last executing test programs: 9m2.918880964s ago: executing program 2 (id=736): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @null]}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802ae2e97cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f8fbd71ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) syz_usb_disconnect(0xffffffffffffffff) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0x0, 0x77) unshare(0x200) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) close_range(r4, 0xffffffffffffffff, 0x0) 9m0.21828155s ago: executing program 2 (id=741): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x20000000) shutdown(r0, 0x0) 8m59.30171958s ago: executing program 2 (id=743): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x205b) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c00000081"], 0x0) 8m58.869461022s ago: executing program 2 (id=745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800008, &(0x7f0000000540)=ANY=[@ANYBLOB='de=0x00000000800000b1,norock,overriderockperm,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000401,norock,showassoc,hide,hide,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000001000,check=strict,iocharset=cp949,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0xff, 0xa4a, &(0x7f00000007c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd2900008400000005010000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, 0x0, &(0x7f0000000000), 0x6c, r4}, 0x38) 8m57.717371105s ago: executing program 2 (id=750): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}]}, 0x0, 0x517, &(0x7f00000000c0)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) r3 = timerfd_create(0x7, 0x0) timerfd_gettime(r3, &(0x7f0000000000)) poll(&(0x7f0000000640)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x80}, {r1, 0x8264}, {r3, 0x8224}], 0x4, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xff], [0xff], 'veth1\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 8m54.773239994s ago: executing program 2 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x0, 0x8002) msgget(0x0, 0x40) 8m38.943174549s ago: executing program 32 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x0, 0x8002) msgget(0x0, 0x40) 2m39.320647617s ago: executing program 1 (id=1522): chown(&(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x0, 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x3, 0x3, {0xa, 0x4e1f, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}}}, 0x3a) prctl$PR_GET_DUMPABLE(0x3) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x7552, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) socket(0x22, 0xa, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) 2m37.927545424s ago: executing program 1 (id=1528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd706086dbdf250000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d0005000000"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket(0x840000000002, 0x3, 0xfa) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) 2m36.23229514s ago: executing program 1 (id=1533): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m35.708244962s ago: executing program 1 (id=1534): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe1f) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 2m35.506665231s ago: executing program 1 (id=1535): set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="005901e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cc01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce70c0acbc34d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0d", @ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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", @ANYRES32, @ANYRESDEC, @ANYRES64], 0x0, 0x200, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000180)='./bus\x00') 2m34.016215298s ago: executing program 1 (id=1539): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb7, &(0x7f0000000440)="$eJzs1y9OA0EUBvDHgoCgMIQEgV7DHTgDJwAEAgxBQZr0Cr1Ir9IjrK+oWNs0fc3sbtI/N2j7+4mZfN9k3Ih5s+X0cVJH5Dgi64efeW79/v1/XUVZ376Dk1TFTbdfR8TTXckRi5f+7CL63LSjj6a9PLya+X6bWR4OAABwFKp43s/rHIrVMAV24T5eP8uPf6cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA+bAAAA//8wajXB") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) 2m18.916535631s ago: executing program 33 (id=1539): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb7, &(0x7f0000000440)="$eJzs1y9OA0EUBvDHgoCgMIQEgV7DHTgDJwAEAgxBQZr0Cr1Ir9IjrK+oWNs0fc3sbtI/N2j7+4mZfN9k3Ih5s+X0cVJH5Dgi64efeW79/v1/XUVZ376Dk1TFTbdfR8TTXckRi5f+7CL63LSjj6a9PLya+X6bWR4OAABwFKp43s/rHIrVMAV24T5eP8uPf6cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA+bAAAA//8wajXB") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) 14.479349198s ago: executing program 3 (id=1842): syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x1, 0xa2f, &(0x7f0000000380)="$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") r0 = open(0x0, 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) io_uring_setup(0x5394, &(0x7f0000005480)) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) bind$inet6(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x8001, 0xfffffffffffffffd, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 9.900635798s ago: executing program 4 (id=1845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000080)="520003000100b8", 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 9.7760269s ago: executing program 3 (id=1847): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000003c0)=0x7f) sendto$inet(r0, &(0x7f0000000100)="cc43f6b3dd449fd5c48474f79c3fd738d82ee447a277ad7e58473cd8dbdac1ca8b8929597644755c8c386915939946c0", 0x30, 0x20000040, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(r1, 0x0) socket$igmp6(0xa, 0x3, 0x2) semop(0x0, &(0x7f0000000180)=[{0x3, 0xfb97}], 0x1) 9.344152702s ago: executing program 3 (id=1849): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYBLOB="154e0100000000002c0012800b0001006d616373656300001c00028005000c0001"], 0x54}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 9.087071767s ago: executing program 3 (id=1850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40014) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0x2, 0x64bf8fe95ba35d0d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000400)='./file0\x00', 0x2000048, &(0x7f0000000180)={[{@discard}, {@noalign}, {@gqnoenforce}]}, 0x1, 0xb950, &(0x7f000000d2c0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) 8.325561573s ago: executing program 4 (id=1852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800008, &(0x7f0000000540)=ANY=[@ANYBLOB='de=0x00000000800000b1,norock,overriderockperm,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000401,norock,showassoc,hide,hide,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000001000,check=strict,iocharset=cp949,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0xff, 0xa4a, &(0x7f00000007c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd2900008400000005010000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, 0x0, &(0x7f0000000000), 0x6c, r4}, 0x38) 6.792962792s ago: executing program 5 (id=1854): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xffff) getpid() r4 = socket(0x22, 0x2, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x8001) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f00000001c0)=0xb00, 0x4) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x9, 0x0, @thr={&(0x7f0000000a80)="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", &(0x7f0000000280)="099e9b54427d30478d5d6444477754e9836b8b0d0642aec813e684c97445baddb0224185a3c77916d8eac79fe95172face96c41760f619b3ecd7e4c35db4b15789629c4edef6be84d27e172267b9d6dd618e7cd89c679d3029d1af637ec49c662e94135934e4029776e8c4a2ca05846fcb443f266cb679a4444412216b2a01d92fb7a48fd9875f17ccc5601b5c89230e0785a171ac96a8f2"}}, &(0x7f0000000100)) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000810) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111b50000000000851000000200000085000000240000009500330082e950000000489500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a}, 0x70) 5.648505715s ago: executing program 0 (id=1856): chown(&(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x0, 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x3, 0x3, {0xa, 0x4e1f, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}}}, 0x3a) prctl$PR_GET_DUMPABLE(0x3) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x7552, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) socket(0x22, 0xa, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) 5.616484129s ago: executing program 5 (id=1857): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 5.456148134s ago: executing program 4 (id=1858): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0xfe, 0x2b7, &(0x7f0000001340)="$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") sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008880}, 0x4080001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 5.384769891s ago: executing program 5 (id=1859): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) lseek(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) 5.263063083s ago: executing program 3 (id=1860): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xffff) getpid() r4 = socket(0x22, 0x2, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x8001) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f00000001c0)=0xb00, 0x4) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x9, 0x0, @thr={&(0x7f0000000a80)="023eeaff9d117f3c238235f880bf08385e3417034e50a08808498a4e36b7657c8d4d2bce6a4d1a2307f206fef22e69c9af3171f48e060c8b8247262e91f41a32e65d7879aa841ace4fcb923ee01398cd09aecfacfe1084fa8f0e93d3a02dec334555f6d6d129071d0242531d1fd810982885453d41131de750a388cc72d3793459297e429ae5ba5d06eece414cd48c6249ee25b8a68051035d7804e616d0b63924720862622989c4ba3611964aaacc9f4b9eac9cd635186dfeaeb6bd8968c2263d9e6721191b32c8fbd079b0ea0bc00fc20a9cb787755a68cd4141c0816a66a2990c19eac1eb1c41669bb50418f02d3a0ef90676415ba44d1db66010be2fe7862ac69667467622c78ea5fd844fe8924a20a111f445398ed0a54062c98570b22d60be6e67d27abe7b78eb589e228f974e741dd18820babf20935a0f7837d10af6277ed3f509740f9a668e1e3d6b7482e4d268abf8081ee9a195ac781a8b5438a77c547ea9d8d5f552065bdc00f0cf3cc85bd00c1cb5bfc3566287c2e746d4dcaebd5a2d23ed961adde55dbd1455f9fc418ed0004565d79f48ebbcac01d613a714732285531e273ca4cca969de550efc585098f28e19cda6e791dfc35bed9d81a79779c02ac506dbf92ddaefae7ed0e3c8cd9db75f493a16d47b87020300be76b12c216bfb25f45674b71c4dbdca06487e63a90a6e0eff88eb311f77587c02e42bd674571c9586281a720b3e9b7473d1be5b4091920228fb3b10c31fc0ee7d428fe02d719b8cee4de0b41e93eaeec05bb1e45a495416b761209ffbd4a932c35bcaa3745483e7fbb45052ca53775513581ea035d6f5ee40da8b6749ea8ebbcd9b8522bc684809875b0d24cba5f9da938d96dc9358ccf9785dfd9b91a913b8554cc915869f7769cfe2ca486886b515af9d8bdf2e4ebc29fa219d240c8b4f08702be39e074aabca80a5ef137dfa8d156ee0b1c243cf8363a222ccb3607d0a0c424241ae466ec3b820eba829e4fce334fe36aa2ddcb7023ee3ee2b9db6a76281f8053cf24cdf514403971dc34ac94ed78d21bf9f51d9117b77f8b4edbb02648d81406df06b0c6c9797c3422142b6c10349a12fca83102d52adf426c828c9c70336990f5dc262aaad35f1f60b8a7309cbae8d059a7de5f910e6571a22f6de15555563f4befd440a4032f8c8bc5400ed9960fe6ac4aaeb96df8b49d107b3db12a63d9982e4379d1c6c1007683164cd3a774d17bb2634b1ad819758004d86942a698cc1ed554bfb2a47b8f3d5e9f32fcca34fa4c1e6e60ec03229f0752558e0bd871fa6c409b32458303994882c434af7c48a54fe4c49ff52cab4223b9b8c9885e24d165d0541eca75858f4292790606dd9490a9d11bb6324837b774d30eccc43b710acf3045bffa59859c0d4895acafd5b7e3a930df2924528e34c83da704ca0627fa195e225a4f739b71cc45d569a577289d99005e3fa253a3e7e5421e59ea45f84f038a88badd6342da62101b8d74898e7ff67ac1421abe4c4096c7d0d8d73c84260b92606780aee675b0e376fb3a91c9dd3c69ec86c5309c81e2ae833ad7cf07d8bd5de1bc7801c07a5bbdd464e4f8577fbf4c375c99f44674b182b5024bbb7b9ddf8e998cf3e9bcf780c1fe17083eac53ea5489e9f12e1a8d893d1bd9d6290fe1a47353b6af5bbe679424079cf36d1df3d46fae0a912980ac4fcd116d205c45f0f77bbb49109da25c14606418572196fe4f2f05d0ee61fb6568fbad1a318c326122023b132cdf46546bfb5b7a1e1f2549c8c225317299fbaf7e4e014aad36d8762d89b579d5dc6ced25f01d4fd610e433064d8b1a8079a5c83d025da60a799b5cb88d774a7b24626e7a7391ec8d3a2952e1d145f8decb9225944d8a81a58419d24f1b38c6565ae7ce1ccb7475c6501e902ff0a0018f482e61b48ca39d4412a5c0ac431aa3504eacc0a406d9ff5b1c591ad5658ef49192e112e6ee4a60d52861e8659b7251f76d4355e57a29e59f06a44be7876cf91e024f2ea9a03fef7c6d84eb9fca28da9e045da7195e7d1ab36c28e69def120d1498104b781f61b8b75736a62227e98fc1623a072f5609f514953dc1b35ab6d6113a132260fcc9b6befffda5d393eec88559e128c3f83ea9d466867e7f907327164f6e4db6b17967428019819a63f46ab4862344223282b0c6e5dc286ae219ba96711e8096eec995ae0af25a036a6c55901608e85ab6085483af0a453dc433a992a2ebd73179305617fe44f8832791305264579f6e29ea2a576d67b3131e446d28e49faffbb3d03e7bee5a37ee524aff852ab9eab789e659147ca04ed10a82cd0704268212c260b445435b5c955e105c57d46d5333027bbeea63a8585336dd8d0043bdea2dc6530122232cafee57fefda7f477f01210ab6a71363ac1458c50fe0b2a863045ac8954d9bb44e6347f9b8a1ee5127c094c7446b10ed6f5f25984737407e6eb99e45845a090331d505cd7babfde31a3f46f03d1f56b43d7fa5d7defe6afe77a55dfd204c2d4582ae1c3471282c4b70271ce4e7cc46083fdf1486e95844532630143afa30d0ce6d394262b3a4848dd22e10af720c734f93189194b4ab78b8b71e407c049e0b6103c4768d76078d90747d28cf35e754d480dbaa85903da5e03d5ed7f7487513fd3953cc8882a3985c1c5a01903a64f60115075796cdb692ae2f6ed053ff0c2bfc968cc4854fdf169629105b4beedee7e964d3deb56ef27fa0a0190bd942142f435e7739bfd33e7f801cab5923c196140b35ca08e597e35c6662c7cb5bdef8d2706e704602fa13ca7fb3a471fabd46132d61a4bc3643d2cfff8096a53ad597f22f74c8164bb8be0c76dcc65c3d9f75c54ec1a94bd45f5bd0f0cdb54244e703f8a56e39213281be4344700c8d2fa9570fbcae60a03d05bbaa3102f11d38705d40b16b625dac82ff7be5c61b91b38c4483adeaa3e5afc4c746b6b4e1fbac1b610b4daccd567d1d094a8a44f6a12b194b077348fccca9ffdbfe726ce095bf435de8eced261af031d89fda2361860203b7d3d683e7756732e9b480668a469aeb1b141ba14cae1cefcf172033dacf569b39fdd04f72d0fe1e7a0dd40941a461ac6ec33671964df2ba9538f99682b7ad7fb8ebaa758f5b7f9261877980d8e85d0a7f7bb78a1aeeb7dde98ffa11db6631ed25c3d65d7e1872d36b5632a1dfca7c3e117cc9f7b785c2fcc119a433b1be60297bd178b5a736ef1bbcf9eb19b82b8d50c1a88f4ca7293baedfa250f1eebff9ebfb67a4b9c6ff31123366a748cad5237d450c5d20f65a59def40dd1f197b862a4804aaf1091faa5e4c37eea9e6461160d9547b582ef71605bc1aa60f6fad238cb721648cc52a5347b8708c130a1f3c2784790892165313dd12b266e9989c57c8b8a6528cc01ad0449752cc60a379b8133d486410fc54a280cb67787ae773ab8a65e6aa73333e062c86887ce3e7456d3f5a79b0094c6004606ab0a82513210d948004343121c1cdd2f607575576e7a002392b524fe4218dd232abea3d4816923c2008191bfe1b1bc6e6f98be69e22f653d1822596321046852ea017f43fc2ab95b26fbe09dd56df4b47c61b9bd3e8a007558bf30f0ee67092d9a3d169672dbec2364cddd59548cc01e0a450517bd4a9ef2be6bd51500c9fa44dcb3194bbac4926a90726e01dc2d9e2cadf38e6897d28dfa96b0be7827dcb263f03a5ab1fba1018bd3e3095fcec4d1bb2bb27715393eb93cc3178582ee8426f2bfcc78cebed19c1a87043feac2a336f97b5c2960b7c135d9cc3bd18a2aae2f04c55af2e19cea27c6b78170e4f5750ef0526d2b69aa23551ab1ac177589b0fd6c12f3cbc5e09f701efc1ae3fd606fff21051d7762e6f2543731ed306a2c0d4eb6cf3a98d6de707db8f768390b73a94ac7d7aa252e1a1c543ed61c23dd6dfea18b8690cc993838cb9f3be871cc342022e25fbe0bc1e75dd7281e5d6d77eac82889ec75f83c75ec09b9600334bf4c6ef96bb514bdef7fd0e66c9f1b57f7480c6aaaad0557e07eee37c4b595c9542d739c659a0f54f9153603a4e65a6926879e295f4552263f27f8fb09cb0f6566ae17f86f5ddb5313dc89f1c233632fb0880972b05e7ba366d5332ab5a367d14c811f975a58661542a3e14ee226e42436451c812b074d4ec0181a65b6247b4c6284cf92f382b0f95643b2f8bd0d6c035f5655d0d09ab264263be2eec831fa78691abe2c8574d4236db8a317b7af863c492e9e412b4874b70028637ede9c59b932173156c3e29545d07260a3513e3878ff559cb6013f5f599c68d3c3b3a97e4f56becfc6091255cf40ef0b2d723a3c7d38cc7a27ceede10f3ed2c0a6d76b626f8994c7f888ff61cd66b676109c6f840176d72a91242a59e83f58a392e7ee31da39a8047bda436c6f390fe42c4fe60ef8ea5896c586661a525123ce922aa0c7f73f937c53a6c0fe0f65c9276d54c8fbff54ceb84492ac7372c5eec9ac569010bc843d49277df6639361b07325e820797cd1157b64740d72b2cf07364bdf5495e50163e3482f1e95b6e593a614fc66e2f4733e3733822ddc61f5f8443dcba017cbd1242711fc8211c89d64f51eb1dfb67c67ee40b0ec51eda2e13e55bd9ebbee70ffec6598bd8871d46fc15d3c4a196de4e4e047351c1ed577e1bb9a265bd3ae1d6d74648c096f6bc803bfbeee745fc0f3d907bb3cd8fcde1ab0df5f29298d1e39dea7cc9c2dec6444f63026f7d7c59ccc9c96e27ec7c29838acd7342e0705a890742022f169ce4f88035bace16803110f4837498f026b0f05a871da83683858da2d0b7b78244572db3aaffaf6b1870d3fe108bb053f1bb83b8451d3e0cd57fcbb4bc2c824faa76a62f296d5354c71e7080591a7f4d5834d43124fe737da7deacdaa45b2e1fe83626bc7060bdb3239bebb6da08d438d8145d4ddde8eafe00ccc49a38a36a6905e80ef3d7ee907712ed0c753db96d86f7826779dd08eaac219b002fe87859b0952672f46c38d37e483e024b61b6e909f0ad732ec89271460c665d068b3723bb7cc182bba93b35734c7d60e74c3453426bcd39103e6ad861f6fd82a0e973341b1ad204bd353f717d8afc968677de9f8e5a1a3656c59ae0594317fcee4cdeda6615c0769aa0c7b866c3f7da8e611d72431c828ebf0d71e5f8ae75368cd17fd53a2573a4ff5b39f4dbea4b690a7a73349650654b0adfa56d26213f697d3a9004305a1e81ff2fa616f4f525873937554ec4e5490a9ba9528bc237d4c21b00a0d823742f38753f67c371ee876d425400a394718d6b48f9699367bfa30fe4ee9f333038c90ab9e054be277dc0b20185bcfc95303d146de062b409781eb55059d0314ced30c872811f577cb3b9682187aebf9a87c0537377c0e6c8c7a69e2889a639daf34c1bdc5939d247b43bad90ea0e7f568932d0d23ffd17ff84b92a8329bd542b6388471f6f8055f65d5eb3f194e481f939e50018a281196d3c720c854cc15a68057751327ca95f81f021563af2c0209c436d3e9244533d6591b5deb1d4a9de0939d902cabaec593bf4bda2c6f8954d64f8071eb2f55ddc9dadcdd943873446035ca4b4be1d4f22d98fee0", &(0x7f0000000280)="099e9b54427d30478d5d6444477754e9836b8b0d0642aec813e684c97445baddb0224185a3c77916d8eac79fe95172face96c41760f619b3ecd7e4c35db4b15789629c4edef6be84d27e172267b9d6dd618e7cd89c679d3029d1af637ec49c662e94135934e4029776e8c4a2ca05846fcb443f266cb679a4444412216b2a01d92fb7a48fd9875f17ccc5601b5c89230e0785a171ac96"}}, &(0x7f0000000100)) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000810) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111b50000000000851000000200000085000000240000009500330082e950000000489500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a}, 