last executing test programs: 7m43.001484251s ago: executing program 0 (id=2269): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x2, 0x0, 0x2}}, 0x26) 7m42.768199057s ago: executing program 0 (id=2272): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 7m42.572283542s ago: executing program 0 (id=2275): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x13, 0x78bd23, 0xef, {0x0, 0x0, 0x0, r1, {0xfff3, 0xd}, {}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 7m42.441753865s ago: executing program 0 (id=2278): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000805, &(0x7f0000000000)=ANY=[], 0x4, 0x1e9, &(0x7f00000001c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x21) 7m42.2439834s ago: executing program 0 (id=2281): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0xffffffff, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 7m38.797436097s ago: executing program 2 (id=2299): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x3c, r0, 0x1, 0x0, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000894}, 0x24008800) 7m38.572700382s ago: executing program 2 (id=2301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x0, 0x25dfdbfc, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 7m38.296663329s ago: executing program 2 (id=2303): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003500)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4005, @loopback, 0x280021}, 0x1c, &(0x7f0000002c80)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002b80)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000003000)=[{&(0x7f0000002bc0)="3d02", 0x2}], 0x1}}], 0x2, 0x2200c950) 7m38.110682143s ago: executing program 2 (id=2304): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000805, &(0x7f0000000000)=ANY=[], 0x4, 0x1e9, &(0x7f00000001c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x21) 7m37.806457221s ago: executing program 2 (id=2307): unshare(0x20400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x7, 0x0, 0xa0) 7m37.592212196s ago: executing program 0 (id=2308): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000bac"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m36.898977434s ago: executing program 32 (id=2308): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000bac"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7m31.817133031s ago: executing program 2 (id=2332): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019580)=""/102393, &(0x7f0000000000)=0x18ff9) 7m31.204542537s ago: executing program 33 (id=2332): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019580)=""/102393, &(0x7f0000000000)=0x18ff9) 6m4.135654127s ago: executing program 5 (id=2965): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) write$binfmt_aout(r1, 0x0, 0xffffffdb) 6m3.930959122s ago: executing program 5 (id=2968): r0 = mq_open(&(0x7f0000000000)='\x9c-\x00', 0x41, 0x142, 0x0) mq_notify(r0, &(0x7f00000001c0)={0x0, 0x29, 0x1}) mq_notify(r0, &(0x7f0000000180)={0x0, 0x2d, 0x0, @thr={0x0, 0x0}}) 6m3.736720887s ago: executing program 5 (id=2970): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=0x0]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0x11) 6m3.515494703s ago: executing program 5 (id=2972): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000580)={[{@gid}, {@undelete}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@uid_forget}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@volume={'volume', 0x3d, 0xbe5}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x191a461, &(0x7f0000000240)={[{}]}) 6m2.958658117s ago: executing program 5 (id=2975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) 6m2.39789776s ago: executing program 5 (id=2977): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002200), 0x800004, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2ac0b2, &(0x7f0000000200)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]}) 6m1.592708421s ago: executing program 34 (id=2977): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002200), 0x800004, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2ac0b2, &(0x7f0000000200)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]}) 3m27.209757697s ago: executing program 6 (id=4302): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 3m26.077096305s ago: executing program 6 (id=4313): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="c3649be801cfa9d37b32e5a81bd8ef65d2d6ae7c55dce6f28d147bd4743ac27b", @ANYRES16, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7"], 0x1, 0x556c, &(0x7f000000b980)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfb, 0x1) 3m24.129769024s ago: executing program 6 (id=4325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, r1, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) 3m22.429895677s ago: executing program 6 (id=4333): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) 3m22.063268846s ago: executing program 6 (id=4336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xffff888000000000, 0xcb, 0x401, 0x400, 0x0, [{0xfc, 0xad, 0x7, '\x00', 0x3}, {0x2, 0xd7, 0x80, '\x00', 0xde}, {0xfe, 0x1, 0x3}, {0x8, 0x7, 0x3, '\x00', 0x2}, {0xfd, 0xa, 0x8, '\x00', 0x1}, {0x59, 0x7, 0xf, '\x00', 0x6}, {0xc, 0x8, 0x0, '\x00', 0x1}, {0x3, 0xb, 0x8, '\x00', 0x9}, {0x4, 0xf, 0x5, '\x00', 0x3}, {0x3, 0x1, 0x3, '\x00', 0x86}, {0x7, 0x71, 0x8, '\x00', 0x8}, {0x9, 0x3, 0x3, '\x00', 0x16}, {0x4, 0x9, 0x7f}, {0x8, 0xa, 0xa, '\x00', 0x8}, {0x4b, 0x8, 0x1, '\x00', 0x7f}, {0x0, 0x13, 0x0, '\x00', 0x1}, {0x8c, 0xf8, 0xe, '\x00', 0x7e}, {0x3, 0x8, 0x73, '\x00', 0xff}, {0x4, 0xe8, 0x1, '\x00', 0x81}, {0x3, 0x8b, 0xd3, '\x00', 0x4}, {0xfc, 0x6d, 0xf9, '\x00', 0x8}, {0xff, 0x2, 0x1, '\x00', 0x26}, {0xe, 0xce, 0x0, '\x00', 0x1c}, {0x5, 0x8, 0x8, '\x00', 0xd}]}}) 3m21.567319278s ago: executing program 6 (id=4339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3m20.985702273s ago: executing program 35 (id=4339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.725108941s ago: executing program 4 (id=5851): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf, 0x1e}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7f, 0xd036d87fd37a00c5, 0x2}}}}]}, 0x40}}, 0x4000010) 2.604829104s ago: executing program 1 (id=5853): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2", 0x1}], 0x1}}], 0x2, 0x40) 2.456104778s ago: executing program 1 (id=5854): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 2.425502229s ago: executing program 4 (id=5855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a3100"], 0x68}}, 0x0) 2.36779897s ago: executing program 1 (id=5856): syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000200)='./file0\x00', 0x810411, &(0x7f0000000480)=ANY=[], 0x1, 0x201, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 2.140954196s ago: executing program 4 (id=5858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}}, 0x0) 2.044068898s ago: executing program 1 (id=5859): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.853663613s ago: executing program 4 (id=5862): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000580)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@errors_continue}, {@discard}, {@errors_remount}, {@quota}, {@noquota}, {@grpquota}, {@errors_continue}, {@grpquota}]}, 0x24, 0x628f, &(0x7f0000020540)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.57551489s ago: executing program 1 (id=5864): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x3200092, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 1.538037861s ago: executing program 7 (id=5865): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x3, 0x3}) 1.349835696s ago: executing program 7 (id=5866): r0 = socket(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x4, 0x18, 0x8, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 1.272268488s ago: executing program 3 (id=5867): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 1.140148131s ago: executing program 7 (id=5868): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr\x00') getdents64(r0, &(0x7f0000000080)=""/95, 0x5f) getdents(r0, 0xfffffffffffffffd, 0x3b) 1.084177202s ago: executing program 3 (id=5869): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbf9, 0x20}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4) 955.917966ms ago: executing program 3 (id=5870): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1, 0xff01}, 0x10) 926.523807ms ago: executing program 7 (id=5871): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x204083, &(0x7f0000000400)={[{@gid}, {@sys_tz}, {@umask={'umask', 0x3d, 0x1ff}}, {}, {@sys_tz}, {@dmask={'dmask', 