a4876bdec5b75e7f77fea197a9023b279ba9feb4025c", 0xf9c}, {0x0}, {&(0x7f0000001340)="89", 0x1}], 0x4, 0x0, 0x50}, 0x0) [ 2639.913758][T26366] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2639.969379][T26366] Quota error (device loop4): write_blk: dquota write failed [ 2639.992811][T26366] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2640.045849][T26366] EXT4-fs (loop4): 1 orphan inode deleted [ 2640.062495][ T8533] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2640.073999][T26366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2640.098669][T26366] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2640.214802][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 21:48:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f", 0x74, 0x4004094, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 21:48:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 21:48:33 executing program 1: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) 21:48:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto(r0, &(0x7f00000005c0)="051774aac1b1c859a2874a74751fd89769ea96475dea362f32687fa21a5cce86f68b25457b449bbe48bbf92343d73d0577025b2cfebeef96a4148c6c5b24c51ad369d7c018851cc6f5e2b4e08198ffe70a0fd77ad9ab3bf964ecbdbb822a6d11fba1a25598cc0b8a19753ad628639fe30f10dfc985fa03d621d20b0df74450e10859e725fe93d098d75b4bd3cc0312dae9", 0x91, 0x0, 0x0, 0x0) 21:48:33 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)="cb2fc579f0170e7ac113ef6bde5a8c61b19c7c204ceff56bfd9db2bd934f2d0c37d0f18d64a91f81599933c8aafec73c373859039cdd2faf4cfca0fbef497f17f19986961fa533c7c09e779102d00e4247a9a96f2bd23872ad1034c0e11d7fbce456c2cf64b49888", 0x68}, {&(0x7f0000000140)="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", 0x799}], 0x2}, 0x0) 21:48:33 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:48:34 executing program 2: unlinkat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x0) 21:48:34 executing program 3: r0 = semget(0x3, 0x0, 0x0) semctl$GETNCNT(r0, 0x4, 0x3, 0x0) 21:48:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="65f66076c8a07980feb67c68df54ee30cc5af9994c4d85be7844dddbd6172d335b4acca90dc7e42d41fff6fc57169cdcc1b4", 0x32}, {&(0x7f0000000100)="c2bae140ae7b3a166710bd8db1ce514685351e8ef9fa7fca6e8c403734cc2743d09452c96641931c5f6aeaa50dae1f75679f69b8ef329b81184fc73a2757325d3d59380041d4f37c4b4cf104b5806c4d50e5279e0ceceb5a4b2c65b61a2be48abe469dc8b71f28d314594bea130a6167c4988d8f8649a2ef65efab9a2a28800cd88dded2b87cf1e1c7ec36aaca3bcf3266d48df2008a32895210fb220bccd9c25a112a2725ca8f8df3a3b989947cad159b28306d8e062f7770c3a7554b05c2e23155c793b5666ae36c770499f6d744dd379d71370de7b176d1e57128e79680f165a3593b898d46750004c6", 0xeb}, {&(0x7f0000000200)="0e46fc7209155f5ffc149e1e737f45d6a8654fbb37bef52b3a408c65e9", 0x1d}, {&(0x7f0000000240)="14c3db5c516de67653976dd78593b8930d664ef1ec31c1eb9a3f4d2c93ba3a01af01671e785b5b0d8c46c8c89dd44e4a51fcde524e627f", 0x37}], 0x4, &(0x7f0000000380)=[@cred], 0x20}, 0x0) 21:48:34 executing program 5: r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) [ 2640.718631][T26398] loop4: detected capacity change from 0 to 512 21:48:34 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup2(r0, r0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8) 21:48:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001580)={&(0x7f0000000000)=@abs, 0x8, &(0x7f0000001400)=[{&(0x7f0000000040)="c5", 0x1}, {0x0}, {0x0}, {&(0x7f0000001340)="89", 0x1}], 0x4, 0x0, 0x50}, 0x0) [ 2640.851314][T26398] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2640.928003][T26398] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2640.947894][T26398] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2641.009650][T26398] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2641.054416][T26398] Quota error (device loop4): write_blk: dquota write failed [ 2641.087116][T26398] EXT4-fs (loop4): 1 orphan inode deleted [ 2641.128239][T26398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2641.159528][T26398] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2641.262728][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 21:48:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f", 0x74, 0x4004094, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 21:48:34 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000180)=[@cred], 0x20}, 0x0) 21:48:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000001340)="89", 0x1}], 0x3, 0x0, 0x50}, 0x0) 21:48:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1004, 0x0, 0x0) 21:48:34 executing program 5: msgget(0x1, 0x4c1) 21:48:34 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$eJzs3d9rW20dAPDvOW1et66vzasirwPncJNu6JJ2dVsRmRNErwbqvK+1TUtp2pQm3dYytMM/QBBRwSuvvBH8AwTZnyDCQO9FRRHd9MIL3ZEkJ3PrkrWytGe0nw88y/OcJ8n3+2TNyfnxcE4AJ9b5iLgVESMRcTkiJvLlaV7m2o3d7vOePnmw0C5JZNmdvyWR5Mt679Vuj0bEme5L4lREfP0rEd9KXo3b3N5Zna/Xa5t5u9pa26g2t3eurKzNL9eWa+szM9PXZ2/MXpudynJvNM5yRNz80p9++L2fffnmrz5z7/dzf7n07XZan/9ot//FcQxTd+ilzmfR0/6MNg8jWAFG8vGUik4EAIADaW/jfygiPtnZ/p+Ikc7WHAAAAHCcZF8Yj38nERkAAABwbKURMR5JWsnnAoxHmlYq3Tm8H4mxtN5otj691NhaX2z3RZSjlC6t1GtT+VzhcpSSdns6n2Pba1/d056JiPci4gcTpzvtykKjvlj0wQ8AAAA4Ic7s2f//50TaqQMAAADHzFjRCQAAAACHrlx0AgAAAMChs/8PAAAAx9pXb99ul6x3/+vFu9tbq427VxZrzdXK2tZCZaGxuVFZbjSWO9fsW9vv/eqNxsZnY33rfrVVa7aqze2dubXG1nprbuWlW2ADAAAAR+i9Tzz6XRIRu5873SmRXwcQ4CV/LDoBYJhGik4AKMxo0QkAhSkVnQBQuGSf/oGTd349/FwAAIDDMfmxV8//v5P3OTYAx5u5PgBw8jj/DydXyQxAOPE+uE//m5//z7L/KyEAAGDoxjslSSv5ucDxSNNKJeLdzm0BSsnSSr02le8f/Hai9IF2e7rzymTfOcMAAAAAAAAAAAAAAAAAAAAAAAAAQFeWJZEBAAAAx1pE+uekczX/iMmJi+N7jw+8k/xrovMYEfd+cudH9+dbrc3p9vK/P1/e+nG+/GoRRzAAAACAvXr76b39eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpqdPHiz0ylHG/esXI6LcL/5onOo8nopSRIz9I4nRF16XRMTIEOLvPoyI9/vFT+JZlmXlPIt+8U8fcvxy56PpHz+NiDNDiA8n2aP2+udWv+9fGuc7j/2/f6N5eVOD13/p8/XfyID1z7sHjHH28S+qA+M/jDg72n/904ufDIh/4YDxv/mNnZ1BfdlPIyb7/v4kL8WqttY2qs3tnSsra/PLteXa+szM9PXZG7PXZqeqSyv1Wv5v3xjf//gvn71u/GMD4pf3Gf/FA47/P4/vP/lwt1rqF//Shf6/v+8PiJ/mv32fyuvt/slefbdbf9G5n//m3OvGvzhg/Pv9/1864Pgvf+27fzjgUwGAI9Dc3lmdr9drmyoqBVay73T/Ht+WfLqV7O1Io5BK0WsmAABg2P630V90JgAAAAAAAAAAAAAAAAAAAHByHcXlxPbG3C1mqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr/XfAAAA//9yT9+f") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:48:35 executing program 5: munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 21:48:35 executing program 1: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) [ 2641.682669][T26423] loop4: detected capacity change from 0 to 512 21:48:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1008, 0x0, 0x0) 21:48:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 21:48:35 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@remote, @random="e1f7838d623d", @val, {@ipv4}}, 0x0) [ 2641.739878][T26423] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents 21:48:35 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 2641.836274][T26423] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2641.876769][T26423] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2641.945927][T26423] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2642.044053][T26423] EXT4-fs (loop4): 1 orphan inode deleted [ 2642.093976][T26423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2642.106817][T26423] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2642.192990][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 21:48:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc2", 0x7c, 0x4004094, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 21:48:35 executing program 1: mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 21:48:35 executing program 5: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) 21:48:35 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x520, 0x0) 21:48:35 executing program 2: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) 21:48:35 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:48:36 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x53, &(0x7f0000000000)=""/73, 0x49}, 0x0) 21:48:36 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0) 21:48:36 executing program 5: select(0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f00000007c0)) 21:48:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[], 0x50}, 0x0) [ 2642.758502][T26453] loop4: detected capacity change from 0 to 512 21:48:36 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) fcntl$lock(r0, 0x7, 0x0) [ 2642.870023][T26453] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2642.907358][T26453] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error 21:48:36 executing program 3: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000041c0)={0x100078, 0x72}, 0x20) [ 2642.971746][T26453] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2642.992579][T26453] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2643.056659][T26453] __quota_error: 5 callbacks suppressed [ 2643.056676][T26453] Quota error (device loop4): write_blk: dquota write failed [ 2643.102071][T26453] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2643.125726][T26453] EXT4-fs (loop4): 1 orphan inode deleted [ 2643.131560][T26453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2643.146666][ T2413] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2643.165964][T26453] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2643.276615][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 21:48:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080)=ANY=[], 0x1, 0x53b, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28e1014, 0x0, 0x0, 0x0, &(0x7f0000000300)) r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) r1 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 21:48:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc2", 0x7c, 0x4004094, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 21:48:37 executing program 5: r0 = syz_io_uring_setup(0xf3c, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xc0045878, 0x0) 21:48:37 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002fc0), 0x202, 0x0) 21:48:37 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:48:37 executing program 1: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000041c0)={0x0, 0x72}, 0x20) 21:48:37 executing program 5: r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1000008, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@nodatasum}, {@rescan_uuid_tree}, {}, {@space_cache_v1}]}, 0xfe, 0x51ab, &(0x7f0000005280)="$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") r1 = open(&(0x7f0000000140)='./file0\x00', 0x141a42, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(r1, &(0x7f00000000c0)='./bus\x00', 0x10080, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r2, 0x0, 0x0, 0x9000f4) sendfile(r2, r2, 