0x70) 5.041942405s ago: executing program 4 (id=1861): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x1}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000000)=""/24, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 4.357196152s ago: executing program 4 (id=1862): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xffff) getpid() r4 = socket(0x22, 0x2, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x8001) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f00000001c0)=0xb00, 0x4) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x9, 0x0, @thr={&(0x7f0000000a80)="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", &(0x7f0000000280)="099e9b54427d30478d5d6444477754e9836b8b0d0642aec813e684c97445baddb0224185a3c77916d8eac79fe95172face96c41760f619b3ecd7e4c35db4b15789629c4edef6be84d27e172267b9d6dd618e7cd89c679d3029d1af637ec49c662e94135934e4029776e8c4a2ca05846fcb443f266cb679a4444412216b2a01d92fb7a48fd9875f17ccc5601b5c89230e0785a171ac96"}}, &(0x7f0000000100)) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000810) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111b50000000000851000000200000085000000240000009500330082e950000000489500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a}, 0x70) 4.343136053s ago: executing program 0 (id=1863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv6_deladdr={0x18, 0x15, 0xdf75bfec95511951, 0x70bd2b, 0x25dfdbfe, {0xa, 0xc7, 0x14}}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.146462643s ago: executing program 5 (id=1864): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180), 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0x46, 0x3, 0x0, 0x85, 0x6, 0x21, 0xe6, 0x0, 0x81, 0x4c, 0x2, 0x3}, 0xe) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 4.07200748s ago: executing program 0 (id=1865): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xffff) getpid() r4 = socket(0x22, 0x2, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x8001) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f00000001c0)=0xb00, 0x4) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x9, 0x0, @thr={&(0x7f0000000a80)="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", &(0x7f0000000280)="099e9b54427d30478d5d6444477754e9836b8b0d0642aec813e684c97445baddb0224185a3c77916d8eac79fe95172face96c41760f619b3ecd7e4c35db4b15789629c4edef6be84d27e172267b9d6dd618e7cd89c679d3029d1af637ec49c662e94135934e4029776e8c4a2ca05846fcb443f266cb679a4444412216b2a01d92fb7a48fd9875f17ccc5601b5c89230e0785a171ac96a8f2a0"}}, &(0x7f0000000100)) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000810) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111b50000000000851000000200000085000000240000009500330082e950000000489500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a}, 0x70) 3.028356612s ago: executing program 4 (id=1866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800008, &(0x7f0000000540)=ANY=[@ANYBLOB='de=0x00000000800000b1,norock,overriderockperm,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000401,norock,showassoc,hide,hide,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000001000,check=strict,iocharset=cp949,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0xff, 0xa4a, &(0x7f00000007c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd2900008400000005010000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, 0x0, &(0x7f0000000000), 0x6c, r4}, 0x38) 3.027165293s ago: executing program 0 (id=1867): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) 2.63876397s ago: executing program 5 (id=1868): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.783943765s ago: executing program 0 (id=1869): syz_mount_image$fuse(0x0, 0x0, 0x285a060, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), 0x0, 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) 1.751099758s ago: executing program 5 (id=1870): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffa) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="040e"], 0xf) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendfile(r2, r2, 0x0, 0x800000009) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002}) 117.555708ms ago: executing program 0 (id=1871): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x0, 0x701, 0x70bd2b, 0x20000000, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e00000000000000002a00000008002f00ffffffff05003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r5, @ANYBLOB="52a42ea37e6ef492913222228bbad0ac1ba1d5a5cb4304dda77be4915317a7"], 0x40}, 0x4, 0x700000000000000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)}, 0x356}], 0x2, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$MRT_DEL_MFC_PROXY(r8, 0x0, 0xd3, &(0x7f0000000280)={@broadcast, @loopback, 0x0, "9e6032a78048da7b3bbf9bb4af283760e7cd53b0536da370c8febb9a279c2571", 0x8000, 0x9, 0x80000000, 0x5}, 0x3c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fa00ffff090000000800000008000300", @ANYRES32], 0x5c}}, 0x0) 0s ago: executing program 3 (id=1872): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) lseek(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) kernel console output (not intermixed with test programs): 000000. [ 629.938144][ T27] audit: type=1804 audit(1761261334.586:43): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1158" name="/newroot/82/file0/bus" dev="loop4" ino=26 res=1 errno=0 [ 630.030279][ T27] audit: type=1800 audit(1761261334.586:44): pid=10858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1158" name="bus" dev="loop4" ino=26 res=0 errno=0 [ 630.076409][T10855] Invalid ELF header magic: != ELF [ 630.200714][T10861] loop1: detected capacity change from 0 to 2048 [ 630.256786][ T9233] hfsplus: b-tree write err: -5, ino 4 [ 630.310987][T10861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.428971][ T5790] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 630.877370][T10873] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 631.414244][T10873] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 631.427196][T10873] EXT4-fs (loop1): This should not happen!! Data will be lost [ 631.427196][T10873] [ 631.436987][T10873] EXT4-fs (loop1): Total free blocks count 0 [ 631.443051][T10873] EXT4-fs (loop1): Free/Dirty block details [ 631.449066][T10873] EXT4-fs (loop1): free_blocks=2415919504 [ 631.454981][T10873] EXT4-fs (loop1): dirty_blocks=16 [ 631.460193][T10873] EXT4-fs (loop1): Block reservation details [ 631.466203][T10873] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 632.843695][ T5937] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 633.238487][T10886] bridge0: port 3(vlan2) entered blocking state [ 633.245004][T10886] bridge0: port 3(vlan2) entered disabled state [ 633.251829][T10886] vlan2: entered allmulticast mode [ 633.256990][T10886] bridge0: entered allmulticast mode [ 633.264603][T10886] vlan2: left allmulticast mode [ 633.269601][T10886] bridge0: left allmulticast mode [ 634.253160][T10894] loop4: detected capacity change from 0 to 32768 [ 634.282479][T10894] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 634.454359][T10899] loop3: detected capacity change from 0 to 512 [ 634.491998][ T5790] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 634.502176][ T5790] Bluetooth: hci0: Injecting HCI hardware error event [ 634.512804][ T5790] Bluetooth: hci0: hardware error 0x00 [ 634.561104][T10899] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 635.374821][T10899] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 635.401112][T10899] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 635.459760][T10899] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 635.473043][T10899] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 635.487144][T10899] EXT4-fs (loop3): orphan cleanup on readonly fs [ 635.504288][T10899] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1169: bg 0: block 34: padding at end of block bitmap is not set [ 635.550851][T10899] Quota error (device loop3): write_blk: dquota write failed [ 636.213504][T10899] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 636.244155][T10899] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1169: Failed to acquire dquot type 1 [ 636.263429][T10899] EXT4-fs (loop3): 1 truncate cleaned up [ 636.285409][T10899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.569477][ T5790] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 636.731030][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.764433][T10925] loop4: detected capacity change from 0 to 512 [ 637.774597][T10925] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 637.797066][T10925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 637.805785][T10925] System zones: 1-12 [ 637.816580][T10925] EXT4-fs (loop4): 1 truncate cleaned up [ 637.823833][T10925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.303701][T10931] fuse: Bad value for 'fd' [ 638.869008][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.816674][T10937] loop4: detected capacity change from 0 to 32768 [ 639.827134][T10937] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 639.948457][ T5783] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 640.106597][T10942] loop0: detected capacity change from 0 to 32768 [ 640.201513][T10942] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 640.558310][T10946] loop4: detected capacity change from 0 to 512 [ 640.590719][T10935] loop3: detected capacity change from 0 to 32768 [ 640.760570][T10946] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 640.849479][T10946] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 640.875071][T10953] loop1: detected capacity change from 0 to 512 [ 640.906650][T10946] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 640.914047][T10953] FAT-fs (loop1): Unrecognized mount option "codepage=737ôµZƒÌ|ð" or missing value [ 640.953902][T10946] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 640.972409][T10935] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 641.013447][ T5799] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 641.019779][T10946] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 641.097078][T10946] EXT4-fs (loop4): orphan cleanup on readonly fs [ 641.230230][T10946] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1181: bg 0: block 34: padding at end of block bitmap is not set [ 641.345194][T10956] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 641.345194][T10956] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷™¿1®ðÚ<“™;Ï8­+`# ÷Ž' [ 641.725255][T10946] Quota error (device loop4): write_blk: dquota write failed [ 641.785587][T10946] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 641.898834][T10946] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1181: Failed to acquire dquot type 1 [ 641.948470][T10946] EXT4-fs (loop4): 1 truncate cleaned up [ 641.961706][T10946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 642.370299][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 642.912624][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.039285][T10969] loop1: detected capacity change from 0 to 1764 [ 644.570309][T10982] bridge0: port 4(vlan2) entered blocking state [ 644.576763][T10982] bridge0: port 4(vlan2) entered disabled state [ 644.583338][T10982] vlan2: entered allmulticast mode [ 644.588504][T10982] bridge0: entered allmulticast mode [ 644.620046][T10982] vlan2: left allmulticast mode [ 644.625007][T10982] bridge0: left allmulticast mode [ 645.778416][T10997] loop0: detected capacity change from 0 to 512 [ 645.801418][T10997] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 645.822890][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 645.841153][T10997] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 645.859442][T10997] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 645.910852][T10997] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 645.937875][T10999] syzkaller1: entered promiscuous mode [ 645.945502][T10997] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 645.954869][T10999] syzkaller1: entered allmulticast mode [ 645.959946][T10997] EXT4-fs (loop0): orphan cleanup on readonly fs [ 645.972796][T10997] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1194: bg 0: block 34: padding at end of block bitmap is not set [ 646.002250][T10997] Quota error (device loop0): write_blk: dquota write failed [ 646.020752][T10997] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 646.036543][T10997] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1194: Failed to acquire dquot type 1 [ 646.053399][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 646.062481][ T8] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 646.073832][T10997] EXT4-fs (loop0): 1 truncate cleaned up [ 646.075821][ T8] usb 2-1: config 0 has no interface number 0 [ 646.086448][ T8] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 646.100158][ T8] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 646.111050][ T8] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 646.116060][T10997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 646.124293][ T8] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 646.172865][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.193069][ T8] usb 2-1: config 0 descriptor?? [ 646.211526][ T8] ldusb 2-1:0.55: Interrupt in endpoint not found [ 646.599456][T11002] loop4: detected capacity change from 0 to 32768 [ 646.635992][T11002] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 646.721845][ T8] usb 2-1: USB disconnect, device number 9 [ 647.080364][ T5783] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 647.252586][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.951438][T11008] loop1: detected capacity change from 0 to 65536 [ 648.621443][T11008] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 648.701417][T11008] XFS (loop1): Ending clean mount [ 648.710257][T11008] XFS (loop1): Quotacheck needed: Please wait. [ 648.771265][T11008] XFS (loop1): Quotacheck: Done. [ 649.996319][ T5782] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 650.547164][T11032] bridge0: port 3(vlan2) entered blocking state [ 650.553770][T11032] bridge0: port 3(vlan2) entered disabled state [ 650.560340][T11032] vlan2: entered allmulticast mode [ 650.565510][T11032] bridge0: entered allmulticast mode [ 650.574304][T11032] vlan2: left allmulticast mode [ 650.579308][T11032] bridge0: left allmulticast mode [ 651.447203][T11042] loop4: detected capacity change from 0 to 512 [ 651.484768][T11042] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 651.498863][T11042] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 651.511920][T11042] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 651.525376][T11042] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 651.533840][T11042] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 651.542390][T11042] EXT4-fs (loop4): orphan cleanup on readonly fs [ 651.558933][T11042] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1205: bg 0: block 34: padding at end of block bitmap is not set [ 651.619610][ T5856] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 651.628256][T11042] Quota error (device loop4): write_blk: dquota write failed [ 651.646971][T11042] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 651.658903][T11042] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1205: Failed to acquire dquot type 1 [ 651.747967][T11042] EXT4-fs (loop4): 1 truncate cleaned up [ 651.810494][T11042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 651.838876][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 651.920168][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.064774][ T5856] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 652.276642][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.305040][T11049] loop3: detected capacity change from 0 to 1764 [ 652.330132][ T5856] usb 1-1: config 0 descriptor?? [ 652.341204][ T5856] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 652.407163][ T5783] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 653.294478][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.553347][ T5170] usb 1-1: USB disconnect, device number 12 [ 656.136580][T11086] input: syz1 as /devices/virtual/input/input70 [ 658.202817][T11102] loop3: detected capacity change from 0 to 512 [ 658.241529][T11102] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 658.255036][T11102] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 658.270533][T11102] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 658.325191][T11102] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 659.448007][T11102] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 