last executing test programs: 18.724009271s ago: executing program 4 (id=1192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={0x44, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0x4, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf251300000008000300", @ANYBLOB="0c000600020000000000000005001a000000000005001a00000000000c000600010000000100000005001a000100000008000300", @ANYRES32=r6, @ANYBLOB="158e0fb4bf2030cf8d482614c9a1a669ed98c1a5f43d193f060d5f154c5eec3a5b5e4b8d604c8e6c1a9b91eb934acb334a9fab669d64fcbac468fab57f76d5a1fe161abc1872e7261cbfa5b61109cf657f26dced55e45be6d937c4335579bd3ff6f502896de10eddadf70ee51d85a50def511bba7f167cce270ea8929c6b085b442929792c2820a8cfc3a0e19f00d53481b996f3f3110b62d487654a6eeb00"], 0x54}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="0426063d032bbb006965499a03b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 16.694077873s ago: executing program 4 (id=1197): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000000), 0x0) 15.069637768s ago: executing program 4 (id=1202): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f002, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$hiddev(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000013c0)=""/208, 0xd0, 0x800) read$hiddev(0xffffffffffffffff, &(0x7f0000001200)=""/246, 0xf6) openat(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="60a40200080000001c001a8018000580140006800800020000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000780)='syscall\x00') ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305839, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x2, 0xfcc3, 0x8001}) 13.126341068s ago: executing program 4 (id=1208): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x2000400, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x2f2, &(0x7f00000007c0)="$eJzs3T1vE0kcx/Hf7NqJ86DcXpLTSdfcKUckaCICFIjGCLmloaJCQOxIEVYQSZCAJgZRIjoaet4CL4IGxBuAiooXkG7RjMf2+mHXcYi9MXw/Uqzx7Mzuf9gd7/xXMhaA39aNypd3l7/ZPyOFCiVdkwJJJakg6S/9XXq8e7BzUK9Vs3YUuh72z6jZ0/S12dqtDepq+7keXmTfFbSYrMN4xHF8/WveQSB3bvZbxe76QJr189BtL+UQ2zg0pH/zjmHSwkTZHOlIT7SUYzgAgDPA3/8Df5tYdFVGQSCt+9v+VN3/wyHbjyYUx4RcqfdVxZkdEvd/t7qLjf0n+8Nt6uR7LoWz24NWlnicYHqWkJpR88rqOidmWFbpYgnmtncK2th6rmqgFyp7iWar7rXavHRbhkS7NiA3zZC+t6JuzjdH41aUvVohbe/Ua7O20Bt/Q1oZ7Ygn82b/1mqrbD6YT+aOifRW1fb6rxAbe5rcmYp6zlRQtPFfTN/7gutlW8mn/eVyOehvV/jHH8EbMsrSkEn8Z+ehQaMdQVac7tjL6n6s0Bzd5pBeK4N6Re13Kb1Wu3qF/krY2HpYz3yU8lNSn5m0hmhem9tmTd/1XpXE+j+w8a0rMTOzPuqNa+mvjOZ4ZlLicS2jvjtHZ7r8147Am80aH9KM9rTsle7rqpb2nz57ENbrtT1buDeg8Ghxz/ia4ktpYJvxF0JltFGjUxNbh3GcaGNHm7rneJzBXzjVHdrPj3aNnT6DGttZ1q4JJn2aTruQceJyLVQ+KuuCnJ5CHEspm8b1MYWzZN+0TrqvmMs5IEyaXXeZZv7nVvJ+VedSJPsSZazTs5NMde1xs53BdS8Fl93r/EgZ3EJ6Bpc44qWUnNHlXP+fl84lKo0yjxj5OH8RpqLPusvzfwAAAAAAAAAAAAAAAAAAgGlz/K8KHPoeo3/TIOchAgAAAAAAAAAAAAAAAAAAAAAw9U70+7+D/o949/u/Eb//C0yRHwEAAP//k3p1Ow==") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = fspick(r2, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x1, 0x9000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r5 = dup(r1) write$UHID_INPUT(r5, 0x0, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 12.31082019s ago: executing program 4 (id=1209): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$video(0x0, 0x6fa4d7f1, 0x4400) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r0) 8.195455163s ago: executing program 2 (id=1224): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0xa, 0xf, 0xd, 0x0, 0xb021, 0x0}) 7.301249447s ago: executing program 4 (id=1226): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) flock(0xffffffffffffffff, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) socket(0xb, 0x3, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x400) inotify_add_watch(r7, 0x0, 0x850003f3) 7.10790562s ago: executing program 3 (id=1227): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0xe, &(0x7f0000000080), 0x3, 0x434, &(0x7f0000000940)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) 6.748012766s ago: executing program 0 (id=1228): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 6.593677328s ago: executing program 1 (id=1229): r0 = syz_open_dev$loop(&(0x7f0000000f40), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/35, 0x23) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x7ce80, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) fspick(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x300c425, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000300)=0x5) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="f53bbd1b132a075242413234b7039fac1ddbd008990c83cd270c0f899350fc174114586af5a43f896abfdf5c56584b1046cb32d5c214c6cbf13e609ff0183601baa01a9b37f1ae875e8cbee8a98d7785d1a69adfda1249d34b6ae316e98cec920b74cdd11297978c2802733f95c93a06cb37bfd912e856947a135a341a58942e5998d1ce1520ff79ba74e354d212cb97f6e26f63f01708680b15da7edc82a34ed703000000000000002eaae6d213b296afd523036c63a54c1846d9387c154ec9ad33e9f8cfedade3"}) syz_open_dev$tty1(0xc, 0x4, 0x1) 5.911691509s ago: executing program 0 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0xa, 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x302) mount(0x0, 0x0, &(0x7f0000000040)='vfat\x00', 0x10, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x34}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000005c000000060a010400000000000000000100000008000b400000000034000480300001800b0001006c6f6f6b7570000020000280080002500000000108000440000000000900010073797a31000000000900"], 0xd0}}, 0x0) 5.671788713s ago: executing program 3 (id=1231): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x121) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000001180)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') statx(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x4000, 0x20, &(0x7f0000000480)) read$FUSE(0xffffffffffffffff, &(0x7f00000036c0)={0x2020}, 0x2020) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x126, 0x0, r2}, &(0x7f00000001c0)=0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB], 0x1c}}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0xee01, 0x0) fsopen(&(0x7f00000001c0)='coda\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000002680)=""/4104) 5.634693453s ago: executing program 1 (id=1232): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc25, &(0x7f0000001ac0)="$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") open(&(0x7f0000000040)='./file1\x00', 0x1a1142, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) 5.122253321s ago: executing program 1 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$rtc(0xffffff9c, 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) syz_pidfd_open(r4, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 4.967773483s ago: executing program 0 (id=1234): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x2000400, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x2f2, &(0x7f00000007c0)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x9000) 4.805304386s ago: executing program 1 (id=1235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x1056, &(0x7f0000000000)="$eJzsz8HJwjAcBfDXr18gvQjdoEt5dABvjtCu4BAu4cXNKjUFN1APvx8k/B8vISR81X3oz+uY0lJdatY8uv8kf1tOlv3gnKVr01ZeXtM1yXSrfVIy1daeDimp7wdKu5AhSbevbZvHJMfywa8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwM96BgAA//8qDQmk") 3.671870373s ago: executing program 2 (id=1236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) symlink(0x0, &(0x7f00000059c0)='./file0\x00') 3.617971784s ago: executing program 1 (id=1237): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x8}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x3f) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/wireless\x00') pread64(r4, &(0x7f0000000000)=""/102363, 0xffffff80, 0x80000000005) 3.611523304s ago: executing program 0 (id=1238): r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000080)={0x2a, 0x29, 0x2, {0x100006, [{{0x20, 0x0, 0x8}, 0x45, 0x4, 0x7, './file0'}]}}, 0x2a) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) sendfile(r0, r0, &(0x7f00000002c0), 0x7f03) 2.5824674s ago: executing program 2 (id=1239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 2.57114678s ago: executing program 3 (id=1240): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 2.375921243s ago: executing program 3 (id=1241): socket$can_raw(0x1d, 0x3, 0x1) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000300), 0x4) 2.111908197s ago: executing program 0 (id=1242): r0 = syz_open_dev$loop(&(0x7f0000000f40), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/35, 0x23) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x7ce80, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) fspick(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x300c425, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000300)=0x5) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="f53bbd1b132a075242413234b7039fac1ddbd008990c83cd270c0f899350fc174114586af5a43f896abfdf5c56584b1046cb32d5c214c6cbf13e609ff0183601baa01a9b37f1ae875e8cbee8a98d7785d1a69adfda1249d34b6ae316e98cec920b74cdd11297978c2802733f95c93a06cb37bfd912e856947a135a341a58942e5998d1ce1520ff79ba74e354d212cb97f6e26f63f01708680b15da7edc82a34ed703000000000000002eaae6d213b296afd523036c63a54c1846d9387c154ec9ad33e9f8cfedade3"}) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.261412631s ago: executing program 2 (id=1243): syz_open_dev$media(0x0, 0x4007, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) add_key(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000002090101002000000000000002001f020900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0xc800) syz_open_pts(0xffffffffffffffff, 0x22000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000a000000000000000100000d000000000600000001"], 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) 1.115943092s ago: executing program 3 (id=1244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0xa, 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x302) mount(0x0, 0x0, &(0x7f0000000040)='vfat\x00', 0x10, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x34}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000005c000000060a010400000000000000000100000008000b400000000034000480300001800b0001006c6f6f6b7570000020000280080002500000000108000440000000000900010073797a31000000000900"], 0xd0}}, 0x0) 493.094242ms ago: executing program 2 (id=1245): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x2, 0x0, 0x0) 328.461945ms ago: executing program 1 (id=1246): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000300)='./file0\x00', 0x1000848, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x385, &(0x7f0000006400)="$eJzs3T+IHFUYAPBvb/Zu9yThrhCCgjDaCXokURFtvBAuEtwmyuKfQlxMonJ7BnK4mBTZnI1YCpZaWWmhhUU6QQRF7CxsjRCiYqHpAoaMzO7c7uy/MxguMfj7FcuX977vvTebBzs3x757ZTXWj8/HyStXLke9Xonq6uHVuFqJ5Ui6UTgfkxamtAEAd4arWRZ/Zn0RX95ISWX3VwUA7Kbe5/9re0st73yzU37m0x8A7njFz/+L5bZkLKc+q/jUri0LANhFo8//I+KBiZTSr/qrE/cGAMCd57kXX3rmUCPi2TStR2y822l2mvHksP/QyXgj2nEi9sdSXIvo3yjkL5Xe65GjjbX9aZp245flaOYVnWbERrfT7N8pHEp69bU4EEuxXNQXdxtZliVHvmisHUh7IuJ8tzd/bFQ6zflYLOb/6a44EQcjjbsn6iOONtYOpsUAzY3t+vmIreFzi3z9K7EUP7wap6IdxyOv3b6taaydO5Cmh7PGnsqwvttp1np5fTOfgAAAAAAAAAAAAAAAAAAAAAAAwL+ykg4sD87PyYbn96ysTOnvnY/Try/OB9rqnw+U1bLIsj/efrj5XhIj5wONnc/T7TSrMXd7Lx0AAAAAAAAAAAAAAAAAAAD+MzbPLESr3T5xevPM2fVy0D29eWYuIvKWN7/77OvFGM1ZLAYYrRoJqkVKqSsdVmXJdnKWjOQUQRLxdLtS7bd8emGw4nJObXAVRUttZJxauWs82Hv/pQ+HLfcl2yNfH+YkMfW6ziZjy+gH9ZE3dj2JGW/LDsHBf8i5mGXZrPJzL09WRSWiOmWpNxVkefDt5dfveWRz32O9lq+yvgcfWnr+4gcf/7beaucz59rthdOb17L1VvHv6ZttdpBs759PLg02W6W8E6qtR68f2zNj5K3Rllby4+8v3Pv+90VLvr13mD0rt7xV6qoUVUl/0s/Hyxf6Qb7MQddTeZC/R5NzzZc2//wO63k8buo/bt9Hq60L537+dWrO3OQmKe1lB3UAAAAAAAAAAAAAAAAAAMAtUfqueKH4su/8TlVPHNv9lQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArTP8+/+DIOa2xlpuLPirG5NdtXzAWOjNVe+9Lt/mKwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/o7wAAAP//RcJiVg==") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 211.946507ms ago: executing program 0 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {0xa}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 125.459748ms ago: executing program 3 (id=1248): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x2000400, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x2f2, &(0x7f00000007c0)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0x9000) 0s ago: executing program 2 (id=1249): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x30000c8, &(0x7f0000000100)=ANY=[], 0x11, 0x2c6, &(0x7f0000005bc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) kernel console output (not intermixed with test programs): 12 [ 85.483084][ T4370] ext4: Unknown parameter 'nouser_xattr' [ 87.100614][ T14] cfg80211: failed to load regulatory.db [ 87.142260][ T4376] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 87.269968][ T4241] udevd[4241]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 87.363980][ T4382] loop2: detected capacity change from 0 to 16 [ 87.413637][ T4382] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 145700) [ 89.148651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.157110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 89.956933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.087622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.096017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.104345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.112663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.121022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.129341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.137732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 90.647336][ T4405] netlink: 'syz.0.21': attribute type 33 has an invalid length. [ 90.672042][ T4405] netlink: 152 bytes leftover after parsing attributes in process `syz.0.21'. [ 91.870419][ T4414] loop1: detected capacity change from 0 to 512 [ 91.936310][ T4414] ext4: Unknown parameter 'nouser_xattr' [ 95.113207][ T4433] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 96.707631][ T4437] loop2: detected capacity change from 0 to 4096 [ 96.715051][ T4437] ntfs3: Unknown parameter 'Yr ' [ 97.134293][ T4241] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.248204][ T4455] lo speed is unknown, defaulting to 1000 [ 97.257989][ T4455] lo speed is unknown, defaulting to 1000 [ 97.266095][ T4455] lo speed is unknown, defaulting to 1000 [ 97.906749][ T4456] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 97.994383][ T4455] infiniband syz0: set active [ 97.999342][ T4455] infiniband syz0: added lo [ 98.165622][ T4458] netlink: 224 bytes leftover after parsing attributes in process `syz.1.46'. [ 98.230033][ T4458] loop9: detected capacity change from 0 to 7 [ 98.251989][ T4458] Dev loop9: unable to read RDB block 7 [ 98.257990][ T4458] loop9: unable to read partition table [ 98.264585][ T4458] loop9: partition table beyond EOD, truncated [ 98.270870][ T4458] loop_reread_partitions: partition scan of loop9 (被x󟣑 ) failed (rc=-5) [ 98.869605][ T2183] lo speed is unknown, defaulting to 1000 [ 98.886659][ T4455] RDS/IB: syz0: added [ 98.892123][ T4455] smc: adding ib device syz0 with port count 1 [ 98.900138][ T4455] smc: ib device syz0 port 1 has pnetid [ 98.909780][ T4455] lo speed is unknown, defaulting to 1000 [ 99.019795][ T4455] lo speed is unknown, defaulting to 1000 [ 99.126648][ T4455] lo speed is unknown, defaulting to 1000 [ 99.202822][ T34] lo speed is unknown, defaulting to 1000 [ 99.663961][ T4455] lo speed is unknown, defaulting to 1000 [ 99.767913][ T4455] lo speed is unknown, defaulting to 1000 [ 100.785093][ T4488] loop3: detected capacity change from 0 to 128 [ 105.087740][ T4506] loop3: detected capacity change from 0 to 2048 [ 105.121418][ T4510] process 'syz.2.52' launched '/dev/fd/3' with NULL argv: empty string added [ 105.185954][ T4506] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.277869][ T4506] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 105.412444][ T4506] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 105.453945][ T4506] EXT4-fs (loop3): This should not happen!! Data will be lost [ 105.453945][ T4506] [ 105.496984][ T4506] EXT4-fs (loop3): Total free blocks count 0 [ 107.042050][ T4506] EXT4-fs (loop3): Free/Dirty block details [ 107.094282][ T4520] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 107.104361][ T4506] EXT4-fs (loop3): free_blocks=2415919104 [ 107.147064][ T4518] loop1: detected capacity change from 0 to 4096 [ 107.169146][ T4518] ntfs3: Unknown parameter 'Yr ' [ 