last executing test programs: 1m3.422505659s ago: executing program 3 (id=188): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000041c0)=[{{&(0x7f0000001a80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000080)="0b7d03ccc8d71fafed3b7cb556efd45785351ff0d26180a12ff667fe98fa67db", 0x20}], 0x1}}, {{&(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) 1m3.308116751s ago: executing program 3 (id=189): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000440)={[{@clear_cache}, {@user_subvol_rm}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x101}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000005c0)={{r0}, "886104ba185d19be1f20bf6a61cd0e15876752a35ca40a7db08140f63cd91cb99b270dff5566085190ea061a366ce339deec85174601e9baaac5f89ae1043cdbfcbbf54a8712282bf1c0db6ae8276f7e449d75d83617af9f93062395c61af2c5655d4c9831f493c5686c83c477558bab98a1dc4208497cbc3db526e9fe500661dea08a51bdcdcc150be37245ffa49490f742f17fba27a9d80c55c4c73e7189f04b8cf11dc99bcf924f7ce7c490fdc54f01eebf19ec00203ab58be897dca7aad99ce99633e375efca44e1e1b68ee6c65175601e9aee9227b1e1b6c4cfb8294b6bf0cf91351fb28190fb75c5b9a3e606cce33b8fe595e6dc8c73efef8d9e81ac43cc87d78804325143e03719edfc1b77e4983056238cc5d5c3b54d3e95f6fec999c21200497ef211093fe5bbbfe7535b5ac3b55372d222edbef2a0981a22f518f0e4d9c2bcd232795abf86a8d7a7d5029164182389e4510faafb9fe9e9e56a4e47e4e90b53801175d66236479ae92b6f8a295961ebf26784cf80cff96e3cdee47e03c74436d742ae762eb4cd5ec2cb50df238fa0008a35d3ab97d457e6497f6297a17154113ca1d3699e6148ec4494738fe5fcd3ea8b2ba7905ffac8458731d8639e3b9f08cb3087b638f0e90463e3b66955d630ab30beeba40d797d78dbd916d7c5db03027aad4ded00de5075915025deca996dda214d9bd8415f2e36dc5f886231147f0be678129c6f8ab2df88ac413b3efb4a867da290e1a0ebd6af6f343545aa2ccf8294f60c98373886961ec105529599a1ad42c520a0bb2e4e58824bdd57bb86db1d51b3c814f77cfa1e7d054904b0e8163c335d58217f659839b6c0f78af268d33ce6fe0f2fcabb094ab6f480d6af368d68f78a8e2658a22d837405e50bb13759b651fbb815b986e930db1f18c36a89de8b38c0fc593c264fae63fea64c9b19da2712b360c46c723f400eb9fea634174a8a28ec40676fc1f70e073759d9ed329504df1ef010fce3be3f9b12dd70047b7ea85148ecc56c5fd9e8556945950ae028ed79fdd3f7877fbe7c1d706a0e19b75abe2924865943c4a58ee71a41706bbbb63676f1e0ea542924be34a1af8950f02e6c0c07b2c82858228f873285dd24d42e2dfc6d6cd4c382a165953686aba5c9c7be14bca7ed4efb083ebf6a2df62127cec15fc3561c1581e8f23e8917c1924a6c70042e403b03e60a999f2948158b87701b6f84a13859985295542da490bb498c5f02bcc1c47c09500049808d43e9b0800b5a0994ce0c136214d6cf60a8c105a92cd93eb9aab552a10c25f310fd9c2d46b1beb11bbcdfe4fdf68465900a64bfa2be78225d5b63565b24aa5c01e28f406acb9c9ec3a39eb75ce13a76c183324e1d886c63ed70dff651fb1e7f91e13849b155ea00bf1a7939be9cb3a5486824aae0b2224ca96bcbdf6608fb7f070c806dc9975ffd8e24bb8bb1ea235aaa276c3ea642621d8140e51c6eabf00c054ec5f0f9f99c94beebb9115d85733d9cdbb455805febe811794d40fb7c3eac0d4c87a9cb416b62a9a7cb9f719a8fe448f78f8e01f00ffb9b977c43b8c451c6eb49d6115653e817cab0c6b6c69245e1658611d50eeebdff6642242f48c2c98a734ebd8bcb21560e55f8fd039f6fc14fd223dc8b5dc2d17ba950fd5a6ce560b4261b2f9c23fbdfa153b027af701f116ff7c0e6b36a790e16d39a22771eb3b67cf0837337fb89bc885228176da111182a33b0181da962562bc41b46cb3ad0e6208172ba8c056f832578a7f7c9262c1a3742fb6b17d4e916e759fb41c8e8219a59f1e381ffd2f366821015dd0b1f75c1f9263c23caf8f183a064fde6b39ab8217c33975902438560532d7e23a45c09bece7d0ac943984a4289592a4a93f9b2eeb8d2a6bbdc42f95cbfdf99f90cbd19eca9bb2704e268f566f1bcec6c712d58b4d054b4b346c577e1f0e6f0c1a002ec6600503b39047d635a9ae0f208e8454dc4cbbe8a5a3f020a5c29d42ac5c594def8503519188449e0ddfdfba3f306425fd9ef45f34aab4dbd862897bfd2e54cab6e7876b9669b0c272920dc5697314810485a85824857ced9feb04f2d33740c72e15a0cabcdff97fe467e4dce31676dea91a66d1c609928036bebf9d02fa8e011a046c8437864b8deae3dd02dfa99d54c202b35df29b1c8929b31a339e03ebe6c862b6456a324bd4b16c4de746b3930c9d2c2dcb67c8e96948f464302b54294d52fe20066e6778aafe94ec40d74749f7a894fafb5537a99834b02a4d264092fad573721f7519b8f6446052aab786014b898f4b53b95cd79c7f2f41578771e5b50b35ff7c1f2598827946330cb0c2f4cf3f86b4e152c32fe1af719869904656db88a60a672dfda9feef26da3226ac142d38a069cbcc2e3c6b54287a5c74365a0d14322e6d5824c9c5cb822bf14038aaa9d7159c14dcbbceef53ef3d0a30d5dc48ef1ade1965857468cd965f3735c7b37d6fc54a9ca379821ed0c9b764bd2d1d62f3a64ca4aa7bd5cfa7e153bf62a9b8e41c6c762f7df9b5f977f01edf8dd6bb8e7bb17ec1b92932ad7a96fccc5b1fef275e977aed78e9fad7ad368ecf6e10c4b48f40572f4d325f0ecc054618aceef137bf5b155bbf2ebe60dd561f6bbd69ba1bab2cc4b1acc2764af6ba4fde59a4c2ac906491ba3f6238ff5e7571b08b697d5d6b2bf30d9058dbefd6857f2fb2b12d67ccde7f750c435dee97ac2e1536f68390bc175751858c47d41a35043d12cfd185c715d06614e21d4fbadd2079d2f28da2e7c452da09e2ad92ca6ff73113971bd55a198d69a1b47c37d4d9e1281b40676109ec295fb52491f49901fe6d98b52aa8859b0383cd65a62a2b6ad8fb838f15a2f27326dc24f8179feeb083f6a511430b01e7f5815f6f47be22216d40edc7746fcba3d80c893ecc289b85c57842a267c0142419a3572616d2988f99cff3abe71d3d0f6237bd7269df3f920371e5d4ff7dcef6122d38dfc295cd7b9249133af01b4c2bdf4cd1fabc9944ba68ff054ace7c2e5e7ab74cb94ba00e10fddde2458b9b1f46aa0bec7b46ea5b9c6cb8641e660a7988e75ad679b224e43ac5aa73ec0e7055ece4eddc74ee5c7373ecf56c80ee3c25a712bc892f248c8434722a7da5baa7093925457fdde861b00d87d7ffd44e173233281c26e18f2cc21bc77eb2f94c271b5985ac9f3a46f58e17d6a1fb001f96f7bedd7c12e5163176216b8ea3ef90b35e9002317177548550f59d0fa7a7bc4e436c3ee30a61536bc8590d082cff2e574d30554da6192513305e22bd7988714b8567c8a4c8482e1017d88ff64e2eeb56daf23d7f28cb8ed468f7b6cf87b72946e2779c05a14f813a98f6f6c09f0347e3141baacca91e9f6a87113b04f2cc1f0c87b24b5d3687f424995389e6d5b0d94a3d9d2033e08f66b646faed48edd16cda228a3422e5d752f410ea5bcad938c2f54ad0b8348d35888e2a2a5362897523bdcb6b48941c8ae5cbb292efaa5f16ac8958fa68bf7f0f7a1b36d412dbdf30425b1b9af364b7b8dd36e721ce13316d31a9332530b86502c155b2313b8a3fd06118f58ace91ffed18dea1ac2d1da87ea0cbbe5f0053086ab920767a6e7e4e857567d92f0627239eb71f62716f6ff2254aa412a63648d5b7f42ddbbf9a209f38d48870daa9f702225109ed21763e0dd0f97b37bec78dc95a4cb712163618bb78c770e1ee75fae4dee5ba3f41e34a5ead5a2bca0953c0fdc8df7ffb2cedabd1e20e59db199cfa3bf0ccc19bf45218dc673beab05fcec48bf2b08fba6edbdc993d70ed6e47407759f7520f45d0bad0f4c4ee99e984b1f1955fa69286245c41afd8b691eb6cfde1144fcb45f9cc73769d79806fe9aaa81a8ec9243a761b81e4f52d82cae7c3a1b578cabf783c24b205116adb51a1c5a6dfdffe9328c343da2221a777ab222a7017322737b59077ebaf663e40b705ea789b16de399c528ea199ae86aad672d10b99822cf74d54e8a4dc14093c7e90fe7476050bf0672cfa496f44303c7cd74ab26d2a54d4c639933e4d19db5fffd1f68739214927df11c3c3714e1d77f13a153aea62df8bb2e88d94ea084c3c1600f41fe762496446afcc419ae20afbad87f8fc5e22512497d8f8250aab00495b8a306743136113fd2fbea1dba14db2c14288f4871caa12d8583a552a0b74845bdfabc67932e8cbbaf6fc9042882e1bc111858a6331269a3f898ce4fb44f7bbcaad863996ffb3ba526734d16632ac86082224f7eea282fdbd9e000267a5ce67c06807f78234ef80f663197d9fd67e44fdebd5e89ca732e2a4032f1eb36af49cc27bea6efd4ccaa561dff3da651489fc1c224e7e8525fca9ec2f323900a04b1003c0db808a98fc483e1177b4741c6654581994632c2ed232d788eb0d8adc75d97f921803277ffbaa8707752d6e2d8ae4558a909877164a27c98b4ee16befeee936404a6833551c0ff23d470be37f7da40545071b43862958c6b81f3c33c02caf0e53ce41c206167ef0576318b4437f88ba2624276965646af12ea5fcafbc9ac8fa701a06cde1696134ee9e4310a2c2e5764a5596bb482892fafcea46feefd249e5da6546882c0096856c6728c6dd534196e43a807587bc854646b94daddd7e974667f0f983e16302a82c69ec9ba526bbc607b87f517986eec6c72dfa7264c5182e82adc78dec5dc578d86f70be8c1186883f79cb734d1800af3e436a77eea4f9e5b6da690d4e4a272007b1272e2e3315f7d77281094548748462c37cd5eee7c7f61db064331ac1fb062b631d3f2254210baa022f454eb7a14b0ee31483ac7e41fa3ff33baf555fd67a482cd88ff29ac55c075bd3fa604c6964eae2231fecbbec4503b98d104f769075c1017e80740ca98659162b7c26eadcb89385b0328f937f6ab0ad5d58b29d438cc4f2174acd249c030faaf469ad7d2c59b283885b6cdee8e67a6a4d08f4ac6f42c74e752909eb7fc1dec6c368d950a86f7d8171d3c726aecbc74b7d93d69bb9a504f894fefb903fe9cf5c88163df44b6ad27193e81039829b61de21b24a4541d5b367608290809639a41d00f8a4769d4ef5cd6ab5a647ec341e7900cb36f76a67d40fb9ad1474bd1c1abec91b904c07c5300a18ccfc85f38e0fdef4c5e8c64ee7add063434423e5a3cc064d1b660d660e353a167823bf16ace6190f7c0ff419813ed958391da88a6438be8851ac0f4c05bc813d88db12ae863797d67cf6b87a7adcaf664f864103f5e966d5bbe2825e1960ce8c4b065d8c3b9e5c3dab77d171d42db0f3edbd73f8fa0b491473a2ea56cedba65df729a66adc4d77ee5985ad7f5990be66f7c900e43dfd85adc3225d73276203824555a8f9c3802098d98f58410fd28635b5535fd0c4fffeb4e308419ce84af1a84199c48abff3d62a697faf2929f9259246baf5bfcce1088979eaed404eb00a665054ea66609eea952d093afbf9b62e844818f7dec07e9eee9887bc3db12121bd871bbbcb150d0442aa7e92e4242f2c95bdf3a85c0b368f307e5cc78d16059852d8186c426841939429693b764e7da5f8a289ba375616a18c5c84009357c4994136ee078e414e91cbc69bd32f43b6d3af5bbbe10a75f8c8911bc56b3cdd4e597545374e3721b64d99e07ded98798c7e0daeaf3759364dcd918c53191c70c74244a05bff7e38ed36e869c38954aefba4365091ef02623821624e95ef125a3bc3de53a3b555e7e77aa5fd49b2c33428d093f6520f2f42e9bbacbfc45c10e48582b8c548c2ca91725d5777704bce61da523c657"}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x8, {0x0, 0xffffffffffff738f, 0x3d16, 0xffffffffffff4c59, 0x6}}) 1m2.129044639s ago: executing program 3 (id=197): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@empty, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) 1m1.572258377s ago: executing program 3 (id=205): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='usrquota,iocharset=cp862,quota,integrity,usrquota,discard=0x0000000000000008,usrquota\x00integrity,resize=0x0000000000000000,umask=0x0000000000000bfe,grpquota,discard,umask=0x0000000000000005,uid=', @ANYRESHEX=0x0, @ANYBLOB=',audit,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c66736d616769813d3078303030303030303030303030303030394bbffdfb2d2acf39276dffbfb52c00"], 0xfe, 0x6163, &(0x7f0000006680)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) 1m1.092030935s ago: executing program 3 (id=213): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m0.662554401s ago: executing program 3 (id=215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) pause() 1m0.575853923s ago: executing program 32 (id=215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) pause() 41.079899685s ago: executing program 5 (id=406): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @address_request}}}}, 0x0) 40.962789286s ago: executing program 5 (id=407): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf3, 0xc0, 0xd19a, 0x80, 0x1, 0x800, 0xe3d}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002180)=ANY=[@ANYBLOB="1001000000000000", @ANYRES64=r1, @ANYBLOB="0700000000000014"], 0x110) 40.484399874s ago: executing program 5 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ec06010040"]) 40.275268107s ago: executing program 5 (id=414): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x3, 0x51e, &(0x7f0000000680)="$eJzs3dFrJHcdAPDvTLLX5C41qfqgBWuxlUvV2ySN1wYfqoLoU0Gt+HrGZBNCNtkj2bSXUGyKf4AgogVf9MkXwT9AkL74LkJB30VFkXrVB4X2RmZ29u6y2U1yuJuB5POBX3Z+M7Pz/f427G9/v51hJ4BL6+mImI2IsYh4LiKmy/VpWeKwU/L93rv7+kpeksiyV95NIinXdY/1WPl4rXzaRER882sR302Ox93dP9hcbjYbO2V9rr2VvJ9lBzc2tpbXG+uN7cXFhReWXly6uTQ/lHbORMRLX/nrj3/wi6++9JvPvfanW3+f/V6e1n+z7I3oaccwdZpeK16LrvGI2BlFsIqMFy3suFlxLgAAnCwf7384Ij5VjP+nY6wYzQEAAAAXSfbFqXg/icgAAACACyuNiKlI0np5ve9UpGm93rmG96NxNW22dtufXWvtba/m2yJmopaubTQb8+W1AzNRS/L6QnmNbbf+fE99MSKeiIgfTU8W9fpKq7la9ZcfAAAAcElc65n//3u6M/8vHFacHAAAADA8M1UnAAAAAIyc+T8AAABcfOb/AAAAcKF9/eWX85J173+9+ur+3mbr1Rurjd3N+tbeSn2ltXO7vt5qrRe/2bd12vGardbtz8f23p25dmO3Pbe7f3Brq7W33b61ceQW2AAAAMA5euKTb/8xiYjDL0wWJXel3FaLyMYe3nm8igyBUUkfZee/jC4P4Pw9/Pk+WWEewPkzpIfLq1Z1AkDlklO2D7x453fDzwUAABiN6x8ffP7/3bVKUwNGrDz/n5w2/wcunrGqEwAq0zn/dy/rqDob4DzVThoBmBTAhZcO5/z/KZcSJjoUAACo2FRRkrRezgOmIk3r9YjHi9sC1JK1jWZjPiI+FBF/mK49ltcXimcmRvMAAAAAAAAAAAAAAAAAAAAAAAAAcEZZlkQGAAAAXGgR6d+6d+a6Pv3sVO/3A1eS/0wXjxHx2k9f+cmd5XZ7ZyFf/8/769tvleufr+IbDAAAAKBXd57enccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDC9d/f1lW45z7j/+HJEzPSLPx4TxeNE1CLi6r+SGH/oeUlEjA0h/uGbEfGxfvGTPK2YKbM4Ev9KRBoRk8OK3/f1PyF+dOJfG0J8uMzezvufL/V7/6XxdPHY//03Xpb/1+D+L73f/40N6P8eH3TQ2tHqk+/8am5g/Dcjnhzv3/904yf58frEf+aMbfzOtw4OBm3Lfh5xvV//lxyNNdfeuj23u39wY2Nreb2x3theXFx4YenFpZtL83NrG81G+bdvjB9+4tf3HtQ+ONb+qyf0v0X7B7z+z56x/R+8c+fuRzqLPf+ZqMXPsmz2mf7//8JnjsfvfvZ9utwrr+evYfrWt/vGf+qXv39qUG55+1cHtH/ilPbPnrH9z33j+38+464AwDnY3T/YXG42GzsWLDzCQj7urDyNJJI4vmm5+sQ6C2+U77HlZvfdNqQj/7acHI0y+Yr6IwAAYHQeDPp7tyTVJAQAAAAAAAAAAAAAAAAAAACX0Kk/AzZoUxoRZ/w5sd6Yh9U0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRP8LAAD//0mN1e4=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') truncate(&(0x7f0000000080)='./file2\x00', 0x2000) 39.469469019s ago: executing program 5 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 38.707699831s ago: executing program 5 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22024005}, 0x0) 38.429840656s ago: executing program 33 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22024005}, 0x0) 22.875824876s ago: executing program 6 (id=595): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x7, 0x1) 22.703798989s ago: executing program 6 (id=599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f000000b300), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x51e1}]}, 0x24}}, 0x0) 22.575832611s ago: executing program 6 (id=603): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x40002100, 0x0) bind$unix(r0, &(0x7f000000a4c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) writev(r0, &(0x7f000000a7c0)=[{&(0x7f000000a540)="86", 0x1}], 0x1) 22.435941393s ago: executing program 6 (id=607): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 21.97242178s ago: executing program 6 (id=615): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='N-N:5', @ANYRESDEC=r1], 0x6a) 21.385157809s ago: executing program 6 (id=627): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x10], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x4, 0x0, 0x0, 0x0, 0x8000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4042004) 21.305635271s ago: executing program 34 (id=627): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x10], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x4, 0x0, 0x0, 0x0, 0x8000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4042004) 3.506640326s ago: executing program 1 (id=834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x38}}, 0x0) 3.332671878s ago: executing program 1 (id=838): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x2837481, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x2804, 0x0) 3.152571681s ago: executing program 1 (id=842): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0xc, 0x0, 0xa, 0x9, 0x0, 0xfffffffffffffffe, 0x642}, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r1, 0x4) 3.008342964s ago: executing program 7 (id=844): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bffffff00004000632f77fbac14140be934a0a662079f4b4d2f87e5feca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 2.888799786s ago: executing program 1 (id=845): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x3000000, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x5d8, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x4012011, r0, 0x1000) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) 2.63168814s ago: executing program 7 (id=848): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000080)='./file2\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x2}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@nodatasum}, {@enospc_debug}, {@nodatasum}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc0041, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)={[{@utf8no}, {@utf8no}, {@utf8no}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@numtail}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@uni_xlate}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000380)={{r0}, 0x0, 0x0, @unused=[0x1, 0xf000000000000000, 0x8], @subvolid=0x7fffffffffffffff}) 2.348310574s ago: executing program 2 (id=851): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='wchan\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$ptp(r0, &(0x7f0000000840)=""/255, 0xff) 2.295664815s ago: executing program 0 (id=852): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000010040"]) 2.269898395s ago: executing program 1 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xf) ioctl$TUNSETLINK(r0, 0x400454cd, 0x335) 2.056086708s ago: executing program 0 (id=854): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f00000000c0)='0', 0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) 2.029358959s ago: executing program 