0x0, 0x8800000) open(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = open(&(0x7f00000025c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001840)) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xc4009420, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a404ac, &(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="6c587b81896b2350369ee8d83f977b696703527759a674c6d61cd929ebc6e5154d4c47f0144ed8a532c6b3cb877bdfee3e2d4e5ce1f0dd5b5239d7edeb457c8419b1ea2974ead85eb4848b13cc68cbab5acfa3767bfe8e727b9a2445a370734229a6e4a8445fa348b9dd7ff9706a2536df371fa6b263533bffff0000218e874dba3b22ff70deda308f5903e05b1eab3ec4e539dc3b71462b66785ec2cd88d2150c445cb1968939219a3dceea5fdfb622114769466821f21fd9e7e1de2af80addea12068d2f5dbb97e01dc44b2fd69d2a73b13e43adecebc9dcc8c324f0743e15a9eddcaf", @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a404ac, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX=r2, @ANYRESOCT, @ANYBLOB="6c587bc1896b2350369ee8d83f977b696703b96259a674c6d61cd929ebc6697514c5949edaf907bf3605e5004d4c47f0144ed8a532c6b3cb877bdfee3e2d8000000000000000d7edeb457c8419b1e22974eafe8e727b9a2445a370734209a6e4a8445fa348b9dd7ff9706a74218e0200000022ff70deda308f5903f85b1eab3ec4e539dc3b71462b66785ec2cd88d2150c445cb15e9b903e3c9602d55fe8ef30ea5decf87321f21fd9e7e1de2af80addea11f68d52a639b041d51d239be0fd1e1761500000", @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) 21:48:37 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000007940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000009040)='./file0\x00', 0x0, 0x0, 0x0) 21:48:37 executing program 3: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x2040, 0x0) 21:48:37 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44001, 0x0) [ 2643.832092][T26484] loop4: detected capacity change from 0 to 512 21:48:37 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x9) [ 2643.886600][T26484] ext4: Unknown parameter '0xffffffffffffffff' 21:48:37 executing program 1: r0 = fsopen(&(0x7f0000000080)='efs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) 21:48:37 executing program 2: r0 = epoll_create(0xa0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x7, &(0x7f0000000100)={[0x2]}, 0x8) [ 2644.050185][T26498] nvme_fabrics: unknown parameter or missing value 'threaded' in ctrl creation request 21:48:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc2", 0x7c, 0x4004094, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 21:48:38 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="04006f6c617a7974696d652c6e6f71756f74e12c00000000000900427461626c652c616ee6a8169e7265616461686561645f626c6b733d30783030303030303030303031303030303007000000636172642c7571756f74612c00c6d36891bcfb3275f4642d4373d8c18e0000ffffffffffff9f2868b13e5ea2dbd62bad133bf1511b22ee4c4f403334cefaa3d2623d76ebfb0000000000009d9fd8e606303a46746911ff15c800006f7cac0c3ea0e742d8e3813682f71c73dc7fc670586d3ced36188df3471959bf0d0bcb1c5c0eb48c07ccf5f655815ed294fe3696c451d6f11f7a07000000000000005f9dc671a6fc02f457d2f1ae3b462622a54af7971845e7561545bcd5f73b326536f613c1e196d992b22bd65057a6b713544df1f6d20d8945416978bb7e8a5900001c000000000000003bd480a5537a77209dfb0000d52535f46a1bfd0afbe502bdfb4d5a52dc0809aaffff7a464430529d42000000000000000d0b94a1ce2aff4b4146e86d917b268359b347be91cf6d03d0d4ab485dce585ffc92a29d"], 0x1, 0x4c6, &(0x7f0000000a00)="$eJzs3V9rW28dAPDvOW1+dlt/NlOROXAON+mGLmlXtxWROUH0aqDO+1rbtJSmTWnSbS1DO3wBgogKXnnljeALEGQvQYSB3ouKIrrphRe6I0lO5tYla2Xpzmg/H3ia5zlPku/3SZuT8+fpSQDH1vmIuBURIxFxOSIm8uVpXubajd3u/Z4+ebDQLklk2Z2/JZHky3rP1W6PRsSp7kNiLCK+/pWIbyWvxm1u76zO1+u1zbxdba1tVJvbO1dW1uaXa8u19ZmZ6euzN2avzU5luTcaZzkibn7pTz/83s++fPNXn7n3+7m/XPp2O63Pf7Tb/+I4hqk79FLntehpv0abhxGsACP5eEpFJwIAwIG0t/E/FBGf7Gz/T8RIZ2sOAAAAOEqyL4zHv5OIDAAAADiy0ogYjySt5HMBxiNNK5XuHN6PxMm03mi2Pr3U2FpfbPdFlKOULq3Ua1P5XOFylJJ2ezqfY9trX93TnomI0xHxg4kTnXZloVFfLPrgBwAAABwTp/bs//9zIu3UAQAAgCNnrOgEAAAAgENWLjoBAAAA4NDZ/wcAAIAj7au3b7dL1vv+68W721urjbtXFmvN1cra1kJlobG5UVluNJY71+xb2+/56o3Gxmdjfet+tVVrtqrN7Z25tcbWemtuxf8YAAAAQFFOf+LR75KI2P3ciU6J/DqAAC/5Y9EJAMM0UnQCQGFGi04AKEyp6ASAwiX79A+cvPPr4ecCAAAcjsmPvXr+/728z7EBONrM9QGA48f5fzi+SmYAwrH3wX363/z8f5b9XwkBAABDN94pSVrJzwWOR5pWKhHvd74WoJQsrdRrU/n+wW8nSh9ot6c7j0z2nTMMAAAAAAAAAAAAAAAAAAAAAAAAAHRlWRIZAAAAcKRFpH9OOlfzj5icuDi+9/jAe8m/Jjq3EXHvJ3d+dH++1dqcbi//+/PlrR/ny68WcQQDAAAA2Ku3n97bjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAYXr65MFCr7zNuH/9YkSU+8UfjbHO7ViUIuLkP5IYfeFxSUSMDCH+7sOIONMvfhLPsiwr51n0i3/ikOOXOy9N//hpRJwaQnw4zh611z+3+r3/0jjfue3//hvNy5savP5Ln6//Rgasf94/YIyzj39RHRj/YcTZ0f7rn178ZED8CweM/81v7OwM6st+GjHZ9/MneSlWtbW2UW1u71xZWZtfri3X1mdmpq/P3pi9NjtVXVqp1/KffWN8/+O/fPa68Z8cEL+8z/gvHnD8/3l8/8mHu9VSv/iXLvT//D0zIH6af/Z9Kq+3+yd79d1u/UXnfv6bc68b/+KA8e/3+790wPFf/tp3/3DAuwIAb0Fze2d1vl6vbaqoFFjJvtP9e3xX8ulWsncjjUIqRa+ZAACAYfvfRn/RmQAAAAAAAAAAAAAAAAAAAMDx9TYuJ7Y35m4xQwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeK3/BgAA//8R4N+d") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:48:38 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x44881) 21:48:38 executing program 1: newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 21:48:38 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001000)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 2644.828630][T26489] loop5: detected capacity change from 0 to 32768 [ 2644.859940][T26489] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (26489) [ 2644.882204][T26512] loop4: detected capacity change from 0 to 512 [ 2644.901282][T26489] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 2644.914406][T26489] BTRFS info (device loop5): force clearing of disk cache [ 2644.923104][T26489] BTRFS info (device loop5): setting nodatasum [ 2644.931822][T26489] BTRFS info (device loop5): allowing degraded mounts [ 2644.939661][T26489] BTRFS info (device loop5): enabling disk space caching [ 2644.959068][T26489] BTRFS info (device loop5): disk space caching is enabled [ 2645.034744][T26512] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2645.047754][T26489] BTRFS info (device loop5): enabling ssd optimizations [ 2645.063085][T26489] BTRFS info (device loop5): auto enabling async discard [ 2645.090169][T26489] BTRFS info (device loop5): rebuilding free space tree [ 2645.108599][T26512] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2645.132249][T26489] BTRFS info (device loop5): disabling free space tree [ 2645.149627][T26489] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2645.153458][T26512] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2645.179507][T26512] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2645.189294][T26489] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2645.215064][T26512] Quota error (device loop4): write_blk: dquota write failed [ 2645.229547][T26512] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2645.238536][T26489] BTRFS info (device loop5): checking UUID tree [ 2645.271564][T26512] EXT4-fs (loop4): 1 orphan inode deleted [ 2645.298202][ T28] audit: type=1800 audit(1695678518.616:701): pid=26489 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 2645.324022][T26512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2645.342846][ T8533] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2645.363804][T26512] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2645.440130][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2645.527963][T26537] BTRFS info (device loop5): balance: start [ 2645.566407][T26537] BTRFS info (device loop5): balance: ended with status: 0 [ 2645.686940][T26538] BTRFS error (device loop5: state M): unrecognized mount option ''-%xý ёC!dy:b㥒Bݲh+L/_:ϰpI[QPҿ;(X2\+V2 NIFAM.IJZu |ok0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x8) [ 2648.624320][T26593] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error 21:48:42 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@init={0x14}, @prinfo={0x14}], 0x28}, 0x0) [ 2648.682817][T26593] __quota_error: 2 callbacks suppressed [ 2648.682836][T26593] Quota error (device loop4): write_blk: dquota write failed [ 2648.791681][T26593] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2648.976718][T26593] EXT4-fs (loop4): 1 orphan inode deleted [ 2648.982520][T26593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2648.996458][T31084] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2649.038509][T26593] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2649.175336][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2649.572341][T26612] loop5: detected capacity change from 0 to 32768 [ 2649.581159][T26612] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (26612) [ 2649.606767][T26612] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 2649.617950][T26612] BTRFS info (device loop5): force clearing of disk cache [ 2649.625817][T26612] BTRFS info (device loop5): setting nodatasum [ 2649.632155][T26612] BTRFS info (device loop5): allowing degraded mounts [ 2649.639631][T26612] BTRFS info (device loop5): enabling disk space caching [ 2649.648393][T26612] BTRFS info (device loop5): disk space caching is enabled [ 2649.690270][T26612] BTRFS info (device loop5): enabling ssd optimizations [ 2649.696605][T26619] loop3: detected capacity change from 0 to 32768 [ 2649.703709][T26612] BTRFS info (device loop5): auto enabling async discard [ 2649.705533][T26612] BTRFS info (device loop5): rebuilding free space tree [ 2649.713131][T26619] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor.3 (26619) [ 2649.740539][T26612] BTRFS info (device loop5): disabling free space tree [ 2649.747640][T26612] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2649.759089][T26612] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2649.794151][T26612] BTRFS info (device loop5): checking UUID tree [ 2649.881898][ T28] audit: type=1800 audit(1695678523.196:704): pid=26612 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 2650.064294][ T28] audit: type=1800 audit(1695678523.386:705): pid=26619 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 2650.131023][T26638] BTRFS info (device loop5): balance: start [ 2650.170775][T26638] BTRFS info (device loop5): balance: ended with status: 0 [ 2650.219033][T26640] BTRFS error (device loop5: state M): unrecognized mount option ''-%xý ёC!dy:b㥒Bݲh+L/_:ϰpI[QPҿ;(X2\+V2 NIFAM.IJZu |ok0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000450700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) 21:48:51 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x4020940d, 0x0) 21:48:51 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5450, 0x0) 21:48:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc214849a7a5a24bc", 0x83, 0x4004094, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) [ 2658.423826][T26852] BTRFS error (device loop5: state M): unrecognized mount option ''-%xý ёC!dy:b㥒Bݲh+L/_:ϰpI[QPҿ;(X2\+V2 NIFAM.IJZu |ok0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) 21:48:53 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:48:53 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8916, 0x0) 21:48:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x21}}}}}) 21:48:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@empty, @rand_addr=0x64010101}, 0x8) [ 2660.353833][T26911] loop4: detected capacity change from 0 to 512 21:48:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 2660.465637][T26911] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2660.534257][T26911] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error 21:48:53 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) 21:48:53 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8916, 0x0) [ 2660.605964][T26911] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2660.682162][T26911] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2660.753483][T26911] Quota error (device loop4): write_blk: dquota write failed [ 2660.797530][T26911] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2660.861841][T26911] EXT4-fs (loop4): 1 orphan inode deleted [ 2660.886283][ T2413] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2660.914983][T26911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2660.963120][T26911] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2661.100353][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2661.415056][T26929] loop5: detected capacity change from 0 to 32768 [ 2661.431514][T26929] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (26929) [ 2661.451770][T26929] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 2661.464573][T26929] BTRFS info (device loop5): force clearing of disk cache [ 2661.471830][T26929] BTRFS info (device loop5): setting nodatasum [ 2661.478698][T26929] BTRFS info (device loop5): allowing degraded mounts [ 2661.485650][T26929] BTRFS info (device loop5): enabling disk space caching [ 2661.492710][T26929] BTRFS info (device loop5): disk space caching is enabled [ 2661.526502][T26929] BTRFS info (device loop5): enabling ssd optimizations [ 2661.533920][T26929] BTRFS info (device loop5): auto enabling async discard [ 2661.542250][T26929] BTRFS info (device loop5): rebuilding free space tree [ 2661.556931][T26929] BTRFS info (device loop5): disabling free space tree [ 2661.563894][T26929] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2661.573530][T26929] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2661.587328][T26929] BTRFS info (device loop5): checking UUID tree [ 2661.613335][ T28] audit: type=1800 audit(1695678534.926:712): pid=26929 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 2661.777121][T26948] BTRFS info (device loop5): balance: start [ 2661.783295][T26948] BTRFS info (device loop5): balance: ended with status: 0 21:48:55 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8916, 0x0) 21:48:55 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 21:48:55 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:48:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc214849a7a5a24bc", 0x83, 0x4004094, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 21:48:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) [ 2661.826881][T26929] BTRFS error (device loop5: state M): unrecognized mount option ''-%xý ёC!dy:b㥒Bݲh+L/_:ϰpI[QPҿ;(X2\+V2 NIFAM.IJZu |ok0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0xa, &(0x7f00000003c0), 0x5e, 0x0, 0x11}, 0x0) [ 2667.909861][T27085] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2667.973208][T27085] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error 21:49:01 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x400c920a, &(0x7f0000001080)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/4096, 0x1000}) [ 2668.039884][T27085] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2668.076472][T27085] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error 21:49:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000000c0)="130bfe72085be6a3dfb207485b0d929ff64fc3fb2b0194d1eec731d59739728e0d871e0759dc607c11968b023df5cce454decda6390f3dedfcd792068951352f17bb13926f0c84efc5278f2a35a0c1d6e61e44bdad356f7915c923f4e3e608553b8e97c99cdf8cf95a08537f6d599861", 0x70}, {&(0x7f0000000140)="6adb1c8d62035c317fb1cd47363f522561c6738efc03f8cfe63cf70182f9c39166", 0x21}], 0x2}, 0x408) [ 2668.113020][T27085] Quota error (device loop4): write_blk: dquota write failed 21:49:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc214849a7a5a24bc32", 0x84, 0x4004094, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) [ 2668.155883][T27085] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2668.203930][T11223] usb 2-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.40 [ 2668.210050][T27085] EXT4-fs (loop4): 1 orphan inode deleted [ 2668.212997][T11223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2668.213023][T11223] usb 2-1: Product: syz [ 2668.223688][T27085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2668.277318][T11223] usb 2-1: SerialNumber: syz [ 2668.283371][T27085] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2668.356426][T11223] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2668.455395][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2668.478466][T27071] loop5: detected capacity change from 0 to 32768 [ 2668.503197][T27071] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (27071) [ 2668.541671][T27071] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 2668.563928][T27071] BTRFS info (device loop5): force clearing of disk cache [ 2668.571086][T27071] BTRFS info (device loop5): setting nodatasum [ 2668.575198][T11223] usb 2-1: USB disconnect, device number 20 [ 2668.577504][T27071] BTRFS info (device loop5): allowing degraded mounts [ 2668.608731][T27071] BTRFS info (device loop5): enabling disk space caching [ 2668.627395][T27071] BTRFS info (device loop5): disk space caching is enabled [ 2668.738945][T27071] BTRFS info (device loop5): enabling ssd optimizations [ 2668.756457][T27071] BTRFS info (device loop5): auto enabling async discard [ 2668.770603][T27071] BTRFS info (device loop5): rebuilding free space tree [ 2668.807870][T27071] BTRFS info (device loop5): disabling free space tree [ 2668.823841][T27071] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2668.838239][T27071] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2668.871482][T27071] BTRFS info (device loop5): checking UUID tree [ 2669.102505][T27122] BTRFS info (device loop5): balance: start [ 2669.119468][T27122] BTRFS info (device loop5): balance: ended with status: 0 [ 2669.203849][T27071] BTRFS error (device loop5: state M): unrecognized mount option ''-%xý ёC!dy:b㥒Bݲh+L/_:ϰpI[QPҿ;(X2\+V2 NIFAM.IJZu |ok0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2d0, r1, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2b3, 0x33, @probe_response={@wo_ht={{}, {}, @device_a, @device_b, @from_mac=@broadcast}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, [{0xdd, 0x35, "a5497f921c652e1bc08fb7daf535ac05221dfb2a74845691498a001d59951e0c3380fd7a5087e8fa120510df6320a54a277eae57a2"}, {0xdd, 0xd6, "7d6f9dcc1dac81072f53877274aace296236d06c9a51825433c16cc45065260fb73d231ada1332680b25dd668c2ae61df3e296bcb5f9497ba58923aeb76a3e0a65378f381f738b7c6e5953125552de8ac29552a0b7073980d8ac83114e8c25a5db5ceac7d6ff4b94bf3fa241bfc0ac35a9ff62f385d6410a731cbed52a123993177a55d1f041312cedceac911ae5781e34ac7ffa4c1b9d9b374428c3c9f0869e5d288163b981db391bcc62b890ee39d18e78991f143aad19002f8fe76de76b68a6c75426734c2cece0451856dad2ba06e4a53ebc91ee"}, {0xdd, 0x33, "6185e29ea9a395aa0692ed0cd2e787ce0a2c855c7c77adc0de0cba7cc9d20900bf6b63e44d3e43b03e0f04b51332d01884fc2f"}, {0xdd, 0x2e, "f8b4cfa37893f91371f983f1def74939360a8a87f1c7d2dea9261e1441a46fea57ba4e6008316926243f418f99d5"}, {0xdd, 0xd1, "c706e2fc23ebd4b4165e457c55f124321561156180d01eb47e1a6961ca1ac5d62f1e29e96e84cb588e0b935f63c831d4b8e3d8a6e456d639a673f4ce1011b9c8c8065151df788af835b25433c6967e86b3bdd868eca003d43c29c5f02b9f477303ca469c32670ac8e3dbf23ca936415108abb3b98904951cc6dc47a7396ae1a8e5cc323ffaa2f6559e3e4ce62d18d02ebfc237aa24fda18483853f7cb40fd51e7ea3fe6a3174dd5cc63864d75930092822d503db5ff8c665dd60d5cf43cf4d1a2bf6330c386a282d59a66764f49f46b2e8"}, {0xdd, 0xd, "4746e683295ce88dd54c6007ec"}]}}]}, 0x2d0}}, 0x0) 21:49:02 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:49:02 executing program 5: r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1000008, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@nodatasum}, {@rescan_uuid_tree}, {}, {@space_cache_v1}]}, 0xfe, 0x51ab, &(0x7f0000005280)="$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") r1 = open(&(0x7f0000000140)='./file0\x00', 0x141a42, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(r1, &(0x7f00000000c0)='./bus\x00', 0x10080, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r2, 0x0, 0x0, 0x9000f4) sendfile(r2, r2, 0x0, 0x8800000) open(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = open(&(0x7f00000025c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xc4009420, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a404ac, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX=r2, @ANYRESOCT, @ANYBLOB="6c587bc1896b2350369ee8d83f977b696703b96259a674c6d61cd929ebc6697514c5949edaf907bf3605e5004d4c47f0144ed8a532c6b3cb877bdfee3e2d8000000000000000d7edeb457c8419b1e22974eafe8e727b9a2445a370734209a6e4a8445fa348b9dd7ff9706a74218e0200000022ff70deda308f5903f85b1eab3ec4e539dc3b71462b66785ec2cd88d2150c445cb15e9b903e3c9602d55fe8ef30ea5decf87321f21fd9e7e1de2af80addea11f68d52a639b041d51d239be0fd1e1761500000", @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) 21:49:02 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x184a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x0, 0x0}]}) 21:49:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc214849a7a5a24bc32", 0x84, 0x4004094, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) [ 2669.436185][T27126] loop4: detected capacity change from 0 to 512 21:49:02 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140), &(0x7f0000000180)=0x10) [ 2669.517886][T27126] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2669.548948][T27126] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2669.585283][T27126] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2669.607733][T27126] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2669.622948][T27126] __quota_error: 2 callbacks suppressed [ 2669.622961][T27126] Quota error (device loop4): write_blk: dquota write failed [ 2669.637381][T27126] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2669.650915][T27126] EXT4-fs (loop4): 1 orphan inode deleted [ 2669.661460][T27126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2669.675119][T18286] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 21:49:03 executing program 3: r0 = timerfd_create(0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) [ 2669.708568][T27126] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2669.713787][T11223] usb 2-1: new high-speed USB device number 21 using dummy_hcd 21:49:03 executing program 3: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000200)={0xb}, 0xb) 21:49:03 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:49:03 executing program 2: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00') openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_clone(0x41100, 0x0, 0x0, &(0x7f0000000b80), &(0x7f0000000cc0), &(0x7f0000000d40)) r1 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000680)=[{0x0}], 0x1, &(0x7f0000001340)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0, 0x24000000}, 0x4004000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) [ 2669.993646][T11223] usb 2-1: Using ep0 maxpacket: 8 [ 2670.015919][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 21:49:03 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x806ec0, 0x0) [ 2670.123922][T11223] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 21:49:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) 21:49:03 executing program 2: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) 21:49:03 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) [ 2670.531159][T27159] loop4: detected capacity change from 0 to 512 [ 2670.563978][T11223] usb 2-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.40 [ 2670.573071][T11223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2670.623059][T11223] usb 2-1: Product: syz [ 2670.631078][T11223] usb 2-1: SerialNumber: syz [ 2670.638773][T27159] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2670.672524][T27159] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2670.689217][T11223] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2670.710157][T27159] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2670.755387][T27159] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2670.768072][T27159] Quota error (device loop4): write_blk: dquota write failed [ 2670.775882][T27159] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2670.790666][T27159] EXT4-fs (loop4): 1 orphan inode deleted [ 2670.797739][T27159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2670.810452][T27159] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2670.814208][T18286] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2670.903100][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2670.921957][T26025] usb 2-1: USB disconnect, device number 21 [ 2671.046463][T27147] loop5: detected capacity change from 0 to 32768 [ 2671.058026][T27147] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (27147) [ 2671.074331][T27147] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 2671.087843][T27147] BTRFS info (device loop5): force clearing of disk cache [ 2671.095488][T27147] BTRFS info (device loop5): setting nodatasum [ 2671.101690][T27147] BTRFS info (device loop5): allowing degraded mounts [ 2671.113503][T27147] BTRFS info (device loop5): enabling disk space caching [ 2671.120703][T27147] BTRFS info (device loop5): disk space caching is enabled [ 2671.156245][T27147] BTRFS info (device loop5): enabling ssd optimizations [ 2671.164949][T27147] BTRFS info (device loop5): auto enabling async discard [ 2671.173024][T27147] BTRFS info (device loop5): rebuilding free space tree [ 2671.187187][T27147] BTRFS info (device loop5): disabling free space tree [ 2671.194254][T27147] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2671.204322][T27147] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2671.220098][T27147] BTRFS info (device loop5): checking UUID tree [ 2671.246428][ T28] audit: type=1800 audit(1695678544.566:716): pid=27147 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 2671.405123][T27183] BTRFS info (device loop5): balance: start [ 2671.420980][T27183] BTRFS info (device loop5): balance: ended with status: 0 21:49:04 executing program 5: r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1000008, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@nodatasum}, {@rescan_uuid_tree}, {}, {@space_cache_v1}]}, 0xfe, 0x51ab, &(0x7f0000005280)="$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") r1 = open(&(0x7f0000000140)='./file0\x00', 0x141a42, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(r1, &(0x7f00000000c0)='./bus\x00', 0x10080, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r2, 0x0, 0x0, 0x9000f4) sendfile(r2, r2, 0x0, 0x8800000) open(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) r4 = open(&(0x7f00000025c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xc4009420, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a404ac, &(0x7f0000000a80)=ANY=[@ANYBLOB="14270e2d25cccff078b9140e8a1e19f3b4c3bd09968dd1911acef24321d764d9e117da79063a62e3a592fb42f7d9ddb2682b4c2ff580e25fa8effbd53acfb0f870bc1e49d01a5b7ff55150d2bf3b042858c5325c2b569b320cd44e49e246cc1e41f04d2e494added5aa4750b7cf26f856bf23cb379531ebae1774af8a495092c8904205db190366875aa90aff0d11bf44f064c23390e88562d041e505362f5bfb0665c3fafda909f59ad286ee9bd87d5aa098dc5b81ee34cbf59bfa765c1c96e7fb557cb1443f3dceea44c963e0c9347545e4ff353bf8b9023cf81d78673a0f6363e5cc2b0d524d291e28fc28a2767ae804a98b34b648f0ba6edf510da09034a270f6b3a294a4f49eced571db0e0d8307c99a953a8175c2e1151a065a9dd6f262df38234a5a0e4888628fe124e56fae3b1c2abbf83fcb631bc0dc708d15d9252b9414077e9b6851815491ea64ec4817e4f74d5caa1794d94838e1b4188b1c7daf986e606daab9661f7d67898198dc5b2db3c9af129794d1e1184b65a7d446a60172f81b815c8f49cb6780cffb336f9af74e4ca4644346cb351b87c31a53d00d218d85ae8c0754a1adcd268b7f8dad21656ab6d08dbbba39f45dfac26de1ebdd4b3b1fbf23c38bc24bd5a6387807e0d97261292b78fe39171504ee71d59d4d00c20be451329c583040ec38a8ba28e654c8ec0b18b6b9c699edb040de22242d038e363d624ce076abe17bacf35d84975035c063a8958c47bb900887451e4932f7a391a8feea319577a68f265319ccfcade5e7dc56ade8312efb597e885d4d1b41d27dc2657bb344941d42e68ce72e06d82643a61571d025ce90770d534a19bb6835725d6538e03f7e77701be3626172f3de7545c9cd13f1287a261380e797c0b8b89a1df32bc6d837e5a056fd2de70b2502d518354f69f82b38d72958aa401136b069e88ab9d86635c2679d131e007bbac425b8b59f4d5b27edf6f6203cfaa59ba01c4b589b0ced7f92562b54d1735dac972a13887c0a5a4342e27a31fe1ec3c9019ec71144bcfca22203e891a1f2c2430054ddbdd278e04e4150388f3dc6b99627cb24dc0e58059c5a4126b6f47b2f87c1f5788eeaa4e802d468d9a51a24a5985af12573dce3ac56ce8539a75130cbfc4c18aad514dd2c1e9d0b0ef2436e99539061e84f83d1cb39dcc8a776ac8e8da175157bab3f004886032c0d1a590241b594092d8d12d0b1f5baa70e84bb1a647c74c9263c3ba24cf7331ab60b75c0cdedd7ba5cc12d1bbfa74b181480fb65776c4b593a9665a91c155529459bfa0a9d2cd0593c42543a1310aee358733064fc6627afce3c9bf3fda2ec41ee9ad249c6c44b8865eb3920fcfebe8f3d0a84b822563f5574e3a240d0c990b0fbf8ee1ff85b56efc771461bccdf0060af4d196487aca3d59d400000000", @ANYRES16=r1, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX=r2, @ANYRESOCT, @ANYBLOB="6c587bc1896b2350369ee8d83f977b696703b96259a674c6d61cd929ebc6697514c5949edaf907bf3605e5004d4c47f0144ed8a532c6b3cb877bdfee3e2d8000000000000000d7edeb457c8419b1e22974eafe8e727b9a2445a370734209a6e4a8445fa348b9dd7ff9706a74218e0200000022ff70deda308f5903f85b1eab3ec4e539dc3b71462b66785ec2cd88d2150c445cb15e9b903e3c9602d55fe8ef30ea5decf87321f21fd9e7e1de2af80addea11f68d52a639b041d51d239be0fd1e1761500000", @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) 21:49:04 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x143, 0x0) 21:49:04 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) [ 2671.478173][T27147] BTRFS error (device loop5: state M): unrecognized mount option ''-%xý ёC!dy:b㥒Bݲh+L/_:ϰpI[QPҿ;(X2\+V2 NIFAM.IJZu |ok0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000009c0)) 21:49:04 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001380)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000033c0)={0x2020}, 0x2020) 21:49:04 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2122) [ 2671.600092][T27194] loop4: detected capacity change from 0 to 512 21:49:05 executing program 1: socketpair$unix(0xa, 0x1, 0x0, &(0x7f0000001480)) 21:49:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000030c0)={0x0, 0x989680}) [ 2671.887504][T27194] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents 21:49:05 executing program 3: socketpair$unix(0x2, 0x0, 0x0, &(0x7f0000001480)) 21:49:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}}, 0x0) [ 2672.074997][T27194] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2672.121887][T27194] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2672.174791][T27194] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2672.226606][T27194] Quota error (device loop4): write_blk: dquota write failed [ 2672.253937][T27194] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2672.351863][T27194] EXT4-fs (loop4): 1 orphan inode deleted [ 2672.364461][T31078] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2672.388436][T27194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2672.466988][T27194] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2672.589967][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2672.875003][T27215] loop5: detected capacity change from 0 to 32768 [ 2672.883194][T27215] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (27215) [ 2672.909473][T27215] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 2672.920107][T27215] BTRFS info (device loop5): force clearing of disk cache [ 2672.927331][T27215] BTRFS info (device loop5): setting nodatasum [ 2672.933513][T27215] BTRFS info (device loop5): allowing degraded mounts [ 2672.940413][T27215] BTRFS info (device loop5): enabling disk space caching [ 2672.947521][T27215] BTRFS info (device loop5): disk space caching is enabled [ 2672.976964][T27215] BTRFS info (device loop5): enabling ssd optimizations [ 2672.987988][T27215] BTRFS info (device loop5): auto enabling async discard [ 2672.997254][T27215] BTRFS info (device loop5): rebuilding free space tree [ 2673.020360][T27215] BTRFS info (device loop5): disabling free space tree [ 2673.027635][T27215] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2673.037842][T27215] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2673.052356][T27215] BTRFS info (device loop5): checking UUID tree [ 2673.276736][T27234] BTRFS info (device loop5): balance: start [ 2673.282875][T27234] BTRFS info (device loop5): balance: ended with status: 0 21:49:06 