last executing test programs: 2m16.508809439s ago: executing program 3 (id=4): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x80a, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp437,fmask=00000000000000000000315,errors=remount-ro,umask=00000000000000000000177,errors=remount-ro,umask=00000000000000000001775,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703933362c666d61736b3d30303030303030303030303030303030303030303030312c005e78aae2dff810901336831a8ac30acbcd22a575ef96"], 0x5, 0x1516, &(0x7f00000037c0)="$eJzs3AuYTlX7MPD7XmvtMSQ9TXIY1lr35kkOyyRJDknlkCRJkuSUmKRJXklIDDklDUlIDkNyGEJymJg0zufzMUmSJklCckrWd03xeXur7/2//7fv9b/+c/+ua1/Pup+177XXfu7nsPZ2+LbL0FpNat/ViIjg34K/PiQDQCwADASAawAgAIAKcRXisvtzS0z+9w7C/loPp13pGbArieufs3H9czauf87G9c/ZuP45G9c/Z+P652xcf8Zyss3TC1/LW87d+P5/Tsa///+LZJUd++Xastd3/RdSuP45G9f/f63gv7IT1z9n4/rnbFz/nI3rnxPk+tMern/OxvVnLCe70vef/2GLgSs/hxy1Xen3H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxnOGMv0wBwKX2lZ4XY4wxxhhjjDHG/jo+15WeAWOMMcYYY4wxxv7/QxAgQUEAMZALYiE35AEBAFdDPrgGInAtxMF1kB+uhwJQEApBYYiHIlAUNBiwQBBCMSgOUbgBSsCNUBJKQWkoAw7KQgLcBOXgZigPt0AFuBUqwm1QCSpDFagKt0M1uAOqw51wF9wNNaAm1ILacA/UgXuhLtwH9eB+qA8PQAN4EBrCQ9AIHobG8Ag0gUehKTwGzaA5tICW0Oq/lf8i9ICXoCf0gmToDX3gZegL/aA/DICB8AoMgldhMLwGKTAEhsLrMAzegOHwJoyAkTAK3oLR8DaMgbEwDsZDKkyAifAOTIJ3YTJMgakwDdJgOsyA92AmzILZ8D7MgQ9gLsyD+bAA0uFDWAiLIAM+gsXwMWTCElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ2wC3bDJ7AHPoW98Bnsg8//xfzT/5DfFQEBBQpUqDAGYzAWYzEP5sG8mBfzYT6MYATjMA7zY34sgAWwEBbCeIzHolgUDRokJCyGxTCKUSyBJbAklsTSWBodOkzABCyHN2N5LI8VsAJWxIpYCStjZayKVbEaVsPqWB3vwruwBtbAWlgL78F7sDfWxbpYD+thfax/6fYUNsJG2BgbYxNsgk2xKTbDZtgCW2ArbIWtsTW2wTaYiInYDtthe2yPSZiEHbADdsSO2Ak7YWfsjF2wC3bFbtgNX8wF+BK+hL2whuiNfbAP9sWUXP1xAA7AV3AQvoqv4muYgkNwKL6Or+MbOBxP4QgciaNwFFYTb+MYHIskxmMqpuJEnIiTcBJOxik4BadhGk7HGTgDZ+IsnIXv4xz8AD/AeTgPF2A6puNCXIQZmIGL8TRm4hJcistwOa7A5bgKV+MqXIvrcC1uwA24CTfhFtyC23Ab7sAduAsVAH6Cn+KnmIL7cB/ux/14AA/gQTyIWZiFh/AQHsbDeASP4FE8isfwOJ7A43gST+IpPI1n8Ayew3N4Hp+P/7rxrlJrUkBkU0KJGBEjYkWsyCPyiLwir8gn8omIiIg4ESfyi/yigCggColCIl7Ei6KiqDDCCBJhDACIqIiKEqKEKClKitKitHDCiQSRIMqJcqK8KC8qiFtFRXGbqCQqi7auqqgqqolEV13cKe4Sd4kaoqaoJWqL2qKOqCPqirqinqgn6ov6ooF4UDQUvbE/PiyyK9NEDMGmYig2E82FvPgN1loMxzairUgUT4qROALbi9YuSTwjOogx2FH8TYzF50RnMR67iBdEV9FNdBcvih6ijespeonJ2Fv0EdOwr+gn+osBYibWFO/jnNy1xGsiRQwRQ8XrYgG+IYaLN8UIMVKMEm+J0eJtMUaMFePEeJEqJoiJ4h0xSbwrJospYqqYJtLEdDFDvCdmillitnhfzBEfiLlinpgvFoh08aFYKBaJDPGRWCw+FpliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Cl2id3iE7FHfCr2is/EPvG52C++EAfEl+Kg+Epkia/FIfGNOCy+FUfEd+Ko+F4cE8fFCfGDOCl+FKfEaXFGnBXnxE/ivPhZXBBegEQppJRKBjJG5pKxMrfMI6+SeWVw8dW9VsbJ62R+eb0sIAvKQrKwjJdFZFGppZFWkgxlMVlcRuUNsoS8UZaUpWRpWUY6WVYmyJtkOXmzLC9vkRXkrbKivE1WkpVlFVlV3i6ryTskRH49Rg1ZU9aSteU9so68V9aV98l68n5ZXz4gG8gHZUP5kGwkH5aN5SOyiXxUNpWPyWayuWwhW8pW8nHZWj4h28i2MlE+KdvJp2R7+bRMks/IDtJffIs8JzvL52UX+YLsKrvJ7vJneUF62VP2kgC9ZR/5suwr+8n+coAcKF+Rg+SrcrB8TabIIXKofF0Ok2/I4fJNOUKOlKPkW3K0fFuOkWPlODlepsoJcqJ8R06S78rJcoqcKqfJNDld9r840mwp/2n+O3+QP/iXo2+Sm+UWuVVuk9vlDrlT7pK75W65R+6Re+VeuU/uk/vlfnlAHpAH5UGZJbPkIXlIHpaH5RF5RB6VR+UxeVyelT/Ik/JHeUqelqflWXlOnpPnL74GoFAJJZVSgYpRuVSsyq3yqKtUXnW1yqeuURF1rYpT16n86npVQBVUhVRhFa+KqKJKK6OsIhWqYqq4iqob8OIbRpVWZZRTZVWCuulfyVcl1I2qpCr1m/xL80v+k/m1Uq1Ua9VatVFtVKJKVO1UO9VetVdJKkl1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VbJKVn3Uy6qv6qf6qwFqoHpFDVKD1GA1WKWoFDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVqlLVRDVRTVKT1GQ1WU1VU1WaSlMz1Aw1U81Us9VsNUfNUXPVXDVfzVfpKl0tVAtVhspQi9VilamWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qU21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVZbKUofUIXVYHVZH1BF1VB1Vx9QxdUKdUCfVSXVKnVJn1Bl1Tp1T59V5dUFdyF72BSIQgQpUEBPEBLFBbJAnyBPkDfIG+YJ8QSSIBHFBXJA/uD4oEBQMCgWFg/igSFA00IEJbCAuFj0a3BCUCG4MSgalgtJBmcAFZYOE4KagXHBzUD64JagQ3BpUDG4LKgWVgypB1eD2oFpwR1A9uDO4K7g7qBHUDGoFtYN7gjrBvUHd4L6gXnB/UD94IGgQPBg0DB4KGgUPB42DR4ImwaNB0+CxoFnQPGgRtAxa/aXje3+q4BOup+6lk3Vv3Ue/rPvqfrq/HqAH6lf0IP2qHqxf0yl6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6t39Zj9Fg9To/XqXqCnqjf0ZP0u3qynqKn6mk6TU/XM/R7eqaepWfr9/Uc/YGeq+fp+XqBTtcf6oV6kc7QH+nF+mOdqZfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+idepferT/Re/Sneq/+TO/Tn+v9+gt9QH+pD+qvdJb+Wh/S3+jD+lt9RH+nj+rv9TF9XJ/QP+iT+kd9Sp/WZ/RZfU7/pM/rn/UF7bMX99k/70YZZWJMjIk1sSaPyWPymrwmn8lnIiZi4kycyW/ymwKmgClkCpl4E2+KmqImGxkyxUwxEzVRU8KUMCVNSVPalDbOOJNgEkw5U86UN+VNBVPBVDQVTSVTyVQxVczt5nZzh7nD3GnuNHebu01NU9PUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTRPTxDQ1TU0z08y0MC1MK9PKtDatTRvTxiSaRNPOtDPtTXuTZJJMB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySbZNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNiUsxQM9QMM8PMcDPcjDAjzajshap524wxY804M96kmlQz0Uw0k8wkM9lMNlPNVJNm0swMM8PMNDPNbDPbzDFzzFwz18w38026STcLzUKTYTLMYrPYZJpMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTJZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5qQ5aU6ZU+aMOWPOmYIXfy+9ibW5bR57lc1rr7b57DX2H+NCtrCNt0VsUattAVvwN7Gx1pa0pWxpW8Y6W9Ym2Jt+F1eylW0VW9XebqvZO2z138V17L22rr3P1rP329r2nt/E9e0DtoF91DZEBLDNbWPb0jaxj9qm9jHbzDa3LWxL284+Zdvbp22SfcZ2sM/+Ll5oF9nVdo1da9fZPfZTe8aetYftt/ac/cn2tL3sQPuKHWRftYPtazbFDvldPMq+ZUfbt+0YO9aOs+N/F0+102yanW5n2PfsTDvrd3G6/dDOsRl2rp1n59sFv8TZc8qwH9nF9mObaZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+4ndarfZ7XaH3Wl3/RJnn8de+5ndZz+3h+w39oD90h60R2yW/fqXOPv8jtjv7FH7vT1mj9sT9gd70v5oT9nTv5x/9rn/YH+2F6y3QEhAkhQFFEO5KJZyUx66ivLS1ZSPrqEIXUtxdB3lp+upABWkQlSY4qkIFSVNhiwRhVSMilOUbqBL6/TSVIYclaUEuonK0c1Unm6hCnQrVaTbqBJVpipUlW6nanQHVac76S66m2pQTapFtekeqkP3Ul26j+rR/VSfHqAG9CA1pIeoET1MjekRakKPUlN6jJpRc2pBLakVPU6t6QlqQ20pkZ6kdvQUtaenKYmeoQ70LHWkv1Eneo460/PUhV6grtSNutOL1INeop7Ui5KpN/Whl6kv9aP+NIAG0is0iF6lwfQapdAQGkqv0zB6g4bTmzSCRtIoeotG09s0hsbSOBpPqTSBJtI7NInepck0habSNEqj6TSD3qOZNItm0/s0hz6guTSP5tMCSqcPaSEtogz6iBbTx5RJS2gpLaPltIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+20g3bSLtpNn9Ae+pT20me0jz6n/fQFHaAv6SB9RVn0NR2ib+gwfUtH6Dvfi76nY3ScTtAPdJJ+pFN0ms7QWTpHP9F5+pkukCcIMRShDFUYhDFhrjA2zB3mCa8K84ZXh/nCa8JIeG0YF14X5g+vDwuEBcNCYeEwPiwSFg11aEIbUhiGxcLiYTS8ISwR3hiWDEuFpcMyoQvLhgnhTWG58OawfHhLWCG8NawY3hZWCiuHj95fNbw9rBbeEVYP7wwTw7vDGmHNsFZYO7wnrBPeG9YN7wvrhfeH5cMHwgbhg2HD8KGwUfhw2Dh8JGwSPho2DR8Lm4XNwxZhy7BV+HjYOnwibBO2DRPDJ8N24VNh+/DpMCl8JuwQPvtL/wOL/rw/Oewd9glfDl8Ovb9Pzo8uiKZHP4wujC6KZkQ/ii6OfhzNjC6JLo0uiy6ProiujK6Kro6uia6Nrouuj26IboxuinpfOxc4dMJJp1zgYlwuF+tyuzzuKpfXXe3yuWtcxF3r4tx1Lr+73hVwBV0hV9jFuyKuqNPOOOvIha6YK+6i7gZXwt3oSrpSrrQr45wr6xJcS9fKtXKt3ROujWvrEt2T7kn3lHvKPe2eds+4Du5Z19H9zXVyz7nO7nn3vHvBdXXdXHf3ouvhJuT79TOZ7Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7FJcihvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLdaluopvoJrlJbrKb7Ka6qS7NpbkZboab6Wa6arN+PcpcN9fNd/Ndukt3C132mjHDLXaLXabLdEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8Nb8O6va5/W6/O+AOuIPuK5flvnaH3DfusPvWHXHfuaPue3fMHXcn3A/upPvRnXKn3Rl31p1zP7nz7md3wXmXGpkQmRh5JzIp8m5kcmRKZGpkWiQtMj0yI/JeZGZkVmR25P3InMgHkbmReZH5kQWR9MiHkYWRRZGMyEeRxZGPI5mRJZGlkWWR5ZEVEe+LbA19MV/cR/0NvoS/0Zf0pXxpX8Y7X9Yn+Jt8OX+zL+9v8RX8rb6iv81X8pV9Ff+Yb+ab+xa+pW/lH/et/RO+jW/rE/2Tvp1/yrf3T/sk/4zv4J/1Hf3ffCf/nO/sn/dd/Au+q+/mu/sXfQ//ku/pe/lk39v38S/7vr6f7+8H+IH+FT/Iv+oH+9d8ih/ih/rX/TD/hh/u3/Qj/Eg/KuYtP/rSJTKM96l+gp/o3/GT/Lt+sp/ip/ppPs1P9zP8e36mn+Vn+/f9HP+Bn+vn+fl+gU/3H/qFfpHP8B/5xf5jn+mXXLqp7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//E7/Gf+r3+M7/Pf+73+y/8Af+lP+i/8ln+a3/If+MP+2/9Ef+dP+q/98f8cX/C/+BP+h/9KX/an/Fn/Tn/kz/vf/YX+N+sMcYYY4z9l0y43BR/1N/7D54Tf7dzHwC4elvhrL/vz15Rri/wa7ufiG8XAYBnenV5+NJWo0ZycvLFfTMlBMXnAVz6k6BsMXA5XgKJ8BQkQVso94fz7ye6naN/Mn70VoA8f5cTC5fjy+N/8SfjP/7kqIUVwzNx/4/x5wGULH45JzdcjpdAosp+bAvl/2T8gq3/yfxzf5kK0ObvcvLC5fjy/BPgCXgWkn6zJ2OMMcYYY4wx9qt+okqnS9efl/7G5x9dn8eryzm54HL8z67PGWOMMcYYY4wxduU91637048nJbXt9K83qv+3srjxP7XhPcClZxQA/JsDAvzHz2LLf+RYKRc/Ov/YtfysD+B/Rin/isYV/mJijDHGGGOM/eUuL/p/+7y6UhNijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyoP/Efyd2pc+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+TwAAAP//8SoNew==") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 2m16.178286699s ago: executing program 3 (id=10): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="c19d81227b4b63c9ae34fc55e2502698fa4d", 0x12}, {&(0x7f0000001140)="ae2506742745", 0x6}, {&(0x7f0000000100)="104112e5531a6122ddf2a2c8652de58ca449e377", 0x14}, {&(0x7f00000000c0)="b307d82055e7920a39", 0x9}, {&(0x7f0000001400)="166383ac8ab05ed6ccbad916", 0xc}], 0x5}, 0x4000000) 2m15.46825534s ago: executing program 3 (id=13): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000380)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[], 0x1, 0x553b, &(0x7f000000ac00)="$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") symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m15.05313951s ago: executing program 32 (id=13): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000380)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[], 0x1, 0x553b, &(0x7f000000ac00)="$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") symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 10.739282476s ago: executing program 0 (id=1337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x6f6, &(0x7f0000005100)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000007cc0)={0x0, 0x0, &(0x7f0000007c40)=[{0x0}], 0x0, 0x1}, 0x20) 10.610669971s ago: executing program 0 (id=1339): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x3200488, &(0x7f0000000040)=ANY=[@ANYBLOB='mode=0x00000000000001ff,check=relaxed\x00utf8,map=normal,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6f7665567465806d4101007e382c00"], 0x1, 0x656, &(0x7f0000000640)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x19b0) 10.39362194s ago: executing program 0 (id=1341): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x200, 0x2c8, 0x5002004a, 0x6, 0x2c8, 0x3, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x3fa}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x180}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) 9.989663722s ago: executing program 0 (id=1342): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000000000)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {@utf8}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_off}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 9.338070131s ago: executing program 0 (id=1348): socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f00000004c0)=""/212, 0xd4}, {&(0x7f00000005c0)=""/244, 0xf4}], 0x3, 0x10, 0x1) 8.688201541s ago: executing program 0 (id=1355): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="da42823e509616ae9a55d0343597086522f44a052ef8f88a8a64abac39413f811db3ba29e45a895c7a118795f77237ece84c9c45d8d2eb2a3cdc1cc16e59d6712fdfa5a7b7cf3f458acfda11f66f00269b82985a31ad3ddea2e3d332f35e4650e6f6bf0e75151841a5149d665af3a68cd8b512ebe57788f8e6cf15", @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYBLOB="fad50f61722d8f2e0ccd6186e627354da57807aa9a4f9752c80919dfb058acc725c18edc3e8760cabb4294aa9e3fc7f54e7122bc70666228004fb7f23cfbaaa3844f52c446820ec0b99b05d05f570d8c151971cedc87359c3dd4a292636a5bbf63f65e24e48bdff93a7edd3feb44df8153a1f5b36dd7424aa3e0a69c2da0542601a506fb13f1bc27fd19eca65aff32c9999a38a10c949a1c2377ae7de9691249adf0dd07da9250db2395f54e7802427cb8c0ce373cb5df46cc07c06db0a8125ab3fed2eaa59816083c4574eb8a41e5187afff1"], 0x1, 0x1ef, &(0x7f0000001180)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@reiserfs_5={0x14}, &(0x7f0000000140), 0x0) 8.343362436s ago: executing program 33 (id=1355): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="da42823e509616ae9a55d0343597086522f44a052ef8f88a8a64abac39413f811db3ba29e45a895c7a118795f77237ece84c9c45d8d2eb2a3cdc1cc16e59d6712fdfa5a7b7cf3f458acfda11f66f00269b82985a31ad3ddea2e3d332f35e4650e6f6bf0e75151841a5149d665af3a68cd8b512ebe57788f8e6cf15", @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES64, @ANYRES64, @ANYBLOB="fad50f61722d8f2e0ccd6186e627354da57807aa9a4f9752c80919dfb058acc725c18edc3e8760cabb4294aa9e3fc7f54e7122bc70666228004fb7f23cfbaaa3844f52c446820ec0b99b05d05f570d8c151971cedc87359c3dd4a292636a5bbf63f65e24e48bdff93a7edd3feb44df8153a1f5b36dd7424aa3e0a69c2da0542601a506fb13f1bc27fd19eca65aff32c9999a38a10c949a1c2377ae7de9691249adf0dd07da9250db2395f54e7802427cb8c0ce373cb5df46cc07c06db0a8125ab3fed2eaa59816083c4574eb8a41e5187afff1"], 0x1, 0x1ef, &(0x7f0000001180)="$eJzsVbtu1EAUPdcex1nYIjUtK5IGEjsS4g9IDx/AamNChJdHxgh2FQlDk4YC8ROR+AoKJOgpEEKiCQVIUARRBaFFM3PHGWdNcMQrxRxpdc899zHXnh3PNXlbxgC+724OMAcNQhdviSAAzJPR9maM/cJ2wvggjJ+w/pTte7ZyNH71yNDx9X6eZxtydDiJQcAvcupkWhJtF9NEDecoLx/Wcwgt+/xzUoTmzU6HHteUuCmHa3Gwc3Lpvz/X75OvXcBVPv7pJSI0hoiO9F8/jACV8q07vU0HyZsnZuXGnJDLO6i/lgYSHJMd/AkJjlQlwfshLz4I8JmACK93NwdKvcJfMRVeNT97JHSVcp47OacEUAIUYqKbqj6Cc+cBLBbDW4tyND67PuyvZWvZjTRdPr/04iQf0cl9YD3PlkiPYcoDRQQqqHPaceIRgHf78QAOyBkN6rn25aql/TgvnHYKO6aRrXV6cINn1foxa3fkEJdxBrMA7pYqnPIL6umxBK6qR1sBIWQnEe5A2EOAWR04N7iZr26BQLZsG6Lqkewgsg6IHbVQtnyhtCNuse1x+xX2t9nusLV3l72ThO7wib2FEpjBvX5RbOjLy7BKSystnSvdHeg5tyHZSWK0xIm2iR4eHh4eHh4efwk/AgAA//9K6UTg") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@reiserfs_5={0x14}, &(0x7f0000000140), 0x0) 5.541935356s ago: executing program 1 (id=1378): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 5.320778396s ago: executing program 1 (id=1380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 2.482564285s ago: executing program 2 (id=1396): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, {0x0, @multicast}, 0x0, {0x2, 0x4e20, @broadcast}, 'wg1\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 1.976196921s ago: executing program 1 (id=1401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000400)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.968811021s ago: executing program 2 (id=1402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1.788074202s ago: executing program 1 (id=1404): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000140003006970766c616e31"], 0x3c}}, 0x0) 1.664653587s ago: executing program 5 (id=1406): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x1529d61, &(0x7f0000000500)={[{@errors_remount}, {@nobarrier}, {@grpquota}, {@noquota}, {@prjquota}, {@resgid={'resgid', 0x3d, 0xee01}}, {@barrier}, {@sb={'sb', 0x3d, 0x20}}, {@stripe={'stripe', 0x3d, 0x40009}}, {@minixdf}, {@nombcache}, {@noauto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}]}, 0x12, 0x4b1, &(0x7f0000000a00)="$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") timerfd_settime(r0, 0x0, &(0x7f0000000380)={{0x77359400}, {0x77359400}}, 0x0) 1.605313524s ago: executing program 1 (id=1407): sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x80) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0xfffffffffffffe60, &(0x7f0000000580), 0xb1}, 0x2020) 1.604854364s ago: executing program 2 (id=1408): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x15c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x114, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xf8, 0x6, [@m_nat={0x78, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}]}, {0x25, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb81"}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x15c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.433458626s ago: executing program 1 (id=1409): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000001c0)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x7fff}}, {@autodefrag}, {@nossd}, {@rescue={'rescue', 0x3d, 'idatacsums'}}, {@noflushoncommit}, {@nodiscard}, {@commit={'commit', 0x3d, 0xe}}, {@acl}, {@datacow}, {@ssd_spread}]}, 0x9, 0x559d, &(0x7f000000ac40)="$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") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000007980)=ANY=[@ANYRES16=r3, @ANYRESHEX=r2, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYBLOB="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"/353, @ANYRESHEX, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) 1.356083703s ago: executing program 5 (id=1410): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 1.308708481s ago: executing program 2 (id=1411): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000001c0)="bc691c2e1e3c5f0027077ebfbc13d0ad47882b61f2edc3cfc8850c3dca203d3223a088caac6f93605caae6cedbca054cdcf751d18afdadc0e9043645b5fed4a14dc601b4de785f898fd8ca512ec8685e5b86a139bf116ea9284d05cf544856e9ab71eb8a065c9a967d6e4a307752e4c0ffc75a4bb00b1f463fbdde35a11fc13f25eaa165701ac4ed12ce21e6ddae5dbea2f20215ce94815cd6dab42c17df139b1f464e5d36abc29e061bbccd4ca104acd33bb0ba01c3a7845842580f5ae54d", 0xbf}, {&(0x7f00000000c0)="040000000000f3d6d360885b1d290834eeb2878ce4a9fc133441eb9e4819ab9cd9ab2c016e5f36c37d0bb48dd609678b239f6da18fc4c9a5e6514d97bf8b7dd440b5dcbb8727c326cb988fdf077d9e0e64ddb6af22192426b5d720dcb24f930086e2640581e68818d2a0b78e88b2e0c3d899025045114cf98a6b1539c50c8f8ff287aeef5514883cf2b89317f645e1c97d6f63c36d9a4c74f1bc25344dd623f33c4a5a92d6d96718e400f6d663db7837df180487a641500b956e612af88ba9a8abdba08bdb7e277d0b6507a72b83b695896d9c12eb1ea2b8533dfdcf7207416e896345db7bb8c81053b37655b9d0e6017b1bb3f0b001166366ecfd46b67c", 0xfc79}], 0x2) 1.28816431s ago: executing program 4 (id=1412): io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$pptp(0x18, 0x1, 0x2) io_submit(r0, 0x1, &(0x7f0000001200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) io_getevents(r0, 0x0, 0x3c, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3938700}) 