0 (id=855): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}]}}}], 0x38}, 0x0) 1.970819669s ago: executing program 0 (id=856): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@oldalloc}, {@orlov}, {@oldalloc}, {@auto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x580, &(0x7f0000001b40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1.916302381s ago: executing program 1 (id=857): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010d90472a000000000000109022400010000000009040100020300000009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)={0x20, 0x31, 0x4, {0x4, 0x30, "cb7b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.512233077s ago: executing program 2 (id=859): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="120000000a00020001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.436171508s ago: executing program 0 (id=860): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r1, 0x0) 1.380429649s ago: executing program 2 (id=861): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) 1.32445958s ago: executing program 7 (id=862): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3ff, "3cfdb7e06039549e56eb7e7a85b416c4"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40800) 1.168369072s ago: executing program 2 (id=863): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) 1.036427654s ago: executing program 2 (id=864): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000005eefc9bb9fd1b208", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.028928904s ago: executing program 4 (id=865): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x67eb6bf12151d490}, @TCA_TBF_BURST={0x8, 0x6, 0x9}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x5, 0x0, 0x6, 0x1}, {0x7, 0x1, 0x97e8, 0x4, 0x3, 0x400000}, 0x3, 0x0, 0x105e}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040008}, 0x44080) 740.383009ms ago: executing program 7 (id=866): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 672.42966ms ago: executing program 4 (id=867): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x227e, &(0x7f00000000c0)) 570.292181ms ago: executing program 4 (id=868): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1b, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x10, 0xf989, "9fca59893b5031248415bcf1"}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0xfffffffffffffc55, [0x2, 0x2]}, @exp_fastopen={0xfe, 0xb, 0xf989, "43ecdca921d221"}, @generic={0x2, 0xe, "a6e77f98ea5ecbfd3fa9b329"}, @fastopen={0x22, 0x6, "8537c855"}, @fastopen={0x22, 0x0, "aa92c3f1990f64abf45bed"}]}}}}}}}, 0x0) 378.418564ms ago: executing program 4 (id=869): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) kcmp(r1, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 240.968717ms ago: executing program 4 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r1, 0x9ac294173bf0cfd, 0x0, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x0) 204.662457ms ago: executing program 7 (id=871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 12.26628ms ago: executing program 2 (id=872): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x100) fallocate(r0, 0x1, 0xb21, 0x1001f0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee00) 11.87505ms ago: executing program 4 (id=873): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000091000040"]) 11.60179ms ago: executing program 0 (id=874): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0xa, &(0x7f0000000080)=[{0x4, 0x69, 0x10, 0x5}, {0xa9, 0x6, 0xfa, 0xd}, {0x80, 0x81, 0x6, 0x2}, {0x0, 0x4, 0xa, 0x1}, {0x7ff, 0x2, 0x9, 0x1a9}, {0x1, 0xa, 0x9d, 0x8}, {0x0, 0x86, 0x0, 0x5}, {0x7, 0x10, 0x2, 0x2}, {0xb, 0x1, 0x4, 0x6}, {0x4, 0x3, 0x2, 0x6e}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, &(0x7f0000000000)) 0s ago: executing program 7 (id=875): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0xb6fa, 0x0, 0x0, 0x3cd}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) kernel console output (not intermixed with test programs): 4690] BTRFS info (device loop0): clearing free space tree [ 68.758912][ T4714] UDF-fs: iocharset maccenteuƒo not found [ 68.763537][ T4690] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 68.776672][ T4690] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.023925][ T144] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 69.206664][ T4179] gspca_sq930x: ucbus_write failed -71 [ 69.212464][ T4179] sq930x: probe of 4-1:0.0 failed with error -71 [ 69.249067][ T4179] usb 4-1: USB disconnect, device number 2 [ 69.611401][ T4753] loop0: detected capacity change from 0 to 128 [ 69.653269][ T4747] loop1: detected capacity change from 0 to 32768 [ 69.699728][ T4747] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.180 (4747) [ 69.750195][ T4747] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 69.770043][ T4747] BTRFS info (device loop1): setting nodatacow, compression disabled [ 69.779956][ T4747] BTRFS info (device loop1): max_inline at 0 [ 69.785978][ T4747] BTRFS info (device loop1): enabling disk space caching [ 69.812385][ T4747] BTRFS info (device loop1): turning off barriers [ 69.822362][ T4747] BTRFS info (device loop1): turning on flush-on-commit [ 69.830226][ T4747] BTRFS info (device loop1): doing ref verification [ 69.851127][ T4765] netlink: 'syz.0.186': attribute type 21 has an invalid length. [ 69.867493][ T4747] BTRFS info (device loop1): force clearing of disk cache [ 69.880373][ T4765] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.889679][ T4747] BTRFS info (device loop1): enabling ssd optimizations [ 69.906774][ T4747] BTRFS info (device loop1): max_inline at 4096 [ 69.914129][ T4747] BTRFS info (device loop1): disk space caching is enabled [ 69.943332][ T4747] BTRFS info (device loop1): has skinny extents [ 70.049464][ T4780] loop0: detected capacity change from 0 to 2048 [ 70.094503][ T4747] BTRFS info (device loop1): clearing free space tree [ 70.116252][ T4747] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 70.130782][ T4780] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 70.157054][ T4747] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.178699][ T4780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.271911][ T4774] loop3: detected capacity change from 0 to 32768 [ 70.297558][ T26] audit: type=1800 audit(2000000008.380:3): pid=4747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.180" name="file3" dev="loop1" ino=261 res=0 errno=0 [ 70.298882][ T4747] fs-verity: sha256 using implementation "sha256-avx2" [ 70.339743][ T4747] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 70.354716][ T4774] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.189 (4774) [ 70.440391][ T4774] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 70.460809][ T4774] BTRFS info (device loop3): force clearing of disk cache [ 70.470864][ T4774] BTRFS info (device loop3): force zlib compression, level 3 [ 70.489761][ T4774] BTRFS info (device loop3): enabling auto defrag [ 70.506565][ T4774] BTRFS info (device loop3): metadata ratio 257 [ 70.518511][ T4774] BTRFS info (device loop3): enabling disk space caching [ 70.529612][ T4774] BTRFS info (device loop3): disk space caching is enabled [ 70.573288][ T4774] BTRFS info (device loop3): has skinny extents [ 70.815237][ T4774] BTRFS info (device loop3): enabling ssd optimizations [ 70.836185][ T4774] BTRFS info (device loop3): clearing free space tree [ 70.858763][ T4774] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 70.873153][ T4774] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.896451][ T4746] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.087311][ T144] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 71.131331][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 71.146605][ T4746] usb 1-1: Using ep0 maxpacket: 32 [ 71.193936][ T4817] loop1: detected capacity change from 0 to 40427 [ 71.207965][ T4828] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.266745][ T4746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.284157][ T4746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.296215][ T4746] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 71.307406][ T4746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.324267][ T4746] usb 1-1: config 0 descriptor?? [ 71.367058][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.386714][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.397816][ T4746] hub 1-1:0.0: USB hub found [ 71.403428][ T4817] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.497211][ T4208] misc userio: Buffer overflowed, userio client isn't keeping up [ 71.505725][ T4817] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 71.576811][ T4746] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 71.591883][ T4849] loop2: detected capacity change from 0 to 256 [ 71.595217][ T4167] attempt to access beyond end of device [ 71.595217][ T4167] loop1: rw=2049, want=45104, limit=40427 [ 71.661846][ T4849] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 71.694887][ T4849] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 71.721742][ T26] audit: type=1800 audit(2000000009.800:4): pid=4849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.203" name="file2" dev="loop2" ino=1048593 res=0 errno=0 [ 71.776048][ T26] audit: type=1800 audit(2000000009.840:5): pid=4849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.203" name="file2" dev="loop2" ino=1048593 res=0 errno=0 [ 71.984895][ T4857] binder: 4856:4857 ioctl c018620c 200000000000 returned -22 [ 72.032202][ T4746] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1 [ 72.058917][ T4746] hid-generic: probe of 0003:046D:C31C.0001 failed with error -22 [ 72.063435][ T4851] loop3: detected capacity change from 0 to 32768 [ 72.346866][ T4746] usb 1-1: USB disconnect, device number 2 [ 72.367696][ T4863] loop1: detected capacity change from 0 to 32768 [ 72.399861][ T4863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.209 (4863) [ 72.463732][ T4863] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 72.472779][ T4863] BTRFS info (device loop1): force clearing of disk cache [ 72.480096][ T4863] BTRFS info (device loop1): force zlib compression, level 3 [ 72.503975][ T4863] BTRFS info (device loop1): enabling auto defrag [ 72.512381][ T4863] BTRFS info (device loop1): metadata ratio 257 [ 72.522922][ T4863] BTRFS info (device loop1): enabling disk space caching [ 72.532753][ T4869] loop2: detected capacity change from 0 to 32768 [ 72.554585][ T1153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.570306][ T4863] BTRFS info (device loop1): disk space caching is enabled [ 72.582578][ T4863] BTRFS info (device loop1): has skinny extents [ 72.613498][ T4863] BTRFS info (device loop1): enabling ssd optimizations [ 72.628439][ T4863] BTRFS info (device loop1): clearing free space tree [ 72.649656][ T4863] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 72.666184][ T1153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.670825][ T4869] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 72.711664][ T4863] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 72.738301][ T1153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.817932][ T4208] input: PS/2 Generic Mouse as /devices/serio2/input/input6 [ 72.845087][ T4166] ocfs2: Unmounting device (7,2) on (node local) [ 72.859337][ T1153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.963049][ T1259] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 73.070075][ T4208] psmouse serio2: Failed to enable mouse on [ 73.336554][ T4901] loop2: detected capacity change from 0 to 4096 [ 73.449954][ T4893] chnl_net:caif_netlink_parms(): no params data found [ 73.463119][ T4905] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.588183][ T4901] syz.2.217 (4901) used greatest stack depth: 17272 bytes left [ 73.885659][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.913636][ T4893] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.944058][ T4893] device bridge_slave_0 entered promiscuous mode [ 74.007310][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.014794][ T4893] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.029201][ T4899] loop0: detected capacity change from 0 to 32768 [ 74.060293][ T4893] device bridge_slave_1 entered promiscuous mode [ 74.217196][ T4893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.234560][ T4899] XFS (loop0): Mounting V5 Filesystem [ 74.354573][ T4893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.405023][ T4899] XFS (loop0): Ending clean mount [ 74.465270][ T4899] XFS (loop0): Quotacheck needed: Please wait. [ 74.495326][ T4893] team0: Port device team_slave_0 added [ 74.545750][ T4893] team0: Port device team_slave_1 added [ 74.615410][ T4899] XFS (loop0): Quotacheck: Done. [ 74.643776][ T26] audit: type=1800 audit(2000000012.720:6): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.221" name="file1" dev="loop0" ino=1062 res=0 errno=0 [ 74.729187][ T4893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.743110][ T4174] XFS (loop0): Unmounting Filesystem [ 74.755183][ T4893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.865749][ T4893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.940234][ T4743] Bluetooth: hci4: command 0x0409 tx timeout [ 74.996120][ T4893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.044530][ T4893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.140114][ T4893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.264987][ T4937] loop1: detected capacity change from 0 to 32768 [ 75.396285][ T4937] XFS (loop1): Mounting V5 Filesystem [ 75.494447][ T4893] device hsr_slave_0 entered promiscuous mode [ 75.531269][ T4893] device hsr_slave_1 entered promiscuous mode [ 75.561234][ T4893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.583112][ T4937] XFS (loop1): Ending clean mount [ 75.591045][ T4937] XFS (loop1): Quotacheck needed: Please wait. [ 75.594902][ T4893] Cannot create hsr debugfs directory [ 75.646653][ T4937] XFS (loop1): Quotacheck: Done. [ 75.734959][ T4167] XFS (loop1): Unmounting Filesystem [ 75.779458][ T1153] device hsr_slave_0 left promiscuous mode [ 75.793135][ T1153] device hsr_slave_1 left promiscuous mode [ 75.800099][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.814813][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.824888][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.833010][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.841065][ T1153] device bridge_slave_1 left promiscuous mode [ 75.849198][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.864158][ T1153] device bridge_slave_0 left promiscuous mode [ 75.872829][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.896025][ T1153] device veth1_macvtap left promiscuous mode [ 75.905418][ T1153] device veth0_macvtap left promiscuous mode [ 75.912941][ T1153] device veth1_vlan left promiscuous mode [ 75.919146][ T1153] device veth0_vlan left promiscuous mode [ 76.094505][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 76.113647][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 76.127534][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.144398][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.208723][ T1153] bond0 (unregistering): Released all slaves [ 76.379404][ T4893] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.390675][ T4893] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.403207][ T4893] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.431405][ T4893] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.471249][ T1107] cfg80211: failed to load regulatory.db [ 76.593373][ T4893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.633398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.643605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.663532][ T4893] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.699274][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.735706][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.761087][ T4904] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.768225][ T4904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.805913][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.846202][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.862967][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.873856][ T4904] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.881200][ T4904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.897238][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.912760][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.963482][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.985649][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.018005][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.028813][ T4744] Bluetooth: hci4: command 0x041b tx timeout [ 77.041918][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.088576][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.108266][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.155063][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.177180][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.190361][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.222069][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.499399][ T4893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.513850][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.528185][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.776915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.793814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.865697][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.882077][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.892991][ T4893] device veth0_vlan entered promiscuous mode [ 77.905631][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.914634][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.950814][ T4893] device veth1_vlan entered promiscuous mode [ 77.991533][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.000276][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.010424][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.020070][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.032799][ T4893] device veth0_macvtap entered promiscuous mode [ 78.057150][ T4893] device veth1_macvtap entered promiscuous mode [ 78.100979][ T4893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.123990][ T4893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.139528][ T4893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.151111][ T4893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.162669][ T4893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.179493][ T4893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.193168][ T4893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.210419][ T4893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.226820][ T4893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.234927][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.249453][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.259530][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.269587][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.282178][ T4893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.293575][ T4893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.311477][ T4893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.330380][ T4893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.345353][ T4893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.359378][ T4893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.370206][ T4893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.383258][ T4893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.400707][ T4893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.413819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.443196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.470007][ T4893] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.497004][ T4893] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.505953][ T4893] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.523594][ T4893] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.658113][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.701102][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.716721][ T4904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.720838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.725886][ T4904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.750246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.897806][ T5027] capability: warning: `syz.0.239' uses deprecated v2 capabilities in a way that may be insecure [ 78.947193][ T5034] loop5: detected capacity change from 0 to 1024 [ 78.954902][ T1107] kernel write not supported for file /media9 (pid: 1107 comm: kworker/1:2) [ 79.097419][ T4744] Bluetooth: hci4: command 0x040f tx timeout [ 79.173550][ T154] hfsplus: b-tree write err: -5, ino 4 [ 79.590084][ T5075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.247'. [ 80.111221][ T5054] loop5: detected capacity change from 0 to 32768 [ 80.261385][ T5054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.230 (5054) [ 80.284883][ T5104] loop0: detected capacity change from 0 to 4096 [ 80.329222][ T5054] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 80.357370][ T5054] BTRFS info (device loop5): force clearing of disk cache [ 80.386726][ T5054] BTRFS info (device loop5): force zlib compression, level 3 [ 80.416508][ T5054] BTRFS info (device loop5): enabling auto defrag [ 80.447385][ T5054] BTRFS info (device loop5): metadata ratio 257 [ 80.470082][ T5054] BTRFS info (device loop5): enabling disk space caching [ 80.501656][ T5054] BTRFS info (device loop5): disk space caching is enabled [ 80.546968][ T5054] BTRFS info (device loop5): has skinny extents [ 80.668177][ T5084] loop1: detected capacity change from 0 to 32768 [ 80.710587][ T5133] loop4: detected capacity change from 0 to 256 [ 80.787591][ T5133] exfat: Deprecated parameter 'namecase' [ 80.812670][ T5084] XFS (loop1): Mounting V5 Filesystem [ 80.913550][ T5054] BTRFS info (device loop5): enabling ssd optimizations [ 80.931065][ T5133] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 80.938226][ T5054] BTRFS info (device loop5): clearing free space tree [ 80.953948][ T5054] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.964821][ T5054] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.120014][ T5084] XFS (loop1): Ending clean mount [ 81.141453][ T5084] XFS (loop1): Quotacheck needed: Please wait. [ 81.181872][ T4743] Bluetooth: hci4: command 0x0419 tx timeout [ 81.293638][ T5084] XFS (loop1): Quotacheck: Done. [ 81.293761][ T4241] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 81.379529][ T5183] loop2: detected capacity change from 0 to 512 [ 81.476508][ T4743] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.523229][ T4167] XFS (loop1): Unmounting Filesystem [ 81.560831][ T5183] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.271: invalid indirect mapped block 10 (level 1) [ 81.694296][ T5183] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.271: invalid indirect mapped block 8 (level 1) [ 81.734365][ T5183] EXT4-fs (loop2): 1 truncate cleaned up [ 81.753122][ T5183] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 81.836935][ T5183] EXT4-fs (loop2): shut down requested (1) [ 81.866565][ T4743] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.882417][ T4743] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.966674][ T4743] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 81.975892][ T4743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.003555][ T4743] usb 1-1: SerialNumber: syz [ 82.312431][ T4743] usb 1-1: 0:2 : does not exist [ 82.446681][ T4743] usb 1-1: USB disconnect, device number 3 [ 82.691153][ T5227] loop5: detected capacity change from 0 to 512 [ 82.759446][ T4248] udevd[4248]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.820197][ T5202] loop4: detected capacity change from 0 to 32768 [ 82.863850][ T5227] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.888217][ T5227] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.890947][ T5210] loop2: detected capacity change from 0 to 32768 [ 82.904789][ T5227] EXT4-fs (loop5): 1 truncate cleaned up [ 82.921801][ T5227] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.086186][ T5210] XFS (loop2): Mounting V5 Filesystem [ 83.264271][ T5210] XFS (loop2): Ending clean mount [ 83.289472][ T5210] XFS (loop2): Quotacheck needed: Please wait. [ 83.419138][ T5210] XFS (loop2): Quotacheck: Done. [ 83.572391][ T5233] loop0: detected capacity change from 0 to 32768 [ 83.583566][ T4166] XFS (loop2): Unmounting Filesystem [ 83.622648][ T5233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.283 (5233) [ 83.733849][ T5233] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 83.760316][ T5233] BTRFS info (device loop0): force clearing of disk cache [ 83.781789][ T5233] BTRFS info (device loop0): force zlib compression, level 3 [ 83.796972][ T5233] BTRFS info (device loop0): enabling auto defrag [ 83.803670][ T5233] BTRFS info (device loop0): metadata ratio 257 [ 83.836481][ T5233] BTRFS info (device loop0): enabling disk space caching [ 83.844253][ T5233] BTRFS info (device loop0): disk space caching is enabled [ 83.885080][ T5233] BTRFS info (device loop0): has skinny extents [ 83.907797][ T5270] loop4: detected capacity change from 0 to 128 [ 84.028859][ T5270] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.046802][ T5270] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.196470][ T4743] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 84.294308][ T5233] BTRFS info (device loop0): enabling ssd optimizations [ 84.328667][ T5233] BTRFS info (device loop0): clearing free space tree [ 84.346366][ T5312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 84.400034][ T5233] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 84.428702][ T5233] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 84.449094][ T5315] loop2: detected capacity change from 0 to 256 [ 84.456549][ T4743] usb 6-1: Using ep0 maxpacket: 8 [ 84.526007][ T5315] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d) [ 84.533046][ T5318] loop4: detected capacity change from 0 to 1024 [ 84.588865][ T5315] exFAT-fs (loop2): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 266, unilen : 257 > 255 [ 84.616705][ T4743] usb 6-1: unable to get BOS descriptor or descriptor too short [ 84.668176][ T5318] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 84.674164][ T146] Bluetooth: Frame is too long (len 26, expected len 4) [ 84.716918][ T4743] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 84.725571][ T4743] usb 6-1: config 0 has no interface number 0 [ 84.736625][ T144] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 84.736732][ T4743] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 84.759059][ T4743] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 84.770916][ T4743] usb 6-1: config 0 interface 88 has no altsetting 0 [ 84.783080][ T5318] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 84.971810][ T5332] loop2: detected capacity change from 0 to 256 [ 85.031316][ T4743] usb 6-1: string descriptor 0 read error: -22 [ 85.038643][ T4743] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 85.072434][ T4743] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 85.092643][ T4743] usb 6-1: config 0 descriptor?? [ 85.155144][ T5332] FAT-fs (loop2): Directory bread(block 64) failed [ 85.189637][ T4743] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input7 [ 85.196930][ T5332] FAT-fs (loop2): Directory bread(block 65) failed [ 85.232568][ T5332] FAT-fs (loop2): Directory bread(block 66) failed [ 85.239893][ T5332] FAT-fs (loop2): Directory bread(block 67) failed [ 85.247322][ T5332] FAT-fs (loop2): Directory bread(block 68) failed [ 85.255847][ T5332] FAT-fs (loop2): Directory bread(block 69) failed [ 85.301335][ T5332] FAT-fs (loop2): Directory bread(block 70) failed [ 85.383643][ T5332] FAT-fs (loop2): Directory bread(block 71) failed [ 85.392713][ T4245] usb 6-1: USB disconnect, device number 2 [ 85.415750][ T5332] FAT-fs (loop2): Directory bread(block 72) failed [ 85.438654][ T5332] FAT-fs (loop2): Directory bread(block 73) failed [ 85.460547][ T4941] udevd[4941]: Error opening device "/dev/input/event4": No such device [ 85.500705][ T4941] udevd[4941]: Unable to EVIOCGABS device "/dev/input/event4" [ 85.509366][ T4941] udevd[4941]: Unable to EVIOCGABS device "/dev/input/event4" [ 85.602269][ T5339] loop0: detected capacity change from 0 to 4096 [ 85.723935][ T5339] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,,errors=continue. Quota mode: writeback. [ 85.747061][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.771770][ T4743] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 85.976344][ T5357] loop5: detected capacity change from 0 to 64 [ 86.049079][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 86.156749][ T4743] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.176828][ T21] usb 5-1: config 0 has no interfaces? [ 86.336698][ T4743] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.352025][ T21] usb 5-1: New USB device found, idVendor=ff7a, idProduct=007f, bcdDevice=a6.00 [ 86.360532][ T4743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.390740][ T4743] usb 2-1: Product: syz [ 86.395173][ T4743] usb 2-1: Manufacturer: syz [ 86.403170][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.417278][ T21] usb 5-1: Product: syz [ 86.421716][ T21] usb 5-1: Manufacturer: syz [ 86.422299][ T4743] usb 2-1: SerialNumber: syz [ 86.440812][ T21] usb 5-1: SerialNumber: syz [ 86.462202][ T21] usb 5-1: config 0 descriptor?? [ 86.533881][ T5354] loop2: detected capacity change from 0 to 32768 [ 86.537964][ T5377] loop0: detected capacity change from 0 to 4096 [ 86.622676][ T5354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.319 (5354) [ 86.655747][ T5377] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 86.678594][ T5377] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 86.695469][ T5377] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 86.732099][ T5354] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 86.739532][ T5377] ntfs: volume version 3.1. [ 86.751094][ T23] usb 5-1: USB disconnect, device number 2 [ 86.760937][ T5377] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 86.771867][ T5354] BTRFS info (device loop2): force clearing of disk cache [ 86.779973][ T5377] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 86.788509][ T5354] BTRFS info (device loop2): force zlib compression, level 3 [ 86.824442][ T5354] BTRFS info (device loop2): enabling auto defrag [ 86.829078][ T5377] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 86.835801][ T5354] BTRFS info (device loop2): metadata ratio 257 [ 86.906611][ T5354] BTRFS info (device loop2): enabling disk space caching [ 86.920511][ T5354] BTRFS info (device loop2): disk space caching is enabled [ 86.947701][ T5354] BTRFS info (device loop2): has skinny extents [ 87.137412][ T5415] vxcan0: tx address claim with dest, not broadcast [ 87.197995][ T5354] BTRFS info (device loop2): enabling ssd optimizations [ 87.210681][ T5354] BTRFS info (device loop2): clearing free space tree [ 87.233596][ T5354] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.261180][ T5354] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.376849][ T4743] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 87.378663][ T5430] Zero length message leads to an empty skb [ 87.406652][ T4743] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 87.446768][ T4743] cdc_ncm 2-1:1.0: bind() failure [ 87.499208][ T4743] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 87.518545][ T4743] cdc_ncm 2-1:1.1: bind() failure [ 87.564485][ T4743] usb 2-1: USB disconnect, device number 3 [ 87.659995][ T9] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 87.742942][ T5446] loop0: detected capacity change from 0 to 1024 [ 87.820933][ T5446] EXT4-fs (loop0): inline encryption not supported [ 87.927581][ T5446] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,acl,debug_want_extra_isize=0x0000000000000008,inlinecrypt,jqfmt=vfsold,nodiscard,journal_dev=0x0000000000000002,acl,resgid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 88.064234][ T5442] loop5: detected capacity change from 0 to 32768 [ 88.093941][ T5446] EXT4-fs (loop0): shut down requested (2) [ 88.209182][ T5442] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 88.280384][ T5442] ocfs2: Unmounting device (7,5) on (node local) [ 89.300538][ T5511] tipc: Started in network mode [ 89.321991][ T5511] tipc: Node