108.254572][ T4506] EXT4-fs (loop3): dirty_blocks=16 [ 108.265335][ T4506] EXT4-fs (loop3): Block reservation details [ 109.038971][ T4506] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 109.433914][ T4537] loop1: detected capacity change from 0 to 2048 [ 109.516821][ T4537] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.660694][ T4542] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.739756][ T4241] udevd[4241]: incorrect nilfs2 checksum on /dev/loop1 [ 110.601691][ T4542] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 110.654985][ T4542] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 111.099202][ T4542] Remounting filesystem read-only [ 111.113529][ T4252] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 111.213176][ T4558] loop2: detected capacity change from 0 to 512 [ 111.287185][ T4561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.56'. [ 111.472078][ T4558] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 111.483483][ T4558] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 111.563164][ T4569] capability: warning: `syz.1.61' uses deprecated v2 capabilities in a way that may be insecure [ 112.272367][ T4558] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 112.331307][ T4558] EXT4-fs (loop2): 1 truncate cleaned up [ 112.340880][ T4558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.023225][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 114.340995][ T4577] loop2: detected capacity change from 0 to 512 [ 114.399470][ T4577] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.654792][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 114.772785][ T4582] loop2: detected capacity change from 0 to 2048 [ 114.843247][ T4582] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.893107][ T4571] loop1: detected capacity change from 0 to 32768 [ 114.921992][ T4584] loop4: detected capacity change from 0 to 4096 [ 114.932237][ T4584] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 114.938746][ T4582] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, [ 114.952945][ T4584] ntfs: (device loop4): parse_options(): Unrecognized mount option fmas. [ 114.970713][ T4582] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.002946][ T4582] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 115.018078][ T4582] EXT4-fs (loop2): This should not happen!! Data will be lost [ 115.018078][ T4582] [ 115.028000][ T4582] EXT4-fs (loop2): Total free blocks count 0 [ 115.035318][ T4582] EXT4-fs (loop2): Free/Dirty block details [ 115.039712][ T4571] XFS (loop1): Mounting V5 Filesystem [ 115.041387][ T4582] EXT4-fs (loop2): free_blocks=2415919104 [ 115.057542][ T4243] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.205930][ T4582] EXT4-fs (loop2): dirty_blocks=16 [ 115.211214][ T4582] EXT4-fs (loop2): Block reservation details [ 115.317973][ T4571] XFS (loop1): Ending clean mount [ 115.338957][ T4582] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 115.371215][ T4603] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 115.405896][ T4571] XFS (loop1): Quotacheck needed: Please wait. [ 115.898112][ T4607] loop4: detected capacity change from 0 to 64 [ 116.114739][ T4571] XFS (loop1): Quotacheck: Done. [ 116.272747][ T4607] hfs: request for non-existent node 327680 in B*Tree [ 116.284552][ T4607] hfs: request for non-existent node 327680 in B*Tree [ 116.286935][ T4252] XFS (loop1): Unmounting Filesystem [ 116.299701][ T4607] hfs: request for non-existent node 327680 in B*Tree [ 116.306827][ T4607] hfs: request for non-existent node 327680 in B*Tree [ 116.338735][ T4313] hfs: request for non-existent node 327680 in B*Tree [ 116.375379][ T4313] hfs: request for non-existent node 327680 in B*Tree [ 117.003581][ T4629] loop1: detected capacity change from 0 to 512 [ 117.098666][ T4610] input: syz1 as /devices/virtual/input/input5 [ 117.111137][ T4629] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.266160][ T4629] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 117.480922][ T4629] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.78: Corrupt directory, running e2fsck is recommended [ 117.816800][ T4629] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 117.866582][ T4629] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.78: corrupted in-inode xattr [ 117.948571][ T4629] EXT4-fs (loop1): Remounting filesystem read-only [ 117.955387][ T4629] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.78: couldn't read orphan inode 15 (err -117) [ 117.973993][ T4629] EXT4-fs (loop1): Remounting filesystem read-only [ 117.980632][ T4629] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.002424][ T4629] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.014667][ T4629] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 118.044459][ T4629] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.78: Corrupt directory, running e2fsck is recommended [ 118.080985][ T4636] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.123692][ T4636] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 118.154740][ T4636] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.78: Corrupt directory, running e2fsck is recommended [ 118.190191][ T4629] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.224564][ T4629] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 118.256523][ T4629] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.78: Corrupt directory, running e2fsck is recommended [ 118.324573][ T4637] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.330648][ T4636] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.78: path /11/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 118.427360][ T4636] EXT4-fs (loop1): Remounting filesystem read-only [ 118.446522][ T4636] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 8: comm syz.1.78: path /11/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 118.912468][ T4636] EXT4-fs (loop1): Remounting filesystem read-only [ 119.318797][ T4641] loop3: detected capacity change from 0 to 4096 [ 119.357097][ T4625] loop2: detected capacity change from 0 to 40427 [ 119.387855][ T4641] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 119.403268][ T4625] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 119.425061][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 119.438975][ T4641] ntfs: (device loop3): parse_options(): Unrecognized mount option fmas. [ 119.457077][ T4625] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.508794][ T4241] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.546393][ T4625] F2FS-fs (loop2): invalid crc value [ 119.562928][ T4625] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.764294][ T4625] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 119.771667][ T4625] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.807853][ T4656] loop3: detected capacity change from 0 to 64 [ 119.827955][ T4654] loop1: detected capacity change from 0 to 2048 [ 119.871646][ T4656] hfs: request for non-existent node 327680 in B*Tree [ 119.895231][ T4656] hfs: request for non-existent node 327680 in B*Tree [ 119.902780][ T4656] hfs: request for non-existent node 327680 in B*Tree [ 119.911102][ T4654] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.946532][ T4656] hfs: request for non-existent node 327680 in B*Tree [ 119.951441][ T4251] syz-executor: attempt to access beyond end of device [ 119.951441][ T4251] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 119.959575][ T4654] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 119.988612][ T4504] hfs: request for non-existent node 327680 in B*Tree [ 120.004497][ T4504] hfs: request for non-existent node 327680 in B*Tree [ 120.018074][ T4654] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 120.031508][ T4654] EXT4-fs (loop1): This should not happen!! Data will be lost [ 120.031508][ T4654] [ 120.041384][ T4654] EXT4-fs (loop1): Total free blocks count 0 [ 120.049038][ T4654] EXT4-fs (loop1): Free/Dirty block details [ 120.055299][ T4654] EXT4-fs (loop1): free_blocks=2415919104 [ 120.062041][ T4654] EXT4-fs (loop1): dirty_blocks=16 [ 120.068518][ T4654] EXT4-fs (loop1): Block reservation details [ 120.068539][ T4654] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 120.078565][ T4654] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 120.619601][ T4667] loop3: detected capacity change from 0 to 8192 [ 120.683957][ T4667] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.745372][ T4667] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 120.791535][ T4674] loop1: detected capacity change from 0 to 512 [ 120.802585][ T4667] REISERFS (device loop3): using ordered data mode [ 120.863971][ T4667] reiserfs: using flush barriers [ 120.899914][ T4667] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.923896][ T4674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 120.966439][ T4674] System zones: 1-12 [ 120.972006][ T4674] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.98: inode #1: comm syz.1.98: iget: illegal inode # [ 120.996746][ T4667] REISERFS (device loop3): checking transaction log (loop3) [ 121.011214][ T4674] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.98: error while reading EA inode 1 err=-117 [ 121.030555][ T4667] REISERFS (device loop3): Using r5 hash to sort names [ 121.041638][ T4667] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 121.052869][ T4674] EXT4-fs (loop1): 1 orphan inode deleted [ 121.090718][ T4674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 122.296788][ T4686] loop2: detected capacity change from 0 to 512 [ 122.409007][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 122.510750][ T4686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.543378][ T4695] loop1: detected capacity change from 0 to 512 [ 122.565496][ T4695] EXT4-fs: inline encryption not supported [ 122.578368][ T4686] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.593575][ T4695] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 122.613002][ T4695] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.671539][ T4695] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 122.692646][ T4695] EXT4-fs (loop1): 1 truncate cleaned up [ 122.698531][ T4695] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 122.916925][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 123.210579][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 123.385601][ T4717] loop4: detected capacity change from 0 to 512 [ 123.446026][ T4717] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.111: casefold flag without casefold feature [ 123.479011][ T4717] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.111: couldn't read orphan inode 15 (err -117) [ 123.504724][ T4717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.817341][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 123.866824][ T4704] loop3: detected capacity change from 0 to 32768 [ 123.898395][ T4725] 9pnet: p9_errstr2errno: server reported unknown error @hQIt [ 124.561534][ T4733] loop4: detected capacity change from 0 to 512 [ 124.641235][ T4704] XFS (loop3): Mounting V5 Filesystem [ 124.676185][ T4733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 124.710584][ T4733] System zones: 1-12 [ 124.731454][ T4733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.113: inode #1: comm syz.4.113: iget: illegal inode # [ 124.753423][ T4733] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.113: error while reading EA inode 1 err=-117 [ 124.769265][ T4733] EXT4-fs (loop4): 1 orphan inode deleted [ 124.775290][ T4733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.269199][ T4704] XFS (loop3): Ending clean mount [ 125.288799][ T4704] XFS (loop3): Quotacheck needed: Please wait. [ 125.389168][ T4704] XFS (loop3): Quotacheck: Done. [ 126.275668][ T4760] loop2: detected capacity change from 0 to 512 [ 126.315515][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 126.349420][ T4760] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.350860][ T4250] XFS (loop3): Unmounting Filesystem [ 126.710947][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 126.866438][ T4772] loop2: detected capacity change from 0 to 512 [ 126.909325][ T4772] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.125: casefold flag without casefold feature [ 126.930676][ T4772] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.125: couldn't read orphan inode 15 (err -117) [ 126.969992][ T4772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.250088][ T4770] loop4: detected capacity change from 0 to 32768 [ 127.274483][ T4770] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.126 (4770) [ 127.316639][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 127.434157][ T4770] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 127.489151][ T4770] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.574238][ T4770] BTRFS info (device loop4): force zlib compression, level 3 [ 127.581685][ T4770] BTRFS info (device loop4): force clearing of disk cache [ 127.632996][ T4770] BTRFS info (device loop4): setting nodatasum [ 127.653032][ T4770] BTRFS info (device loop4): use zlib compression, level 3 [ 127.680901][ T4770] BTRFS info (device loop4): allowing degraded mounts [ 127.768452][ T4770] BTRFS info (device loop4): enabling disk space caching [ 127.799153][ T4770] BTRFS info (device loop4): disk space caching is enabled [ 128.550844][ T4802] loop3: detected capacity change from 0 to 512 [ 128.558207][ T4802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.573528][ T4770] BTRFS info (device loop4): enabling ssd optimizations [ 128.599333][ T4802] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.131: missing EA_INODE flag [ 128.610844][ T4770] BTRFS info (device loop4): rebuilding free space tree [ 128.616261][ T4802] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.131: error while reading EA inode 2 err=-117 [ 128.646599][ T4802] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.131: missing EA_INODE flag [ 128.666124][ T4802] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.131: error while reading EA inode 2 err=-117 [ 128.678736][ T4802] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.131: inode #65536: comm syz.3.131: iget: illegal inode # [ 128.697646][ T4802] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.131: error while reading EA inode 65536 err=-117 [ 128.711072][ T4802] EXT4-fs (loop3): 1 orphan inode deleted [ 128.716978][ T4802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 128.738174][ T4812] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 128.739381][ T4802] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.131: bg 0: block 5: invalid block bitmap [ 129.113320][ T4816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.121215][ T4816] IPv6: NLM_F_CREATE should be set when creating new route [ 130.459493][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 130.542042][ T4770] BTRFS info (device loop4): disabling free space tree [ 130.569549][ T4770] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.614687][ T4770] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.804916][ T4254] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 132.200839][ T4841] loop1: detected capacity change from 0 to 512 [ 132.332211][ T4841] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.140: casefold flag without casefold feature [ 132.366356][ T4841] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.140: couldn't read orphan inode 15 (err -117) [ 132.411821][ T4841] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.688398][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.694907][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.817458][ T4858] loop2: detected capacity change from 0 to 512 [ 132.865276][ T4858] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.978171][ T4854] loop3: detected capacity change from 0 to 32768 [ 132.987377][ T4854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.144 (4854) [ 133.025878][ T4854] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.062857][ T4854] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 133.072226][ T4854] BTRFS info (device loop3): setting nodatasum [ 133.093284][ T4854] BTRFS info (device loop3): force zlib compression, level 3 [ 133.116760][ T4854] BTRFS info (device loop3): metadata ratio 1 [ 133.122908][ T4854] BTRFS info (device loop3): enabling ssd optimizations [ 133.138969][ T4854] BTRFS