last executing test programs: 8m30.034984844s ago: executing program 32 (id=1318): r0 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x7fe5ac9892478419, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x200000, 0x12345}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m37.70929687s ago: executing program 5 (id=4089): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) 3m36.523826587s ago: executing program 5 (id=4104): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}, @TCA_FQ_CODEL_ECN={0x0, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0xfffffc1f, 0x2, 0x7f}]}}]}, 0x58}}, 0x8010) 3m35.884984396s ago: executing program 5 (id=4105): syz_mount_image$squashfs(&(0x7f0000001d80), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000003c0)=ANY=[], 0x1, 0x1d6, &(0x7f0000000f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 3m35.58822027s ago: executing program 5 (id=4108): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000001, &(0x7f0000000180)={[{@resuid}, {@init_itable}, {@stripe={'stripe', 0x3d, 0xd40}}, {@noblock_validity}]}, 0x7, 0x453, &(0x7f00000009c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, 0x0) 3m34.918078399s ago: executing program 5 (id=4115): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010000000000402f17370000000001000109022400010000a00009040000040300020009210000020122030009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="403005"], 0x0, 0x0, 0x0}, 0x0) 3m34.517043625s ago: executing program 3 (id=4120): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x4, 0x6}, 0x4) 3m34.416177436s ago: executing program 3 (id=4121): r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4c092, r0, 0x0) fallocate(r0, 0x3, 0x8000000f5, 0xfffffffb) 3m34.261806679s ago: executing program 5 (id=4123): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x8}) ppoll(&(0x7f0000000040)=[{r0, 0x4040}], 0x1, 0x0, 0x0, 0x0) 3m34.261549079s ago: executing program 3 (id=4124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010400000140001800600010002000000"], 0x28}}, 0x0) 3m33.946865733s ago: executing program 33 (id=4123): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x9, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x8}) ppoll(&(0x7f0000000040)=[{r0, 0x4040}], 0x1, 0x0, 0x0, 0x0) 3m33.941570463s ago: executing program 3 (id=4127): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000001, &(0x7f0000000180)={[{@resuid}, {@init_itable}, {@stripe={'stripe', 0x3d, 0xd40}}, {@noblock_validity}]}, 0x7, 0x453, &(0x7f00000009c0)="$eJzs3M9vFFUcAPDvzHaLCNiKqPxS8Vck/mgpoHLwoEYTD5iY6EGPTVsIslBDayKEKBiDJ2NMvBuP/gt60Ysxnoxe9W5IiOECeFozuzN0d7u7tNsti93PJxl4b+ZN3/v2zdt9M2+3AQytfdk/ScTWiPgzIsbq2eYC++r/Xb96fubG1fMzSVSrb/+T1Mpdu3p+pihanLclz+xPI9LPktjTpt6Fs+dOTlcqc2fy/OTiqQ8mF86ee+7Eqenjc8fnTh88cuTwoakXXzj4fF/izNp0bffH83t3vfHeV28e/aIp/pY41mznpsYf3daT1WrfqrsTbGtIJyMDbAirUoqIrLvKtfE/FqVY6ryxeP3TgTYOWFfVarW6pfPhC1VgA0uiOW/Iw7Ao3uiz+99ia50EvLx+04+Bu/JK/QYoi/t6vtWPjESalym33N/2076IePfCv99kW/T7OQQAQBs/ZvOfZ9vN/9J4oKHcPfna0HhE3BsR2yPivojYERH3R9TKPhgRO1dZf+siyfL5T3q5p8BWKJv/vZSvbTXP/4rZX4yX8ty2Wvzl5NiJytyB/HeyP8qbsvxUlzp+eu2PLzsda5z/ZVtWfzEXzNtxeWRT8zmz04vTa4m50ZWLEbtH2sWf3FwJSCJiV0Ts7rGOE09/t7fTsVvH30Uf1pmq30Y8Ve//C9ESfyHpvj45eVdU5g5MFlfFcr/+dumtTvWvKf4+yPr/7rbX/834x5PG9dqF1ddx6a/PO97T9Hr9jybv1NKj+b6PphcXz0xFjCZH641u3H9w6dwiX5T/4ff6/nbjf3ss/Sb2RER2ET8UEQ9HxCN52x+NiMci4vEu8f/y6hPv9x7/+sr6f3ZV/b+UGI3WPe0TpZM/f99U6fiy+G907//DtdT+fM9KXv9W0q7ermYAAAD4/0kjYmsk6cTNdJpOTNQ/L78jIq3MLyw+c2z+w9Oz9e8IjEc5LZ50jTU8D53Kb+vr+YsRUf9oQXH8UP7c+OvS5lp+Yma+Mjvo4GHIbekw/jN/lwbdOmDd+b4WDC/jH4aX8Q/Dy/iH4dVm/G8eRDuA26/d+/8nA2gHcPu1jH/LfjBE3P/D8Oo4/jfyX/4Barz/w1Ba2By3/pJ810Txk3o8fcMmonxHNGPtiWrStnMjHXTDJNYzMdjXJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH75LwAA//8HW+BC") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, 0x0) 3m33.4956317s ago: executing program 3 (id=4130): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffd91, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1f}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 3m32.875380258s ago: executing program 3 (id=4132): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 3m32.267683197s ago: executing program 34 (id=4132): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 3m32.235809837s ago: executing program 2 (id=4134): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@nobarrier}, {@gid}, {}, {@force}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'default'}}]}, 0x44, 0x6f7, &(0x7f000000dcc0)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvS6J01heu5HtIidCxAUKRzihHDgUIXPoCfWABOKAKGckJK4o90jcIw4smtmZ9f7Y693GP0n6PNJ4vpn5ft55O/Pt7myjDeAza/HtmNyOJBYvvLWVbj/YqTcf7NRXi3JETEVEKaLcXkWyFpF8EnE12kt8Lt2Zd5fsN84bD//0m/P3P6q3t8r5ktUvDWu3qzVkhO18idmImMjXYyrv19/1eHOgv3tjdZ104k4Tdq5IHJy01oDtcZqPcN8CT7p7EROTe+yvRZyKiOn8fUDks0PpmMM7dGPNcgAAAPBkmjiowvOP4lFsxczxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPhqT9m4FJvpSK8mwkxe//V/J9qUrlhOMd7isHHP/g5jEFAgAAAAAAAABH4uP8i/uzj+JRbMVMsb+VZN/5v5ZtnM7+PhfvxUYsxXpcjK1oxGZsxnrMR0zOdHVY2Wpsbq7PD7b8daQtW63WvbzlQkTUBlouHMNJAwAAAAAAAMCz6yexGDMnHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIibaq2w5XZRrUSpHxHREVNJ62xF/KcpPuuqQY389xjgAAADghBQfjWeS/7ULrST7zP9y9rl/Ot6LtdiM5diMZizFjexZQPtTf+mf2/Xmg536aroMdvzt/4wVR9ZjREzE+/uMPJfVONNpsRjfje/HhZiNa7Eey/HDaMRmLMVsVNOTiEYkUau2n17Uijj3jvdqz9a1/tjO9m2/mkVSjZuxnMV2Ma5Xov3YJDuHdMxXu0b7YyWib8T30+wk38qNmKMbXf+9fpU/l8m1nh+xj6NRy858spORuTT3eTZeGJ77Ma+T/pHmo9R5BnV6d5R0s3+kIuc/GCfnp/J1muuf9+b8sI35KK0/EwtRyq++iJd7c377i/df7G385X/97dqt0trKrZsbF47wlB7H7EEVJotCfybqXZl4ZfjVl2eimWZie/RMTPbvmB615dGq5NnIpqIRZ8vvZKVGvNZ1Cb4bN2IpLsdczMeVmItvxELUO1dYupzpyWu5vtqbk+xeKw3Ob8OexJ77UlelXxxQ+XileXmhK6/dM10tO5bvufrLmOu6+l4cfvWN/SqQjv/5vJyO8dPOK86ToCcT+dxcRPfS8Ez8tpX+3Wiurazfatwecbzz+Tq9bT/onZt/N3rU/a/uhyG9XtIZt5xtZTmpFtdLeuylTrS9+ark37i025UGjp3pHKvFTCzH9/a9Uyv5e7jBntrHXuk+9u/dmbOSv78pjvW8y4l3o5m9C+lz4FQNwDE79fqpSvVh9R/VD6s/q96qvjX95tSVqS9UYvLv5T9P/KH0+9I3k9fjw/hxzJx0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CzYuHN3pdFsLq13CjHdv+dxC5V9xxpeiNKBdXaeG63DqEUMHyvJC5XDPfensVCNvj3FLyw9bs8fR8SQOpXHDj4Z+xobu5Dm4VA6LH44LdvTmhijeblotXedcmxMx0ojKe9xx03t3gVRW2k0/9vqaV6NrlsGeMZd2ly9fWnjzt2vLq823ll6Z2lt4crlK5frX5//2qWby82lufbfk44SOAobd+5OnHQMAAAAAAAAAAAAwHjy//t/81P/Y4byAXUq6xt7j3z2uE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEotvh2T25HE/NzFuXT7wU69mS5FebdmOSJKEZH8KCL5JOJqtJeodXWX7DfOGw+jdP7+R/XdvspF/dKwdqPZzpeYjYiJfH2wqT26Gezveld/258qvKRzhmnCzhWJg5P2/wAAAP//vnbzsA==") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 3m20.224128888s ago: executing program 2 (id=4145): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") unlink(&(0x7f0000000280)='./file1\x00') rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 3m19.562465508s ago: executing program 2 (id=4151): r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m19.38488364s ago: executing program 2 (id=4140): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000001, &(0x7f0000000180)={[{@resuid}, {@init_itable}, {@stripe={'stripe', 0x3d, 0xd40}}, {@noblock_validity}]}, 0x7, 0x453, &(0x7f00000009c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, 0x0) 3m18.776820479s ago: executing program 2 (id=4147): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 3m18.151605357s ago: executing program 2 (id=4154): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x2000400) fallocate(r0, 0x2, 0x7, 0x4) 3m17.489477937s ago: executing program 35 (id=4154): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x2000400) fallocate(r0, 0x2, 0x7, 0x4) 1m57.112954478s ago: executing program 4 (id=4792): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x10000000003, 0x1) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000500)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={r1, 0x0, 0x0}) 1m56.819246602s ago: executing program 4 (id=4797): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x1, 0x0) 1m56.616134715s ago: executing program 4 (id=4800): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) 1m56.433997518s ago: executing program 4 (id=4802): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44c, &(0x7f0000000340)="$eJzs28tvG1UXAPAzdpx++dKSUMqr5REoiIpH0qQFumABCCQWRUKCBSyjJK1C3QQ1QaJVJFIWZYUQEnvEkn+BFWwQYoXEFvaoUoWyoWVlNPZMYru2m6R2XOrfT5r23Hnk3uOZa9+ZawcwsCbSf5KI/RHxe0SM1YqNO0zU/ru+sTZ3Y2NtLolK5d2/kup+f2+szeW75seN1hciiSMt6l25eOncbLm8cCErT62e/2hq5eKlFxbPz55dOLuwNHPq1MkT0y+/NPNiV/IcjUIWvfXBV2+f/qIh/6Y8umSi08anK5UuV9dfB+riZKiPDWFHihGRnq5Stf+PRTG2Tt5YvPlZXxsH9FSlUqmMtt+8XgHuYkk0lnV5GBT5B316/5svzYOAV3s3/Oi7a6/VboDSvK9nS23L0OYTg1LT/W03TUTE++v/fJMu0ZvnEAAADX5Ixz/Pp6Od5vFfIR6o2++ebG5oPCLujYiDEXFfLMWhiLg/orrvgxHx0A7rb54kuXn8U7i6q8S2KR3/vZLNbTWO//LRX4wXs9KBav6l5MxieeF49poci9K+tDzdoY4f3/jty3bb6sd/6ZLWn48Fs3ZcHdrXeMz87Ors7eRc79rliMNDrfJPNmcCkoh4OCIO77KOxWe/e6Tdtlvn30EX5pkq30Y8Uzv/69GUfy7pPD859b8oLxyfyq+Km/3y65V32tV/W/l3QXr+/9/y+t/Mfzypn69d2XkdV/74vO09zW6v/+HkvWo8nK37ZHZ19cJ0xHByutbo+vUzW8fm5Xz/NP9jR1v3/4Ox9UociYj0In40Ih6LiMeztj8REU9GxNEO+f/8+lMfNq8b2Xb+vZXmP7+j878VDEfzmtZB8dxP3zdUOr4VZvnf6Hz+T1ajY9ma7bz/baddu7uaAQAA4L+nEBH7IylMbsaFwuRk7Tv8hyIK5eWV1efOLH+8NF/7jcB4lAr5k66xuueh09ltfa18OSJqXy3It5+IQvW58dfFkWp5cm65PN/v5GHAjbbp/6k/i/1uHdBzfq8Fg0v/h8Gl/8Pg2ln/39ezdgB7r0X/H+lHO4C91+rz/9M+tAPYe03937QfDBDP/2Bw6f8wuPR/GEgrI3HrH8l3DPK/tMvD79ogSndEM3oWROGOaIagR0F/35cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC65d8AAAD//9S+3I8=") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m55.807356677s ago: executing program 4 (id=4807): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) 1m54.945622059s ago: executing program 4 (id=4817): r0 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8}) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) 1m54.335963167s ago: executing program 36 (id=4817): r0 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8}) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) 1m5.066619047s ago: executing program 8 (id=5325): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7", 0x48}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x10) 1m4.83156121s ago: executing program 8 (id=5327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x25dfdbfa, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m4.727865451s ago: executing program 8 (id=5331): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, 0x0) 1m4.615180073s ago: executing program 8 (id=5333): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0xa04000, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x1a4, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x800) 1m4.443061786s ago: executing program 8 (id=5337): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000240)='./file0\x00', 0x2000000, &(0x7f0000000300)=ANY=[], 0x1, 0x22f, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x16d100, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/198, 0xc6}], 0x1, 0x7fff, 0x7) 1m3.930728233s ago: executing program 8 (id=5344): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'wlan0\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'dvmrp0\x00', 0x400012}, 0x18) 1m3.572334318s ago: executing program 37 (id=5344): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'wlan0\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'dvmrp0\x00', 0x400012}, 0x18) 4.357165519s ago: executing program 7 (id=6012): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 4.076719463s ago: executing program 7 (id=6015): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x9, 0x2, 0xfffff038}, {0x20, 0x7, 0x0, 0xaf6e}, {0x6, 0x20, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 3.501753261s ago: executing program 7 (id=6024): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, &(0x7f0000000180)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 3.310951404s ago: executing program 7 (id=6029): r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}, 0x20) 2.982621678s ago: executing program 7 (id=6034): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f7f, 0x8001, 0x9, 0xffffffff, 0x6, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 2.801061291s ago: executing program 7 (id=6049): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x60b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x70, 0x4, [{{0x9, 0x4, 0x0, 0xe, 0x45, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc4, 0xfc, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80, 0x0, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0xd9f, 0x4, 0x4b, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x20, 0x30, 0xc, {0xc, 0x24, "24acc9bc3c6cecdb88d4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.651118113s ago: executing program 0 (id=6043): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x30, r1, 0x1c992a431184d011, 0x70bd26, 0x25dfdc01, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc8d0}, 0x4) 2.504498945s ago: executing program 0 (id=6045): syz_mount_image$ocfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8c0, &(0x7f0000000400)={[{@preferred_slot={'preferred_slot', 0x3d, 0x6}}, {@heartbeat_none}, {@data_ordered}, {@err_ro}, {@journal_async_commit}, {@nouser_xattr}, {@coherency_full}, {@commit={'commit', 0x3d, 0x3ff}}]}, 0x1, 0x4438, &(0x7f0000008940)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) 2.17171075s ago: executing program 9 (id=6050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="08010e8004"], 0x124}}, 0x0) 2.039713512s ago: executing program 9 (id=6053): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 1.910879514s ago: executing program 9 (id=6054): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 1.842592374s ago: executing program 9 (id=6055): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'geneve1\x00'}}, 0x1e) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) 1.839980544s ago: executing program 0 (id=6056): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) fdatasync(r0) 1.706537866s ago: executing program 9 (id=6057): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x30, r1, 0x1c992a431184d011, 0x70bd26, 0x25dfdc01, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc8d0}, 0x4) 1.547617479s ago: executing program 9 (id=6058): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "45f9739a"}]}}, 0x0}, 0x0) 1.45556534s ago: executing program 6 (id=6059): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x0, 0xfff, 0x9}) close(r0) 1.348294412s ago: executing program 6 (id=6060): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 1.043186686s ago: executing program 0 (id=6072): syz_clone3(&(0x7f00000002c0)={0x40000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) 916.938547ms ago: executing program 6 (id=6062): add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000140)=@udp}, 0x20) 766.36439ms ago: executing program 6 (id=6063): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 671.387621ms ago: executing program 0 (id=6064): setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x8021}, 0x4020054) 671.227101ms ago: executing program 1 (id=6066): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000004c0)=0xe) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) 618.823152ms ago: executing program 6 (id=6067): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001580), 0x60000, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) close(r0) 468.682584ms ago: executing program 6 (id=6068): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610916dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84b99b2ed90f71810cd92eeca69f5275cb7b7027d4babf643bd69b0a68134c022fe5dcd03834f547325ac2d1a5d16f074d898946ff71afa90180b317e645dd58a922e5d907462cd50dc23801c48c0d49ab012961d84d2eb85a3730a3f3177da048c3bc991216b11dca020afefc24ae7583b59534a0ab1fca82bf473216141db8e9864f7861d0500a920e1a8d3352d0662f586e743386e87b6c0c5ed6e4d192ef2990b44cedbb708e7a18b20dcd5573b603c4d659992647ffa8210abf4e9d232b52a8ea1dd1c045afd8e472cd1fbb775e89cca49d136a6"], 0x1, 0x4446, &(0x7f00000088c0)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000600)=ANY=[], 0x50, 0x1) 468.393714ms ago: executing program 1 (id=6069): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_EMULATED_HOST(r1, 0x2283, &(0x7f0000000000)) 468.152394ms ago: executing program 0 (id=6070): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='auxv\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 331.896576ms ago: executing program 1 (id=6071): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000400), 0x0}, 0x20) 267.648527ms ago: executing program 1 (id=6073): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 100.741249ms ago: executing program 1 (id=6074): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020946c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085f4000010000000180100002075"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071009154090893b3520ba54a07"], 0xfe33) 0s ago: executing program 1 (id=6075): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): 68361][T17197] exfat: Deprecated parameter 'namecase' [ 658.640897][T17197] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x6dfb6af6, utbl_chksum : 0xe619d30d) [ 658.686393][T17114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.697356][T15093] EXT4-fs (loop7): unmounting filesystem. [ 659.017899][T17114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.026968][T17114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.070516][T17114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.154965][ T46] device hsr_slave_0 left promiscuous mode [ 659.196862][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 659.206616][ T46] device hsr_slave_1 left promiscuous mode [ 659.218371][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.225842][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.269827][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.299241][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.334280][ T46] device bridge_slave_0 left promiscuous mode [ 659.341019][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.443756][ T46] device veth1_macvtap left promiscuous mode [ 659.462962][ T46] device veth0_macvtap left promiscuous mode [ 659.492900][ T46] device veth1_vlan left promiscuous mode [ 659.504232][ T46] device veth0_vlan left promiscuous mode [ 659.705254][T17207] loop6: detected capacity change from 0 to 32768 [ 659.843900][ T46] bond2 (unregistering): Released all slaves [ 659.902938][ T46] bond1 (unregistering): Released all slaves [ 660.085269][T17221] loop8: detected capacity change from 0 to 32768 [ 660.201425][T17221] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode. [ 660.340924][T15290] ocfs2: Unmounting device (7,8) on (node local) [ 660.887097][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 1 < 9 [ 660.995506][ C0] vkms_vblank_simulate: vblank timer overrun [ 661.015660][ T46] team0 (unregistering): Port device team_slave_1 removed [ 661.139267][ T46] team0 (unregistering): Port device team_slave_0 removed [ 661.226092][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.278807][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 661.328398][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.465961][T17236] random: crng reseeded on system resumption [ 662.502317][ T46] bond0 (unregistering): Released all slaves [ 662.655361][T17114] device hsr_slave_0 entered promiscuous mode [ 662.669657][T17114] device hsr_slave_1 entered promiscuous mode [ 662.685278][T17114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.693787][T17114] Cannot create hsr debugfs directory [ 662.707237][ T5652] lo speed is unknown, defaulting to 1000 [ 663.128296][T17253] loop8: detected capacity change from 0 to 1024 [ 663.220461][T17259] loop6: detected capacity change from 0 to 8 [ 663.221844][T17253] hfsplus: bad catalog entry type [ 663.246617][T17259] SQUASHFS error: xz decompression failed, data probably corrupt [ 663.258600][T17259] SQUASHFS error: Failed to read block 0x108: -5 [ 663.273854][T17259] SQUASHFS error: Unable to read metadata cache entry [106] [ 663.306153][T17259] SQUASHFS error: Unable to read inode 0x11f [ 663.357228][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 663.383090][ T4315] hfsplus: b-tree write err: -5, ino 4 [ 663.542271][T17114] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 663.555576][T17267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 663.584184][T17114] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 663.707022][T17114] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 663.749476][T17114] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 664.060888][T17114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.115748][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 664.134303][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 664.158570][T17114] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.180072][T17278] mkiss: ax0: crc mode is auto. [ 664.210743][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 664.233852][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 664.286623][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.293844][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.367093][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 664.397766][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 664.408779][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 664.446135][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.453433][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.482027][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 664.503721][T17263] loop7: detected capacity change from 0 to 32768 [ 664.511371][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 664.530336][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 664.557079][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 664.568355][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 664.602895][T17263] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 664.634428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 664.645357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 664.645771][T17263] XFS (loop7): Mounting V5 Filesystem [ 664.697802][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 664.727334][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 664.753161][T17114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.798166][T17263] XFS (loop7): Ending clean mount [ 664.798390][T17114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 664.808859][T17263] XFS (loop7): Quotacheck needed: Please wait. [ 664.842893][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 664.857525][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 664.930830][T17263] XFS (loop7): Quotacheck: Done. [ 664.985061][T17301] loop8: detected capacity change from 0 to 512 [ 665.126652][T15093] XFS (loop7): Unmounting Filesystem [ 665.158762][T17276] loop6: detected capacity change from 0 to 32768 [ 665.161044][T17301] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 665.166223][T17276] XFS: ikeep mount option is deprecated. [ 665.243101][T17276] XFS (loop6): Mounting V5 Filesystem [ 665.332554][T15290] EXT4-fs (loop8): unmounting filesystem. [ 665.364318][T17276] XFS (loop6): Ending clean mount [ 665.455470][T17276] XFS (loop6): Quotacheck needed: Please wait. [ 665.542635][T17276] XFS (loop6): Quotacheck: Done. [ 665.711484][T15049] XFS (loop6): Unmounting Filesystem [ 665.859146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 665.866716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 665.888533][T17114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.356416][T17332] loop8: detected capacity change from 0 to 64 [ 666.447300][T17332] MINIX-fs: deleted inode referenced: 6 [ 666.478500][T17332] MINIX-fs: deleted inode referenced: 6 [ 666.500206][T17332] Trying to free block not in datazone [ 666.575620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 666.595541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 666.642328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 666.679881][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 666.707813][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 666.724925][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 666.744435][T17114] device veth0_vlan entered promiscuous mode [ 666.776002][T17114] device veth1_vlan entered promiscuous mode [ 666.933773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 666.990918][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 667.038067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 667.049369][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 667.089480][T17114] device veth0_macvtap entered promiscuous mode [ 667.124696][T17342] loop7: detected capacity change from 0 to 256 [ 667.132136][T17114] device veth1_macvtap entered promiscuous mode [ 667.178073][T17342] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 667.215807][T17114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.228686][T17342] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 667.232062][T17114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.258270][T17114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.274951][T17114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.286969][T17342] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 667.289524][T17114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.294682][T17342] UDF-fs: Scanning with blocksize 512 failed [ 667.311671][T17114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.361028][T17114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.386829][T17114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.403841][T17342] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 667.413382][T17114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.438001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 667.452943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 667.461875][T17342] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 667.491864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 667.526050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 667.545113][T17114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.558055][T17114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.596495][T17114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.618513][T17114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.637240][T17114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.677091][T17114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.708855][T17114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.722000][T17114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.734559][T17114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.779644][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 667.800133][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 667.846115][T17114] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.860851][T17114] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.873638][T17114] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.888716][T17114] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.904406][T17354] netlink: 27 bytes leftover after parsing attributes in process `syz.7.4908'. [ 668.112368][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.151616][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.194795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 668.244131][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.275881][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.324554][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 668.762637][T17367] loop8: detected capacity change from 0 to 4096 [ 668.766641][T17371] loop7: detected capacity change from 0 to 1024 [ 668.844465][T17372] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 668.880907][T17371] EXT4-fs: Ignoring removed orlov option [ 668.915687][T17367] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 668.962330][T17371] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 669.147240][T17367] Remounting filesystem read-only [ 669.263482][T17371] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 669.325177][T15290] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 669.348611][T17377] loop9: detected capacity change from 0 to 2048 [ 669.426637][T15093] EXT4-fs (loop7): unmounting filesystem. [ 669.452966][T17378] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 669.635979][T17382] loop8: detected capacity change from 0 to 2048 [ 669.755498][T17382] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 669.866904][T17348] loop6: detected capacity change from 0 to 65536 [ 669.991151][T17348] XFS (loop6): Mounting V5 Filesystem [ 670.042330][T17348] XFS (loop6): Ending clean mount [ 670.338030][T15049] XFS (loop6): Unmounting Filesystem [ 671.863661][T17428] loop6: detected capacity change from 0 to 2048 [ 671.938215][T17432] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 672.541504][T17450] loop6: detected capacity change from 0 to 256 [ 672.563911][T17453] loop8: detected capacity change from 0 to 512 [ 672.599424][T17450] exFAT-fs (loop6): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 672.638639][T17453] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 672.669703][T17453] EXT4-fs (loop8): orphan cleanup on readonly fs [ 672.704402][T17453] Quota error (device loop8): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 672.748877][T17453] EXT4-fs warning (device loop8): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 672.776154][T17453] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 672.787234][T17453] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #16: comm syz.8.4950: casefold flag without casefold feature [ 672.806289][T17453] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.4950: couldn't read orphan inode 16 (err -117) [ 672.825014][T17453] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 672.947856][T15290] EXT4-fs (loop8): unmounting filesystem. [ 673.400539][T17468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4956'. [ 673.400568][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4956'. [ 673.400593][T17468] netlink: 'syz.0.4956': attribute type 6 has an invalid length. [ 673.704455][T17480] loop9: detected capacity change from 0 to 64 [ 673.943319][T17114] Trying to free block not in datazone [ 673.961892][T17114] Trying to free block not in datazone [ 674.009299][T17114] Trying to free block not in datazone [ 674.014923][T17114] Trying to free block not in datazone [ 674.055487][T17114] Trying to free block not in datazone [ 674.061726][T17114] Trying to free block not in datazone [ 674.067964][T17114] Trying to free block not in datazone [ 674.073492][T17114] Trying to free block not in datazone [ 674.089500][T17114] Trying to free block not in datazone [ 674.095262][T17114] Trying to free block not in datazone [ 674.105644][T17114] Trying to free block not in datazone [ 674.115131][T17114] Trying to free block not in datazone [ 674.139650][T17114] Trying to free block not in datazone [ 674.162936][T17114] Trying to free block not in datazone [ 674.189262][T17459] loop8: detected capacity change from 0 to 40427 [ 674.223022][T17459] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x3ffff [ 674.287520][T17459] F2FS-fs (loop8): invalid crc value [ 674.328681][T17459] F2FS-fs (loop8): Found nat_bits in checkpoint [ 674.509500][T17459] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 674.727178][T15290] syz-executor: attempt to access beyond end of device [ 674.727178][T15290] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 674.773196][T17507] loop9: detected capacity change from 0 to 1024 [ 674.828095][T17509] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4974'. [ 674.842504][T17507] hfsplus: bad catalog entry type [ 674.886890][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4974'. [ 674.950562][ T4314] hfsplus: b-tree write err: -5, ino 4 [ 675.266450][T17494] loop6: detected capacity change from 0 to 40427 [ 675.308456][T17494] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 675.315125][T17494] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 675.428996][T17494] F2FS-fs (loop6): Found nat_bits in checkpoint [ 675.591096][T17494] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 675.606802][T17494] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 675.788354][ T26] audit: type=1800 audit(675.737:2688): pid=17494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4969" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 675.792754][T17534] loop8: detected capacity change from 0 to 256 [ 675.808203][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.937301][T15049] syz-executor: attempt to access beyond end of device [ 675.937301][T15049] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 677.152674][T17574] loop8: detected capacity change from 0 to 164 [ 677.837034][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 677.855738][T17589] loop9: detected capacity change from 0 to 1024 [ 677.886092][T17570] loop7: detected capacity change from 0 to 32768 [ 677.968355][T17589] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 678.013081][T17570] JBD2: Ignoring recovery information on journal [ 678.042453][ T26] audit: type=1800 audit(677.987:2689): pid=17589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5011" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 678.114097][T17570] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 678.261720][T15093] ocfs2: Unmounting device (7,7) on (node local) [ 678.887301][T17609] loop6: detected capacity change from 0 to 4096 [ 