identity 6635004000000f3, cluster identity 4711 [ 89.330149][ T5509] loop2: detected capacity change from 0 to 512 [ 89.376623][ T5511] tipc: Enabling of bearer rejected, failed to enable media [ 89.430620][ T5509] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.483245][ T5509] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.498107][ T5477] loop1: detected capacity change from 0 to 32768 [ 89.520321][ T5509] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.373: Allocating blocks 41-42 which overlap fs metadata [ 89.568256][ T5509] Quota error (device loop2): write_blk: dquota write failed [ 89.615114][ T5483] loop5: detected capacity change from 0 to 32768 [ 89.642363][ T5509] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 89.669037][ T5477] XFS (loop1): Mounting V5 Filesystem [ 89.686178][ T5509] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.373: Failed to acquire dquot type 0 [ 89.706348][ T5509] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 89.747579][ T5483] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.365 (5483) [ 89.779262][ T5516] loop4: detected capacity change from 0 to 32768 [ 89.801747][ T5509] EXT4-fs (loop2): 1 truncate cleaned up [ 89.817959][ T5509] EXT4-fs (loop2): pa ffff888075ed7460: logic 1, phys. 41, len 23 [ 89.821487][ T5477] XFS (loop1): Ending clean mount [ 89.826284][ T5509] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 22, pa_free 23 [ 89.845753][ T5509] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000012,noblock_validity,max_dir_size_kb=0x0000000000000400,resgid=0x0000000020207374,nogrpid,errors=continue,sb=0x0000000000000006,nodiscard,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 89.887154][ T5477] XFS (loop1): Quotacheck needed: Please wait. [ 89.968339][ T5477] XFS (loop1): Quotacheck: Done. [ 90.010383][ T5483] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 90.025094][ T5483] BTRFS info (device loop5): force clearing of disk cache [ 90.054625][ T5483] BTRFS info (device loop5): force zlib compression, level 3 [ 90.064775][ T5483] BTRFS info (device loop5): enabling auto defrag [ 90.075480][ T5483] BTRFS info (device loop5): metadata ratio 257 [ 90.108865][ T5483] BTRFS info (device loop5): enabling disk space caching [ 90.116215][ T5483] BTRFS info (device loop5): disk space caching is enabled [ 90.126221][ T5483] BTRFS info (device loop5): has skinny extents [ 90.189992][ T4167] XFS (loop1): Unmounting Filesystem [ 90.304612][ T5483] BTRFS info (device loop5): enabling ssd optimizations [ 90.315893][ T5483] BTRFS info (device loop5): clearing free space tree [ 90.323880][ T5483] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.334558][ T5483] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.583272][ T1153] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 90.689820][ T5567] loop2: detected capacity change from 0 to 2048 [ 90.874007][ T5567] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.884915][ T5567] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.181505][ T5561] loop4: detected capacity change from 0 to 32768 [ 91.315831][ T5561] XFS (loop4): Mounting V5 Filesystem [ 91.505974][ T5561] XFS (loop4): Ending clean mount [ 91.532401][ T5561] XFS (loop4): Quotacheck needed: Please wait. [ 91.566765][ T5605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 91.704398][ T5561] XFS (loop4): Quotacheck: Done. [ 91.867005][ T4178] XFS (loop4): Unmounting Filesystem [ 91.961921][ T5621] loop0: detected capacity change from 0 to 256 [ 92.037981][ T5621] exfat: Deprecated parameter 'namecase' [ 92.072251][ T5621] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 92.073240][ T5609] loop2: detected capacity change from 0 to 32768 [ 92.142218][ T5609] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.394 (5609) [ 92.271258][ T5609] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 92.305807][ T5609] BTRFS info (device loop2): force clearing of disk cache [ 92.313074][ T5634] loop1: detected capacity change from 0 to 1024 [ 92.345827][ T5609] BTRFS info (device loop2): force zlib compression, level 3 [ 92.362363][ T5634] EXT4-fs (loop1): Ignoring removed nobh option [ 92.379608][ T5634] EXT4-fs (loop1): Ignoring removed bh option [ 92.386190][ T5609] BTRFS info (device loop2): enabling auto defrag [ 92.396122][ T5634] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.421318][ T5640] CUSE: unknown device info "H" [ 92.438054][ T5609] BTRFS info (device loop2): metadata ratio 257 [ 92.451468][ T5640] CUSE: unknown device info "$" [ 92.464505][ T5637] loop4: detected capacity change from 0 to 1764 [ 92.465603][ T5640] CUSE: unknown device info "Ae-½p" [ 92.477376][ T5640] CUSE: unknown device info "ÿÛß%" [ 92.482726][ T5640] CUSE: unknown device info "" [ 92.483430][ T5609] BTRFS info (device loop2): enabling disk space caching [ 92.488125][ T5640] CUSE: unknown device info "ÿÿÿÿ" [ 92.502678][ T5640] CUSE: unknown device info "óÿ$" [ 92.505336][ T5634] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 92.516603][ T5609] BTRFS info (device loop2): disk space caching is enabled [ 92.533720][ T5640] CUSE: unknown device info "€" [ 92.556274][ T5640] CUSE: unknown device info "" [ 92.563724][ T5634] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.405: Allocating blocks 481-513 which overlap fs metadata [ 92.583274][ T5640] CUSE: unknown device info "óÀšÑ€" [ 92.589702][ T5640] CUSE: unknown device info "" [ 92.594722][ T5640] CUSE: unknown device info "" [ 92.596472][ T5609] BTRFS info (device loop2): has skinny extents [ 92.600461][ T5640] CUSE: zero length info key specified [ 92.631025][ T5637] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 92.643381][ T5634] EXT4-fs (loop1): Remounting filesystem read-only [ 92.853574][ T5609] BTRFS info (device loop2): enabling ssd optimizations [ 92.868335][ T5609] BTRFS info (device loop2): clearing free space tree [ 92.884792][ T5609] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.910651][ T5609] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.083390][ T5674] loop5: detected capacity change from 0 to 512 [ 93.220687][ T5674] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 93.231652][ T1259] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 93.275903][ T5674] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 93.322596][ T5642] loop0: detected capacity change from 0 to 32768 [ 93.329424][ T5674] System zones: 0-1, 15-15, 18-18, 34-34 [ 93.336191][ T5674] EXT4-fs (loop5): orphan cleanup on readonly fs [ 93.344392][ T5674] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 93.354858][ T5674] EXT4-fs warning (device loop5): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 93.387809][ T5674] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 93.406072][ T5674] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.414: bad orphan inode 16 [ 93.511715][ T5674] EXT4-fs (loop5): Remounting filesystem read-only [ 93.555750][ T5674] ext4_test_bit(bit=15, block=18) = 1 [ 93.561478][ T5674] is_bad_inode(inode)=0 [ 93.586519][ T5674] NEXT_ORPHAN(inode)=0 [ 93.590633][ T5674] max_ino=32 [ 93.596934][ T5674] i_nlink=2 [ 93.600141][ T5674] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,. Quota mode: writeback. [ 93.626248][ T5663] loop4: detected capacity change from 0 to 32768 [ 93.715639][ T5674] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 93.733780][ T5642] XFS (loop0): Mounting V5 Filesystem [ 93.814568][ T5663] XFS (loop4): Mounting V5 Filesystem [ 93.851906][ T4893] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 93.878423][ T4893] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 93.962317][ T5642] XFS (loop0): Ending clean mount [ 94.056758][ T4657] Bluetooth: hci0: command 0x0401 tx timeout [ 94.146329][ T5663] XFS (loop4): Ending clean mount [ 94.159446][ T5663] XFS (loop4): Quotacheck needed: Please wait. [ 94.166105][ T5712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.215344][ T5712] bond0: (slave bond1): Enslaving as an active interface with an up link [ 94.223555][ T4174] XFS (loop0): Unmounting Filesystem [ 94.324808][ T5663] XFS (loop4): Quotacheck: Done. [ 94.377204][ T5663] XFS (loop4): User initiated shutdown received. [ 94.383961][ T5663] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 94.438269][ T5663] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 94.473040][ T5707] loop2: detected capacity change from 0 to 32768 [ 94.551032][ T4178] XFS (loop4): Unmounting Filesystem [ 94.598987][ T1153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.781606][ T1153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.005475][ T1153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.134382][ T1153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.282407][ T5755] loop0: detected capacity change from 0 to 512 [ 95.445661][ T4835] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.510627][ T5755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 95.526753][ T5755] System zones: 1-12 [ 95.533395][ T5761] loop2: detected capacity change from 0 to 2048 [ 95.541884][ T5755] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.434: invalid indirect mapped block 1819239214 (level 1) [ 95.561085][ T5755] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.434: bg 0: block 361: padding at end of block bitmap is not set [ 95.614709][ T5761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.650583][ T5755] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 95.724531][ T5757] chnl_net:caif_netlink_parms(): no params data found [ 95.731921][ T4835] usb 2-1: Using ep0 maxpacket: 16 [ 95.791401][ T5755] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.434: attempt to clear invalid blocks 33619980 len 1 [ 95.850735][ T5755] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.434: invalid indirect mapped block 1819239214 (level 0) [ 95.888418][ T4835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 95.918721][ T4835] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 95.919260][ T5755] EXT4-fs (loop0): 1 truncate cleaned up [ 95.928477][ T4835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.944552][ T4835] usb 2-1: config 0 descriptor?? [ 95.966515][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.973732][ T5755] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 95.989484][ T4835] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 96.021153][ T5755] EXT4-fs (loop0): shut down requested (1) [ 96.028806][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.091358][ T5757] device bridge_slave_0 entered promiscuous mode [ 96.128665][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.169709][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.190582][ T5757] device bridge_slave_1 entered promiscuous mode [ 96.196834][ T3531] bcm5974 2-1:0.0: could not read from device [ 96.236619][ T3531] bcm5974 2-1:0.0: could not read from device [ 96.252790][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.276712][ T4835] bcm5974 2-1:0.0: could not read from device [ 96.301396][ T4835] input: failed to attach handler mousedev to device input8, error: -5 [ 96.323531][ T4835] usb 2-1: USB disconnect, device number 4 [ 96.334346][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.345776][ T3531] bcm5974 2-1:0.0: could not read from device [ 96.447443][ T5757] team0: Port device team_slave_0 added [ 96.466047][ T4657] kernel read not supported for file /dsp (pid: 4657 comm: kworker/0:7) [ 96.487746][ T5757] team0: Port device team_slave_1 added [ 96.595677][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.673805][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.760319][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.826811][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.846047][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.917802][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.233693][ T4657] kernel write not supported for file /input/event2 (pid: 4657 comm: kworker/0:7) [ 97.332238][ T5757] device hsr_slave_0 entered promiscuous mode [ 97.360443][ T5757] device hsr_slave_1 entered promiscuous mode [ 97.387946][ T5757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.395979][ T5757] Cannot create hsr debugfs directory [ 97.426580][ T4217] Bluetooth: hci4: command 0x0409 tx timeout [ 97.576728][ T1153] device hsr_slave_0 left promiscuous mode [ 97.604478][ T1153] device hsr_slave_1 left promiscuous mode [ 97.632842][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.678848][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.693527][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.717054][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.733856][ T1153] device bridge_slave_1 left promiscuous mode [ 97.747256][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.765082][ T1153] device bridge_slave_0 left promiscuous mode [ 97.778580][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.809862][ T1153] device veth1_macvtap left promiscuous mode [ 97.826654][ T1153] device veth0_macvtap left promiscuous mode [ 97.850681][ T1153] device veth1_vlan left promiscuous mode [ 97.857527][ T1153] device veth0_vlan left promiscuous mode [ 98.062152][ T5866] loop0: detected capacity change from 0 to 32768 [ 98.359184][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 98.390031][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 98.418812][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.439584][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.624209][ T1153] bond0 (unregistering): Released all slaves [ 98.627287][ T5906] process 'syz.2.479' launched '/dev/fd/3' with NULL argv: empty string added [ 98.972655][ T5926] loop2: detected capacity change from 0 to 128 [ 99.100770][ T4657] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 99.125449][ T5757] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.187043][ T5757] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.237871][ T5757] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.304622][ T5757] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.343601][ T5941] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 99.392675][ T5941] FAT-fs (loop2): Filesystem has been set read-only [ 99.496938][ T4657] usb 5-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 99.506694][ T4839] Bluetooth: hci4: command 0x041b tx timeout [ 99.519992][ T4657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.555831][ T4657] usb 5-1: config 0 descriptor?? [ 99.576146][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.611652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.666696][ T4839] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.667780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.704878][ T26] audit: type=1326 audit(2000000038.781:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e6a1f169 code=0x7ffc0000 [ 99.719303][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.744505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.762459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.774045][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.781210][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.794969][ T26] audit: type=1326 audit(2000000038.821:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f44e6a1f169 code=0x7ffc0000 [ 99.847595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.880728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.910621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.914080][ T26] audit: type=1326 audit(2000000038.821:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e6a1f169 code=0x7ffc0000 [ 99.919995][ T5958] loop2: detected capacity change from 0 to 8 [ 99.967080][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.974276][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.974813][ T5936] loop0: detected capacity change from 0 to 32768 [ 100.008618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.037897][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.066972][ T5936] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.488 (5936) [ 100.082327][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.101469][ T4839] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 100.111980][ T4657] logitech-djreceiver 0003:046D:C71C.0002: hidraw0: USB HID v0.00 Device [HID 046d:c71c] on usb-dummy_hcd.4-1/input0 [ 100.122543][ T4839] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 100.128591][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.166643][ T4839] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 100.188833][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.197277][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.220840][ T4839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.231587][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.244056][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.263379][ T4659] usb 5-1: USB disconnect, device number 3 [ 100.304023][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.323023][ T5936] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 100.340332][ T5936] BTRFS info (device loop0): using free space tree [ 100.340833][ T4839] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 100.348086][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.372711][ T5958] SQUASHFS error: lzo decompression failed, data probably corrupt [ 100.387116][ T5936] BTRFS info (device loop0): has skinny extents [ 100.404358][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.413104][ T5958] SQUASHFS error: Failed to read block 0x60: -5 [ 100.435686][ T5958] SQUASHFS error: Unable to read data cache entry [60] [ 100.450404][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.466949][ T5958] SQUASHFS error: Unable to read page, block 60, size 11 [ 100.474195][ T5958] SQUASHFS error: Unable to read data cache entry [60] [ 100.496598][ T5958] SQUASHFS error: Unable to read page, block 60, size 11 [ 100.504951][ T5958] SQUASHFS error: Unable to read data cache entry [60] [ 100.518369][ T5958] SQUASHFS error: Unable to read page, block 60, size 11 [ 100.527341][ T5958] SQUASHFS error: lzo decompression failed, data probably corrupt [ 100.535716][ T5958] SQUASHFS error: Failed to read block 0x60: -5 [ 100.546643][ T4839] gspca_sn9c2028: read1 error -32 [ 100.551105][ T5958] SQUASHFS error: lzo decompression failed, data probably corrupt [ 100.563564][ T5958] SQUASHFS error: Failed to read block 0x60: -5 [ 100.574258][ T26] audit: type=1800 audit(2000000039.661:10): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.492" name="file0" dev="loop2" ino=1 res=0 errno=0 [ 100.596794][ T4839] gspca_sn9c2028: read1 error -32 [ 100.666621][ T5936] BTRFS info (device loop0): enabling ssd optimizations [ 100.844456][ T4839] usb 2-1: USB disconnect, device number 5 [ 100.938332][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.954133][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.999095][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.006518][ T1326] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.271695][ T1326] usb 3-1: Using ep0 maxpacket: 16 [ 101.426781][ T1326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 101.466601][ T1326] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.476284][ T1326] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 101.512787][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.533167][ T1326] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 101.537271][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.559070][ T1326] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 101.586104][ T1326] usb 3-1: config 1 interface 0 has no altsetting 0 [ 101.586484][ T6018] Bluetooth: hci4: command 0x040f tx timeout [ 101.603699][ T1326] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 101.647991][ T5757] device veth0_vlan entered promiscuous mode [ 101.672587][ T1326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.698625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.712599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.757804][ T1326] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 101.765370][ T5757] device veth1_vlan entered promiscuous mode [ 101.815912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.831931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.921152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.998677][ T1326] scsi host1: usb-storage 3-1:1.0 [ 102.033066][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.047474][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.107760][ T5757] device veth0_macvtap entered promiscuous mode [ 102.157173][ T5757] device veth1_macvtap entered promiscuous mode [ 102.161662][ T6053] loop1: detected capacity change from 0 to 512 [ 102.177724][ T5997] udc-core: couldn't find an available UDC or it's busy [ 102.209454][ T5997] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.233477][ T6057] loop0: detected capacity change from 0 to 512 [ 102.241700][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.304426][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.330038][ T6057] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.508: corrupted in-inode xattr [ 102.361581][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.392959][ T6057] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.508: couldn't read orphan inode 15 (err -117) [ 102.405534][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.437921][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.473496][ T6057] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.485824][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.516764][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.556484][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.588008][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.601360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.622613][ T6053] EXT4-fs (loop1): first meta block group too large: 16711680 (group descriptor block count 1) [ 102.646279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.670424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.699261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.748174][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.775154][ T6058] loop4: detected capacity change from 0 to 40427 [ 102.803079][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.821408][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.843171][ T6072] loop0: detected capacity change from 0 to 2048 [ 102.863601][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.893970][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.909044][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.922374][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.936222][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.952102][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.971319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.995972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.007701][ T5757] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.018592][ T6058] F2FS-fs (loop4): Found nat_bits in checkpoint [ 103.038943][ T6072] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 103.046554][ T5757] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.102762][ T1259] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 103.126587][ T4840] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.132452][ T5757] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.149599][ T5757] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.184066][ T1259] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 103.197172][ T6058] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 103.371559][ T4178] attempt to access beyond end of device [ 103.371559][ T4178] loop4: rw=2049, want=45104, limit=40427 [ 103.386044][ T1259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.398980][ T4836] usb 3-1: USB disconnect, device number 2 [ 103.419717][ T6046] sddr09: could not read card info [ 103.425568][ T154] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 103.429724][ T1259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.446221][ T154] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 103.471828][ T4904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.474077][ T6088] loop0: detected capacity change from 0 to 512 [ 103.496898][ T4904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.498130][ T154] sd 1:0:0:0: [sdb] Write Protect is off [ 103.513458][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.521177][ T154] sd 1:0:0:0: [sdb] Asking for cache data failed [ 103.536816][ T4840] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 103.536824][ T154] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 103.536845][ T4840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.590870][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.607809][ T4840] usb 2-1: config 0 descriptor?? [ 103.611340][ T154] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 103.649166][ T4840] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 103.747052][ T4835] Bluetooth: hci4: command 0x0419 tx timeout [ 103.778168][ T6088] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,quota,auto_da_alloc=0x0000000000000002,noload,user_xattr,nombcache,,errors=continue. Quota mode: writeback. [ 103.796611][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.807200][ T6097] loop6: detected capacity change from 0 to 512 [ 103.877114][ T6088] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.923777][ T6097] EXT4-fs (loop6): Ignoring removed oldalloc option [ 103.973561][ T6097] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.428: Parent and EA inode have the same ino 15 [ 104.007044][ T6097] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.052370][ T6097] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.428: Parent and EA inode have the same ino 15 [ 104.072427][ T6097] EXT4-fs (loop6): 1 orphan inode deleted [ 104.078615][ T4840] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 104.097646][ T6097] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,quota,usrjquota=,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 104.179210][ T6108] netlink: 'syz.2.516': attribute type 3 has an invalid length. [ 104.275731][ T6088] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 104.281852][ T6097] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.428: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 104.339169][ T6088] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 104.404285][ T6088] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.514: Failed to acquire dquot type 0 [ 104.483530][ T6088] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 104.509049][ T4945] udevd[4945]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 104.526735][ T4840] gspca_cpia1: usb_control_msg 02, error -71 [ 104.540764][ T6088] overlayfs: failed to verify upper root origin [ 104.550184][ T4840] gspca_cpia1: usb_control_msg 05, error -71 [ 104.572256][ T4840] cpia1 2-1:0.0: unexpected systemstate: 00 [ 104.583365][ T6120] loop2: detected capacity change from 0 to 512 [ 104.626707][ T4840] usb 2-1: USB disconnect, device number 6 [ 104.687224][ T6120] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.765814][ T6128] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 104.809294][ T6120] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6). [ 104.899326][ T6120] EXT4-fs warning (device loop2): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.181649][ T4840] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.253197][ T6157] loop4: detected capacity change from 0 to 512 [ 105.357765][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'. [ 105.361984][ T6165] loop2: detected capacity change from 0 to 512 [ 105.380406][ T6157] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.431146][ T6157] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 105.496010][ T6157] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.531: inode #15: comm syz.4.531: iget: illegal inode # [ 105.510096][ T6157] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.531: couldn't read orphan inode 15 (err -117) [ 105.519774][ T4840] usb 1-1: Using ep0 maxpacket: 8 [ 105.528569][ T6157] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000004005,norecovery,usrjquota=,,errors=continue. Quota mode: none. [ 105.643809][ T6176] loop6: detected capacity change from 0 to 524287999 [ 105.655269][ T6165] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 105.680293][ T6165] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.685025][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.702136][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.793758][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.804710][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.845683][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.856689][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.865091][ T4840] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.878229][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.887144][ T4840] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.889302][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 105.909399][ T4840] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.936430][ T4840] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.956456][ T4840] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.975914][ T4840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.990451][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.001526][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.043806][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.046475][ T6188] loop4: detected capacity change from 0 to 512 [ 106.054992][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.076618][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.087587][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.096038][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.107008][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.120862][ T3546] ldm_validate_partition_table(): Disk read failed. [ 106.128477][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.139462][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.157779][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.168750][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.187392][ T3546] Dev loop6: unable to read RDB block 0 [ 106.218179][ T3546] loop6: unable to read partition table [ 106.235749][ T6176] ldm_validate_partition_table(): Disk read failed. [ 106.250766][ T6176] Dev loop6: unable to read RDB block 0 [ 106.252466][ T6188] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 106.261387][ T6176] loop6: unable to read partition table [ 106.280517][ T6176] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 106.281956][ T6180] ldm_validate_partition_table(): Disk read failed. [ 106.296776][ T4840] usb 1-1: GET_CAPABILITIES returned 0 [ 106.302265][ T4840] usbtmc 1-1:16.0: can't read capabilities [ 106.306639][ T6188] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.349812][ T6180] Dev loop6: unable to read RDB block 0 [ 106.356727][ T6180] loop6: unable to read partition table [ 106.363072][ T6180] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 106.497319][ T4661] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.511780][ T4659] usb 1-1: USB disconnect, device number 4 [ 106.858224][ T4661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.881504][ T4661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.917626][ T4661] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 106.953927][ T4661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.964529][ T6221] loop4: detected capacity change from 0 to 4096 [ 107.002548][ T4661] usb 3-1: config 0 descriptor?? [ 107.026620][ T4835] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 107.131442][ T6228] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.177623][ T6221] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 107.249051][ T6221] Remounting filesystem read-only [ 107.459174][ T6240] loop4: detected capacity change from 0 to 512 [ 107.465771][ T6241] loop0: detected capacity change from 0 to 512 [ 107.524294][ T6241] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 107.532761][ T4835] usb 7-1: unable to get BOS descriptor or descriptor too short [ 107.533767][ T4661] hid-generic 0003:05AC:4262.0003: unbalanced delimiter at end of report description [ 107.550358][ T6241] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 107.562590][ T4661] hid-generic: probe of 0003:05AC:4262.0003 failed with error -22 [ 