0x3d, 0x100}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@time_offset}, {@allow_utime={'allow_utime', 0x3d, 0x3}}, {@sys_tz}, {@time_offset={'time_offset', 0x3d, 0x1}}, {@utf8}, {@discard}, {@discard}, {@errors_continue}]}, 0x1, 0x1532, &(0x7f0000000780)="$eJzs3AuYjtXaOPD7Xms9Y0ya3iY5DGut++FNYpkkySFJDkmSJElOCUlSWxISQ05JQxJyJjmMCclhYtI4n8+HhCRpkiQkp2T9L8Vf7erb+/tqb/vac/+u67nedb/rudez3vd+D+t55vB1x0HVGlSvXI+I4E/Bn2+SASAWAPoBwFUAEABA6YTSCef7c0pM/nMHYX+tB1Mv9wzY5cT1z964/tkb1z974/pnb1z/7I3rn71x/bM3rj9j2dnGafmv5i37bnz9/79fnT/s4e///yJZJUZ/vrrEtZ0AYv7ZFK5/9sb1/68V/DM7cf2zN65/dhV7uSfA/gPw+z87yPGHPVz/7I3rz1h2drmvP1/uDSLZ+zm43K8/xhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPZwyl/iQKAi+3LPS/GGGOMMcYYY4z9dXyOyz0DxhhjjDHGGGOM/eshCJCgIIAYyAGxkBPiQADAlRAPV0EEroYEuAZyw7WQB/JCPsgPiVAACoIGAxYIQigEhSEK10ERuB6Kwg1QDIqDgxKQBDdCSbgJSsHNUBpugTJwK5SFclAeKsBtUBFuh0pwB1SGO6EKVIVqUB3ughpwN9SEe6AW3Au14T6oA/dDXXgA6sGDUB8eggbwMDSER6ARNIYm0BSa/Z/yX4Cu8CJ0g+6QDD2gJ7wEvaA39IG+0A9ehv7wCgyAVyEFBsIgeA0Gw+swBN6AoTAMhsObMAJGwigYDWNgLIyD8TAB3oKJ8DZMgskwBaZCKkyDNHgHpsMMmAnvwix4D2bDHJgL8yAd3of5sAAy4ANYCB9CJiyCxbAElsIyWA4rYCWsgtWwBtbCOlgPG2AjbILNsAW2wjbYDh/BDvgYdsIu2A2fwB749B/mq1/ln/y7/E4ICChQoEKFMRiDsRiLcRiHuTAXxmM8RjCCCZiAuTE35sE8mA/zYSImYkEsiAYNEhIWwkIYxSgWwSJYFItiMSyGDh0mYRKWxJuwFJbC0lgay2AZLIvlsBxWwApYEStiJayElbEyVsEqWA2r4V14F/bAmlgTa2EtrI21L16ewnpYD+tjfWyADbAhNsRG2AibYBNshs2wOTbHFtgCW2ErbI2tsQ22QQSAdtjup1sASO6AHbAjdsRO2Bk7Z72QA/BFfBG7YxXRA3tiT+yFKTn6YF/siy9jf3wFX8FXMQUH4iB8DV/D13EInsChOAyH43CsKEbiKByNJMbiOByHE3ACTsSJOAkn42Sciqk4DdMwDafjDJyB7+IsfA/fwzk4B+dhOqbjfFyAGZiBC/EkZuIiXIxLcCkuw6W4AlfiClyNa3A1rsN1uAE34CbchFtwC27DbfgRKgD8GHfhLkzBPbgH9+Je3If7cD/uxyzMwgN4AA/iQTyEh/AwHsYjeBSP4VE8jsfxBJ7EU3gKz+AZPIvPJX5Z/6MbVqWAOE8JJWJEjIgVsSJOxIlcIpeIF/EiIiIiQSSI3CK3yCPyiHwin0gUiaKgKCiMMIJEGAMAIiqioogoIoqKoqKYKCaccCJJJImSoqQoJUqJ0uIWUUbcKsqKcqKlqyAqiIqilask7hCVRWVRRVQV1UR1UV3UEDVETVFT1BK1RG1RW9QR94u6ogf2wQfF+co0EAOxoRiEjURjIS98gjUXQ7CFaClaicfFMByKbURz11Y8JdqJUfiM+JsYjc+KDmIsdhTPi06is+giXhBdRQvXTXQXk7CH6CmmYi/RW/QRfcV0rCrexVk5q4lXRYoYKAaJ18Q8fF0MEW+IoWKYGC7eFCPESDFKjBZjxFgxTowXE8RbYqJ4W0wSk8UUMVWkimkiTbwjposZYqZ4V8wS74nZYo6YK+aJdPG+mC8WiAzxgVgoPhSZYpFYLJaIpWKZWC5WiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im9guPhI7xMdip9gldotPxB7xqdgrPhP7xOdiv/hCZIkvxQHxlTgovhaHxDfisPhWHBFHxTHxnTguvhcnxElxSpwWZ8QP4qz4UZwTXoBEKaSUSgYyRuaQsTKnjJNXyFwyuPDsXi0T5DUyt7xW5pF5ZT6ZXybKArKg1NJIK0mGspAsLKPyOllEXi+LyhtkMVlcOllCJskbZUl5kywlb5al5S2yjLxVlpXlZHlZQd4mK8rbJUR+PkYVWVVWk9XlXTIZ7pY15T2ylrxX1pb3yTryfllXPiDryQdlffmQbCAflg3lI7KRbCybyKaymXxUNpePyRaypWwlH5et5ROyjXxStpVPyXbSX3iJPCs7yOdkR/m87CQ7yy7yR3lOetlNdpfQA2RP+ZLsJXvLPrKv7Cdflv3lK3KAfFWmyIFykHxNDpavyyHyDTlUDpPD5ZtyhBwpR8nRcowcK8fJ8XKCfEtOlG/LSXKynCKnylQ5Tfa5MNJMKf9h/lu/kz/gp6NvkBvlJrlZbpFb5Ta5XX4kd8gdcqfcKXfL3XKP3CP3yr1yn9wn98v9MktmyQPygDwoD8pD8pA8LA/LI/KoPC2/k8fl9/KEPClPytPyjDwjz154DkChEkoqpQIVo3KoWJVTxakrVC51pYpXV6mIulolqGtUbnWtyqPyqnwqv0pUBVRBpZVRVpEKVSFVWEXVdRc+akEVU8WVUyVUkrrxf5OviqjrVVF1w6/yf54fJCf/wfyaqWaquWquWqgWqpVqpVqr1qqNaqPaqraqnWqnnlHPqPaqveqgOqiOqqPqpDqpLqqL6qq6qm6qm0pWyaqnekn1Ur1VH9VX9VMvq/6qvxqgBqgUlaIGqUFqsBqshqghaqgaqoar4WqEGqFGqVFqjBqjxqlxaoKaoCaqiWqSmqSmqCkqVaWqNJWmpqvpaqaaqWapWWq2mq3mqrkqXaWr+Wq+ylAZaqFaqDLVIrVILVFL1DK1TK1QK9QqtUqtUWvUOrVOZaqNaqParDarrWqr2q62qx1qh9qpdqrdarfao/aovWqv2qf2qf1qv8pSWeqAOqAOqoPqkDqkDqvD6og6oo6pY+q4Oq5OqBPqlDqlzqgz6qw6q86pc+eXfYEIRKACFcQEMUFsEBvEBXFBriBXEB/EB5EgEiQECUHu4NogT5A3yBfkDxKDAkHBQAcmsIG4UPRocF1QJLg+KBrcEBQLigcuKBEkBTcGJYObglLBzUHp4JagTHBrUDYoF5QPKgS3BRWD24NKwR1B5eDOoEpQNagWVA/uCmoEdwc1g3uCWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkZB46BJ0DRo9peO7/2JvI+5brq7TtY9dE/9ku6le+s+uq/up1/W/fUreoB+VafogXqQfk0P1q/rIfoNPVQP08P1m3qEHqlH6dF6jB6rx+nxeoJ+S0/Ub+tJerKeoqfqVD1Np+l39HQ9Q8/U7+pZ+j09W8/Rc/U8na7f1/P1Ap2hP9AL9Yc6Uy/Si/USvVQv08v1Cr1Sr9Kr9Rq9Vq/T6/UGvVFv0pv1Fr1Vb9Pb9Ud6h/5Y79S79G79id6jP9V79Wd6n/5c79df6Cz9pT6gv9IH9df6kP5GH9bf6iP6qD6mv9PH9ff6hD6pT+nT+oz+QZ/VP+pz2p9f3J//ejfKKBNjYkysiTVxJs7kMrlMvIk3ERMxCSbB5Da5TR6Tx+Qz+UyiSTQFTUFzHhkyhUwhEzVRU8QUMUVNUVPMFDPOOJNkkkxJU9KUMqVMaVPalDFlTFlT1pQ35c1t5jZzu7nd3GHuMHeaO01VU9VUN9VNDVPD1DQ1TS1Ty9Q2tU0dU8fUNXVNPVPP1Df1TQPTwDQ0DU0j08g0MU1MM9PMNDfNTQvTwrQyrUxr09q0MW1MW9PWtDPtzDPmGdPetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDPJJtn0ND1NL9PL9DF9TD/Tz/Q3/c0AM8CkmBQzyAwyg81gM8QMMUPNMDP8/ELVjDSjzGgzxow148w4M8FMMBPNRDPJTDJTzBSTalJNmkkz0810M9PMNLPMLDPbzDZzzVyTbtLNfDPfZJgMs9AsNJkm0yw2i81Ss9QsN8vNSrPSrDarzVpYa9ab9Waj2Wg2m81mq9lqtpvtZofZYXaanWa32W32mD1mr9lr9pl9Zr/Zb7JMljlgDpiD5qA5ZA6Zw+awOWKOmGPmmDlujpsT5oQ5ZU6ZMybvhe9Lb2JtThtnr7C57JU23l5l/z7OZ/PbRFvAFrTa5rF5fxUba21Re4MtZotbZ0vYJHvjb+KytpwtbyvY22xFe7ut9Ju4hr3b1rT32Fr2Xlvd3vWruLa9z9axD9u651f3trGtb5vaBvZh29A+YhvZxraJbWpb2ydsG/ukbWufsu3s07+J59sFdqVdZVfbNXan3WVP2dP2oP3anrE/2G62u+1nX7b97St2gH3VptiBv4mH2zftCDvSjrKj7Rg79jfxFDvVptppNs2+Y6fbGb+J0+37dpbNsLPtHDvXzvspPj+nDPuBXWg/tJk2gMV2iV1ql9nldsX/n+sSu86utxvsDvux3Wy32K12m91+cSFsd9nd9hO7x35qD9iv7D77ud1vD9ks++VP8fnHd8h+Yw/bb+0Re9Qes9/Z4/Z79VPuyF4A9gf7nf3RnrPeAiEBSVIUUAzloFjKSXF0BeWiKymerqIIXU0JdA3lpmspD+WlfJSfEqkAFSRNhiwRhVSIClOUrqOL0ytGxclRCUqiG6kk3USl6GYqTbdQGbqVylI5Kk8V6DaqSLdTJbqDKtOdVIWqUjWqTndRDbqbatI9VIvupdp0H9Wh+6kuPUD16EGqTw9RA3qYGtIj1IgaUxNqSs3oUWpOj1ELakmt6HFqTU9QG3qS2tJT1I6epmfob9SenqUO9Bx1pOepE3WmLvQCdaUXqRt1p2TqQT3pJepFvakP9aV+9DL1p1doAL1KKTSQBtFrNJhepyH0Bg2lYTSc3qQRNJJG0WgaQ2NpHI2nCfQWTaS3aRJNpik0lVJpGqXROzSdZtBMepdm0Xs0m+bQXJpH6fQ+zacFlEEf0EL6kDJpES2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20Xb6iHbQx7STdtFu+oT20Ke0lz6jffQ57acvKIu+pAP0FR2kr+kQfeO707d0hI7SMfqOjtP3dIJO0ik6TWfoBzpLP9I58gQhhiKUoQqDMCbMEcaGOcO48IowV3hlGB9eFUbCq8OE8Jowd3htmCfMG+YL84eJYYGwYKhDE9qQwjAsFBYOo+F1YZHw+rBoiGGxsHjowhJhUnhjWDK8KSwV3hyWDm8Jy4S3hmXDcuHD91YIbwsrhreHlcI7wsrhnWGVsGpYLawe3hXWCO8Oa4b3hLXCe8NS4X1hnfD+sG74QFgvfDCsHz4UNggfDhuGj4SNwsZhk7Bp2Cx8NGwePha2CFuGrcLHw9bhE2Gb8MmwbfhU2C58+qf++xb8cX9y2CPsGb4UvhR6f4+cG50XTY++H50fXRDNiH4QXRj9MJoZXRRdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q9b56DnDohJNOucDFuBwu1uV0ce4Kl8td6eLdVS7irnYJ7hqX213r8ri8Lp/L7xJdAVfQaWecdeRCV8gVdlF3nSvirndF3Q2umCvunCvhklxT18w1c83dY66Fa+laucfd4+4J94R70j3pnnLt3NPuGfc319496zq459xz7nnXyXV2XdwLrqsbH3/hwojr6Xq6Xq6X6+P6uH6un+vv+rsBboBLcSlukBvkBrvBbogb4oa6oW64G+5GuBFulBvl0i6cIE5wE9xEN9FNcpPcFDfFpbpUl+bS3HQ33VWc8fM+s91sN9fNdeku3c1359eMGW6hW+gyXaZb7Ba7pW6pW+6Wu5VupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrsdbofb6a/6eVC3x+11e90+t8/td1+4LPelO+C+cgfd1+6Q+8Yddt+6I+6oO+a+c8fd9+6EO+lOudPujPvBnXU/unPOu3GR8ZEJkbciEyNvRyZFJkemRKZGUiPTImmRdyLTIzMiMyPvRmZF3ovMjsyJzI3Mi6RH3o/MjyyIZEQ+iCyMfBjJjCyKLI4siSyNLIt4X2Bz6Av5wj7qr/NF/PW+qL/BF/PFvfMlfJK/0Zf0N/lS/mZf2t/iy/hbfVlfzpf3j/hGvrFv4pv6Zv5R39w/5lv4lr6Vf9y39k/4Nv5J39Y/5dv5p/0z/m++vX/Wd/DP+Y7+ed/Jd/Zd/Au+q3/Rd/PdfbLv4Xv6l3wv39v38X19P/+y7+9f8QP8qz7FD/SD/Gt+sH/dD/Fv+KF+mB8e86YfcfEUGcb6cX68n+Df8hP9236Sn+yn+Kk+1U/zaf4dP93P8DP9u36Wf8/P9nP8XD/Pp/v3/Xy/wGf4D/xC/6HP9IsuXlT2y/0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9R36H/9jv9Lv8bv+J3+M/9Xv9Z36f/9zv91/4LP+lP+C/8gf91/6Q/8Yf9t/6I/6oP+a/88f99/6EP+lP+dP+jP/Bn/U/+nP8N2uMMcYYY/+U8Zea4tc9P1/O7/E7OeIXO/cEgCu35M/6Zf/5FeXaPD+3e4vE1hEAeKp7xwcvblWqJCcnX9g3U0JQeA7AxZ8EnRcDl+JF0AqegLbQEkr+7vx7i85n6B+MH70FIO4XObFwKb40/mcAmPw74z/6+PD5ZcJTCf/D+HMAiha+lJMTLsWLoNVP11daQqk/mH/e5r+cf+xvx8/5+TiAFr/IyQWX4kvzT4LH4Glo+6s9GWOMMcYYY4yxn/UW5dtfPP+8+Bufv3d+nqgu5eSAS/E/Oj9njDHGGGOMMcbY5fds5y5PPtq2bcv2//tGpf9T1j/daAj/qpH/RCP+8/+IafxLGt4DXLxHAcCfHBDgfEP+Ox/Fpn/LsVIuvHX+vmvpaR/Af0Yp/4rGZf5gYowxxhhjjP3lLi36f32/ulwTYowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGsqF/x78Tu9yPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvc/l8AAAD//+ea/iU=") capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 833.713789ms ago: executing program 4 (id=5872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000900), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0x4084) 741.553391ms ago: executing program 3 (id=5873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r1, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 555.038346ms ago: executing program 7 (id=5874): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a000802"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000440)=""/140, 0x8c}], 0x5}}], 0x3ffffffffffff61, 0x2, 0x0) 498.028358ms ago: executing program 3 (id=5875): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x40681) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xffffffffffffffff, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="ea329c4cb5ea", 0x0, 0x3, 0x13, 0x1, 0x0}) 312.104182ms ago: executing program 7 (id=5876): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f00000001c0)=[{0xfffb, 0x0, 0x0, 0x0}], 0x1}) 278.139463ms ago: executing program 3 (id=5877): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 151.415786ms ago: executing program 1 (id=5878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x8001}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4814}, 0x840) 0s ago: executing program 4 (id=5879): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x4e20, @loopback}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e28, @remote}}) kernel console output (not intermixed with test programs): rectory [ 609.117399][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 609.125634][ C1] lec:lec_tx_timeout: lec0 [ 609.130529][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 609.378694][T18643] loop7: detected capacity change from 0 to 32768 [ 609.378930][T18655] loop1: detected capacity change from 0 to 4096 [ 609.482597][T18643] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 609.725518][ T27] IPVS: starting estimator thread 0... [ 609.781180][T18643] XFS (loop7): Ending clean mount [ 609.791625][T18643] XFS (loop7): Quotacheck needed: Please wait. [ 609.838392][T18666] IPVS: using max 19 ests per chain, 45600 per kthread [ 609.948965][T18643] XFS (loop7): Quotacheck: Done. [ 610.001984][T18669] loop4: detected capacity change from 0 to 1024 [ 610.027809][T16906] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 610.091703][T18653] loop3: detected capacity change from 0 to 32768 [ 610.130778][T18653] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 610.249246][T18653] JBD2: Ignoring recovery information on journal [ 610.450881][T18653] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 610.597830][T18678] loop1: detected capacity change from 0 to 4096 [ 610.615988][T18678] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 610.792090][T18678] ntfs: volume version 3.1. [ 610.955802][T18678] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1250. You might want to try to use the mount option nls=utf8. [ 610.989177][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 611.003488][T18678] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 611.478223][T18691] team0: entered allmulticast mode [ 611.483455][T18691] team_slave_0: entered allmulticast mode [ 611.537578][T18691] team_slave_1: entered allmulticast mode [ 612.491925][T18706] loop4: detected capacity change from 0 to 4096 [ 612.501393][T18695] loop3: detected capacity change from 0 to 32768 [ 612.520380][T18706] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 612.541836][T18695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4893 (18695) [ 612.575030][T18706] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 612.606775][T18695] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 612.624229][T18695] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 612.654819][T18695] BTRFS info (device loop3): setting nodatacow, compression disabled [ 612.682577][T18695] BTRFS info (device loop3): turning on flush-on-commit [ 612.694225][T18706] ntfs: volume version 3.1. [ 612.710754][T18695] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 612.748770][T18695] BTRFS info (device loop3): use lzo compression, level 0 [ 612.767729][T18695] BTRFS info (device loop3): setting nodatasum [ 612.773993][T18695] BTRFS info (device loop3): use no compression [ 612.800526][T18706] ntfs: (device loop4): map_mft_record_page(): Attempt to read mft record 0x8000b, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 612.818305][T18695] BTRFS info (device loop3): trying to use backup root at mount time [ 612.827754][T18695] BTRFS info (device loop3): max_inline at 0 [ 612.844150][T18695] BTRFS info (device loop3): using free space tree [ 612.854605][T18706] ntfs: (device loop4): map_mft_record(): Failed with error code 2. [ 612.875568][T18706] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x8000b as bad. Run chkdsk. [ 612.919957][T18699] loop7: detected capacity change from 0 to 32768 [ 612.995093][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 613.030426][T17001] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 613.107854][T18695] BTRFS warning (device loop3): couldn't read tree root [ 613.124794][T18695] BTRFS warning (device loop3): try to load backup roots slot 1 [ 613.139589][T18701] loop1: detected capacity change from 0 to 40427 [ 613.178607][T14607] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 613.228611][T18701] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 613.236468][T18695] BTRFS warning (device loop3): couldn't read tree root [ 613.251612][T18701] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 613.268242][T18695] BTRFS warning (device loop3): try to load backup roots slot 2 [ 613.276616][ T1145] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 613.307931][T18701] F2FS-fs (loop1): invalid crc value [ 613.340985][T18695] BTRFS warning (device loop3): couldn't read tree root [ 613.387539][T18695] BTRFS warning (device loop3): try to load backup roots slot 3 [ 613.444701][T18701] F2FS-fs (loop1): Found nat_bits in checkpoint [ 613.507854][T18695] BTRFS info (device loop3): enabling ssd optimizations [ 613.535891][T18695] BTRFS info (device loop3): auto enabling async discard [ 613.594614][T18695] BTRFS info (device loop3): rebuilding free space tree [ 613.683549][T18695] BTRFS info (device loop3): checking UUID tree [ 613.775540][T18701] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 613.787632][T18701] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 613.971097][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 614.155851][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 614.163990][ C1] lec:lec_tx_timeout: lec0 [ 614.168894][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 614.572616][T18746] loop3: detected capacity change from 0 to 256 [ 614.601279][T18746] exfat: Deprecated parameter 'utf8' [ 614.606658][T18746] exfat: Deprecated parameter 'utf8' [ 614.657257][T18746] exfat: Deprecated parameter 'namecase' [ 614.663031][T18746] exfat: Deprecated parameter 'namecase' [ 614.761797][T18746] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 615.499325][T18747] loop4: detected capacity change from 0 to 40427 [ 615.528046][T18747] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 615.534481][T18747] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 615.575668][T18747] F2FS-fs (loop4): invalid crc value [ 615.715725][T18747] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 615.747218][T18747] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 615.831727][T18753] loop1: detected capacity change from 0 to 32768 [ 616.411289][T18767] loop3: detected capacity change from 0 to 1024 [ 616.470881][T18767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.649959][T18777] loop4: detected capacity change from 0 to 256 [ 616.650453][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.668483][T18777] exfat: Deprecated parameter 'utf8' [ 616.673947][T18777] exfat: Deprecated parameter 'namecase' [ 616.682421][T18777] exfat: Deprecated parameter 'namecase' [ 616.689368][T18777] exfat: Deprecated parameter 'namecase' [ 616.779698][T18777] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 616.916853][ T28] audit: type=1804 audit(2000000155.518:564): pid=18777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4915" name=2F6E6577726F6F742F3131352F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop4" ino=1048919 res=1 errno=0 [ 617.122016][T18786] loop3: detected capacity change from 0 to 2048 [ 617.168851][T18786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.186874][T18786] ext4 filesystem being mounted at /1314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.239506][T18786] EXT4-fs error (device loop3): ext4_ext_check_inode:532: inode #12: comm syz.3.4924: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2049, max 4(4), depth 0(0) [ 617.443051][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.021468][T18792] loop1: detected capacity change from 0 to 32768 [ 618.036463][T18792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.4926 (18792) [ 618.057392][ T5804] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 618.081112][T18792] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 618.096115][T18792] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 618.129784][T18792] BTRFS info (device loop1): using free space tree [ 618.168342][ T5816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.261063][ T5804] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 618.277074][T18792] BTRFS info (device loop1): enabling ssd optimizations [ 618.283783][ T5804] usb 4-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.284089][T18792] BTRFS info (device loop1): auto enabling async discard [ 618.315184][ T5804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 618.332436][ T5804] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 618.352271][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.382310][ T5804] usb 4-1: config 0 descriptor?? [ 618.415444][T18798] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 618.487722][T18803] loop4: detected capacity change from 0 to 32768 [ 618.516433][T18803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4931 (18803) [ 618.535347][ T5773] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 618.591245][T18803] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 618.604931][T18803] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 618.622490][T18803] BTRFS info (device loop4): turning on sync discard [ 618.633509][T18803] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 618.650823][T18803] BTRFS info (device loop4): use zstd compression, level 3 [ 618.664699][T18803] BTRFS info (device loop4): turning on async discard [ 618.704371][T18803] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 618.741781][T18803] BTRFS info (device loop4): trying to use backup root at mount time [ 618.769557][T18803] BTRFS info (device loop4): max_inline at 4096 [ 618.797114][T18803] BTRFS info (device loop4): enabling ssd optimizations [ 618.804198][T18803] BTRFS info (device loop4): using free space tree [ 618.902735][ T5804] a4tech 0003:09DA:022B.001B: unbalanced collection at end of report description [ 618.913677][ T5804] a4tech 0003:09DA:022B.001B: parse failed [ 618.955180][ T5804] a4tech: probe of 0003:09DA:022B.001B failed with error -22 [ 618.997225][ T3535] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 619.038428][T18803] BTRFS error (device loop4): failed to load root extent [ 619.046537][T18803] BTRFS warning (device loop4): try to load backup roots slot 1 [ 619.071466][ T3535] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 619.085474][T18803] BTRFS warning (device loop4): couldn't read tree root [ 619.093563][T18803] BTRFS warning (device loop4): try to load backup roots slot 2 [ 619.102607][ T32] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 619.164411][T18803] BTRFS warning (device loop4): couldn't read tree root [ 619.176894][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 619.185010][ C1] lec:lec_tx_timeout: lec0 [ 619.188375][T18803] BTRFS warning (device loop4): try to load backup roots slot 3 [ 619.190585][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 619.217493][ T5816] usb 4-1: USB disconnect, device number 23 [ 619.288117][T18803] BTRFS info (device loop4): rebuilding free space tree [ 619.324278][T18803] BTRFS info (device loop4): checking UUID tree [ 619.612512][T17001] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 619.914576][T18821] loop1: detected capacity change from 0 to 32768 [ 620.094034][T18821] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 620.214440][T18821] XFS (loop1): Ending clean mount [ 620.262935][ T5804] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 620.336885][ T5804] XFS (loop1): Unmount and run xfs_repair [ 620.342723][ T5804] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 620.397516][ T5804] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 620.433737][ T5804] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 620.459440][ T5804] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 620.493772][ T5804] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 620.558457][ T5804] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 620.590409][ T5804] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 620.632645][ T5804] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 620.662295][ T5804] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 620.692573][T18821] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 620.718123][T18821] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 620.781832][T18821] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 621.383903][T18864] loop7: detected capacity change from 0 to 40427 [ 621.409027][T18864] F2FS-fs (loop7): invalid crc value [ 621.431862][T18864] F2FS-fs (loop7): Found nat_bits in checkpoint [ 621.462944][ T5773] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 621.561156][T18869] block nbd4: NBD_DISCONNECT [ 621.592014][T18869] bio_check_eod: 6 callbacks suppressed [ 621.592066][T18869] syz.4.4950: attempt to access beyond end of device [ 621.592066][T18869] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 621.613487][T18866] loop3: detected capacity change from 0 to 32768 [ 621.630454][T18869] exFAT-fs (nbd4): unable to read boot sector [ 621.640194][T18866] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4941 (18866) [ 621.671953][T18869] exFAT-fs (nbd4): failed to read boot sector [ 621.697634][T18869] exFAT-fs (nbd4): failed to recognize exfat type [ 621.742633][T18866] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 621.775385][T18866] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 621.786358][T18864] F2FS-fs (loop7): Start checkpoint disabled! [ 621.830233][T18866] BTRFS info (device loop3): setting nodatacow, compression disabled [ 621.869261][T18866] BTRFS info (device loop3): disabling tree log [ 621.908574][T18866] BTRFS info (device loop3): turning on async discard [ 621.926543][T18866] BTRFS info (device loop3): max_inline at 0 [ 621.927258][T18864] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 621.974194][T18866] BTRFS info (device loop3): using free space tree [ 622.109239][ T28] audit: type=1800 audit(2000000160.719:565): pid=18864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4940" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 622.116545][T18875] loop4: detected capacity change from 0 to 256 [ 622.272285][T18875] exfat: Deprecated parameter 'utf8' [ 622.448597][T18875] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 622.468576][ T28] audit: type=1800 audit(2000000161.079:566): pid=18866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4941" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 622.654234][ T3535] kworker/u4:9: attempt to access beyond end of device [ 622.654234][ T3535] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 622.720122][ T3535] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 622.752216][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 622.755005][ T3535] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 623.021923][T18897] loop1: detected capacity change from 0 to 256 [ 623.054878][T18897] exfat: Deprecated parameter 'utf8' [ 623.086795][T18897] exfat: Deprecated parameter 'namecase' [ 623.092695][T18897] exfat: Deprecated parameter 'namecase' [ 623.107336][T18897] exfat: Deprecated parameter 'namecase' [ 623.192163][T18901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4949'. [ 623.270669][T18897] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 623.392246][T18899] loop3: detected capacity change from 0 to 4096 [ 623.457537][T18899] NILFS (loop3): invalid segment: Checksum error in segment payload [ 623.486312][ T28] audit: type=1804 audit(2000000162.079:567): pid=18897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4948" name=2F6E6577726F6F742F313234372F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop1" ino=1048922 res=1 errno=0 [ 623.497608][T18899] NILFS (loop3): trying rollback from an earlier position [ 623.694184][T18899] NILFS (loop3): recovery complete [ 623.754454][T18904] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 623.860801][T18907] loop4: detected capacity change from 0 to 64 [ 623.931043][ T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.022479][T18907] syz.4.4953: attempt to access beyond end of device [ 624.022479][T18907] loop4: rw=0, sector=412, nr_sectors = 2 limit=64 [ 624.088429][T18907] Trying to free block not in datazone [ 624.132236][T18907] syz.4.4953: attempt to access beyond end of device [ 624.132236][T18907] loop4: rw=0, sector=412, nr_sectors = 2 limit=64 [ 624.184844][T18907] Buffer I/O error on dev loop4, logical block 206, async page read [ 624.206931][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 624.215116][ C1] lec:lec_tx_timeout: lec0 [ 624.219861][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 624.229945][ T28] audit: type=1800 audit(2000000162.809:568): pid=18907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4953" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 