info (device loop3): allowing degraded mounts [ 133.153428][ T4854] BTRFS info (device loop3): using free space tree [ 133.185968][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 133.192857][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 133.435525][ T4878] loop1: detected capacity change from 0 to 64 [ 133.473149][ T4878] ======================================================= [ 133.473149][ T4878] WARNING: The mand mount option has been deprecated and [ 133.473149][ T4878] and is ignored by this kernel. Remove the mand [ 133.473149][ T4878] option from the mount to silence this warning. [ 133.473149][ T4878] ======================================================= [ 133.508048][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.045035][ T4878] loop1: detected capacity change from 0 to 4096 [ 135.214422][ T4250] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.738207][ T4252] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 135.812173][ T4924] vxcan1: tx drop: invalid da for name 0x0000000000002001 [ 135.829320][ T4252] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 138.225444][ T4940] loop2: detected capacity change from 0 to 1024 [ 138.320126][ T4940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.502477][ T4945] loop1: detected capacity change from 0 to 512 [ 138.547002][ T4945] ext4: Unknown parameter 'nouser_xattr' [ 138.709834][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 139.091386][ T4959] loop3: detected capacity change from 0 to 128 [ 139.117494][ T4958] loop4: detected capacity change from 0 to 512 [ 139.211282][ T4959] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.315859][ T4958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.434992][ T4958] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.318040][ T4958] syz.4.171 (4958) used greatest stack depth: 20192 bytes left [ 140.344354][ T26] audit: type=1326 audit(1745079399.598:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4969 comm="syz.3.176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f102fd8e169 code=0x0 [ 140.422686][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 141.260746][ T4973] loop2: detected capacity change from 0 to 32768 [ 141.540376][ T4973] find_entry called with index = 0 [ 141.746013][ T4973] find_entry called with index = 0 [ 146.224381][ T34] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 146.454738][ T34] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.505176][ T34] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 147.203520][ T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.257033][ T34] usb 3-1: config 0 descriptor?? [ 147.266170][ T34] usb 3-1: can't set config #0, error -71 [ 147.290235][ T34] usb 3-1: USB disconnect, device number 2 [ 150.638986][ T5072] loop1: detected capacity change from 0 to 1024 [ 150.927183][ T5054] loop3: detected capacity change from 0 to 262144 [ 151.035458][ T5054] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.201 (5054) [ 151.607295][ T5054] BTRFS error (device loop3): open_ctree failed: -4 [ 151.635431][ T5038] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by udevd (5038) [ 155.114514][ T5099] loop4: detected capacity change from 0 to 512 [ 155.261494][ T5099] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.532169][ T5099] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 155.894503][ T5099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 155.902726][ T5099] System zones: 1-12 [ 155.935941][ T5099] EXT4-fs (loop4): orphan cleanup on readonly fs [ 155.943095][ T5099] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.216: invalid indirect mapped block 12 (level 1) [ 156.028240][ T5099] EXT4-fs (loop4): Remounting filesystem read-only [ 156.054279][ T5099] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.216: invalid indirect mapped block 2 (level 2) [ 156.079004][ T5099] EXT4-fs (loop4): Remounting filesystem read-only [ 156.130454][ T5099] EXT4-fs (loop4): 1 truncate cleaned up [ 156.156717][ T5099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.351450][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 156.480344][ T5114] loop1: detected capacity change from 0 to 64 [ 156.537867][ T5116] loop4: detected capacity change from 0 to 512 [ 156.545778][ T5116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.636110][ T5116] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.222: missing EA_INODE flag [ 156.649076][ T5116] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.222: error while reading EA inode 2 err=-117 [ 156.670119][ T5116] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.222: missing EA_INODE flag [ 156.682239][ T5116] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.222: error while reading EA inode 2 err=-117 [ 156.696705][ T5116] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.222: inode #65536: comm syz.4.222: iget: illegal inode # [ 156.719454][ T5116] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.222: error while reading EA inode 65536 err=-117 [ 156.749774][ T5114] Trying to free block not in datazone [ 156.774674][ T5116] EXT4-fs (loop4): 1 orphan inode deleted [ 156.780470][ T5116] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.799566][ T5116] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.222: bg 0: block 5: invalid block bitmap [ 156.829680][ T5114] minix_free_block (loop1:21): bit already cleared [ 158.409342][ T5121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.416625][ T5121] IPv6: NLM_F_CREATE should be set when creating new route [ 160.625409][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 162.984504][ T5157] loop2: detected capacity change from 0 to 32768 [ 162.992461][ T5157] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.236 (5157) [ 163.041956][ T5157] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.047873][ T5160] netlink: 'syz.4.238': attribute type 16 has an invalid length. [ 163.052401][ T5157] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 163.070050][ T5157] BTRFS info (device loop2): setting nodatacow, compression disabled [ 163.078376][ T5157] BTRFS info (device loop2): setting datacow [ 163.084479][ T5157] BTRFS info (device loop2): doing ref verification [ 163.091130][ T5157] BTRFS info (device loop2): force clearing of disk cache [ 163.099253][ T5157] BTRFS info (device loop2): turning off barriers [ 163.105785][ T5157] BTRFS info (device loop2): enabling ssd optimizations [ 163.112958][ T5157] BTRFS info (device loop2): using spread ssd allocation scheme [ 163.120721][ T5157] BTRFS info (device loop2): using free space tree [ 163.127712][ T5160] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.238'. [ 163.236080][ T5160] loop4: detected capacity change from 0 to 8192 [ 163.310605][ T5160] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.364385][ T5160] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 163.399505][ T5160] REISERFS (device loop4): using ordered data mode [ 163.454208][ T5160] reiserfs: using flush barriers [ 163.504359][ T5160] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 163.539339][ T5157] BTRFS info (device loop2): rebuilding free space tree [ 163.574680][ T5160] REISERFS (device loop4): checking transaction log (loop4) [ 163.666764][ T5160] REISERFS (device loop4): Using r5 hash to sort names [ 163.674052][ T5160] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 163.798406][ T5160] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 163.819924][ T5160] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 163.835405][ T5160] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 163.850992][ T5160] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 164.465506][ T4251] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.625838][ T5185] loop4: detected capacity change from 0 to 512 [ 164.763173][ T5161] loop3: detected capacity change from 0 to 32768 [ 164.780867][ T5192] loop1: detected capacity change from 0 to 512 [ 164.820188][ T5185] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 164.845311][ T5192] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 164.957378][ T5161] syz.3.237: attempt to access beyond end of device [ 164.957378][ T5161] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 165.331947][ T5161] metapage_write_end_io: I/O error [ 165.372426][ T5161] blkno = 8ed2c, nblocks = 1 [ 165.398973][ T5161] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 165.398973][ T5161] [ 165.433387][ T5161] ERROR: (device loop3): remounting filesystem as read-only [ 165.519342][ T5161] blkno = 8ed2c, nblocks = 1 [ 165.542692][ T5161] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 165.542692][ T5161] [ 165.608928][ T5161] UFO tlock:0xffffc900028ba0d8 [ 165.626658][ T5161] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 165.626658][ T5161] [ 165.642997][ T5161] jfs_lookup: dtSearch returned -5 [ 166.101323][ T107] blkno = 8ed2c, nblocks = 4 [ 166.106333][ T107] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 166.106333][ T107] [ 166.125313][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 166.137284][ T5202] loop2: detected capacity change from 0 to 512 [ 166.169229][ T5202] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 166.220295][ T4250] syz-executor: attempt to access beyond end of device [ 166.220295][ T4250] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 166.260532][ T4250] metapage_write_end_io: I/O error [ 166.266189][ T4250] JFS: metapage_get_blocks failed [ 166.304306][ T4250] JFS: metapage_get_blocks failed [ 166.316744][ T4250] JFS: metapage_get_blocks failed [ 166.340345][ T4250] JFS: metapage_get_blocks failed [ 167.482394][ T5211] loop2: detected capacity change from 0 to 256 [ 167.571443][ T5211] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 167.704583][ T5211] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 167.878310][ T5211] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 168.039007][ T5211] UDF-fs: Scanning with blocksize 512 failed [ 168.361094][ T5211] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 168.434273][ T5211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.503481][ T5217] Zero length message leads to an empty skb [ 168.599489][ T5217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.864229][ T5222] loop1: detected capacity change from 0 to 256 [ 168.882911][ T5222] exfat: Deprecated parameter 'namecase' [ 169.524337][ T5222] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 169.615502][ T5225] loop2: detected capacity change from 0 to 2048 [ 169.668059][ T5225] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.729018][ T5231] device macvlan2 entered promiscuous mode [ 169.775025][ T5225] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (255) does not match entry length (44) [ 169.837177][ T5232] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (255) does not match entry length (44) [ 169.852833][ T5229] loop4: detected capacity change from 0 to 4096 [ 172.318419][ T4254] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 172.335966][ T4254] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 173.320816][ T5260] loop4: detected capacity change from 0 to 8192 [ 173.534341][ T5260] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 173.566582][ T5260] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 174.445321][ T5260] REISERFS (device loop4): using ordered data mode [ 174.484543][ T5260] reiserfs: using flush barriers [ 174.504826][ T5260] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.602888][ T5260] REISERFS (device loop4): checking transaction log (loop4) [ 174.628083][ T5269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.262'. [ 174.636824][ T5260] REISERFS (device loop4): Using r5 hash to sort names [ 174.687896][ T5260] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 175.973308][ T5265] loop2: detected capacity change from 0 to 40427 [ 176.058794][ T5265] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 176.144533][ T5265] F2FS-fs (loop2): invalid crc value [ 176.193258][ T5265] F2FS-fs (loop2): Found nat_bits in checkpoint [ 176.254025][ T5285] loop4: detected capacity change from 0 to 4096 [ 176.402300][ T5297] loop3: detected capacity change from 0 to 64 [ 176.410060][ T5265] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 176.423923][ T5295] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.533099][ T5304] loop4: detected capacity change from 0 to 32768 [ 177.541993][ T5304] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.271 (5304) [ 177.560352][ T5304] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 177.573961][ T5304] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 177.582856][ T5304] BTRFS info (device loop4): setting nodatacow, compression disabled [ 177.591095][ T5304] BTRFS info (device loop4): setting datacow [ 177.594621][ T4263] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 177.597191][ T5304] BTRFS info (device loop4): doing ref verification [ 177.605982][ T4263] Bluetooth: hci0: Injecting HCI hardware error event [ 177.612498][ T5304] BTRFS info (device loop4): force clearing of disk cache [ 177.626637][ T5304] BTRFS info (device loop4): turning off barriers [ 177.633092][ T5304] BTRFS info (device loop4): enabling ssd optimizations [ 177.638038][ T4267] Bluetooth: hci0: hardware error 0x00 [ 177.640953][ T5304] BTRFS info (device loop4): using spread ssd allocation scheme [ 177.653611][ T5304] BTRFS info (device loop4): using free space tree [ 177.869735][ T5304] BTRFS info (device loop4): rebuilding free space tree [ 177.962285][ T5310] loop1: detected capacity change from 0 to 4096 [ 178.022658][ T5310] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 178.573404][ T5310] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 178.890113][ T5310] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 178.902901][ T5310] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 178.964872][ T4254] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.009528][ T5310] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr. [ 179.022705][ T5310] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 179.042091][ T5310] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 179.080531][ T5310] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 179.101564][ T5310] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 179.122386][ T5310] ntfs: volume version 3.1. [ 179.147783][ T5310] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 179.345669][ T5306] loop3: detected capacity change from 0 to 32768 [ 179.359931][ T5306] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.273 (5306) [ 179.436878][ T5306] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.462637][ T5306] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 179.494176][ T5306] BTRFS info (device loop3): setting nodatacow, compression disabled [ 179.514303][ T5306] BTRFS info (device loop3): max_inline at 0 [ 179.520364][ T5306] BTRFS info (device loop3): enabling disk space caching [ 179.556688][ T5306] BTRFS info (device loop3): turning off barriers [ 179.563273][ T5306] BTRFS info (device loop3): turning on flush-on-commit [ 179.594240][ T5306] BTRFS info (device loop3): doing ref verification [ 179.600953][ T5306] BTRFS info (device loop3): force clearing of disk cache [ 179.629502][ T5306] BTRFS info (device loop3): enabling ssd optimizations [ 179.649759][ T5306] BTRFS info (device loop3): max_inline at 4096 [ 179.674626][ T5306] BTRFS info (device loop3): disk space caching is enabled [ 179.724527][ T4267] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 180.119643][ T5306] BTRFS info (device loop3): rebuilding free space tree [ 180.443426][ T5306] BTRFS info (device loop3): disabling free space tree [ 180.460742][ T5306] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 180.912258][ T5306] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.289848][ T4250] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.829101][ T5354] loop4: detected capacity change from 0 to 262144 [ 181.859826][ T5354] F2FS-fs (loop4): invalid crc value [ 181.952698][ T5354] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.521826][ T5400] loop2: detected capacity change from 0 to 8192 [ 184.819650][ T5400] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.839153][ T5400] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 184.848805][ T5400] REISERFS (device loop2): using