107.618217][ T6241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e002c118, mo2=0002] [ 107.626820][ T4835] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 107.636999][ T6241] System zones: 1-12 [ 107.641073][ T4835] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.663767][ T6240] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.551: bg 0: block 248: padding at end of block bitmap is not set [ 107.668721][ T6241] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.552: corrupted in-inode xattr [ 107.703467][ T6240] Quota error (device loop4): write_blk: dquota write failed [ 107.711438][ T6240] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 107.722064][ T6240] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.551: Failed to acquire dquot type 1 [ 107.743071][ T4661] usb 3-1: USB disconnect, device number 3 [ 107.766886][ T4835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.796584][ T4835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 107.804614][ T4835] usb 7-1: SerialNumber: syz [ 107.808905][ T6241] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.552: couldn't read orphan inode 15 (err -117) [ 107.812117][ T6240] EXT4-fs (loop4): 1 truncate cleaned up [ 107.828721][ T6241] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,auto_da_alloc,discard,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 107.868727][ T6240] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 107.882213][ T6216] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 107.922524][ T6240] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.975281][ T6241] EXT4-fs (loop0): shut down requested (2) [ 108.100437][ T6216] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.245621][ T6268] bond0: option lp_interval: invalid value (0) [ 108.257151][ T6267] loop4: detected capacity change from 0 to 512 [ 108.267338][ T6268] bond0: option lp_interval: allowed values 1 - 2147483647 [ 108.321227][ T6270] loop0: detected capacity change from 0 to 256 [ 108.386961][ T6267] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.556: iget: bad extended attribute block 1 [ 108.453559][ T6267] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.556: couldn't read orphan inode 15 (err -117) [ 108.494122][ T6270] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 108.550261][ T6267] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 108.576793][ T4835] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 108.613482][ T6267] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 108.671287][ T6281] loop1: detected capacity change from 0 to 256 [ 108.687617][ T6283] loop2: detected capacity change from 0 to 256 [ 108.781054][ T4840] usb 7-1: USB disconnect, device number 2 [ 109.113124][ T6309] loop0: detected capacity change from 0 to 512 [ 109.207497][ T6309] EXT4-fs (loop0): inline encryption not supported [ 109.214332][ T6309] EXT4-fs (loop0): Ignoring removed nobh option [ 109.259620][ T6309] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.313666][ T6309] EXT4-fs (loop0): 1 truncate cleaned up [ 109.335320][ T6321] loop2: detected capacity change from 0 to 1024 [ 109.346549][ T6309] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,grpjquota=,debug_want_extra_isize=0x0000000000000068,inlinecrypt,nobh,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: none. [ 109.401715][ T6309] EXT4-fs error (device loop0): ext4_check_all_de:667: inode #12: block 7: comm syz.0.571: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=124 fake=0 [ 109.435331][ T6309] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.0.571: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 109.465334][ T6309] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1782: Corrupt filesystem [ 109.698801][ T6335] loop4: detected capacity change from 0 to 256 [ 109.816039][ T6332] loop0: detected capacity change from 0 to 4096 [ 109.873832][ T6342] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 109.902146][ T6332] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 110.006277][ T6332] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 110.904725][ T6404] loop6: detected capacity change from 0 to 512 [ 110.921869][ T6349] loop1: detected capacity change from 0 to 32768 [ 110.977707][ T6408] program syz.4.609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.987503][ T6404] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.057835][ T6404] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.607: invalid indirect mapped block 4294967295 (level 1) [ 111.078750][ T6404] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.607: invalid indirect mapped block 4294967295 (level 1) [ 111.134061][ T6404] EXT4-fs (loop6): 2 truncates cleaned up [ 111.154719][ T6404] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 111.183612][ T6418] loop0: detected capacity change from 0 to 512 [ 111.257418][ T6418] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 111.278979][ T5757] EXT4-fs error (device loop6): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 111.304161][ T5757] EXT4-fs error (device loop6): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 111.310324][ T6418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 111.328993][ T6418] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.613: corrupted in-inode xattr [ 111.357464][ T6418] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.613: couldn't read orphan inode 15 (err -117) [ 111.377528][ T6418] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 111.401385][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.614830][ T6434] loop4: detected capacity change from 0 to 256 [ 111.698296][ T6434] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.775961][ T6434] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.836129][ T1153] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.852642][ T6446] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 111.880885][ T6438] loop0: detected capacity change from 0 to 4096 [ 111.903797][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 111.922121][ T1153] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.982213][ T4840] kernel write not supported for file /264/attr/exec (pid: 4840 comm: kworker/1:18) [ 112.043948][ T6438] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 112.050682][ T6454] loop1: detected capacity change from 0 to 1024 [ 112.058594][ T1153] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.133358][ T26] audit: type=1800 audit(2000000051.211:11): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.630" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 112.180997][ T4241] hfsplus: b-tree write err: -5, ino 4 [ 112.194754][ T6462] loop2: detected capacity change from 0 to 128 [ 112.220356][ T1153] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.303885][ T4174] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 112.332160][ T6464] pim6reg: tun_chr_ioctl cmd 1074025673 [ 112.755592][ T6485] netlink: 296 bytes leftover after parsing attributes in process `syz.4.643'. [ 113.248162][ T6465] chnl_net:caif_netlink_parms(): no params data found [ 113.395203][ T6517] mkiss: ax0: crc mode is auto. [ 113.547443][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.566434][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.574534][ T6465] device bridge_slave_0 entered promiscuous mode [ 113.585265][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.594654][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.602857][ T6465] device bridge_slave_1 entered promiscuous mode [ 113.695935][ T6465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.758791][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 113.765599][ T6465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.788133][ T6484] loop2: detected capacity change from 0 to 40427 [ 113.824347][ T6465] team0: Port device team_slave_0 added [ 113.848364][ T6465] team0: Port device team_slave_1 added [ 113.869186][ T6484] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 113.887839][ T6484] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 113.911509][ T6540] bond0: Unable to set up delay as MII monitoring is disabled [ 114.008141][ T6484] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.022250][ T6465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.036893][ T6465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.075201][ T6465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.103935][ T6465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.135310][ T6465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.152083][ T6545] loop4: detected capacity change from 0 to 512 [ 114.198021][ T6484] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 114.214912][ T6484] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.219583][ T6465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.315860][ T1153] device hsr_slave_0 left promiscuous mode [ 114.327148][ T6545] EXT4-fs (loop4): 1 truncate cleaned up [ 114.333038][ T1153] device hsr_slave_1 left promiscuous mode [ 114.343975][ T6545] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,quota,,errors=continue. Quota mode: writeback. [ 114.383558][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.401568][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.437973][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.470079][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.478955][ T1153] device bridge_slave_1 left promiscuous mode [ 114.485278][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.495882][ T26] audit: type=1326 audit(2000000053.571:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e0e61169 code=0x7ffc0000 [ 114.518141][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.552220][ T4835] Bluetooth: hci4: command 0x0409 tx timeout [ 114.576827][ T26] audit: type=1326 audit(2000000053.571:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e0e61169 code=0x7ffc0000 [ 114.607053][ T1153] device bridge_slave_0 left promiscuous mode [ 114.619965][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.657588][ T26] audit: type=1326 audit(2000000053.571:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2e0e61169 code=0x7ffc0000 [ 114.697526][ T1153] device veth1_macvtap left promiscuous mode [ 114.709239][ T1153] device veth0_macvtap left promiscuous mode [ 114.735773][ T1153] device veth1_vlan left promiscuous mode [ 114.795514][ T1153] device veth0_vlan left promiscuous mode [ 115.076993][ T6584] loop2: detected capacity change from 0 to 8 [ 115.119545][ T6584] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 115.198485][ T6584] cramfs: Error -3 while decompressing! [ 115.204481][ T6584] cramfs: ffffffff96bc0268(26)->ffff88807415f000(4096) [ 115.211460][ T6584] cramfs: bad data blocksize 3288329103 [ 115.217667][ T6584] cramfs: Error -3 while decompressing! [ 115.223213][ T6584] cramfs: ffffffff96bc0268(26)->ffff88807415f000(4096) [ 115.230626][ T26] audit: type=1800 audit(2000000054.311:15): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.664" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 115.250082][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.397903][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 115.435647][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 115.466057][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.500121][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.515999][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.674'. [ 115.580491][ T1153] bond0 (unregistering): Released all slaves [ 115.794758][ T6465] device hsr_slave_0 entered promiscuous mode [ 115.851565][ T6465] device hsr_slave_1 entered promiscuous mode [ 115.876242][ T6465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.895276][ T6465] Cannot create hsr debugfs directory [ 116.001524][ T6607] loop4: detected capacity change from 0 to 1024 [ 116.321999][ T6465] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 116.372688][ T6614] loop0: detected capacity change from 0 to 32768 [ 116.440147][ T6614] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.682 (6614) [ 116.471783][ T6614] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 116.481314][ T6614] BTRFS info (device loop0): force clearing of disk cache [ 116.488600][ T6614] BTRFS info (device loop0): enabling ssd optimizations [ 116.495537][ T6614] BTRFS info (device loop0): using spread ssd allocation scheme [ 116.503232][ T6614] BTRFS info (device loop0): using free space tree [ 116.509796][ T6614] BTRFS info (device loop0): has skinny extents [ 116.521705][ T4904] hfsplus: b-tree write err: -5, ino 4 [ 116.530606][ T6465] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 116.571166][ T6465] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 116.609884][ T6465] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 116.637226][ T4906] Bluetooth: hci4: command 0x041b tx timeout [ 116.651203][ T6627] loop4: detected capacity change from 0 to 256 [ 116.764471][ T6598] loop1: detected capacity change from 0 to 32768 [ 116.797741][ T6627] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.815647][ T6603] loop2: detected capacity change from 0 to 32768 [ 116.972663][ T6627] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.992113][ T6465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.002433][ T6614] BTRFS info (device loop0): clearing free space tree [ 117.008904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.009433][ T6614] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.017971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.026075][ T6614] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.036679][ T6465] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.115656][ T6614] BTRFS info (device loop0): creating free space tree [ 117.124223][ T6614] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.133910][ T6614] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.177768][ T6603] XFS (loop2): Mounting V5 Filesystem [ 117.205725][ T6653] netlink: 'syz.1.684': attribute type 5 has an invalid length. [ 117.230637][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.255371][ T6614] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same [ 117.309316][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.439594][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.446719][ T4241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.535300][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.584897][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.593242][ T6603] XFS (loop2): Ending clean mount [ 117.649005][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.757285][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.764367][ T4241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.854360][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.905178][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.965599][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 118.012762][ T4166] XFS (loop2): Unmounting Filesystem [ 118.027024][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 118.088317][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.129333][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.218378][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.271567][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.381439][ T6465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.401323][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.449452][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.485048][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.558441][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.678121][ T6691] loop4: detected capacity change from 0 to 64 [ 118.697431][ T4658] Bluetooth: hci4: command 0x040f tx timeout [ 118.856284][ T6697] loop1: detected capacity change from 0 to 2048 [ 119.023688][ T6697] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 119.034093][ T4658] hid-generic C990:0003:0000.0004: unknown main item tag 0x0 [ 119.056463][ T6697] UDF-fs: Scanning with blocksize 512 failed [ 119.071573][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.080803][ T4658] hid-generic C990:0003:0000.0004: unknown main item tag 0x0 [ 119.088841][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.101644][ T6465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.134986][ T6697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.206741][ T6709] loop4: detected capacity change from 0 to 1024 [ 119.215091][ T4658] hid-generic C990:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 119.489223][ T6717] loop2: detected capacity change from 0 to 64 [ 119.778042][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.793650][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.903556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.969179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.007641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.071235][ T6698] loop0: detected capacity change from 0 to 40427 [ 120.076878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.119403][ T6465] device veth0_vlan entered promiscuous mode [ 120.160331][ T6465] device veth1_vlan entered promiscuous mode [ 120.189607][ T6698] F2FS-fs (loop0): invalid crc value [ 120.267525][ T6698] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.290861][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.318322][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.360904][ T6465] device veth0_macvtap entered promiscuous mode [ 120.438541][ T6465] device veth1_macvtap entered promiscuous mode [ 120.456738][ T6698] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.507437][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.523621][ T6715] loop4: detected capacity change from 0 to 32768 [ 120.540090][ T6762] loop2: detected capacity change from 0 to 256 [ 120.544493][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.557782][ T6698] attempt to access beyond end of device [ 120.557782][ T6698] loop0: rw=2049, want=45112, limit=40427 [ 120.570929][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.587490][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.602053][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.614338][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.632828][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.644882][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.664861][ T4174] attempt to access beyond end of device [ 120.664861][ T4174] loop0: rw=2049, want=45120, limit=40427 [ 120.683790][ T6465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.700467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.724618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.743143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.764414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.787625][ T4658] Bluetooth: hci4: command 0x0419 tx timeout [ 120.826754][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.901036][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.933748][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.934986][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 120.951888][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.965197][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.976122][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.986313][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.997550][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.020307][ T6465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.046847][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.063675][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.095551][ T6465] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.166429][ T6465] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.179682][ T6465] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.222889][ T6465] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.359649][ T6774] loop1: detected capacity change from 0 to 4096 [ 121.477201][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.527422][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.548909][ T26] audit: type=1326 audit(2000000060.631:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.718" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44e6a1f169 code=0x0 [ 121.578020][ T1259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.624545][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.640367][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.686700][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.714386][ T6788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.714'. [ 121.845058][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 122.039992][ T6806] loop7: detected capacity change from 0 to 1024 [ 122.089285][ T6806] EXT4-fs (loop7): Ignoring removed nobh option [ 122.107596][ T6808] input: syz0 as /devices/virtual/input/input9 [ 122.125932][ T6806] EXT4-fs (loop7): Ignoring removed bh option [ 122.166289][ T6806] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.277725][ T6806] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 122.472828][ T6830] netlink: 'syz.0.733': attribute type 2 has an invalid length. [ 122.706451][ T4658] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.884780][ T6849] loop1: detected capacity change from 0 to 4096 [ 122.961972][ T4658] usb 5-1: Using ep0 maxpacket: 16 [ 122.980013][ T6863] loop2: detected capacity change from 0 to 256 [ 123.007396][ T6849] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 123.087622][ T4658] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 123.130917][ T4658] usb 5-1: config 0 has no interface number 0 [ 123.140756][ T6849] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 123.167956][ T4658] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 123.191927][ T6849] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 123.211034][ T4658] usb 5-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 52482, setting to 1024 [ 123.226913][ T6849] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 123.243364][ T4658] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 123.255398][ T6849] ntfs: volume version 3.1. [ 123.339448][ T6849] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 123.366076][ T6838] loop7: detected capacity change from 0 to 32768 [ 123.455817][ T6849] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 123.465092][ T4658] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 123.467187][ T6838] XFS: ikeep mount option is deprecated. [ 123.480853][ T4658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.501196][ T4658] usb 5-1: Product: syz [ 123.516490][ T4658] usb 5-1: Manufacturer: syz [ 123.521147][ T4658] usb 5-1: SerialNumber: syz [ 123.598606][ T4658] usb 5-1: config 0 descriptor?? [ 123.621026][ T4167] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 123.635129][ T6838] XFS (loop7): Mounting V5 Filesystem [ 123.656906][ T6829] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.671640][ T6829] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.780970][ T6838] XFS (loop7): Ending clean mount [ 123.838472][ T6838] XFS (loop7): Quotacheck needed: Please wait. [ 123.941090][ T6829] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.976656][ T6838] XFS (loop7): Quotacheck: Done. [ 123.978179][ T6829] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.132947][ T6465] XFS (loop7): Unmounting Filesystem [ 124.447612][ T4658] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 124.503098][ T4658] asix: probe of 5-1:0.251 failed with error -524 [ 124.566525][ T6937] loop1: detected capacity change from 0 to 512 [ 124.602261][ T6913] loop2: detected capacity change from 0 to 32768 [ 124.650395][ T4835] usb 5-1: USB disconnect, device number 4 [ 124.688305][ T6913] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.758 (6913) [ 124.700629][ T6937] EXT4-fs (loop1): Ignoring removed nobh option [ 124.728467][ T6937] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.766: invalid indirect mapped block 256 (level 2) [ 124.753571][ T6937] EXT4-fs (loop1): 2 truncates cleaned up [ 124.757532][ T6919] loop0: detected capacity change from 0 to 32768 [ 124.782879][ T6937] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 124.921075][ T6937] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.766: bg 0: block 5: invalid block bitmap [ 124.953930][ T6913] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 124.984038][ T6913] BTRFS info (device loop2): use zlib compression, level 3 [ 124.998276][ T6937] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.021505][ T6913] BTRFS info (device loop2): max_inline at 4096 [ 125.054136][ T6937] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.054136][ T6937] [ 125.066643][ T6913] BTRFS info (device loop2): enabling ssd optimizations [ 125.081718][ T6913] BTRFS info (device loop2): using spread ssd allocation scheme [ 125.098891][ T6937] EXT4-fs (loop1): Total free blocks count 0 [ 125.101117][ T6913] BTRFS info (device loop2): setting nodatasum [ 125.104901][ T6937] EXT4-fs (loop1): Free/Dirty block details [ 125.121281][ T6913] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 125.172334][ T6962] loop7: detected capacity change from 0 to 512 [ 125.175548][ T6913] BTRFS info (device loop2): force lzo compression, level 0 [ 125.180634][ T6937] EXT4-fs (loop1): free_blocks=0 [ 125.207285][ T6913] BTRFS info (device loop2): force clearing of disk cache [ 125.214437][ T6913] BTRFS info (device loop2): using free space tree [ 125.284351][ T6962] EXT4-fs (loop7): orphan cleanup on readonly fs [ 125.286755][ T6913] BTRFS info (device loop2): has skinny extents [ 125.296933][ T6937] EXT4-fs (loop1): dirty_blocks=46 [ 125.296952][ T6937] EXT4-fs (loop1): Block reservation details [ 125.296963][ T6937] EXT4-fs (loop1): i_reserved_data_blocks=46 [ 125.317155][ T6962] EXT4-fs error (device loop7): ext4_quota_enable:6391: comm syz.7.770: Bad quota inum: 11, type: 1 [ 125.348224][ T6962] EXT4-fs warning (device loop7): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 125.369722][ T1259] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 44 with error 28 [ 125.392892][ T1259] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.392892][ T1259] [ 125.421156][ T6962] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 125.434213][ T6962] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.459141][ T6962] EXT4-fs (loop7): shut down requested (2) [ 125.465411][ T6962] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 125.513962][ T6962] EXT4-fs warning (device loop7): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 125.536291][ T6989] netlink: 'syz.1.773': attribute type 1 has an invalid length. [ 125.656308][ T7000] loop4: detected capacity change from 0 to 1024 [ 125.728949][ T6913] BTRFS info (device loop2): clearing free space tree [ 125.735857][ T6913] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.776262][ T6913] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.802585][ T7011] loop7: detected capacity change from 0 to 512 [ 125.819317][ T7014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.778'. [ 125.828017][ T6913] BTRFS info (device loop2): creating free space tree [ 125.844771][ T7000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.868238][ T6913] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.914150][ T7011] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 125.933149][ T7000] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.936571][ T7011] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.779: bad orphan inode 13 [ 125.953781][ T6913] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.975659][ T7011] EXT4-fs (loop7): Remounting filesystem read-only [ 125.976263][ T7000] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, [ 125.982501][ T7011] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,grpid,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 126.011668][ T7000] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 126.034285][ T4658] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.093547][ T7026] loop1: detected capacity change from 0 to 512 [ 126.128838][ T7011] EXT4-fs error (device loop7): __ext4_new_inode:1076: comm syz.7.779: reserved inode found cleared - inode=18 [ 126.161307][ T7026] EXT4-fs (loop1): Ignoring removed nobh option [ 126.190907][ T7026] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.200160][ T7011] EXT4-fs (loop7): Remounting filesystem read-only [ 126.216977][ T7000] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 126.266109][ T7000] EXT4-fs (loop4): This should not happen!! Data will be lost [ 126.266109][ T7000] [ 126.292017][ T4658] usb 1-1: Using ep0 maxpacket: 32 [ 126.298350][ T7026] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.781: invalid indirect mapped block 256 (level 2) [ 126.326673][ T7000] EXT4-fs (loop4): Total free blocks count 0 [ 126.365860][ T7026] EXT4-fs (loop1): 2 truncates cleaned up [ 126.372190][ T7000] EXT4-fs (loop4): Free/Dirty block details [ 126.381739][ T7000] EXT4-fs (loop4): free_blocks=4293918720 [ 126.387704][ T7000] EXT4-fs (loop4): dirty_blocks=16 [ 126.392964][ T7026] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 126.421330][ T7000] EXT4-fs (loop4): Block reservation details [ 126.427620][ T4658] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 126.436008][ T4658] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 126.441360][ T7026] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.781: bg 0: block 5: invalid block bitmap [ 126.447421][ T4658] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.476142][ T4658] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 126.486219][ T26] audit: type=1800 audit(2000000065.571:17): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.775" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 126.495614][ T4658] usb 1-1: config 1 has no interface number 0 [ 126.527885][ T7000] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 126.542294][ T4658] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 126.561062][ T4658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.570339][ T7026] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 126.604175][ T7026] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.604175][ T7026] [ 126.634288][ T7026] EXT4-fs (loop1): Total free blocks count 0 [ 126.655378][ T7026] EXT4-fs (loop1): Free/Dirty block details [ 126.662178][ T7026] EXT4-fs (loop1): free_blocks=0 [ 126.668969][ T4658] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 126.672716][ T7026] EXT4-fs (loop1): dirty_blocks=64 [ 126.683244][ T7026] EXT4-fs (loop1): Block reservation details [ 126.690069][ T7026] EXT4-fs (loop1): i_reserved_data_blocks=64 [ 126.886740][ T4658] snd_usb_pod 1-1:1.1: set_interface failed [ 126.894597][ T4658] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 126.911595][ T4658] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 126.945465][ T4658] usb 1-1: USB disconnect, device number 5 [ 127.003272][ T7050] loop2: detected capacity change from 0 to 16 [ 127.051520][ T7050] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 127.334810][ T7074] loop4: detected capacity change from 0 to 128 [ 127.430939][ T26] audit: type=1326 audit(2000000066.511:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.795" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2e0e61169 code=0x0 [ 127.468350][ T7085] loop7: detected capacity change from 0 to 512 [ 127.599556][ T7085] EXT4-fs (loop7): Test dummy encryption mode enabled [ 127.611185][ T7085] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 127.660639][ T7085] EXT4-fs (loop7): 1 truncate cleaned up [ 127.670819][ T7085] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,barrier=0x0000000000000003,,errors=continue. Quota mode: none. [ 127.814659][ T7085] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 128.191393][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.805'. [ 128.346777][ T7138] loop4: detected capacity change from 0 to 256 [ 128.436065][ T7138] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 128.582866][ T7150] loop1: detected capacity change from 0 to 2048 [ 128.668849][ T7150] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.719014][ T7116] loop0: detected capacity change from 0 to 32768 [ 128.790763][ T7160] loop4: detected capacity change from 0 to 128 [ 128.810483][ T7162] netlink: 16146 bytes leftover after parsing attributes in process `syz.2.817'. [ 128.873514][ T7160] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 128.881620][ T7116] ialloc: diAlloc returned -5! [ 128.919577][ T7160] attempt to