624.485981][T18917] loop7: detected capacity change from 0 to 512 [ 624.528897][T18917] EXT4-fs: Ignoring removed bh option [ 624.577237][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.583899][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.622521][T18921] loop3: detected capacity change from 0 to 1024 [ 624.653083][T18923] sch_fq: defrate 2 ignored. [ 624.718229][T18917] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.800515][T18917] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.924032][T18917] EXT4-fs error (device loop7): ext4_ext_check_inode:532: inode #2: comm syz.7.4957: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 625.027151][T18917] EXT4-fs (loop7): Remounting filesystem read-only [ 625.126246][T16906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.501402][T18942] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 625.765344][T18930] loop3: detected capacity change from 0 to 32768 [ 625.881875][ T28] audit: type=1800 audit(2000000164.489:569): pid=18930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4961" name="file1" dev="loop3" ino=3 res=0 errno=0 [ 626.289590][T18958] loop4: detected capacity change from 0 to 1024 [ 626.380084][T18958] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 626.606862][T18944] loop7: detected capacity change from 0 to 32768 [ 626.707743][T18944] ERROR: (device loop7): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 626.707743][T18944] [ 626.755467][T18944] ERROR: (device loop7): remounting filesystem as read-only [ 627.354604][T18956] loop3: detected capacity change from 0 to 32768 [ 627.470203][T18956] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 627.642079][T18956] XFS (loop3): Ending clean mount [ 627.777040][ T5816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.886665][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 627.973708][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4987'. [ 628.022666][T18967] loop4: detected capacity change from 0 to 40427 [ 628.091813][T18967] F2FS-fs (loop4): invalid crc value [ 628.103676][T18967] F2FS-fs (loop4): Found nat_bits in checkpoint [ 628.255209][T18967] F2FS-fs (loop4): Start checkpoint disabled! [ 628.362385][T18967] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 628.740550][T18990] loop7: detected capacity change from 0 to 32768 [ 628.764890][T19002] loop1: detected capacity change from 0 to 1024 [ 628.793140][T18990] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.4985 (18990) [ 628.882134][T18990] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 628.907545][T18990] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 628.922136][ T60] kworker/u4:4: attempt to access beyond end of device [ 628.922136][ T60] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 628.932433][T18990] BTRFS info (device loop7): setting nodatacow, compression disabled [ 628.955341][T18990] BTRFS info (device loop7): disabling tree log [ 628.963514][T18990] BTRFS info (device loop7): turning on async discard [ 628.968858][ T60] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 628.982824][ T60] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 629.000456][T18990] BTRFS info (device loop7): max_inline at 0 [ 629.028974][T18990] BTRFS info (device loop7): using free space tree [ 629.042121][T19004] loop3: detected capacity change from 0 to 2048 [ 629.121068][T19004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.156072][T19004] ext4 filesystem being mounted at /1327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.236520][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 629.244846][ C1] lec:lec_tx_timeout: lec0 [ 629.252334][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 629.505548][ T28] audit: type=1800 audit(2000000168.099:570): pid=18990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4985" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 629.582323][T19021] overlayfs: Failed to create volatile/dirty file. [ 629.694266][T14607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.744692][T16906] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 629.909373][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.934465][T19029] loop1: detected capacity change from 0 to 1024 [ 630.437551][T19036] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.4998'. [ 630.614739][T19042] loop7: detected capacity change from 0 to 512 [ 630.628095][T19042] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 630.718034][T19042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 630.727696][T19042] System zones: 1-12 [ 630.751621][T19042] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.4995: bad orphan inode 131072 [ 630.766614][T19042] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.806356][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 630.872432][T16906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.018413][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 631.056552][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.070142][ T9] usb 2-1: config 0 descriptor?? [ 631.515111][ T9] kone 0003:1E7D:2CED.001C: item fetching failed at offset 2/6 [ 631.534051][ T9] kone 0003:1E7D:2CED.001C: parse failed [ 631.546735][ T9] kone: probe of 0003:1E7D:2CED.001C failed with error -22 [ 631.760823][ T5816] usb 2-1: USB disconnect, device number 33 [ 631.903112][T19068] loop7: detected capacity change from 0 to 4096 [ 631.972362][T19075] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 631.995884][T19074] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5015'. [ 632.009196][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5015'. [ 632.052008][T19077] PKCS8: Unsupported PKCS#8 version [ 632.460189][T19083] loop7: detected capacity change from 0 to 4096 [ 632.634326][T19083] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 633.129237][T19079] loop4: detected capacity change from 0 to 32768 [ 633.177918][T19079] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5017 (19079) [ 633.263813][T19096] loop1: detected capacity change from 0 to 1764 [ 633.274180][T19079] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 633.321654][T19098] loop7: detected capacity change from 0 to 128 [ 633.342568][T19079] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 633.378337][T19079] BTRFS info (device loop4): using free space tree [ 633.578230][T19087] loop3: detected capacity change from 0 to 32768 [ 633.602542][T19087] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.5020 (19087) [ 633.650006][T19079] BTRFS info (device loop4): enabling ssd optimizations [ 633.664246][T19087] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 633.684878][T19079] BTRFS info (device loop4): auto enabling async discard [ 633.692193][T19087] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 633.692250][T19087] BTRFS info (device loop3): using free space tree [ 633.966795][T17001] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 633.999917][T19087] BTRFS info (device loop3): enabling ssd optimizations [ 634.037885][T19087] BTRFS info (device loop3): auto enabling async discard [ 634.266021][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 634.274122][ C1] lec:lec_tx_timeout: lec0 [ 634.286068][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 634.509200][ T5776] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 635.108326][T19160] loop4: detected capacity change from 0 to 256 [ 635.186978][T19160] exfat: Deprecated parameter 'namecase' [ 635.192801][T19160] exfat: Deprecated parameter 'namecase' [ 635.359391][T19160] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 635.446815][T14607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.245610][T19184] usb usb9: usbfs: process 19184 (syz.7.5051) did not claim interface 3 before use [ 636.279157][T19164] loop3: detected capacity change from 0 to 32768 [ 636.312917][T19164] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.5040 (19164) [ 636.330666][T19186] loop1: detected capacity change from 0 to 2048 [ 636.387825][T19186] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 636.404666][T19164] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 636.431062][T19164] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 636.449759][T19164] BTRFS info (device loop3): using free space tree [ 636.462669][T19186] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 636.487429][T19186] UDF-fs: Scanning with blocksize 512 failed [ 636.575188][T19186] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 