ordered data mode [ 184.861450][ T5400] reiserfs: using flush barriers [ 184.868270][ T5400] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.912026][ T5400] REISERFS (device loop2): checking transaction log (loop2) [ 184.975328][ T5400] REISERFS (device loop2): Using r5 hash to sort names [ 185.037795][ T5400] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 187.496366][ T5424] loop1: detected capacity change from 0 to 64 [ 187.652387][ T5427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.659732][ T5427] IPv6: NLM_F_CREATE should be set when creating new route [ 193.031040][ T5458] loop3: detected capacity change from 0 to 8192 [ 193.058410][ T5458] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 193.079924][ T5458] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 193.130722][ T5458] REISERFS (device loop3): using ordered data mode [ 193.199788][ T5458] reiserfs: using flush barriers [ 193.241985][ T5458] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.250947][ T5468] loop2: detected capacity change from 0 to 512 [ 193.339447][ T5458] REISERFS (device loop3): checking transaction log (loop3) [ 193.370123][ T5468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.439367][ T5468] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.454327][ T5458] REISERFS (device loop3): Using r5 hash to sort names [ 193.464614][ T5458] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 193.627940][ T5477] loop1: detected capacity change from 0 to 256 [ 193.698602][ T5477] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 193.737938][ T5479] hub 6-0:1.0: USB hub found [ 193.746568][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 193.804278][ T5479] hub 6-0:1.0: 1 port detected [ 194.375436][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.393124][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.924264][ T5489] syz.1.317 uses obsolete (PF_INET,SOCK_PACKET) [ 196.160880][ T5511] loop4: detected capacity change from 0 to 64 [ 196.319577][ T5511] hfs: request for non-existent node 16777216 in B*Tree [ 196.339249][ T5511] hfs: request for non-existent node 16777216 in B*Tree [ 196.484471][ T4263] Bluetooth: hci1: command 0x0406 tx timeout [ 196.492767][ T4263] Bluetooth: hci2: command 0x0406 tx timeout [ 196.502182][ T4263] Bluetooth: hci4: command 0x0406 tx timeout [ 196.511028][ T4263] Bluetooth: hci3: command 0x0406 tx timeout [ 197.462656][ T5527] device ip6erspan0 entered promiscuous mode [ 197.539965][ T5520] loop4: detected capacity change from 0 to 8192 [ 197.600335][ T5520] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 197.626200][ T5520] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 197.650481][ T5520] REISERFS (device loop4): using ordered data mode [ 197.664549][ T5520] reiserfs: using flush barriers [ 197.671125][ T5520] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.689600][ T5520] REISERFS (device loop4): checking transaction log (loop4) [ 197.722902][ T5520] REISERFS (device loop4): Using r5 hash to sort names [ 197.754506][ T5520] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 197.918458][ T5533] loop3: detected capacity change from 0 to 256 [ 197.938396][ T5533] exfat: Deprecated parameter 'utf8' [ 197.958731][ T5533] exfat: Deprecated parameter 'namecase' [ 197.974280][ T5533] exfat: Deprecated parameter 'namecase' [ 197.997121][ T5533] exfat: Deprecated parameter 'utf8' [ 198.070251][ T5533] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d) [ 199.702535][ T52] block nbd2: Attempted send on invalid socket [ 199.710970][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.740036][ T93] block nbd2: Attempted send on invalid socket [ 199.746320][ T93] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.758005][ T5557] Mount JFS Failure: -5 [ 201.821552][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 201.881857][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 202.162727][ T5571] loop4: detected capacity change from 0 to 8192 [ 202.247346][ T5571] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.272288][ T5571] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 202.283431][ T5571] REISERFS (device loop4): using ordered data mode [ 202.334497][ T5571] reiserfs: using flush barriers [ 202.357570][ T5571] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.402123][ T5571] REISERFS (device loop4): checking transaction log (loop4) [ 202.450032][ T5571] REISERFS (device loop4): Using r5 hash to sort names [ 202.460764][ T5571] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 203.095812][ T5584] netlink: 'syz.4.346': attribute type 16 has an invalid length. [ 203.135119][ T5584] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.346'. [ 204.249560][ T5591] loop1: detected capacity change from 0 to 128 [ 204.283440][ T5591] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 204.302764][ T5591] sysv_free_block: trying to free block not in datazone [ 205.255596][ T4252] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 205.482968][ T5602] loop4: detected capacity change from 0 to 4096 [ 205.583227][ T5602] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 206.386062][ T5594] loop2: detected capacity change from 0 to 40427 [ 206.501172][ T5594] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 206.779464][ T5594] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 206.797937][ T5594] F2FS-fs (loop2): invalid crc value [ 207.732616][ T5594] F2FS-fs (loop2): Found nat_bits in checkpoint [ 207.934541][ T4254] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 207.958251][ T5620] netlink: 'syz.0.359': attribute type 16 has an invalid length. [ 207.984463][ T5620] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.359'. [ 209.161813][ T5629] loop4: detected capacity change from 0 to 4096 [ 209.278725][ T5629] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 209.511137][ T5641] loop2: detected capacity change from 0 to 512 [ 209.527700][ T5641] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 209.838170][ T5641] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 210.143967][ T5653] netlink: 'syz.1.370': attribute type 16 has an invalid length. [ 210.167794][ T5653] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.370'. [ 210.290090][ T5656] loop4: detected capacity change from 0 to 64 [ 210.360826][ T5656] hfs: request for non-existent node 327680 in B*Tree [ 210.394299][ T5656] hfs: request for non-existent node 327680 in B*Tree [ 210.401434][ T5656] hfs: request for non-existent node 327680 in B*Tree [ 210.494525][ T5656] hfs: request for non-existent node 327680 in B*Tree [ 210.503285][ T5281] hfs: request for non-existent node 327680 in B*Tree [ 210.510852][ T5281] hfs: request for non-existent node 327680 in B*Tree [ 210.554453][ T5281] hfs: request for non-existent node 327680 in B*Tree [ 210.564506][ T5281] hfs: request for non-existent node 327680 in B*Tree [ 211.420218][ T5677] loop2: detected capacity change from 0 to 64 [ 212.137584][ T5677] hfs: request for non-existent node 16777216 in B*Tree [ 212.184323][ T5677] hfs: request for non-existent node 16777216 in B*Tree [ 212.194894][ T5680] loop3: detected capacity change from 0 to 128 [ 212.285162][ T5680] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 212.300022][ T5680] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.477942][ T5661] loop1: detected capacity change from 0 to 32768 [ 212.617311][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 215.774383][ T5661] (syz.1.373,5661,0):ocfs2_initialize_super:2283 ERROR: status = -12 [ 216.566877][ T5661] (syz.1.373,5661,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 216.667075][ T5702] netlink: 'syz.4.384': attribute type 16 has an invalid length. [ 216.756664][ T5702] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.384'. [ 216.898100][ T5704] loop4: detected capacity change from 0 to 8192 [ 217.017805][ T5704] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 217.084201][ T5704] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 217.093968][ T5704] REISERFS (device loop4): using ordered data mode [ 217.184262][ T5704] reiserfs: using flush barriers [ 217.221148][ T5704] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 217.253882][ T5714] loop2: detected capacity change from 0 to 128 [ 217.284771][ T5704] REISERFS (device loop4): checking transaction log (loop4) [ 217.300770][ T5714] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 217.366059][ T5704] REISERFS (device loop4): Using r5 hash to sort names [ 217.374007][ T5704] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 217.406823][ T5714] sysv_free_block: trying to free block not in datazone [ 217.454350][ T5704] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 217.637927][ T5702] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 217.688066][ T5702] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 217.695120][ T4251] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 217.714599][ T5702] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 219.263145][ T5732] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 219.337421][ T5732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.408649][ T5738] loop3: detected capacity change from 0 to 2048 [ 219.413541][ T5740] bond1: (slave gretap1): making interface the new active one [ 219.522909][ T5740] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 219.569151][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 219.701973][ T5738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 219.783169][ T5738] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.835290][ T5752] loop4: detected capacity change from 0 to 128 [ 219.860574][ T5752] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 219.903868][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.929277][ T5752] sysv_free_block: trying to free block not in datazone [ 220.045461][ T5754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.404'. [ 220.062698][ T4254] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 220.073727][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 220.411824][ T5763] loop4: detected capacity change from 0 to 2048 [ 220.452592][ T5763] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.456809][ T5786] netlink: 'syz.3.415': attribute type 1 has an invalid length. [ 222.565676][ T5795] capability: warning: `syz.0.419' uses 32-bit capabilities (legacy support in use) [ 222.599570][ T5786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.610630][ T5791] bond1: (slave gretap1): making interface the new active one [ 224.625675][ T5791] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 224.802428][ T5800] loop2: detected capacity change from 0 to 262144 [ 224.836419][ T5800] F2FS-fs (loop2): invalid crc value [ 224.885945][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 224.986087][ T5800] F2FS-fs (loop2): Found nat_bits in checkpoint [ 225.189469][ T5800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 225.557801][ T5817] loop3: detected capacity change from 0 to 128 [ 225.633979][ T5817] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 225.682164][ T5817] UDF-fs: error (device loop3): udf_read_inode: (ino 93) failed !bh [ 225.694440][ T5817] UDF-fs: Scanning with blocksize 512 failed [ 225.724692][ T5817] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 225.756681][ T5817] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 225.776464][ T5817] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 225.804298][ T5817] UDF-fs: Scanning with blocksize 1024 failed [ 225.836708][ T5817] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 225.953998][ T5817] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 226.004303][ T5817] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 226.012008][ T5817] UDF-fs: Scanning with blocksize 2048 failed [ 226.043579][ T5817] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 226.065113][ T5817] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 226.084194][ T5817] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 226.092034][ T5817] UDF-fs: Scanning with blocksize 4096 failed [ 226.112337][ T5817] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 227.505094][ T5835] netlink: 'syz.3.430': attribute type 21 has an invalid length. [ 227.512991][ T5835] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.906866][ T5852] loop1: detected capacity change from 0 to 32768 [ 231.084587][ T5852] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.438 (5852) [ 231.309196][ T5852] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.364007][ T5852] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 231.438025][ T5852] BTRFS info (device loop1): setting nodatacow, compression disabled [ 231.493942][ T5852] BTRFS info (device loop1): max_inline at 0 [ 231.500881][ T5852] BTRFS info (device loop1): enabling disk space caching [ 231.508404][ T5852] BTRFS info (device loop1): turning off barriers [ 231.516656][ T5852] BTRFS info (device loop1): turning on flush-on-commit [ 231.523653][ T5852] BTRFS info (device loop1): doing ref verification [ 231.530406][ T5852] BTRFS info (device loop1): force clearing of disk cache [ 231.537658][ T5852] BTRFS info (device loop1): enabling ssd optimizations [ 231.544719][ T5852] BTRFS info (device loop1): max_inline at 4096 [ 231.551002][ T5852] BTRFS info (device loop1): disk space caching is enabled [ 231.769942][ T5864] netlink: 'syz.3.440': attribute type 16 has an invalid length. [ 231.799300][ T5864] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.440'. [ 232.069605][ T5864] loop3: detected capacity change from 0 to 8192 [ 232.089645][ T5852] BTRFS info (device loop1): rebuilding free space tree [ 232.111589][ T5864] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 232.154831][ T5852] BTRFS info (device loop1): disabling free space tree [ 232.161813][ T5852] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 232.184611][ T5852] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 232.254412][ T5864] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 232.284784][ T5864] REISERFS (device loop3): using ordered data mode [ 232.291351][ T5864] reiserfs: using flush barriers [ 232.344209][ T5864] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 232.527400][ T5864] REISERFS (device loop3): checking transaction log (loop3) [ 232.561989][ T5864] REISERFS (device loop3): Using r5 hash to sort names [ 232.621924][ T5864] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 232.668896][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 232.678020][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 232.687104][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 232.696092][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 232.705134][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 232.714206][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 232.723303][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 232.732877][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 232.742077][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 232.923389][ T5864] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 233.276669][ T5864] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 233.344530][ T5864] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 233.394525][ T5864] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 233.435403][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.237686][ T5897] loop2: detected capacity change from 0 to 4096 [ 234.906443][ T5903] loop1: detected capacity change from 0 to 8192 [ 234.994319][ T5903] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 235.263417][ T5903] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 235.507336][ T5903] REISERFS (device loop1): using ordered data mode [ 235.761615][ T5903] reiserfs: using flush barriers [ 235.801725][ T5903] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.920786][ T5903] REISERFS (device loop1): checking transaction log (loop1) [ 235.965553][ T5903] REISERFS (device loop1): Using r5 hash to sort names [ 236.006142][ T5903] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 239.946151][ T5959] loop4: detected capacity change from 0 to 256 [ 243.269585][ T5971] loop4: detected capacity change from 0 to 8192 [ 243.487343][ T5971] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 243.492527][ T5981] fuse: Bad