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x4143, 0x0) 21:49:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000003c0), &(0x7f0000000400)=0x8) 21:49:06 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:49:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc214849a7a5a24bc32", 0x84, 0x4004094, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 21:49:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) [ 2673.316633][T27235] BTRFS error (device loop5: state M): unrecognized mount option ''-%xý ёC!dy:b㥒Bݲh+L/_:ϰpI[QPҿ;(X2\+V2 NIFAM.IJZu |ok0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000002500)) 21:49:07 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "c116545d97c42dba67add83a84a83de837fc47e7478212350e2f82e779f1a96b8300600f99369ea1930e557a62d546ad4f00c073f9ede214820bc8e5f28c8af0"}, 0x48}}, 0x0) [ 2674.092955][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2674.214617][ T4198] usb 2-1: new high-speed USB device number 22 using dummy_hcd 21:49:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc214849a7a5a24bc32", 0x84, 0x4004094, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 21:49:07 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) [ 2674.597606][ T4198] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2674.599522][T27272] loop4: detected capacity change from 0 to 512 [ 2674.675025][T27272] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2674.692350][T27272] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2674.711867][T27272] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2674.730424][T27272] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2674.747358][T27272] __quota_error: 4 callbacks suppressed [ 2674.747378][T27272] Quota error (device loop4): write_blk: dquota write failed [ 2674.761350][T27272] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2674.775612][T27272] EXT4-fs (loop4): 1 orphan inode deleted [ 2674.781701][T27272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2674.785433][ T4198] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2674.795127][T31084] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2674.813912][T27272] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2674.833930][ T4198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2674.873453][ T4198] usb 2-1: Product: syz [ 2674.885712][ T4198] usb 2-1: Manufacturer: syz [ 2674.897332][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2674.902252][ T4198] usb 2-1: SerialNumber: syz [ 2675.146649][T27270] loop5: detected capacity change from 0 to 32768 [ 2675.157276][T27270] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (27270) [ 2675.174747][T26025] usb 2-1: USB disconnect, device number 22 [ 2675.203119][T27270] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 2675.212527][T27270] BTRFS info (device loop5): force clearing of disk cache [ 2675.220731][T27270] BTRFS info (device loop5): setting nodatasum [ 2675.235890][T27270] BTRFS info (device loop5): allowing degraded mounts [ 2675.246093][T27270] BTRFS info (device loop5): enabling disk space caching [ 2675.261914][T27270] BTRFS info (device loop5): disk space caching is enabled [ 2675.302793][T27270] BTRFS info (device loop5): enabling ssd optimizations [ 2675.314342][T27270] BTRFS info (device loop5): auto enabling async discard [ 2675.338055][T27270] BTRFS info (device loop5): rebuilding free space tree [ 2675.364709][T27270] BTRFS info (device loop5): disabling free space tree [ 2675.373712][T27270] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2675.391646][T27270] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2675.413840][T27270] BTRFS info (device loop5): checking UUID tree [ 2675.446776][ T28] audit: type=1800 audit(1695678548.766:718): pid=27270 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 2675.607875][T27296] BTRFS info (device loop5): balance: start [ 2675.620293][T27296] BTRFS info (device loop5): balance: ended with status: 0 [ 2675.683111][T27296] BTRFS error (device loop5: state M): unrecognized mount option ''-%xý ёC!dy:b㥒Bݲh+L/_:ϰpI[QPҿ;(X2\+V2 NIFAM.IJZu |ok0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 21:49:09 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:49:09 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)="15") getresgid(&(0x7f0000001400), &(0x7f0000001440), &(0x7f000000b600)) 21:49:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc214849a7a5a24bc32", 0x84, 0x4004094, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 21:49:09 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 21:49:09 executing program 3: fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00') openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x41100, &(0x7f0000001100)="d437bd383bc30706160f87a68bfbc8383afb576c05a68fcb9ce2145f57fb23d5d9ce1902b34091d1a381a51cb7fbafe41f87a8bfad7d661c30b0a4eea62f424dce2f6e97e74ba1987045cae579b0c2d668a58ee25c5d7d06", 0x58, &(0x7f0000000b80), &(0x7f0000000cc0), 0x0) [ 2675.955264][T27306] loop4: detected capacity change from 0 to 512 [ 2676.037859][T27306] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents 21:49:09 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x84200, 0x0) 21:49:09 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) [ 2676.118260][T27306] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2676.186934][T27306] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents 21:49:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x0, 0xb, 0x8, 0x6, 0x134, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x0, 0x2, 0xb, 0x1}, {0x0, 0x3, 0x3, 0xa}, {0x3, 0x1}, {0x2, 0x0, 0x9, 0x8}, {0x3, 0x3}, {0x3, 0x3, 0x2, 0xa}], 0x10, 0x8}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x80000001}, 0x8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) openat$mice(0xffffffffffffff9c, &(0x7f0000000580), 0x480000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000001000)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000440)={0x1c, r1, 0x4, 0x0, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000640)=@raw=[@jmp={0x5, 0x0, 0xd, 0x3, 0x0, 0x40}, @alu={0x4, 0x1, 0x2, 0x0, 0x9, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f0000000680)='GPL\x00', 0x7, 0x9b, &(0x7f00000006c0)=""/155, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000840)=[{0x3, 0x0, 0xc, 0x8}, {0x0, 0x5, 0x0, 0x7}, {0x0, 0x1, 0xc}, {0x0, 0x0, 0x2, 0xc}, {0x0, 0x0, 0xb, 0x1}, {0x4, 0x0, 0x6}], 0x10, 0x40}, 0x90) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000ac0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x46, 0x50, 0xe1, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x0, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x13, &(0x7f0000000c00)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6d, 0x0, 0x9}, @generic={0x3, 0x10, 0xb}]}, 0x1, [{0x2, &(0x7f0000000cc0)=@string={0x2}}]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000001100)={&(0x7f0000001040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0) [ 2676.248515][T27306] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error 21:49:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000400)) [ 2676.386769][T27306] Quota error (device loop4): write_blk: dquota write failed [ 2676.465337][T27306] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2676.552200][T27306] EXT4-fs (loop4): 1 orphan inode deleted [ 2676.573175][T18286] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2676.603821][T27306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2676.651736][T27306] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2676.684810][T11223] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 2676.794460][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2677.093750][T11223] usb 4-1: not running at top speed; connect to a high speed hub [ 2677.117961][T27319] loop5: detected capacity change from 0 to 32768 [ 2677.127146][T27319] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (27319) [ 2677.143856][T27319] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 2677.153765][T27319] BTRFS info (device loop5): force clearing of disk cache [ 2677.163677][T27319] BTRFS info (device loop5): setting nodatasum [ 2677.169935][T27319] BTRFS info (device loop5): allowing degraded mounts [ 2677.173893][T11223] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2677.177570][T27319] BTRFS info (device loop5): enabling disk space caching [ 2677.194628][T11223] usb 4-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2677.195877][T27319] BTRFS info (device loop5): disk space caching is enabled [ 2677.218600][T11223] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2677.245579][T27319] BTRFS info (device loop5): enabling ssd optimizations [ 2677.252671][T27319] BTRFS info (device loop5): auto enabling async discard [ 2677.263996][T11223] usb 4-1: language id specifier not provided by device, defaulting to English [ 2677.273936][T27319] BTRFS info (device loop5): rebuilding free space tree [ 2677.287553][T27319] BTRFS info (device loop5): disabling free space tree [ 2677.295159][T27319] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2677.307316][T27319] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2677.320928][T27319] BTRFS info (device loop5): checking UUID tree [ 2677.342260][ T28] audit: type=1800 audit(1695678550.656:719): pid=27319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 2677.393804][T11223] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2677.410250][T11223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2677.429902][T11223] usb 4-1: Product: syz [ 2677.437434][T11223] usb 4-1: Manufacturer: syz [ 2677.450758][T11223] usb 4-1: SerialNumber: syz [ 2677.514781][T27327] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2677.541455][T27348] BTRFS error (device loop5: state M): unrecognized mount option ''-%xý ёC!dy:b㥒Bݲh+L/_:ϰpI[QPҿ;(X2\+V2 NIFAM.IJZu |ok0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 21:49:10 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:49:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc214849a7a5a24bc32", 0x84, 0x4004094, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[], 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 21:49:11 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x7fffffe, 0x260, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, 'bridge_slave_0\x00', 'wlan1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) [ 2677.730914][T27355] loop4: detected capacity change from 0 to 512 21:49:11 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) [ 2677.860399][T11223] usb 4-1: USB disconnect, device number 13 21:49:11 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair(0x21, 0x80002, 