636.757833][T19186] overlayfs: upper fs needs to support d_type. [ 636.866386][T19186] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 636.875699][T19186] overlayfs: failed to set xattr on upper [ 636.882106][T19186] overlayfs: ...falling back to redirect_dir=nofollow. [ 636.894927][T19186] overlayfs: ...falling back to metacopy=off. [ 636.903868][T19186] overlayfs: ...falling back to index=off. [ 636.906804][T19164] BTRFS info (device loop3): enabling ssd optimizations [ 636.910427][T19186] overlayfs: ...falling back to uuid=null. [ 636.951646][T19164] BTRFS info (device loop3): auto enabling async discard [ 637.174488][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 637.254449][T19214] loop7: detected capacity change from 0 to 2048 [ 637.364005][T19214] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.379452][T17474] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 637.426817][T19214] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.628613][T19214] overlayfs: Failed to create volatile/dirty file. [ 637.677535][T19223] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 637.844684][T16906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.342874][T19242] loop3: detected capacity change from 0 to 128 [ 638.352888][T19238] loop7: detected capacity change from 0 to 2048 [ 638.396115][T19242] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 638.423684][T19238] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 638.451088][T19242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 638.467458][T19238] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 638.485882][T19238] UDF-fs: Scanning with blocksize 512 failed [ 638.613012][T19238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 638.728235][T19238] overlayfs: upper fs needs to support d_type. [ 638.758488][T19238] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 638.786411][T19238] overlayfs: failed to set xattr on upper [ 638.797430][T19238] overlayfs: ...falling back to redirect_dir=nofollow. [ 638.835967][T19238] overlayfs: ...falling back to metacopy=off. [ 638.852831][T19238] overlayfs: ...falling back to index=off. [ 638.877500][T19238] overlayfs: ...falling back to uuid=null. [ 639.173942][ T28] audit: type=1326 audit(2000000177.779:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19257 comm="syz.3.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 639.276272][ T28] audit: type=1326 audit(2000000177.819:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19257 comm="syz.3.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 639.364163][ T28] audit: type=1326 audit(2000000177.839:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19257 comm="syz.3.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 639.464173][ T28] audit: type=1326 audit(2000000177.839:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19257 comm="syz.3.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 639.524363][ T28] audit: type=1326 audit(2000000177.839:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19257 comm="syz.3.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 639.639492][ T28] audit: type=1326 audit(2000000177.839:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19257 comm="syz.3.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 639.726198][ T28] audit: type=1326 audit(2000000177.839:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19257 comm="syz.3.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 640.103678][T19285] vcan0: Master is either lo or non-ether device [ 640.110477][ T27] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 640.307983][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.329485][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.355860][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 640.384084][ T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 640.403557][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.445127][ T27] usb 4-1: config 0 descriptor?? [ 640.465809][T17065] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 640.575616][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6310 ms [ 640.583830][ C1] lec:lec_tx_timeout: lec0 [ 640.588947][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 640.595233][ T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.696354][T17065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.730913][T17065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.755343][T17065] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 640.777422][T17065] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 640.787427][T17065] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.810017][T17065] usb 5-1: config 0 descriptor?? [ 640.847071][T19300] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5097'. [ 640.874360][T19300] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5097'. [ 640.924139][ T27] plantronics 0003:047F:FFFF.001D: item fetching failed at offset 12/15 [ 640.972663][ T27] plantronics 0003:047F:FFFF.001D: parse failed [ 641.003109][ T27] plantronics: probe of 0003:047F:FFFF.001D failed with error -22 [ 641.107683][T19304] nftables ruleset with unbound set [ 641.155653][T17474] usb 4-1: USB disconnect, device number 24 [ 641.272791][T17065] plantronics 0003:047F:FFFF.001E: unbalanced delimiter at end of report description [ 641.291281][T17065] plantronics 0003:047F:FFFF.001E: parse failed [ 641.325892][T17065] plantronics: probe of 0003:047F:FFFF.001E failed with error -22 [ 641.436242][ T28] audit: type=1326 audit(2000000180.040:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19309 comm="syz.7.5101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8f9e019 code=0x7ffc0000 [ 641.502204][T17065] usb 5-1: USB disconnect, device number 17 [ 641.515862][ T28] audit: type=1326 audit(2000000180.050:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19309 comm="syz.7.5101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8f9e019 code=0x7ffc0000 [ 641.546978][ T28] audit: type=1326 audit(2000000180.070:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19309 comm="syz.7.5101" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8f9e019 code=0x7ffc0000 [ 641.672741][T19315] loop7: detected capacity change from 0 to 128 [ 642.280656][T19333] ALSA: seq fatal error: cannot create timer (-22) [ 642.473058][T19335] loop3: detected capacity change from 0 to 512 [ 642.527240][T19335] EXT4-fs: Ignoring removed nobh option [ 642.579492][T19335] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 642.665761][T19335] EXT4-fs (loop3): 1 truncate cleaned up [ 642.684271][T19335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.730484][T19345] loop4: detected capacity change from 0 to 512 [ 642.848004][T19345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.923869][T19345] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.966696][T19345] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 105 vs 96 free clusters [ 642.993489][T19353] loop1: detected capacity change from 0 to 2048 [ 643.016764][T19353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 643.189729][T19353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.253106][T17001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.309650][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.560302][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.953151][T19375] loop7: detected capacity change from 0 to 2048 [ 644.010056][T19375] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 644.037123][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5126'. [ 644.078899][T19375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 644.112557][T19382] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5127'. [ 644.423370][T19388] loop1: detected capacity change from 0 to 512 [ 644.586886][T19388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.704539][T19388] ext4 filesystem being mounted at /1307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.790689][T19388] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 105 vs 96 free clusters [ 645.027082][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.258849][T19417] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5773] was attempted by "\x22"[19417] [ 646.047715][T19431] loop1: detected capacity change from 0 to 4096 [ 646.155006][T19413] loop4: detected capacity change from 0 to 32768 [ 646.232081][T19413] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.5139 (19413) [ 646.286940][T19442] loop3: detected capacity change from 0 