659.456328][T11102] EXT4-fs (loop3): orphan cleanup on readonly fs [ 659.493299][T11102] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1219: bg 0: block 34: padding at end of block bitmap is not set [ 659.549922][T11102] Quota error (device loop3): write_blk: dquota write failed [ 659.557472][T11102] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 659.613730][T11102] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1219: Failed to acquire dquot type 1 [ 659.854121][T11102] EXT4-fs (loop3): 1 truncate cleaned up [ 659.875824][T11102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 660.605298][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.786995][T11133] loop4: detected capacity change from 0 to 1764 [ 662.739904][T11148] loop3: detected capacity change from 0 to 2048 [ 662.825508][T11148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.919757][T11155] loop1: detected capacity change from 0 to 512 [ 662.938908][T11148] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 662.992263][T11155] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 663.023824][T11148] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 663.040846][T11155] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 663.058220][T11148] EXT4-fs (loop3): This should not happen!! Data will be lost [ 663.058220][T11148] [ 663.091001][T11148] EXT4-fs (loop3): Total free blocks count 0 [ 663.092104][T11155] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 663.097044][T11148] EXT4-fs (loop3): Free/Dirty block details [ 663.147250][T11155] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 663.156205][T11148] EXT4-fs (loop3): free_blocks=2415919504 [ 663.158539][T11155] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 663.171132][T11155] EXT4-fs (loop1): orphan cleanup on readonly fs [ 663.172554][T11148] EXT4-fs (loop3): dirty_blocks=16 [ 663.179924][T11155] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1236: bg 0: block 34: padding at end of block bitmap is not set [ 663.203347][T11148] EXT4-fs (loop3): Block reservation details [ 663.204226][T11155] Quota error (device loop1): write_blk: dquota write failed [ 663.213990][T11148] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 663.217108][T11155] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 663.223558][T11160] loop0: detected capacity change from 0 to 512 [ 663.243406][T11155] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1236: Failed to acquire dquot type 1 [ 663.258476][T11155] EXT4-fs (loop1): 1 truncate cleaned up [ 663.268526][T11155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 663.299741][T11160] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 663.329539][T11160] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 663.389352][T11160] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 663.445717][T11160] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 663.543979][T11160] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 663.589782][T11160] EXT4-fs (loop0): orphan cleanup on readonly fs [ 663.602052][T11160] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1237: bg 0: block 34: padding at end of block bitmap is not set [ 663.617336][T11160] Quota error (device loop0): write_blk: dquota write failed [ 663.625000][T11160] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 663.635099][T11160] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1237: Failed to acquire dquot type 1 [ 663.897829][T11160] EXT4-fs (loop0): 1 truncate cleaned up [ 663.958842][ T42] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 664.286808][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.356827][T11160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 665.253210][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.379992][T11177] loop4: detected capacity change from 0 to 256 [ 665.455383][T11177] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 667.823057][T11201] loop1: detected capacity change from 0 to 512 [ 667.864424][T11201] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 667.895161][T11201] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 667.930077][T11201] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 668.106862][T11201] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 668.138545][T11201] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 668.154494][T11201] EXT4-fs (loop1): orphan cleanup on readonly fs [ 668.184378][T11201] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1248: bg 0: block 34: padding at end of block bitmap is not set [ 668.987043][T11201] Quota error (device loop1): write_blk: dquota write failed [ 668.995793][T11201] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 669.006725][T11201] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1248: Failed to acquire dquot type 1 [ 669.041640][T11201] EXT4-fs (loop1): 1 truncate cleaned up [ 669.067220][T11201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 670.310747][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.387302][T11218] loop0: detected capacity change from 0 to 512 [ 670.420919][T11218] FAT-fs (loop0): Unrecognized mount option "codepage=737ôµZƒÌ|ð" or missing value [ 674.294056][T11251] loop4: detected capacity change from 0 to 512 [ 674.343738][T11251] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 674.358325][T11251] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 674.373515][T11254] loop0: detected capacity change from 0 to 256 [ 674.384041][T11251] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 674.402197][T11254] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 674.829591][T11251] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 675.003071][T11251] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 675.039673][T11251] EXT4-fs (loop4): orphan cleanup on readonly fs [ 675.059003][T11251] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1261: bg 0: block 34: padding at end of block bitmap is not set [ 675.083669][T11251] Quota error (device loop4): write_blk: dquota write failed [ 675.094343][T11251] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 675.108464][T11251] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1261: Failed to acquire dquot type 1 [ 675.154365][T11251] EXT4-fs (loop4): 1 truncate cleaned up [ 675.172088][T11251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 676.603598][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.415878][T11277] vxcan3: entered promiscuous mode [ 678.613824][T11277] vxcan3: entered allmulticast mode [ 679.587219][T11290] loop4: detected capacity change from 0 to 512 [ 679.851686][T11290] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 680.787006][T11290] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 680.806037][T11290] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 680.849540][T11290] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 680.857539][T11290] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 680.985224][T11290] EXT4-fs (loop4): orphan cleanup on readonly fs [ 681.004153][T11290] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1273: bg 0: block 34: padding at end of block bitmap is not set [ 681.099990][T11290] Quota error (device loop4): write_blk: dquota write failed [ 681.128502][T11290] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 681.145358][T11290] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1273: Failed to acquire dquot type 1 [ 681.165567][T11290] EXT4-fs (loop4): 1 truncate cleaned up [ 681.188724][T11290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 681.767589][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.802479][T11329] loop1: detected capacity change from 0 to 256 [ 683.863471][T11329] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 686.195823][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.202650][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.846856][T11349] overlayfs: missing 'lowerdir' [ 687.106389][T11351] syzkaller1: entered promiscuous mode [ 687.122636][T11351] syzkaller1: entered allmulticast mode [ 688.486250][T11368] loop1: detected capacity change from 0 to 4096 [ 688.637461][T11374] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 688.686035][T11355] loop3: detected capacity change from 0 to 32768 [ 688.729046][T11355] JBD2: Ignoring recovery information on journal [ 688.839401][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 688.841794][T11355] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 689.329508][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 689.431674][ T8] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 689.448510][ T8] usb 1-1: config 0 has no interface number 0 [ 689.463441][ T8] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 689.519791][ T8] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 689.547323][ T8] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 689.568308][ T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 689.579181][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.593199][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 689.646548][ T8] usb 1-1: config 0 descriptor?? [ 689.711424][ T8] ldusb 1-1:0.55: Interrupt in endpoint not found [ 690.025830][ T8423] usb 1-1: USB disconnect, device number 13 [ 690.125961][ T5919] kernel write not supported for file bpf-prog (pid: 5919 comm: kworker/1:6) [ 690.696525][T11390] loop4: detected capacity change from 0 to 256 [ 690.758036][T11390] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 692.095634][T11401] loop3: detected capacity change from 0 to 512 [ 692.205254][T11401] EXT4-fs (loop3): filesystem is read-only [ 692.215361][T11401] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 692.646101][T11401] EXT4-fs (loop3): filesystem is read-only [ 692.666243][T11401] EXT4-fs (loop3): orphan cleanup on readonly fs [ 692.674814][T11401] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #16: comm syz.3.1301: iget: bad i_size value: -504403158265486552 [ 692.698344][T11401] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1301: couldn't read orphan inode 16 (err -117) [ 692.717165][T11401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 693.012697][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 693.135475][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.435368][T11418] CIFS: Unable to determine destination address [ 694.410504][ T787] kernel write not supported for file bpf-prog (pid: 787 comm: kworker/0:2) [ 696.680312][ T787] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 696.923459][T11446] loop1: detected capacity change from 0 to 512 [ 696.943543][T11446] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 696.964820][T11446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 696.973956][T11446] System zones: 1-12 [ 696.979745][T11446] EXT4-fs (loop1): 1 truncate cleaned up [ 696.986793][T11446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.489939][T11451] fuse: Bad value for 'fd' [ 698.465513][T11457] loop0: detected capacity change from 0 to 512 [ 698.538855][T11457] EXT4-fs (loop0): filesystem is read-only [ 698.570643][T11457] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 698.682235][T11457] EXT4-fs (loop0): filesystem is read-only [ 698.688145][T11457] EXT4-fs (loop0): orphan cleanup on readonly fs [ 698.876482][T11457] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #16: comm syz.0.1313: iget: bad i_size value: -504403158265486552 [ 699.455296][T11457] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1313: couldn't read orphan inode 16 (err -117) [ 699.646270][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.671494][T11457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 699.828663][T11472] fuse: Bad value for 'fd' [ 699.964150][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.985741][T11474] CIFS: Unable to determine destination address [ 700.198993][T11481] loop0: detected capacity change from 0 to 2048 [ 700.410983][T11481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.325637][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.339354][ T5874] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 703.643063][ T5874] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 703.662865][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.733183][T11509] loop1: detected capacity change from 0 to 512 [ 703.753369][ T5874] usb 5-1: config 0 descriptor?? [ 703.778896][T11509] FAT-fs (loop1): Unrecognized mount option "codepage=737ôµZƒÌ|ð" or missing value [ 703.929710][ T5874] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 703.993477][ T5783] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 704.081221][T11513] CIFS: Unable to determine destination address [ 704.450595][T11518] loop1: detected capacity change from 0 to 2048 [ 704.575771][T11518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.308089][ T5874] gspca_stv06xx: I2C: Read error writing address: -71 [ 706.327216][ T5874] usb 5-1: USB disconnect, device number 12 [ 706.558068][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.754834][T11538] input: syz1 as /devices/virtual/input/input75 [ 707.933694][T11553] CIFS: Unable to determine destination address [ 709.048565][ T5919] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 709.841660][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 710.016853][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.769748][ T5919] usb 4-1: config 0 descriptor?? [ 710.840470][ T5919] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 710.842451][T11570] loop0: detected capacity change from 0 to 2048 [ 710.897339][T11576] input: syz1 as /devices/virtual/input/input77 [ 710.963059][T11570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.998832][T11581] loop1: detected capacity change from 0 to 512 [ 711.014663][T11581] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 711.025680][T11581] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 711.169985][T11581] FAT-fs (loop1): FAT read failed (blocknr 128) [ 711.903949][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.011607][T11590] CIFS: Unable to determine destination address [ 712.322236][ T5919] usb 4-1: USB disconnect, device number 13 [ 712.849316][T11594] loop1: detected capacity change from 0 to 32768 [ 712.892367][T11594] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 717.108325][ T5799] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 717.340533][T11608] input: syz1 as /devices/virtual/input/input78 [ 718.357286][T11617] loop4: detected capacity change from 0 to 1024 [ 718.401113][T11617] EXT4-fs: inline encryption not supported [ 718.422228][T11617] EXT4-fs: Ignoring removed i_version option [ 718.438216][T11617] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 718.793761][T11617] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 2: comm syz.4.1357: lblock 2 mapped to illegal pblock 2 (length 1) [ 718.865048][T11617] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 718.889546][T11617] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 48: comm syz.4.1357: lblock 0 mapped to illegal pblock 48 (length 1) [ 718.925693][T11625] loop3: detected capacity change from 0 to 2048 [ 718.942469][T11617] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 718.973832][T11617] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1357: Failed to acquire dquot type 0 [ 719.084079][T11617] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 719.127657][T11617] EXT4-fs error (device loop4): ext4_evict_inode:252: inode #11: comm syz.4.1357: mark_inode_dirty error [ 719.313866][T11617] EXT4-fs warning (device loop4): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 719.315317][T11632] CIFS: Unable to determine destination address [ 719.361169][T11625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.380585][T11617] EXT4-fs (loop4): 1 orphan inode deleted [ 720.236917][T11617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.256690][ T9324] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 720.326336][ T9324] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 720.450515][ T9324] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u4:9: Failed to release dquot type 0 [ 720.791739][T11617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.089093][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.128452][T11617] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.1357: Invalid inode table block 1 in block_group 0 [ 721.199076][T11617] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 721.283696][T11617] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.1357: mark_inode_dirty error [ 721.659079][T11643] loop3: detected capacity change from 0 to 32768 [ 721.828441][T11643] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 721.838831][T11643] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 721.847704][T11643] BTRFS info (device loop3): using free space tree [ 722.839369][T11643] BTRFS info (device loop3): enabling ssd optimizations [ 722.846488][T11643] BTRFS info (device loop3): auto enabling async discard [ 722.996236][T11677] input: syz1 as /devices/virtual/input/input80 [ 724.536881][T11691] loop0: detected capacity change from 0 to 2048 [ 724.572148][ T5788] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 