value for 'fd' [ 243.578118][ T5971] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 243.633259][ T5971] REISERFS (device loop4): using ordered data mode [ 243.683477][ T5971] reiserfs: using flush barriers [ 243.707185][ T5971] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 243.755135][ T5971] REISERFS (device loop4): checking transaction log (loop4) [ 243.765601][ T5971] REISERFS (device loop4): Using r5 hash to sort names [ 243.772858][ T5971] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 244.928544][ T6004] netlink: 'syz.2.477': attribute type 21 has an invalid length. [ 244.936789][ T6004] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.180323][ T6018] fuse: Bad value for 'fd' [ 248.715795][ T6024] loop2: detected capacity change from 0 to 8192 [ 248.804864][ T6024] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 248.874358][ T6024] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 248.883702][ T6024] REISERFS (device loop2): using ordered data mode [ 248.890445][ T6024] reiserfs: using flush barriers [ 248.901822][ T6024] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 248.924460][ T6024] REISERFS (device loop2): checking transaction log (loop2) [ 248.932938][ T6024] REISERFS (device loop2): Using r5 hash to sort names [ 248.946161][ T6024] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 250.757238][ T6046] __nla_validate_parse: 98 callbacks suppressed [ 250.757257][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 251.994735][ T6061] netlink: 'syz.4.491': attribute type 21 has an invalid length. [ 252.002629][ T6061] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.688437][ T6069] loop4: detected capacity change from 0 to 32768 [ 254.751149][ T6069] JBD2: Unrecognised features on journal [ 254.757316][ T6069] (syz.4.496,6069,1):ocfs2_journal_load:1112 ERROR: Failed to load journal! [ 254.784194][ T6069] (syz.4.496,6069,0):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -22 [ 254.809342][ T6069] (syz.4.496,6069,0):ocfs2_check_volume:2486 ERROR: status = -22 [ 254.869604][ T6069] (syz.4.496,6069,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 254.944289][ T6069] (syz.4.496,6069,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 255.569220][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.578798][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.315916][ T6085] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 256.489367][ T6091] loop2: detected capacity change from 0 to 256 [ 256.562507][ T6091] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.615960][ T6091] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 257.073109][ T6097] loop3: detected capacity change from 0 to 32768 [ 257.239232][ T6091] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 257.454606][ T6097] XFS (loop3): Mounting V5 Filesystem [ 257.553248][ T6110] loop4: detected capacity change from 0 to 256 [ 257.563338][ T6110] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.594185][ T6110] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 257.921978][ T6110] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 257.934445][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 257.934460][ T26] audit: type=1800 audit(1745079517.148:3): pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.502" name="file1" dev="loop2" ino=1048600 res=0 errno=0 [ 258.205157][ T6097] XFS (loop3): Ending clean mount [ 258.257842][ T6097] XFS (loop3): Quotacheck needed: Please wait. [ 258.330043][ T6097] XFS (loop3): Quotacheck: Done. [ 258.972933][ T6118] device gretap1 entered promiscuous mode [ 258.991857][ T4250] XFS (loop3): Unmounting Filesystem [ 260.613880][ T6126] loop1: detected capacity change from 0 to 8192 [ 260.689870][ T6134] loop3: detected capacity change from 0 to 1024 [ 260.804742][ T6126] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 260.914331][ T6126] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 261.474713][ T6126] REISERFS (device loop1): using ordered data mode [ 261.813325][ T6126] reiserfs: using flush barriers [ 261.907705][ T6126] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 261.954765][ T6126] REISERFS (device loop1): checking transaction log (loop1) [ 261.973069][ T6126] REISERFS (device loop1): Using r5 hash to sort names [ 261.982869][ T6126] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 262.001136][ T6126] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 262.012898][ T4309] hfsplus: b-tree write err: -5, ino 4 [ 262.018372][ T6126] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 262.066093][ T6126] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 262.109575][ T6126] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 263.273317][ T6151] loop4: detected capacity change from 0 to 2048 [ 263.296612][ T6151] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.778030][ T6161] loop3: detected capacity change from 0 to 256 [ 264.787769][ T6161] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.844184][ T6161] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 264.911914][ T6161] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 268.781152][ T6200] loop1: detected capacity change from 0 to 512 [ 269.413685][ T6200] EXT4-fs (loop1): too many log groups per flexible block group [ 269.441452][ T6200] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 269.534378][ T6200] EXT4-fs (loop1): mount failed [ 269.679965][ T6205] loop3: detected capacity change from 0 to 2048 [ 269.727547][ T6205] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.796379][ T6209] device gretap1 entered promiscuous mode [ 273.126267][ T6233] loop1: detected capacity change from 0 to 8192 [ 274.841575][ T6257] loop2: detected capacity change from 0 to 512 [ 275.032835][ T6257] EXT4-fs (loop2): too many log groups per flexible block group [ 275.052778][ T6257] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 275.060413][ T6257] EXT4-fs (loop2): mount failed [ 275.236361][ T6270] loop1: detected capacity change from 0 to 2048 [ 275.310583][ T6267] loop4: detected capacity change from 0 to 8192 [ 275.311141][ T6270] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.382469][ T6267] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 275.498430][ T6273] delete_channel: no stack [ 275.504671][ T6267] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 275.582868][ T6267] REISERFS (device loop4): using ordered data mode [ 276.921060][ T6267] reiserfs: using flush barriers [ 276.946087][ T6267] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.028558][ T6267] REISERFS (device loop4): checking transaction log (loop4) [ 277.120070][ T6267] REISERFS (device loop4): Using r5 hash to sort names [ 277.135905][ T6267] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 277.184605][ T6267] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 277.256805][ T6267] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 277.363768][ T6267] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 277.429124][ T6267] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 277.485899][ T6294] loop3: detected capacity change from 0 to 4096 [ 282.595910][ T6327] loop3: detected capacity change from 0 to 2048 [ 283.982542][ T6327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.080132][ T6338] loop4: detected capacity change from 0 to 8192 [ 285.090134][ T6338] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 285.104783][ T6338] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 285.115605][ T6338] REISERFS (device loop4): using ordered data mode [ 285.122147][ T6338] reiserfs: using flush barriers [ 285.161213][ T6338] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 285.234715][ T6338] REISERFS (device loop4): checking transaction log (loop4) [ 285.474457][ T6338] REISERFS (device loop4): Using r5 hash to sort names [ 285.483804][ T6338] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 285.503461][ T6338] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 290.553499][ T6382] loop3: detected capacity change from 0 to 2048 [ 290.652209][ T6382] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.660829][ T6400] loop4: detected capacity change from 0 to 8192 [ 297.494226][ T5038] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.885083][ T6429] loop3: detected capacity change from 0 to 8192 [ 302.439046][ T6460] loop3: detected capacity change from 0 to 1024 [ 304.321089][ T6460] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.601: Invalid block bitmap block 0 in block_group 0 [ 304.344153][ T6460] Quota error (device loop3): write_blk: dquota write failed [ 304.352175][ T6460] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 304.362209][ T6460] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.601: Failed to acquire dquot type 0 [ 304.377934][ T6460] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.601: Freeing blocks not in datazone - block = 0, count = 4096 [ 304.397507][ T6460] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.601: Invalid inode bitmap blk 0 in block_group 0 [ 304.423723][ T6460] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 304.434494][ T6460] EXT4-fs (loop3): 1 orphan inode deleted [ 304.440284][ T6460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 304.540489][ T9] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 304.584332][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 0 [ 304.740643][ T6460] syz.3.601 (6460) used greatest stack depth: 19968 bytes left [ 304.760384][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 305.566448][ T6478] loop2: detected capacity change from 0 to 256 [ 306.559711][ T6480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.610'. [ 307.392321][ T6485] loop2: detected capacity change from 0 to 8192 [ 307.883875][ T6485] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 308.001490][ T6485] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 308.010864][ T6485] REISERFS (device loop2): using ordered data mode [ 308.017552][ T6485] reiserfs: using flush barriers [ 308.023856][ T6485] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 308.040915][ T6485] REISERFS (device loop2): checking transaction log (loop2) [ 308.075713][ T6485] REISERFS (device loop2): Using r5 hash to sort names [ 308.082972][ T6485] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 309.963030][ T6489] loop3: detected capacity change from 0 to 32768 [ 310.534577][ T5038] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 312.128717][ T6541] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = -1, id = 0 [ 312.350090][ T6536] loop4: detected capacity change from 0 to 8192 [ 312.359379][ T5189] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 312.398751][ T6536] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 312.430316][ T6536] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 312.475540][ T6536] REISERFS (device loop4): using ordered data mode [ 312.482168][ T6536] reiserfs: using flush barriers [ 312.488824][ T6536] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 312.510946][ T6536] REISERFS (device loop4): checking transaction log (loop4) [ 312.525055][ T6536] REISERFS (device loop4): Using r5 hash to sort names [ 312.542608][ T6536] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 312.564351][ T5189] usb 1-1: Using ep0 maxpacket: 32 [ 312.571542][ T5189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 40727, setting to 1024 [ 312.646482][ T5189] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 312.675804][ T6546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.681904][ T5189] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 314.063818][ T5189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.094859][ T6546] team0: Port device bond0 added [ 314.101999][ T5189] usb 1-1: Product: syz [ 314.112695][ T5189] usb 1-1: Manufacturer: syz [ 314.120151][ T5189] usb 1-1: SerialNumber: syz [ 314.207886][ T6549] bridge0: port 3(team0) entered blocking state [ 314.224408][ T6549] bridge0: port 3(team0) entered disabled state [ 314.239734][ T5189] usb 1-1: config 0 descriptor?? [ 314.251394][ T6535] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 314.302023][ T6540] loop3: detected capacity change from 0 to 32768 [ 314.377599][ T5189] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 314.421202][ T6549] device team0 entered promiscuous mode [ 314.452834][ T6540] XFS (loop3): Mounting V5 Filesystem [ 314.471523][ T32] usb 1-1: Failed to submit usb control message: -71 [ 314.480788][ T4319] usb 1-1: USB disconnect, device number 2 [ 314.489612][ T32] usb 1-1: unable to send the bmi data to the device: -71 [ 314.498725][ T6549] device team_slave_0 entered promiscuous mode [ 314.498737][ T32] usb 1-1: unable to get target info from device [ 314.514276][ T32] usb 1-1: could not get target info (-71) [ 314.520495][ T32] usb 1-1: could not probe fw (-71) [ 314.599095][ T6549] device team_slave_1 entered promiscuous mode [ 314.725759][ T6549] device bond0 entered promiscuous mode [ 314.727564][ T6540] XFS (loop3): Ending clean mount [ 314.731364][ T6549] device bond_slave_0 entered promiscuous mode [ 314.743613][ T6549] device bond_slave_1 entered promiscuous mode [ 314.819893][ T6540] XFS (loop3): Quotacheck needed: Please wait. [ 314.897117][ T6540] XFS (loop3): Quotacheck: Done. [ 315.198719][ T4250] XFS (loop3): Unmounting Filesystem [ 315.502180][ T6546] syz.2.632 (6546) used greatest stack depth: 19920 bytes left [ 315.750721][ T6570] loop3: detected capacity change from 0 to 256 [ 315.763864][ T6570] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d) [ 316.665454][ T6576] exFAT-fs (loop3): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 316.677741][ T6576] exFAT-fs (loop3): Filesystem has been set read-only [ 317.022115][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.042507][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.107419][ T6590] overlayfs: missing 'lowerdir' [ 320.383653][ T6596] loop1: detected capacity change from 0 to 8192 [ 321.231201][ T6612] loop1: detected capacity change from 0 to 2048 [ 321.279359][ T6612] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.499612][ T6616] loop4: detected capacity change from 0 to 256 [ 321.621040][ T6616] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d) [ 322.445735][ T6620] exFAT-fs (loop4): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 322.457578][ T6620] exFAT-fs (loop4): Filesystem has been set read-only [ 322.852622][ T6608] loop3: detected capacity change from 0 to 32768 [ 322.922400][ T6628] loop4: detected capacity change from 0 to 512 [ 323.011438][ T6632] loop1: detected capacity change from 0 to 256 [ 323.727233][ T6632] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 323.825181][ T6635] dccp_invalid_packet: P.Data Offset(10) too large [ 323.836805][ T6628] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 324.014195][ T6628] EXT4-fs (loop4): 1 truncate cleaned up [ 324.019961][ T6628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 326.548684][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 328.751124][ T6657] loop2: detected capacity change from 0 to 2048 [ 328.874620][ T6657] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.782433][ T6649] loop4: detected capacity change from 0 to 32768 [ 329.961884][ T6649] XFS (loop4): Mounting V5 Filesystem [ 330.028647][ T6676] loop2: detected capacity change from 0 to 512 [ 330.131254][ T6649] XFS (loop4): Ending clean mount [ 330.204605][ T6649] XFS (loop4): Quotacheck needed: Please wait. [ 330.237823][ T5038] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.477609][ T6649] XFS (loop4): Quotacheck: Done. [ 332.900458][ T4254] XFS (loop4): Unmounting Filesystem [ 332.980482][ T6702] netlink: 56 bytes leftover after parsing attributes in process `syz.0.675'. [ 333.377175][ T6706] loop2: detected capacity change from 0 to 2048 [ 333.684467][ T6706] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.122866][ T6736] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 338.384699][ T6748] syz.0.691 sent an empty control message without MSG_MORE. [ 338.524019][ T6751] loop3: detected capacity change from 0 to 1024 [ 343.914456][ T4309] hfsplus: b-tree write err: -5, ino 3 [ 344.259125][ T6792] device vlan2 entered promiscuous mode [ 344.278308][ T6792] device bond0 entered promiscuous mode [ 344.358644][ T6792] device bond_slave_0 entered promiscuous