to 512 [ 646.298651][T19440] loop7: detected capacity change from 0 to 256 [ 646.325299][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 646.330285][ T1031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.333369][ C1] lec:lec_tx_timeout: lec0 [ 646.348943][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 646.364675][T19413] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 646.403543][T19413] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 646.417891][T19440] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 646.462831][T19413] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 646.487729][T19442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 646.516054][T19413] BTRFS info (device loop4): enabling auto defrag [ 646.522601][T19413] BTRFS info (device loop4): use no compression [ 646.565741][T19442] ext4 filesystem being mounted at /1351/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.585661][T19413] BTRFS info (device loop4): max_inline at 0 [ 646.591743][T19413] BTRFS info (device loop4): using free space tree [ 646.885555][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 646.915704][T19413] BTRFS info (device loop4): enabling ssd optimizations [ 646.926969][T19413] BTRFS info (device loop4): auto enabling async discard [ 646.965827][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 647.279169][T17001] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 647.704341][T19483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5156'. [ 647.899212][T19487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5159'. [ 648.244392][T19492] loop4: detected capacity change from 0 to 1024 [ 648.840800][T19485] loop7: detected capacity change from 0 to 40427 [ 648.870352][T19485] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 648.916027][T19485] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 648.999043][T19485] F2FS-fs (loop7): Found nat_bits in checkpoint [ 649.252568][T19485] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 649.265536][T19485] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 649.460764][T19525] loop1: detected capacity change from 0 to 2048 [ 649.515688][T19525] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 649.579354][T19525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 650.205337][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 650.258818][T19546] loop7: detected capacity change from 0 to 64 [ 650.413185][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 650.430886][ T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 650.455612][ T9] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 650.477330][ T9] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.505186][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 650.511956][ T9] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 650.535192][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.546209][ T9] usb 2-1: config 0 descriptor?? [ 650.552018][T19537] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 651.007856][T19559] loop7: detected capacity change from 0 to 256 [ 651.028383][ T9] asus 0003:048D:CE50.001F: ignoring exceeding usage max [ 651.079019][ T9] asus 0003:048D:CE50.001F: unknown main item tag 0xe [ 651.088291][T19561] loop4: detected capacity change from 0 to 64 [ 651.097312][T19559] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 651.129776][ T9] asus 0003:048D:CE50.001F: unknown main item tag 0x2 [ 651.168253][ T9] asus 0003:048D:CE50.001F: hidraw0: USB HID v0.0c Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input0 [ 651.242196][ T9] usb 2-1: USB disconnect, device number 34 [ 651.501792][T19568] loop4: detected capacity change from 0 to 256 [ 651.520182][T19564] fido_id[19564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 651.532273][T19570] loop3: detected capacity change from 0 to 256 [ 651.667545][T19570] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 651.771565][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 651.771582][ T28] audit: type=1326 audit(2000000190.380:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19573 comm="syz.7.5198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8f9e019 code=0x7ffc0000 [ 651.935301][ T28] audit: type=1326 audit(2000000190.410:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19573 comm="syz.7.5198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f0bc8f9e019 code=0x7ffc0000 [ 652.026748][ T28] audit: type=1326 audit(2000000190.410:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19573 comm="syz.7.5198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8f9e019 code=0x7ffc0000 [ 652.085433][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 652.093571][ C1] lec:lec_tx_timeout: lec0 [ 652.098840][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 652.108748][ T1031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.170262][ T28] audit: type=1326 audit(2000000190.410:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19573 comm="syz.7.5198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc8f9e019 code=0x7ffc0000 [ 652.251208][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 652.337860][T19586] loop4: detected capacity change from 0 to 4096 [ 652.348638][T19586] EXT4-fs: Ignoring removed i_version option [ 652.354713][T19586] EXT4-fs: Ignoring removed oldalloc option [ 652.403516][T19586] EXT4-fs (loop4): Test dummy encryption mode enabled [ 652.436935][T19586] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 652.802691][T19593] loop3: detected capacity change from 0 to 2048 [ 652.868558][T19593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.966780][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.571590][T19586] loop4: detected capacity change from 0 to 32768 [ 653.608204][T19586] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.5203 (19586) [ 653.624990][T17476] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 653.654055][T19586] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 653.668265][T19586] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 653.690412][T19586] BTRFS info (device loop4): using free space tree [ 653.827595][T17476] usb 4-1: Using ep0 maxpacket: 16 [ 653.864441][T19586] BTRFS info (device loop4): enabling ssd optimizations [ 653.871838][T19586] BTRFS info (device loop4): auto enabling async discard [ 653.897286][T17476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 653.915650][T17476] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 653.950322][T17476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.977574][T17476] usb 4-1: config 0 descriptor?? [ 654.205735][T17001] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 654.252350][T19646] tmpfs: Cannot disable swap on remount [ 654.431211][T17476] dragonrise 0003:0079:0011.0020: unknown main item tag 0x4 [ 654.480755][T17476] dragonrise 0003:0079:0011.0020: unknown main item tag 0xd [ 654.507089][T17476] dragonrise 0003:0079:0011.0020: hidraw0: USB HID v9.42 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 654.557954][T19651] loop7: detected capacity change from 0 to 256 [ 654.587176][T19651] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 654.651824][ T5785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (5785) [ 654.657564][T19651] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 654.707616][T17476] usb 4-1: USB disconnect, device number 25 [ 654.769584][T19651] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 654.838842][T19654] fido_id[19654]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 655.590302][T19669] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 656.099364][ T28] audit: type=1326 audit(2000000194.710:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19683 comm="syz.3.5238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 656.123546][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.142452][ T28] audit: type=1326 audit(2000000194.710:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19683 comm="syz.3.5238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 656.181351][ T28] audit: type=1326 audit(2000000194.710:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19683 comm="syz.3.5238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 656.219284][ T28] audit: type=1326 audit(2000000194.710:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19683 comm="syz.3.5238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 656.243417][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.260582][ T28] audit: type=1326 