T20596] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1751.612317][T20596] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1751.688749][ T27] audit: type=1800 audit(1753127156.574:28): pid=20596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3765" name="file1" dev="loop3" ino=1048917 res=0 errno=0 [ 1753.363311][T20592] loop2: detected capacity change from 0 to 32768 [ 1753.395505][T20592] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1754.368864][T20623] xt_policy: neither incoming nor outgoing policy selected [ 1754.871430][T20592] XFS (loop2): Ending clean mount [ 1754.892564][T20592] XFS (loop2): Quotacheck needed: Please wait. [ 1755.014916][T20592] XFS (loop2): Quotacheck: Done. [ 1755.069854][T15256] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1755.089057][T20635] loop0: detected capacity change from 0 to 512 [ 1755.109242][T20635] EXT4-fs: Ignoring removed nobh option [ 1755.140369][T20635] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1755.154837][T20635] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1755.167363][T20635] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3774: Corrupt directory, running e2fsck is recommended [ 1755.183158][T20635] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1755.194055][T20635] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.3774: corrupted in-inode xattr: invalid ea_ino [ 1755.212366][T20635] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3774: couldn't read orphan inode 15 (err -117) [ 1755.228274][T20635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1755.292061][T20637] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1755.325426][T20639] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1755.346376][T20639] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1755.386666][T20639] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3774: Corrupt directory, running e2fsck is recommended [ 1755.996839][T14639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1757.623125][T20660] xt_policy: neither incoming nor outgoing policy selected [ 1757.650496][T20662] loop2: detected capacity change from 0 to 256 [ 1757.699418][T20662] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1757.720447][T20662] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1757.784520][T20662] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1758.164903][ T27] audit: type=1800 audit(1753127163.054:29): pid=20662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3775" name="file1" dev="loop2" ino=1048918 res=0 errno=0 [ 1758.367086][T20672] loop2: detected capacity change from 0 to 512 [ 1758.382279][T20672] EXT4-fs: Ignoring removed nobh option [ 1758.445165][T20672] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1758.471093][T20647] loop0: detected capacity change from 0 to 32768 [ 1758.512075][T20647] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1758.515129][T20672] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1758.527339][T20647] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1758.543131][T20647] BTRFS info (device loop0): using free space tree [ 1758.581721][T20672] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3785: Corrupt directory, running e2fsck is recommended [ 1758.632850][T20647] BTRFS info (device loop0): enabling ssd optimizations [ 1758.653876][T20672] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1758.666874][T20647] BTRFS info (device loop0): auto enabling async discard [ 1758.677170][T20672] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.3785: corrupted in-inode xattr: invalid ea_ino [ 1758.702735][T20672] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3785: couldn't read orphan inode 15 (err -117) [ 1758.722286][T20672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1759.034579][T20697] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1759.128725][T20675] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1759.208687][T20697] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1759.442131][T20697] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3785: Corrupt directory, running e2fsck is recommended [ 1759.635636][T20699] warning: `syz.1.3787' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1759.656227][T15256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1759.689029][T20699] netlink: 'syz.1.3787': attribute type 10 has an invalid length. [ 1759.742955][T14639] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 1759.790940][T20701] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1759.934164][T20699] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1761.438645][T11520] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1761.487906][T20720] xt_policy: neither incoming nor outgoing policy selected [ 1762.936223][T11520] usb 4-1: device descriptor read/all, error -71 [ 1763.090457][T20732] loop0: detected capacity change from 0 to 512 [ 1763.112643][T20732] EXT4-fs: Ignoring removed nobh option [ 1763.144600][T20732] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1763.169125][T20732] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1763.205485][T20732] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3797: Corrupt directory, running e2fsck is recommended [ 1763.289527][T20732] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1763.303902][T20732] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.3797: corrupted in-inode xattr: invalid ea_ino [ 1763.361571][T20732] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3797: couldn't read orphan inode 15 (err -117) [ 1763.364066][T20724] loop2: detected capacity change from 0 to 32768 [ 1763.436771][T20732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1763.472607][T20724] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1763.580165][T20748] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1763.625412][T20748] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1763.657013][T20748] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3797: Corrupt directory, running e2fsck is recommended [ 1764.627064][T20724] XFS (loop2): Ending clean mount [ 1764.639116][T14639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1765.403652][T15256] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1767.135040][T20780] trusted_key: encrypted_key: master key parameter is missing [ 1767.194255][T20780] xt_policy: neither incoming nor outgoing policy selected [ 1767.207586][T11520] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1768.052845][T11520] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1768.080056][T11520] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1768.127191][T20789] loop0: detected capacity change from 0 to 512 [ 1768.139935][T20789] EXT4-fs: Ignoring removed nobh option [ 1768.192011][T11520] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1768.202764][T11520] usb 4-1: string descriptor 0 read error: -22 [ 1768.226677][T20789] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1768.241937][T11520] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1768.284026][T20789] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1768.295699][T20789] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3810: Corrupt directory, running e2fsck is recommended [ 1768.317130][T20789] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1768.327288][T20789] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.3810: corrupted in-inode xattr: invalid ea_ino [ 1768.346116][T20789] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3810: couldn't read orphan inode 15 (err -117) [ 1768.447385][T11520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.477468][T20789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1768.598636][T20797] atomic_op ffff888022901998 conn xmit_atomic 0000000000000000 [ 1769.586981][ T54] usb 4-1: USB disconnect, device number 13 [ 1771.675306][T14639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1771.809494][T20811] loop3: detected capacity change from 0 to 512 [ 1772.242348][T20811] EXT4-fs: Ignoring removed nobh option [ 1772.285213][T20811] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1772.309757][T20811] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 1772.342319][T20811] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3817: Corrupt directory, running e2fsck is recommended [ 1772.384741][T20811] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1772.415273][T20811] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.3817: corrupted in-inode xattr: invalid ea_ino [ 1772.482406][T20811] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3817: couldn't read orphan inode 15 (err -117) [ 1772.542027][T20811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1773.301984][T20816] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1773.444998][T20823] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1773.458067][T20823] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 1773.468583][T20823] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3817: Corrupt directory, running e2fsck is recommended [ 1774.148753][T15617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1774.457437][T20834] atomic_op ffff88802fc3d198 conn xmit_atomic 0000000000000000 [ 1775.146308][T20835] xt_policy: neither incoming nor outgoing policy selected [ 1776.580554][T15934] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1776.616543][ T27] audit: type=1326 audit(1753127181.504:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20852 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71df18e9a9 code=0x7ffc0000 [ 1776.649574][ T27] audit: type=1326 audit(1753127181.544:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20852 comm="syz.3.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f71df18e9a9 code=0x7ffc0000 [ 1776.682881][ T27] audit: type=1326 audit(1753127181.564:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20852 comm="syz.3.3827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71df18e9a9 code=0x0 [ 1776.784565][T15934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1776.797576][T15934] usb 1-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1776.815776][T15934] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1776.828415][T15934] usb 1-1: string descriptor 0 read error: -22 [ 1776.843461][T15934] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1776.865131][T15934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.125887][T15934] usb 1-1: USB disconnect, device number 6 [ 1779.246606][T20877] atomic_op ffff88805d300198 conn xmit_atomic 0000000000000000 [ 1780.656035][T20882] loop2: detected capacity change from 0 to 512 [ 1780.663948][T20882] EXT4-fs: Ignoring removed nobh option [ 1781.154982][T20882] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1781.341558][T20882] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1781.408886][T20882] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3834: Corrupt directory, running e2fsck is recommended [ 1781.460696][T20882] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1781.504058][T20882] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.3834: corrupted in-inode xattr: invalid ea_ino [ 1781.528249][T20882] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3834: couldn't read orphan inode 15 (err -117) [ 1781.562334][T20882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1781.875194][T20891] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1782.165907][T20902] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1782.177798][T20902] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1782.188294][T20902] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3834: Corrupt directory, running e2fsck is recommended [ 1782.838782][T15256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1782.917210][T20907] tipc: Started in network mode [ 1782.922330][T20907] tipc: Node identity 82aa1fbb717e, cluster identity 4711 [ 1782.934661][T20907] tipc: Enabled bearer , priority 0 [ 1782.943285][T20907] syzkaller0: entered promiscuous mode [ 1782.950012][T20907] syzkaller0: entered allmulticast mode [ 1783.003672][T20907] tipc: Resetting bearer [ 1783.025200][T20906] tipc: Resetting bearer [ 1783.293434][T20906] tipc: Disabling bearer [ 1783.755469][T20912] loop2: detected capacity change from 0 to 128 [ 1786.707325][T20934] loop3: detected capacity change from 0 to 256 [ 1788.438704][T19491] Bluetooth: hci0: command 0x0406 tx timeout [ 1789.068926][T11520] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1789.360559][T11520] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1789.475417][T11520] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.024559][T11520] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1791.065417][T11520] usb 4-1: config 1 has no interface number 1 [ 1791.103301][T11520] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1793.097875][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.105015][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.668995][T11520] usb 4-1: string descriptor 0 read error: -71 [ 1793.675594][T11520] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1793.689244][T11520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.705354][T11520] usb 4-1: can't set config #1, error -71 [ 1793.712856][T11520] usb 4-1: USB disconnect, device number 14 [ 1796.475724][T20987] loop2: detected capacity change from 0 to 40427 [ 1796.525424][T20987] F2FS-fs (loop2): invalid crc value [ 1796.551997][T20987] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1796.654107][T20987] F2FS-fs (loop2): Start checkpoint disabled! [ 1796.670902][T20987] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1799.151229][ T60] kworker/u4:5: attempt to access beyond end of device [ 1799.151229][ T60] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1799.310027][ T60] kworker/u4:5: attempt to access beyond end of device [ 1799.310027][ T60] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1800.319898][ T60] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1800.462059][T21033] loop0: detected capacity change from 0 to 64 [ 1804.162646][T21065] loop2: detected capacity change from 0 to 64 [ 1807.175007][T21092] trusted_key: encrypted_key: insufficient parameters specified [ 1807.255099][T21094] xt_policy: neither incoming nor outgoing policy selected [ 1808.516801][T21099] loop3: detected capacity change from 0 to 64 [ 1808.750917][T21108] loop3: detected capacity change from 0 to 256 [ 1808.762519][T21108] exfat: Deprecated parameter 'utf8' [ 1808.769559][T21108] exfat: Deprecated parameter 'utf8' [ 1808.870396][T21108] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 1811.865129][T21135] trusted_key: encrypted_key: insufficient parameters specified [ 1811.875070][T21139] loop3: detected capacity change from 0 to 64 [ 1812.061932][T21135] xt_policy: neither incoming nor outgoing policy selected [ 1816.470549][T21154] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1819.237960][T21182] trusted_key: encrypted_key: insufficient parameters specified [ 1819.288720][T20956] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1819.318350][T21183] xt_policy: neither incoming nor outgoing policy selected [ 1819.489900][T20956] usb 3-1: device descriptor read/all, error -71 [ 1819.698899][T18710] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1820.758760][T18710] usb 1-1: device descriptor read/64, error -71 [ 1821.894065][T18710] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1823.455076][T18710] usb 1-1: device descriptor read/64, error -71 [ 1824.652547][T18710] usb usb1-port1: attempt power cycle [ 1824.816630][T21223] loop0: detected capacity change from 0 to 512 [ 1824.828671][T21223] EXT4-fs: Ignoring removed nobh option [ 1824.863622][T21223] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1824.891010][T21223] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1824.901726][T21223] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3933: Corrupt directory, running e2fsck is recommended [ 1824.917815][T21223] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1824.926822][T21223] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.3933: corrupted in-inode xattr: invalid ea_ino [ 1824.954643][T21223] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3933: couldn't read orphan inode 15 (err -117) [ 1824.983259][T21223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1827.519197][T21236] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1827.531051][T21236] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1827.541833][T21236] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3933: Corrupt directory, running e2fsck is recommended [ 1829.858113][T21226] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1830.114353][T14639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1832.518609][ T8789] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1833.398680][T19491] Bluetooth: hci0: command 0x0406 tx timeout [ 1833.486705][ T8789] usb 1-1: device descriptor read/64, error -71 [ 1833.507949][T21283] loop2: detected capacity change from 0 to 512 [ 1833.525480][T21283] EXT4-fs: Ignoring removed nobh option [ 1833.847566][T21283] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1833.874788][ T8789] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1834.016264][T21283] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1834.149353][T21283] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3950: Corrupt directory, running