679.017983][T17614] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 679.053442][T17609] NILFS error (device loop6): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 679.120658][T17609] Remounting filesystem read-only [ 679.141553][T17609] NILFS (loop6): the device already has a read-only mount. [ 679.365092][T17114] EXT4-fs (loop9): unmounting filesystem. [ 679.502428][T17621] loop7: detected capacity change from 0 to 4096 [ 679.558941][T17621] ntfs: (device loop7): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 679.627329][T17621] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 679.648106][T17631] loop9: detected capacity change from 0 to 1024 [ 679.678758][T17621] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 679.751374][T17621] ntfs: volume version 3.1. [ 679.819228][T17621] ntfs: (device loop7): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp855. You might want to try to use the mount option nls=utf8. [ 679.887986][T17621] ntfs: (device loop7): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 679.933058][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5030'. [ 680.012312][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5030'. [ 680.436376][T17653] loop7: detected capacity change from 0 to 512 [ 680.514348][T17653] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 680.536988][T10110] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 680.624471][T17650] loop6: detected capacity change from 0 to 8192 [ 680.677151][T17653] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 3: comm syz.7.5039: lblock 8 mapped to illegal pblock 3 (length 26) [ 680.695963][T17653] EXT4-fs (loop7): Remounting filesystem read-only [ 680.738404][T10110] usb 10-1: Using ep0 maxpacket: 16 [ 680.753874][T10110] usb 10-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 680.776360][T10110] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.791530][T10110] usb 10-1: Product: syz [ 680.795973][T10110] usb 10-1: Manufacturer: syz [ 680.805767][T10110] usb 10-1: SerialNumber: syz [ 680.819562][T10110] usb 10-1: config 0 descriptor?? [ 680.828448][T15093] EXT4-fs (loop7): unmounting filesystem. [ 681.141203][T17670] sctp: [Deprecated]: syz.6.5046 (pid 17670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 681.141203][T17670] Use struct sctp_sack_info instead [ 681.240720][T10110] mxuport 10-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 681.258015][T10110] mxuport: probe of 10-1:0.0 failed with error -5 [ 681.459446][ T5642] usb 10-1: USB disconnect, device number 2 [ 681.809770][T17686] loop8: detected capacity change from 0 to 512 [ 681.842900][T17686] EXT4-fs (loop8): 1 truncate cleaned up [ 681.850355][T17686] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 682.004430][T15290] EXT4-fs (loop8): unmounting filesystem. [ 682.534182][T17715] device dummy0 entered promiscuous mode [ 682.580198][T17714] device dummy0 left promiscuous mode [ 682.668963][T10110] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 682.874112][T10110] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 682.893578][T10110] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 682.924732][T10110] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 682.954261][T10110] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 682.966225][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 682.977018][T10110] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 683.000926][T10110] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 683.010277][T10110] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 683.018760][T10110] usb 10-1: Product: syz [ 683.030183][T10110] usb 10-1: Manufacturer: syz [ 683.048463][T10110] cdc_wdm 10-1:1.0: skipping garbage [ 683.053817][T10110] cdc_wdm 10-1:1.0: skipping garbage [ 683.082354][T10110] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 683.101741][T10110] cdc_wdm 10-1:1.0: Unknown control protocol [ 683.229091][T17707] loop7: detected capacity change from 0 to 32768 [ 683.316167][T10110] usb 10-1: USB disconnect, device number 3 [ 683.322502][T17707] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 683.390425][T17742] loop6: detected capacity change from 0 to 512 [ 683.438697][T17742] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 683.454723][T17707] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 683.482432][T17742] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.5079: casefold flag without casefold feature [ 683.488656][T17707] (syz.7.5063,17707,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 683.524132][T17707] (syz.7.5063,17707,0):ocfs2_trim_mainbm:7611 ERROR: status = -12 [ 683.533036][T17742] EXT4-fs (loop6): Remounting filesystem read-only [ 683.533633][T17742] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5079: couldn't read orphan inode 15 (err -117) [ 683.581459][T17742] EXT4-fs (loop6): Remounting filesystem read-only [ 683.594114][T17742] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 683.777861][T15049] EXT4-fs (loop6): unmounting filesystem. [ 683.785035][T15093] ocfs2: Unmounting device (7,7) on (node local) [ 684.004193][T17751] loop6: detected capacity change from 0 to 1024 [ 684.026923][ T4351] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 684.231519][ T4351] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.292181][ T4351] usb 9-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 684.321863][ T4351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.369446][ T4351] usb 9-1: config 0 descriptor?? [ 684.415245][T17761] loop7: detected capacity change from 0 to 128 [ 684.440276][T17761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 684.464336][T17761] System zones: 1-3, 19-19, 35-36 [ 684.485447][T17761] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 684.723826][T15093] EXT4-fs (loop7): unmounting filesystem. [ 684.793872][ T4351] elecom 0003:056E:00FE.0047: item fetching failed at offset 0/3 [ 684.823639][ T4351] elecom: probe of 0003:056E:00FE.0047 failed with error -22 [ 684.994647][ T4351] usb 9-1: USB disconnect, device number 4 [ 685.110120][T17759] loop6: detected capacity change from 0 to 40427 [ 685.133295][T17759] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 685.161639][T17759] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 685.190793][T17759] F2FS-fs (loop6): invalid crc value [ 685.241015][T17759] F2FS-fs (loop6): Found nat_bits in checkpoint [ 685.412025][T17759] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 685.433238][T17759] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 686.005098][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.425203][T17810] loop7: detected capacity change from 0 to 4096 [ 686.445443][T17815] loop9: detected capacity change from 0 to 16 [ 686.504504][T17815] erofs: (device loop9): mounted with root inode @ nid 36. [ 686.511352][T17810] ntfs: volume version 3.1. [ 686.578625][T17815] erofs: (device loop9): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel [ 686.611533][T17815] erofs: (device loop9): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel [ 686.664535][T17815] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-95] [ 687.095192][T17828] loop8: detected capacity change from 0 to 4096 [ 687.139581][T17828] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 687.240973][T17828] ntfs3: loop8: Failed to load root. [ 687.327882][T17835] loop7: detected capacity change from 0 to 2048 [ 687.416205][T17835] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 687.484005][T17838] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 687.484339][T17835] syz.7.5120: attempt to access beyond end of device [ 687.484339][T17835] loop7: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 687.575619][T17821] loop6: detected capacity change from 0 to 32768 [ 687.715471][T17821] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 688.050734][T15049] ocfs2: Unmounting device (7,6) on (node local) [ 688.353905][T17866] loop8: detected capacity change from 0 to 256 [ 688.382106][T17866] exfat: Deprecated parameter 'utf8' [ 688.395609][T17867] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5132'. [ 688.431511][T17866] exfat: Deprecated parameter 'namecase' [ 688.455755][T17870] loop6: detected capacity change from 0 to 64 [ 688.458928][T17866] exfat: Deprecated parameter 'namecase' [ 688.486524][T17866] exfat: Deprecated parameter 'utf8' [ 688.531918][T17866] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 688.736894][T10110] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 688.941199][T10110] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.972909][T10110] usb 10-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 689.003127][T10110] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.023621][T10110] usb 10-1: config 0 descriptor?? [ 689.192484][T17887] loop8: detected capacity change from 0 to 64 [ 689.217208][T17858] loop7: detected capacity change from 0 to 32768 [ 689.284690][T17858] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 689.447038][T10110] logitech 0003:046D:C50C.0048: unbalanced collection at end of report description [ 689.467301][T10110] logitech 0003:046D:C50C.0048: parse failed [ 689.473398][T10110] logitech: probe of 0003:046D:C50C.0048 failed with error -22 [ 689.570727][T15093] ocfs2: Unmounting device (7,7) on (node local) [ 689.652890][T10110] usb 10-1: USB disconnect, device number 4 [ 690.118482][T17908] loop8: detected capacity change from 0 to 4096 [ 690.167023][T17908] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 690.192868][T17904] loop7: detected capacity change from 0 to 40427 [ 690.230031][T17904] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 690.237278][T17904] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 690.245688][T17904] F2FS-fs (loop7): build fault injection attr: rate: 17008, type: 0x3ffff [ 690.254448][T17904] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x1f8 [ 690.268104][T17904] F2FS-fs (loop7): invalid crc value [ 690.299443][T17904] F2FS-fs (loop7): Found nat_bits in checkpoint [ 690.409480][T17915] loop9: detected capacity change from 0 to 512 [ 690.413645][T15290] EXT4-fs (loop8): unmounting filesystem. [ 690.484578][T17904] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 690.493973][T17915] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 690.507103][T17904] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 690.574437][ T26] audit: type=1800 audit(690.517:2690): pid=17904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5150" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 690.586847][T17915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 690.693406][T15093] syz-executor: attempt to access beyond end of device [ 690.693406][T15093] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 690.747624][T17915] System zones: 1-12 [ 690.753635][T17915] EXT4-fs (loop9): 1 truncate cleaned up [ 690.759761][T17915] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 690.910333][T17114] EXT4-fs (loop9): unmounting filesystem. [ 691.399599][ T4351] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 691.428184][T17940] tipc: Started in network mode [ 691.433822][T17940] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 691.443844][T17940] tipc: Enabled bearer , priority 12 [ 691.598026][ T4351] usb 7-1: Using ep0 maxpacket: 32 [ 691.610216][ T4351] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 691.649087][ T4351] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 691.670771][T17946] loop7: detected capacity change from 0 to 4096 [ 691.688836][ T4351] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 691.708363][ T4351] usb 7-1: config 1 has no interface number 0 [ 691.714671][ T4351] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.730543][ T4351] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 691.744741][ T4351] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 691.756159][ T4351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.800208][T17949] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 691.804819][ T4351] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 692.009651][ T4351] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 692.218972][T17952] loop8: detected capacity change from 0 to 4096 [ 692.279337][T17959] netlink: 17 bytes leftover after parsing attributes in process `syz.9.5173'. [ 692.432393][ T5652] usb 7-1: USB disconnect, device number 8 [ 692.460764][ T5652] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 692.560597][ T4351] tipc: Node number set to 10136234 [ 692.881481][T17978] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5182'. [ 693.154378][T17987] sp0: Synchronizing with TNC [ 693.495557][T17999] device veth1_macvtap left promiscuous mode [ 693.588207][T18003] device veth1_macvtap entered promiscuous mode [ 693.722810][T18008] loop7: detected capacity change from 0 to 512 [ 693.741032][T18010] loop6: detected capacity change from 0 to 128 [ 693.761477][T18010] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 693.808219][T18013] loop9: detected capacity change from 0 to 1024 [ 693.833669][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5197'. [ 693.838691][T18006] loop8: detected capacity change from 0 to 4096 [ 693.851269][T15049] EXT4-fs (loop6): unmounting filesystem. [ 693.893017][T18008] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 693.912888][T18013] hfsplus: keylen 65060 too large [ 693.939833][T18006] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 693.966869][T18013] hfsplus: xattr search failed [ 694.094035][T15093] EXT4-fs (loop7): unmounting filesystem. [ 694.128937][T15290] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22. [ 695.186685][T18040] loop6: detected capacity change from 0 to 32768 [ 695.258152][T18040] XFS (loop6): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 695.372502][T18052] loop9: detected capacity change from 0 to 40427 [ 695.396815][T18052] F2FS-fs (loop9): Invalid log blocks per segment (83886089) [ 695.404531][T15049] XFS (loop6): Unmounting Filesystem [ 695.405017][T18052] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 695.431061][T18052] F2FS-fs (loop9): invalid crc value [ 695.487835][T18052] F2FS-fs (loop9): Found nat_bits in checkpoint [ 695.606039][T18052] F2FS-fs (loop9): Start checkpoint disabled! [ 695.645005][T18052] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 695.654642][T18052] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 695.691541][T18078] loop7: detected capacity change from 0 to 64 [ 695.723048][T18052] ceph: Unexpected value for 'acl' [ 695.852975][T18065] loop8: detected capacity change from 0 to 32768 [ 695.908194][ T11] kworker/u4:1: attempt to access beyond end of device [ 695.908194][ T11] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 695.946878][T18065] XFS (loop8): Mounting V5 Filesystem [ 696.095518][T18065] XFS (loop8): Ending clean mount [ 696.110606][T18094] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5227'. [ 696.114824][T18065] XFS (loop8): Quotacheck needed: Please wait. [ 696.225075][T18096] net_ratelimit: 84 callbacks suppressed [ 696.225093][T18096] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 808 [ 696.284100][T18065] XFS (loop8): Quotacheck: Done. [ 696.328170][T15290] XFS (loop8): Unmounting Filesystem [ 696.657992][T18098] loop7: detected capacity change from 0 to 32768 [ 696.708058][T18098] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 696.792483][T15093] ocfs2: Unmounting device (7,7) on (node local) [ 697.339979][T18126] loop7: detected capacity change from 0 to 4096 [ 697.348521][T18134] loop8: detected capacity change from 0 to 16 [ 697.356055][T18126] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 697.378310][T18134] erofs: (device loop8): mounted with root inode @ nid 36. [ 697.446095][T18126] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 697.466465][T18138] loop6: detected capacity change from 0 to 128 [ 697.525793][T15290] erofs: (device loop8): erofs_fill_dentries: bogus dirent @ nid 46 [ 697.529771][T18138] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 697.555979][T15290] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 697.583993][T15290] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 697.659271][T15049] EXT4-fs (loop6): unmounting filesystem. [ 697.812788][T18150] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 698.263699][T18162] loop9: detected capacity change from 0 to 8192 [ 698.271988][T18162] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 698.293620][T18162] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 698.304763][T18162] REISERFS (device loop9): using journaled data mode [ 698.317581][ T4271] Bluetooth: hci4: command 0x0406 tx timeout [ 698.326850][T18162] reiserfs: using flush barriers [ 698.338355][T18162] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 698.355616][T18162] REISERFS (device loop9): checking transaction log (loop9) [ 698.378129][T18162] REISERFS (device loop9): Using r5 hash to sort names [ 698.385495][T18162] REISERFS warning (device loop9): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 698.410073][T18162] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 698.440410][T18182] loop8: detected capacity change from 0 to 64 [ 698.711791][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5272'. [ 698.751422][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5272'. [ 698.794710][T18191] netlink: 'syz.6.5272': attribute type 14 has an invalid length. [ 698.807599][T18191] netlink: 'syz.6.5272': attribute type 11 has an invalid length. [ 699.333621][T18192] loop7: detected capacity change from 0 to 32768 [ 699.436467][T18192] XFS (loop7): Mounting V5 Filesystem [ 699.464316][T18198] loop9: detected capacity change from 0 to 32768 [ 699.536630][T18198] JBD2: Ignoring recovery information on journal [ 699.556196][ T26] audit: type=1326 audit(699.497:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18216 comm="syz.6.5279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1cb6f8e969 code=0x0 [ 699.584852][T18192] XFS (loop7): Ending clean mount [ 699.598567][T18196] loop8: detected capacity change from 0 to 32768 [ 699.635421][T18192] XFS (loop7): Quotacheck needed: Please wait. [ 699.635930][T18198] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 699.743916][T18192] XFS (loop7): Quotacheck: Done. [ 699.791949][T17114] ocfs2: Unmounting device (7,9) on (node local) [ 699.901587][T15093] XFS (loop7): Unmounting Filesystem [ 700.615839][T18232] loop8: detected capacity change from 0 to 32768 [ 701.080333][T18248] tipc: Enabling of bearer rejected, failed to enable media [ 701.110153][T18249] sp0: Synchronizing with TNC [ 701.440182][T18263] loop9: detected capacity change from 0 to 128 [ 701.480973][T18263] EXT4-fs (loop9): DAX unsupported by block device. [ 702.042698][T18278] loop6: detected capacity change from 0 to 2048 [ 702.087643][T18278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 702.149434][T18278] UDF-fs: incorrect filename length (10) [ 702.234497][T18263] loop9: detected capacity change from 0 to 32768 [ 702.258074][T18263] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10 [ 702.708042][T18276] loop7: detected capacity change from 0 to 40427 [ 702.725499][T18276] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3ffff [ 702.756043][T18276] F2FS-fs (loop7): invalid crc value [ 702.804079][T18276] F2FS-fs (loop7): Found nat_bits in checkpoint [ 702.894079][T18276] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 702.970912][T18297] loop9: detected capacity change from 0 to 4096 [ 702.996478][ T26] audit: type=1800 audit(702.937:2692): pid=18276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5304" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 702.997259][T18297] ntfs: (device loop9): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 703.064328][T18297] ntfs: (device loop9): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 703.092576][T18297] ntfs: (device loop9): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 703.110398][T15093] syz-executor: attempt to access beyond end of device [ 703.110398][T15093] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 703.125349][T18297] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 703.184016][T18297] ntfs: (device loop9): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 703.213136][T18310] tipc: Enabling of bearer rejected, failed to enable media [ 703.224904][T18297] ntfs: volume version 3.1. [ 703.246267][T18297] ntfs: (device loop9): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 703.270255][T18297] ntfs: (device loop9): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 703.331471][T18297] ntfs: (device loop9): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 703.414556][T18313] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 703.596443][T18320] sock: sock_set_timeout: `syz.8.5325' (pid 18320) tries to set negative timeout [ 703.732341][T18325] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5320'. [ 703.931742][ T5651] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 704.003431][T18339] loop8: detected capacity change from 0 to 64 [ 704.021061][T18338] UBIFS error (pid: 18338): cannot open "upperdir=./file1,", error -22 [ 704.123684][ T5651] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 704.163731][T15290] VFS: Lookup of '.¨' in minix loop8 would have caused loop [ 704.175525][ T5651] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.186231][T15290] VFS: Lookup of '.¨' in minix loop8 would have caused loop [ 704.205194][ T5651] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 704.233508][ T5651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.262222][ T5651] usb 7-1: config 0 descriptor?? [ 704.485717][T18352] loop9: detected capacity change from 0 to 256 [ 704.493975][T18348] loop7: detected capacity change from 0 to 8192 [ 704.525247][T18348] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 704.538510][T18348] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 704.548901][T18348] REISERFS (device loop7): using ordered data mode [ 704.555451][T18348] reiserfs: using flush barriers [ 704.566863][T18348] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 704.599023][T18348] REISERFS (device loop7): checking transaction log (loop7) [ 704.619873][T18348] REISERFS (device loop7): Using r5 hash to sort names [ 704.627368][T18348] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 704.688655][ T4314] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.700180][ T5651] kone 0003:1E7D:2CED.0049: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0 [ 704.882345][ T4314] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.902669][ T4252] usb 7-1: USB disconnect, device number 9 [ 705.011665][ T4314] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.083454][T18366] loop9: detected capacity change from 0 to 512 [ 705.105985][T18366] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 705.125938][T18363] loop7: detected capacity change from 0 to 2048 [ 705.180836][ T4314] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.180882][T18366] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.5348: bad orphan inode 131083 [ 705.224709][T18363] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 705.234089][T18366] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 705.419837][T15093] EXT4-fs (loop7): unmounting filesystem. [ 705.521361][T17114] EXT4-fs (loop9): unmounting filesystem. [ 705.744531][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 705.757775][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 705.767114][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 705.777720][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 705.785347][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 705.796355][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 706.035978][T18396] loop9: detected capacity change from 0 to 4096 [ 706.144899][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 706.144917][ T26] audit: type=1800 audit(706.087:2693): pid=18396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5358" name="file1" dev="loop9" ino=33 res=0 errno=0 [ 706.207414][ T26] audit: type=1804 audit(706.147:2694): pid=18396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.5358" name=2F6E6577726F6F742F39342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop9" ino=33 res=1 errno=0 [ 706.473213][T18410] loop9: detected capacity change from 0 to 8 [ 706.542768][ T26] audit: type=1326 audit(706.467:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.0.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b118e969 code=0x7ffc0000 [ 706.598768][T18417] netlink: 'syz.6.5366': attribute type 3 has an invalid length. [ 706.606107][ T26] audit: type=1326 audit(706.467:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.0.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b118e969 code=0x7ffc0000 [ 706.639428][T18385] chnl_net:caif_netlink_parms(): no params data found [ 706.660750][ T26] audit: type=1326 audit(706.467:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.0.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f64b118e969 code=0x7ffc0000 [ 706.706070][ T26] audit: type=1326 audit(706.467:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.0.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b118e969 code=0x7ffc0000 [ 706.742365][ T26] audit: type=1326 audit(706.467:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18411 comm="syz.0.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64b118e969 code=0x7ffc0000 [ 707.096426][T18430] loop7: detected capacity change from 0 to 1024 [ 707.105207][T18385] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.137584][T18430] EXT4-fs: Ignoring removed bh option [ 707.143144][T18430] EXT4-fs: inline encryption not supported [ 707.149199][T18385] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.160941][T18432] loop6: detected capacity change from 0 to 256 [ 707.167823][T18385] device bridge_slave_0 entered promiscuous mode [ 707.175216][T18430] EXT4-fs: Ignoring removed i_version option [ 707.188976][T18385] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.201896][T18432] FAT-fs (loop6): Directory bread(block 64) failed [ 707.208883][T18385] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.210191][T18385] device bridge_slave_1 entered promiscuous mode [ 707.223249][T18432] FAT-fs (loop6): Directory bread(block 65) failed [ 707.234401][T18432] FAT-fs (loop6): Directory bread(block 66) failed [ 707.252936][T18430] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #3: block 1: comm syz.7.5374: lblock 1 mapped to illegal pblock 1 (length 1) [ 707.278211][T18432] FAT-fs (loop6): Directory bread(block 67) failed [ 707.284903][T18432] FAT-fs (loop6): Directory bread(block 68) failed [ 707.313707][T18430] Quota error (device loop7): write_blk: dquota write failed [ 707.361734][T18430] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 707.380652][T18432] FAT-fs (loop6): Directory bread(block 69) failed [ 707.387541][T18430] EXT4-fs error (device loop7): ext4_acquire_dquot:6802: comm syz.7.5374: Failed to acquire dquot type 0 [ 707.420749][T18432] FAT-fs (loop6): Directory bread(block 70) failed [ 707.429521][T18430] EXT4-fs error (device loop7): ext4_free_blocks:6210: comm syz.7.5374: Freeing blocks not in datazone - block = 0, count = 4096 [ 707.436004][T18385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.459660][ T4314] IPVS: stopping backup sync thread 18313 ... [ 707.474844][T18432] FAT-fs (loop6): Directory bread(block 71) failed [ 707.484675][T18432] FAT-fs (loop6): Directory bread(block 72) failed [ 707.501765][T18432] FAT-fs (loop6): Directory bread(block 73) failed [ 707.513822][T18385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.545113][T18430] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.5374: Invalid inode bitmap blk 0 in block_group 0 [ 707.561971][ T4315] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 707.587490][T18430] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 707.607329][T18440] loop9: detected capacity change from 0 to 256 [ 707.616401][ T4315] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 707.630590][T18430] EXT4-fs (loop7): 1 orphan inode deleted [ 707.644762][T18430] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 707.661796][ T4315] EXT4-fs error (device loop7): ext4_release_dquot:6838: comm kworker/u4:7: Failed to release dquot type 0 [ 707.669488][T18440] FAT-fs (loop9): Directory bread(block 64) failed [ 707.696856][T18440] FAT-fs (loop9): Directory bread(block 65) failed [ 707.732742][T18440] FAT-fs (loop9): Directory bread(block 66) failed [ 707.741405][T18440] FAT-fs (loop9): Directory bread(block 67) failed [ 707.755831][T18440] FAT-fs (loop9): Directory bread(block 68) failed [ 707.762755][T18440] FAT-fs (loop9): Directory bread(block 69) failed [ 707.770034][T18430] EXT4-fs (loop7): unmounting filesystem. [ 707.776538][T18440] FAT-fs (loop9): Directory bread(block 70) failed [ 707.783283][T18440] FAT-fs (loop9): Directory bread(block 71) failed [ 707.790849][T18440] FAT-fs (loop9): Directory bread(block 72) failed [ 707.797579][T18440] FAT-fs (loop9): Directory bread(block 73) failed [ 707.847082][ T4271] Bluetooth: hci4: command 0x0409 tx timeout [ 708.092222][T18385] team0: Port device team_slave_0 added [ 708.288648][T18385] team0: Port device team_slave_1 added [ 708.389225][ T4314] device hsr_slave_0 left promiscuous mode [ 708.395913][ T4314] device hsr_slave_1 left promiscuous mode [ 708.414853][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.427883][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.436860][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.444502][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.462907][ T4314] device bridge_slave_1 left promiscuous mode [ 708.479451][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.490942][ T4314] device bridge_slave_0 left promiscuous mode [ 708.499335][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.587087][ T4314] device veth1_macvtap left promiscuous mode [ 708.605994][ T4314] device veth0_macvtap left promiscuous mode [ 708.623564][ T4314] device veth1_vlan left promiscuous mode [ 708.637238][ T4314] device veth0_vlan left promiscuous mode [ 708.646918][ T4351] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 708.721036][T18476] loop9: detected capacity change from 0 to 1024 [ 708.748220][T18476] EXT4-fs: Ignoring removed bh option [ 708.761791][T18476] EXT4-fs: inline encryption not supported [ 708.778178][T18476] EXT4-fs: Ignoring removed i_version option [ 708.803800][T18478] trusted_key: encrypted_key: insufficient parameters specified [ 708.844970][T18476] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #3: block 1: comm syz.9.5392: lblock 1 mapped to illegal pblock 1 (length 1) [ 708.862198][T18476] EXT4-fs error (device loop9): ext4_acquire_dquot:6802: comm syz.9.5392: Failed to acquire dquot type 0 [ 708.874145][ T4351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.893690][T18476] EXT4-fs error (device loop9): ext4_free_blocks:6210: comm syz.9.5392: Freeing blocks not in datazone - block = 0, count = 4096 [ 708.895438][ T4351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.918445][ T4351] usb 7-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 708.928273][ T4351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.944183][ T4351] usb 7-1: config 0 descriptor?? [ 708.944844][T18476] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.5392: Invalid inode bitmap blk 0 in block_group 0 [ 708.962470][ T4315] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 709.007013][ T4315] EXT4-fs error (device loop9): ext4_release_dquot:6838: comm kworker/u4:7: Failed to release dquot type 0 [ 709.023667][T18476] EXT4-fs error (device loop9) in ext4_free_inode:362: Corrupt filesystem [ 709.043516][T18476] EXT4-fs (loop9): 1 orphan inode deleted [ 709.056846][T18476] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 709.145619][T18476] EXT4-fs (loop9): unmounting filesystem. [ 709.377191][ T4351] asus 0003:0B05:1822.004A: item fetching failed at offset 5/7 [ 709.399947][ T4351] asus 0003:0B05:1822.004A: Asus hid parse failed: -22 [ 709.411298][ T4351] asus: probe of 0003:0B05:1822.004A failed with error -22 [ 709.585799][ T5652] usb 7-1: USB disconnect, device number 10 [ 709.645273][T18490] loop9: detected capacity change from 0 to 8192 [ 709.922653][ T4271] Bluetooth: hci4: command 0x041b tx timeout [ 710.091800][ T4314] team0 (unregistering): Port device team_slave_1 removed [ 710.180210][ T4314] smc: removing net device veth1_to_team with user defined pnetid SYZ2 [ 710.260676][ T4314] team0 (unregistering): Port device team_slave_0 removed [ 710.443712][ T4314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.478325][T18503] random: crng reseeded on system resumption [ 710.547838][ T4314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.905752][ T4314] bond0 (unregistering): Released all slaves [ 711.996909][ T4271] Bluetooth: hci4: command 0x040f tx timeout [ 712.005980][T18385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.013039][T18385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.041308][T18385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.054761][T18385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.061936][T18385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.088330][T18385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.207594][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 