724.614753][T11691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.407819][T11703] loop1: detected capacity change from 0 to 512 [ 725.441913][T11703] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 725.714697][T11703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 725.723662][T11703] System zones: 1-12 [ 725.744184][T11703] EXT4-fs (loop1): 1 truncate cleaned up [ 725.752558][T11703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.075577][T11705] loop4: detected capacity change from 0 to 65536 [ 726.100992][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.356722][T11703] fuse: Bad value for 'fd' [ 726.366740][T11708] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 726.405750][T11705] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 726.512091][T11705] XFS (loop4): Ending clean mount [ 726.518752][T11705] XFS (loop4): Quotacheck needed: Please wait. [ 726.660887][T11705] XFS (loop4): Quotacheck: Done. [ 727.241658][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.371672][ T8984] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 728.971862][T11741] loop3: detected capacity change from 0 to 32768 [ 729.038450][T11741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1382 (11741) [ 729.521997][T11741] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 729.526343][T11749] input: syz1 as /devices/virtual/input/input82 [ 729.532415][T11741] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 729.547912][T11741] BTRFS info (device loop3): using free space tree [ 729.634649][T11760] loop4: detected capacity change from 0 to 2048 [ 729.654143][T11741] BTRFS info (device loop3): enabling ssd optimizations [ 729.661685][T11741] BTRFS info (device loop3): auto enabling async discard [ 729.925669][ T5856] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 729.945224][T11760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.362388][ T5856] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 731.402191][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.577635][ T5856] usb 2-1: config 0 descriptor?? [ 731.596974][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.658352][ T5856] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 731.705654][ T5788] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 732.455812][T11779] loop4: detected capacity change from 0 to 65536 [ 732.516936][T11779] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 732.583246][T11779] XFS (loop4): Ending clean mount [ 732.594520][T11779] XFS (loop4): Quotacheck needed: Please wait. [ 732.733741][T11779] XFS (loop4): Quotacheck: Done. [ 733.172859][ T5856] usb 2-1: USB disconnect, device number 10 [ 733.500129][ T8984] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 735.192478][T11814] loop0: detected capacity change from 0 to 256 [ 735.220807][T11814] exfat: Deprecated parameter 'utf8' [ 735.226218][T11814] exfat: Deprecated parameter 'namecase' [ 735.303573][T11814] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x8fca712e, utbl_chksum : 0xe619d30d) [ 735.448931][T11797] loop3: detected capacity change from 0 to 32768 [ 735.561796][T11797] JBD2: Ignoring recovery information on journal [ 736.371263][T11797] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 736.619582][T11828] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 737.068523][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 738.118037][T11839] loop1: detected capacity change from 0 to 512 [ 738.162434][T11839] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 738.200260][T11839] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 738.394316][T11839] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 738.453607][T11839] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 738.659819][T11839] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 738.948205][T11839] EXT4-fs (loop1): orphan cleanup on readonly fs [ 738.958857][T11839] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1402: bg 0: block 34: padding at end of block bitmap is not set [ 738.997103][T11839] Quota error (device loop1): write_blk: dquota write failed [ 739.019873][T11839] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 739.030769][T11839] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1402: Failed to acquire dquot type 1 [ 739.435700][T11839] EXT4-fs (loop1): 1 truncate cleaned up [ 739.663476][T11839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 741.157297][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.516165][T11873] loop0: detected capacity change from 0 to 65536 [ 742.566598][T11873] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 742.703505][T11882] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 743.106965][T11873] XFS (loop0): Ending clean mount [ 743.123736][T11873] XFS (loop0): Quotacheck needed: Please wait. [ 743.710141][T11873] XFS (loop0): Quotacheck: Done. [ 746.158369][ T5786] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 747.589823][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.596255][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.760084][T11928] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 751.402380][T11942] loop4: detected capacity change from 0 to 32768 [ 751.453781][T11942] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1425 (11942) [ 751.468034][T11945] loop0: detected capacity change from 0 to 512 [ 751.482280][T11942] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 751.492644][T11942] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 751.497636][T11945] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 751.501397][T11942] BTRFS info (device loop4): using free space tree [ 751.650778][T11945] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 752.012311][T11942] BTRFS info (device loop4): enabling ssd optimizations [ 752.019469][T11942] BTRFS info (device loop4): auto enabling async discard [ 753.531399][T11976] loop3: detected capacity change from 0 to 65536 [ 753.751090][T11976] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 754.249148][T11976] XFS (loop3): Ending clean mount [ 754.349885][ T8984] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 754.381475][T11976] XFS (loop3): Quotacheck needed: Please wait. [ 754.504731][T11976] XFS (loop3): Quotacheck: Done. [ 755.641622][T12001] loop1: detected capacity change from 0 to 512 [ 755.726411][T12001] EXT4-fs (loop1): filesystem is read-only [ 755.737078][T12001] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 755.806163][T12001] EXT4-fs (loop1): filesystem is read-only [ 755.812078][T12001] EXT4-fs (loop1): orphan cleanup on readonly fs [ 755.822547][T12001] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #16: comm syz.1.1435: iget: bad i_size value: -504403158265486552 [ 755.860425][T12001] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1435: couldn't read orphan inode 16 (err -117) [ 755.874694][T12001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 756.398290][ T5788] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 756.567540][ T5856] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 757.328983][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'. [ 757.382897][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.401314][ T5856] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 757.429638][ T5856] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 757.458668][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.531483][ T5856] usb 2-1: config 0 descriptor?? [ 757.562634][ T5856] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 757.597626][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 757.627669][ T5856] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 757.917944][ T5856] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 757.936528][ T5856] usb 2-1: media controller created [ 758.204914][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 758.273463][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 758.303695][ T5856] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 758.387316][ T5856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input88 [ 758.415769][ T5856] dvb-usb: schedule remote query interval to 150 msecs. [ 758.433067][ T5856] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 758.447146][ T5856] usb 2-1: USB disconnect, device number 11 [ 758.578474][ T5856] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 758.902732][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.540098][ T5919] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 760.131106][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 760.150650][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.207032][ T5919] usb 4-1: config 0 descriptor?? [ 760.252415][ T5919] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 761.164622][T12060] loop4: detected capacity change from 0 to 512 [ 761.190465][T12060] EXT4-fs (loop4): filesystem is read-only [ 761.196835][T12060] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 761.212745][T12060] EXT4-fs (loop4): filesystem is read-only [ 761.218636][T12060] EXT4-fs (loop4): orphan cleanup on readonly fs [ 761.218741][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 761.228504][T12060] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #16: comm syz.4.1451: iget: bad i_size value: -504403158265486552 [ 761.251011][T12060] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1451: couldn't read orphan inode 16 (err -117) [ 761.274062][T12060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 761.292108][T12049] loop0: detected capacity change from 0 to 32768 [ 761.379735][T12049] JBD2: Ignoring recovery information on journal [ 762.594599][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.696750][T12049] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 762.844339][ T5919] usb 4-1: USB disconnect, device number 14 [ 762.956893][T12077] loop3: detected capacity change from 0 to 512 [ 763.031445][T12077] EXT4-fs (loop3): filesystem is read-only [ 763.039100][T12077] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 763.070640][T12077] EXT4-fs (loop3): filesystem is read-only [ 763.076664][T12077] EXT4-fs (loop3): orphan cleanup on readonly fs [ 763.083983][T12077] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #16: comm syz.3.1454: iget: bad i_size value: -504403158265486552 [ 763.102051][T12077] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1454: couldn't read orphan inode 16 (err -117) [ 763.120278][T12077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 763.247762][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 764.219690][ T5919] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 764.673143][T12089] loop1: detected capacity change from 0 to 32768 [ 764.698031][T12089] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1458 (12089) [ 764.713218][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.733840][T12089] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 764.744298][T12089] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 764.753148][T12089] BTRFS info (device loop1): using free space tree [ 764.784964][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 764.914714][ T5919] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 765.118193][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.393680][ T5919] usb 4-1: config 0 descriptor?? [ 765.492870][T12089] BTRFS info (device loop1): enabling ssd optimizations [ 765.500173][T12089] BTRFS info (device loop1): auto enabling async discard [ 765.550090][ T5919] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 765.556820][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 765.582670][ T5919] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 765.600215][ T5919] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 765.607370][ T5919] usb 4-1: media controller created [ 766.903938][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 766.990903][ T5919] dvb-usb: bulk message failed: -22 (6/0) [ 767.034776][ T5919] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 767.089624][ T5919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input90 [ 767.169021][ T5919] dvb-usb: schedule remote query interval to 150 msecs. [ 767.219875][ T5919] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 767.288104][ T5919] usb 4-1: USB disconnect, device number 15 [ 767.580998][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.684783][ T5919] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 767.717518][T12124] loop4: detected capacity change from 0 to 512 [ 767.735021][ T5782] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 767.751437][T12124] EXT4-fs (loop4): filesystem is read-only [ 767.757922][T12124] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 767.788751][T12124] EXT4-fs (loop4): filesystem is read-only [ 767.794906][T12124] EXT4-fs (loop4): orphan cleanup on readonly fs [ 767.808142][T12124] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #16: comm syz.4.1461: iget: bad i_size value: -504403158265486552 [ 767.849431][T12124] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1461: couldn't read orphan inode 16 (err -117) [ 767.868707][T12124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 768.080901][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.128618][ T5783] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop1 scanned by udevd (5783) [ 768.173998][T12131] 9pnet_fd: Insufficient options for proto=fd [ 768.479407][ T5919] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 774.468795][T12159] loop1: detected capacity change from 0 to 512 [ 774.477684][T12159] EXT4-fs (loop1): filesystem is read-only [ 774.489058][T12159] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 774.505442][T12159] EXT4-fs (loop1): filesystem is read-only [ 774.511442][T12159] EXT4-fs (loop1): orphan cleanup on readonly fs [ 774.518360][T12159] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #16: comm syz.1.1471: iget: bad i_size value: -504403158265486552 [ 774.532236][T12159] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1471: couldn't read orphan inode 16 (err -117) [ 774.538507][T12157] loop3: detected capacity change from 0 to 32768 [ 774.546729][T12159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 774.564574][T12157] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 774.595252][T12162] loop4: detected capacity change from 0 to 512 [ 774.603835][T12162] EXT4-fs (loop4): filesystem is read-only [ 774.683416][ T5799] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 774.706383][T12162] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 774.733822][T12162] EXT4-fs (loop4): filesystem is read-only [ 774.739962][T12162] EXT4-fs (loop4): orphan cleanup on readonly fs [ 774.748039][T12162] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #16: comm syz.4.1472: iget: bad i_size value: -504403158265486552 [ 774.768620][T12162] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1472: couldn't read orphan inode 16 (err -117) [ 774.786645][T12162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 774.863950][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.029602][ T5875] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 775.522751][T12169] 9pnet_fd: Insufficient options for proto=fd [ 775.824168][T12164] loop0: detected capacity change from 0 to 32768 [ 775.850779][T12164] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 776.022198][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.038883][ T5875] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 776.048527][ T5875] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 776.061738][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.083685][ T5875] usb 2-1: config 0 descriptor?? [ 778.319324][ T787] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 778.329523][ T5875] usb 2-1: can't set config #0, error -71 [ 778.356768][ T5799] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 778.367369][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.371751][ T5875] usb 2-1: USB disconnect, device number 12 [ 778.531512][ T787] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 778.562344][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.320643][ T787] usb 5-1: config 0 descriptor?? [ 780.442852][ T787] usb 5-1: can't set config #0, error -71 [ 780.497080][ T787] usb 5-1: USB disconnect, device number 13 [ 780.536502][T12196] loop3: detected capacity change from 0 to 256 [ 780.556299][T12199] loop0: detected capacity change from 0 to 512 [ 780.575915][T12199] EXT4-fs (loop0): filesystem is read-only [ 780.582733][T12199] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 780.591479][T12196] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 780.611073][T12199] EXT4-fs (loop0): filesystem is read-only [ 780.616954][T12199] EXT4-fs (loop0): orphan cleanup on readonly fs [ 780.629137][T12199] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #16: comm syz.0.1481: iget: bad i_size value: -504403158265486552 [ 780.650306][T12199] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1481: couldn't read orphan inode 16 (err -117) [ 780.683779][T12199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 780.728299][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.158793][T12210] overlayfs: failed to resolve './file0': -2 [ 782.889444][ T5874] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 783.967204][ T5874] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 783.986716][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.766359][ T5874] usb 2-1: Product: syz [ 784.771390][ T5874] usb 2-1: Manufacturer: syz [ 784.776004][ T5874] usb 2-1: SerialNumber: syz [ 784.983543][T12221] loop3: detected capacity change from 0 to 32768 [ 785.047368][T12221] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 785.219728][ T5874] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 785.268018][ T5874] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 785.299791][ T5874] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 785.346974][ T5874] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 785.387173][ T5874] lan78xx: probe of 2-1:1.0 failed with error -71 [ 785.424197][ T5874] usb 2-1: USB disconnect, device number 13 [ 785.555570][ T5783] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 785.639426][ T5856] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 785.883796][ T5856] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 785.939628][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.015829][ T5856] usb 5-1: config 0 descriptor?? [ 786.051178][ T5856] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 786.178282][T12239] loop1: detected capacity change from 0 to 512 [ 786.189935][T12239] EXT4-fs (loop1): filesystem is read-only [ 786.196219][T12239] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 786.196619][T12241] loop0: detected capacity change from 0 to 512 [ 786.218590][T12239] EXT4-fs (loop1): filesystem is read-only [ 786.224738][T12239] EXT4-fs (loop1): orphan cleanup on readonly fs [ 786.233862][T12239] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #16: comm syz.1.1492: iget: bad i_size value: -504403158265486552 [ 786.236688][T12241] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 786.252529][T12239] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1492: couldn't read orphan inode 16 (err -117) [ 786.278435][T12239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 786.336192][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.360605][T12241] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 786.438892][T12241] EXT4-fs (loop0): 1 truncate cleaned up [ 786.480294][T12241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.924274][ T5856] usb 5-1: USB disconnect, device number 14 [ 788.026443][T12254] overlayfs: failed to resolve './file0': -2 [ 791.173609][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.464539][T12282] loop0: detected capacity change from 0 to 2048 [ 791.503178][T12282] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 791.786339][T12282] UDF-fs: warning (device loop0): udf_fill_super: No fileset found [ 792.830023][T12288] overlayfs: failed to resolve './file0': -2 [ 793.631524][T12293] loop3: detected capacity change from 0 to 2048 [ 793.761095][T12293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.870919][ T5790] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 795.365067][T12303] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 795.381838][T12303] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 795.394453][T12303] EXT4-fs (loop3): This should not happen!! Data will be lost [ 795.394453][T12303] [ 795.404501][T12303] EXT4-fs (loop3): Total free blocks count 0 [ 795.410775][T12303] EXT4-fs (loop3): Free/Dirty block details [ 795.416746][T12303] EXT4-fs (loop3): free_blocks=2415919504 [ 795.422766][T12303] EXT4-fs (loop3): dirty_blocks=16 [ 795.428041][T12303] EXT4-fs (loop3): Block reservation details [ 795.434278][T12303] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 796.190842][ T5937] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 796.505024][T12312] loop0: detected capacity change from 0 to 4096 [ 796.573295][T12314] syzkaller1: entered promiscuous mode [ 796.636251][T12314] syzkaller1: entered allmulticast mode [ 796.638427][T12310] loop4: detected capacity change from 0 to 32768 [ 796.651058][T12310] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 796.664642][T12316] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 796.744280][ T5799] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 797.046691][T12312] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=6597069766658, rec_len=0, name_len=1 [ 797.235703][T12312] Remounting filesystem read-only [ 797.837451][T12323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1514'. [ 797.943130][ T5790] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 797.954501][ T5790] Bluetooth: hci1: Injecting HCI hardware error event [ 797.973912][ T5790] Bluetooth: hci1: hardware error 0x00 [ 798.014404][T12323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1514'. [ 799.811422][T12333] loop3: detected capacity change from 0 to 8 [ 800.089339][ T5790] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 800.439408][T12341] loop0: detected capacity change from 0 to 2048 [ 800.553844][T12341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.634002][ T5790] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 802.299014][T12352] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 802.314360][T12352] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 802.326890][T12352] EXT4-fs (loop0): This should not happen!! Data will be lost [ 802.326890][T12352] [ 802.336715][T12352] EXT4-fs (loop0): Total free blocks count 0 [ 802.342812][T12352] EXT4-fs (loop0): Free/Dirty block details [ 802.348773][T12352] EXT4-fs (loop0): free_blocks=2415919504 [ 802.354926][T12352] EXT4-fs (loop0): dirty_blocks=16 [ 802.360641][T12352] EXT4-fs (loop0): Block reservation details [ 802.366760][T12352] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 803.003682][T12357] syzkaller1: entered promiscuous mode [ 803.032962][T12357] syzkaller1: entered allmulticast mode [ 803.192560][ T5937] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 803.330589][T12365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1524'. [ 803.340932][T12365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1524'. [ 804.147039][ T5856] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 804.338055][T12377] loop3: detected capacity change from 0 to 16 [ 804.339379][T12375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1528'. [ 804.354299][T12377] erofs: (device loop3): mounted with root inode @ nid 36. [ 804.509371][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 804.517543][ T5856] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 804.537756][ T5856] usb 5-1: config 0 has no interface number 0 [ 804.556714][ T5856] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 804.568639][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.579323][ T5856] usb 5-1: Product: syz [ 804.583618][ T5856] usb 5-1: Manufacturer: syz [ 804.588431][ T5856] usb 5-1: SerialNumber: syz [ 804.602240][ T5856] usb 5-1: config 0 descriptor?? [ 804.610888][ T5856] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 804.751710][ T5790] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 804.760720][ T5790] Bluetooth: hci3: Injecting HCI hardware error event [ 804.770637][T10347] Bluetooth: hci3: hardware error 0x00 [ 805.740256][ T5856] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 805.881471][ T5856] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 805.994342][T12390] loop3: detected capacity change from 0 to 2048 [ 806.065384][T12392] syzkaller1: entered promiscuous mode [ 806.073649][T12392] syzkaller1: entered allmulticast mode [ 806.094202][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 806.096603][T12390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.114658][ T5875] usb 5-1: USB disconnect, device number 15 [ 806.159927][ T5875] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 806.225258][ T5875] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 806.292173][ T5875] quatech2 5-1:0.51: device disconnected [ 806.453906][T12396] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 806.464371][T12398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1534'. [ 806.471337][T12396] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 806.485100][T12398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1534'. [ 806.490117][T12396] EXT4-fs (loop3): This should not happen!! Data will be lost [ 806.490117][T12396] [ 806.490142][T12396] EXT4-fs (loop3): Total free blocks count 0 [ 806.490158][T12396] EXT4-fs (loop3): Free/Dirty block details [ 806.490175][T12396] EXT4-fs (loop3): free_blocks=2415919504 [ 806.490192][T12396] EXT4-fs (loop3): dirty_blocks=16 [ 806.490206][T12396] EXT4-fs (loop3): Block reservation details [ 806.490219][T12396] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 806.839439][T10347] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 806.867048][T12401] loop1: detected capacity change from 0 to 8 [ 806.941788][ T59] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 807.062528][T12383] loop0: detected capacity change from 0 to 32768 [ 807.089726][T12383] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 807.487516][ T5783] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 808.975610][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.982176][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.504569][T12426] loop4: detected capacity change from 0 to 128 [ 809.535609][T12426] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 809.582390][T12428] syzkaller1: entered promiscuous mode [ 809.594296][T12426] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 809.594387][T12428] syzkaller1: entered allmulticast mode [ 809.925642][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 809.942852][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 810.930237][ T59] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 810.954555][T12436] loop0: detected capacity change from 0 to 4096 [ 811.033971][T12437] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 811.126688][T12439] loop4: detected capacity change from 0 to 2048 [ 811.189099][T12439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.264959][T10347] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 811.485187][ T5875] kernel write not supported for file bpf-prog (pid: 5875 comm: kworker/1:5) [ 811.555862][T12447] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 811.574125][T12447] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 811.587567][T12447] EXT4-fs (loop4): This should not happen!! Data will be lost [ 811.587567][T12447] [ 811.587593][T12447] EXT4-fs (loop4): Total free blocks count 0 [ 811.587610][T12447] EXT4-fs (loop4): Free/Dirty block details [ 811.587626][T12447] EXT4-fs (loop4): free_blocks=2415919504 [ 811.587644][T12447] EXT4-fs (loop4): dirty_blocks=16 [ 811.587658][T12447] EXT4-fs (loop4): Block reservation details [ 811.587671][T12447] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 812.592397][ T9233] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 812.840736][T12459] syzkaller1: entered promiscuous mode [ 812.846631][T12459] syzkaller1: entered allmulticast mode [ 812.881647][T12461] loop4: detected capacity change from 0 to 8 [ 813.347366][T12455] loop3: detected capacity change from 0 to 32768 [ 813.378858][T12455] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 813.661111][ T5783] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 814.406243][T12463] loop0: detected capacity change from 0 to 32768 [ 814.456006][T12463] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 814.706145][T12463] XFS (loop0): Ending clean mount [ 814.743012][T12463] XFS (loop0): Quotacheck needed: Please wait. [ 814.924076][T12463] XFS (loop0): Quotacheck: Done. [ 815.024540][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 815.046022][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 815.159658][ T5786] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 815.289563][T10347] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 815.301348][T10347] Bluetooth: hci4: Injecting HCI hardware error event [ 815.310790][ T5790] Bluetooth: hci4: hardware error 0x00 [ 815.695749][T12489] loop0: detected capacity change from 0 to 2048 [ 815.726487][T12489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.495375][T12494] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 816.655018][T12494] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 816.689760][T12494] EXT4-fs (loop0): This should not happen!! Data will be lost [ 816.689760][T12494] [ 816.707798][T12494] EXT4-fs (loop0): Total free blocks count 0 [ 816.714112][T12501] CIFS: Unable to determine destination address [ 816.769986][T12494] EXT4-fs (loop0): Free/Dirty block details [ 816.814535][T12494] EXT4-fs (loop0): free_blocks=2415919504 [ 816.841086][T12494] EXT4-fs (loop0): dirty_blocks=16 [ 816.939335][T12494] EXT4-fs (loop0): Block reservation details [ 817.086177][T12494] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 817.369358][ T5790] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 817.385948][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.229532][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 818.276324][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 818.445641][T12522] loop3: detected capacity change from 0 to 8 [ 819.754042][T12535] CIFS: Unable to determine destination address [ 820.530090][T12548] 9pnet_fd: Insufficient options for proto=fd [ 820.959847][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'. [ 820.974897][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'. [ 823.483784][T12571] CIFS: Unable to determine destination address [ 824.070089][T12575] 9pnet_fd: Insufficient options for proto=fd [ 824.264193][T12580] loop3: detected capacity change from 0 to 256 [ 824.400275][T12580] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 824.549932][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 824.594411][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 824.710193][T10347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 824.739533][T10347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 824.754025][T10347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 824.780182][T10347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 824.809558][T10347] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 824.819835][T10347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 826.435591][T12604] CIFS: Unable to determine destination address [ 826.889688][ T5790] Bluetooth: hci2: command tx timeout [ 826.945442][T12583] chnl_net:caif_netlink_parms(): no params data found [ 826.958027][T12604] overlayfs: failed to resolve './file0': -2 [ 827.231208][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 827.273482][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 827.313644][ T5874] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 827.570704][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 827.643752][ T5874] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 827.677479][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 827.718956][ T5874] usb 5-1: Product: syz [ 827.727673][T12583] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.735074][ T5874] usb 5-1: Manufacturer: syz [ 827.743470][ T5874] usb 5-1: SerialNumber: syz [ 827.748288][T12583] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.762760][ T5874] usb 5-1: config 0 descriptor?? [ 827.767992][T12583] bridge_slave_0: entered allmulticast mode [ 827.796277][T12583] bridge_slave_0: entered promiscuous mode [ 827.839909][T12583] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.888589][T12583] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.913453][T12583] bridge_slave_1: entered allmulticast mode [ 827.922666][T12583] bridge_slave_1: entered promiscuous mode [ 828.010105][ T5874] usb 5-1: USB disconnect, device number 16 [ 828.073862][T12583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.095470][T12583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.205237][ T8809] udevd[8809]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 828.969866][ T5790] Bluetooth: hci2: command tx timeout [ 829.043576][T12583] team0: Port device team_slave_0 added [ 829.077774][T12583] team0: Port device team_slave_1 added [ 829.200483][T12583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.238123][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.264864][T12583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.302668][T12583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.310127][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.336890][T12583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.940034][T12583] hsr_slave_0: entered promiscuous mode [ 829.961035][T12583] hsr_slave_1: entered promiscuous mode [ 829.968882][T12583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 829.977846][T12583] Cannot create hsr debugfs directory [ 830.413212][T12639] CIFS: Unable to determine destination address [ 831.159276][ T5790] Bluetooth: hci2: command tx timeout [ 831.279919][T12637] overlayfs: failed to resolve './file0': -2 [ 832.659916][T12583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 