e2fsck is recommended [ 1834.164224][T21283] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1834.178643][T21283] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.3950: corrupted in-inode xattr: invalid ea_ino [ 1834.222301][T21283] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3950: couldn't read orphan inode 15 (err -117) [ 1834.250199][T21283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1834.294162][ T8789] usb 1-1: device descriptor read/64, error -71 [ 1834.394113][T21292] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1834.416701][T21292] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1834.427302][T21292] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3950: Corrupt directory, running e2fsck is recommended [ 1834.445821][ T8789] usb usb1-port1: attempt power cycle [ 1834.556993][T15256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1835.668598][ T8789] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1835.866886][T18710] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1835.877393][ T8789] usb 1-1: Using ep0 maxpacket: 32 [ 1835.933591][ T8789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.005009][ T8789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.081745][ T8789] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1836.152219][T18710] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1836.173371][ T8789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.225543][T18710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.247723][ T8789] usb 1-1: config 0 descriptor?? [ 1836.351757][ T8789] hub 1-1:0.0: USB hub found [ 1836.359633][T18710] usb 4-1: config 0 descriptor?? [ 1836.509236][T21313] dummy0 speed is unknown, defaulting to 1000 [ 1836.692165][ T8789] hub 1-1:0.0: 1 port detected [ 1837.007648][ T8789] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1837.156904][ T8789] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1837.303695][ T8789] usbhid 1-1:0.0: can't add hid device: -71 [ 1837.315607][ T8789] usbhid: probe of 1-1:0.0 failed with error -71 [ 1837.501231][ T8789] usb 1-1: USB disconnect, device number 12 [ 1837.874538][T18710] pegasus 4-1:0.0: can't reset MAC [ 1837.882658][T18710] pegasus: probe of 4-1:0.0 failed with error -5 [ 1837.897196][T18710] usb 4-1: USB disconnect, device number 15 [ 1838.118716][ T8789] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1838.300639][ T8789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1838.313260][ T8789] usb 1-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1838.327871][ T8789] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1838.337576][ T8789] usb 1-1: string descriptor 0 read error: -22 [ 1838.344234][ T8789] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1838.353667][ T8789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.677011][ T8789] usb 1-1: USB disconnect, device number 13 [ 1840.732730][ T54] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1841.018674][ T54] usb 4-1: Using ep0 maxpacket: 16 [ 1841.074875][ T54] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.181816][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1841.341161][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1841.351445][ T54] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1841.361599][ T54] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1841.387337][ T54] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1841.413169][ T54] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1841.433420][ T54] usb 4-1: Manufacturer: syz [ 1841.444532][ T54] usb 4-1: config 0 descriptor?? [ 1841.698842][ T8789] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1841.718804][ T54] rc_core: IR keymap rc-hauppauge not found [ 1841.724835][ T54] Registered IR keymap rc-empty [ 1841.730513][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1841.758721][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1841.800510][ T54] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1841.814615][ T54] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input77 [ 1841.834194][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1841.868745][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1841.888660][ T8789] usb 1-1: Using ep0 maxpacket: 8 [ 1841.901075][ T8789] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1841.910994][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1841.918623][ T8789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.927169][ T8789] usb 1-1: Product: syz [ 1841.932221][ T8789] usb 1-1: Manufacturer: syz [ 1841.936942][ T8789] usb 1-1: SerialNumber: syz [ 1841.944524][ T8789] usb 1-1: config 0 descriptor?? [ 1841.968840][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1842.008724][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1842.048983][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1842.078800][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1842.118664][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1842.284873][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1842.294738][ T8789] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1842.328848][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1842.384867][ T54] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1842.747801][ T54] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1842.911227][ T54] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1842.944786][ T54] usb 4-1: USB disconnect, device number 16 [ 1844.332350][ T8789] gspca_sunplus: reg_w_riv err -110 [ 1844.337757][ T8789] sunplus: probe of 1-1:0.0 failed with error -110 [ 1845.456695][T11520] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1845.528741][T20956] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1845.619477][T11520] usb 3-1: device descriptor read/64, error -71 [ 1845.645282][ T9] usb 1-1: USB disconnect, device number 14 [ 1845.761157][T20956] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1845.778268][T20956] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1845.959818][T20956] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1846.026620][T11520] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1846.191593][T20956] usb 4-1: string descriptor 0 read error: -22 [ 1846.207095][T20956] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1846.236855][T20956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.325985][T11520] usb 3-1: device descriptor read/64, error -71 [ 1846.449431][T11520] usb usb3-port1: attempt power cycle [ 1846.547009][ T8789] usb 4-1: USB disconnect, device number 17 [ 1846.868794][T11520] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1846.899606][T11520] usb 3-1: device descriptor read/8, error -71 [ 1847.168824][T11520] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1847.236834][T11520] usb 3-1: device descriptor read/8, error -71 [ 1849.104229][T11520] usb usb3-port1: unable to enumerate USB device [ 1849.423886][T21437] loop2: detected capacity change from 0 to 1024 [ 1850.465947][T21437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1851.046786][T15256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.172320][T21455] 9pnet_fd: Insufficient options for proto=fd [ 1851.408658][ T54] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1851.648389][ T54] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1851.660225][ T54] usb 1-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1851.675859][ T54] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1851.686763][ T54] usb 1-1: string descriptor 0 read error: -22 [ 1851.699563][ T54] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1851.710008][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.940998][T11520] usb 1-1: USB disconnect, device number 15 [ 1852.048868][T20956] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1852.878792][T20956] usb 4-1: device descriptor read/64, error -71 [ 1853.484464][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.491139][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.588835][T20956] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1853.758794][T20956] usb 4-1: device descriptor read/64, error -71 [ 1853.905645][T20956] usb usb4-port1: attempt power cycle [ 1853.920812][T21483] 9pnet_fd: Insufficient options for proto=fd [ 1855.674310][T20956] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 1856.527164][T20956] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1856.618008][T20956] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1856.633349][T20956] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1856.653738][T20956] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1856.664660][T20956] usb 4-1: string descriptor 0 read error: -22 [ 1856.678831][T20956] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1856.693817][T20956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.134780][T20956] usb 4-1: USB disconnect, device number 21 [ 1857.994397][T21514] 9pnet_fd: Insufficient options for proto=fd [ 1859.441794][T21524] loop2: detected capacity change from 0 to 512 [ 1859.641679][T21524] EXT4-fs: Ignoring removed nobh option [ 1859.719529][T21524] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1859.798616][T21524] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1859.838626][T21524] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4019: Corrupt directory, running e2fsck is recommended [ 1859.903220][T21524] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1859.932850][T21524] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.4019: corrupted in-inode xattr: invalid ea_ino [ 1860.058422][T21524] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.4019: couldn't read orphan inode 15 (err -117) [ 1860.097926][T21524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1861.111839][T21540] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1861.123892][T21540] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1861.136142][T21540] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4019: Corrupt directory, running e2fsck is recommended [ 1862.238723][T21527] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1865.368320][T15256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1865.861895][T11520] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1866.060984][T11520] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1866.070657][T11520] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1866.084409][T11520] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1866.095515][T11520] usb 4-1: string descriptor 0 read error: -22 [ 1866.102265][T11520] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1866.112218][T11520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.589949][ T5837] usb 4-1: USB disconnect, device number 22 [ 1867.895648][T21583] loop0: detected capacity change from 0 to 512 [ 1867.904382][T21583] EXT4-fs: Ignoring removed nobh option [ 1867.941186][T21583] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1867.970078][T21583] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1868.002392][T21583] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4037: Corrupt directory, running e2fsck is recommended [ 1868.057042][T21583] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1868.067371][T21583] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.4037: corrupted in-inode xattr: invalid ea_ino [ 1868.083122][T21583] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.4037: couldn't read orphan inode 15 (err -117) [ 1868.116598][T21583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1868.239906][T21595] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1868.254857][T21595] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1868.266894][T21595] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4037: Corrupt directory, running e2fsck is recommended [ 1868.404086][T14639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1868.626459][T21594] loop2: detected capacity change from 0 to 32768 [ 1868.641813][T21594] XFS: noikeep mount option is deprecated. [ 1868.796198][T21594] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1870.394867][T21619] loop0: detected capacity change from 0 to 1024 [ 1870.431133][T21594] XFS (loop2): Ending clean mount [ 1870.444596][T21594] XFS (loop2): Quotacheck needed: Please wait. [ 1870.464192][T21621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4047'. [ 1870.517242][T21594] XFS (loop2): Quotacheck: Done. [ 1870.679962][T15256] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1870.689337][ T60] hfsplus: b-tree write err: -5, ino 4 [ 1870.749476][T21625] trusted_key: encrypted_key: master key parameter 'de' is invalid [ 1870.876058][T21628] xt_policy: neither incoming nor outgoing policy selected [ 1871.829086][T21637] loop2: detected capacity change from 0 to 512 [ 1871.837324][T21637] EXT4-fs: Ignoring removed nobh option [ 1871.867894][T21637] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1871.913520][T21637] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1871.936208][T21637] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4050: Corrupt directory, running e2fsck is recommended [ 1871.981729][T21637] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1872.006938][T21637] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.4050: corrupted in-inode xattr: invalid ea_ino [ 1872.030660][T21637] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.4050: couldn't read orphan inode 15 (err -117) [ 1872.052399][T21637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1872.200474][T21642] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1872.216733][T21642] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1872.227352][T21642] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4050: Corrupt directory, running e2fsck is recommended [ 1872.365563][T15256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1873.817167][T21655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4057'. [ 1874.961556][T21675] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1875.021216][T21676] binder: 21670:21676 unknown command 1074553619 [ 1875.028229][T21676] binder: 21670:21676 ioctl c0306201 200000000540 returned -22 [ 1875.558731][T19491] Bluetooth: hci0: command 0x0406 tx timeout [ 1878.740252][T21705] loop2: detected capacity change from 0 to 32768 [ 1878.771489][T21705] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4070 (21705) [ 1878.825412][T21705] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1878.836673][T21705] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1878.847240][T21705] BTRFS info (device loop2): force clearing of disk cache [ 1878.855377][T21705] BTRFS info (device loop2): metadata ratio 0 [ 1878.862674][T21705] BTRFS info (device loop2): enabling ssd optimizations [ 1878.870204][T21705] BTRFS info (device loop2): using spread ssd allocation scheme [ 1878.879650][T21705] BTRFS info (device loop2): using free space tree [ 1878.963128][T21705] BTRFS info (device loop2): auto enabling async discard [ 1879.024049][T21727] loop0: detected capacity change from 0 to 512 [ 1879.032051][T21727] EXT4-fs: Ignoring removed nobh option [ 1879.063253][T21705] BTRFS info (device loop2): rebuilding free space tree [ 1879.107621][T21727] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1879.131875][T21727] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1879.148063][T21727] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4075: Corrupt directory, running e2fsck is recommended [ 1879.295927][T21727] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1879.335529][T21727] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.4075: corrupted in-inode xattr: invalid ea_ino [ 1879.401012][T21727] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.4075: couldn't read orphan inode 15 (err -117) [ 1879.401107][T15256] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1879.462881][T21727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1880.834269][T21739] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1880.849078][T21739] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1880.877431][T21739] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.4075: Corrupt directory, running e2fsck is recommended [ 1881.304922][T14639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1881.439642][T21744] 9pnet_fd: Insufficient options for proto=fd [ 1886.852273][T21795] loop0: detected capacity change from 0 to 128 [ 1886.875386][T21795] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1886.942840][T21795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1888.582619][T21818] loop3: detected capacity change from 0 to 256 [ 1888.746425][T21818] exfat: Deprecated parameter 'utf8' [ 1888.808248][T21818] exfat: Deprecated parameter 'namecase' [ 1888.817312][T21818] exfat: Deprecated parameter 'namecase' [ 1888.827889][T21818] exfat: Deprecated parameter 'utf8' [ 1888.860951][T21818] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1892.115694][T21843] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1894.268897][ T54] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1894.505950][ T54] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1894.565622][ T54] usb 3-1: config 8 has an invalid interface number: 79 but max is 0 [ 1894.631398][ T54] usb 3-1: config 8 has no interface number 0 [ 1894.693910][ T54] usb 3-1: config 8 interface 79 has no altsetting 0 [ 1894.778091][ T54] usb 3-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=a4.34 [ 1894.880936][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.985454][ T54] usb 3-1: Product: syz [ 1895.040168][ T54] usb 3-1: Manufacturer: syz [ 1895.105532][ T54] usb 3-1: SerialNumber: syz [ 1895.153645][T21855] loop3: detected capacity change from 0 to 32768 [ 1895.181950][T21855] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1895.229506][T21855] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1895.245314][T21865] 9pnet_fd: Insufficient options for proto=fd [ 1895.384321][ T27] audit: type=1800 audit(1753127300.264:33): pid=21855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4114" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 1895.414864][T21855] [ 1895.417245][T21855] ====================================================== [ 1895.424271][T21855] WARNING: possible circular locking dependency detected [ 1895.431312][T21855] 6.6.99-syzkaller #0 Not tainted [ 1895.436405][T21855] ------------------------------------------------------ [ 1895.443472][T21855] syz.3.4114/21855 is trying to acquire lock: [ 1895.449709][T21855] ffff88805bc8ea20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 1895.461817][T21855] [ 1895.461817][T21855] but task is already holding lock: [ 1895.469566][T21855] ffff88805bc8eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 1895.480217][T21855] [ 1895.480217][T21855] which lock already depends on the new lock. [ 1895.480217][T21855] [ 1895.490810][T21855] [ 1895.490810][T21855] the existing dependency chain (in reverse order) is: [ 1895.499844][T21855] [ 1895.499844][T21855] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1895.508065][T21855] down_read+0x46/0x2e0 [ 1895.512769][T21855] ocfs2_init_acl+0x2fa/0x720 [ 1895.518621][T21855] ocfs2_mknod+0x12e5/0x20f0 [ 1895.523934][T21855] ocfs2_mkdir+0x196/0x410 [ 1895.529147][T21855] vfs_mkdir+0x296/0x440 [ 1895.534195][T21855] do_mkdirat+0x1d4/0x440 [ 1895.539252][T21855] __x64_sys_mkdirat+0x89/0xa0 [ 1895.544833][T21855] do_syscall_64+0x55/0xb0 [ 1895.550234][T21855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1895.557219][T21855] [ 1895.557219][T21855] -> #3 (jbd2_handle){++++}-{0:0}: [ 1895.564962][T21855] start_this_handle+0x1e9d/0x20c0 [ 1895.570852][T21855] jbd2__journal_start+0x2bb/0x5b0 [ 1895.576609][T21855] jbd2_journal_start+0x2a/0x40 [ 1895.582106][T21855] ocfs2_start_trans+0x376/0x6c0 [ 1895.587772][T21855] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1895.594130][T21855] ocfs2_dismount_volume+0x1e2/0x890 [ 1895.600157][T21855] generic_shutdown_super+0x134/0x2b0 [ 1895.606100][T21855] kill_block_super+0x44/0x90 [ 1895.606606][ T54] gspca_main: spca500-2.14.0 probing 041e:400a [ 1895.611562][T21855] deactivate_locked_super+0x97/0x100 [ 1895.611593][T21855] cleanup_mnt+0x429/0x4c0 [ 1895.611607][T21855] task_work_run+0x1ce/0x250 [ 1895.611624][T21855] exit_to_user_mode_loop+0xe6/0x110 [ 1895.611643][T21855] exit_to_user_mode_prepare+0xb1/0x140 [ 1895.611661][T21855] syscall_exit_to_user_mode+0x1a/0x50 [ 1895.611681][T21855] do_syscall_64+0x61/0xb0 [ 1895.611696][T21855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1895.611718][T21855] [ 1895.611718][T21855] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1895.611745][T21855] down_read+0x46/0x2e0 [ 1895.611764][T21855] ocfs2_start_trans+0x36a/0x6c0 [ 1895.611786][T21855] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1895.611800][T21855] ocfs2_dismount_volume+0x1e2/0x890 [ 1895.611816][T21855] generic_shutdown_super+0x134/0x2b0 [ 1895.611840][T21855] kill_block_super+0x44/0x90 [ 1895.611855][T21855] deactivate_locked_super+0x97/0x100 [ 1895.611877][T21855] cleanup_mnt+0x429/0x4c0 [ 1895.611893][T21855] task_work_run+0x1ce/0x250 [ 1895.611912][T21855] exit_to_user_mode_loop+0xe6/0x110 [ 1895.611931][T21855] exit_to_user_mode_prepare+0xb1/0x140 [ 1895.611951][T21855] syscall_exit_to_user_mode+0x1a/0x50 [ 1895.611973][T21855] do_syscall_64+0x61/0xb0 [ 1895.611989][T21855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1895.612022][T21855] [ 1895.612022][T21855] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 1895.612052][T21855] ocfs2_start_trans+0x26b/0x6c0 [ 1895.612076][T21855] ocfs2_truncate_file+0x611/0x13a0 [ 1895.612097][T21855] ocfs2_setattr+0x150d/0x1b20 [ 1895.612117][T21855] notify_change+0xb0d/0xe10 [ 1895.612135][T21855] do_truncate+0x19b/0x220 [ 1895.612150][T21855] path_openat+0x298c/0x3190 [ 1895.612173][T21855] do_filp_open+0x1c5/0x3d0 [ 1895.612194][T21855] do_sys_openat2+0x12c/0x1c0 [ 1895.612212][T21855] __x64_sys_creat+0x90/0xb0 [ 1895.612231][T21855] do_syscall_64+0x55/0xb0 [ 1895.612246][T21855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1895.612270][T21855] [ 1895.612270][T21855] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 1895.612296][T21855] __lock_acquire+0x2ddb/0x7c80 [ 1895.612312][T21855] lock_acquire+0x197/0x410 [ 1895.612329][T21855] down_write+0x97/0x1f0 [ 1895.612348][T21855] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 1895.612367][T21855] ocfs2_truncate_file+0xd84/0x13a0 [ 1895.612386][T21855] ocfs2_setattr+0x150d/0x1b20 [ 1895.612407][T21855] notify_change+0xb0d/0xe10 [ 1895.612424][T21855] do_truncate+0x19b/0x220 [ 1895.612439][T21855] path_openat+0x298c/0x3190 [ 1895.612461][T21855] do_filp_open+0x1c5/0x3d0 [ 1895.612483][T21855] do_sys_openat2+0x12c/0x1c0 [ 1895.612500][T21855] __x64_sys_creat+0x90/0xb0 [ 1895.612519][T21855] do_syscall_64+0x55/0xb0 [ 1895.612534][T21855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1895.612557][T21855] [ 1895.612557][T21855] other info that might help us debug this: [ 1895.612557][T21855] [ 1895.612563][T21855] Chain exists of: [ 1895.612563][T21855] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 1895.612563][T21855] [ 1895.612594][T21855] Possible unsafe locking scenario: [ 1895.612594][T21855] [ 1895.612599][T21855] CPU0 CPU1 [ 1895.612604][T21855] ---- ---- [ 1895.612609][T21855] lock(&oi->ip_xattr_sem); [ 1895.612619][T21855] lock(jbd2_handle); [ 1895.612628][T21855] lock(&oi->ip_xattr_sem [ 1895.767867][ T54] usb 3-1: USB disconnect, device number 18 [ 1895.768996][T21855] ); [ 1895.769003][T21855] lock(&ocfs2_file_ip_alloc_sem_key); [ 1895.769016][T21855] [ 1895.769016][T21855] *** DEADLOCK *** [ 1895.769016][T21855] [ 1895.769020][T21855] 3 locks held by syz.3.4114/21855: [ 1895.769031][T21855] #0: ffff88805aafa418 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1896.004432][T21855] #1: ffff88805bc8ed98 (&sb->s_type->i_mutex_key#33){+.