1 < 9 [ 712.267649][T18385] device hsr_slave_0 entered promiscuous mode [ 712.303721][T18385] device hsr_slave_1 entered promiscuous mode [ 712.318046][T18525] loop6: detected capacity change from 0 to 1024 [ 712.325376][T18525] EXT4-fs: Ignoring removed bh option [ 712.334558][T18385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.351944][T18385] Cannot create hsr debugfs directory [ 712.372852][T18525] EXT4-fs: inline encryption not supported [ 712.381235][T18525] EXT4-fs: Ignoring removed i_version option [ 712.471974][T18525] EXT4-fs error (device loop6): ext4_map_blocks:745: inode #3: block 1: comm syz.6.5407: lblock 1 mapped to illegal pblock 1 (length 1) [ 712.538788][T18525] __quota_error: 3 callbacks suppressed [ 712.538807][T18525] Quota error (device loop6): write_blk: dquota write failed [ 712.561165][T18525] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 712.571914][T18525] EXT4-fs error (device loop6): ext4_acquire_dquot:6802: comm syz.6.5407: Failed to acquire dquot type 0 [ 712.633270][T18525] EXT4-fs error (device loop6): ext4_free_blocks:6210: comm syz.6.5407: Freeing blocks not in datazone - block = 0, count = 4096 [ 712.660085][T18526] random: crng reseeded on system resumption [ 712.673564][T18525] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.5407: Invalid inode bitmap blk 0 in block_group 0 [ 712.704599][ T46] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 712.719230][T18525] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 712.764719][T18525] EXT4-fs (loop6): 1 orphan inode deleted [ 712.766896][ T46] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 712.776296][T18525] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 712.841348][ T46] EXT4-fs error (device loop6): ext4_release_dquot:6838: comm kworker/u4:3: Failed to release dquot type 0 [ 712.902086][T18540] loop7: detected capacity change from 0 to 256 [ 712.910522][T18525] EXT4-fs (loop6): unmounting filesystem. [ 712.951669][T18540] exfat: Deprecated parameter 'namecase' [ 712.983865][T18540] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x6dfb6af6, utbl_chksum : 0xe619d30d) [ 713.366053][T18552] netlink: 332 bytes leftover after parsing attributes in process `syz.9.5422'. [ 713.402282][T18552] netlink: 196 bytes leftover after parsing attributes in process `syz.9.5422'. [ 713.609377][T18556] loop9: detected capacity change from 0 to 128 [ 713.616436][T18556] EXT4-fs: Ignoring removed nobh option [ 713.708543][T18556] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 713.850776][T17114] EXT4-fs (loop9): unmounting filesystem. [ 713.973339][T18564] tipc: Enabling of bearer rejected, already enabled [ 714.076898][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 714.087550][T18548] loop7: detected capacity change from 0 to 32768 [ 714.197741][T18548] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 714.337240][T18385] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 714.362652][T15093] ocfs2: Unmounting device (7,7) on (node local) [ 714.363658][T18385] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 714.447412][T18385] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 714.488539][T18385] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 714.677231][T18385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.734744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 714.758369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 714.781440][T18385] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.807324][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 714.826841][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 714.856157][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.863389][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.917732][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 714.962098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 714.991514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 715.019517][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.026702][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.055073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 715.096031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 715.122179][T18596] tipc: Enabling of bearer rejected, failed to enable media [ 715.144421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 715.176457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 715.205865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 715.244888][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 715.264292][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 715.301307][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 715.328811][T18602] loop9: detected capacity change from 0 to 8 [ 715.335784][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 715.364424][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 715.393400][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 715.405857][T18602] SQUASHFS error: xz decompression failed, data probably corrupt [ 715.422938][T18385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 715.437566][T18602] SQUASHFS error: Failed to read block 0x108: -5 [ 715.443953][T18602] SQUASHFS error: Unable to read metadata cache entry [106] [ 715.477277][T18602] SQUASHFS error: Unable to read inode 0x11f [ 715.738762][T18608] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5446'. [ 715.759661][T18592] loop6: detected capacity change from 0 to 40427 [ 715.843659][T18592] F2FS-fs (loop6): Found nat_bits in checkpoint [ 715.933926][T18592] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 715.992180][T18592] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 716.044498][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 716.053566][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 716.063547][T18592] F2FS-fs (loop6): Found FS corruption, run fsck to fix. [ 716.073540][T18385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.126412][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 716.146030][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 716.212274][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 716.238173][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 716.253033][T18385] device veth0_vlan entered promiscuous mode [ 716.268376][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 716.284675][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 716.324660][T18385] device veth1_vlan entered promiscuous mode [ 716.397557][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 716.406474][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 716.428225][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 716.447371][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 716.472604][T18385] device veth0_macvtap entered promiscuous mode [ 716.513742][T18385] device veth1_macvtap entered promiscuous mode [ 716.569332][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.586049][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.622199][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.635768][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.652688][T18621] loop9: detected capacity change from 0 to 32768 [ 716.654167][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.677106][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.687694][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.698578][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.759800][T18385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.782756][T18621] XFS (loop9): DAX unsupported by block device. Turning off DAX. [ 716.812099][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 716.822768][T18621] XFS (loop9): Mounting V5 Filesystem [ 716.824081][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 716.845447][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 716.855480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 716.881568][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.916274][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.931366][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.942265][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.952820][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.963984][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.974126][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.984846][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.008448][T18385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.015871][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 717.026077][T18621] XFS (loop9): Ending clean mount [ 717.039003][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 717.049570][T18621] XFS (loop9): Quotacheck needed: Please wait. [ 717.092407][T18385] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.111501][T18385] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.136346][T18385] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.173890][T18385] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.187983][T18621] XFS (loop9): Quotacheck: Done. [ 717.298032][T17114] XFS (loop9): Unmounting Filesystem [ 717.350510][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.404869][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.449111][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.481137][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 717.533542][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.544225][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.554459][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.575007][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 717.875848][T18654] loop1: detected capacity change from 0 to 4096 [ 717.916614][T18646] loop7: detected capacity change from 0 to 32768 [ 718.000386][T18648] loop6: detected capacity change from 0 to 32768 [ 718.360407][T18672] loop1: detected capacity change from 0 to 1764 [ 718.469634][T18678] loop1: detected capacity change from 0 to 256 [ 718.494574][T18678] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 718.611891][T18680] loop9: detected capacity change from 0 to 4096 [ 718.660087][T18683] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 718.706136][T18680] NILFS error (device loop9): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 718.744401][T18680] Remounting filesystem read-only [ 718.833459][T17114] NILFS (loop9): disposed unprocessed dirty file(s) when detaching log writer [ 719.275648][T18682] loop1: detected capacity change from 0 to 32768 [ 719.352709][T18682] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 719.371605][T18682] XFS (loop1): Mounting V5 Filesystem [ 719.440659][T18682] XFS (loop1): Ending clean mount [ 719.445352][T18715] loop6: detected capacity change from 0 to 1024 [ 719.464559][T18715] hfsplus: bad catalog entry type [ 719.470634][T18682] XFS (loop1): Quotacheck needed: Please wait. [ 719.506094][ T4312] hfsplus: b-tree write err: -5, ino 4 [ 719.534905][T18718] loop9: detected capacity change from 0 to 256 [ 719.574319][T18718] exFAT-fs (loop9): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 719.617467][T18682] XFS (loop1): Quotacheck: Done. [ 719.732712][T18385] XFS (loop1): Unmounting Filesystem [ 720.231586][T18743] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5498'. [ 720.264399][T18743] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5498'. [ 720.515586][T18739] loop1: detected capacity change from 0 to 32768 [ 720.649133][T18745] loop9: detected capacity change from 0 to 64 [ 720.666543][T18741] loop7: detected capacity change from 0 to 40427 [ 720.674400][T18741] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 720.681147][T18741] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 720.693358][T18745] MINIX-fs: deleted inode referenced: 6 [ 720.700265][T18745] MINIX-fs: deleted inode referenced: 6 [ 720.706402][T18745] MINIX-fs: deleted inode referenced: 6 [ 720.713049][T18745] MINIX-fs: deleted inode referenced: 6 [ 720.723223][T18741] F2FS-fs (loop7): Found nat_bits in checkpoint [ 720.764237][T18741] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 720.775476][T18741] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 720.814890][ T26] audit: type=1800 audit(720.757:2700): pid=18741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5508" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 720.874896][T15093] syz-executor: attempt to access beyond end of device [ 720.874896][T15093] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 720.898099][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5502'. [ 720.907446][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5502'. [ 720.916352][T18749] netlink: 'syz.9.5502': attribute type 6 has an invalid length. [ 721.464379][T18770] loop1: detected capacity change from 0 to 64 [ 721.538310][T18385] Trying to free block not in datazone [ 721.561103][T18385] Trying to free block not in datazone [ 721.576889][ T4337] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 721.581820][T18385] Trying to free block not in datazone [ 721.595675][T18385] Trying to free block not in datazone [ 721.604721][T18385] Trying to free block not in datazone [ 721.617932][T18385] Trying to free block not in datazone [ 721.623525][T18385] Trying to free block not in datazone [ 721.643196][T18777] loop6: detected capacity change from 0 to 512 [ 721.643786][T18385] Trying to free block not in datazone [ 721.655191][T18385] Trying to free block not in datazone [ 721.672921][T18385] Trying to free block not in datazone [ 721.682891][T18777] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 721.683404][T18385] Trying to free block not in datazone [ 721.701748][T18385] Trying to free block not in datazone [ 721.703712][T18777] EXT4-fs (loop6): orphan cleanup on readonly fs [ 721.707365][T18385] Trying to free block not in datazone [ 721.725204][T18385] Trying to free block not in datazone [ 721.731819][T18777] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 721.765572][T18777] EXT4-fs warning (device loop6): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 721.768790][ T4337] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 721.809718][T18777] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 721.811941][ T4337] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.826289][T18777] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #16: comm syz.6.5514: casefold flag without casefold feature [ 721.831666][T18777] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.5514: couldn't read orphan inode 16 (err -117) [ 721.856069][ T4337] usb 10-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 721.871436][ T4337] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.882921][ T4337] usb 10-1: config 0 descriptor?? [ 721.895672][T18777] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 722.001059][T15049] EXT4-fs (loop6): unmounting filesystem. [ 722.305790][ T4337] glorious 0003:258A:0036.004B: item fetching failed at offset 0/2 [ 722.325984][ T4337] glorious: probe of 0003:258A:0036.004B failed with error -22 [ 722.553352][ T4351] usb 10-1: USB disconnect, device number 5 [ 722.818838][T18790] loop7: detected capacity change from 0 to 1024 [ 722.858236][T18790] hfsplus: bad catalog entry type [ 722.927151][ T4312] hfsplus: b-tree write err: -5, ino 4 [ 723.037183][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5520'. [ 723.095551][T18800] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5520'. [ 723.108885][T18800] netlink: 'syz.7.5520': attribute type 6 has an invalid length. [ 723.534934][T18794] loop1: detected capacity change from 0 to 40427 [ 723.559186][T18794] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 723.565881][T18794] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 723.609275][T18794] F2FS-fs (loop1): Found nat_bits in checkpoint [ 723.736808][T18794] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 723.754226][T18794] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 723.899974][ T26] audit: type=1800 audit(723.847:2701): pid=18794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5519" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 723.990234][T18385] syz-executor: attempt to access beyond end of device [ 723.990234][T18385] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 724.178404][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5555'. [ 724.235391][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5555'. [ 724.393341][T18852] loop6: detected capacity change from 0 to 512 [ 724.485660][T18852] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 724.669456][T15049] EXT4-fs (loop6): unmounting filesystem. [ 725.469574][T18876] loop9: detected capacity change from 0 to 32768 [ 725.507981][T18876] JBD2: Ignoring recovery information on journal [ 725.625668][T18890] loop7: detected capacity change from 0 to 32768 [ 725.680748][T18876] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 725.711057][T18890] XFS (loop7): Mounting V5 Filesystem [ 725.735077][T18887] loop1: detected capacity change from 0 to 32768 [ 725.743987][T18887] XFS: attr2 mount option is deprecated. [ 725.796481][T17114] ocfs2: Unmounting device (7,9) on (node local) [ 725.815484][T18887] XFS (loop1): Mounting V5 Filesystem [ 725.836125][T18890] XFS (loop7): Ending clean mount [ 725.926453][T18887] XFS (loop1): Ending clean mount [ 725.949563][T18887] XFS (loop1): Quotacheck needed: Please wait. [ 726.091914][T15093] XFS (loop7): Unmounting Filesystem [ 726.095009][T18887] XFS (loop1): Quotacheck: Done. [ 726.334958][T18385] XFS (loop1): Unmounting Filesystem [ 727.002611][T18946] sctp: [Deprecated]: syz.7.5583 (pid 18946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 727.002611][T18946] Use struct sctp_sack_info instead [ 727.306897][ T4351] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 727.486823][ T4351] usb 2-1: Using ep0 maxpacket: 16 [ 727.495674][ T4351] usb 2-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 727.505327][ T4351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.513439][ T4351] usb 2-1: Product: syz [ 727.517741][ T4351] usb 2-1: Manufacturer: syz [ 727.522384][ T4351] usb 2-1: SerialNumber: syz [ 727.528989][ T4351] usb 2-1: config 0 descriptor?? [ 727.947843][ T4351] mxuport 2-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 727.955436][ T4351] mxuport: probe of 2-1:0.0 failed with error -5 [ 727.993263][T18962] loop7: detected capacity change from 0 to 1024 [ 728.165328][ T4351] usb 2-1: USB disconnect, device number 13 [ 728.223003][T18954] loop9: detected capacity change from 0 to 32768 [ 728.263411][T18957] loop6: detected capacity change from 0 to 32768 [ 728.268886][T18954] XFS (loop9): Mounting V5 Filesystem [ 728.282766][T18957] JBD2: Ignoring recovery information on journal [ 728.325825][T18957] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 728.332271][T18954] XFS (loop9): Ending clean mount [ 728.422612][T15049] ocfs2: Unmounting device (7,6) on (node local) [ 728.452060][T17114] XFS (loop9): Unmounting Filesystem [ 729.420936][T19002] loop6: detected capacity change from 0 to 4096 [ 729.449342][T19002] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 729.500784][T19002] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 729.546912][T19002] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 729.567315][T19005] loop9: detected capacity change from 0 to 4096 [ 729.614767][T19002] ntfs: volume version 3.1. [ 729.629308][T19009] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 729.640363][T19005] NILFS error (device loop9): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 729.665293][T19005] Remounting filesystem read-only [ 729.684799][T19005] NILFS (loop9): the device already has a read-only mount. [ 729.702291][T19002] ntfs: (device loop6): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp855. You might want to try to use the mount option nls=utf8. [ 729.756923][T19002] ntfs: (device loop6): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 729.821130][T19000] loop1: detected capacity change from 0 to 32768 [ 729.857244][T19000] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 729.903818][T19000] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 729.967754][T19000] (syz.1.5604,19000,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 730.002288][T19000] (syz.1.5604,19000,0):ocfs2_trim_mainbm:7611 ERROR: status = -12 [ 730.129044][T18385] ocfs2: Unmounting device (7,1) on (node local) [ 730.356932][ T5652] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 730.569887][ T5652] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 730.582214][ T5652] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 730.617180][ T5652] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 730.642522][ T5652] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 730.664585][ T5652] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 730.704776][ T5652] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 730.734468][ T5652] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 730.754964][ T5652] usb 7-1: Product: syz [ 730.761864][ T5652] usb 7-1: Manufacturer: syz [ 730.786216][ T5652] cdc_wdm 7-1:1.0: skipping garbage [ 730.792622][ T5652] cdc_wdm 7-1:1.0: skipping garbage [ 730.809042][ T5652] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 730.815105][ T5652] cdc_wdm 7-1:1.0: Unknown control protocol [ 731.023982][ T4337] usb 7-1: USB disconnect, device number 11 [ 731.035267][T19065] loop7: detected capacity change from 0 to 16 [ 731.046534][T19065] erofs: (device loop7): mounted with root inode @ nid 36. [ 731.051189][T19065] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel [ 731.051260][T19065] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel [ 731.051277][T19065] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-95] [ 731.303587][T19078] device dummy0 entered promiscuous mode [ 731.310562][T19074] device dummy0 left promiscuous mode [ 731.700353][T19094] loop1: detected capacity change from 0 to 512 [ 731.791990][T19094] EXT4-fs (loop1): 1 truncate cleaned up [ 731.809155][T19094] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 731.993992][T18385] EXT4-fs (loop1): unmounting filesystem. [ 732.809808][T19105] loop7: detected capacity change from 0 to 40427 [ 732.819598][T19105] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x3ffff [ 732.857388][T19105] F2FS-fs (loop7): invalid crc value [ 732.878466][T19105] F2FS-fs (loop7): Found nat_bits in checkpoint [ 733.000092][T19105] F2FS-fs (loop7): Start checkpoint disabled! [ 733.037006][T19105] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 733.142805][T19155] loop9: detected capacity change from 0 to 1024 [ 733.251105][ T11] kworker/u4:1: attempt to access beyond end of device [ 733.251105][ T11] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 733.273914][T19159] loop6: detected capacity change from 0 to 128 [ 733.307969][T19159] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 733.316628][T19159] System zones: 1-3, 19-19, 35-36 [ 733.325189][T19159] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 733.477818][T15049] EXT4-fs (loop6): unmounting filesystem. [ 734.012116][T19164] loop9: detected capacity change from 0 to 32768 [ 734.044607][T19164] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode. [ 734.077062][T10110] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 734.166677][T19183] loop7: detected capacity change from 0 to 256 [ 734.173927][T19183] exfat: Deprecated parameter 'utf8' [ 734.176828][T19166] loop1: detected capacity change from 0 to 40427 [ 734.180238][T19183] exfat: Deprecated parameter 'namecase' [ 734.191815][T19183] exfat: Deprecated parameter 'namecase' [ 734.194008][T19166] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 734.197721][T19183] exfat: Deprecated parameter 'utf8' [ 734.206377][T19166] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 734.218074][T19183] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 734.229826][T19166] F2FS-fs (loop1): invalid crc value [ 734.243636][T17114] ocfs2: Unmounting device (7,9) on (node local) [ 734.279608][T10110] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.304960][T19166] F2FS-fs (loop1): Found nat_bits in checkpoint [ 734.316157][T10110] usb 7-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 734.339409][T10110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.360316][T10110] usb 7-1: config 0 descriptor?? [ 734.395984][T19166] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 734.414554][T19166] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 734.780935][T10110] elecom 0003:056E:00FE.004C: item fetching failed at offset 0/3 [ 734.794223][T10110] elecom: probe of 0003:056E:00FE.004C failed with error -22 [ 734.853115][T19196] loop7: detected capacity change from 0 to 512 [ 734.866197][T19196] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 734.883669][T19196] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.5691: casefold flag without casefold feature [ 734.898357][T19196] EXT4-fs (loop7): Remounting filesystem read-only [ 734.905073][T19196] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5691: couldn't read orphan inode 15 (err -117) [ 734.919085][T19196] EXT4-fs (loop7): Remounting filesystem read-only [ 734.925732][T19196] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 735.000398][T15093] EXT4-fs (loop7): unmounting filesystem. [ 735.001438][T10110] usb 7-1: USB disconnect, device number 12 [ 735.221052][T19198] loop1: detected capacity change from 0 to 40427 [ 735.229099][T19198] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 735.239320][T19198] F2FS-fs (loop1): invalid crc value [ 735.246524][T19198] F2FS-fs (loop1): Found nat_bits in checkpoint [ 735.286529][T19198] F2FS-fs (loop1): Start checkpoint disabled! [ 735.300393][T19198] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 735.429956][ T46] kworker/u4:3: attempt to access beyond end of device [ 735.429956][ T46] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 735.677673][T19213] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5698'. [ 736.110915][T19233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5706'. [ 736.217643][T19229] loop9: detected capacity change from 0 to 4096 [ 736.225328][T19229] ntfs3: loop9: Different NTFS' sector size (2048) and media sector size (512) [ 736.269536][T19229] ntfs3: loop9: Failed to load root. [ 737.006950][T19242] loop7: detected capacity change from 0 to 32768 [ 737.031198][T19242] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 737.116932][T10110] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 737.152313][T15093] ocfs2: Unmounting device (7,7) on (node local) [ 737.305275][T10110] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 737.323148][T19268] loop6: detected capacity change from 0 to 256 [ 737.331081][T10110] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 737.337601][T19256] loop9: detected capacity change from 0 to 40427 [ 737.348715][T19268] exfat: Deprecated parameter 'utf8' [ 737.354280][T10110] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 737.363874][T19268] exfat: Deprecated parameter 'namecase' [ 737.369402][T19256] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 737.370466][T19268] exfat: Deprecated parameter 'namecase' [ 737.377697][T19256] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 737.382582][T10110] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 737.403839][T19268] exfat: Deprecated parameter 'utf8' [ 737.408892][T19256] F2FS-fs (loop9): build fault injection attr: rate: 17008, type: 0x3ffff [ 737.409866][T10110] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 737.434993][T19268] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 737.436975][T19256] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x1f8 [ 737.463774][T10110] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 737.468505][T19270] sp0: Synchronizing with TNC [ 737.483330][T10110] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 737.484715][T19256] F2FS-fs (loop9): invalid crc value [ 737.504201][T10110] usb 2-1: Product: syz [ 737.516303][T10110] usb 2-1: Manufacturer: syz [ 737.524196][T19256] F2FS-fs (loop9): Found nat_bits in checkpoint [ 737.545097][T10110] cdc_wdm 2-1:1.0: skipping garbage [ 737.558379][T10110] cdc_wdm 2-1:1.0: skipping garbage [ 737.566226][T10110] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 737.577703][T10110] cdc_wdm 2-1:1.0: Unknown control protocol [ 737.604743][T19256] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 737.615156][T19256] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 737.695943][ T26] audit: type=1800 audit(737.637:2702): pid=19256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5717" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 737.758615][T17114] syz-executor: attempt to access beyond end of device [ 737.758615][T17114] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 737.765233][T19276] loop6: detected capacity change from 0 to 4096 [ 737.802339][T10110] usb 2-1: USB disconnect, device number 14 [ 737.829257][T19276] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 737.992480][T15049] EXT4-fs (loop6): unmounting filesystem. [ 738.126927][T19284] loop7: detected capacity change from 0 to 4096 [ 738.137149][T19284] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 738.200526][T19284] ntfs3: loop7: Failed to load root. [ 738.212224][T19291] device veth1_macvtap left promiscuous mode [ 738.240136][T19291] device veth1_macvtap entered promiscuous mode [ 738.255054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 738.452062][T19301] loop9: detected capacity change from 0 to 64 [ 738.611762][T19308] loop6: detected capacity change from 0 to 512 [ 738.622034][T19310] loop9: detected capacity change from 0 to 64 [ 738.664885][T19308] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 738.727942][T15049] EXT4-fs (loop6): unmounting filesystem. [ 738.764923][T19314] loop9: detected capacity change from 0 to 4096 [ 738.785368][T19315] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 739.442080][T19325] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5744'. [ 739.513997][T19323] loop6: detected capacity change from 0 to 4096 [ 739.733470][T19333] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5751'. [ 739.741773][T19336] loop9: detected capacity change from 0 to 128 [ 739.752033][T19337] loop1: detected capacity change from 0 to 64 [ 739.781658][T19336] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 739.902064][T17114] EXT4-fs (loop9): unmounting filesystem. [ 739.955200][T19344] loop1: detected capacity change from 0 to 512 [ 739.975843][T19344] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 740.033493][T19344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 740.053432][T19344] System zones: 1-12 [ 740.059230][T19344] EXT4-fs (loop1): 1 truncate cleaned up [ 740.064921][T19344] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 740.243415][T18385] EXT4-fs (loop1): unmounting filesystem. [ 740.406409][T19351] loop6: detected capacity change from 0 to 32768 [ 740.459340][T19351] XFS (loop6): Mounting V5 Filesystem [ 740.529378][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5763'. [ 740.550160][T19351] XFS (loop6): Ending clean mount [ 740.568393][T19351] XFS (loop6): Quotacheck needed: Please wait. [ 740.601314][T19371] device veth1_macvtap left promiscuous mode [ 740.642170][T19351] XFS (loop6): Quotacheck: Done. [ 740.689071][T19371] device veth1_macvtap entered promiscuous mode [ 740.755013][T15049] XFS (loop6): Unmounting Filesystem [ 741.381703][T19377] loop9: detected capacity change from 0 to 32768 [ 741.422578][T19396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5775'. [ 741.440206][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5775'. [ 741.449522][T19396] netlink: 'syz.0.5775': attribute type 14 has an invalid length. [ 741.457750][T19396] netlink: 'syz.0.5775': attribute type 11 has an invalid length. [ 741.507742][T19377] XFS (loop9): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 741.546117][T19403] tipc: Enabled bearer , priority 12 [ 741.690749][T17114] XFS (loop9): Unmounting Filesystem [ 741.845554][T19417] loop6: detected capacity change from 0 to 64 [ 742.462845][ T26] audit: type=1326 audit(742.407:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19436 comm="syz.1.5791" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe31ad8e969 code=0x0 [ 742.626945][T10110] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 742.741595][T19427] loop6: detected capacity change from 0 to 32768 [ 742.767337][T19427] JBD2: Ignoring recovery information on journal [ 742.832577][T19427] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 742.842180][T10110] usb 10-1: Using ep0 maxpacket: 32 [ 742.850048][T10110] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 742.859520][T10110] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 742.868567][T10110] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 742.878503][T10110] usb 10-1: config 1 has no interface number 0 [ 742.884837][T10110] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 742.896163][T10110] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 742.909475][T10110] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 742.918866][T10110] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.941252][T10110] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 