access beyond end of device [ 128.919577][ T7160] loop4: rw=2049, want=2066843071, limit=128 [ 129.035529][ T7160] buffer_io_error: 41 callbacks suppressed [ 129.035544][ T7160] Buffer I/O error on dev loop4, logical block 2066843070, lost async page write [ 129.105199][ T7175] loop2: detected capacity change from 0 to 1024 [ 129.126846][ T7160] attempt to access beyond end of device [ 129.126846][ T7160] loop4: rw=2049, want=8767745, limit=128 [ 129.166720][ T7160] Buffer I/O error on dev loop4, logical block 8767744, lost async page write [ 129.186834][ T7160] attempt to access beyond end of device [ 129.186834][ T7160] loop4: rw=2049, want=13269810, limit=128 [ 129.205028][ T7175] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 129.219252][ T7175] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.236703][ T7160] Buffer I/O error on dev loop4, logical block 13269809, lost async page write [ 129.298775][ T7160] attempt to access beyond end of device [ 129.298775][ T7160] loop4: rw=2049, want=1158, limit=128 [ 129.299639][ T7175] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,grpquota,grpjquota=,barrier,dioread_nolock,grpquota,nomblk_io_submit,nodiscard,,errors=continue. Quota mode: writeback. [ 129.334896][ T7160] Buffer I/O error on dev loop4, logical block 1157, lost async page write [ 129.405752][ T7160] attempt to access beyond end of device [ 129.405752][ T7160] loop4: rw=2049, want=3211265, limit=128 [ 129.486850][ T7160] Buffer I/O error on dev loop4, logical block 3211264, lost async page write [ 129.524468][ T7160] attempt to access beyond end of device [ 129.524468][ T7160] loop4: rw=2049, want=8768636, limit=128 [ 129.576557][ T7160] Buffer I/O error on dev loop4, logical block 8768635, lost async page write [ 129.621936][ T7160] attempt to access beyond end of device [ 129.621936][ T7160] loop4: rw=2049, want=13466418, limit=128 [ 129.711406][ T7160] Buffer I/O error on dev loop4, logical block 13466417, lost async page write [ 129.719972][ T7212] netlink: 24 bytes leftover after parsing attributes in process `syz.7.832'. [ 129.741607][ T7160] attempt to access beyond end of device [ 129.741607][ T7160] loop4: rw=2049, want=209286, limit=128 [ 129.761751][ T7212] bridge0: port 3(vlan2) entered blocking state [ 129.801858][ T7212] bridge0: port 3(vlan2) entered disabled state [ 129.811307][ T7160] Buffer I/O error on dev loop4, logical block 209285, lost async page write [ 129.894198][ T4178] sysv_free_block: trying to free block not in datazone [ 129.976105][ T7222] loop0: detected capacity change from 0 to 1024 [ 129.994618][ T4178] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 130.091967][ T7222] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 130.111715][ T7232] loop2: detected capacity change from 0 to 512 [ 130.146674][ T7222] EXT4-fs (loop0): Ignoring removed bh option [ 130.173158][ T7222] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.260171][ T7242] loop4: detected capacity change from 0 to 1024 [ 130.304621][ T7232] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 130.317659][ T7222] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,i_version,mblk_io_submit,grpid,data_err=ignore,mb_optimize_scan=0x0000000000000001,lazytime,max_batch_time=0x0000000000000078,noquota,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 130.359952][ T7232] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.429078][ T7255] loop1: detected capacity change from 0 to 1024 [ 130.469120][ T7242] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 130.562113][ T7232] Quota error (device loop2): find_block_dqentry: Quota for id 62708 referenced but not present [ 130.574343][ T7232] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 62708 [ 130.587140][ T7232] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.841: Failed to acquire dquot type 0 [ 130.622477][ T7242] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 130.803405][ T26] audit: type=1800 audit(2000000069.881:19): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.845" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 130.870530][ T26] audit: type=1800 audit(2000000069.911:20): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.845" name="file2" dev="loop1" ino=21 res=0 errno=0 [ 131.171897][ T7284] tun0: tun_chr_ioctl cmd 1074025677 [ 131.185408][ T7284] tun0: linktype set to 821 [ 131.403846][ T7265] loop7: detected capacity change from 0 to 32768 [ 131.420298][ T7294] loop0: detected capacity change from 0 to 1024 [ 131.465761][ T7265] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.848 (7265) [ 131.469561][ T7294] EXT4-fs (loop0): Ignoring removed oldalloc option [ 131.518921][ T7265] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 131.523314][ T7294] EXT4-fs (loop0): Ignoring removed orlov option [ 131.532131][ T7265] BTRFS info (device loop7): setting nodatacow, compression disabled [ 131.552985][ T7265] BTRFS info (device loop7): setting datacow [ 131.569548][ T7294] EXT4-fs (loop0): Ignoring removed oldalloc option [ 131.585160][ T7294] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 131.595806][ T7265] BTRFS info (device loop7): doing ref verification [ 131.615436][ T7265] BTRFS info (device loop7): force clearing of disk cache [ 131.634923][ T7294] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,sysvgroups,norecovery,oldalloc,orlov,oldalloc,auto_da_alloc,nomblk_io_submit,. Quota mode: none. [ 131.642389][ T7265] BTRFS info (device loop7): turning off barriers [ 131.676601][ T4836] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.706584][ T7265] BTRFS info (device loop7): enabling ssd optimizations [ 131.712356][ T7294] EXT4-fs error (device loop0): ext4_xattr_set_entry:1615: inode #13: comm syz.0.856: corrupted xattr entries [ 131.723059][ T7265] BTRFS info (device loop7): using spread ssd allocation scheme [ 131.733771][ T7265] BTRFS info (device loop7): using free space tree [ 131.740546][ T7265] BTRFS info (device loop7): has skinny extents [ 131.775034][ T7294] EXT4-fs (loop0): Remounting filesystem read-only [ 131.836786][ T7265] BTRFS info (device loop7): clearing free space tree [ 131.839427][ T7320] loop4: detected capacity change from 0 to 128 [ 131.843617][ T7265] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.860619][ T7265] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.876199][ T7265] BTRFS info (device loop7): creating free space tree [ 131.884425][ T7265] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.896297][ T7265] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.938553][ T7320] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.981314][ T7320] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.986539][ T4836] usb 2-1: Using ep0 maxpacket: 16 [ 132.164305][ T4836] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.186107][ T4836] usb 2-1: config 0 has no interface number 0 [ 132.196340][ T4836] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.213378][ T4836] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.225747][ T4836] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.244496][ T4836] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 132.281637][ T4836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.304734][ T4836] usb 2-1: config 0 descriptor?? [ 132.584228][ T7338] sch_tbf: burst 9 is lower than device veth0_to_bridge mtu (1514) ! [ 132.609876][ T7336] loop7: detected capacity change from 0 to 1024 [ 132.639177][ T7328] loop0: detected capacity change from 0 to 32768 [ 132.715828][ T7336] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 132.726848][ T7328] (syz.0.860,7328,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.780369][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.789072][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.798357][ T4836] holtek_mouse 0003:04D9:A072.0005: unknown main item tag 0x3 [ 132.810572][ T7328] (syz.0.860,7328,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.824622][ T4836] holtek_mouse 0003:04D9:A072.0005: item fetching failed at offset 2/4 [ 132.837935][ T7336] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 132.847871][ T4836] holtek_mouse 0003:04D9:A072.0005: hid parse failed: -22 [ 132.869153][ T4836] holtek_mouse: probe of 0003:04D9:A072.0005 failed with error -22 [ 132.901200][ T7328] JBD2: Ignoring recovery information on journal [ 133.010287][ T21] usb 2-1: USB disconnect, device number 7 [ 133.073552][ T7328] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 133.134415][ T4241] ocfs2: Finishing quota recovery on device (7,0) for slot 0 [ 133.333979][ T4174] [ 133.336325][ T4174] ====================================================== [ 133.343340][ T4174] WARNING: possible circular locking dependency detected [ 133.350347][ T4174] 5.15.180-syzkaller #0 Not tainted [ 133.354472][ T7358] loop2: detected capacity change from 0 to 4096 [ 133.355527][ T4174] ------------------------------------------------------ [ 133.355534][ T4174] syz-executor/4174 is trying to acquire lock: [ 133.374956][ T4174] ffff88807a8c7138 ((wq_completion)ocfs2_wq){+.+.}-{0:0}, at: flush_workqueue+0x154/0x1610 [ 133.384942][ T4174] [ 133.384942][ T4174] but task is already holding lock: [ 133.392289][ T4174] ffff8880262300e0 (&type->s_umount_key#91){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 133.402018][ T4174] [ 133.402018][ T4174] which lock already depends on the new lock. [ 133.402018][ T4174] [ 133.412392][ T4174] [ 133.412392][ T4174] the existing dependency chain (in reverse order) is: [ 133.421413][ T4174] [ 133.421413][ T4174] -> #2 (&type->s_umount_key#91){++++}-{3:3}: [ 133.429656][ T4174] lock_acquire+0x1db/0x4f0 [ 133.434670][ T4174] down_read+0x45/0x2e0 [ 133.439328][ T4174] ocfs2_finish_quota_recovery+0x15a/0x2260 [ 133.445741][ T4174] ocfs2_complete_recovery+0x173c/0x24a0 [ 133.451878][ T4174] process_one_work+0x8a1/0x10c0 [ 133.457317][ T4174] worker_thread+0xaca/0x1280 [ 133.462492][ T4174] kthread+0x3f6/0x4f0 [ 133.467060][ T4174] ret_from_fork+0x1f/0x30 [ 133.471974][ T4174] [ 133.471974][ T4174] -> #1 ((work_completion)(&journal->j_recovery_work)){+.+.}-{0:0}: [ 133.482120][ T4174] lock_acquire+0x1db/0x4f0 [ 133.487134][ T4174] process_one_work+0x7f1/0x10c0 [ 133.492579][ T4174] worker_thread+0xaca/0x1280 [ 133.498460][ T4174] kthread+0x3f6/0x4f0 [ 133.503039][ T4174] ret_from_fork+0x1f/0x30 [ 133.507956][ T4174] [ 133.507956][ T4174] -> #0 ((wq_completion)ocfs2_wq){+.+.}-{0:0}: [ 133.516273][ T4174] validate_chain+0x1649/0x5930 [ 133.521804][ T4174] __lock_acquire+0x1295/0x1ff0 [ 133.527152][ T4174] lock_acquire+0x1db/0x4f0 [ 133.532151][ T4174] flush_workqueue+0x170/0x1610 [ 133.537504][ T4174] ocfs2_shutdown_local_alloc+0x105/0xa90 [ 133.543718][ T4174] ocfs2_dismount_volume+0x1db/0x8b0 [ 133.549500][ T4174] generic_shutdown_super+0x130/0x310 [ 133.555367][ T4174] kill_block_super+0x7a/0xe0 [ 133.560540][ T4174] deactivate_locked_super+0xa0/0x110 [ 133.566404][ T4174] cleanup_mnt+0x44e/0x500 [ 133.571342][ T4174] task_work_run+0x129/0x1a0 [ 133.576427][ T4174] exit_to_user_mode_loop+0x106/0x130 [ 133.582296][ T4174] exit_to_user_mode_prepare+0xb1/0x140 [ 133.588340][ T4174] syscall_exit_to_user_mode+0x5d/0x240 [ 133.594383][ T4174] do_syscall_64+0x47/0xb0 [ 133.599313][ T4174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.605704][ T4174] [ 133.605704][ T4174] other info that might help us debug this: [ 133.605704][ T4174] [ 133.615992][ T4174] Chain exists of: [ 133.615992][ T4174] (wq_completion)ocfs2_wq --> (work_completion)(&journal->j_recovery_work) --> &type->s_umount_key#91 [ 133.615992][ T4174] [ 133.632822][ T4174] Possible unsafe locking scenario: [ 133.632822][ T4174] [ 133.640245][ T4174] CPU0 CPU1 [ 133.645584][ T4174] ---- ---- [ 133.650920][ T4174] lock(&type->s_umount_key#91); [ 133.655922][ T4174] lock((work_completion)(&journal->j_recovery_work)); [ 133.665345][ T4174] lock(&type->s_umount_key#91); [ 133.672866][ T4174] lock((wq_completion)ocfs2_wq); [ 133.677949][ T4174] [ 133.677949][ T4174] *** DEADLOCK *** [ 133.677949][ T4174] [ 133.686062][ T4174] 1 lock held by syz-executor/4174: [ 133.691232][ T4174] #0: ffff8880262300e0 (&type->s_umount_key#91){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 133.701383][ T4174] [ 133.701383][ T4174] stack backtrace: [ 133.707252][ T4174] CPU: 1 PID: 4174 Comm: syz-executor Not tainted 5.15.180-syzkaller #0 [ 133.715551][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.725588][ T4174] Call Trace: [ 133.728843][ T4174] [ 133.731752][ T4174] dump_stack_lvl+0x1e3/0x2d0 [ 133.736409][ T4174] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 133.742020][ T4174] ? print_circular_bug+0x12b/0x1a0 [ 133.747194][ T4174] check_noncircular+0x2f8/0x3b0 [ 133.752110][ T4174] ? add_chain_block+0x850/0x850 [ 133.757020][ T4174] ? lockdep_lock+0x11f/0x2a0 [ 133.761670][ T4174] ? unwind_next_frame+0x1437/0x1fa0 [ 133.766931][ T4174] ? deref_stack_reg+0xbe/0x110 [ 133.771757][ T4174] ? _find_first_zero_bit+0xcf/0xf0 [ 133.776929][ T4174] validate_chain+0x1649/0x5930 [ 133.781761][ T4174] ? reacquire_held_locks+0x660/0x660 [ 133.787108][ T4174] ? read_lock_is_recursive+0x10/0x10 [ 133.792453][ T4174] ? debug_object_assert_init+0x2bf/0x420 [ 133.798148][ T4174] ? do_raw_spin_lock+0x14a/0x370 [ 133.803148][ T4174] ? __lock_acquire+0x1ff0/0x1ff0 [ 133.808149][ T4174] ? do_raw_spin_unlock+0x137/0x8b0 [ 133.813321][ T4174] ? look_up_lock_class+0x77/0x120 [ 133.818410][ T4174] ? mark_lock+0x98/0x340 [ 133.822716][ T4174] __lock_acquire+0x1295/0x1ff0 [ 133.827547][ T4174] lock_acquire+0x1db/0x4f0 [ 133.832029][ T4174] ? flush_workqueue+0x154/0x1610 [ 133.837029][ T4174] ? read_lock_is_recursive+0x10/0x10 [ 133.842373][ T4174] ? lockdep_softirqs_off+0x420/0x420 [ 133.847717][ T4174] ? del_timer+0x183/0x310 [ 133.852112][ T4174] ? __init_swait_queue_head+0xaa/0x140 [ 133.857631][ T4174] flush_workqueue+0x170/0x1610 [ 133.862457][ T4174] ? flush_workqueue+0x154/0x1610 [ 133.867454][ T4174] ? print_irqtrace_events+0x210/0x210 [ 133.872912][ T4174] ? flush_work+0x20/0x20 [ 133.877216][ T4174] ? rcu_work_rcufn+0x140/0x140 [ 133.882044][ T4174] ? print_irqtrace_events+0x210/0x210 [ 133.887477][ T4174] ocfs2_shutdown_local_alloc+0x105/0xa90 [ 133.893183][ T4174] ? __cancel_work_timer+0x5e8/0x6a0 [ 133.898444][ T4174] ? ocfs2_local_alloc_count_bits+0x230/0x230 [ 133.904486][ T4174] ? cancel_work_sync+0x20/0x20 [ 133.909310][ T4174] ? do_raw_spin_unlock+0x137/0x8b0 [ 133.914483][ T4174] ? _atomic_dec_and_lock+0x96/0x130 [ 133.919745][ T4174] ? iput+0x371/0x8b0 [ 133.923702][ T4174] ? ocfs2_disable_quotas+0x1b8/0x210 [ 133.929050][ T4174] ocfs2_dismount_volume+0x1db/0x8b0 [ 133.934313][ T4174] ? ocfs2_enable_quotas+0x440/0x440 [ 133.939574][ T4174] ? clear_inode+0x150/0x150 [ 133.944137][ T4174] ? ocfs2_free_inode+0x11/0x20 [ 133.948959][ T4174] ? ocfs2_free_inode+0x20/0x20 [ 133.953783][ T4174] generic_shutdown_super+0x130/0x310 [ 133.959129][ T4174] kill_block_super+0x7a/0xe0 [ 133.963779][ T4174] deactivate_locked_super+0xa0/0x110 [ 133.969123][ T4174] cleanup_mnt+0x44e/0x500 [ 133.973513][ T4174] ? lockdep_hardirqs_on+0x94/0x130 [ 133.978692][ T4174] task_work_run+0x129/0x1a0 [ 133.983258][ T4174] exit_to_user_mode_loop+0x106/0x130 [ 133.988604][ T4174] exit_to_user_mode_prepare+0xb1/0x140 [ 133.994127][ T4174] syscall_exit_to_user_mode+0x5d/0x240 [ 133.999650][ T4174] do_syscall_64+0x47/0xb0 [ 134.004039][ T4174] ? clear_bhb_loop+0x15/0x70 [ 134.008691][ T4174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.014558][ T4174] RIP: 0033:0x7f8724420497 [ 134.018949][ T4174] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 134.038533][ T4174] RSP: 002b:00007fff8f265428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 134.046925][ T4174] RAX: 0000000000000000 RBX: 00007f87244a051c RCX: 00007f8724420497 [ 134.054872][ T4174] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8f2654e0 [ 134.062817][ T4174] RBP: 00007fff8f2654e0 R08: 0000000000000000 R09: 0000000000000000 [ 134.070762][ T4174] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff8f266570 [ 134.078707][ T4174] R13: 00007f87244a051c R14: 0000000000020864 R15: 00007fff8f2665b0 [ 134.086662][ T4174] [ 134.136988][ T7358] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 134.141509][ T4174] ocfs2: Unmounting device (7,0) on (node local)