0x2, &(0x7f0000000180)) [ 2678.015812][T27355] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2678.042981][T27355] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error 21:49:11 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0xffffffffffffffff) [ 2678.153399][T27355] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2678.181782][T27355] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2678.246532][T27355] Quota error (device loop4): write_blk: dquota write failed [ 2678.291210][T27355] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2678.340136][T27355] EXT4-fs (loop4): 1 orphan inode deleted [ 2678.355822][T27355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 21:49:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@alu={0x7, 0x0, 0xb, 0x8, 0x6, 0x134, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x0, 0x2, 0xb, 0x1}, {0x0, 0x3, 0x3, 0xa}, {0x3, 0x1}, {0x2, 0x0, 0x9, 0x8}, {0x3, 0x3}, {0x3, 0x3, 0x2, 0xa}], 0x10, 0x8}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x80000001}, 0x8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) openat$mice(0xffffffffffffff9c, &(0x7f0000000580), 0x480000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000001000)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000440)={0x1c, r1, 0x4, 0x0, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000640)=@raw=[@jmp={0x5, 0x0, 0xd, 0x3, 0x0, 0x40}, @alu={0x4, 0x1, 0x2, 0x0, 0x9, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f0000000680)='GPL\x00', 0x7, 0x9b, &(0x7f00000006c0)=""/155, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000840)=[{0x3, 0x0, 0xc, 0x8}, {0x0, 0x5, 0x0, 0x7}, {0x0, 0x1, 0xc}, {0x0, 0x0, 0x2, 0xc}, {0x0, 0x0, 0xb, 0x1}, {0x4, 0x0, 0x6}], 0x10, 0x40}, 0x90) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000ac0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x46, 0x50, 0xe1, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x0, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x13, &(0x7f0000000c00)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6d, 0x0, 0x9}, @generic={0x3, 0x10, 0xb}]}, 0x1, [{0x2, &(0x7f0000000cc0)=@string={0x2}}]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000001100)={&(0x7f0000001040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x0) [ 2678.379648][T27355] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2299/file1 supports timestamps until 2038-01-19 (0x7fffffff) 21:49:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 21:49:11 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) [ 2678.578199][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2678.726099][T24589] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 2678.818310][T27380] loop4: detected capacity change from 0 to 512 [ 2678.871465][T27380] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2678.892026][T27380] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2678.943722][T27380] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2679.002377][T27380] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2679.065523][T27380] EXT4-fs (loop4): 1 orphan inode deleted [ 2679.093163][T27380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2679.119017][T27364] syz-executor.2: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2679.131091][T27380] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2679.150221][T27364] CPU: 1 PID: 27364 Comm: syz-executor.2 Not tainted 6.6.0-rc3-syzkaller #0 [ 2679.161675][T27364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2679.171755][T27364] Call Trace: [ 2679.175044][T27364] [ 2679.177977][T27364] dump_stack_lvl+0x1e7/0x2d0 [ 2679.182667][T27364] ? nf_tcp_handle_invalid+0x650/0x650 [ 2679.188652][T27364] ? panic+0x770/0x770 [ 2679.192729][T27364] ? strlcpy+0x86/0xc0 [ 2679.196830][T27364] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 2679.203329][T27364] ? cpuset_print_current_mems_allowed+0x313/0x350 [ 2679.209852][T27364] warn_alloc+0x273/0x410 [ 2679.214193][T27364] ? zone_watermark_ok_safe+0x220/0x220 [ 2679.219747][T27364] ? _raw_spin_unlock+0x28/0x40 [ 2679.224614][T27364] __vmalloc_node_range+0x6d0/0x1490 [ 2679.229924][T27364] ? free_vm_area+0x50/0x50 [ 2679.234433][T27364] ? kvmalloc_node+0x72/0x180 [ 2679.239114][T27364] ? kvmalloc_node+0x72/0x180 [ 2679.243794][T27364] ? trace_kmalloc+0x1f/0xa0 [ 2679.248758][T27364] kvmalloc_node+0x142/0x180 [ 2679.253370][T27364] ? translate_table+0x174/0x2260 [ 2679.258462][T27364] translate_table+0x174/0x2260 [ 2679.263315][T27364] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2679.269421][T27364] ? ipt_register_table+0x7a0/0x7a0 [ 2679.274647][T27364] ? __might_sleep+0xc0/0xc0 [ 2679.279255][T27364] ? __might_fault+0xa5/0x120 [ 2679.283936][T27364] ? __lock_acquire+0x7f70/0x7f70 [ 2679.289135][T27364] ? kvmalloc_node+0x72/0x180 [ 2679.293824][T27364] ? __might_fault+0xc1/0x120 [ 2679.298532][T27364] do_ipt_set_ctl+0x27b5/0x3db0 [ 2679.303423][T27364] ? ipt_unregister_table_exit+0x1f0/0x1f0 [ 2679.309231][T27364] ? __might_sleep+0xc0/0xc0 [ 2679.313834][T27364] ? rcu_is_watching+0x15/0xb0 [ 2679.318605][T27364] ? trace_contention_end+0x3c/0xf0 [ 2679.323810][T27364] ? __mutex_lock+0x2ee/0xd60 [ 2679.328494][T27364] ? __mutex_unlock_slowpath+0x21c/0x750 [ 2679.334124][T27364] ? ip_sock_set_pktinfo+0x30/0x30 [ 2679.339286][T27364] ? mutex_unlock+0x10/0x10 [ 2679.343801][T27364] ? __fget_files+0x28/0x4a0 [ 2679.348662][T27364] ? module_put+0x136/0x2a0 [ 2679.353188][T27364] nf_setsockopt+0x28e/0x2c0 [ 2679.357845][T27364] ? sock_common_recvmsg+0x240/0x240 [ 2679.363152][T27364] __sys_setsockopt+0x549/0x980 [ 2679.368031][T27364] ? __ia32_sys_recv+0xb0/0xb0 [ 2679.372804][T27364] ? syscall_enter_from_user_mode+0x32/0x230 [ 2679.378794][T27364] __x64_sys_setsockopt+0xb5/0xd0 [ 2679.383823][T27364] do_syscall_64+0x41/0xc0 [ 2679.388239][T27364] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2679.394139][T27364] RIP: 0033:0x7f226c87cae9 [ 2679.398561][T27364] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2679.418168][T27364] RSP: 002b:00007f226d6be0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2679.426604][T27364] RAX: ffffffffffffffda RBX: 00007f226c99bf80 RCX: 00007f226c87cae9 [ 2679.434577][T27364] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 2679.442545][T27364] RBP: 00007f226c8c847a R08: 00000000000002c0 R09: 0000000000000000 [ 2679.450956][T27364] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2679.458935][T27364] R13: 000000000000000b R14: 00007f226c99bf80 R15: 00007fff456b01a8 [ 2679.466932][T27364] [ 2679.473836][T27364] Mem-Info: [ 2679.477124][T27364] active_anon:11076 inactive_anon:214037 isolated_anon:0 [ 2679.477124][T27364] active_file:5585 inactive_file:41532 isolated_file:0 [ 2679.477124][T27364] unevictable:768 dirty:12 writeback:0 [ 2679.477124][T27364] slab_reclaimable:7814 slab_unreclaimable:118521 [ 2679.477124][T27364] mapped:20139 shmem:13745 pagetables:1027 [ 2679.477124][T27364] sec_pagetables:0 bounce:0 [ 2679.477124][T27364] kernel_misc_reclaimable:0 [ 2679.477124][T27364] free:1137344 free_pcp:7008 free_cma:0 [ 2679.523164][T27364] Node 0 active_anon:44304kB inactive_anon:859948kB active_file:22264kB inactive_file:166128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:80556kB dirty:48kB writeback:0kB shmem:57344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:14336kB writeback_tmp:0kB kernel_stack:10356kB pagetables:4108kB sec_pagetables:0kB all_unreclaimable? no [ 2679.556781][T27364] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2679.589756][T27364] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2679.617268][T27364] lowmem_reserve[]: 0 2615 2616 2616 2616 [ 2679.630032][T27364] Node 0 DMA32 free:591104kB boost:0kB min:35424kB low:44280kB high:53136kB reserved_highatomic:0KB active_anon:44300kB inactive_anon:867208kB active_file:21008kB inactive_file:166064kB unevictable:1536kB writepending:48kB present:3129332kB managed:2682952kB mlocked:0kB bounce:0kB free_pcp:17556kB local_pcp:16264kB free_cma:0kB [ 2679.665073][T27364] lowmem_reserve[]: 0 0 1 [ 2679.667021][T27374] loop5: detected capacity change from 0 to 32768 [ 2679.677985][T27364] 1 1 [ 2679.680875][T27364] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1256kB inactive_file:64kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2679.712684][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2679.713547][T27374] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (27374) [ 2679.740556][T24589] usb 4-1: not running at top speed; connect to a high speed hub [ 2679.749086][T27364] lowmem_reserve[]: 0 0 0 0 0 [ 2679.758947][T27374] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 2679.780091][T27374] BTRFS info (device loop5): force clearing of disk cache [ 2679.791486][T27374] BTRFS info (device loop5): setting nodatasum [ 2679.798313][T27364] Node 1 Normal free:3942140kB boost:0kB min:54460kB low:68072kB high:81684kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2679.836227][T27374] BTRFS info (device loop5): allowing degraded mounts [ 2679.843158][T27374] BTRFS info (device loop5): enabling disk space caching [ 2679.850631][T24589] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2679.863140][T24589] usb 4-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2679.876711][T27374] BTRFS info (device loop5): disk space caching is enabled [ 2679.884297][T27364] lowmem_reserve[]: 0 0 0 0 0 [ 2679.889164][T27364] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2679.891082][T24589] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2679.902227][T27364] Node 0 DMA32: 176*4kB (UME) 53*8kB (UE) 78*16kB (E) 138*32kB (ME) 126*64kB (UME) 122*128kB (ME) 57*256kB (ME) 49*512kB (ME) 18*1024kB (UME) 7*2048kB (ME) 119*4096kB (M) = 590344kB [ 2679.928802][T27364] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 2679.941446][T27364] Node 1 Normal: 183*4kB (UME) 50*8kB (UME) 35*16kB (UME) 205*32kB (UME) 85*64kB (UE) 23*128kB (UE) 16*256kB (UME) 7*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 955*4096kB (M) = 3942140kB [ 2679.960120][T27364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2679.970551][T24589] usb 4-1: language id specifier not provided by device, defaulting to English [ 2679.971483][T27364] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2679.989105][T27364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2679.998896][T27364] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2680.008414][T27364] 62995 total pagecache pages [ 2680.013183][T27364] 0 pages in swap cache [ 2680.018645][T27364] Free swap = 124728kB [ 2680.022918][T27364] Total swap = 124996kB [ 2680.027304][T27364] 2097051 pages RAM [ 