743.032379][T15049] ocfs2: Unmounting device (7,6) on (node local) [ 743.147315][T10110] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 743.601012][ T4337] usb 10-1: USB disconnect, device number 6 [ 743.618164][ T4337] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 743.926801][T19462] tipc: Enabling of bearer rejected, failed to enable media [ 743.935542][T19454] loop6: detected capacity change from 0 to 40427 [ 743.954687][T19454] F2FS-fs (loop6): Invalid log blocks per segment (83886089) [ 743.972458][T19454] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 743.993182][T19454] F2FS-fs (loop6): invalid crc value [ 744.018608][T19454] F2FS-fs (loop6): Found nat_bits in checkpoint [ 744.119286][T19454] F2FS-fs (loop6): Start checkpoint disabled! [ 744.147689][T19454] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 744.154914][T19454] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 744.198189][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5809'. [ 744.216836][T19477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5809'. [ 744.232811][T19477] netlink: 'syz.7.5809': attribute type 14 has an invalid length. [ 744.248395][T19477] netlink: 'syz.7.5809': attribute type 11 has an invalid length. [ 744.287559][T19454] ceph: Unexpected value for 'acl' [ 744.462028][T19488] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 744.524174][ T11] kworker/u4:1: attempt to access beyond end of device [ 744.524174][ T11] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 744.728170][T19492] tipc: Started in network mode [ 744.733109][T19492] tipc: Node identity e0000001, cluster identity 4711 [ 744.786823][T19492] tipc: Enabling of bearer rejected, failed to enable media [ 744.994313][T19481] loop9: detected capacity change from 0 to 32768 [ 745.720901][T19496] loop6: detected capacity change from 0 to 32768 [ 745.724462][T19516] UBIFS error (pid: 19516): cannot open "upperdir=./file1,", error -22 [ 745.797055][T19496] XFS (loop6): Mounting V5 Filesystem [ 745.991599][T19496] XFS (loop6): Ending clean mount [ 746.021925][T19496] XFS (loop6): Quotacheck needed: Please wait. [ 746.200208][T19496] XFS (loop6): Quotacheck: Done. [ 746.403401][T15049] XFS (loop6): Unmounting Filesystem [ 746.768864][T19551] loop7: detected capacity change from 0 to 256 [ 746.788534][T19553] loop1: detected capacity change from 0 to 128 [ 746.832995][T19553] EXT4-fs (loop1): DAX unsupported by block device. [ 746.887185][T19556] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 747.032893][T19549] loop9: detected capacity change from 0 to 8192 [ 747.073121][T19549] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 747.088450][T19560] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5842'. [ 747.126633][T19549] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 747.178368][T19549] REISERFS (device loop9): using ordered data mode [ 747.212039][T19549] reiserfs: using flush barriers [ 747.244710][T19549] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 747.291992][T19549] REISERFS (device loop9): checking transaction log (loop9) [ 747.441751][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.504963][T19549] REISERFS (device loop9): Using tea hash to sort names [ 747.523524][T19549] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 747.593063][T19573] loop7: detected capacity change from 0 to 4096 [ 747.636514][T19573] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 747.646918][T19553] loop1: detected capacity change from 0 to 32768 [ 747.666296][T19553] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 747.706645][T19573] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 747.735231][T19573] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 747.747004][ T26] audit: type=1326 audit(747.687:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.6.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb6f8e969 code=0x7ffc0000 [ 747.788125][T19573] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 747.837123][ T26] audit: type=1326 audit(747.687:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.6.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb6f8e969 code=0x7ffc0000 [ 747.859567][T19573] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 747.897210][ T26] audit: type=1326 audit(747.687:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.6.5851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f1cb6f8e969 code=0x7ffc0000 [ 747.920567][T19573] ntfs: volume version 3.1. [ 747.939593][T19573] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 747.953540][T19584] loop6: detected capacity change from 0 to 64 [ 747.977310][T19573] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 748.103532][T15049] VFS: Lookup of '.¨' in minix loop6 would have caused loop [ 748.117146][T15049] VFS: Lookup of '.¨' in minix loop6 would have caused loop [ 748.491426][T19600] loop1: detected capacity change from 0 to 256 [ 748.783132][ T41] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.933247][ T41] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.116363][ T41] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.237091][ T41] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.302049][ T4337] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 749.504286][ T4337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.525260][ T4337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.547421][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 749.567927][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 749.580614][ T4337] usb 2-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 749.590059][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.604783][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.612612][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 749.619972][ T4337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.628358][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 749.637506][ T4337] usb 2-1: config 0 descriptor?? [ 749.778811][ T41] tipc: Left network mode [ 750.077276][ T4337] asus 0003:0B05:1822.004D: item fetching failed at offset 5/7 [ 750.085462][ T4337] asus 0003:0B05:1822.004D: Asus hid parse failed: -22 [ 750.092424][ T4337] asus: probe of 0003:0B05:1822.004D failed with error -22 [ 750.120239][T19634] chnl_net:caif_netlink_parms(): no params data found [ 750.133866][T19639] loop9: detected capacity change from 0 to 32768 [ 750.177145][T19639] XFS (loop9): Mounting V5 Filesystem [ 750.238511][T19639] XFS (loop9): Ending clean mount [ 750.258771][T19639] XFS (loop9): Quotacheck needed: Please wait. [ 750.295251][T19634] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.302793][ T4351] usb 2-1: USB disconnect, device number 15 [ 750.304664][T19634] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.325871][T19634] device bridge_slave_0 entered promiscuous mode [ 750.381298][T19634] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.389748][T19634] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.397800][T19639] XFS (loop9): Quotacheck: Done. [ 750.412642][T19634] device bridge_slave_1 entered promiscuous mode [ 750.466517][T17114] XFS (loop9): Unmounting Filesystem [ 750.494305][T19634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.533423][T19634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.707392][T19634] team0: Port device team_slave_0 added [ 750.716002][T19634] team0: Port device team_slave_1 added [ 750.775435][T19634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.789078][T19634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.816315][T19634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.829722][T19634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.837235][T19634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.864456][T19634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.952298][T19656] loop7: detected capacity change from 0 to 128 [ 750.999405][T19656] EXT4-fs (loop7): DAX unsupported by block device. [ 751.296467][T19634] device hsr_slave_0 entered promiscuous mode [ 751.306083][T19634] device hsr_slave_1 entered promiscuous mode [ 751.319001][T19634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 751.344069][T19634] Cannot create hsr debugfs directory [ 751.613312][T19656] loop7: detected capacity change from 0 to 32768 [ 751.624514][T19656] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 751.677042][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 751.861388][ T41] device hsr_slave_0 left promiscuous mode [ 751.887712][ T41] device hsr_slave_1 left promiscuous mode [ 751.910046][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.934331][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.955988][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.973842][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.997867][ T41] device bridge_slave_1 left promiscuous mode [ 752.024495][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.048030][ T41] device bridge_slave_0 left promiscuous mode [ 752.065005][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.182132][ T41] device bridge0 left promiscuous mode [ 752.199457][ T41] device veth1_macvtap left promiscuous mode [ 752.215804][ T41] device veth0_macvtap left promiscuous mode [ 752.226044][ T41] device veth1_vlan left promiscuous mode [ 752.237103][ T41] device veth0_vlan left promiscuous mode [ 752.825439][T19680] sock: sock_set_timeout: `syz.7.5892' (pid 19680) tries to set negative timeout [ 752.949587][T19682] loop7: detected capacity change from 0 to 16 [ 752.965287][T19682] erofs: (device loop7): mounted with root inode @ nid 36. [ 753.156259][T15093] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 46 [ 753.179215][T15093] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 753.225694][T15093] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 753.427802][T19694] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5899'. [ 753.453186][T19694] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5899'. [ 753.757293][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 754.094840][ T41] team0 (unregistering): Port device team_slave_1 removed [ 754.183046][ T41] team0 (unregistering): Port device team_slave_0 removed [ 754.271124][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.346193][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.293992][ T41] bond0 (unregistering): Released all slaves [ 755.699561][T19718] loop7: detected capacity change from 0 to 64 [ 755.837215][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 756.232214][T19729] loop7: detected capacity change from 0 to 8192 [ 756.234299][T19731] loop1: detected capacity change from 0 to 4096 [ 756.262086][T19731] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 756.272910][T19729] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 756.320769][T19634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 756.332296][T19729] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 756.333901][T19634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 756.357396][T19729] REISERFS (device loop7): using journaled data mode [ 756.360879][T19634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 756.364110][T19729] reiserfs: using flush barriers [ 756.394657][T19634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 756.405795][T19729] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 756.472357][T19729] REISERFS (device loop7): checking transaction log (loop7) [ 756.477683][T19634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.496613][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 756.499811][T19729] REISERFS (device loop7): Using r5 hash to sort names [ 756.511464][T19729] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 756.516294][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 756.526395][T19729] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 756.566131][T18385] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 756.581213][T18385] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 756.586975][T19634] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.596899][T18385] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 756.641901][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 756.659814][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 756.691546][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.698750][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.737077][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 756.786776][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 756.797651][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.804794][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.815948][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 756.857851][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 756.914914][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 756.945997][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 756.974480][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 757.015153][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 757.047264][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 757.060059][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 757.093932][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 757.107326][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 757.142032][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 757.180820][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 757.218587][T19634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 757.717091][T19766] loop1: detected capacity change from 0 to 1024 [ 757.924677][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 757.963455][T19634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.972287][T19769] loop7: detected capacity change from 0 to 4096 [ 757.987150][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 758.033469][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 758.059170][T19754] loop9: detected capacity change from 0 to 32768 [ 758.816211][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 758.835144][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 758.864332][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 758.866191][T19782] loop7: detected capacity change from 0 to 40427 [ 758.874034][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 758.890293][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 758.895411][T19782] F2FS-fs (loop7): Found nat_bits in checkpoint [ 758.898981][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 758.914165][T19634] device veth0_vlan entered promiscuous mode [ 758.942230][T19634] device veth1_vlan entered promiscuous mode [ 758.950309][T19782] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 758.973679][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 758.981597][T19782] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 758.982256][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 758.998136][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 759.007768][T13592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 759.019141][T19634] device veth0_macvtap entered promiscuous mode [ 759.039539][T19634] device veth1_macvtap entered promiscuous mode [ 759.040406][T19782] F2FS-fs (loop7): Found FS corruption, run fsck to fix. [ 759.060070][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.070743][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.081116][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.091756][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.101803][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.113378][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.124172][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.165289][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.185744][T19634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.206962][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 759.218549][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5942'. [ 759.240825][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 759.269262][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 759.295919][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 759.317407][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.333038][T19801] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5944'. [ 759.336765][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.372166][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.388689][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.408936][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.429843][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.450571][T19634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.471505][T19634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.495288][T19634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.515989][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 