mode [ 344.385883][ T6792] device bond_slave_1 entered promiscuous mode [ 345.295635][ T6792] device bond0 left promiscuous mode [ 345.301289][ T6792] device bond_slave_0 left promiscuous mode [ 345.352882][ T6792] device bond_slave_1 left promiscuous mode [ 345.686960][ T6803] loop1: detected capacity change from 0 to 2048 [ 347.033176][ T6803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.572592][ T6823] loop4: detected capacity change from 0 to 512 [ 348.838024][ T6823] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 348.881270][ T6823] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.932031][ T6810] loop2: detected capacity change from 0 to 32768 [ 349.057787][ T6810] XFS (loop2): Mounting V5 Filesystem [ 349.117854][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 349.227117][ T6810] XFS (loop2): Ending clean mount [ 349.532546][ T4251] XFS (loop2): Unmounting Filesystem [ 351.216708][ T6861] loop1: detected capacity change from 0 to 2048 [ 351.897069][ T6861] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.237708][ T6865] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 356.227903][ T6902] loop3: detected capacity change from 0 to 64 [ 357.747853][ T4263] Bluetooth: hci3: command 0x0405 tx timeout [ 359.067579][ T6920] loop4: detected capacity change from 0 to 2048 [ 359.094577][ T6920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.177872][ T6921] delete_channel: no stack [ 359.186792][ T6918] loop1: detected capacity change from 0 to 8192 [ 359.303575][ T6918] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 359.372330][ T6918] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 359.445932][ T6918] REISERFS (device loop1): using ordered data mode [ 359.452534][ T6918] reiserfs: using flush barriers [ 359.473086][ T6918] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 359.511578][ T6918] REISERFS (device loop1): checking transaction log (loop1) [ 359.581714][ T6918] REISERFS (device loop1): Using r5 hash to sort names [ 359.600246][ T6918] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 359.625295][ T6931] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 363.632190][ T6964] loop2: detected capacity change from 0 to 2048 [ 363.686637][ T6964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.703503][ T6963] delete_channel: no stack [ 363.918672][ T6969] loop4: detected capacity change from 0 to 1024 [ 366.986928][ T6987] hfsplus: xattr searching failed [ 372.080788][ T7024] loop2: detected capacity change from 0 to 32768 [ 372.134946][ T7024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.762 (7024) [ 372.215537][ T7024] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 372.249838][ T7024] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 372.276615][ T7024] BTRFS info (device loop2): using free space tree [ 372.897857][ T7036] loop3: detected capacity change from 0 to 8192 [ 373.374829][ T7036] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 373.463526][ T7036] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 373.540623][ T7036] REISERFS (device loop3): using ordered data mode [ 373.584377][ T7036] reiserfs: using flush barriers [ 373.592944][ T7036] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 373.654856][ T7036] REISERFS (device loop3): checking transaction log (loop3) [ 373.733158][ T7036] REISERFS (device loop3): Using r5 hash to sort names [ 373.786907][ T7036] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 373.922113][ T7024] BTRFS error (device loop2): open_ctree failed: -12 [ 375.980357][ T7092] loop3: detected capacity change from 0 to 2048 [ 376.093445][ T7092] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.094809][ T7086] netlink: 'syz.2.777': attribute type 25 has an invalid length. [ 378.460777][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.472357][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.319740][ T7123] loop3: detected capacity change from 0 to 2048 [ 380.413093][ T7123] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 380.439297][ T7123] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.431675][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 381.468777][ T7139] loop4: detected capacity change from 0 to 512 [ 383.192008][ T7139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 383.201622][ T7139] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.705336][ T7149] delete_channel: no stack [ 385.879613][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 388.141583][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 389.604882][ T5343] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 389.853398][ T5343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.890285][ T5343] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.023788][ T5343] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 390.174075][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.192468][ T5343] usb 2-1: Product: syz [ 390.202662][ T5343] usb 2-1: Manufacturer: syz [ 390.222951][ T5343] usb 2-1: SerialNumber: syz [ 390.266097][ T5343] usb 2-1: config 0 descriptor?? [ 391.541791][ T7205] delete_channel: no stack [ 394.389483][ T5200] usb 2-1: USB disconnect, device number 2 [ 394.560074][ T7232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 394.586425][ T7230] loop2: detected capacity change from 0 to 2048 [ 394.684648][ T7230] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.124137][ T5343] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 396.438167][ T5343] usb 5-1: Using ep0 maxpacket: 16 [ 396.467860][ T5343] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.499334][ T5343] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.534301][ T5343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 396.553273][ T5343] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 396.572842][ T5343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.601370][ T5343] usb 5-1: config 0 descriptor?? [ 397.090541][ T5343] cougar 0003:060B:500A.0001: unexpected long global item [ 397.107566][ T5343] cougar 0003:060B:500A.0001: parse failed [ 397.123124][ T5343] cougar: probe of 0003:060B:500A.0001 failed with error -22 [ 397.345489][ T5343] usb 5-1: USB disconnect, device number 2 [ 398.442630][ T7264] loop4: detected capacity change from 0 to 2048 [ 398.457477][ T7264] UDF-fs: bad mount option "shor" or missing value [ 404.054432][ T7299] loop4: detected capacity change from 0 to 16 [ 404.091746][ T7299] erofs: (device loop4): mounted with root inode @ nid 36. [ 405.210052][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 407.119567][ T7322] loop3: detected capacity change from 0 to 2048 [ 407.209245][ T7322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.798146][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.844'. [ 408.947106][ T7341] netlink: 'syz.0.844': attribute type 10 has an invalid length. [ 409.126337][ T7341] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 412.907763][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'. [ 414.034198][ T126] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 414.297667][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.336306][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.377729][ T126] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 414.450426][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.379242][ T126] usb 2-1: config 0 descriptor?? [ 416.002336][ T7372] loop1: detected capacity change from 0 to 64 [ 416.216875][ T126] usb 2-1: string descriptor 0 read error: -22 [ 416.420173][ T126] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input6 [ 417.914236][ T126] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input7 [ 417.954291][ T126] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input8 [ 418.002388][ T126] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input9 [ 418.115918][ T126] uclogic 0003:256C:006D.0002: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 418.179432][ T126] usb 2-1: USB disconnect, device number 3 [ 418.681118][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 421.835996][ T7439] random: crng reseeded on system resumption [ 422.653046][ T7444] use of bytesused == 0 is deprecated and will be removed in the future, [ 424.046329][ T7444] use the actual size instead. [ 424.571717][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 428.195287][ T7489] loop3: detected capacity change from 0 to 256 [ 428.270255][ T7489] FAT-fs (loop3): Directory bread(block 64) failed [ 428.314316][ T7489] FAT-fs (loop3): Directory bread(block 65) failed [ 428.321770][ T7489] FAT-fs (loop3): Directory bread(block 66) failed [ 428.331589][ T7489] FAT-fs (loop3): Directory bread(block 67) failed [ 428.349906][ T7489] FAT-fs (loop3): Directory bread(block 68) failed [ 428.364190][ T7489] FAT-fs (loop3): Directory bread(block 69) failed [ 428.394184][ T7489] FAT-fs (loop3): Directory bread(block 70) failed [ 428.400832][ T7489] FAT-fs (loop3): Directory bread(block 71) failed [ 428.432311][ T7471] loop4: detected capacity change from 0 to 32768 [ 428.454478][ T7489] FAT-fs (loop3): Directory bread(block 72) failed [ 428.461070][ T7489] FAT-fs (loop3): Directory bread(block 73) failed [ 428.471136][ T7471] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.889 (7471) [ 428.570334][ T7471] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 428.608233][ T7471] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 428.778500][ T7471] BTRFS info (device loop4): enabling disk space caching [ 429.335879][ T7471] BTRFS info (device loop4): enabling auto defrag [ 429.371440][ T7471] BTRFS info (device loop4): doing ref verification [ 429.414187][ T7471] BTRFS info (device loop4): use no compression [ 429.420497][ T7471] BTRFS info (device loop4): force clearing of disk cache [ 429.519065][ T7471] BTRFS info (device loop4): disabling disk space caching [ 429.694287][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 430.004391][ T7471] BTRFS error (device loop4): open_ctree failed: -12 [ 434.790701][ T7542] loop1: detected capacity change from 0 to 64 [ 437.842161][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 438.373599][ T7562] loop3: detected capacity change from 0 to 1024 [ 439.886491][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.896785][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.649947][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 441.763388][ T7577] loop1: detected capacity change from 0 to 512 [ 441.840954][ T7577] ext2: Unknown parameter 'fowner<00000000000000000000' [ 442.245365][ T7577] netlink: 'syz.1.917': attribute type 16 has an invalid length. [ 442.253164][ T7577] netlink: 'syz.1.917': attribute type 3 has an invalid length. [ 442.334363][ T7577] netlink: 2274 bytes leftover after parsing attributes in process `syz.1.917'. [ 442.346747][ T7575] device hsr_slave_1 left promiscuous mode [ 445.574462][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 446.470263][ T7602] loop1: detected capacity change from 0 to 2048 [ 446.552942][ T7602] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.657179][ T7624] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 450.611314][ T7635] device macsec0 entered promiscuous mode [ 452.770971][ T7640] loop2: detected capacity change from 0 to 40427 [ 452.791469][ T7640] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 452.798532][ T7640] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 452.809565][ T7640] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3ffff [ 452.818191][ T7640] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 452.829750][ T7640] F2FS-fs (loop2): invalid crc value [ 453.007997][ T7640] F2FS-fs (loop2): Found nat_bits in checkpoint [ 453.085284][ T7640] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 453.092826][ T7640] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 453.756693][ T4251] syz-executor: attempt to access beyond end of device [ 453.756693][ T4251] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 459.737559][ T7691] fuse: Bad value for 'user_id' [ 461.640318][ T7706] loop3: detected capacity change from 0 to 8 [ 461.844254][ T7706] SQUASHFS error: Unable to read directory block [631:26] [ 464.729948][ T7732] fuse: Bad value for 'fd' [ 466.763180][ T7749] netlink: 112 bytes leftover after parsing attributes in process `syz.2.964'. [ 467.767396][ T7753] loop1: detected capacity change from 0 to 40427 [ 467.790905][ T7753] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 467.813230][ T7753] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 467.855293][ T7753] F2FS-fs (loop1): invalid crc_offset: 2147483900 [ 467.915651][ T7753] F2FS-fs (loop1): Found nat_bits in checkpoint [ 467.935351][ T7764] loop2: detected capacity change from 0 to 4096 [ 467.975231][ T7764] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 468.003151][ T7418] udevd[7418]: incorrect nilfs2 checksum on /dev/loop2 [ 468.027207][ T7764] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 468.120613][ T7753] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 468.144109][ T7753] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 468.194465][ T7771] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.227507][ T7774] fuse: Bad value for 'fd' [ 470.788158][ T7792] loop2: detected capacity change from 0 to 4096 [ 470.839243][ T7792] ntfs3: Unknown parameter '' [ 470.924478][ T7418] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 470.962720][ T26] audit: type=1326 audit(1745079730.218:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102fd8e169 code=0x7ffc0000 [ 471.016334][ T26] audit: type=1326 audit(1745079730.218:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f102fd8e169 code=0x7ffc0000 [ 471.042411][ T26] audit: type=1326 audit(1745079730.218:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102fd8e169 code=0x7ffc0000 [ 471.111476][ T7801] loop2: detected capacity change from 0 to 22 [ 471.121678][ T7801] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 471.148120][ T7801] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 471.369577][ T26] audit: type=1326 audit(1745079730.218:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102fd8e169 code=0x7ffc0000 [ 471.541786][ T26] audit: type=1326 audit(1745079730.218:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102fd8e169 code=0x7ffc0000 [ 471.591445][ T26] audit: type=1326 audit(1745079730.218:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f102fd8e169 code=0x7ffc0000 [ 471.592826][ T7805] loop3: detected capacity change from 0 to 2048 [ 471.620498][ T26] audit: type=1326 audit(1745079730.218:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102fd8e169 code=0x7ffc0000 [ 471.703751][ T7809] fuse: Bad value for 'fd' [ 471.841173][ T7805] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.060140][ T7813] infiniband syz0: set active [ 472.068565][ T7813] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 472.078143][ T7813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 472.085667][ T7813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.434633][ T26] audit: type=1326 audit(1745079730.218:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f102fd8e169 code=0x7ffc0000 [ 473.647156][ T5189] lo speed is unknown, defaulting to 1000 [ 473.744374][ T26] audit: type=1326 audit(1745079730.218:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7797 comm="syz.3.