1.155145413s ago: executing program 5 (id=1413): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000640)=ANY=[@ANYBLOB="636f6465706167653d63703835322c006fb691d2737b705dc556d65d9df1cb7dba7e22e9401baeb7cec264b4e5364639fd3f79a413496c6f6ee520f4e84b336e780abd660b52e8e0821bb6db0d3823e1a16d8daa1b5613f213c29a616e2ef7bbce58232e3aa6ed2a6744cf109759d8491ce6643490d484408e16eede91d78ef35b7e90df199605a94fe0527e93cb7b2a98be7d4ddee04c980658d34ab783479a07adc05722c7fc5058312dc1e6ed8f0685e0a3a445d76146412c95e4715118847084a5baa5a7e1eec512c152d9feee0b7cd673b5c2f965fcecbf0d62972a98e12a14a3d980d6a37926d88c7c32c4"], 0x1, 0x2e0, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) msync(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 1.08525126s ago: executing program 2 (id=1414): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) statfs(&(0x7f0000000180)='./file0\x00', 0x0) 928.187323ms ago: executing program 4 (id=1415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x400000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x5, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004940)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x400}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 776.481766ms ago: executing program 4 (id=1416): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) 775.701816ms ago: executing program 5 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x2c}}, 0x0) 624.467639ms ago: executing program 5 (id=1417): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) 552.309676ms ago: executing program 4 (id=1418): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x8, "430b41aa9cd8269f10ba40900eda4725b99d6187f5c9acc7914f40a8c705de57"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000100)=0x1f) 411.692449ms ago: executing program 4 (id=1419): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000000010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7"], 0xf}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f000200000800000007000000", @ANYRES32=r1], 0x1c}}, 0x0) 242.499081ms ago: executing program 4 (id=1420): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 241.832071ms ago: executing program 5 (id=1430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000900)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 0s ago: executing program 2 (id=1421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000004400128009000100766c616e00000000340002800600010000000000280003800c00010000000000000000000c00011f00000100070000000c000100000000000310000008000500", @ANYRES32=r2], 0x6c}, 0x1, 0xba01}, 0x0) kernel console output (not intermixed with test programs): [ T5791] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.899674][ T5791] (syz.0.476,5791,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0x6a4501d0. Applying ECC. [ 131.007765][ T5791] (syz.0.476,5791,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7d05e7ff, computed 0x7dc2e7ff. Applying ECC. [ 131.036459][ T5791] (syz.0.476,5791,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7d05e7ff, computed 0x7dc2e7ff [ 131.078597][ T5791] (syz.0.476,5791,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 131.105213][ T5791] (syz.0.476,5791,1):ocfs2_quota_read:201 ERROR: status = -5 [ 131.115336][ T5791] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 2 [ 131.136061][ T5791] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 60929 [ 131.171850][ T5791] (syz.0.476,5791,1):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 131.257638][ T5812] netem: change failed [ 131.258426][ T5799] loop4: detected capacity change from 0 to 32768 [ 131.290934][ T5799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.479 (5799) [ 131.304024][ T4249] ocfs2: Unmounting device (7,0) on (node local) [ 131.350355][ T5799] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.377808][ T5799] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 131.410598][ T5799] BTRFS info (device loop4): using free space tree [ 131.522791][ T5804] loop5: detected capacity change from 0 to 32768 [ 131.618849][ T5799] BTRFS info (device loop4): enabling ssd optimizations [ 131.653358][ T5804] XFS (loop5): Mounting V5 Filesystem [ 131.770916][ T4250] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.880950][ T5853] loop0: detected capacity change from 0 to 128 [ 131.923275][ T5853] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.949487][ T5853] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.077699][ T5804] XFS (loop5): Ending clean mount [ 132.291454][ T4366] XFS (loop5): Unmounting Filesystem [ 132.311415][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 132.729522][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.735936][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.013155][ T5890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.508'. [ 133.091946][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.233069][ T5891] loop2: detected capacity change from 0 to 4096 [ 133.253368][ T5891] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 133.560902][ T5883] loop1: detected capacity change from 0 to 32768 [ 133.598196][ T5883] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.506 (5883) [ 133.650798][ T5883] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.682382][ T5883] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 133.702719][ T5883] BTRFS info (device loop1): enabling auto defrag [ 133.721819][ T5883] BTRFS info (device loop1): doing ref verification [ 133.722892][ T5881] loop0: detected capacity change from 0 to 32768 [ 133.735118][ T5883] BTRFS info (device loop1): use no compression [ 133.751788][ T5883] BTRFS info (device loop1): force clearing of disk cache [ 133.782184][ T5883] BTRFS info (device loop1): max_inline at 4096 [ 133.782351][ T5881] XFS: noikeep mount option is deprecated. [ 133.806895][ T5883] BTRFS info (device loop1): disabling free space tree [ 133.901010][ T5881] XFS (loop0): Mounting V5 Filesystem [ 133.944104][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.517'. [ 134.016792][ T5881] XFS (loop0): Ending clean mount [ 134.033339][ T5881] XFS (loop0): Quotacheck needed: Please wait. [ 134.060158][ T5883] BTRFS info (device loop1): enabling ssd optimizations [ 134.096530][ T5883] BTRFS info (device loop1): rebuilding free space tree [ 134.104222][ T5881] XFS (loop0): Quotacheck: Done. [ 134.121734][ T5883] BTRFS info (device loop1): disabling free space tree [ 134.143331][ T5883] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.199698][ T5883] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.253982][ T4249] XFS (loop0): Unmounting Filesystem [ 134.674433][ T5929] loop4: detected capacity change from 0 to 32768 [ 134.682020][ T5929] XFS: attr2 mount option is deprecated. [ 134.689544][ T4251] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.983920][ T5929] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 135.070727][ T5929] XFS (loop4): Quotacheck needed: Please wait. [ 135.225194][ T9] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 135.241477][ T9] XFS (loop4): Unmount and run xfs_repair [ 135.249567][ T9] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 135.257342][ T9] 00000000: 58 41 46 4c 00 00 00 00 bf dc 47 fc 10 d8 4e ed XAFL......G...N. [ 135.266424][ T9] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 135.276402][ T9] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 01 01 00 00 08 .;.............. [ 135.285863][ T9] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 135.295927][ T9] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 135.313715][ T9] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 135.324122][ T9] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 135.333799][ T9] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 135.343368][ T9] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74 [ 135.367975][ T5929] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 135.504753][ T4250] XFS (loop4): Unmounting Filesystem [ 135.746745][ T5982] device bridge_slave_0 left promiscuous mode [ 135.787081][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.836155][ T5982] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 136.348226][ T5994] loop4: detected capacity change from 0 to 4096 [ 136.439170][ T5994] ntfs3: loop4: failed to convert "0080" to maccenteuro [ 136.481585][ T5994] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 136.530334][ T5994] ntfs3: loop4: failed to convert name for inode 1e. [ 136.555248][ T4297] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.581284][ T6005] ntfs3: loop4: mft corrupted [ 136.609063][ T27] audit: type=1800 audit(1733516244.536:25): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.532" name="file2" dev="loop4" ino=33 res=0 errno=0 [ 136.657458][ T6011] loop0: detected capacity change from 0 to 128 [ 136.664507][ T6011] EXT4-fs: Ignoring removed nobh option [ 136.750026][ T6011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 136.770058][ T6011] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.783824][ T4297] usb 3-1: Using ep0 maxpacket: 32 [ 136.800842][ T4297] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 136.824964][ T6018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.550'. [ 136.833685][ T4297] usb 3-1: config 0 has no interface number 0 [ 136.838643][ T6018] device gretap0 entered promiscuous mode [ 136.847647][ T6018] batman_adv: batadv0: Adding interface: macvlan2 [ 136.854172][ T6018] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.871859][ T4297] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 136.881671][ T6018] batman_adv: batadv0: Interface activated: macvlan2 [ 136.949249][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.962816][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 136.977778][ T4297] usb 3-1: Product: syz [ 136.981999][ T4297] usb 3-1: Manufacturer: syz [ 136.995104][ T4297] usb 3-1: SerialNumber: syz [ 137.002258][ T4297] usb 3-1: config 0 descriptor?? [ 137.011471][ T4297] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 137.076490][ T26] kernel write not supported for file /215/attr/current (pid: 26 comm: kworker/1:1) [ 137.366905][ T6009] loop5: detected capacity change from 0 to 32768 [ 137.491173][ T6036] loop4: detected capacity change from 0 to 512 [ 137.509495][ T6036] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 137.526359][ T6036] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.568803][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 91 [ 137.582910][ T4297] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 137.624228][ T4297] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 137.661911][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 137.695176][ T4298] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 137.752445][ T6044] loop4: detected capacity change from 0 to 512 [ 137.780553][ T6044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.789451][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 137.790306][ T4466] usb 3-1: USB disconnect, device number 5 [ 137.805962][ T4466] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 137.819704][ T4466] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 137.831448][ T4466] quatech2 3-1:0.51: device disconnected [ 137.875397][ T4298] usb 2-1: Using ep0 maxpacket: 8 [ 137.884243][ T4298] usb 2-1: config 0 has no interfaces? [ 137.904532][ T4298] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.923854][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.932751][ T4298] usb 2-1: Product: syz [ 137.937932][ T4298] usb 2-1: Manufacturer: syz [ 137.942572][ T4298] usb 2-1: SerialNumber: syz [ 137.949238][ T4298] usb 2-1: config 0 descriptor?? [ 137.958492][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 138.098735][ T6042] loop5: detected capacity change from 0 to 32768 [ 138.110217][ T6042] XFS (loop5): Invalid device [./file0], error=-15 [ 138.169484][ T4350] usb 2-1: USB disconnect, device number 9 [ 138.451345][ T6057] netlink: 277 bytes leftover after parsing attributes in process `syz.0.565'. [ 138.578684][ T6061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.568'. [ 139.002110][ T6071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.062099][ T6074] loop1: detected capacity change from 0 to 1024 [ 139.077086][ T6071] bond0: (slave bond1): Enslaving as an active interface with an up link [ 139.145586][ T6059] loop5: detected capacity change from 0 to 40427 [ 139.154406][ T6059] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 139.165888][ T6074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.172542][ T6074] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.191747][ T6059] F2FS-fs (loop5): invalid crc value [ 139.232049][ T6074] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 139.243883][ T6059] F2FS-fs (loop5): Found nat_bits in checkpoint [ 139.315432][ T6085] loop0: detected capacity change from 0 to 128 [ 139.326351][ T6059] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 139.335391][ T6085] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 139.359113][ T27] audit: type=1804 audit(1733516247.286:26): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.567" name="/newroot/99/file0/file0" dev="loop5" ino=10 res=1 errno=0 [ 139.399465][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 139.467854][ T4366] syz-executor: attempt to access beyond end of device [ 139.467854][ T4366] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.484773][ T6085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.684637][ T6095] loop4: detected capacity change from 0 to 256 [ 139.738424][ T6095] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 139.762766][ T6098] loop0: detected capacity change from 0 to 128 [ 139.821710][ T6098] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 139.987168][ T4249] sysv_free_block: trying to free block not in datazone [ 140.021376][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 140.030338][ T6106] loop4: detected capacity change from 0 to 2048 [ 140.111018][ T6106] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.185304][ T6106] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.248886][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 140.313492][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.580'. [ 140.437262][ T6119] loop4: detected capacity change from 0 to 2048 [ 140.483319][ T6119] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.523328][ T6119] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.598936][ T6107] loop2: detected capacity change from 0 to 32768 [ 140.607245][ T6107] XFS: ikeep mount option is deprecated. [ 140.655993][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 140.681816][ T6107] XFS (loop2): Mounting V5 Filesystem [ 140.761939][ T6107] XFS (loop2): Ending clean mount [ 140.798866][ T6107] XFS (loop2): Quotacheck needed: Please wait. [ 140.886234][ T6136] loop4: detected capacity change from 0 to 4096 [ 140.891168][ T6107] XFS (loop2): Quotacheck: Done. [ 140.895842][ T6136] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 140.957800][ T6136] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 140.992202][ T6136] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 141.049080][ T4257] XFS (loop2): Unmounting Filesystem [ 142.031030][ T6140] loop4: detected capacity change from 0 to 32768 [ 142.115937][ T6140] XFS (loop4): Mounting V5 Filesystem [ 142.259560][ T6140] XFS (loop4): Ending clean mount [ 142.284148][ T6140] XFS (loop4): Quotacheck needed: Please wait. [ 142.398093][ T6140] XFS (loop4): Quotacheck: Done. [ 142.592500][ T4250] XFS (loop4): Unmounting Filesystem [ 142.636729][ T6190] loop2: detected capacity change from 0 to 1024 [ 142.686622][ T6190] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.781759][ T6190] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 142.811368][ T6190] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.853927][ T6190] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 142.892751][ T6190] System zones: 0-1, 3-36 [ 142.912715][ T6204] loop1: detected capacity change from 0 to 512 [ 142.931209][ T6190] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.936572][ T6190] EXT4-fs warning (device loop2): ext4_resize_fs:2028: can't read last block, resize aborted [ 142.963655][ T6204] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.062257][ T6204] EXT4-fs (loop1): 1 truncate cleaned up [ 143.074264][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 143.171298][ T6204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 143.251510][ T6204] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.621: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 143.345188][ T6204] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 143.497462][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 143.547492][ T6213] loop4: detected capacity change from 0 to 4096 [ 143.644684][ T6213] ntfs: volume version 3.1. [ 143.653193][ T6220] program syz.2.627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.692573][ T6213] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 143.764125][ T6213] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 143.867687][ T6224] loop5: detected capacity change from 0 to 256 [ 143.899331][ T6227] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 143.992211][ T6224] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 144.032315][ T6229] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.108771][ T6229] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 144.129855][ T6235] tun0: tun_chr_ioctl cmd 2148553947 [ 144.141688][ T6229] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 144.149972][ T6210] loop0: detected capacity change from 0 to 32768 [ 144.163524][ T6210] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz.0.624 (6210) [ 144.195976][ T6210] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 144.232269][ T4366] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 144.232958][ T6210] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 144.263120][ T6210] BTRFS info (device loop0): enabling ssd optimizations [ 144.275334][ T6210] BTRFS info (device loop0): using spread ssd allocation scheme [ 144.303441][ T6210] BTRFS info (device loop0): not using spread ssd allocation scheme [ 144.330090][ T6210] BTRFS info (device loop0): disabling tree log [ 144.344810][ T6210] BTRFS info (device loop0): turning on sync discard [ 144.357984][ T6210] BTRFS info (device loop0): setting nodatacow, compression disabled [ 144.367162][ T6210] BTRFS info (device loop0): force clearing of disk cache [ 144.374344][ T6210] BTRFS info (device loop0): using spread ssd allocation scheme [ 144.389087][ T6210] BTRFS info (device loop0): setting datasum, datacow enabled [ 144.400121][ T6210] BTRFS info (device loop0): using free space tree [ 144.405675][ T4263] Bluetooth: hci0: command 0x0401 tx timeout [ 144.513875][ T6210] BTRFS info (device loop0): rebuilding free space tree [ 144.639131][ T6252] loop1: detected capacity change from 0 to 4096 [ 144.675767][ T4249] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 144.699711][ T6252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.706697][ T6272] vcan0: tx drop: invalid sa for name 0x0008000000000000 [ 144.727958][ T4895] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 144.935359][ T4895] usb 6-1: Using ep0 maxpacket: 32 [ 144.942711][ T4895] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.969594][ T6274] loop4: detected capacity change from 0 to 2048 [ 144.975110][ T4895] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.001248][ T4895] usb 6-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 145.004941][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 145.027170][ T4895] usb 6-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 145.029764][ T6274] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value [ 145.063081][ T4895] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.086355][ T4895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.094415][ T4895] usb 6-1: Product: syz [ 145.115333][ T4895] usb 6-1: Manufacturer: syz [ 145.119999][ T4895] usb 6-1: SerialNumber: syz [ 145.385912][ T4895] usb 6-1: USB disconnect, device number 5 [ 145.772927][ T6276] loop0: detected capacity change from 0 to 40427 [ 145.801126][ T6276] F2FS-fs (loop0): invalid crc value [ 145.846910][ T6276] F2FS-fs (loop0): Found nat_bits in checkpoint [ 145.900932][ T6304] loop4: detected capacity change from 0 to 1024 [ 145.917770][ T4467] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.936881][ T6304] EXT4-fs: Ignoring removed nobh option [ 145.963752][ T6276] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 145.977056][ T6304] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz.4.657: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 145.977386][ T6276] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 146.024994][ T6311] netlink: 84 bytes leftover after parsing attributes in process `syz.5.659'. [ 146.044743][ T6304] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.657: couldn't read orphan inode 11 (err -117) [ 146.057796][ T6299] f2fs_ckpt-7:0: attempt to access beyond end of device [ 146.057796][ T6299] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.078976][ T6304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.115215][ T4467] usb 3-1: Using ep0 maxpacket: 16 [ 146.124437][ T4467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.189638][ T4467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.205224][ T6304] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.657: Invalid block bitmap block 0 in block_group 0 [ 146.219881][ T4467] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 146.230578][ T4467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.244331][ T4467] usb 3-1: config 0 descriptor?? [ 146.255642][ T6304] Quota error (device loop4): write_blk: dquota write failed [ 146.267918][ T6304] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 146.294272][ T6304] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.657: Failed to acquire dquot type 0 [ 146.306990][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.662'. [ 146.424022][ T34] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm kworker/u4:2: Invalid inode table block 8589934593 in block_group 0 [ 146.483930][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 146.653358][ T6328] loop1: detected capacity change from 0 to 16 [ 146.681593][ T6328] erofs: (device loop1): mounted with root inode @ nid 36. [ 146.708135][ T4467] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 146.732390][ T6328] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 146.761848][ T6328] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 146.780022][ T6328] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 146.882156][ T4467] usb 3-1: USB disconnect, device number 6 [ 147.386871][ T6352] loop5: detected capacity change from 0 to 64 [ 147.432830][ T6352] overlayfs: upper fs needs to support d_type. [ 147.486597][ T6352] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 147.514024][ T6352] overlayfs: failed to set xattr on upper [ 147.520474][ T6352] overlayfs: ...falling back to index=off,metacopy=off. [ 147.552606][ T6342] loop0: detected capacity change from 0 to 32768 [ 147.671741][ T6362] loop4: detected capacity change from 0 to 8 [ 147.783355][ T6356] syz.1.680 (6356): drop_caches: 2 [ 147.795989][ T4309] kworker/u4:6: attempt to access beyond end of device [ 147.795989][ T4309] loop5: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 147.821197][ T4309] Buffer I/O error on dev loop5, logical block 134217734, lost async page write [ 147.851381][ T6362] SQUASHFS error: Failed to read block 0x4de: -5 [ 147.852391][ T6342] ERROR: (device loop0): dtReadFirst: btstack overrun [ 147.852391][ T6342] [ 147.885730][ T4366] Trying to free block not in datazone [ 147.886794][ T6362] SQUASHFS error: Failed to read block 0x4de: -5 [ 147.935575][ T27] audit: type=1800 audit(1733516255.856:27): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.684" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 147.977961][ T6342] ERROR: (device loop0): remounting filesystem as read-only [ 147.994484][ T6342] btstack dump: [ 147.998860][ T6342] bn = 0, index = 0 [ 148.002701][ T6342] bn = 0, index = 0 [ 148.012609][ T6342] bn = 0, index = 0 [ 148.022239][ T6342] bn = 0, index = 0 [ 148.026383][ T6342] bn = 0, index = 0 [ 148.055775][ T6342] bn = 0, index = 0 [ 148.059647][ T6342] bn = 0, index = 0 [ 148.063484][ T6342] bn = 0, index = 0 [ 148.087675][ T6366] ERROR: (device loop0): dtSearch: stack overrun! [ 148.087675][ T6366] [ 148.105879][ T6366] btstack dump: [ 148.109410][ T6366] bn = 0, index = 4 [ 148.144518][ T6366] bn = 0, index = 4 [ 148.171367][ T6366] bn = 0, index = 4 [ 148.181533][ T6366] bn = 0, index = 4 [ 148.217735][ T6366] bn = 0, index = 4 [ 148.243587][ T6366] bn = 0, index = 4 [ 148.254147][ T6366] bn = 0, index = 4 [ 148.258147][ T6366] bn = 0, index = 0 [ 148.262015][ T6366] jfs_lookup: dtSearch returned -5 [ 148.498310][ T6386] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 148.751238][ T6397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.698'. [ 148.948038][ T6402] loop0: detected capacity change from 0 to 128 [ 148.971669][ T6402] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 149.105755][ T4249] sysv_free_block: trying to free block not in datazone [ 149.126956][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 149.275358][ T6412] device syz_tun entered promiscuous mode [ 149.300381][ T6412] device syz_tun left promiscuous mode [ 149.498423][ T6392] loop4: detected capacity change from 0 to 32768 [ 149.502384][ T6418] relay: one or more items not logged [item size (56) > sub-buffer size (1)] [ 149.565230][ T4467] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 149.588651][ T6392] XFS (loop4): Mounting V5 Filesystem [ 149.698772][ T6392] XFS (loop4): Ending clean mount [ 149.766954][ T4467] usb 6-1: Using ep0 maxpacket: 8 [ 149.777047][ T4467] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.814513][ T4467] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.853818][ T4467] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.864730][ T4250] XFS (loop4): Unmounting Filesystem [ 149.876923][ T4467] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.889773][ T4467] usb 6-1: Product: syz [ 149.894245][ T4467] usb 6-1: Manufacturer: syz [ 149.901889][ T4467] usb 6-1: SerialNumber: syz [ 150.716290][ T6434] loop0: detected capacity change from 0 to 40427 [ 150.752387][ T4467] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 150.777552][ T4467] cdc_ncm 6-1:1.0: bind() failure [ 150.801845][ T6434] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.826015][ T6458] ipt_CLUSTERIP: Please specify destination IP [ 150.829871][ T4467] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 150.859858][ T4467] cdc_ncm 6-1:1.1: bind() failure [ 150.883526][ T4467] usb 6-1: USB disconnect, device number 6 [ 150.979054][ T6434] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.981408][ T6462] loop2: detected capacity change from 0 to 1024 [ 151.016277][ T6462] EXT4-fs: Ignoring removed orlov option [ 151.028809][ T6462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.062217][ T6462] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 151.095219][ T6462] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 151.122681][ T6462] EXT4-fs (loop2): invalid journal inode [ 151.134169][ T6462] EXT4-fs (loop2): can't get journal size [ 151.161147][ T4249] syz-executor: attempt to access beyond end of device [ 151.161147][ T4249] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.182515][ T6462] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 151.202431][ T6471] loop4: detected capacity change from 0 to 512 [ 151.319083][ T6471] EXT4-fs (loop4): 1 orphan inode deleted [ 151.343199][ T6471] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.365442][ T6471] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.369642][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 151.392802][ T2959] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 151.423582][ T6471] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.724: corrupted xattr block 19 [ 151.455385][ T2959] EXT4-fs error (device loop4): ext4_release_dquot:6824: comm kworker/u4:5: Failed to release dquot type 1 [ 151.504172][ T6471] EXT4-fs error (device loop4): ext4_get_inode_usage:852: inode #15: comm syz.4.724: corrupted xattr block 19 [ 151.653837][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 151.665428][ T4323] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 151.694466][ T6485] loop5: detected capacity change from 0 to 512 [ 151.704306][ T4323] EXT4-fs error (device loop4): ext4_release_dquot:6824: comm kworker/u4:7: Failed to release dquot type 1 [ 151.717174][ T6485] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 151.773032][ T6485] EXT4-fs (loop5): 1 truncate cleaned up [ 151.782994][ T6485] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 151.809834][ T6491] loop2: detected capacity change from 0 to 256 [ 151.878685][ T6493] loop1: detected capacity change from 0 to 4096 [ 151.890485][ T6493] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 152.039409][ T4366] EXT4-fs (loop5): unmounting filesystem. [ 152.965267][ T4263] Bluetooth: hci1: command 0x0405 tx timeout [ 153.027931][ T6508] loop0: detected capacity change from 0 to 32768 [ 153.038635][ T6508] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.738 (6508) [ 153.053733][ T6508] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 153.064324][ T6508] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 153.073999][ T6508] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 153.096757][ T6508] BTRFS info (device loop0): use lzo compression, level 0 [ 153.109155][ T6508] BTRFS info (device loop0): using free space tree [ 153.327909][ T6508] BTRFS info (device loop0): enabling ssd optimizations [ 153.629009][ T4249] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 154.000333][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 154.237316][ T6574] loop2: detected capacity change from 0 to 1024 [ 154.348925][ T6577] netlink: 'syz.5.761': attribute type 1 has an invalid length. [ 154.371597][ T6573] loop1: detected capacity change from 0 to 8192 [ 154.395128][ T6577] netlink: 'syz.5.761': attribute type 2 has an invalid length. [ 154.411288][ T6573] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 154.431522][ T6577] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 154.458340][ T4323] hfsplus: b-tree write err: -5, ino 4 [ 154.479276][ T6573] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 154.525376][ T6573] REISERFS (device loop1): using ordered data mode [ 154.531940][ T6573] reiserfs: using flush barriers [ 154.552470][ T6573] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 154.610805][ T6573] REISERFS (device loop1): checking transaction log (loop1) [ 154.837818][ T6573] REISERFS (device loop1): Using tea hash to sort names [ 154.860097][ T6573] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 154.963362][ T6592] loop5: detected capacity change from 0 to 64 [ 155.108784][ T6597] loop4: detected capacity change from 0 to 256 [ 155.151603][ T6597] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.212653][ T6597] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 155.281846][ T6597] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe563dbae, utbl_chksum : 0xe619d30d) [ 155.302319][ T6578] loop0: detected capacity change from 0 to 32768 [ 155.310573][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.771'. [ 155.330355][ T6578] XFS: noikeep mount option is deprecated. [ 155.416801][ T6578] XFS (loop0): Mounting V5 Filesystem [ 155.569986][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.773'. [ 155.610861][ T6578] XFS (loop0): Ending clean mount [ 155.616161][ T6625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.773'. [ 155.640920][ T6578] XFS (loop0): Quotacheck needed: Please wait. [ 155.759302][ T6578] XFS (loop0): Quotacheck: Done. [ 155.844795][ T6632] /dev/loop0: Can't open blockdev [ 155.909025][ T4249] XFS (loop0): Unmounting Filesystem [ 156.377732][ T6648] loop5: detected capacity change from 0 to 1024 [ 156.523685][ T6650] loop1: detected capacity change from 0 to 4096 [ 156.570115][ T6650] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 156.649291][ T6650] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 156.682749][ T6650] ntfs3: loop1: Failed to load $Extend. [ 157.109841][ T6646] loop2: detected capacity change from 0 to 32768 [ 157.274809][ T6646] XFS (loop2): Mounting V5 Filesystem [ 157.356422][ T6646] XFS (loop2): Ending clean mount [ 157.525683][ T4263] Bluetooth: hci1: command 0x0405 tx timeout [ 157.585977][ T6665] loop0: detected capacity change from 0 to 32768 [ 157.627026][ T6665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.793 (6665) [ 157.644620][ T4257] XFS (loop2): Unmounting Filesystem [ 157.676508][ T6665] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.734629][ T6665] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 157.754921][ T6665] BTRFS info (device loop0): allowing degraded mounts [ 157.776278][ T6665] BTRFS info (device loop0): metadata ratio 4 [ 157.782441][ T6665] BTRFS info (device loop0): turning on sync discard [ 157.810727][ T6665] BTRFS info (device loop0): turning off discard [ 157.844016][ T6665] BTRFS info (device loop0): turning on sync discard [ 157.878988][ T6665] BTRFS info (device loop0): disabling tree log [ 157.895197][ T6665] BTRFS info (device loop0): using free space tree [ 158.178129][ T6698] loop5: detected capacity change from 0 to 32768 [ 158.194320][ T6665] BTRFS info (device loop0): enabling ssd optimizations [ 158.273747][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 158.308922][ T6698] XFS (loop5): Mounting V5 Filesystem [ 158.379357][ T6745] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.388826][ T6745] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.397645][ T6745] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.406457][ T6745] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.419913][ T6745] Zero length message leads to an empty skb [ 158.433010][ T6698] XFS (loop5): Ending clean mount [ 158.457559][ T6698] XFS (loop5): Quotacheck needed: Please wait. [ 158.459619][ T4249] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.542462][ T6698] XFS (loop5): Quotacheck: Done. [ 158.633257][ T6698] syz.5.803: attempt to access beyond end of device [ 158.633257][ T6698] loop5: rw=4096, sector=15102180043050188799, nr_sectors = 1 limit=32768 [ 158.665173][ T4467] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 158.830658][ T4366] XFS (loop5): Unmounting Filesystem [ 158.855196][ T4467] usb 5-1: Using ep0 maxpacket: 16 [ 158.862561][ T4467] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 158.901756][ T4467] usb 5-1: config 0 has no interface number 0 [ 158.903378][ T6754] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 158.911906][ T4467] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 158.932792][ T6754] syzkaller0: linktype set to 823 [ 158.958318][ T4467] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 158.988478][ T4467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.026387][ T4467] usb 5-1: Product: syz [ 159.039364][ T4467] usb 5-1: Manufacturer: syz [ 159.048765][ T4467] usb 5-1: SerialNumber: syz [ 159.072641][ T4467] usb 5-1: config 0 descriptor?? [ 159.429880][ T6768] : renamed from bond0 [ 159.705484][ T4467] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 159.733290][ T4467] usb 5-1: USB disconnect, device number 7 [ 159.815137][ T4887] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 159.854798][ T6787] program syz.1.833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.008118][ T4887] usb 3-1: Using ep0 maxpacket: 16 [ 160.021430][ T4887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.047736][ T4887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.080035][ T6780] loop5: detected capacity change from 0 to 32768 [ 160.087922][ T4887] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 160.115998][ T4887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.122195][ T6780] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.830 (6780) [ 160.125853][ T4887] usb 3-1: config 0 descriptor?? [ 160.170902][ T6780] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.191720][ T6780] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 160.222029][ T6780] BTRFS info (device loop5): using free space tree [ 160.432043][ T6780] BTRFS info (device loop5): enabling ssd optimizations [ 160.521485][ T6791] loop1: detected capacity change from 0 to 32768 [ 160.538813][ T6791] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.835 (6791) [ 160.563840][ T4887] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 160.573867][ T6784] loop0: detected capacity change from 0 to 32768 [ 160.586776][ T4887] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 160.668731][ T4366] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.686882][ T6784] XFS (loop0): Mounting V5 Filesystem [ 160.762721][ T4887] corsair 0003:1B1C:1B02.0002: Read invalid backlight brightness: db. [ 161.035319][ T6784] XFS (loop0): Ending clean mount [ 161.054448][ T4894] usb 3-1: USB disconnect, device number 7 [ 161.185845][ T4249] XFS (loop0): Unmounting Filesystem [ 161.554572][ T6845] loop4: detected capacity change from 0 to 256 [ 161.570369][ T6846] loop5: detected capacity change from 0 to 256 [ 161.631906][ T6846] FAT-fs (loop5): Directory bread(block 64) failed [ 161.665148][ T6846] FAT-fs (loop5): Directory bread(block 65) failed [ 161.671827][ T6846] FAT-fs (loop5): Directory bread(block 66) failed [ 161.699410][ T6846] FAT-fs (loop5): Directory bread(block 67) failed [ 161.709807][ T6846] FAT-fs (loop5): Directory bread(block 68) failed [ 161.728323][ T6846] FAT-fs (loop5): Directory bread(block 69) failed [ 161.742797][ T6846] FAT-fs (loop5): Directory bread(block 70) failed [ 161.760020][ T6846] FAT-fs (loop5): Directory bread(block 71) failed [ 161.780362][ T6846] FAT-fs (loop5): Directory bread(block 72) failed [ 161.800537][ T6846] FAT-fs (loop5): Directory bread(block 73) failed [ 161.815283][ T4467] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.835815][ T6848] ebtables: ebtables: counters copy to user failed while replacing table [ 161.975925][ T6862] loop5: detected capacity change from 0 to 256 [ 162.005238][ T4467] usb 2-1: Using ep0 maxpacket: 32 [ 162.012408][ T4467] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 162.041795][ T4467] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 162.070371][ T4467] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 162.090985][ T4467] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 162.110018][ T4467] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.142754][ T4467] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 162.170658][ T4467] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 162.194590][ T4467] usb 2-1: Product: syz [ 162.214570][ T4467] usb 2-1: Manufacturer: syz [ 162.223695][ T4467] usb 2-1: SerialNumber: syz [ 162.240486][ T4467] usb 2-1: config 0 descriptor?? [ 162.261762][ T4467] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 162.271354][ T4466] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.277339][ T6872] program syz.2.859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.313944][ T4467] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 162.458441][ T6882] loop4: detected capacity change from 0 to 512 [ 162.465260][ T4466] usb 1-1: Using ep0 maxpacket: 16 [ 162.476690][ T4466] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 162.501548][ T4466] usb 1-1: config 0 has no interface number 0 [ 162.501784][ T6830] usb 2-1: USB disconnect, device number 10 [ 162.507946][ T6882] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.508216][ T4466] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.536405][ T4466] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 162.552381][ T6830] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 162.560073][ T4466] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 162.572083][ T6882] EXT4-fs (loop4): 1 truncate cleaned up [ 162.585126][ T6882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 162.598417][ T4466] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 162.615342][ T4466] usb 1-1: Product: syz [ 162.620335][ T4466] usb 1-1: SerialNumber: syz [ 162.631327][ T4466] usb 1-1: config 0 descriptor?? [ 162.642420][ T4466] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 162.656326][ T4466] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input15 [ 162.697288][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 162.874715][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.884633][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.893859][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.905222][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.912554][ T4467] usb 1-1: USB disconnect, device number 6 [ 162.932709][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 162.940686][ T4467] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 163.201462][ T6887] loop2: detected capacity change from 0 to 32768 [ 163.233928][ T6887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.865 (6887) [ 163.263832][ T6887] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.284806][ T6887] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 163.301339][ T6887] BTRFS info (device loop2): allowing degraded mounts [ 163.315128][ T6887] BTRFS info (device loop2): metadata ratio 4 [ 163.329728][ T6887] BTRFS info (device loop2): turning on sync discard [ 163.345237][ T6887] BTRFS info (device loop2): turning off discard [ 163.353412][ T6893] loop4: detected capacity change from 0 to 32768 [ 163.361850][ T6887] BTRFS info (device loop2): turning on sync discard [ 163.377457][ T6887] BTRFS info (device loop2): disabling tree log [ 163.384096][ T6887] BTRFS info (device loop2): using free space tree [ 163.429140][ T6893] XFS (loop4): Mounting V5 Filesystem [ 163.549535][ T6893] XFS (loop4): Ending clean mount [ 163.562839][ T6893] XFS (loop4): Quotacheck needed: Please wait. [ 163.648895][ T6887] BTRFS info (device loop2): enabling ssd optimizations [ 163.663413][ T6938] loop1: detected capacity change from 0 to 512 [ 163.671492][ T6938] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.675808][ T6893] XFS (loop4): Quotacheck: Done. [ 163.723036][ T6938] EXT4-fs (loop1): 1 truncate cleaned up [ 163.732942][ T6938] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 163.785811][ T6893] syz.4.867: attempt to access beyond end of device [ 163.785811][ T6893] loop4: rw=4096, sector=15102180043050188799, nr_sectors = 1 limit=32768 [ 163.802569][ T6936] loop5: detected capacity change from 0 to 8192 [ 163.814903][ T6941] program syz.0.876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.835430][ T6936] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.867851][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 163.924507][ T6936] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 163.943838][ T4257] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.949711][ T6936] REISERFS (device loop5): using ordered data mode [ 163.961301][ T6936] reiserfs: using flush barriers [ 163.974265][ T4250] XFS (loop4): Unmounting Filesystem [ 163.979810][ T6936] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.003172][ T6936] REISERFS (device loop5): checking transaction log (loop5) [ 164.163177][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.325658][ T6936] REISERFS (device loop5): Using tea hash to sort names [ 164.333154][ T6936] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 165.146618][ T4894] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 165.203476][ T6955] loop1: detected capacity change from 0 to 32768 [ 165.216525][ T6955] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.886 (6955) [ 165.259846][ T6955] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.280536][ T6955] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 165.282033][ T6982] loop0: detected capacity change from 0 to 2048 [ 165.295233][ T6955] BTRFS info (device loop1): using free space tree [ 165.308205][ T6982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.345178][ T4894] usb 6-1: Using ep0 maxpacket: 16 [ 165.361005][ T4894] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 165.390946][ T4894] usb 6-1: config 0 has no interface number 0 [ 165.411287][ T4894] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 165.465498][ T4894] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 165.505174][ T4894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.533689][ T4894] usb 6-1: Product: syz [ 165.538183][ T4894] usb 6-1: Manufacturer: syz [ 165.543357][ T4894] usb 6-1: SerialNumber: syz [ 165.556961][ T4894] usb 6-1: config 0 descriptor?? [ 165.594601][ T6955] BTRFS info (device loop1): enabling ssd optimizations [ 165.721242][ T6983] loop4: detected capacity change from 0 to 32768 [ 165.738340][ T6983] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.895 (6983) [ 165.812955][ T4251] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.191267][ T7008] loop0: detected capacity change from 0 to 8192 [ 166.206102][ T4894] usbtouchscreen: probe of 6-1:0.214 failed with error -71 [ 166.212387][ T6979] loop2: detected capacity change from 0 to 32768 [ 166.226445][ T4894] usb 6-1: USB disconnect, device number 7 [ 166.232344][ T7008] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.248866][ T7008] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 166.258524][ T7008] REISERFS (device loop0): using ordered data mode [ 166.265202][ T7008] reiserfs: using flush barriers [ 166.271751][ T7008] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.288640][ T7008] REISERFS (device loop0): checking transaction log (loop0) [ 166.345495][ T6979] XFS (loop2): Mounting V5 Filesystem [ 166.443254][ T7008] REISERFS (device loop0): Using tea hash to sort names [ 166.450885][ T7008] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 166.498508][ T6979] XFS (loop2): Ending clean mount [ 166.552898][ T6979] XFS (loop2): Quotacheck needed: Please wait. [ 166.628926][ T6979] XFS (loop2): Quotacheck: Done. [ 166.663790][ T6979] syz.2.896: attempt to access beyond end of device [ 166.663790][ T6979] loop2: rw=4096, sector=15102180043050188799, nr_sectors = 1 limit=32768 [ 166.728863][ T4257] XFS (loop2): Unmounting Filesystem [ 167.118011][ T7044] loop4: detected capacity change from 0 to 128 [ 167.151917][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.916'. [ 167.343922][ T7052] tun0: tun_chr_ioctl cmd 1074025694 [ 167.612711][ T7059] loop2: detected capacity change from 0 to 8192 [ 167.632184][ T7059] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 167.651449][ T7059] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 167.662645][ T7059] REISERFS (device loop2): using ordered data mode [ 167.675134][ T7059] reiserfs: using flush barriers [ 167.682484][ T7059] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.707360][ T7059] REISERFS (device loop2): checking transaction log (loop2) [ 167.856476][ T7062] tap0: tun_chr_ioctl cmd 1074812118 [ 167.968689][ T7059] REISERFS (device loop2): Using tea hash to sort names [ 167.987922][ T7059] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 168.118816][ T7072] input: syz1 as /devices/virtual/input/input17 [ 168.253385][ T7078] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 168.274359][ T7076] loop0: detected capacity change from 0 to 512 [ 168.322829][ T7076] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.382359][ T7076] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.940: invalid block [ 168.423912][ T7076] EXT4-fs (loop0): Remounting filesystem read-only [ 168.439830][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 168.441387][ T7076] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.940: invalid indirect mapped block 4294967295 (level 1) [ 168.506067][ T7076] EXT4-fs (loop0): Remounting filesystem read-only [ 168.528358][ T7076] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.940: invalid indirect mapped block 4294967295 (level 1) [ 168.575958][ T7076] EXT4-fs (loop0): Remounting filesystem read-only [ 168.582802][ T7076] EXT4-fs (loop0): 2 truncates cleaned up [ 168.610999][ T7091] loop5: detected capacity change from 0 to 2048 [ 168.613063][ T7094] loop1: detected capacity change from 0 to 512 [ 168.623218][ T7076] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.644159][ T7091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.653778][ T7094] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 168.694263][ T7094] EXT4-fs (loop1): invalid journal inode [ 168.707689][ T7094] EXT4-fs (loop1): can't get journal size [ 168.734061][ T7076] EXT4-fs (loop0): shut down requested (2) [ 168.758657][ T7094] EXT4-fs (loop1): 1 truncate cleaned up [ 168.786372][ T7094] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 168.867206][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 168.964113][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 169.440671][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.5.946'. [ 169.631805][ T7124] loop0: detected capacity change from 0 to 128 [ 169.683329][ T7121] loop4: detected capacity change from 0 to 8192 [ 169.702546][ T7121] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 169.723453][ T7121] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 169.734715][ T7121] REISERFS (device loop4): using ordered data mode [ 169.742351][ T7121] reiserfs: using flush barriers [ 169.760932][ T7121] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.785172][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.785989][ T7121] REISERFS (device loop4): checking transaction log (loop4) [ 169.920401][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.949'. [ 169.979796][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 169.992956][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 170.012270][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 170.024913][ T7121] REISERFS (device loop4): Using tea hash to sort names [ 170.038192][ T7121] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 170.049538][ T26] usb 3-1: New USB device found, idVendor=9dab, idProduct=cd84, bcdDevice= 4.75 [ 170.066938][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 170.092973][ T26] usb 3-1: Product: syz [ 170.097402][ T26] usb 3-1: Manufacturer: syz [ 170.102030][ T26] usb 3-1: SerialNumber: syz [ 170.127432][ T26] usb 3-1: config 0 descriptor?? [ 170.361030][ T26] usb 3-1: USB disconnect, device number 8 [ 170.427906][ T7140] loop4: detected capacity change from 0 to 2048 [ 170.440068][ T7140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.594470][ T7143] loop5: detected capacity change from 0 to 8192 [ 170.603498][ T7143] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.616722][ T7143] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 170.629323][ T7143] REISERFS (device loop5): using ordered data mode [ 170.636039][ T7143] reiserfs: using flush barriers [ 170.642339][ T7143] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.659632][ T7143] REISERFS (device loop5): checking transaction log (loop5) [ 170.718778][ T7143] REISERFS (device loop5): Using tea hash to sort names [ 170.733566][ T7143] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 171.100207][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.962'. [ 171.248532][ T7167] loop2: detected capacity change from 0 to 512 [ 171.264669][ T7167] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 171.274826][ T7167] EXT4-fs (loop2): invalid journal inode [ 171.287996][ T7167] EXT4-fs (loop2): can't get journal size [ 171.304752][ T7167] EXT4-fs (loop2): 1 truncate cleaned up [ 171.313126][ T7167] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 171.355121][ T26] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 171.470015][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 171.477605][ T7174] input: syz1 as /devices/virtual/input/input18 [ 171.519797][ T7176] loop1: detected capacity change from 0 to 128 [ 171.547433][ T26] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.564149][ T26] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.584026][ T26] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.595423][ T7176] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 171.604126][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.624675][ T26] usb 6-1: Product: syz [ 171.629106][ T7176] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.639765][ T26] usb 6-1: Manufacturer: syz [ 171.644403][ T26] usb 6-1: SerialNumber: syz [ 171.858798][ T26] usb 6-1: 0:2 : does not exist [ 171.870336][ T26] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 171.881719][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 171.910766][ T26] usb 6-1: USB disconnect, device number 8 [ 172.401884][ T7178] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 172.435161][ T4887] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 172.523436][ T7198] loop1: detected capacity change from 0 to 128 [ 172.544640][ T7198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.553677][ T7198] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.624804][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 172.645330][ T4887] usb 1-1: Using ep0 maxpacket: 8 [ 172.654234][ T4887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 172.667610][ T4887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 172.679800][ T4887] usb 1-1: New USB device found, idVendor=9dab, idProduct=cd84, bcdDevice= 4.75 [ 172.689075][ T4887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 172.697504][ T4887] usb 1-1: Product: syz [ 172.701737][ T4887] usb 1-1: Manufacturer: syz [ 172.706481][ T4887] usb 1-1: SerialNumber: syz [ 172.712501][ T4887] usb 1-1: config 0 descriptor?? [ 172.928331][ T4887] usb 1-1: USB disconnect, device number 7 [ 173.602515][ T7213] loop4: detected capacity change from 0 to 512 [ 173.609381][ T4262] Bluetooth: hci0: command 0x080f tx timeout [ 173.627304][ T7213] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 173.637163][ T7213] EXT4-fs (loop4): invalid journal inode [ 173.642714][ T7215] input: syz1 as /devices/virtual/input/input19 [ 173.642988][ T7213] EXT4-fs (loop4): can't get journal size [ 173.667402][ T7213] EXT4-fs (loop4): 1 truncate cleaned up [ 173.675715][ T7213] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.836249][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 173.929250][ T7228] device vlan2 entered promiscuous mode [ 174.118103][ T7235] loop0: detected capacity change from 0 to 2048 [ 174.145235][ T4894] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 174.163754][ T7235] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.337007][ T4894] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.355060][ T4894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.378453][ T4894] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.396383][ T4894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.414686][ T4894] usb 2-1: Product: syz [ 174.418959][ T4894] usb 2-1: Manufacturer: syz [ 174.423608][ T4894] usb 2-1: SerialNumber: syz [ 174.537684][ T5190] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 174.658220][ T4894] usb 2-1: 0:2 : does not exist [ 174.671795][ T4894] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 174.710157][ T4894] usb 2-1: USB disconnect, device number 11 [ 174.755192][ T5190] usb 5-1: Using ep0 maxpacket: 8 [ 174.762171][ T5190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 174.783583][ T5190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 174.811013][ T5190] usb 5-1: New USB device found, idVendor=9dab, idProduct=cd84, bcdDevice= 4.75 [ 174.821224][ T5190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 174.829888][ T7255] loop5: detected capacity change from 0 to 512 [ 174.830124][ T5190] usb 5-1: Product: syz [ 174.840655][ T5190] usb 5-1: Manufacturer: syz [ 174.846366][ T5190] usb 5-1: SerialNumber: syz [ 174.853013][ T5190] usb 5-1: config 0 descriptor?? [ 174.863432][ T7255] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 174.879538][ T7255] EXT4-fs (loop5): invalid journal inode [ 174.901960][ T7255] EXT4-fs (loop5): can't get journal size [ 174.914940][ T7255] EXT4-fs (loop5): 1 truncate cleaned up [ 174.921729][ T7255] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 174.976531][ T4366] EXT4-fs (loop5): unmounting filesystem. [ 175.073447][ T5190] usb 5-1: USB disconnect, device number 8 [ 175.104485][ T7262] input: syz1 as /devices/virtual/input/input20 [ 175.169660][ T7258] loop2: detected capacity change from 0 to 8192 [ 175.178324][ T7258] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 175.191544][ T7258] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 175.200870][ T7258] REISERFS (device loop2): using ordered data mode [ 175.215262][ T7258] reiserfs: using flush barriers [ 175.228188][ T7258] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.246376][ T7258] REISERFS (device loop2): checking transaction log (loop2) [ 175.276955][ T7258] REISERFS (device loop2): Using r5 hash to sort names [ 175.283890][ T7258] REISERFS (device loop2): using 3.5.x disk format [ 175.301488][ T7258] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 175.324775][ T7258] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 175.962802][ T7264] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 176.021987][ T7287] syz.5.1030 sent an empty control message without MSG_MORE. [ 176.128089][ T7291] tap0: tun_chr_ioctl cmd 2147767520 [ 176.629697][ T7314] loop4: detected capacity change from 0 to 256 [ 176.715347][ T7314] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 177.205297][ T4262] Bluetooth: hci0: command 0x080f tx timeout [ 177.262960][ T7301] loop5: detected capacity change from 0 to 40427 [ 177.294416][ T7301] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 177.318229][ T7301] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 177.331550][ T7301] F2FS-fs (loop5): invalid crc value [ 177.370626][ T7301] F2FS-fs (loop5): Found nat_bits in checkpoint [ 177.484596][ T7301] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 177.501665][ T7301] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 177.935480][ T5190] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 178.119238][ T5190] usb 5-1: New USB device found, idVendor=04cb, idProduct=010b, bcdDevice=3d.e0 [ 178.145174][ T5190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.153224][ T5190] usb 5-1: Product: syz [ 178.175245][ T5190] usb 5-1: Manufacturer: syz [ 178.179909][ T5190] usb 5-1: SerialNumber: syz [ 178.207071][ T5190] usb 5-1: config 0 descriptor?? [ 178.237085][ T5190] gspca_main: finepix-2.14.0 probing 04cb:010b [ 178.331697][ T7345] loop2: detected capacity change from 0 to 32768 [ 178.346472][ T7345] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz.2.1045 (7345) [ 178.384637][ T7345] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 178.425250][ T7345] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 178.439584][ T7009] usb 5-1: USB disconnect, device number 9 [ 178.460887][ T7345] BTRFS info (device loop2): disabling tree log [ 178.467785][ T7345] BTRFS info (device loop2): turning on sync discard [ 178.474518][ T7345] BTRFS info (device loop2): force clearing of disk cache [ 178.493928][ T7345] BTRFS info (device loop2): enabling ssd optimizations [ 178.503234][ T7345] BTRFS info (device loop2): using spread ssd allocation scheme [ 178.528662][ T7345] BTRFS info (device loop2): using free space tree [ 178.677440][ T7345] BTRFS info (device loop2): rebuilding free space tree [ 178.682742][ T7362] loop0: detected capacity change from 0 to 32768 [ 178.702676][ T7362] XFS: noikeep mount option is deprecated. [ 178.755350][ T7362] XFS (loop0): Mounting V5 Filesystem [ 178.843410][ T4257] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 178.864353][ T7362] XFS (loop0): Ending clean mount [ 178.876039][ T7362] XFS (loop0): Quotacheck needed: Please wait. [ 179.064062][ T7405] loop5: detected capacity change from 0 to 8 [ 179.106523][ T7405] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 179.106840][ T7362] XFS (loop0): Quotacheck: Done. [ 179.344129][ T4249] XFS (loop0): Unmounting Filesystem [ 179.993351][ T7409] loop4: detected capacity change from 0 to 40427 [ 180.015283][ T7409] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 180.022287][ T7409] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 180.045381][ T7409] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff [ 180.066448][ T7409] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 180.100165][ T7409] F2FS-fs (loop4): invalid crc value [ 180.133605][ T7409] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.230172][ T7409] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.242870][ T7409] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.300055][ T7409] syz.4.1064: attempt to access beyond end of device [ 180.300055][ T7409] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 180.452697][ T4250] syz-executor: attempt to access beyond end of device [ 180.452697][ T4250] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.691558][ T7454] netlink: 1036 bytes leftover after parsing attributes in process `syz.5.1080'. [ 180.742525][ T7454] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 180.877889][ T7456] loop2: detected capacity change from 0 to 256 [ 180.919738][ T7456] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 180.963098][ T7458] netlink: 'syz.5.1083': attribute type 29 has an invalid length. [ 180.994666][ T7458] netlink: 'syz.5.1083': attribute type 29 has an invalid length. [ 181.015928][ T7461] netlink: 'syz.5.1083': attribute type 29 has an invalid length. [ 181.054457][ T7458] netlink: 'syz.5.1083': attribute type 29 has an invalid length. [ 181.613175][ T7485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1095'. [ 181.651702][ T7487] syz.1.1096 (7487): attempted to duplicate a private mapping with mremap. This is not supported. [ 181.901591][ T7476] loop5: detected capacity change from 0 to 32768 [ 181.908167][ T7497] loop4: detected capacity change from 0 to 512 [ 181.938909][ T7497] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 181.947890][ T7497] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 181.991698][ T7497] EXT4-fs (loop4): 1 truncate cleaned up [ 181.997615][ T7497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 182.051431][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 182.125217][ T5190] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 182.182071][ T7505] netem: change failed [ 182.325284][ T5190] usb 2-1: Using ep0 maxpacket: 8 [ 182.337272][ T5190] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.363806][ T5190] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.378262][ T5190] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.388896][ T5190] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.402096][ T5190] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.411397][ T5190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.631286][ T5190] usb 2-1: GET_CAPABILITIES returned 0 [ 182.640676][ T5190] usbtmc 2-1:16.0: can't read capabilities [ 182.844415][ T26] usb 2-1: USB disconnect, device number 12 [ 182.935311][ T4888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 182.954857][ T7517] loop5: detected capacity change from 0 to 32768 [ 183.125624][ T4888] usb 5-1: Using ep0 maxpacket: 32 [ 183.132661][ T4888] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 183.165219][ T4888] usb 5-1: config 0 has no interface number 0 [ 183.181488][ T4888] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 183.203218][ T4888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.220843][ T4888] usb 5-1: Product: syz [ 183.225271][ T4888] usb 5-1: Manufacturer: syz [ 183.229907][ T4888] usb 5-1: SerialNumber: syz [ 183.266137][ T4888] usb 5-1: config 0 descriptor?? [ 183.276543][ T4888] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 183.292264][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1114'. [ 183.479960][ T7536] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1118'. [ 183.491911][ T4888] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 183.514504][ T4888] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 183.564780][ T7538] loop1: detected capacity change from 0 to 128 [ 183.589787][ T7538] ext2: Unknown parameter 'appraise' [ 183.689444][ T7540] loop5: detected capacity change from 0 to 2048 [ 183.726603][ T7519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.750054][ T7519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.762451][ T7540] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value [ 183.986433][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 183.995193][ T14] usb 5-1: USB disconnect, device number 10 [ 184.025560][ T14] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 184.056199][ T14] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 184.087428][ T14] quatech2 5-1:0.51: device disconnected [ 184.202599][ T7542] loop0: detected capacity change from 0 to 32768 [ 184.211037][ T7542] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1121 (7542) [ 184.231864][ T7542] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.243575][ T7542] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 184.252734][ T7542] BTRFS info (device loop0): using free space tree [ 184.263018][ T7538] loop1: detected capacity change from 0 to 32768 [ 184.276038][ T7538] (syz.1.1119,7538,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0x6a4501d0. Applying ECC. [ 184.285457][ T7542] BTRFS info (device loop0): enabling ssd optimizations [ 184.290175][ T7538] (syz.1.1119,7538,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 184.315106][ T7538] (syz.1.1119,7538,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 184.344824][ T7538] JBD2: Ignoring recovery information on journal [ 184.356310][ T4249] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 184.509393][ T7538] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 184.632986][ T7538] (syz.1.1119,7538,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0x6a4501d0. Applying ECC. [ 184.656100][ T7538] (syz.1.1119,7538,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7d05e7ff, computed 0x7dc2e7ff. Applying ECC. [ 184.662896][ T7571] loop4: detected capacity change from 0 to 128 [ 184.679779][ T7538] (syz.1.1119,7538,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7d05e7ff, computed 0x7dc2e7ff [ 184.705358][ T7538] (syz.1.1119,7538,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 184.724160][ T7538] (syz.1.1119,7538,1):ocfs2_quota_read:201 ERROR: status = -5 [ 184.744476][ T7538] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 2 [ 184.756975][ T7538] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 60929 [ 184.767715][ T7538] (syz.1.1119,7538,1):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 184.858580][ T7575] loop4: detected capacity change from 0 to 1024 [ 184.882521][ T7575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.901779][ T4251] ocfs2: Unmounting device (7,1) on (node local) [ 184.918589][ T7575] EXT4-fs: Ignoring removed oldalloc option [ 184.970485][ T7575] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 185.256322][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 185.339834][ T7588] device bridge_slave_0 left promiscuous mode [ 185.357396][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.383644][ T7588] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 185.535545][ T7593] loop4: detected capacity change from 0 to 4096 [ 185.560550][ T7593] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 185.616356][ T7573] loop0: detected capacity change from 0 to 32768 [ 185.623644][ T7573] XFS: ikeep mount option is deprecated. [ 185.687313][ T7573] XFS (loop0): Mounting V5 Filesystem [ 185.731017][ T7610] Bluetooth: MGMT ver 1.22 [ 185.792611][ T7573] XFS (loop0): Ending clean mount [ 185.803686][ T7573] XFS (loop0): Quotacheck needed: Please wait. [ 185.863369][ T7573] XFS (loop0): Quotacheck: Done. [ 185.980085][ T4249] XFS (loop0): Unmounting Filesystem [ 186.180842][ T7621] loop5: detected capacity change from 0 to 512 [ 186.239938][ T7621] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1143: invalid indirect mapped block 2185560079 (level 0) [ 186.275350][ T7621] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1143: invalid indirect mapped block 2683928664 (level 1) [ 186.364690][ T7621] EXT4-fs (loop5): 1 truncate cleaned up [ 186.422545][ T7621] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 186.437905][ T7599] loop2: detected capacity change from 0 to 40427 [ 186.469337][ T7621] EXT4-fs error (device loop5): __ext4_get_inode_loc:4506: comm syz.5.1143: Invalid inode table block 0 in block_group 0 [ 186.483281][ T7599] F2FS-fs (loop2): invalid crc value [ 186.491995][ T7621] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 186.504326][ T7621] EXT4-fs error (device loop5): ext4_splice_branch:479: inode #18: comm syz.5.1143: mark_inode_dirty error [ 186.521031][ T7599] F2FS-fs (loop2): Found nat_bits in checkpoint [ 186.533626][ T7621] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1143: bg 0: block 49: invalid block bitmap [ 186.555806][ T7621] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 186.590231][ T7621] EXT4-fs error (device loop5): __ext4_get_inode_loc:4506: comm syz.5.1143: Invalid inode table block 0 in block_group 0 [ 186.626601][ T7621] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 186.662239][ T7621] EXT4-fs error (device loop5): ext4_truncate:4311: inode #18: comm syz.5.1143: mark_inode_dirty error [ 186.687852][ T7599] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 186.782314][ T7599] syz.2.1137: attempt to access beyond end of device [ 186.782314][ T7599] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 186.808717][ T56] EXT4-fs error (device loop5): __ext4_get_inode_loc:4506: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 186.843196][ T4366] EXT4-fs (loop5): unmounting filesystem. [ 187.173828][ T7634] loop0: detected capacity change from 0 to 4096 [ 187.237794][ T7634] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 187.454372][ T4249] EXT4-fs (loop0): unmounting filesystem. [ 187.472087][ T7648] loop2: detected capacity change from 0 to 256 [ 187.544707][ T7648] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 187.569898][ T7650] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1153'. [ 187.692967][ T7632] loop1: detected capacity change from 0 to 40427 [ 187.742759][ T7632] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 187.782273][ T7632] F2FS-fs (loop1): invalid crc value [ 187.810343][ T7632] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.829391][ T7663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.840694][ T7663] bond0: (slave bond1): Enslaving as an active interface with an up link [ 188.003262][ T7632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.065863][ T7670] loop4: detected capacity change from 0 to 128 [ 188.113220][ T7670] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 188.156486][ T7670] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.432628][ T7676] loop4: detected capacity change from 0 to 128 [ 188.477576][ T7676] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 188.607637][ T4250] sysv_free_block: trying to free block not in datazone [ 188.627138][ T4250] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 188.671638][ T7665] loop2: detected capacity change from 0 to 32768 [ 188.698513][ T7665] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1157 (7665) [ 188.774473][ T7658] loop0: detected capacity change from 0 to 32768 [ 188.778409][ T7665] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.801517][ T7658] XFS (loop0): Invalid device [./file0], error=-15 [ 188.811819][ T7665] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 188.845442][ T7665] BTRFS info (device loop2): enabling auto defrag [ 188.855204][ T7665] BTRFS info (device loop2): doing ref verification [ 188.861858][ T7665] BTRFS info (device loop2): use no compression [ 188.885493][ T7665] BTRFS info (device loop2): force clearing of disk cache [ 188.918257][ T7665] BTRFS info (device loop2): max_inline at 4096 [ 188.944960][ T7665] BTRFS info (device loop2): disabling free space tree [ 188.988479][ T7690] loop1: detected capacity change from 0 to 128 [ 189.016291][ T7690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 189.022612][ T7694] loop5: detected capacity change from 0 to 2048 [ 189.042540][ T7690] ext4 filesystem being mounted at /241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.175439][ T7694] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 189.194869][ T7665] BTRFS info (device loop2): enabling ssd optimizations [ 189.203811][ T7665] BTRFS info (device loop2): rebuilding free space tree [ 189.224775][ T7694] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.272043][ T7665] BTRFS info (device loop2): disabling free space tree [ 189.287490][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 189.311412][ T7665] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 189.341090][ T7665] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.472992][ T4366] EXT4-fs (loop5): unmounting filesystem. [ 189.628679][ T4257] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.725330][ T5190] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.908262][ T7731] loop5: detected capacity change from 0 to 4096 [ 189.945105][ T5190] usb 5-1: Using ep0 maxpacket: 8 [ 189.956062][ T5190] usb 5-1: config 0 has no interfaces? [ 189.975170][ T7731] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 189.984313][ T5190] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.003910][ T5190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.020435][ T5190] usb 5-1: Product: syz [ 190.024940][ T5190] usb 5-1: Manufacturer: syz [ 190.029755][ T5190] usb 5-1: SerialNumber: syz [ 190.046181][ T5190] usb 5-1: config 0 descriptor?? [ 190.284514][ T4350] usb 5-1: USB disconnect, device number 11 [ 190.363792][ T4366] EXT4-fs (loop5): unmounting filesystem. [ 190.679075][ T7747] loop2: detected capacity change from 0 to 256 [ 190.721978][ T7747] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 190.746175][ T7747] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 190.765710][ T7747] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 190.774239][ T7747] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 190.893909][ T4257] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 190.993595][ T7760] loop2: detected capacity change from 0 to 128 [ 190.995688][ T7761] loop5: detected capacity change from 0 to 128 [ 191.013804][ T7760] ext2: Unknown parameter 'appraise' [ 191.014315][ T7761] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 191.077751][ T7761] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.432552][ T4366] EXT4-fs (loop5): unmounting filesystem. [ 191.559003][ T7751] loop0: detected capacity change from 0 to 32768 [ 191.570838][ T7751] XFS: ikeep mount option is deprecated. [ 191.573504][ T7760] loop2: detected capacity change from 0 to 32768 [ 191.589774][ T7760] (syz.2.1192,7760,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0x6a4501d0. Applying ECC. [ 191.603802][ T7760] (syz.2.1192,7760,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 191.619543][ T7760] (syz.2.1192,7760,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 191.655115][ T4332] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 191.670002][ T7751] XFS (loop0): Mounting V5 Filesystem [ 191.678085][ T7760] JBD2: Ignoring recovery information on journal [ 191.799671][ T7760] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 191.811492][ T7751] XFS (loop0): Ending clean mount [ 191.819606][ T7751] XFS (loop0): Quotacheck needed: Please wait. [ 191.857119][ T4332] usb 2-1: Using ep0 maxpacket: 32 [ 191.864435][ T4332] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 191.900821][ T4332] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.914700][ T7760] (syz.2.1192,7760,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0x6a4501d0. Applying ECC. [ 191.928520][ T4332] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 191.940385][ T4332] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 191.951578][ T7760] (syz.2.1192,7760,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7d05e7ff, computed 0x7dc2e7ff. Applying ECC. [ 191.988879][ T4332] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.002933][ T7760] (syz.2.1192,7760,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7d05e7ff, computed 0x7dc2e7ff [ 192.016406][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.024444][ T4332] usb 2-1: Product: syz [ 192.028918][ T7760] (syz.2.1192,7760,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 192.037558][ T4332] usb 2-1: Manufacturer: syz [ 192.042333][ T4332] usb 2-1: SerialNumber: syz [ 192.048014][ T7760] (syz.2.1192,7760,1):ocfs2_quota_read:201 ERROR: status = -5 [ 192.058294][ T7751] XFS (loop0): Quotacheck: Done. [ 192.070030][ T7760] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 2 [ 192.097426][ T7760] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 60929 [ 192.125201][ T7760] (syz.2.1192,7760,1):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 192.142913][ T4249] XFS (loop0): Unmounting Filesystem [ 192.179467][ T7784] loop5: detected capacity change from 0 to 40427 [ 192.225976][ T7784] F2FS-fs (loop5): invalid crc value [ 192.295376][ T7784] F2FS-fs (loop5): Found nat_bits in checkpoint [ 192.297267][ T4257] ocfs2: Unmounting device (7,2) on (node local) [ 192.368152][ T4332] usb 2-1: USB disconnect, device number 13 [ 192.459237][ T7784] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 192.494566][ T7784] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 192.604566][ T7790] f2fs_ckpt-7:5: attempt to access beyond end of device [ 192.604566][ T7790] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 192.805158][ T4262] Bluetooth: hci0: command 0x0401 tx timeout [ 192.840583][ T7789] loop4: detected capacity change from 0 to 32768 [ 192.898145][ T7789] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.1201 (7789) [ 192.957646][ T7789] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 192.994233][ T7789] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 193.006622][ T7804] loop2: detected capacity change from 0 to 256 [ 193.035334][ T7789] BTRFS info (device loop4): disabling tree log [ 193.055420][ T7789] BTRFS info (device loop4): turning on sync discard [ 193.082592][ T7789] BTRFS info (device loop4): force clearing of disk cache [ 193.112920][ T7789] BTRFS info (device loop4): enabling ssd optimizations [ 193.134666][ T7789] BTRFS info (device loop4): using spread ssd allocation scheme [ 193.160183][ T7789] BTRFS info (device loop4): using free space tree [ 193.226093][ T7817] loop1: detected capacity change from 0 to 512 [ 193.241328][ T7817] EXT4-fs (loop1): Test dummy encryption mode enabled [ 193.283666][ T7817] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1211: inode #1: comm syz.1.1211: iget: illegal inode # [ 193.345800][ T7817] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1211: error while reading EA inode 1 err=-117 [ 193.382834][ T7827] : renamed from bond0 [ 193.402796][ T7817] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1211: inode #1: comm syz.1.1211: iget: illegal inode # [ 193.426351][ T7817] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1211: error while reading EA inode 1 err=-117 [ 193.474193][ T7817] EXT4-fs (loop1): 1 orphan inode deleted [ 193.474554][ T7789] BTRFS info (device loop4): rebuilding free space tree [ 193.485635][ T7817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.606770][ T7840] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.1211: unexpected EA_INODE flag [ 193.741254][ T7809] loop0: detected capacity change from 0 to 40427 [ 193.762937][ T7809] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 193.779087][ T4250] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 193.789288][ T7809] F2FS-fs (loop0): invalid crc value [ 193.807574][ T7809] F2FS-fs (loop0): Found nat_bits in checkpoint [ 193.922460][ T7809] F2FS-fs (loop0): Start checkpoint disabled! [ 194.042953][ T7809] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 194.132950][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 194.143077][ T7809] syz.0.1210: attempt to access beyond end of device [ 194.143077][ T7809] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 194.172324][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.178868][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.210586][ T7847] loop4: detected capacity change from 0 to 128 [ 194.218851][ T7847] ext2: Unknown parameter 'appraise' [ 194.322810][ T34] kworker/u4:2: attempt to access beyond end of device [ 194.322810][ T34] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 194.888143][ T7865] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1217'. [ 194.951845][ T7847] loop4: detected capacity change from 0 to 32768 [ 194.967455][ T7847] (syz.4.1214,7847,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0x6a4501d0. Applying ECC. [ 195.001910][ T7847] (syz.4.1214,7847,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.036145][ T7847] (syz.4.1214,7847,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.095153][ T5190] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.102791][ T7847] JBD2: Ignoring recovery information on journal [ 195.183987][ T7877] relay: one or more items not logged [item size (56) > sub-buffer size (1)] [ 195.202874][ T7847] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 195.289259][ T5190] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 195.305116][ T5190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.313161][ T5190] usb 3-1: Product: syz [ 195.320620][ T7847] (syz.4.1214,7847,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0x6a4501d0. Applying ECC. [ 195.331096][ T5190] usb 3-1: Manufacturer: syz [ 195.345075][ T5190] usb 3-1: SerialNumber: syz [ 195.372458][ T7847] (syz.4.1214,7847,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7d05e7ff, computed 0x7dc2e7ff. Applying ECC. [ 195.378189][ T5190] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 195.405217][ T7847] (syz.4.1214,7847,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x7d05e7ff, computed 0x7dc2e7ff [ 195.429146][ T7847] (syz.4.1214,7847,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 195.439056][ T5190] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 195.481470][ T7847] (syz.4.1214,7847,0):ocfs2_quota_read:201 ERROR: status = -5 [ 195.495123][ T7847] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 2 [ 195.518667][ T7847] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 60929 [ 195.555032][ T7891] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 195.556675][ T7847] (syz.4.1214,7847,0):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 195.692508][ T4889] usb 3-1: USB disconnect, device number 9 [ 195.715554][ T4250] ocfs2: Unmounting device (7,4) on (node local) [ 195.943606][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 196.252403][ T4263] Bluetooth: hci2: command 0x0406 tx timeout [ 196.258711][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 196.264754][ T4263] Bluetooth: hci3: command 0x0406 tx timeout [ 196.272935][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 196.345279][ T4466] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 196.363495][ T4894] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 196.391364][ T7917] loop2: detected capacity change from 0 to 4096 [ 196.405174][ T7917] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 196.466307][ T7917] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 196.485667][ T5190] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 196.492732][ T5190] ath9k_htc: Failed to initialize the device [ 196.511494][ T4889] usb 3-1: ath9k_htc: USB layer deinitialized [ 196.545235][ T4466] usb 6-1: Using ep0 maxpacket: 16 [ 196.563764][ T4466] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.581549][ T4894] usb 2-1: Using ep0 maxpacket: 32 [ 196.588915][ T4894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 35, changing to 9 [ 196.593673][ T4466] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 196.616811][ T4894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 17156, setting to 1024 [ 196.650883][ T4466] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 196.655598][ T4894] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 196.675307][ T4466] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 166 [ 196.690540][ T4894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.705073][ T4466] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 196.715664][ T4894] usb 2-1: Product: syz [ 196.722241][ T4894] usb 2-1: Manufacturer: syz [ 196.738542][ T4894] usb 2-1: SerialNumber: syz [ 196.746327][ T4466] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.761837][ T4894] usb 2-1: config 0 descriptor?? [ 196.776099][ T4466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 