832.683140][T12583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 832.754437][T12583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 832.789728][ T5856] kernel write not supported for file bpf-prog (pid: 5856 comm: kworker/0:5) [ 832.843312][T12583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 833.289326][ T5790] Bluetooth: hci2: command tx timeout [ 834.237152][T12673] loop0: detected capacity change from 0 to 512 [ 834.260976][T12673] EXT4-fs (loop0): filesystem is read-only [ 834.267926][T12673] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 834.330626][T12673] EXT4-fs (loop0): filesystem is read-only [ 834.336517][T12673] EXT4-fs (loop0): orphan cleanup on readonly fs [ 834.346302][T12673] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #16: comm syz.0.1609: iget: bad i_size value: -504403158265486552 [ 834.371051][T12673] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1609: couldn't read orphan inode 16 (err -117) [ 834.384480][T12673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 834.658253][T12583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.679266][T12677] CIFS: Unable to determine destination address [ 834.734800][ T5856] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 834.949085][T12677] overlayfs: failed to resolve './file0': -2 [ 835.079878][T12680] loop4: detected capacity change from 0 to 512 [ 835.089052][T12583] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.111972][T12680] EXT4-fs (loop4): filesystem is read-only [ 835.116346][ T5856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.118386][T12680] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 835.150554][T12680] EXT4-fs (loop4): filesystem is read-only [ 835.156690][T12680] EXT4-fs (loop4): orphan cleanup on readonly fs [ 835.162382][ T5856] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 835.166053][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.179239][ T5937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.187003][ T5856] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 835.194650][T12680] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #16: comm syz.4.1611: iget: bad i_size value: -504403158265486552 [ 835.196970][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.229914][T12680] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1611: couldn't read orphan inode 16 (err -117) [ 835.245992][T12680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 835.261179][ T5856] usb 1-1: config 0 descriptor?? [ 835.305194][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.312425][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.326626][ T5856] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 835.341162][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 835.383921][ T5856] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 835.447905][ T5856] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 835.486037][ T5856] usb 1-1: media controller created [ 835.497695][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.517599][T12684] loop3: detected capacity change from 0 to 512 [ 835.539828][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 835.557834][ T5856] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 835.576696][T12684] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 835.591732][ T5856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input92 [ 835.599289][T12684] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 835.625436][ T5856] dvb-usb: schedule remote query interval to 150 msecs. [ 835.637418][T12684] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 835.656986][ T5856] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 835.690151][T12684] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 835.704723][ T5856] usb 1-1: USB disconnect, device number 14 [ 835.719522][T12684] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 835.748548][T12684] EXT4-fs (loop3): orphan cleanup on readonly fs [ 835.766425][ T5856] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 835.768356][T12684] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1612: bg 0: block 34: padding at end of block bitmap is not set [ 835.811139][T12684] Quota error (device loop3): write_blk: dquota write failed [ 835.824731][T12684] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 835.837946][T12684] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1612: Failed to acquire dquot type 1 [ 835.853136][T12684] EXT4-fs (loop3): 1 truncate cleaned up [ 835.871500][T12684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 835.946884][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.986891][T12583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.860771][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.891129][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.008215][T12583] veth0_vlan: entered promiscuous mode [ 837.057249][T12583] veth1_vlan: entered promiscuous mode [ 837.155822][T12704] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1615'. [ 837.272534][T12583] veth0_macvtap: entered promiscuous mode [ 837.303243][T12583] veth1_macvtap: entered promiscuous mode [ 837.398271][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.449057][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.460113][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.470791][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.481472][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.492000][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.501951][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.512491][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.720862][T12583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.023878][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.108422][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.156596][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.229637][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.279551][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.329343][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.358043][T12583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.394961][T12583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.424510][T12583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.478269][T12583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.518778][T12583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.548319][T12583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.575818][T12583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.352745][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.539457][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.094406][T12724] loop0: detected capacity change from 0 to 512 [ 840.114202][T12724] EXT4-fs (loop0): filesystem is read-only [ 840.120759][T12724] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 840.127550][ T5937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.142713][ T5937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.150694][T12724] EXT4-fs (loop0): filesystem is read-only [ 840.156575][T12724] EXT4-fs (loop0): orphan cleanup on readonly fs [ 840.164886][T12724] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #16: comm syz.0.1620: iget: bad i_size value: -504403158265486552 [ 840.180093][T12724] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1620: couldn't read orphan inode 16 (err -117) [ 840.193515][T12724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 840.883526][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.071694][T12734] loop3: detected capacity change from 0 to 512 [ 841.092750][T12734] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 841.112860][T12734] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 841.929475][T12734] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 841.961700][T12734] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 842.020369][T12734] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 842.195134][T12734] EXT4-fs (loop3): orphan cleanup on readonly fs [ 842.218380][T12734] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1622: bg 0: block 34: padding at end of block bitmap is not set [ 842.235501][T12734] Quota error (device loop3): write_blk: dquota write failed [ 842.246616][T12734] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 843.072960][T12734] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1622: Failed to acquire dquot type 1 [ 843.163872][T12734] EXT4-fs (loop3): 1 truncate cleaned up [ 843.241558][T12734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 844.116330][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.881071][T12769] loop5: detected capacity change from 0 to 65536 [ 847.289645][T12769] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 847.329590][T12769] XFS (loop5): Ending clean mount [ 847.360809][T12769] XFS (loop5): Quotacheck needed: Please wait. [ 847.436738][T12769] XFS (loop5): Quotacheck: Done. [ 848.257550][T12583] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 848.402553][T12793] loop3: detected capacity change from 0 to 512 [ 848.421487][T12793] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 848.432961][T12793] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 848.449696][T12793] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 848.470863][T12793] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 848.479061][T12793] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 848.543399][T12793] EXT4-fs (loop3): orphan cleanup on readonly fs [ 848.619774][T12793] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1636: bg 0: block 34: padding at end of block bitmap is not set [ 848.686360][T12793] Quota error (device loop3): write_blk: dquota write failed [ 848.695957][T12793] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 848.731251][T12793] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1636: Failed to acquire dquot type 1 [ 848.817217][T12793] EXT4-fs (loop3): 1 truncate cleaned up [ 848.851509][T12793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 850.395852][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.542309][T12807] loop4: detected capacity change from 0 to 32768 [ 850.551733][T12807] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 850.721797][ T5799] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 852.572552][T12819] loop5: detected capacity change from 0 to 65536 [ 852.720362][T12819] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 852.744840][T12825] loop4: detected capacity change from 0 to 256 [ 852.879738][T12819] XFS (loop5): Ending clean mount [ 852.938606][T12819] XFS (loop5): Quotacheck needed: Please wait. [ 852.988294][T12825] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 853.029895][ T27] audit: type=1800 audit(1761261557.686:45): pid=12825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1642" name="file1" dev="loop4" ino=1048660 res=0 errno=0 [ 853.063459][T12825] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 853.122455][T12819] XFS (loop5): Quotacheck: Done. [ 853.217859][T12825] FAT-fs (loop4): Filesystem has been set read-only [ 854.151783][T12583] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 856.591982][T12847] loop4: detected capacity change from 0 to 32768 [ 856.627760][T12847] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 856.967914][T12860] Invalid ELF header magic: != ELF [ 856.993753][ T5783] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 863.415807][T12888] loop4: detected capacity change from 0 to 512 [ 863.438036][T12888] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 863.459422][T12888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 863.467517][T12888] System zones: 1-12 [ 863.541350][T12888] EXT4-fs (loop4): 1 truncate cleaned up [ 863.548686][T12888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.772805][T12895] fuse: Bad value for 'fd' [ 864.588494][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.647355][T12905] syzkaller1: entered promiscuous mode [ 864.672267][T12905] syzkaller1: entered allmulticast mode [ 866.452725][T12922] loop0: detected capacity change from 0 to 512 [ 866.526692][T12922] EXT4-fs (loop0): filesystem is read-only [ 866.619665][T12922] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 866.728829][T12922] EXT4-fs (loop0): filesystem is read-only [ 866.766122][T12922] EXT4-fs (loop0): orphan cleanup on readonly fs [ 866.859754][T12922] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #16: comm syz.0.1663: iget: bad i_size value: -504403158265486552 [ 867.077385][T12922] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1663: couldn't read orphan inode 16 (err -117) [ 867.103114][T12922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 867.272096][T12929] loop5: detected capacity change from 0 to 512 [ 867.284134][T12929] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 867.298741][T12929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 867.306978][T12929] System zones: 1-12 [ 867.324873][T12929] EXT4-fs (loop5): 1 truncate cleaned up [ 867.332172][T12929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.504496][ T786] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 867.555986][T12934] fuse: Bad value for 'fd' [ 867.776538][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.788448][ T786] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 867.801888][ T786] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 867.812028][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.006394][ T786] usb 1-1: config 0 descriptor?? [ 868.516307][T12583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.535079][ T786] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 868.589866][ T786] dvb-usb: bulk message failed: -22 (3/0) [ 868.641729][ T786] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 868.717389][ T786] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 868.842931][ T786] usb 1-1: media controller created [ 868.909512][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 869.257503][ T786] dvb-usb: bulk message failed: -22 (6/0) [ 869.438651][ T786] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 869.777581][ T786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input93 [ 869.912367][ T786] dvb-usb: schedule remote query interval to 150 msecs. [ 869.919445][ T786] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 869.975914][ T786] usb 1-1: USB disconnect, device number 15 [ 870.003416][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.070752][ T786] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 870.446562][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.704709][T12973] loop4: detected capacity change from 0 to 512 [ 871.716816][T12973] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 871.813288][T12973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 871.821544][T12973] System zones: 1-12 [ 871.839702][T12973] EXT4-fs (loop4): 1 truncate cleaned up [ 871.846747][T12973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.082499][T12978] fuse: Bad value for 'fd' [ 872.758590][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.622167][T12990] loop5: detected capacity change from 0 to 512 [ 873.650687][T12990] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 873.729410][T12990] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 873.841587][T12990] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 873.949067][T12990] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 874.679364][T12990] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 874.696407][T12990] EXT4-fs (loop5): orphan cleanup on readonly fs [ 875.100297][T12990] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1680: bg 0: block 34: padding at end of block bitmap is not set [ 875.163190][T12990] Quota error (device loop5): write_blk: dquota write failed [ 875.173390][T12990] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 875.185217][T12990] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1680: Failed to acquire dquot type 1 [ 875.253385][T12990] EXT4-fs (loop5): 1 truncate cleaned up [ 875.272868][T12990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 876.291778][T12583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.320573][T13021] loop3: detected capacity change from 0 to 4096 [ 878.324361][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 880.668072][T13038] loop4: detected capacity change from 0 to 32768 [ 880.758180][T13038] JBD2: Ignoring recovery information on journal [ 881.571438][T13038] JBD2: journal reset failed [ 881.576116][T13038] (syz.4.1692,13038,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 881.585500][T13038] (syz.4.1692,13038,0):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 883.185076][T13105] loop3: detected capacity change from 0 to 2048 [ 883.316578][T13105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 884.658200][T13121] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 884.673231][T13121] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 884.685549][T13121] EXT4-fs (loop3): This should not happen!! Data will be lost [ 884.685549][T13121] [ 884.695294][T13121] EXT4-fs (loop3): Total free blocks count 0 [ 884.701380][T13121] EXT4-fs (loop3): Free/Dirty block