2680.028033][T27374] BTRFS info (device loop5): enabling ssd optimizations [ 2680.031180][T27364] 0 pages HighMem/MovableOnly [ 2680.042944][T27364] 392799 pages reserved [ 2680.044498][T27374] BTRFS info (device loop5): auto enabling async discard [ 2680.047223][T27364] 0 pages cma reserved [ 2680.066922][T27374] BTRFS info (device loop5): rebuilding free space tree [ 2680.089809][T27374] BTRFS info (device loop5): disabling free space tree [ 2680.105931][T27374] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2680.116118][T24589] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2680.132102][T24589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2680.140891][T24589] usb 4-1: Product: syz [ 2680.148774][T27374] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2680.160280][T24589] usb 4-1: Manufacturer: syz [ 2680.172933][T24589] usb 4-1: SerialNumber: syz [ 2680.202080][T27374] BTRFS info (device loop5): checking UUID tree [ 2680.214137][T27376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2680.235356][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2680.235373][ T28] audit: type=1800 audit(1695678553.556:720): pid=27374 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 2680.544453][T24589] usb 4-1: USB disconnect, device number 14 [ 2680.647078][T27400] BTRFS error (device loop5: state M): unrecognized mount option ''-%xý ёC!dy:b㥒Bݲh+L/_:ϰpI[QPҿ;(X2\+V2 NIFAM.IJZu |ok0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000000)="9625469a2c92", 0x6}]) 21:49:17 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:49:17 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4a000, 0x0) 21:49:17 executing program 5: r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1000008, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@nodatasum}, {@rescan_uuid_tree}, {}, {@space_cache_v1}]}, 0xfe, 0x51ab, &(0x7f0000005280)="$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") r1 = open(&(0x7f0000000140)='./file0\x00', 0x141a42, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(r1, &(0x7f00000000c0)='./bus\x00', 0x10080, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r2, 0x0, 0x0, 0x9000f4) sendfile(r2, r2, 0x0, 0x8800000) open(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = open(&(0x7f00000025c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001840)) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xc4009420, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a404ac, &(0x7f0000000a80)=ANY=[@ANYBLOB="14270e2d25cccff078b9140e8a1e19f3b4c3bd09968dd1911acef24321d764d9e117da79063a62e3a592fb42f7d9ddb2682b4c2ff580e25fa8effbd53acfb0f870bc1e49d01a5b7ff55150d2bf3b042858c5325c2b569b320cd44e49e246cc1e41f04d2e494added5aa4750b7cf26f856bf23cb379531ebae1774af8a495092c8904205db190366875aa90aff0d11bf44f064c23390e88562d041e505362f5bfb0665c3fafda909f59ad286ee9bd87d5aa098dc5b81ee34cbf59bfa765c1c96e7fb557cb1443f3dceea44c963e0c9347545e4ff353bf8b9023cf81d78673a0f6363e5cc2b0d524d291e28fc28a2767ae804a98b34b648f0ba6edf510da09034a270f6b3a294a4f49eced571db0e0d8307c99a953a8175c2e1151a065a9dd6f262df38234a5a0e4888628fe124e56fae3b1c2abbf83fcb631bc0dc708d15d9252b9414077e9b6851815491ea64ec4817e4f74d5caa1794d94838e1b4188b1c7daf986e606daab9661f7d67898198dc5b2db3c9af129794d1e1184b65a7d446a60172f81b815c8f49cb6780cffb336f9af74e4ca4644346cb351b87c31a53d00d218d85ae8c0754a1adcd268b7f8dad21656ab6d08dbbba39f45dfac26de1ebdd4b3b1fbf23c38bc24bd5a6387807e0d97261292b78fe39171504ee71d59d4d00c20be451329c583040ec38a8ba28e654c8ec0b18b6b9c699edb040de22242d038e363d624ce076abe17bacf35d84975035c063a8958c47bb900887451e4932f7a391a8feea319577a68f265319ccfcade5e7dc56ade8312efb597e885d4d1b41d27dc2657bb344941d42e68ce72e06d82643a61571d025ce90770d534a19bb6835725d6538e03f7e77701be3626172f3de7545c9cd13f1287a261380e797c0b8b89a1df32bc6d837e5a056fd2de70b2502d518354f69f82b38d72958aa401136b069e88ab9d86635c2679d131e007bbac425b8b59f4d5b27edf6f6203cfaa59ba01c4b589b0ced7f92562b54d1735dac972a13887c0a5a4342e27a31fe1ec3c9019ec71144bcfca22203e891a1f2c2430054ddbdd278e04e4150388f3dc6b99627cb24dc0e58059c5a4126b6f47b2f87c1f5788eeaa4e802d468d9a51a24a5985af12573dce3ac56ce8539a75130cbfc4c18aad514dd2c1e9d0b0ef2436e99539061e84f83d1cb39dcc8a776ac8e8da175157bab3f004886032c0d1a590241b594092d8d12d0b1f5baa70e84bb1a647c74c9263c3ba24cf7331ab60b75c0cdedd7ba5cc12d1bbfa74b181480fb65776c4b593a9665a91c155529459bfa0a9d2cd0593c42543a1310aee358733064fc6627afce3c9bf3fda2ec41ee9ad249c6c44b8865eb3920fcfebe8f3d0a84b822563f5574e3a240d0c990b0fbf8ee1ff85b56efc771461bccdf0060af4d196487aca3d59d400000000", @ANYRES16=r1, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX=r2, @ANYRESOCT, @ANYBLOB="6c587bc1896b2350369ee8d83f977b696703b96259a674c6d61cd929ebc6697514c5949edaf907bf3605e5004d4c47f0144ed8a532c6b3cb877bdfee3e2d8000000000000000d7edeb457c8419b1e22974eafe8e727b9a2445a370734209a6e4a8445fa348b9dd7ff9706a74218e0200000022ff70deda308f5903f85b1eab3ec4e539dc3b71462b66785ec2cd88d2150c445cb15e9b903e3c9602d55fe8ef30ea5decf87321f21fd9e7e1de2af80addea11f68d52a639b041d51d239be0fd1e1761500000", @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) 21:49:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000), 0x4) [ 2683.770261][T27463] loop4: detected capacity change from 0 to 512 21:49:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) link(&(0x7f0000000080)='./file0\x00', 0x0) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x0, 0x8000000000000001}, {}]}) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) process_vm_readv(0x0, &(0x7f0000000d00)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000b00)=""/244, 0xf4}, {0x0}], 0x6, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/81, 0x51}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="a1ffa32243f1b7583bed640a4be8887dce59f2ca987c85a33f5a36f02ac88975e907d37b6c4574217058d4c892ef080dca22ab33811a3f5f6e09e518e0f4eb70b867b63f8788e3c4e22fca9c87ee28a76be74f85109edb24ccbdee897ca2d7d672f7c505c71cca0d704b49e39fe8621dc99c048f7ed695b5fefe1dc214849a7a5a24bc32", 0x84, 0x4004094, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) 21:49:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='net/softnet_stat\x00') fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0xec556a4819cc7897) 21:49:17 executing program 1: r0 = syz_clone(0x50100480, &(0x7f0000000080), 0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="55146c9b377cd7acbb96a41b065a5f652311d3b2ea1f0bcab8475759c24a1d2e49f81ee9d491b4a45d2eee13357770014212a51e4c9aa1b992e838666970d4730afa88d9b74784d120c8f7fe76520a6c5d7c8c0e3d5295bfb3") r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$EVIOCSMASK(r1, 0x40104593, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 21:49:17 executing program 3: newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 21:49:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) [ 2683.981713][T27463] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2684.062227][T27463] EXT4-fs error (device loop4): ext4_dirty_inode:5956: inode #3: comm syz-executor.4: mark_inode_dirty error 21:49:17 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001a80)) 21:49:17 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x580, 0x0) [ 2684.147468][T27463] EXT4-fs error (device loop4): ext4_do_update_inode:5097: inode #3: comm syz-executor.4: corrupted inode contents [ 2684.203814][T27463] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error [ 2684.249999][T27463] Quota error (device loop4): write_blk: dquota write failed 21:49:17 executing program 2: io_setup(0x5f, &(0x7f0000000140)=0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x2}]) [ 2684.297899][T27463] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 2684.354681][T27463] EXT4-fs (loop4): 1 orphan inode deleted [ 2684.360481][T27463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2684.472729][T27463] ext4 filesystem being mounted at /root/syzkaller-testdir647839416/syzkaller.0VBA2G/2303/file1 supports timestamps until 2038-01-19 (0x7fffffff) 21:49:17 executing program 4: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4c6, &(0x7f0000000a00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(0xffffffffffffffff, 0x0) 21:49:17 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, 0x0) [ 2684.675845][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2684.908673][T27495] loop4: detected capacity change from 0 to 512 [ 2684.950952][T27495] ================================================================== [ 2684.959085][T27495] BUG: KASAN: slab-out-of-bounds in __ext4_iget+0x2f8/0x3eb0 [ 2684.966570][T27495] Read of size 8 at addr ffff888079ff6e90 by task syz-executor.4/27495 [ 2684.974814][T27495] [ 2684.977134][T27495] CPU: 0 PID: 27495 Comm: syz-executor.4 Not tainted 6.6.0-rc3-syzkaller #0 [ 2684.985921][T27495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2684.995997][T27495] Call Trace: [ 2684.999286][T27495] [ 2685.002221][T27495] dump_stack_lvl+0x1e7/0x2d0 [ 2685.006915][T27495] ? nf_tcp_handle_invalid+0x650/0x650 [ 2685.012380][T27495] ? panic+0x770/0x770 [ 2685.016458][T27495] ? _printk+0xd5/0x120 [ 2685.020621][T27495] print_report+0x163/0x540 [ 2685.025139][T27495] ? __virt_addr_valid+0x22f/0x2e0 [ 2685.030259][T27495] ? __phys_addr+0xba/0x170 [ 2685.034779][T27495] ? __ext4_iget+0x2f8/0x3eb0 [ 2685.039453][T27495] kasan_report+0x175/0x1b0 [ 2685.043961][T27495] ? __ext4_iget+0x2f8/0x3eb0 [ 2685.049077][T27495] __ext4_iget+0x2f8/0x3eb0 [ 2685.053691][T27495] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2685.059631][T27495] ? ext4_get_projid+0x140/0x140 [ 2685.066836][T27495] ? do_raw_write_lock+0x147/0x4f0 [ 2685.071965][T27495] ? __lock_acquire+0x7f70/0x7f70 [ 2685.077008][T27495] ? __proc_create+0x6a5/0xa00 [ 2685.081811][T27495] ext4_enable_quotas+0x56c/0xb90 [ 2685.086905][T27495] ? ext4_init_orphan_info+0x164/0x10e0 [ 2685.092490][T27495] ? _raw_write_unlock+0x28/0x40 [ 2685.097446][T27495] ? ext4_force_commit+0x80/0x80 [ 2685.102391][T27495] ? ext4_orphan_file_block_trigger+0x580/0x580 [ 2685.108657][T27495] ? __init_swait_queue_head+0xae/0x150 [ 2685.114250][T27495] ? ext4_register_sysfs+0x27b/0x2b0 [ 2685.119574][T27495] ext4_fill_super+0x61d8/0x6d10 [ 2685.124535][T27495] ? ext4_parse_test_dummy_encryption+0xa0/0xa0 [ 2685.130795][T27495] ? __down_write_common+0x161/0x200 [ 2685.136174][T27495] ? clear_nonspinnable+0x60/0x60 [ 2685.141212][T27495] get_tree_bdev+0x416/0x5b0 [ 2685.145815][T27495] ? ext4_parse_test_dummy_encryption+0xa0/0xa0 [ 2685.152500][T27495] ? setup_bdev_super+0x600/0x600 [ 2685.157531][T27495] ? cap_capable+0x1b4/0x240 [ 2685.162241][T27495] ? bpf_lsm_capable+0x9/0x10 [ 2685.166969][T27495] vfs_get_tree+0x8c/0x280 [ 2685.171416][T27495] do_new_mount+0x28f/0xae0 [ 