+.}-{3:3}, at: do_truncate+0x187/0x220 [ 1896.014863][T21855] #2: ffff88805bc8eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 1896.025947][T21855] [ 1896.025947][T21855] stack backtrace: [ 1896.031936][T21855] CPU: 0 PID: 21855 Comm: syz.3.4114 Not tainted 6.6.99-syzkaller #0 [ 1896.040023][T21855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1896.050566][T21855] Call Trace: [ 1896.053850][T21855] [ 1896.056881][T21855] dump_stack_lvl+0x16c/0x230 [ 1896.061628][T21855] ? load_image+0x3b0/0x3b0 [ 1896.066173][T21855] ? show_regs_print_info+0x20/0x20 [ 1896.071405][T21855] ? print_circular_bug+0x12b/0x1a0 [ 1896.076630][T21855] check_noncircular+0x2bd/0x3c0 [ 1896.081599][T21855] ? print_deadlock_bug+0x5d0/0x5d0 [ 1896.086820][T21855] ? lockdep_lock+0xe0/0x220 [ 1896.091427][T21855] ? lockdep_unlock+0x137/0x2d0 [ 1896.096425][T21855] ? _find_first_zero_bit+0xd3/0x100 [ 1896.102015][T21855] __lock_acquire+0x2ddb/0x7c80 [ 1896.107096][T21855] ? verify_lock_unused+0x140/0x140 [ 1896.112339][T21855] lock_acquire+0x197/0x410 [ 1896.116958][T21855] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 1896.123230][T21855] ? __might_sleep+0xe0/0xe0 [ 1896.128298][T21855] ? read_lock_is_recursive+0x20/0x20 [ 1896.133707][T21855] down_write+0x97/0x1f0 [ 1896.138154][T21855] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 1896.144422][T21855] ? down_read_killable+0x340/0x340 [ 1896.149733][T21855] ? ocfs2_truncate_file+0xcaa/0x13a0 [ 1896.155914][T21855] ? __lock_acquire+0x7c80/0x7c80 [ 1896.161038][T21855] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 1896.167527][T21855] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 1896.173457][T21855] ? up_write+0x1c3/0x410 [ 1896.177965][T21855] ocfs2_truncate_file+0xd84/0x13a0 [ 1896.183257][T21855] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 1896.188978][T21855] ? ocfs2_simple_size_update+0x470/0x470 [ 1896.194773][T21855] ? do_raw_spin_unlock+0x121/0x230 [ 1896.200077][T21855] ? _raw_spin_unlock+0x28/0x40 [ 1896.204927][T21855] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 1896.210659][T21855] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 1896.216216][T21855] ? ocfs2_rw_lock+0x138/0x240 [ 1896.221068][T21855] ? dquot_initialize+0x20/0x20 [ 1896.226007][T21855] ? ocfs2_create_new_inode_locks+0x640/0x640 [ 1896.232256][T21855] ? setattr_prepare+0x1e6/0xac0 [ 1896.237376][T21855] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 1896.244357][T21855] ocfs2_setattr+0x150d/0x1b20 [ 1896.249257][T21855] ? ocfs2_extend_allocation+0x1760/0x1760 [ 1896.255075][T21855] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 1896.261063][T21855] ? seqcount_lockdep_reader_access+0x176/0x1c0 [ 1896.267440][T21855] ? ktime_get_coarse_real_ts64+0x110/0x120 [ 1896.273327][T21855] ? current_time+0x18e/0x270 [ 1896.278011][T21855] ? inode_set_ctime_current+0x2d0/0x2d0 [ 1896.283638][T21855] ? evm_inode_setattr+0x94/0x6a0 [ 1896.288736][T21855] ? bpf_lsm_inode_setattr+0x9/0x10 [ 1896.294090][T21855] ? try_break_deleg+0x79/0x120 [ 1896.299073][T21855] ? ocfs2_extend_allocation+0x1760/0x1760 [ 1896.305052][T21855] notify_change+0xb0d/0xe10 [ 1896.309637][T21855] do_truncate+0x19b/0x220 [ 1896.314388][T21855] ? put_page_bootmem+0x2c0/0x2c0 [ 1896.319620][T21855] ? apparmor_file_truncate+0x23f/0x2d0 [ 1896.325278][T21855] ? ima_bprm_check+0x1f0/0x1f0 [ 1896.330180][T21855] path_openat+0x298c/0x3190 [ 1896.334796][T21855] ? do_filp_open+0x3d0/0x3d0 [ 1896.339471][T21855] do_filp_open+0x1c5/0x3d0 [ 1896.344273][T21855] ? vfs_tmpfile+0x490/0x490 [ 1896.348951][T21855] ? _raw_spin_unlock+0x28/0x40 [ 1896.353978][T21855] ? alloc_fd+0x58f/0x630 [ 1896.358302][T21855] do_sys_openat2+0x12c/0x1c0 [ 1896.363358][T21855] ? do_sys_open+0xe0/0xe0 [ 1896.367828][T21855] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1896.373815][T21855] ? lock_chain_count+0x20/0x20 [ 1896.378779][T21855] __x64_sys_creat+0x90/0xb0 [ 1896.383380][T21855] do_syscall_64+0x55/0xb0 [ 1896.388044][T21855] ? clear_bhb_loop+0x40/0x90 [ 1896.393591][T21855] ? clear_bhb_loop+0x40/0x90 [ 1896.398351][T21855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1896.404252][T21855] RIP: 0033:0x7f71df18e9a9 [ 1896.408801][T21855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1896.428689][T21855] RSP: 002b:00007f71dffa4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1896.437124][T21855] RAX: ffffffffffffffda RBX: 00007f71df3b5fa0 RCX: 00007f71df18e9a9 [ 1896.445177][T21855] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000200000000240 [ 1896.453137][T21855] RBP: 00007f71df210d69 R08: 0000000000000000 R09: 0000000000000000 [ 1896.461187][T21855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1896.469143][T21855] R13: 0000000000000000 R14: 00007f71df3b5fa0 R15: 00007fffd6459208 [ 1896.477204][T21855] [ 1896.517625][T21872] loop0: detected capacity change from 0 to 512 [ 1897.978486][T21872] EXT4-fs (loop0): unsupported inode size: 22272 [ 1897.985150][T21872] EXT4-fs (loop0): blocksize: 1024 [ 1898.061495][T21866] base_sock_release(ffff88805bff1e00) sk=ffff888028a0a000 [ 1898.156884][T15617] ocfs2: Unmounting device (7,3) on (node local)