details [ 884.707318][T13121] EXT4-fs (loop3): free_blocks=2415919504 [ 884.713184][T13121] EXT4-fs (loop3): dirty_blocks=16 [ 884.718331][T13121] EXT4-fs (loop3): Block reservation details [ 884.724504][T13121] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 885.022940][ T1278] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 885.374654][T13135] loop3: detected capacity change from 0 to 256 [ 885.433039][T13135] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 885.496981][ T27] audit: type=1800 audit(1761261590.146:46): pid=13135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1712" name="file1" dev="loop3" ino=1048661 res=0 errno=0 [ 885.552815][T13137] Driver unsupported XDP return value 0 on prog (id 329) dev N/A, expect packet loss! [ 887.390098][T13162] loop5: detected capacity change from 0 to 512 [ 887.408659][T13162] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 887.443513][T13162] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 887.451991][T13162] System zones: 1-12 [ 887.478639][T13162] EXT4-fs (loop5): 1 truncate cleaned up [ 887.485783][T13162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 888.516658][T12583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.072181][T13182] CIFS: Unable to determine destination address [ 890.179950][T13182] overlayfs: missing 'lowerdir' [ 890.289719][T13192] loop0: detected capacity change from 0 to 256 [ 890.355145][T13192] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 890.423238][ T27] audit: type=1800 audit(1761261595.076:47): pid=13192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1724" name="file1" dev="loop0" ino=1048662 res=0 errno=0 [ 890.467883][T13194] loop4: detected capacity change from 0 to 512 [ 890.530091][T13194] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 890.567014][T13194] EXT4-fs (loop4): 1 truncate cleaned up [ 890.623548][T13194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.730478][ T27] audit: type=1800 audit(1761261595.386:48): pid=13194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1726" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 890.830459][T13199] loop5: detected capacity change from 0 to 2048 [ 891.020980][T13199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.293448][T13190] loop3: detected capacity change from 0 to 32768 [ 891.577538][T13190] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 891.687649][T13207] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 891.702766][T13207] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 891.715364][T13207] EXT4-fs (loop5): This should not happen!! Data will be lost [ 891.715364][T13207] [ 891.725196][T13207] EXT4-fs (loop5): Total free blocks count 0 [ 891.731314][T13207] EXT4-fs (loop5): Free/Dirty block details [ 891.737306][T13207] EXT4-fs (loop5): free_blocks=2415919504 [ 891.743181][T13207] EXT4-fs (loop5): dirty_blocks=16 [ 891.748352][T13207] EXT4-fs (loop5): Block reservation details [ 891.754469][T13207] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 892.060017][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.180010][T12678] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 892.396176][T12876] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 893.599615][ T787] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 895.259627][ T787] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 895.268757][ T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.310697][ T787] usb 6-1: config 0 descriptor?? [ 895.325509][T13243] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1735'. [ 895.333408][ T787] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 895.489243][T13246] CIFS: Unable to determine destination address [ 895.730975][ T5790] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 895.740740][ T5790] Bluetooth: hci2: Injecting HCI hardware error event [ 895.753343][ T5790] Bluetooth: hci2: hardware error 0x00 [ 896.094471][T13246] overlayfs: missing 'lowerdir' [ 896.190135][T13251] syzkaller1: entered promiscuous mode [ 896.229289][T13251] syzkaller1: entered allmulticast mode [ 897.346643][T13259] loop0: detected capacity change from 0 to 2048 [ 897.523911][T13259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.798084][ T787] usb 6-1: USB disconnect, device number 2 [ 897.850268][ T5790] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 898.165991][T13274] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 898.616583][T13274] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 898.629733][T13274] EXT4-fs (loop0): This should not happen!! Data will be lost [ 898.629733][T13274] [ 898.639576][T13274] EXT4-fs (loop0): Total free blocks count 0 [ 898.645616][T13274] EXT4-fs (loop0): Free/Dirty block details [ 898.651786][T13274] EXT4-fs (loop0): free_blocks=2415919504 [ 898.657555][T13274] EXT4-fs (loop0): dirty_blocks=16 [ 898.663026][T13274] EXT4-fs (loop0): Block reservation details [ 898.669505][T13274] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 899.520334][T13285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1744'. [ 899.677985][T13279] loop5: detected capacity change from 0 to 32768 [ 899.739241][T13279] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 900.036562][T12927] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 900.127489][T13290] CIFS: Unable to determine destination address [ 900.138796][T13290] overlayfs: missing 'lowerdir' [ 901.133763][T13296] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1747'. [ 902.652957][ T2866] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 902.792552][ T2866] EXT4-fs (loop0): This should not happen!! Data will be lost [ 902.792552][ T2866] [ 902.802500][ T2866] EXT4-fs (loop0): Total free blocks count 0 [ 902.808666][ T2866] EXT4-fs (loop0): Free/Dirty block details [ 902.818788][ T2866] EXT4-fs (loop0): free_blocks=2415919504 [ 902.824794][ T2866] EXT4-fs (loop0): dirty_blocks=208 [ 902.856725][ T2866] EXT4-fs (loop0): Block reservation details [ 902.896376][ T2866] EXT4-fs (loop0): i_reserved_data_blocks=13 [ 902.959419][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 160 with max blocks 192 with error 28 [ 903.027522][ T49] EXT4-fs (loop0): This should not happen!! Data will be lost [ 903.027522][ T49] [ 903.559423][ T5874] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 903.941652][ T5874] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 903.985205][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.064502][ T5874] usb 4-1: config 0 descriptor?? [ 904.123239][ T5874] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 904.250704][T13319] loop4: detected capacity change from 0 to 65536 [ 904.292900][T13319] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 904.385351][T13319] XFS (loop4): Ending clean mount [ 904.393262][T13319] XFS (loop4): Quotacheck needed: Please wait. [ 904.506030][T13319] XFS (loop4): Quotacheck: Done. [ 905.184710][ T8984] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 905.743940][ T5874] usb 4-1: USB disconnect, device number 17 [ 906.734971][T13348] loop0: detected capacity change from 0 to 32768 [ 906.834405][T13348] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 906.929394][T13349] CIFS: Unable to determine destination address [ 907.096530][T13349] overlayfs: missing 'lowerdir' [ 907.278213][T12927] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 910.962514][T13370] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 912.022301][T13378] loop0: detected capacity change from 0 to 64 [ 913.174106][T13387] 9pnet_fd: Insufficient options for proto=fd [ 913.579337][ T5919] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 913.827491][T13393] loop3: detected capacity change from 0 to 32768 [ 913.853204][T13393] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 914.026350][ T5919] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 914.520544][T12927] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 914.921054][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.965273][ T5919] usb 5-1: config 0 descriptor?? [ 914.998120][ T5919] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 916.517243][T13414] loop3: detected capacity change from 0 to 1764 [ 916.846951][T12927] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 917.144374][T13418] loop5: detected capacity change from 0 to 512 [ 917.198489][T13418] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 917.217949][T13419] Process accounting resumed [ 917.230011][T13418] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 917.279729][T13418] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 917.324610][T13418] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 917.339314][T13418] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 917.347587][T13418] EXT4-fs (loop5): orphan cleanup on readonly fs [ 917.357530][T13418] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1774: bg 0: block 34: padding at end of block bitmap is not set [ 917.408316][T13418] Quota error (device loop5): write_blk: dquota write failed [ 917.424054][T13418] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 917.438524][T13418] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1774: Failed to acquire dquot type 1 [ 917.457845][T13418] EXT4-fs (loop5): 1 truncate cleaned up [ 917.484478][T13418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 917.581368][ T5919] usb 5-1: USB disconnect, device number 17 [ 917.695322][T13425] loop0: detected capacity change from 0 to 32768 [ 917.718232][T13425] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 918.668517][T12583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.851364][T13452] syzkaller1: entered promiscuous mode [ 919.856924][T13452] syzkaller1: entered allmulticast mode [ 919.977035][T13458] loop4: detected capacity change from 0 to 512 [ 920.132553][T13459] loop0: detected capacity change from 0 to 1764 [ 920.257953][T13458] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 920.409972][T12927] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 920.572123][T13458] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 920.594527][T13462] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1784'. [ 920.653249][T13458] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 920.741615][T13458] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 920.759472][T13458] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 920.769201][T13458] EXT4-fs (loop4): orphan cleanup on readonly fs [ 920.861496][T13458] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1786: bg 0: block 34: padding at end of block bitmap is not set [ 920.930127][T13458] Quota error (device loop4): write_blk: dquota write failed [ 920.968755][T13458] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 920.999484][T13458] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1786: Failed to acquire dquot type 1 [ 921.050955][T13458] EXT4-fs (loop4): 1 truncate cleaned up [ 921.365442][T13471] loop5: detected capacity change from 0 to 32768 [ 921.524817][T13471] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 922.721287][T13458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 923.234869][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.309465][T13488] loop0: detected capacity change from 0 to 512 [ 923.321778][T13488] EXT4-fs (loop0): filesystem is read-only [ 923.351660][T13488] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 923.438914][T13488] EXT4-fs (loop0): filesystem is read-only [ 923.442429][T12927] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 923.469083][T13488] EXT4-fs (loop0): orphan cleanup on readonly fs [ 923.511951][T13488] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #16: comm syz.0.1790: iget: bad i_size value: -504403158265486552 [ 923.715317][T13488] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1790: couldn't read orphan inode 16 (err -117) [ 923.727984][T13488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 924.219398][ T5874] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 924.440936][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.479493][ T5874] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 924.545158][ T5874] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 924.598558][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.027952][ T5874] usb 1-1: config 0 descriptor?? [ 925.067806][ T5874] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 925.082245][ T5874] dvb-usb: bulk message failed: -22 (3/0) [ 926.533843][ T5874] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 927.522745][ T5874] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 927.744513][ T5874] usb 1-1: media controller created [ 927.761263][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 927.778092][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.974564][ T5874] dvb-usb: bulk message failed: -22 (6/0) [ 928.054686][T13519] loop3: detected capacity change from 0 to 512 [ 928.059404][ T5874] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 928.069483][T13519] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 928.084697][T13519] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 928.097268][T13519] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 928.301394][T13519] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 928.301767][ T5874] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input94 [ 928.431815][T13519] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 928.648448][T13519] EXT4-fs (loop3): orphan cleanup on readonly fs [ 928.891601][T13519] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1800: bg 0: block 34: padding at end of block bitmap is not set [ 929.000509][ T5874] dvb-usb: schedule remote query interval to 150 msecs. [ 929.007547][ T5874] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 929.015427][T13519] Quota error (device loop3): write_blk: dquota write failed [ 929.106505][T13519] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 929.107056][ T5874] usb 1-1: USB disconnect, device number 16 [ 929.123133][T13519] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1800: Failed to acquire dquot type 1 [ 929.161560][ T8] dvb-usb: bulk message failed: -22 (1/0) [ 929.167361][ T8] dvb-usb: error while querying for an remote control event. [ 929.208222][ T5874] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 929.382729][T13519] EXT4-fs (loop3): 1 truncate cleaned up [ 929.574135][T13519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 930.587582][T13532] loop4: detected capacity change from 0 to 2048 [ 931.157960][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.158045][T13532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 931.721623][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.854602][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.196301][T13551] loop5: detected capacity change from 0 to 512 [ 932.253286][T13551] EXT4-fs (loop5): filesystem is read-only [ 932.300938][T13551] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 932.340391][T13551] EXT4-fs (loop5): filesystem is read-only [ 932.349183][T13551] EXT4-fs (loop5): orphan cleanup on readonly fs [ 932.356013][T13551] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #16: comm syz.5.1806: iget: bad i_size value: -504403158265486552 [ 932.461930][T13551] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1806: couldn't read orphan inode 16 (err -117) [ 932.475904][T13551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 932.641163][T13566] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1807'. [ 932.769416][ T786] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 933.040884][ T786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.080786][ T786] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 933.151501][ T786] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 933.581854][ T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.800589][ T786] usb 6-1: config 0 descriptor?? [ 933.814291][ T786] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 933.836392][ T786] dvb-usb: bulk message failed: -22 (3/0) [ 933.853702][ T786] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 933.938740][ T786] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 933.950478][ T786] usb 6-1: media controller created [ 933.969341][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 933.998726][T13576] loop3: detected capacity change from 0 to 256 [ 934.070723][T13578] fuse: Bad value for 'fd' [ 934.103399][ T786] dvb-usb: bulk message failed: -22 (6/0) [ 934.137838][ T786] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 934.193117][ T786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input96 [ 934.244250][ T786] dvb-usb: schedule remote query interval to 150 msecs. [ 934.253833][ T786] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 934.369532][ T786] usb 6-1: USB disconnect, device number 3 [ 934.529746][ T786] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 934.592244][T13576] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 935.334804][T12583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.182398][T13586] loop3: detected capacity change from 0 to 2048 [ 936.259994][T13586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 937.137180][T13597] loop0: detected capacity change from 0 to 32768 [ 937.160856][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.177832][T13597] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 938.397600][T12927] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 938.485259][T13612] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1818'. [ 938.723349][T13618] loop4: detected capacity change from 0 to 164 [ 939.697823][T13624] loop0: detected capacity change from 0 to 512 [ 939.780365][T13624] EXT4-fs (loop0): filesystem is read-only [ 939.923478][T13624] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 940.031657][T13624] EXT4-fs (loop0): filesystem is read-only [ 940.048470][T13624] EXT4-fs (loop0): orphan cleanup on readonly fs [ 940.057025][T13624] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #16: comm syz.0.1821: iget: bad i_size value: -504403158265486552 [ 940.129246][T13624] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1821: couldn't read orphan inode 16 (err -117) [ 940.151328][T13624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 940.529450][ T5919] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 940.682235][T13638] loop5: detected capacity change from 0 to 2048 [ 940.722380][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.742605][T13638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.742910][ T5919] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 940.819318][ T5919] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 940.867539][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.924209][ T5919] usb 1-1: config 0 descriptor?? [ 940.969974][ T5919] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 941.022329][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 941.056138][ T5919] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 941.076292][ T5919] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 941.111928][ T5919] usb 1-1: media controller created [ 941.133492][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.234214][ T5919] dvb-usb: bulk message failed: -22 (6/0) [ 941.295820][ T5919] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 941.414447][ T5919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input99 [ 941.719487][T12583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.721869][ T5919] dvb-usb: schedule remote query interval to 150 msecs. [ 941.735648][ T5919] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 941.758959][ T5919] usb 1-1: USB disconnect, device number 17 [ 942.136361][ T5919] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 942.454003][T13658] x_tables: unsorted underflow at hook 2 [ 943.362441][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.818935][T13671] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1831'. [ 945.121950][T13689] loop5: detected capacity change from 0 to 2048 [ 945.184575][T13689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.317501][T12583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.944842][T13709] loop3: detected capacity change from 0 to 1764 [ 948.131475][T13713] netlink: 'syz.0.1841': attribute type 10 has an invalid length. [ 948.139652][T13713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1841'. [ 948.899444][ T8] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 950.459384][T13723] loop4: detected capacity change from 0 to 512 [ 950.468112][T13723] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 951.162106][T13723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 951.170261][T13723] System zones: 1-12 [ 951.197151][T13723] EXT4-fs (loop4): 1 truncate cleaned up [ 951.204780][T13723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.543891][T13730] fuse: Bad value for 'fd' [ 952.336098][ T8] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 952.345207][ T8] usb 4-1: can't read configurations, error -71 [ 952.434381][ T8984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.655217][T13737] loop5: detected capacity change from 0 to 2048 [ 952.866412][T13744] syzkaller1: entered promiscuous mode [ 952.880998][T13744] syzkaller1: entered allmulticast mode [ 952.945826][T13737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 954.048590][T13749] loop3: detected capacity change from 0 to 65536 [ 954.102047][T12583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.129115][T13749] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 954.259577][T13749] XFS (loop3): Ending clean mount [ 954.270481][T13749] XFS (loop3): Quotacheck needed: Please wait. [ 954.389011][T13749] XFS (loop3): Quotacheck: Done. [ 954.878895][T13775] loop4: detected capacity change from 0 to 1764 [ 956.763005][T13787] loop4: detected capacity change from 0 to 256 [ 956.797833][T13787] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 956.846427][ T27] audit: type=1800 audit(1761261661.496:49): pid=13787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1858" name="file1" dev="loop4" ino=1048668 res=0 errno=0 [ 956.888541][ T5788] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 956.913552][T13790] loop5: detected capacity change from 0 to 2048 [ 956.958478][T13790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.970781][T12583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.543509][T13821] loop5: detected capacity change from 0 to 2048 [ 960.808073][T13822] loop0: detected capacity change from 0 to 32768 [ 960.848894][T13822] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 961.232166][T13828] loop4: detected capacity change from 0 to 1764 [ 961.704326][T13821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 962.027717][T12876] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 962.123550][T12927] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 962.338903][T13839] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1871'. [ 962.355266][T13837] loop3: detected capacity change from 0 to 2048 [ 962.484829][T13837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 962.585533][ T29] INFO: task syz-executor:5782 blocked for more than 143 seconds. [ 962.628604][ T29] Not tainted syzkaller #0 [ 962.646217][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 962.665571][ T29] task:syz-executor state:D stack:21384 pid:5782 ppid:1 flags:0x00004004 [ 962.851905][T13845] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 962.870549][T13845] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 962.883555][T13845] EXT4-fs (loop5): This should not happen!! Data will be lost [ 962.883555][T13845] [ 962.893290][T13845] EXT4-fs (loop5): Total free blocks count 0 [ 962.899378][T13845] EXT4-fs (loop5): Free/Dirty block details [ 962.905337][T13845] EXT4-fs (loop5): free_blocks=2415919504 [ 962.911151][T13845] EXT4-fs (loop5): dirty_blocks=16 [ 962.916289][T13845] EXT4-fs (loop5): Block reservation details [ 964.217772][T13845] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 964.588781][ T29] Call Trace: [ 964.643060][ T29] [ 964.657626][ T29] __schedule+0x14d2/0x44d0 [ 964.702730][ T29] ? asan.module_dtor+0x20/0x20 [ 964.715329][ T29] ? mark_lock+0x94/0x320 [ 964.720727][ T29] ? lock_chain_count+0x20/0x20 [ 964.725656][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 964.730777][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 964.736206][ T29] schedule+0xbd/0x170 [ 964.740380][ T29] io_schedule+0x80/0xd0 [ 964.744688][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 964.750115][ T29] ? folio_wait_bit+0x30/0x30 [ 964.754852][ T29] ? _compound_head+0x120/0x120 [ 964.759824][ T29] truncate_inode_pages_range+0xa2d/0xf00 [ 964.765607][ T29] ? mapping_evict_folio+0x510/0x510 [ 964.771012][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 964.776085][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 964.781419][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 964.786677][ T29] evict+0x499/0x870 [ 964.790681][ T29] ? proc_nr_inodes+0x230/0x230 [ 964.795599][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 964.800888][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 964.806149][ T29] evict_inodes+0x5fe/0x690 [ 964.810925][ T29] ? clear_inode+0x150/0x150 [ 964.815587][ T29] generic_shutdown_super+0x97/0x2b0 [ 964.821673][ T29] kill_block_super+0x44/0x90 [ 964.826414][ T29] deactivate_locked_super+0x97/0x100 [ 964.831901][ T29] cleanup_mnt+0x429/0x4c0 [ 964.836380][ T29] task_work_run+0x1ce/0x250 [ 964.841093][ T29] ? task_work_cancel+0x240/0x240 [ 964.846174][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 964.851787][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 964.857207][ T29] exit_to_user_mode_prepare+0xf6/0x180 [ 964.862884][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 964.868395][ T29] do_syscall_64+0x61/0xb0 [ 964.872916][ T29] ? clear_bhb_loop+0x40/0x90 [ 964.877642][ T29] ? clear_bhb_loop+0x40/0x90 [ 964.882436][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 964.888372][ T29] RIP: 0033:0x7feb7cd902f7 [ 964.893190][ T29] RSP: 002b:00007ffe2a54f5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 964.901717][ T29] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007feb7cd902f7 [ 964.909780][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2a54f660 [ 964.917797][ T29] RBP: 00007ffe2a54f660 R08: 0000000000000000 R09: 0000000000000000 [ 964.926461][ T29] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2a5506f0 [ 964.934619][ T29] R13: 00007feb7ce11d7d R14: 00000000000c53df R15: 00007ffe2a550730 [ 964.942703][ T29] [ 964.949558][ T29] [ 964.949558][ T29] Showing all locks held in the system: [ 964.950067][ T9233] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 964.957315][ T29] 1 lock held by khungtaskd/29: [ 964.957331][ T29] #0: ffffffff8cd2ff20 ( [ 964.980830][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.000404][ T29] rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 965.008880][ T29] 2 locks held by getty/5546: [ 965.013937][ T29] #0: ffff88802d1590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 965.025074][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 965.035450][ T29] 1 lock held by syz-executor/5782: [ 965.040958][ T29] #0: ffff88805a6d80e0 (&type->s_umount_key#95){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 965.114769][ T29] 2 locks held by kworker/1:4/5828: [ 965.157464][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 965.188788][ T29] #1: ffffc9000482fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 965.204955][ T29] 2 locks held by kworker/u4:7/9233: [ 965.211161][ T29] 1 lock held by syz-executor/12583: [ 965.216614][ T29] #0: ffff88805bcd40e0 (&type->s_umount_key#31){++++}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 965.239150][ T29] 3 locks held by syz.4.1866/13811: [ 965.244633][ T29] [ 965.247000][ T29] ============================================= [ 965.247000][ T29] [ 965.277506][ T29] NMI backtrace for cpu 0 [ 965.281930][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 965.289162][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 965.299265][ T29] Call Trace: [ 965.302606][ T29] [ 965.305578][ T29] dump_stack_lvl+0x16c/0x230 [ 965.310339][ T29] ? show_regs_print_info+0x20/0x20 [ 965.315593][ T29] ? load_image+0x3b0/0x3b0 [ 965.320165][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 965.325172][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 965.331406][ T29] ? _printk+0xd0/0x110 [ 965.335615][ T29] ? load_image+0x3b0/0x3b0 [ 965.340257][ T29] ? load_image+0x3b0/0x3b0 [ 965.344821][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 965.350961][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 965.357008][ T29] watchdog+0xf41/0xf80 [ 965.361311][ T29] ? watchdog+0x1e1/0xf80 [ 965.365698][ T29] kthread+0x2fa/0x390 [ 965.369907][ T29] ? hungtask_pm_notify+0x90/0x90 [ 965.374982][ T29] ? kthread_blkcg+0xd0/0xd0 [ 965.379618][ T29] ret_from_fork+0x48/0x80 [ 965.384078][ T29] ? kthread_blkcg+0xd0/0xd0 [ 965.388797][ T29] ret_from_fork_asm+0x11/0x20 [ 965.393622][ T29] [ 965.397702][ T29] Sending NMI from CPU 0 to CPUs 1: [ 965.403308][ C1] NMI backtrace for cpu 1 [ 965.403320][ C1] CPU: 1 PID: 12927 Comm: udevd Not tainted syzkaller #0 [ 965.403337][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 965.403347][ C1] RIP: 0010:is_bpf_text_address+0x0/0x2a0 [ 965.403372][ C1] Code: 48 8b 74 24 20 e8 00 bd d4 ff 4c 89 f0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <66> 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 10 49 89 fe e8 [ 965.403387][ C1] RSP: 0018:ffffc9000b69f5a8 EFLAGS: 00000246 [ 965.403408][ C1] RAX: 0000000000000000 RBX: 00007fee4a115937 RCX: 0000000000000000 [ 965.403419][ C1] RDX: 0000000000000000 RSI: ffffffff8afc6a60 RDI: 00007fee4a115937 [ 965.403430][ C1] RBP: 0000000000000001 R08: ffff88801b34da00 R09: 0000000000000003 [ 965.403441][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff8a8000d0 [ 965.403451][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 1ffff920016d3eca [ 965.403462][ C1] FS: 00007fee4a77f880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 965.403477][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.403489][ C1] CR2: 00007f4a3c1b4198 CR3: 000000005f69a000 CR4: 00000000003506e0 [ 965.403503][ C1] Call Trace: [ 965.403509][ C1] [ 965.403515][ C1] kernel_text_address+0xa0/0xd0 [ 965.403540][ C1] __kernel_text_address+0xd/0x30 [ 965.403562][ C1] unwind_get_return_address+0x5d/0xc0 [ 965.403589][ C1] ? stack_trace_save+0xe0/0xe0 [ 965.403609][ C1] arch_stack_walk+0x11d/0x190 [ 965.403632][ C1] stack_trace_save+0x9c/0xe0 [ 965.403651][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 965.403672][ C1] ? stack_trace_save+0x9c/0xe0 [ 965.403693][ C1] kasan_set_track+0x4e/0x70 [ 965.403715][ C1] ? kasan_set_track+0x4e/0x70 [ 965.403731][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 965.403747][ C1] ? __kmalloc+0xb4/0x240 [ 965.403768][ C1] ? tomoyo_encode+0x28b/0x540 [ 965.403793][ C1] ? tomoyo_realpath_from_path+0x592/0x5d0 [ 965.403818][ C1] ? tomoyo_path_perm+0x20f/0x4b0 [ 965.403840][ C1] ? tomoyo_path_unlink+0xa3/0xe0 [ 965.403854][ C1] ? security_path_unlink+0xdc/0x130 [ 965.403875][ C1] ? do_unlinkat+0x2a2/0x570 [ 965.403889][ C1] ? __x64_sys_unlink+0x49/0x50 [ 965.403903][ C1] ? do_syscall_64+0x55/0xb0 [ 965.403924][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.403963][ C1] ? __kmem_cache_alloc_node+0x13e/0x260 [ 965.404007][ C1] __kasan_kmalloc+0x8f/0xa0 [ 965.404025][ C1] ? tomoyo_encode+0x28b/0x540 [ 965.404049][ C1] __kmalloc+0xb4/0x240 [ 965.404073][ C1] tomoyo_encode+0x28b/0x540 [ 965.404101][ C1] tomoyo_realpath_from_path+0x592/0x5d0 [ 965.404134][ C1] tomoyo_path_perm+0x20f/0x4b0 [ 965.404158][ C1] ? tomoyo_path_perm+0x1df/0x4b0 [ 965.404181][ C1] ? tomoyo_path_permission+0x380/0x380 [ 965.404219][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 965.404238][ C1] ? __rwlock_init+0x150/0x150 [ 965.404259][ C1] ? current_check_access_path+0x38d/0x460 [ 965.404279][ C1] ? __d_lookup+0x8f/0x7c0 [ 965.404305][ C1] tomoyo_path_unlink+0xa3/0xe0 [ 965.404320][ C1] ? tomoyo_path_truncate+0x20/0x20 [ 965.404341][ C1] security_path_unlink+0xdc/0x130 [ 965.404364][ C1] do_unlinkat+0x2a2/0x570 [ 965.404383][ C1] ? fsnotify_link_count+0xf0/0xf0 [ 965.404407][ C1] ? getname_flags+0x20a/0x500 [ 965.404433][ C1] __x64_sys_unlink+0x49/0x50 [ 965.404447][ C1] do_syscall_64+0x55/0xb0 [ 965.404467][ C1] ? clear_bhb_loop+0x40/0x90 [ 965.404485][ C1] ? clear_bhb_loop+0x40/0x90 [ 965.404504][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 965.404521][ C1] RIP: 0033:0x7fee4a115937 [ 965.404534][ C1] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 965.404547][ C1] RSP: 002b:00007ffe8736d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 965.404563][ C1] RAX: ffffffffffffffda RBX: 00007ffe8736d060 RCX: 00007fee4a115937 [ 965.404575][ C1] RDX: 0000000000000000 RSI: 00000000000007ca RDI: 00007ffe8736dc60 [ 965.404585][ C1] RBP: 0000558a8886c760 R08: 0000558a888676e0 R09: 0000000000000000 [ 965.404596][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000558a88873f30 [ 965.404606][ C1] R13: 00007ffe8736dc60 R14: 0000000000000000 R15: 00007ffe8736d460 [ 965.404625][ C1] [ 965.407728][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 965.835228][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 965.842458][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 965.852551][ T29] Call Trace: [ 965.855841][ T29] [ 965.858781][ T29] dump_stack_lvl+0x16c/0x230 [ 965.863485][ T29] ? show_regs_print_info+0x20/0x20 [ 965.868711][ T29] ? load_image+0x3b0/0x3b0 [ 965.873265][ T29] panic+0x2c0/0x710 [ 965.877172][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 965.882829][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 965.887346][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 965.892913][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 965.899107][ T29] watchdog+0xf80/0xf80 [ 965.903284][ T29] ? watchdog+0x1e1/0xf80 [ 965.907633][ T29] kthread+0x2fa/0x390 [ 965.911713][ T29] ? hungtask_pm_notify+0x90/0x90 [ 965.916753][ T29] ? kthread_blkcg+0xd0/0xd0 [ 965.921352][ T29] ret_from_fork+0x48/0x80 [ 965.925782][ T29] ? kthread_blkcg+0xd0/0xd0 [ 965.930383][ T29] ret_from_fork_asm+0x11/0x20 [ 965.935179][ T29] [ 965.938541][ T29] Kernel Offset: disabled [ 965.942875][ T29] Rebooting in 86400 seconds..