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f102fd8e169 code=0x7ffc0000 [ 477.379374][ T7848] loop3: detected capacity change from 0 to 1024 [ 477.401412][ T7848] EXT4-fs: Ignoring removed bh option [ 477.708616][ T7848] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 477.753511][ T7855] fuse: Bad value for 'fd' [ 478.117383][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 479.781672][ T7867] loop2: detected capacity change from 0 to 2048 [ 479.832292][ T7867] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 483.106685][ T7897] fuse: Bad value for 'fd' [ 488.138607][ T7938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.204694][ T7938] bond0: (slave rose0): Enslaving as an active interface with an up link [ 488.213324][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 488.401995][ T7947] fuse: Bad value for 'fd' [ 490.345393][ T7967] loop4: detected capacity change from 0 to 2048 [ 490.394656][ T7967] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 490.552755][ T7969] loop3: detected capacity change from 0 to 2048 [ 490.644830][ T7969] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 496.153041][ T8015] fuse: Invalid rootmode [ 498.199486][ T4263] Bluetooth: hci5: sending frame failed (-49) [ 498.209161][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 501.440448][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.447216][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.569447][ T8066] fuse: Invalid rootmode [ 501.785570][ T8072] loop1: detected capacity change from 0 to 1024 [ 503.692192][ T8079] hfsplus: xattr searching failed [ 505.512950][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.591884][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.607864][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.642009][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.679874][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.710834][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.764430][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.860037][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.352396][ T8107] loop2: detected capacity change from 0 to 40427 [ 507.362929][ T8092] device batadv_slave_0 entered promiscuous mode [ 507.546029][ T8107] F2FS-fs (loop2): Found nat_bits in checkpoint [ 507.622767][ T8111] delete_channel: no stack [ 507.629439][ T8107] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 508.362228][ T8124] syz.2.1057: attempt to access beyond end of device [ 508.362228][ T8124] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 509.710213][ T8129] loop3: detected capacity change from 0 to 4096 [ 509.761320][ T8129] ntfs3: Unknown parameter '' [ 509.900101][ T8139] loop3: detected capacity change from 0 to 22 [ 509.908228][ T8139] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 509.924613][ T8139] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 510.171330][ T4251] syz-executor: attempt to access beyond end of device [ 510.171330][ T4251] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 510.793943][ T8156] loop3: detected capacity change from 0 to 512 [ 511.047813][ T8156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 511.924811][ T8156] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 512.409419][ T8174] delete_channel: no stack [ 512.515707][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 512.755583][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 514.017241][ T8193] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1078'. [ 519.124379][ T8215] delete_channel: no stack [ 519.142128][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.153247][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.163490][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.174824][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.184737][ T8220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.196233][ T8220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.208003][ T8220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.222985][ T8220] device batadv_slave_0 entered promiscuous mode [ 520.992340][ T8242] loop1: detected capacity change from 0 to 16 [ 521.213635][ T8242] erofs: (device loop1): mounted with root inode @ nid 36. [ 523.337830][ T8259] delete_channel: no stack [ 523.374176][ T8242] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 523.385975][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 524.306855][ T8267] x_tables: duplicate underflow at hook 1 [ 524.690553][ T4267] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 524.706091][ T8242] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 524.718263][ T26] audit: type=1800 audit(1745079783.978:13): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1094" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 524.790027][ T8273] loop3: detected capacity change from 0 to 1024 [ 524.857765][ T8273] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 524.868905][ T8273] EXT4-fs (loop3): orphan cleanup on readonly fs [ 524.893238][ T8273] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 524.903680][ T8242] syz.1.1094 (8242) used greatest stack depth: 19488 bytes left [ 524.920951][ T8273] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #3: comm syz.3.1102: mark_inode_dirty error [ 524.928241][ T26] audit: type=1326 audit(1745079784.188:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.1103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96be58e169 code=0x0 [ 524.988562][ T8273] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1102: Invalid block bitmap block 3 in block_group 0 [ 525.003535][ T8273] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 525.024898][ T8273] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #3: comm syz.3.1102: mark_inode_dirty error [ 525.094141][ T8273] Quota error (device loop3): write_blk: dquota write failed [ 525.119924][ T8273] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 1: comm syz.3.1102: lblock 6 mapped to illegal pblock 1 (length 1) [ 525.154869][ T8273] Quota error (device loop3): write_blk: dquota write failed [ 525.169275][ T8286] loop1: detected capacity change from 0 to 512 [ 525.175818][ T8273] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 525.188802][ T8286] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 525.208319][ T8273] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 48: comm syz.3.1102: lblock 0 mapped to illegal pblock 48 (length 1) [ 525.241128][ T8273] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 525.256712][ T8286] EXT4-fs (loop1): 1 truncate cleaned up [ 525.262420][ T8286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 525.287263][ T8273] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1102: Failed to acquire dquot type 0 [ 525.334823][ T8273] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #3: block 49: comm syz.3.1102: lblock 1 mapped to illegal pblock 49 (length 1) [ 525.354235][ T8273] Quota error (device loop3): do_insert_tree: Can't read tree quota block 1 [ 525.434089][ T8273] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 525.494654][ T8273] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1102: Failed to acquire dquot type 0 [ 525.639799][ T8273] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 525.809474][ T8273] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #15: comm syz.3.1102: mark_inode_dirty error [ 525.940826][ T8273] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 526.067860][ T8273] EXT4-fs (loop3): 1 orphan inode deleted [ 526.087538][ T8273] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 526.160285][ T8273] syz.3.1102 (8273) used greatest stack depth: 18880 bytes left [ 526.240751][ T8301] loop2: detected capacity change from 0 to 8 [ 526.251264][ T8304] delete_channel: no stack [ 526.365079][ T8301] SQUASHFS error: lzo decompression failed, data probably corrupt [ 526.373648][ T8301] SQUASHFS error: Failed to read block 0x62b: -5 [ 526.416662][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 526.434097][ T8301] SQUASHFS error: Unable to read metadata cache entry [629] [ 526.451687][ T8301] SQUASHFS error: Unable to read inode 0x11f [ 526.513091][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 529.502584][ T8330] loop4: detected capacity change from 0 to 16 [ 529.600702][ T8330] erofs: (device loop4): mounted with root inode @ nid 36. [ 530.281677][ T8330] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 530.403011][ T8330] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 530.642648][ T5200] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 530.691392][ T8339] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 530.830120][ T8339] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 530.844929][ T5200] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 530.867063][ T5200] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 530.922211][ T5200] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.009638][ T5200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.064932][ T5200] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.097153][ T4267] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 531.108370][ T8330] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 531.119895][ T26] audit: type=1800 audit(1745079790.378:15): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1116" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 531.152083][ T5200] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.194443][ T5200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.231468][ T8343] delete_channel: no stack [ 531.243581][ T5200] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.263854][ T5200] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.284253][ T5200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.322383][ T5200] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.342504][ T5200] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.374075][ T5200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.390589][ T5200] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.450446][ T5200] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.461915][ T5200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.484735][ T5200] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.513433][ T5200] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.542814][ T8347] delete_channel: no stack [ 531.554297][ T5200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.558271][ T8350] loop3: detected capacity change from 0 to 512 [ 531.572395][ T5200] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.591760][ T5200] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.614141][ T8350] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 531.625852][ T5200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.695131][ T8350] EXT4-fs (loop3): 1 truncate cleaned up [ 531.700888][ T8350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 531.719714][ T5200] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.774177][ T5200] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.841440][ T5200] usb 1-1: config 0 interface 0 has no altsetting 0 [ 532.025098][ T8356] loop4: detected capacity change from 0 to 512 [ 532.107248][ T8356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 532.126180][ T5200] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 532.453851][ T5200] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 532.463245][ T5200] usb 1-1: Product: syz [ 532.467740][ T5200] usb 1-1: Manufacturer: syz [ 532.472387][ T5200] usb 1-1: SerialNumber: syz [ 532.479270][ T5200] usb 1-1: config 0 descriptor?? [ 532.626469][ T8356] EXT4-fs (loop4): 1 truncate cleaned up [ 532.660110][ T8356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 532.778775][ T5200] usb 1-1: can't set config #0, error -71 [ 532.786682][ T5200] usb 1-1: USB disconnect, device number 3 [ 534.930686][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 537.365767][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 538.565314][ T8391] delete_channel: no stack [ 544.531732][ T8424] xt_connbytes: Forcing CT accounting to be enabled [ 544.539101][ T8424] --map-set only usable from mangle table [ 545.242137][ T8437] delete_channel: no stack [ 546.380857][ T93] block nbd0: Attempted send on invalid socket [ 546.387443][ T93] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.428520][ T93] block nbd0: Attempted send on invalid socket [ 546.434927][ T93] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.497402][ T8459] loop2: detected capacity change from 0 to 16 [ 546.518325][ T8459] erofs: (device loop2): mounted with root inode @ nid 36. [ 546.550823][ T8453] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1156'. [ 546.652112][ T8459] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 547.339313][ T8474] tmpfs: Unknown parameter 'usrquota' [ 547.403103][ T8473] delete_channel: no stack [ 547.914224][ T8464] loop3: detected capacity change from 0 to 32768 [ 547.959797][ T8464] XFS (loop3): Mounting V5 Filesystem [ 548.392259][ T8464] XFS (loop3): Ending clean mount [ 548.553939][ T8496] netlink: 'syz.1.1168': attribute type 8 has an invalid length. [ 550.963654][ T4250] XFS (loop3): Unmounting Filesystem [ 551.152493][ T8514] loop1: detected capacity change from 0 to 16 [ 551.197948][ T8514] erofs: (device loop1): mounted with root inode @ nid 36. [ 551.323082][ T8514] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 551.494351][ T8520] loop4: detected capacity change from 0 to 2048 [ 551.519003][ T8520] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 551.724108][ T5200] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 552.071756][ T5200] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 552.138028][ T5200] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 552.307392][ T5200] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 552.490580][ T5200] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 552.632400][ T5200] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 552.674444][ T5200] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 552.692001][ T5200] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 552.719680][ T5200] usb 1-1: Product: syz [ 552.734755][ T5200] usb 1-1: Manufacturer: syz [ 552.762807][ T5200] cdc_wdm 1-1:1.0: skipping garbage [ 552.778448][ T5200] cdc_wdm 1-1:1.0: skipping garbage [ 552.817729][ T5200] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 552.836051][ T5200] cdc_wdm 1-1:1.0: Unknown control protocol [ 552.904968][ T8538] loop1: detected capacity change from 0 to 64 [ 553.077854][ T4911] usb 1-1: USB disconnect, device number 4 [ 553.078863][ T8538] hfs: request for non-existent node 327680 in B*Tree [ 553.872425][ T8538] hfs: request for non-existent node 327680 in B*Tree [ 554.157038][ T8545] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 554.164339][ T8545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 554.176132][ T8545] vhci_hcd vhci_hcd.0: Device attached [ 554.231939][ T4340] hfs: request for non-existent node 327680 in B*Tree [ 554.255059][ T4340] hfs: request for non-existent node 327680 in B*Tree [ 554.394683][ T8538] hfs: request for non-existent node 327680 in B*Tree [ 554.474101][ T7] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 554.556232][ T8538] hfs: request for non-existent node 327680 in B*Tree [ 554.580222][ T8547] vhci_hcd: connection reset by peer [ 554.602564][ T5895] vhci_hcd: stop threads [ 554.660905][ T5895] vhci_hcd: release socket [ 554.765277][ T5895] vhci_hcd: disconnect device [ 557.215535][ T8571] loop1: detected capacity change from 0 to 2048 [ 557.403106][ T8571] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 559.267785][ T8593] loop4: detected capacity change from 0 to 128 [ 559.340527][ T8597] loop1: detected capacity change from 0 to 2048 [ 559.409186][ T8597] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 559.527733][ T8593] EXT4-fs (loop4): Test dummy encryption mode enabled [ 559.543224][ T8593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 559.574631][ T8593] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 559.691701][ T8609] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 559.712540][ T7] vhci_hcd: vhci_device speed not set [ 560.631312][ T8613] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 560.813533][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 562.807548][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.814052][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.846916][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 563.048510][ T8645] loop4: detected capacity change from 0 to 64 [ 563.253221][ T8644] hfs: request for non-existent node 327680 in B*Tree [ 563.266977][ T8644] hfs: request for non-existent node 327680 in B*Tree [ 563.308010][ T8644] hfs: request for non-existent node 327680 in B*Tree [ 563.349443][ T8644] hfs: request for non-existent node 327680 in B*Tree [ 563.387268][ T5001] hfs: request for non-existent node 327680 in B*Tree [ 563.403642][ T5001] hfs: request for non-existent node 327680 in B*Tree [ 563.485670][ T5895] hfs: request for non-existent node 327680 in B*Tree [ 563.492789][ T5895] hfs: request for non-existent node 327680 in B*Tree [ 563.666955][ T8650] Bluetooth: MGMT ver 1.22 [ 564.324820][ T8657] netlink: 'syz.0.1219': attribute type 4 has an invalid length. [ 564.332671][ T8657] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1219'. [ 564.344751][ T8657] wlan1: mtu less than device minimum [ 564.964133][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 566.181181][ T7] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 566.204082][ T7] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 566.214824][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 566.223838][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 566.934107][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 566.955029][ T7] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 566.966066][ T7] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 566.974186][ T7] usb 5-1: Product: syz [ 566.978392][ T7] usb 5-1: Manufacturer: syz [ 567.006934][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 567.012259][ T7] cdc_wdm 5-1:1.0: skipping garbage [ 567.040779][ T8688] loop2: detected capacity change from 0 to 64 [ 567.085126][ T7] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 567.091112][ T7] cdc_wdm 5-1:1.0: Unknown control protocol [ 567.140575][ T8688] hfs: request for non-existent node 327680 in B*Tree [ 567.172148][ T8688] hfs: request for non-existent node 327680 in B*Tree [ 567.234855][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1222'. [ 567.306718][ T8688] hfs: request for non-existent node 327680 in B*Tree [ 567.376426][ T8688] hfs: request for non-existent node 327680 in B*Tree [ 567.437723][ T5189] usb 5-1: USB disconnect, device number 3 [ 567.569176][ T56] hfs: request for non-existent node 327680 in B*Tree [ 567.582211][ T56] hfs: request for non-existent node 327680 in B*Tree [ 567.908499][ T8700] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 567.915118][ T8700] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 567.923171][ T8700] vhci_hcd vhci_hcd.0: Device attached [ 568.214208][ T5189] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 568.746150][ T8701] vhci_hcd: connection reset by peer [ 568.757317][ T4300] vhci_hcd: stop threads [ 568.762786][ T4300] vhci_hcd: release socket [ 568.861144][ T4300] vhci_hcd: disconnect device [ 569.520168][ T8713] loop3: detected capacity change from 0 to 512 [ 569.561103][ T8713] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 569.864687][ T8713] EXT4-fs (loop3): 1 truncate cleaned up [ 569.874818][ T8713] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 570.214486][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 570.409081][ T8726] loop1: detected capacity change from 0 to 2048 [ 570.451675][ T8726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 570.674752][ T8728] tmpfs: Unknown parameter 'usrquota' [ 571.222190][ T8738] ptrace attach of "./syz-executor exec"[4254] was attempted by "./syz-executor exec"[8738] [ 571.560906][ T8742] loop1: detected capacity change from 0 to 8192 [ 572.384464][ T3623] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.582025][ T3623] Buffer I/O error on dev loop1, logical block 0, async page read [ 573.426421][ T3623] ldm_validate_partition_table(): Disk read failed. [ 573.433106][ T3623] Dev loop1: unable to read RDB block 0 [ 573.434452][ T5189] vhci_hcd: vhci_device speed not set [ 573.463666][ T3623] loop1: unable to read partition table [ 573.500792][ T3623] loop1: partition table beyond EOD, truncated [ 575.887595][ T8772] loop1: detected capacity change from 0 to 256 [ 575.950128][ T8776] loop3: detected capacity change from 0 to 64 [ 575.967234][ T8774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1247'. [ 575.993883][ T8772] FAT-fs (loop1): Directory bread(block 64) failed [ 576.036456][ T8779] loop2: detected capacity change from 0 to 64 [ 576.048104][ T8776] hfs: request for non-existent node 327680 in B*Tree [ 576.055025][ T8772] FAT-fs (loop1): Directory bread(block 65) failed [ 576.061686][ T8772] FAT-fs (loop1): Directory bread(block 66) failed [ 576.069818][ T8776] hfs: request for non-existent node 327680 in B*Tree [ 576.178865][ T8779] [ 576.181249][ T8779] ====================================================== [ 576.188266][ T8779] WARNING: possible circular locking dependency detected [ 576.195297][ T8779] 6.1.134-syzkaller #0 Not tainted [ 576.200395][ T8779] ------------------------------------------------------ [ 576.207400][ T8779] syz.2.1249/8779 is trying to acquire lock: [ 576.213392][ T8779] ffff88802fbc3b78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x1440 [ 576.224178][ T8779] [ 576.224178][ T8779] but task is already holding lock: [ 576.231554][ T8779] ffff8880269ae0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x16a/0x1e0 [ 576.240872][ T8779] [ 576.240872][ T8779] which lock already depends on the new lock. [ 576.240872][ T8779] [ 576.251366][ T8779] [ 576.251366][ T8779] the existing dependency chain (in reverse order) is: [ 576.260409][ T8779] [ 576.260409][ T8779] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 576.268333][ T8779] lock_acquire+0x1f8/0x5a0 [ 576.273376][ T8779] __mutex_lock+0x132/0xd80 [ 576.278417][ T8779] hfs_find_init+0x16a/0x1e0 [ 576.283539][ T8779] hfs_extend_file+0x317/0x1440 [ 576.288907][ T8779] hfs_bmap_reserve+0xd5/0x3f0 [ 576.294202][ T8779] hfs_cat_move+0x1b7/0xdd0 [ 576.299253][ T8779] hfs_rename+0x242/0x320 [ 576.304098][ T8779] vfs_rename+0xd32/0x10f0 [ 576.309035][ T8779] do_renameat2+0xde0/0x1440 [ 576.314142][ T8779] __x64_sys_renameat2+0xce/0xe0 [ 576.319603][ T8779] do_syscall_64+0x3b/0x80 [ 576.324540][ T8779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.330958][ T8779] [ 576.330958][ T8779] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 576.340167][ T8779] validate_chain+0x1661/0x5950 [ 576.345541][ T8779] __lock_acquire+0x125b/0x1f80 [ 576.350911][ T8779] lock_acquire+0x1f8/0x5a0 [ 576.356046][ T8779] __mutex_lock+0x132/0xd80 [ 576.361076][ T8779] hfs_extend_file+0xfb/0x1440 [ 576.366359][ T8779] hfs_bmap_reserve+0xd5/0x3f0 [ 576.371764][ T8779] __hfs_ext_write_extent+0x22e/0x4f0 [ 576.377741][ T8779] __hfs_ext_cache_extent+0x6a/0x990 [ 576.383570][ T8779] hfs_extend_file+0x340/0x1440 [ 576.388949][ T8779] hfs_get_block+0x3e0/0xb60 [ 576.394064][ T8779] __block_write_begin_int+0x544/0x1a30 [ 576.400136][ T8779] block_write_begin+0x98/0x1f0 [ 576.405541][ T8779] cont_write_begin+0x63f/0x880 [ 576.410926][ T8779] hfs_write_begin+0x86/0xd0 [ 576.416039][ T8779] generic_perform_write+0x2fc/0x5e0 [ 576.421850][ T8779] __generic_file_write_iter+0x176/0x400 [ 576.428006][ T8779] generic_file_write_iter+0xab/0x310 [ 576.433905][ T8779] vfs_write+0x857/0xbc0 [ 576.438718][ T8779] ksys_write+0x19c/0x2c0 [ 576.443580][ T8779] do_syscall_64+0x3b/0x80 [ 576.448516][ T8779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.454935][ T8779] [ 576.454935][ T8779] other info that might help us debug this: [ 576.454935][ T8779] [ 576.465159][ T8779] Possible unsafe locking scenario: [ 576.465159][ T8779] [ 576.472604][ T8779] CPU0 CPU1 [ 576.477968][ T8779] ---- ---- [ 576.483324][ T8779] lock(&tree->tree_lock/1); [ 576.488020][ T8779] lock(&HFS_I(tree->inode)->extents_lock); [ 576.496536][ T8779] lock(&tree->tree_lock/1); [ 576.503737][ T8779] lock(&HFS_I(tree->inode)->extents_lock); [ 576.509715][ T8779] [ 576.509715][ T8779] *** DEADLOCK *** [ 576.509715][ T8779] [ 576.518056][ T8779] 5 locks held by syz.2.1249/8779: [ 576.523177][ T8779] #0: ffff888028280fe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 576.532416][ T8779] #1: ffff888079b08460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 576.541485][ T8779] #2: ffff88802fbc2328 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 576.552853][ T8779] #3: ffff88802fbc2178 (&HFS_I(inode)->extents_lock#2){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x1440 [ 576.563755][ T8779] #4: ffff8880269ae0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x16a/0x1e0 [ 576.573527][ T8779] [ 576.573527][ T8779] stack backtrace: [ 576.579418][ T8779] CPU: 1 PID: 8779 Comm: syz.2.1249 Not tainted 6.1.134-syzkaller #0 [ 576.587508][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 576.597563][ T8779] Call Trace: [ 576.600858][ T8779] [ 576.603808][ T8779] dump_stack_lvl+0x1e3/0x2cb [ 576.608491][ T8779] ? nf_tcp_handle_invalid+0x647/0x647 [ 576.613966][ T8779] ? print_circular_bug+0x12b/0x1a0 [ 576.619181][ T8779] check_noncircular+0x2fa/0x3b0 [ 576.624127][ T8779] ? check_path+0x40/0x40 [ 576.628487][ T8779] ? add_chain_block+0x850/0x850 [ 576.633431][ T8779] ? lockdep_lock+0x11f/0x2a0 [ 576.638111][ T8779] ? check_path+0x21/0x40 [ 576.642452][ T8779] ? _find_first_zero_bit+0xd0/0x100 [ 576.647740][ T8779] validate_chain+0x1661/0x5950 [ 576.652600][ T8779] ? reacquire_held_locks+0x660/0x660 [ 576.657979][ T8779] ? reacquire_held_locks+0x660/0x660 [ 576.663353][ T8779] ? look_up_lock_class+0x77/0x140 [ 576.668473][ T8779] ? register_lock_class+0x100/0x990 [ 576.673761][ T8779] ? __lock_acquire+0x125b/0x1f80 [ 576.678795][ T8779] ? is_dynamic_key+0x260/0x260 [ 576.683738][ T8779] ? mark_lock+0x9a/0x340 [ 576.688072][ T8779] __lock_acquire+0x125b/0x1f80 [ 576.692933][ T8779] lock_acquire+0x1f8/0x5a0 [ 576.697525][ T8779] ? hfs_extend_file+0xfb/0x1440 [ 576.702490][ T8779] ? read_lock_is_recursive+0x10/0x10 [ 576.707884][ T8779] ? __might_sleep+0xb0/0xb0 [ 576.712478][ T8779] ? mark_lock+0x9a/0x340 [ 576.716830][ T8779] ? look_up_lock_class+0x77/0x140 [ 576.721951][ T8779] ? register_lock_class+0x100/0x990 [ 576.727242][ T8779] __mutex_lock+0x132/0xd80 [ 576.731835][ T8779] ? hfs_extend_file+0xfb/0x1440 [ 576.736793][ T8779] ? mark_lock+0x9a/0x340 [ 576.741127][ T8779] ? hfs_extend_file+0xfb/0x1440 [ 576.746089][ T8779] ? mutex_lock_nested+0x10/0x10 [ 576.751045][ T8779] hfs_extend_file+0xfb/0x1440 [ 576.755807][ T8779] ? hfs_get_block+0xb60/0xb60 [ 576.760561][ T8779] ? __mutex_trylock_common+0x17e/0x2e0 [ 576.766107][ T8779] ? __might_sleep+0xb0/0xb0 [ 576.770728][ T8779] ? trace_raw_output_contention_end+0xd0/0xd0 [ 576.776886][ T8779] ? rcu_is_watching+0x11/0xb0 [ 576.781669][ T8779] ? trace_contention_end+0x61/0x170 [ 576.787051][ T8779] ? hfs_brec_find+0x193/0x570 [ 576.791828][ T8779] hfs_bmap_reserve+0xd5/0x3f0 [ 576.796714][ T8779] __hfs_ext_write_extent+0x22e/0x4f0 [ 576.802274][ T8779] __hfs_ext_cache_extent+0x6a/0x990 [ 576.807563][ T8779] ? hfs_find_init+0x16a/0x1e0 [ 576.812337][ T8779] hfs_extend_file+0x340/0x1440 [ 576.817189][ T8779] ? filemap_get_folios+0x1bc/0x970 [ 576.822402][ T8779] ? hfs_get_block+0xb60/0xb60 [ 576.827175][ T8779] ? find_lock_entries+0xda0/0xda0 [ 576.832349][ T8779] ? clean_bdev_aliases+0x7f1/0x910 [ 576.837577][ T8779] hfs_get_block+0x3e0/0xb60 [ 576.842170][ T8779] ? hfs_free_extents+0x420/0x420 [ 576.847220][ T8779] ? create_page_buffers+0x24e/0x4b0 [ 576.852523][ T8779] __block_write_begin_int+0x544/0x1a30 [ 576.858078][ T8779] ? hfs_free_extents+0x420/0x420 [ 576.863095][ T8779] ? page_zero_new_buffers+0x650/0x650 [ 576.868558][ T8779] ? PageHeadHuge+0x8e/0x1c0 [ 576.873249][ T8779] ? hfs_free_extents+0x420/0x420 [ 576.878266][ T8779] block_write_begin+0x98/0x1f0 [ 576.883204][ T8779] ? cont_write_begin+0x622/0x880 [ 576.888228][ T8779] cont_write_begin+0x63f/0x880 [ 576.893098][ T8779] ? fault_in_readable+0x1c8/0x340 [ 576.898222][ T8779] ? generic_cont_expand_simple+0x2a0/0x2a0 [ 576.904120][ T8779] ? fault_in_readable+0x209/0x340 [ 576.909238][ T8779] ? fault_in_safe_writeable+0x250/0x250 [ 576.914891][ T8779] hfs_write_begin+0x86/0xd0 [ 576.919473][ T8779] ? hfs_free_extents+0x420/0x420 [ 576.924495][ T8779] generic_perform_write+0x2fc/0x5e0 [ 576.929798][ T8779] ? generic_file_direct_write+0x460/0x460 [ 576.935619][ T8779] ? __file_remove_privs+0x640/0x640 [ 576.940905][ T8779] ? generic_write_checks+0x15c/0x1c0 [ 576.946271][ T8779] ? clear_nonspinnable+0x60/0x60 [ 576.951295][ T8779] __generic_file_write_iter+0x176/0x400 [ 576.956923][ T8779] generic_file_write_iter+0xab/0x310 [ 576.962288][ T8779] vfs_write+0x857/0xbc0 [ 576.966548][ T8779] ? file_end_write+0x250/0x250 [ 576.971399][ T8779] ? __fget_files+0x28/0x4a0 [ 576.976010][ T8779] ? __fget_files+0x435/0x4a0 [ 576.980691][ T8779] ? __fdget_pos+0x2ba/0x360 [ 576.985300][ T8779] ? ksys_write+0x77/0x2c0 [ 576.989706][ T8779] ksys_write+0x19c/0x2c0 [ 576.994029][ T8779] ? print_irqtrace_events+0x210/0x210 [ 576.999503][ T8779] ? __ia32_sys_read+0x80/0x80 [ 577.004273][ T8779] ? syscall_enter_from_user_mode+0x2e/0x230 [ 577.010256][ T8779] ? lockdep_hardirqs_on+0x94/0x130 [ 577.015467][ T8779] ? syscall_enter_from_user_mode+0x2e/0x230 [ 577.021449][ T8779] do_syscall_64+0x3b/0x80 [ 577.025863][ T8779] ? clear_bhb_loop+0x45/0xa0 [ 577.030541][ T8779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.036458][ T8779] RIP: 0033:0x7fd2e918e169 [ 577.040872][ T8779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.060487][ T8779] RSP: 002b:00007fd2ea005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 577.068896][ T8779] RAX: ffffffffffffffda RBX: 00007fd2e93b5fa0 RCX: 00007fd2e918e169 [ 577.076864][ T8779] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000006 [ 577.084832][ T8779] RBP: 00007fd2e9210a68 R08: 0000000000000000 R09: 0000000000000000 [ 577.092798][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.100780][ T8779] R13: 0000000000000000 R14: 00007fd2e93b5fa0 R15: 00007ffe404b2638 [ 577.108840][ T8779] [ 577.125974][ T8772] FAT-fs (loop1): Directory bread(block 67) failed [ 577.132559][ T8772] FAT-fs (loop1): Directory bread(block 68) failed [ 577.140809][ T8776] hfs: request for non-existent node 327680 in B*Tree [ 577.167772][ T8776] hfs: request for non-existent node 327680 in B*Tree [ 577.167783][ T8772] FAT-fs (loop1): Directory bread(block 69) failed [ 577.167911][ T8772] FAT-fs (loop1): Directory bread(block 70) failed [ 577.223157][ T8420] kworker/u4:12: attempt to access beyond end of device [ 577.223157][ T8420] loop2: rw=1, sector=4169, nr_sectors = 1 limit=64 [ 577.260229][ T8772] FAT-fs (loop1): Directory bread(block 71) failed [ 577.260293][ T4313] hfs: request for non-existent node 327680 in B*Tree [ 577.276721][ T8772] FAT-fs (loop1): Directory bread(block 72) failed [ 577.287875][ T8420] Buffer I/O error on dev loop2, logical block 4169, lost async page write [ 577.287949][ T8772] FAT-fs (loop1): Directory bread(block 73) failed [ 577.309168][ T4313] hfs: request for non-existent node 327680 in B*Tree [ 577.328001][ T8420] kworker/u4:12: attempt to access beyond end of device [ 577.328001][ T8420] loop2: rw=1, sector=4170, nr_sectors = 1 limit=64 [ 577.374986][ T8420] Buffer I/O error on dev loop2, logical block 4170, lost async page write [ 577.383665][ T8420] kworker/u4:12: attempt to access beyond end of device [ 577.383665][ T8420] loop2: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 577.397162][ T8420] Buffer I/O error on dev loop2, logical block 4172, lost async page write [ 577.408087][ T8420] kworker/u4:12: attempt to access beyond end of device [ 577.408087][ T8420] loop2: rw=1, sector=4173, nr_sectors = 1 limit=64 [ 577.435210][ T8420] Buffer I/O error on dev loop2, logical block 4173, lost async page write [ 577.443901][ T8420] kworker/u4:12: attempt to access beyond end of device [ 577.443901][ T8420] loop2: rw=1, sector=4174, nr_sectors = 1 limit=64 [ 577.457524][ T8420] Buffer I/O error on dev loop2, logical block 4174, lost async page write [ 577.466597][ T8420] kworker/u4:12: attempt to access beyond end of device [ 577.466597][ T8420] loop2: rw=1, sector=4175, nr_sectors = 1 limit=64 [ 577.480373][ T8420] Buffer I/O error on dev loop2, logical block 4175, lost async page write [ 577.489161][ T8420] kworker/u4:12: attempt to access beyond end of device [ 577.489161][ T8420] loop2: rw=1, sector=4176, nr_sectors = 1 limit=64 [ 577.502667][ T8420] Buffer I/O error on dev loop2, logical block 4176, lost async page write [ 577.511687][ T8420] kworker/u4:12: attempt to access beyond end of device [ 577.511687][ T8420] loop2: rw=1, sector=4177, nr_sectors = 1 limit=64 [ 577.525172][ T8420] Buffer I/O error on dev loop2, logical block 4177, lost async page write [ 577.534030][ T8420] kworker/u4:12: attempt to access beyond end of device [ 577.534030][ T8420] loop2: rw=1, sector=4178, nr_sectors = 16 limit=64 [ 577.547647][ T8420] kworker/u4:12: attempt to access beyond end of device [ 577.547647][ T8420] loop2: rw=1, sector=4196, nr_sectors = 1 limit=64 [ 577.561107][ T8420] Buffer I/O error on dev loop2, logical block 4196, lost async page write