196.796369][ T4466] usb 6-1: SerialNumber: syz [ 196.818413][ T7908] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 196.836453][ T4466] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 196.867770][ T4466] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 196.979536][ T4894] usbtouchscreen: probe of 2-1:0.0 failed with error -71 [ 196.998375][ T4894] usb 2-1: USB disconnect, device number 14 [ 197.047319][ T7009] usb 6-1: USB disconnect, device number 9 [ 197.275723][ T7926] loop2: detected capacity change from 0 to 32768 [ 197.335163][ T7926] XFS (loop2): Mounting V5 Filesystem [ 197.427541][ T7926] XFS (loop2): Ending clean mount [ 197.464813][ T7945] ipt_CLUSTERIP: Please specify destination IP [ 197.600779][ T4257] XFS (loop2): Unmounting Filesystem [ 198.150630][ T7966] loop2: detected capacity change from 0 to 512 [ 198.177393][ T7965] loop0: detected capacity change from 0 to 1764 [ 198.269010][ T7966] EXT4-fs (loop2): 1 orphan inode deleted [ 198.274821][ T7966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 198.290767][ T9] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 198.312212][ T7966] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.344855][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6824: comm kworker/u4:0: Failed to release dquot type 1 [ 198.381023][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1269'. [ 198.449504][ T7966] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.1258: corrupted xattr block 19 [ 198.498522][ T7966] EXT4-fs error (device loop2): ext4_get_inode_usage:852: inode #15: comm syz.2.1258: corrupted xattr block 19 [ 198.542956][ T7983] loop0: detected capacity change from 0 to 1024 [ 198.626147][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 198.641540][ T4309] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 198.689754][ T4309] EXT4-fs error (device loop2): ext4_release_dquot:6824: comm kworker/u4:6: Failed to release dquot type 1 [ 198.729578][ T34] hfsplus: b-tree write err: -5, ino 4 [ 198.870866][ T7993] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1277'. [ 198.880305][ T7992] netlink: 'syz.0.1276': attribute type 1 has an invalid length. [ 198.909949][ T7992] netlink: 'syz.0.1276': attribute type 2 has an invalid length. [ 198.947886][ T7992] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 199.045919][ T7995] loop2: detected capacity change from 0 to 512 [ 199.081158][ T7995] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 199.142745][ T7995] EXT4-fs (loop2): orphan cleanup on readonly fs [ 199.164447][ T7995] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1278: bad orphan inode 15 [ 199.184877][ T8000] loop0: detected capacity change from 0 to 64 [ 199.194117][ T7995] ext4_test_bit(bit=14, block=18) = 1 [ 199.199735][ T7995] is_bad_inode(inode)=0 [ 199.204112][ T7995] NEXT_ORPHAN(inode)=1023 [ 199.223231][ T7995] max_ino=32 [ 199.227386][ T7995] i_nlink=0 [ 199.236981][ T7995] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #15: comm syz.2.1278: corrupted xattr block 19 [ 199.260272][ T7995] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 199.271646][ T7995] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 199.312233][ T7995] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.1278: path /251/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 199.426493][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 199.638442][ T7985] loop4: detected capacity change from 0 to 32768 [ 199.675586][ T8010] loop2: detected capacity change from 0 to 256 [ 199.692163][ T8010] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.712487][ T8010] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 199.732919][ T8010] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe563dbae, utbl_chksum : 0xe619d30d) [ 199.736624][ T7985] XFS (loop4): Mounting V5 Filesystem [ 199.834681][ T7985] XFS (loop4): Starting recovery (logdev: internal) [ 199.873337][ T7985] XFS (loop4): Ending recovery (logdev: internal) [ 199.988813][ T4250] XFS (loop4): Unmounting Filesystem [ 200.054260][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 200.150953][ T8005] loop5: detected capacity change from 0 to 32768 [ 200.268028][ T8005] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 200.285421][ T8005] XFS (loop5): Mounting V5 Filesystem [ 200.342703][ T8005] XFS (loop5): Ending clean mount [ 200.355727][ T8005] XFS (loop5): Quotacheck needed: Please wait. [ 200.435781][ T8005] XFS (loop5): Quotacheck: Done. [ 200.469182][ T27] audit: type=1804 audit(1733516308.396:28): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1283" name="/newroot/256/file0/bus" dev="loop5" ino=4428 res=1 errno=0 [ 200.512962][ T8040] loop1: detected capacity change from 0 to 2048 [ 200.562547][ T8040] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 200.609285][ T4366] XFS (loop5): Unmounting Filesystem [ 200.635267][ T8040] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.805864][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 200.982452][ T8058] loop1: detected capacity change from 0 to 512 [ 201.021164][ T8058] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 201.054571][ T8058] EXT4-fs (loop1): 1 truncate cleaned up [ 201.067532][ T8058] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 201.101232][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 201.134797][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 201.353984][ T8074] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.363229][ T8074] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.372871][ T8074] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.381849][ T8074] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.907580][ T4466] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 202.007507][ T8068] loop1: detected capacity change from 0 to 32768 [ 202.079860][ T8068] XFS (loop1): Mounting V5 Filesystem [ 202.116925][ T4466] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.136304][ T4466] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 202.176327][ T4466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.190268][ T8087] loop4: detected capacity change from 0 to 32768 [ 202.203840][ T8087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1312 (8087) [ 202.226933][ T4466] usb 3-1: config 0 descriptor?? [ 202.233797][ T8087] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.271099][ T8087] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 202.306566][ T8068] XFS (loop1): Ending clean mount [ 202.312781][ T8087] BTRFS info (device loop4): metadata ratio 4 [ 202.330945][ T8107] loop5: detected capacity change from 0 to 256 [ 202.337626][ T8087] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 202.356892][ T8068] XFS (loop1): Quotacheck needed: Please wait. [ 202.383284][ T8087] BTRFS info (device loop4): force lzo compression, level 0 [ 202.403305][ T8087] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 202.422122][ T8068] XFS (loop1): Quotacheck: Done. [ 202.425350][ T8087] BTRFS info (device loop4): trying to use backup root at mount time [ 202.460203][ T8087] BTRFS info (device loop4): doing ref verification [ 202.478942][ T8087] BTRFS info (device loop4): enabling auto defrag [ 202.506778][ T8087] BTRFS info (device loop4): disabling tree log [ 202.533633][ T8087] BTRFS info (device loop4): using free space tree [ 202.599695][ T4251] XFS (loop1): Unmounting Filesystem [ 202.641701][ T8093] loop0: detected capacity change from 0 to 40427 [ 202.658734][ T4466] mcp2221 0003:04D8:00DD.0003: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 202.680657][ T8093] F2FS-fs (loop0): invalid crc value [ 202.703713][ T8093] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 202.743500][ T9] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 202.768178][ T8093] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.768636][ T8087] BTRFS warning (device loop4): couldn't read tree root [ 202.789752][ T8087] BTRFS warning (device loop4): try to load backup roots slot 1 [ 202.802752][ T56] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 202.822455][ T8087] BTRFS warning (device loop4): couldn't read tree root [ 202.866571][ T8087] BTRFS warning (device loop4): try to load backup roots slot 2 [ 202.879968][ T4466] usb 3-1: USB disconnect, device number 10 [ 202.885835][ T8087] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 202.886277][ T8087] BTRFS warning (device loop4): couldn't read tree root [ 202.886300][ T8087] BTRFS warning (device loop4): try to load backup roots slot 3 [ 202.945823][ T8093] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 202.963680][ T8087] BTRFS info (device loop4): enabling ssd optimizations [ 202.980143][ T8087] BTRFS info (device loop4): rebuilding free space tree [ 202.991207][ T27] audit: type=1800 audit(1733516310.916:29): pid=8093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1315" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 203.036129][ T8087] BTRFS info (device loop4): checking UUID tree [ 203.044883][ T8093] syz.0.1315: attempt to access beyond end of device [ 203.044883][ T8093] loop0: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 203.104446][ T27] audit: type=1800 audit(1733516311.026:30): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1312" name="file1" dev="loop4" ino=257 res=0 errno=0 [ 203.204202][ T4250] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.225415][ T4249] syz-executor: attempt to access beyond end of device [ 203.225415][ T4249] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.887690][ T8137] loop1: detected capacity change from 0 to 32768 [ 203.920803][ T8137] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1321 (8137) [ 203.968253][ T8137] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 203.995241][ T8137] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 204.004006][ T8137] BTRFS info (device loop1): using free space tree [ 204.257146][ T8168] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1332'. [ 204.291093][ T8139] loop5: detected capacity change from 0 to 40427 [ 204.327444][ T8174] netlink: 'syz.0.1333': attribute type 1 has an invalid length. [ 204.338842][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'. [ 204.339875][ T8139] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 204.348104][ T8137] BTRFS info (device loop1): enabling ssd optimizations [ 204.368481][ T8139] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 204.380940][ T8139] F2FS-fs (loop5): invalid crc value [ 204.454361][ T8139] F2FS-fs (loop5): Found nat_bits in checkpoint [ 204.515170][ T4463] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 204.701594][ T8139] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 204.715207][ T4463] usb 5-1: Using ep0 maxpacket: 32 [ 204.723774][ T4463] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 204.733231][ T4251] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 204.735197][ T8139] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 204.743734][ T4463] usb 5-1: config 0 has no interface number 0 [ 204.796048][ T4463] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 204.806020][ T4463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.819030][ T4463] usb 5-1: Product: syz [ 204.823232][ T4463] usb 5-1: Manufacturer: syz [ 204.828079][ T4463] usb 5-1: SerialNumber: syz [ 204.851450][ T4463] usb 5-1: config 0 descriptor?? [ 204.851937][ T8159] loop2: detected capacity change from 0 to 32768 [ 204.873236][ T4463] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 205.074476][ T8188] loop0: detected capacity change from 0 to 164 [ 205.098761][ T8188] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 205.111522][ T4463] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 205.135126][ T4463] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 205.302970][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.350383][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.439243][ T8190] loop0: detected capacity change from 0 to 2048 [ 205.477761][ T8190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.590044][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 205.590813][ T4889] usb 5-1: USB disconnect, device number 12 [ 205.624875][ T4889] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 205.677827][ T4889] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 205.704684][ T4889] quatech2 5-1:0.51: device disconnected [ 205.894256][ T8195] loop0: detected capacity change from 0 to 2048 [ 205.962356][ T8195] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.977717][ T8200] loop1: detected capacity change from 0 to 256 [ 206.069608][ T8195] overlayfs: upper fs needs to support d_type. [ 206.123739][ T8195] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 206.146230][ T8195] overlayfs: failed to set xattr on upper [ 206.165999][ T8195] overlayfs: ...falling back to index=off,metacopy=off. [ 206.258874][ T8204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1344'. [ 206.291719][ T8207] loop5: detected capacity change from 0 to 1024 [ 206.324526][ T4249] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 206.375898][ T4249] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh [ 206.390176][ T8207] hfsplus: bad catalog entry type [ 206.470952][ T8212] loop1: detected capacity change from 0 to 2048 [ 206.513555][ T8212] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 206.545922][ T56] hfsplus: b-tree write err: -5, ino 4 [ 206.626286][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 207.153554][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.278431][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.423795][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.433878][ T8232] loop4: detected capacity change from 0 to 512 [ 207.464919][ T8219] loop5: detected capacity change from 0 to 32768 [ 207.494120][ T8232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 207.554775][ T8232] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.581669][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.614791][ T8219] XFS (loop5): Mounting V5 Filesystem [ 207.643095][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 207.686618][ T8219] XFS (loop5): Ending clean mount [ 207.706519][ T8232] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1358'. [ 207.766731][ T8232] device geneve2 entered promiscuous mode [ 207.797482][ T8241] netlink: 'syz.2.1359': attribute type 10 has an invalid length. [ 207.815143][ T8241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1359'. [ 207.826430][ T8241] bridge0: port 1(veth0_vlan) entered blocking state [ 207.837941][ T8231] loop1: detected capacity change from 0 to 32768 [ 207.846240][ T8241] bridge0: port 1(veth0_vlan) entered disabled state [ 207.861827][ T8241] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 207.878664][ T4366] XFS (loop5): Unmounting Filesystem [ 207.916211][ T8231] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 208.011520][ T8248] loop2: detected capacity change from 0 to 256 [ 208.031668][ T8248] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 208.063615][ T4251] ocfs2: Unmounting device (7,1) on (node local) [ 208.086711][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.097375][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.109135][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.145668][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.153273][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.173586][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.276506][ T11] tipc: Left network mode [ 208.341484][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 208.763893][ T8260] loop4: detected capacity change from 0 to 512 [ 208.777086][ T8260] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 208.910491][ T8260] EXT4-fs (loop4): orphan cleanup on readonly fs [ 208.926093][ T8260] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1366: bad orphan inode 15 [ 208.938956][ T8260] ext4_test_bit(bit=14, block=18) = 1 [ 208.995424][ T8260] is_bad_inode(inode)=0 [ 208.999816][ T8260] NEXT_ORPHAN(inode)=1023 [ 209.007158][ T8260] max_ino=32 [ 209.010516][ T8260] i_nlink=0 [ 209.021065][ T8260] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #15: comm syz.4.1366: corrupted xattr block 19 [ 209.033918][ T8260] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 209.046619][ T8260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 209.079879][ T8260] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.1366: path /288/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 209.180767][ T8249] chnl_net:caif_netlink_parms(): no params data found [ 209.216306][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 209.330610][ T8282] loop2: detected capacity change from 0 to 64 [ 209.422416][ T8282] Trying to free block not in datazone [ 209.461766][ T8282] Trying to free block not in datazone [ 209.500353][ T8282] Trying to free block not in datazone [ 209.529458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.537538][ T8282] Trying to free block not in datazone [ 209.593463][ T8282] minix_free_block (loop2:6): bit already cleared [ 209.605231][ T8282] Trying to free block not in datazone [ 209.610765][ T8282] Trying to free block not in datazone [ 209.664475][ T8249] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.698226][ T8249] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.721482][ T8249] device bridge_slave_0 entered promiscuous mode [ 209.791622][ T8249] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.805262][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.823912][ T8249] device bridge_slave_1 entered promiscuous mode [ 210.073251][ T8249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.131399][ T8249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.245489][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 210.313153][ T8297] loop2: detected capacity change from 0 to 512 [ 210.399695][ T8249] team0: Port device team_slave_0 added [ 210.402742][ T8297] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #17: comm syz.2.1379: iget: bogus i_mode (0) [ 210.424740][ T8281] loop4: detected capacity change from 0 to 32768 [ 210.451601][ T8297] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1379: couldn't read orphan inode 17 (err -117) [ 210.467533][ T11] device hsr_slave_0 left promiscuous mode [ 210.472157][ T8297] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 210.483323][ T11] device hsr_slave_1 left promiscuous mode [ 210.492252][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.507774][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.513361][ T8297] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1379: bg 0: block 7: invalid block bitmap [ 210.531850][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.547374][ T8281] XFS (loop4): Mounting V5 Filesystem [ 210.554188][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.572973][ T11] device bridge_slave_1 left promiscuous mode [ 210.630669][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.692055][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 210.694206][ T8281] XFS (loop4): Ending clean mount [ 210.704058][ T11] device bridge_slave_0 left promiscuous mode [ 210.716022][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.741735][ T8281] XFS (loop4): Quotacheck needed: Please wait. [ 210.808441][ T8281] XFS (loop4): Quotacheck: Done. [ 210.830528][ T11] device veth1_macvtap left promiscuous mode [ 210.836898][ T11] device veth0_macvtap left promiscuous mode [ 210.843046][ T11] device veth1_vlan left promiscuous mode [ 210.849222][ T11] device veth0_vlan left promiscuous mode [ 211.105797][ T4250] XFS (loop4): Unmounting Filesystem [ 211.948060][ T11] team0 (unregistering): Port device team_slave_1 removed [ 212.022121][ T11] team0 (unregistering): Port device team_slave_0 removed [ 212.109590][ T11]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.178576][ T11]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.335336][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 212.388106][ T8328] loop2: detected capacity change from 0 to 64 [ 212.419487][ T8272] syz.5.1369 (8272): drop_caches: 1 [ 212.737873][ T8334] syz.2.1392 uses obsolete (PF_INET,SOCK_PACKET) [ 213.450157][ T11]  (unregistering): Released all slaves [ 213.548102][ T8249] team0: Port device team_slave_1 added [ 213.561169][ T8330] device lo entered promiscuous mode [ 213.642385][ T8355] tap0: tun_chr_ioctl cmd 1074025675 [ 213.648937][ T8355] tap0: persist disabled [ 213.653842][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.683392][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.721849][ T8249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.776674][ T8249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.783670][ T8249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.818412][ T8249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.895745][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 214.047197][ T8249] device hsr_slave_0 entered promiscuous mode [ 214.078262][ T8249] device hsr_slave_1 entered promiscuous mode [ 214.091301][ T8367] loop5: detected capacity change from 0 to 512 [ 214.197601][ T8365] team0: Port device team_slave_0 removed [ 214.212983][ T8365] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 214.405529][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 214.549746][ T8383] loop5: detected capacity change from 0 to 64 [ 214.613535][ T27] audit: type=1800 audit(1733516322.536:31): pid=8383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1413" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 214.785244][ T8387] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1415'. [ 214.854501][ T8249] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.865014][ T8249] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.901099][ T8249] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.922948][ T8249] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.109151][ T8249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.115868][ T8374] loop1: detected capacity change from 0 to 32768 [ 215.129332][ T8393] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1417'. [ 215.140876][ T8374] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1409 (8374) [ 215.162567][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.171201][ T2959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.195251][ T8374] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 215.216871][ T8249] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.220467][ T8374] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 215.241197][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.254257][ T8374] BTRFS info (device loop1): turning off barriers [ 215.256600][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.280687][ T8374] BTRFS info (device loop1): enabling auto defrag [ 215.285029][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.294295][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.300125][ T8374] BTRFS info (device loop1): ignoring data csums [ 215.308761][ T8374] BTRFS info (device loop1): enabling ssd optimizations [ 215.316603][ T8374] BTRFS info (device loop1): using spread ssd allocation scheme [ 215.324348][ T8374] BTRFS info (device loop1): using free space tree [ 215.331090][ T8374] workqueue: max_active 32767 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 215.348439][ T8374] workqueue: max_active 32767 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 215.360176][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.374093][ T8374] workqueue: max_active 32767 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 215.380768][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.421340][ T8374] workqueue: max_active 32767 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 215.435504][ T8374] workqueue: max_active 32767 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 215.446711][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.455864][ T8374] workqueue: max_active 32767 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 215.465763][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.474365][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.485880][ T8374] workqueue: max_active 32767 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 215.491591][ T8409] loop4: detected capacity change from 0 to 512 [ 215.500225][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.510531][ T8409] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 215.511350][ T8374] workqueue: max_active 32767 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 215.522755][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.549408][ T8374] workqueue: max_active 32767 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 215.568178][ T8409] EXT4-fs (loop4): 1 truncate cleaned up [ 215.574122][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.593170][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.602169][ T8409] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 215.620846][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.668143][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 215.684801][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.702549][ T8409] ------------[ cut here ]------------ [ 215.708052][ T8409] Looking for class "&ei->i_data_sem" with key init_once.__key.786, but found a different class "&ei->i_data_sem" with the same key [ 215.721723][ T8409] WARNING: CPU: 1 PID: 8409 at kernel/locking/lockdep.c:933 look_up_lock_class+0xc2/0x140 [ 215.731671][ T8409] Modules linked in: [ 215.735620][ T8409] CPU: 1 PID: 8409 Comm: syz.4.1420 Not tainted 6.1.119-syzkaller #0 [ 215.743793][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.753889][ T8409] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 215.759656][ T8409] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 215.779304][ T8409] RSP: 0018:ffffc900039775b0 EFLAGS: 00010046 [ 215.785377][ T8409] RAX: 7fd9a33a8b8fd900 RBX: ffffffff90c78fa0 RCX: 0000000000080000 [ 215.793363][ T8409] RDX: ffffc9000e1d9000 RSI: 000000000000835c RDI: 000000000000835d [ 215.801356][ T8409] RBP: ffffc900039776b0 R08: ffffffff8152b88e R09: fffff5200072ee15 [ 215.809348][ T8409] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 215.817328][ T8409] R13: 1ffff9200072eec4 R14: ffff888070303eb8 R15: ffffffff974dff41 [ 215.825311][ T8409] FS: 00007fa354efe6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 215.834245][ T8409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.840838][ T8409] CR2: 0000001b2d911ff8 CR3: 000000004ef9c000 CR4: 00000000003506e0 [ 215.848820][ T8409] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 215.856793][ T8409] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 215.864777][ T8409] Call Trace: [ 215.868070][ T8409] [ 215.871005][ T8409] ? __warn+0x15a/0x520 [ 215.875196][ T8409] ? look_up_lock_class+0xc2/0x140 [ 215.880312][ T8409] ? report_bug+0x2af/0x500 [ 215.884828][ T8409] ? look_up_lock_class+0xc2/0x140 [ 215.889969][ T8409] ? handle_bug+0x3d/0x70 [ 215.894334][ T8409] ? exc_invalid_op+0x16/0x40 [ 215.899042][ T8409] ? asm_exc_invalid_op+0x16/0x20 [ 215.904097][ T8409] ? __warn_printk+0x28e/0x350 [ 215.908936][ T8409] ? look_up_lock_class+0xc2/0x140 [ 215.914089][ T8409] register_lock_class+0x100/0x990 [ 215.919250][ T8409] ? is_dynamic_key+0x260/0x260 [ 215.924127][ T8409] ? is_dynamic_key+0x260/0x260 [ 215.929007][ T8409] ? mark_lock+0x9a/0x340 [ 215.933359][ T8409] __lock_acquire+0xd3/0x1f80 [ 215.938061][ T8409] lock_acquire+0x1f8/0x5a0 [ 215.942592][ T8409] ? ext4_ioctl+0x460f/0x5f60 [ 215.947292][ T8409] ? read_lock_is_recursive+0x10/0x10 [ 215.952685][ T8409] ? __might_sleep+0xb0/0xb0 [ 215.957393][ T8409] ? rwsem_write_trylock+0x166/0x210 [ 215.962691][ T8409] ? clear_nonspinnable+0x60/0x60 [ 215.967782][ T8409] down_write_nested+0x39/0x60 [ 215.972561][ T8409] ? ext4_ioctl+0x460f/0x5f60 [ 215.977270][ T8409] ext4_ioctl+0x460f/0x5f60 [ 215.981905][ T8409] ? kasan_set_track+0x4b/0x70 [ 215.986704][ T8409] ? ext4_fileattr_set+0x1770/0x1770 [ 215.992023][ T8409] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 215.996889][ T8409] ? __x64_compat_sys_ioctl+0x80/0x80 [ 216.002267][ T8409] ? __lock_acquire+0x1f80/0x1f80 [ 216.007308][ T8409] ? lockdep_hardirqs_on+0x94/0x130 [ 216.012515][ T8409] ? __kmem_cache_free+0x25c/0x3c0 [ 216.017641][ T8409] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 216.023295][ T8409] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 216.028943][ T8409] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 216.034593][ T8409] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 216.040079][ T8409] ? __fget_files+0x28/0x4a0 [ 216.044685][ T8409] ? __fget_files+0x28/0x4a0 [ 216.049282][ T8409] ? __fget_files+0x435/0x4a0 [ 216.053974][ T8409] ? __fget_files+0x28/0x4a0 [ 216.058570][ T8409] ? bpf_lsm_file_ioctl+0x5/0x10 [ 216.063514][ T8409] ? security_file_ioctl+0x7d/0xa0 [ 216.068638][ T8409] ? ext4_fileattr_set+0x1770/0x1770 [ 216.073944][ T8409] __se_sys_ioctl+0xf1/0x160 [ 216.078569][ T8409] do_syscall_64+0x3b/0xb0 [ 216.083045][ T8409] ? clear_bhb_loop+0x45/0xa0 [ 216.087784][ T8409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.093705][ T8409] RIP: 0033:0x7fa35417fed9 [ 216.098204][ T8409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.117844][ T8409] RSP: 002b:00007fa354efe058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.126268][ T8409] RAX: ffffffffffffffda RBX: 00007fa354345fa0 RCX: 00007fa35417fed9 [ 216.134270][ T8409] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 216.142265][ T8409] RBP: 00007fa3541f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 216.150241][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.158215][ T8409] R13: 0000000000000000 R14: 00007fa354345fa0 R15: 00007ffc582010b8 [ 216.166199][ T8409] [ 216.169224][ T8409] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 216.176545][ T8409] CPU: 1 PID: 8409 Comm: syz.4.1420 Not tainted 6.1.119-syzkaller #0 [ 216.184713][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.194773][ T8409] Call Trace: [ 216.198144][ T8409] [ 216.201079][ T8409] dump_stack_lvl+0x1e3/0x2cb [ 216.205774][ T8409] ? nf_tcp_handle_invalid+0x642/0x642 [ 216.211249][ T8409] ? panic+0x764/0x764 [ 216.215344][ T8409] ? vscnprintf+0x59/0x80 [ 216.219679][ T8409] panic+0x318/0x764 [ 216.223582][ T8409] ? __warn+0x169/0x520 [ 216.227744][ T8409] ? memcpy_page_flushcache+0xfc/0xfc [ 216.233127][ T8409] __warn+0x348/0x520 [ 216.237115][ T8409] ? look_up_lock_class+0xc2/0x140 [ 216.242232][ T8409] report_bug+0x2af/0x500 [ 216.246597][ T8409] ? look_up_lock_class+0xc2/0x140 [ 216.251713][ T8409] handle_bug+0x3d/0x70 [ 216.255879][ T8409] exc_invalid_op+0x16/0x40 [ 216.260401][ T8409] asm_exc_invalid_op+0x16/0x20 [ 216.265261][ T8409] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 216.270985][ T8409] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 216.290609][ T8409] RSP: 0018:ffffc900039775b0 EFLAGS: 00010046 [ 216.296687][ T8409] RAX: 7fd9a33a8b8fd900 RBX: ffffffff90c78fa0 RCX: 0000000000080000 [ 216.304661][ T8409] RDX: ffffc9000e1d9000 RSI: 000000000000835c RDI: 000000000000835d [ 216.312635][ T8409] RBP: ffffc900039776b0 R08: ffffffff8152b88e R09: fffff5200072ee15 [ 216.320612][ T8409] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 216.330406][ T8409] R13: 1ffff9200072eec4 R14: ffff888070303eb8 R15: ffffffff974dff41 [ 216.338587][ T8409] ? __warn_printk+0x28e/0x350 [ 216.343379][ T8409] register_lock_class+0x100/0x990 [ 216.348509][ T8409] ? is_dynamic_key+0x260/0x260 [ 216.353459][ T8409] ? is_dynamic_key+0x260/0x260 [ 216.358339][ T8409] ? mark_lock+0x9a/0x340 [ 216.362708][ T8409] __lock_acquire+0xd3/0x1f80 [ 216.367510][ T8409] lock_acquire+0x1f8/0x5a0 [ 216.372035][ T8409] ? ext4_ioctl+0x460f/0x5f60 [ 216.376751][ T8409] ? read_lock_is_recursive+0x10/0x10 [ 216.382192][ T8409] ? __might_sleep+0xb0/0xb0 [ 216.386802][ T8409] ? rwsem_write_trylock+0x166/0x210 [ 216.392145][ T8409] ? clear_nonspinnable+0x60/0x60 [ 216.397209][ T8409] down_write_nested+0x39/0x60 [ 216.402010][ T8409] ? ext4_ioctl+0x460f/0x5f60 [ 216.406714][ T8409] ext4_ioctl+0x460f/0x5f60 [ 216.411239][ T8409] ? kasan_set_track+0x4b/0x70 [ 216.416127][ T8409] ? ext4_fileattr_set+0x1770/0x1770 [ 216.421439][ T8409] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 216.426297][ T8409] ? __x64_compat_sys_ioctl+0x80/0x80 [ 216.431678][ T8409] ? __lock_acquire+0x1f80/0x1f80 [ 216.436737][ T8409] ? lockdep_hardirqs_on+0x94/0x130 [ 216.442062][ T8409] ? __kmem_cache_free+0x25c/0x3c0 [ 216.447202][ T8409] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 216.452868][ T8409] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 216.458538][ T8409] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 216.464217][ T8409] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 216.469735][ T8409] ? __fget_files+0x28/0x4a0 [ 216.474352][ T8409] ? __fget_files+0x28/0x4a0 [ 216.478948][ T8409] ? __fget_files+0x435/0x4a0 [ 216.483631][ T8409] ? __fget_files+0x28/0x4a0 [ 216.488230][ T8409] ? bpf_lsm_file_ioctl+0x5/0x10 [ 216.493177][ T8409] ? security_file_ioctl+0x7d/0xa0 [ 216.498294][ T8409] ? ext4_fileattr_set+0x1770/0x1770 [ 216.503613][ T8409] __se_sys_ioctl+0xf1/0x160 [ 216.508209][ T8409] do_syscall_64+0x3b/0xb0 [ 216.512647][ T8409] ? clear_bhb_loop+0x45/0xa0 [ 216.517340][ T8409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.523242][ T8409] RIP: 0033:0x7fa35417fed9 [ 216.527659][ T8409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.547274][ T8409] RSP: 002b:00007fa354efe058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.555697][ T8409] RAX: ffffffffffffffda RBX: 00007fa354345fa0 RCX: 00007fa35417fed9 [ 216.563668][ T8409] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 216.571640][ T8409] RBP: 00007fa3541f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 216.579610][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.587584][ T8409] R13: 0000000000000000 R14: 00007fa354345fa0 R15: 00007ffc582010b8 [ 216.595564][ T8409] [ 216.598851][ T8409] Kernel Offset: disabled [ 216.603180][ T8409] Rebooting in 86400 seconds..