759.527555][T19806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5956'. [ 759.549377][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 759.577922][T19807] loop9: detected capacity change from 0 to 256 [ 759.594546][T19634] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.626877][T19634] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.635873][T19634] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.674219][T19634] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.843861][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.877389][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.950291][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 759.978385][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.000209][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.058612][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 760.186970][T19820] loop9: detected capacity change from 0 to 1024 [ 760.434201][T19830] netlink: 'syz.9.5955': attribute type 5 has an invalid length. [ 760.554634][T19813] loop1: detected capacity change from 0 to 32768 [ 761.374283][T19834] loop7: detected capacity change from 0 to 32768 [ 761.399647][T19834] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.5959 (19834) [ 761.429266][T19834] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 761.462039][T19834] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 761.490699][T19834] BTRFS info (device loop7): force zlib compression, level 3 [ 761.517911][T19834] BTRFS info (device loop7): force clearing of disk cache [ 761.525102][T19834] BTRFS info (device loop7): setting nodatasum [ 761.553972][T19834] BTRFS info (device loop7): doing ref verification [ 761.563202][T19834] BTRFS info (device loop7): allowing degraded mounts [ 761.572287][T19834] BTRFS info (device loop7): enabling disk space caching [ 761.585150][T19834] BTRFS info (device loop7): disk space caching is enabled [ 761.845829][T19834] BTRFS info (device loop7): enabling ssd optimizations [ 761.866592][T19834] BTRFS info (device loop7): rebuilding free space tree [ 761.905782][T19834] BTRFS info (device loop7): disabling free space tree [ 761.917142][T19834] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 761.947107][T19834] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 762.178827][T19834] BTRFS info (device loop7): balance: start -d -m [ 762.240660][T19912] blktrace: Concurrent blktraces are not allowed on loop3 [ 762.278797][T19834] BTRFS info (device loop7): relocating block group 6881280 flags data|metadata [ 762.547260][T19918] loop1: detected capacity change from 0 to 256 [ 762.574616][T19834] BTRFS info (device loop7): relocating block group 5242880 flags data|metadata [ 762.580576][T19918] exfat: Deprecated parameter 'utf8' [ 762.611371][T19918] exfat: Deprecated parameter 'namecase' [ 762.629148][T19918] exfat: Deprecated parameter 'namecase' [ 762.635285][T19918] exfat: Deprecated parameter 'utf8' [ 762.661438][T19918] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 762.749526][T19834] BTRFS info (device loop7): balance: canceled [ 762.834167][T19924] loop9: detected capacity change from 0 to 128 [ 762.982709][T19926] loop1: detected capacity change from 0 to 512 [ 762.994252][T15093] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 763.032830][T19926] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5994: invalid indirect mapped block 256 (level 2) [ 763.091023][T19926] EXT4-fs (loop1): Remounting filesystem read-only [ 763.104824][T19926] EXT4-fs (loop1): 2 truncates cleaned up [ 763.202156][T19926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 763.457870][T18385] EXT4-fs (loop1): unmounting filesystem. [ 763.782011][T19941] loop1: detected capacity change from 0 to 256 [ 763.823608][T19941] FAT-fs (loop1): Directory bread(block 1285) failed [ 763.849597][T19941] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 764.006896][ T4337] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 764.208701][ T4337] usb 10-1: too many endpoints for config 0 interface 0 altsetting 14: 69, using maximum allowed: 30 [ 764.234434][ T4337] usb 10-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.238899][T19958] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 764.254950][ T4337] usb 10-1: config 0 interface 0 altsetting 14 endpoint 0x2 has invalid maxpacket 3487, setting to 64 [ 764.275382][ T4337] usb 10-1: config 0 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 69 [ 764.306804][ T4337] usb 10-1: config 0 interface 0 has no altsetting 0 [ 764.327062][ T4337] usb 10-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 764.348220][T19963] hub 2-0:1.0: USB hub found [ 764.364642][ T4337] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.373075][T19963] hub 2-0:1.0: 1 port detected [ 764.379695][ T4337] usb 10-1: config 0 descriptor?? [ 764.405983][T19938] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 764.495542][T19967] IPv6: syztnl0: Disabled Multicast RS [ 764.699831][T19976] loop6: detected capacity change from 0 to 512 [ 764.733956][T19976] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.6017: invalid indirect mapped block 256 (level 2) [ 764.754059][T19976] EXT4-fs (loop6): Remounting filesystem read-only [ 764.761352][T19976] EXT4-fs (loop6): 2 truncates cleaned up [ 764.767737][T19976] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 764.844338][ T4337] macally 0003:060B:0001.004E: hidraw0: USB HID v0.c4 Device [HID 060b:0001] on usb-dummy_hcd.9-1/input0 [ 764.876541][T19634] EXT4-fs (loop6): unmounting filesystem. [ 765.066027][ T4337] usb 10-1: USB disconnect, device number 7 [ 765.154533][T19993] hub 2-0:1.0: USB hub found [ 765.165307][T19993] hub 2-0:1.0: 1 port detected [ 765.185358][T19995] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 765.358542][T20003] loop6: detected capacity change from 0 to 1024 [ 765.377184][T20003] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 765.400463][T20003] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 765.410224][T20006] loop1: detected capacity change from 0 to 8 [ 765.418244][T20003] EXT4-fs (loop6): orphan cleanup on readonly fs [ 765.429712][T20003] EXT4-fs error (device loop6): ext4_free_blocks:6210: comm syz.6.6031: Freeing blocks not in datazone - block = 0, count = 4096 [ 765.464503][T20003] EXT4-fs (loop6): Remounting filesystem read-only [ 765.504430][T20003] EXT4-fs (loop6): 1 orphan inode deleted [ 765.526654][T20003] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 765.598358][T19634] EXT4-fs (loop6): unmounting filesystem. [ 765.990113][T20030] hub 2-0:1.0: USB hub found [ 766.005238][T20030] hub 2-0:1.0: 1 port detected [ 766.054046][T20034] loop9: detected capacity change from 0 to 8 [ 767.217516][T20055] loop1: detected capacity change from 0 to 32768 [ 767.274586][T20055] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 767.344953][T20055] (syz.1.6065,20055,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 767.365152][ T4306] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 767.396489][T20055] (syz.1.6065,20055,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 767.414330][T20055] (syz.1.6065,20055,0):ocfs2_mknod:298 ERROR: status = -2 [ 767.437938][T20055] (syz.1.6065,20055,0):ocfs2_mknod:502 ERROR: status = -2 [ 767.541222][T18385] ocfs2: Unmounting device (7,1) on (node local) [ 767.576843][ T4306] usb 10-1: Using ep0 maxpacket: 32 [ 767.585201][ T4306] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.632495][ T4306] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 767.666569][ T4306] usb 10-1: config 0 interface 0 has no altsetting 0 [ 767.673429][ T4306] usb 10-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 767.692882][ T4306] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.715265][ T4306] usb 10-1: config 0 descriptor?? [ 768.136841][ T4306] wacom 0003:056A:0094.004F: Using device in hidraw-only mode [ 768.169499][ T4306] wacom 0003:056A:0094.004F: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.9-1/input0 [ 768.335712][ T4306] usb 10-1: USB disconnect, device number 8 [ 768.385685][T20097] hub 2-0:1.0: USB hub found [ 768.393866][T20097] hub 2-0:1.0: 1 port detected [ 768.501068][T20088] loop6: detected capacity change from 0 to 32768 [ 768.525688][T20088] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 768.610276][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 768.610294][ T26] audit: type=1800 audit(768.557:2709): pid=20088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6068" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 768.630896][T20088] [ 768.639122][T20088] ====================================================== [ 768.646139][T20088] WARNING: possible circular locking dependency detected [ 768.653166][T20088] 6.1.139-syzkaller #0 Not tainted [ 768.658363][T20088] ------------------------------------------------------ [ 768.665382][T20088] syz.6.6068/20088 is trying to acquire lock: [ 768.671474][T20088] ffff888059df09c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_xattr_set+0xad6/0x11e0 [ 768.683775][T20088] [ 768.683775][T20088] but task is already holding lock: [ 768.691154][T20088] ffff8880518686f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 768.700679][T20088] [ 768.700679][T20088] which lock already depends on the new lock. [ 768.700679][T20088] [ 768.711096][T20088] [ 768.711096][T20088] the existing dependency chain (in reverse order) is: [ 768.720134][T20088] [ 768.720134][T20088] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 768.728024][T20088] down_read+0x42/0x2d0 [ 768.732731][T20088] ocfs2_init_acl+0x2fb/0x720 [ 768.737966][T20088] ocfs2_mknod+0x1463/0x2350 [ 768.743100][T20088] ocfs2_create+0x1b6/0x4a0 [ 768.748142][T20088] path_openat+0x1187/0x2e70 [ 768.753269][T20088] do_filp_open+0x1c1/0x3c0 [ 768.758316][T20088] do_sys_openat2+0x142/0x490 [ 768.763545][T20088] __x64_sys_openat+0x135/0x160 [ 768.768955][T20088] do_syscall_64+0x4c/0xa0 [ 768.773936][T20088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.780381][T20088] [ 768.780381][T20088] -> #1 (jbd2_handle){++++}-{0:0}: [ 768.787690][T20088] jbd2_journal_lock_updates+0xa7/0x380 [ 768.793767][T20088] __ocfs2_flush_truncate_log+0x2cd/0x11d0 [ 768.800107][T20088] ocfs2_truncate_log_shutdown+0x13e/0x2e0 [ 768.806446][T20088] ocfs2_dismount_volume+0x204/0x930 [ 768.812257][T20088] generic_shutdown_super+0x130/0x340 [ 768.818172][T20088] kill_block_super+0x7c/0xe0 [ 768.823377][T20088] deactivate_locked_super+0x93/0xf0 [ 768.829192][T20088] cleanup_mnt+0x463/0x4f0 [ 768.834156][T20088] task_work_run+0x1ca/0x250 [ 768.839291][T20088] exit_to_user_mode_loop+0xe6/0x110 [ 768.845123][T20088] exit_to_user_mode_prepare+0xb1/0x140 [ 768.851206][T20088] syscall_exit_to_user_mode+0x16/0x40 [ 768.857190][T20088] do_syscall_64+0x58/0xa0 [ 768.862140][T20088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.868624][T20088] [ 768.868624][T20088] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 768.879148][T20088] __lock_acquire+0x2cf8/0x7c50 [ 768.884547][T20088] lock_acquire+0x1b4/0x490 [ 768.889586][T20088] down_write+0x36/0x60 [ 768.894273][T20088] ocfs2_xattr_set+0xad6/0x11e0 [ 768.899671][T20088] __vfs_setxattr+0x3e0/0x420 [ 768.904894][T20088] __vfs_setxattr_noperm+0x129/0x5e0 [ 768.910732][T20088] vfs_setxattr+0x168/0x2f0 [ 768.915804][T20088] setxattr+0x2b2/0x2d0 [ 768.920497][T20088] path_setxattr+0x142/0x280 [ 768.925625][T20088] __x64_sys_setxattr+0xb7/0xd0 [ 768.931009][T20088] do_syscall_64+0x4c/0xa0 [ 768.935965][T20088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.942397][T20088] [ 768.942397][T20088] other info that might help us debug this: [ 768.942397][T20088] [ 768.952657][T20088] Chain exists of: [ 768.952657][T20088] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> jbd2_handle --> &oi->ip_xattr_sem [ 768.952657][T20088] [ 768.968414][T20088] Possible unsafe locking scenario: [ 768.968414][T20088] [ 768.975878][T20088] CPU0 CPU1 [ 768.981240][T20088] ---- ---- [ 768.986601][T20088] lock(&oi->ip_xattr_sem); [ 768.991197][T20088] lock(jbd2_handle); [ 768.997788][T20088] lock(&oi->ip_xattr_sem); [ 769.004899][T20088] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 769.012194][T20088] [ 769.012194][T20088] *** DEADLOCK *** [ 769.012194][T20088] [ 769.020336][T20088] 3 locks held by syz.6.6068/20088: [ 769.025538][T20088] #0: ffff888061866460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 769.034786][T20088] #1: ffff8880518689c8 (&sb->s_type->i_mutex_key#32){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 [ 769.045251][T20088] #2: ffff8880518686f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 769.055185][T20088] [ 769.055185][T20088] stack backtrace: [ 769.061072][T20088] CPU: 0 PID: 20088 Comm: syz.6.6068 Not tainted 6.1.139-syzkaller #0 [ 769.069227][T20088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 769.079291][T20088] Call Trace: [ 769.082584][T20088] [ 769.085521][T20088] dump_stack_lvl+0x168/0x22e [ 769.090246][T20088] ? load_image+0x3b0/0x3b0 [ 769.094754][T20088] ? show_regs_print_info+0x12/0x12 [ 769.099971][T20088] ? print_circular_bug+0x12b/0x1a0 [ 769.105185][T20088] check_noncircular+0x274/0x310 [ 769.110138][T20088] ? add_chain_block+0x940/0x940 [ 769.115086][T20088] ? lockdep_lock+0xdc/0x1e0 [ 769.119685][T20088] ? lockdep_unlock+0x133/0x2d0 [ 769.124549][T20088] ? lockdep_lock+0x1e0/0x1e0 [ 769.129238][T20088] ? _find_first_zero_bit+0xcf/0x100 [ 769.134537][T20088] __lock_acquire+0x2cf8/0x7c50 [ 769.139415][T20088] ? verify_lock_unused+0x140/0x140 [ 769.144628][T20088] ? vfs_setxattr+0x168/0x2f0 [ 769.149323][T20088] ? __rwlock_init+0x140/0x140 [ 769.154106][T20088] lock_acquire+0x1b4/0x490 [ 769.158624][T20088] ? ocfs2_xattr_set+0xad6/0x11e0 [ 769.163661][T20088] ? ocfs2_xattr_block_find+0x150/0x4b0 [ 769.169218][T20088] ? __might_sleep+0xd0/0xd0 [ 769.173820][T20088] ? preempt_count_add+0x8d/0x190 [ 769.178847][T20088] ? read_lock_is_recursive+0x10/0x10 [ 769.184229][T20088] ? rwsem_write_trylock+0x12f/0x1b0 [ 769.189528][T20088] ? ocfs2_xattr_ibody_find+0x7c0/0x7c0 [ 769.195095][T20088] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 769.200567][T20088] down_write+0x36/0x60 [ 769.204734][T20088] ? ocfs2_xattr_set+0xad6/0x11e0 [ 769.209765][T20088] ocfs2_xattr_set+0xad6/0x11e0 [ 769.214638][T20088] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 769.220368][T20088] ? __lock_acquire+0x13c0/0x7c50 [ 769.225423][T20088] ? is_bpf_text_address+0x22/0x2a0 [ 769.230638][T20088] ? aa_get_newest_label+0xf4/0x5c0 [ 769.235840][T20088] ? verify_lock_unused+0x140/0x140 [ 769.241051][T20088] ? end_current_label_crit_section+0x170/0x170 [ 769.247295][T20088] ? kasan_set_track+0x60/0x70 [ 769.252070][T20088] ? kasan_set_track+0x4b/0x70 [ 769.256848][T20088] ? evm_protected_xattr_common+0x170/0x190 [ 769.262753][T20088] ? evm_protect_xattr+0x7a0/0x990 [ 769.267877][T20088] ? ocfs2_xattr_security_get+0x40/0x40 [ 769.273434][T20088] __vfs_setxattr+0x3e0/0x420 [ 769.278134][T20088] __vfs_setxattr_noperm+0x129/0x5e0 [ 769.283439][T20088] vfs_setxattr+0x168/0x2f0 [ 769.287959][T20088] ? xattr_permission+0x500/0x500 [ 769.292999][T20088] ? _copy_from_user+0x10b/0x170 [ 769.297949][T20088] ? setxattr+0x243/0x2d0 [ 769.302292][T20088] setxattr+0x2b2/0x2d0 [ 769.306464][T20088] ? path_setxattr+0x280/0x280 [ 769.311258][T20088] ? __mnt_want_write+0x21f/0x2a0 [ 769.316291][T20088] path_setxattr+0x142/0x280 [ 769.320898][T20088] ? simple_xattr_list_add+0xf0/0xf0 [ 769.326199][T20088] ? lock_chain_count+0x20/0x20 [ 769.331060][T20088] __x64_sys_setxattr+0xb7/0xd0 [ 769.335928][T20088] do_syscall_64+0x4c/0xa0 [ 769.340360][T20088] ? clear_bhb_loop+0x60/0xb0 [ 769.345042][T20088] ? clear_bhb_loop+0x60/0xb0 [ 769.349724][T20088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.355645][T20088] RIP: 0033:0x7fe402f8e969 [ 769.360063][T20088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.379677][T20088] RSP: 002b:00007fe403ee7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 769.388109][T20088] RAX: ffffffffffffffda RBX: 00007fe4031b5fa0 RCX: 00007fe402f8e969 [ 769.396084][T20088] RDX: 0000200000000600 RSI: 0000200000000100 RDI: 00002000000000c0 [ 769.404069][T20088] RBP: 00007fe403010ab1 R08: 0000000000000001 R09: 0000000000000000 [ 769.412045][T20088] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000000 [ 769.420018][T20088] R13: 0000000000000000 R14: 00007fe4031b5fa0 R15: 00007ffea6943bb8 [ 769.428005][T20088] [ 769.495545][T19634] ocfs2: Unmounting device (7,6) on (node local)