2685.175976][T27495] ? do_move_mount_old+0x170/0x170 [ 2685.181108][T27495] ? user_path_at_empty+0x12f/0x180 [ 2685.186314][T27495] __se_sys_mount+0x2d9/0x3c0 [ 2685.191005][T27495] ? __x64_sys_mount+0xc0/0xc0 [ 2685.195778][T27495] ? syscall_enter_from_user_mode+0x32/0x230 [ 2685.201764][T27495] ? lockdep_hardirqs_on+0x98/0x140 [ 2685.206963][T27495] ? __x64_sys_mount+0x20/0xc0 [ 2685.211728][T27495] do_syscall_64+0x41/0xc0 [ 2685.216163][T27495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2685.222070][T27495] RIP: 0033:0x7f5fee87e1ea [ 2685.226485][T27495] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2685.246100][T27495] RSP: 002b:00007f5fef660ee8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 2685.254518][T27495] RAX: ffffffffffffffda RBX: 00007f5fef660f80 RCX: 00007f5fee87e1ea [ 2685.262577][T27495] RDX: 0000000020000040 RSI: 0000000020000500 RDI: 00007f5fef660f40 [ 2685.270554][T27495] RBP: 0000000020000040 R08: 00007f5fef660f80 R09: 0000000002000000 [ 2685.278525][T27495] R10: 0000000002000000 R11: 0000000000000202 R12: 0000000020000500 [ 2685.286515][T27495] R13: 00007f5fef660f40 R14: 00000000000004c6 R15: 0000000020000300 [ 2685.294591][T27495] [ 2685.297610][T27495] [ 2685.299930][T27495] Allocated by task 23099: [ 2685.304339][T27495] kasan_set_track+0x4f/0x70 [ 2685.308955][T27495] __kasan_slab_alloc+0x66/0x70 [ 2685.313809][T27495] slab_post_alloc_hook+0x67/0x3d0 [ 2685.318919][T27495] kmem_cache_alloc_lru+0x122/0x300 [ 2685.324111][T27495] ntfs_alloc_inode+0x28/0x80 [ 2685.328822][T27495] iget5_locked+0xa0/0x270 [ 2685.333237][T27495] ntfs_iget5+0xc6/0x38e0 [ 2685.337561][T27495] dir_search_u+0x2fa/0x3a0 [ 2685.342108][T27495] ntfs_extend_init+0x27a/0x530 [ 2685.347304][T27495] ntfs_fill_super+0x44d6/0x4c30 [ 2685.352243][T27495] get_tree_bdev+0x416/0x5b0 [ 2685.356832][T27495] vfs_get_tree+0x8c/0x280 [ 2685.361246][T27495] do_new_mount+0x28f/0xae0 [ 2685.365752][T27495] __se_sys_mount+0x2d9/0x3c0 [ 2685.370431][T27495] do_syscall_64+0x41/0xc0 [ 2685.374844][T27495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2685.380749][T27495] [ 2685.383070][T27495] Last potentially related work creation: [ 2685.388773][T27495] kasan_save_stack+0x3f/0x60 [ 2685.393451][T27495] __kasan_record_aux_stack+0xad/0xc0 [ 2685.398834][T27495] call_rcu+0x167/0xa70 [ 2685.402993][T27495] ntfs_extend_init+0x2e3/0x530 [ 2685.407847][T27495] ntfs_fill_super+0x44d6/0x4c30 [ 2685.412780][T27495] get_tree_bdev+0x416/0x5b0 [ 2685.417368][T27495] vfs_get_tree+0x8c/0x280 [ 2685.421780][T27495] do_new_mount+0x28f/0xae0 [ 2685.426284][T27495] __se_sys_mount+0x2d9/0x3c0 [ 2685.430962][T27495] do_syscall_64+0x41/0xc0 [ 2685.435812][T27495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2685.441708][T27495] [ 2685.444028][T27495] Second to last potentially related work creation: [ 2685.450608][T27495] kasan_save_stack+0x3f/0x60 [ 2685.455293][T27495] __kasan_record_aux_stack+0xad/0xc0 [ 2685.460701][T27495] call_rcu+0x167/0xa70 [ 2685.464947][T27495] ntfs_fill_super+0x445a/0x4c30 [ 2685.469893][T27495] get_tree_bdev+0x416/0x5b0 [ 2685.474486][T27495] vfs_get_tree+0x8c/0x280 [ 2685.478903][T27495] do_new_mount+0x28f/0xae0 [ 2685.483408][T27495] __se_sys_mount+0x2d9/0x3c0 [ 2685.488087][T27495] do_syscall_64+0x41/0xc0 [ 2685.492506][T27495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2685.498399][T27495] [ 2685.500719][T27495] The buggy address belongs to the object at ffff888079ff6740 [ 2685.500719][T27495] which belongs to the cache ntfs_inode_cache of size 1760 [ 2685.515296][T27495] The buggy address is located 112 bytes to the right of [ 2685.515296][T27495] allocated 1760-byte region [ffff888079ff6740, ffff888079ff6e20) [ 2685.530058][T27495] [ 2685.532375][T27495] The buggy address belongs to the physical page: [ 2685.538781][T27495] page:ffffea0001e7fc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079ff4260 pfn:0x79ff0 [ 2685.550234][T27495] head:ffffea0001e7fc00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2685.559177][T27495] memcg:ffff888026355001 [ 2685.563407][T27495] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2685.571378][T27495] page_type: 0xffffffff() [ 2685.575706][T27495] raw: 00fff00000000840 ffff888148277500 ffffea0002172810 ffff888014b05408 [ 2685.584286][T27495] raw: ffff888079ff4260 0000000000110007 00000001ffffffff ffff888026355001 [ 2685.592870][T27495] page dumped because: kasan: bad access detected [ 2685.599359][T27495] page_owner tracks the page as allocated [ 2685.605066][T27495] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 8047, tgid 8046 (syz-executor.3), ts 342135865191, free_ts 340385739225 [ 2685.629142][T27495] post_alloc_hook+0x1e6/0x210 [ 2685.633913][T27495] get_page_from_freelist+0x31db/0x3360 [ 2685.639473][T27495] __alloc_pages+0x255/0x670 [ 2685.644060][T27495] alloc_slab_page+0x6a/0x160 [ 2685.648733][T27495] new_slab+0x84/0x2f0 [ 2685.652795][T27495] ___slab_alloc+0xc85/0x1310 [ 2685.657469][T27495] kmem_cache_alloc_lru+0x1bf/0x300 [ 2685.662660][T27495] ntfs_alloc_inode+0x28/0x80 [ 2685.667345][T27495] iget5_locked+0xa0/0x270 [ 2685.671758][T27495] ntfs_iget5+0xc6/0x38e0 [ 2685.676083][T27495] ntfs_extend_init+0x11f/0x530 [ 2685.680938][T27495] ntfs_fill_super+0x44d6/0x4c30 [ 2685.685882][T27495] get_tree_bdev+0x416/0x5b0 [ 2685.690485][T27495] vfs_get_tree+0x8c/0x280 [ 2685.694898][T27495] do_new_mount+0x28f/0xae0 [ 2685.699402][T27495] __se_sys_mount+0x2d9/0x3c0 [ 2685.704083][T27495] page last free stack trace: [ 2685.708753][T27495] free_unref_page_prepare+0x8c3/0x9f0 [ 2685.714219][T27495] free_unref_page+0x37/0x3f0 [ 2685.718906][T27495] __slab_free+0x2f6/0x390 [ 2685.723336][T27495] qlist_free_all+0x75/0xe0 [ 2685.727836][T27495] kasan_quarantine_reduce+0x14b/0x160 [ 2685.733288][T27495] __kasan_slab_alloc+0x23/0x70 [ 2685.738140][T27495] slab_post_alloc_hook+0x67/0x3d0 [ 2685.743244][T27495] kmem_cache_alloc+0x123/0x300 [ 2685.748084][T27495] alloc_empty_file+0x9e/0x1d0 [ 2685.752840][T27495] path_openat+0xfa/0x3180 [ 2685.757253][T27495] do_filp_open+0x234/0x490 [ 2685.761752][T27495] do_sys_openat2+0x13e/0x1d0 [ 2685.766454][T27495] __x64_sys_openat+0x247/0x290 [ 2685.771310][T27495] do_syscall_64+0x41/0xc0 [ 2685.775723][T27495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2685.781617][T27495] [ 2685.783948][T27495] Memory state around the buggy address: [ 2685.789570][T27495] ffff888079ff6d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2685.797625][T27495] ffff888079ff6e00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 2685.805684][T27495] >ffff888079ff6e80: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 2685.813742][T27495] ^ [ 2685.818317][T27495] ffff888079ff6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2685.826382][T27495] ffff888079ff6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2685.834436][T27495] ================================================================== [ 2685.883469][T27495] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2685.890735][T27495] CPU: 1 PID: 27495 Comm: syz-executor.4 Not tainted 6.6.0-rc3-syzkaller #0 [ 2685.899445][T27495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 2685.909807][T27495] Call Trace: [ 2685.913117][T27495] [ 2685.916074][T27495] dump_stack_lvl+0x1e7/0x2d0 [ 2685.920787][T27495] ? nf_tcp_handle_invalid+0x650/0x650 [ 2685.926281][T27495] ? panic+0x770/0x770 [ 2685.930384][T27495] ? preempt_schedule_common+0x83/0xc0 [ 2685.935884][T27495] ? vscnprintf+0x5d/0x80 [ 2685.940252][T27495] panic+0x30f/0x770 [ 2685.944185][T27495] ? check_panic_on_warn+0x21/0xa0 [ 2685.949331][T27495] ? __memcpy_flushcache+0x2b0/0x2b0 [ 2685.954654][T27495] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 2685.960671][T27495] ? _raw_spin_unlock+0x40/0x40 [ 2685.965559][T27495] ? print_report+0x4fb/0x540 [ 2685.970281][T27495] check_panic_on_warn+0x82/0xa0 [ 2685.975258][T27495] ? __ext4_iget+0x2f8/0x3eb0 [ 2685.980049][T27495] end_report+0x6e/0x130 [ 2685.984326][T27495] kasan_report+0x186/0x1b0 [ 2685.988865][T27495] ? __ext4_iget+0x2f8/0x3eb0 [ 2685.993571][T27495] __ext4_iget+0x2f8/0x3eb0 [ 2685.998098][T27495] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2686.004053][T27495] ? ext4_get_projid+0x140/0x140 [ 2686.009054][T27495] ? do_raw_write_lock+0x147/0x4f0 [ 2686.014199][T27495] ? __lock_acquire+0x7f70/0x7f70 [ 2686.019256][T27495] ? __proc_create+0x6a5/0xa00 [ 2686.024056][T27495] ext4_enable_quotas+0x56c/0xb90 [ 2686.029132][T27495] ? ext4_init_orphan_info+0x164/0x10e0 [ 2686.034721][T27495] ? _raw_write_unlock+0x28/0x40 [ 2686.039704][T27495] ? ext4_force_commit+0x80/0x80 [ 2686.044675][T27495] ? ext4_orphan_file_block_trigger+0x580/0x580 [ 2686.050946][T27495] ? __init_swait_queue_head+0xae/0x150 [ 2686.056523][T27495] ? ext4_register_sysfs+0x27b/0x2b0 [ 2686.061843][T27495] ext4_fill_super+0x61d8/0x6d10 [ 2686.066828][T27495] ? ext4_parse_test_dummy_encryption+0xa0/0xa0 [ 2686.073204][T27495] ? __down_write_common+0x161/0x200 [ 2686.078518][T27495] ? clear_nonspinnable+0x60/0x60 [ 2686.083553][T27495] get_tree_bdev+0x416/0x5b0 [ 2686.088164][T27495] ? ext4_parse_test_dummy_encryption+0xa0/0xa0 [ 2686.094416][T27495] ? setup_bdev_super+0x600/0x600 [ 2686.099455][T27495] ? cap_capable+0x1b4/0x240 [ 2686.104133][T27495] ? bpf_lsm_capable+0x9/0x10 [ 2686.108823][T27495] vfs_get_tree+0x8c/0x280 [ 2686.113249][T27495] do_new_mount+0x28f/0xae0 [ 2686.119179][T27495] ? do_move_mount_old+0x170/0x170 [ 2686.124319][T27495] ? user_path_at_empty+0x12f/0x180 [ 2686.129557][T27495] __se_sys_mount+0x2d9/0x3c0 [ 2686.134259][T27495] ? __x64_sys_mount+0xc0/0xc0 [ 2686.139059][T27495] ? syscall_enter_from_user_mode+0x32/0x230 [ 2686.145054][T27495] ? lockdep_hardirqs_on+0x98/0x140 [ 2686.150271][T27495] ? __x64_sys_mount+0x20/0xc0 [ 2686.155051][T27495] do_syscall_64+0x41/0xc0 [ 2686.159477][T27495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2686.165373][T27495] RIP: 0033:0x7f5fee87e1ea [ 2686.169791][T27495] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2686.189423][T27495] RSP: 002b:00007f5fef660ee8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 2686.197870][T27495] RAX: ffffffffffffffda RBX: 00007f5fef660f80 RCX: 00007f5fee87e1ea [ 2686.205848][T27495] RDX: 0000000020000040 RSI: 0000000020000500 RDI: 00007f5fef660f40 [ 2686.213836][T27495] RBP: 0000000020000040 R08: 00007f5fef660f80 R09: 0000000002000000 [ 2686.221807][T27495] R10: 0000000002000000 R11: 0000000000000202 R12: 0000000020000500 [ 2686.229788][T27495] R13: 00007f5fef660f40 R14: 00000000000004c6 R15: 0000000020000300 [ 2686.237774][T27495] [ 2686.240889][T27495] Kernel Offset: disabled [ 2686.245211][T27495] Rebooting in 86400 seconds..