audit(2000000194.710:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19683 comm="syz.3.5238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 656.308970][ T28] audit: type=1326 audit(2000000194.710:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19683 comm="syz.3.5238" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 656.570078][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 656.827569][T19675] loop7: detected capacity change from 0 to 32768 [ 656.884476][T19675] (syz.7.5234,19675,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 656.935454][T19675] (syz.7.5234,19675,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 657.011001][T19705] loop1: detected capacity change from 0 to 256 [ 657.065609][T19675] JBD2: Ignoring recovery information on journal [ 657.104992][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 657.113242][ C1] lec:lec_tx_timeout: lec0 [ 657.118030][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 657.145486][T19702] loop3: detected capacity change from 0 to 8192 [ 657.162145][T19702] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 657.193473][T19702] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 657.236282][T19702] REISERFS (device loop3): using ordered data mode [ 657.243117][T19702] reiserfs: using flush barriers [ 657.325789][T19702] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 657.353291][T19675] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 657.379757][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 657.405869][T19702] REISERFS (device loop3): checking transaction log (loop3) [ 657.778328][T16906] ocfs2: Unmounting device (7,7) on (node local) [ 657.850355][ T1031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.901035][T19702] REISERFS (device loop3): Using tea hash to sort names [ 657.928856][T19702] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 658.713738][T19717] loop4: detected capacity change from 0 to 32768 [ 658.721763][T19717] XFS: attr2 mount option is deprecated. [ 658.818938][T19717] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 658.835250][T19735] netlink: 'syz.1.5260': attribute type 5 has an invalid length. [ 658.859827][T19727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.993725][T19717] XFS (loop4): Ending clean mount [ 659.042411][T19717] XFS (loop4): Quotacheck needed: Please wait. [ 659.209961][T19717] XFS (loop4): Quotacheck: Done. [ 659.507930][T17001] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 659.660861][T19755] loop1: detected capacity change from 0 to 512 [ 659.729831][T19758] tmpfs: Cannot retroactively limit inodes [ 659.785063][T19755] EXT4-fs (loop1): 1 truncate cleaned up [ 659.866099][T19755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.969104][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 659.969122][ T28] audit: type=1800 audit(2000000198.581:603): pid=19755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5270" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 660.001528][T19755] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.5270: bg 0: block 465: padding at end of block bitmap is not set [ 660.054192][T19755] EXT4-fs (loop1): Remounting filesystem read-only [ 660.151621][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.215051][T19767] loop7: detected capacity change from 0 to 256 [ 660.222754][T19767] exfat: Deprecated parameter 'utf8' [ 660.301869][T19767] exfat: Deprecated parameter 'namecase' [ 660.358343][T19767] exfat: Deprecated parameter 'utf8' [ 660.403598][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5275'. [ 660.423175][T17476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 660.497898][T19767] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 660.529892][T19775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5276'. [ 661.880902][T19817] loop3: detected capacity change from 0 to 128 [ 661.948097][T19817] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 662.036952][T19817] ext4 filesystem being mounted at /1398/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 662.124412][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 662.132705][ C1] lec:lec_tx_timeout: lec0 [ 662.137533][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 662.273390][T19804] loop4: detected capacity change from 0 to 40427 [ 662.314325][T19804] F2FS-fs (loop4): invalid crc value [ 662.348522][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 662.392197][T19804] F2FS-fs (loop4): Found nat_bits in checkpoint [ 662.610797][T19804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 662.637466][T19835] loop7: detected capacity change from 0 to 256 [ 663.055416][T19841] loop7: detected capacity change from 0 to 256 [ 663.156276][T19841] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 663.606061][ T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 663.792852][T19851] bridge1: entered promiscuous mode [ 663.816727][T19851] bridge1: entered allmulticast mode [ 663.904508][T19851] team0: Port device bridge1 added [ 664.900292][T19881] loop4: detected capacity change from 0 to 128 [ 665.005917][T19881] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 665.043907][T19881] ext4 filesystem being mounted at /211/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 665.197311][T19890] xt_l2tp: v2 tid > 0xffff: 1114116 [ 665.371211][T17001] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 665.560294][T19901] loop4: detected capacity change from 0 to 164 [ 665.705741][T19896] loop7: detected capacity change from 0 to 4096 [ 665.841532][T19904] loop3: detected capacity change from 0 to 256 [ 665.893399][T19896] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 665.931227][T19904] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 667.144444][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 667.152601][ C1] lec:lec_tx_timeout: lec0 [ 667.157536][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 667.372467][T19947] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 667.420962][T19947] tipc: Enabled bearer , priority 10 [ 667.469269][ T28] audit: type=1326 audit(2000000206.071:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19948 comm="syz.3.5353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 667.544340][ T28] audit: type=1326 audit(2000000206.071:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19948 comm="syz.3.5353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 667.624533][ T28] audit: type=1326 audit(2000000206.111:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19948 comm="syz.3.5353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd37539e019 code=0x7ffc0000 [ 667.652236][T19949] loop3: detected capacity change from 0 to 4096 [ 667.665005][T19932] loop4: detected capacity change from 0 to 32768 [ 667.672509][T19953] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5355'. [ 667.681859][T19949] EXT4-fs: Ignoring removed mblk_io_submit option [ 667.683057][ T28] audit: type=1326 audit(2000000206.111:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19948 comm="syz.3.5353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd37539dd82 code=0x7ffc0000 [ 667.716377][T19932] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.5345 (19932) [ 667.734380][T19949] EXT4-fs (loop3): Test dummy encryption mode enabled [ 667.746109][ T28] audit: type=1326 audit(2000000206.131:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19948 comm="syz.3.5353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd37535e84e code=0x7ffc0000 [ 667.791454][T19932] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 667.794611][ T28] audit: type=1326 audit(2000000206.211:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19948 comm="syz.3.5353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd37539de47 code=0x7ffc0000 [ 667.827920][ T28] audit: type=1326 audit(2000000206.261:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19948 comm="syz.3.5353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd37535e84e code=0x7ffc0000 [ 667.840103][ T5878] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 667.853896][ T28] audit: type=1326 audit(2000000206.261:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19948 comm="syz.3.5353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd37539dcab code=0x7ffc0000 [ 667.886425][T19932] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 667.902247][T19932] BTRFS info (device loop4): using free space tree [ 667.938623][ T28] audit: type=1326 audit(2000000206.281:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19948 comm="syz.3.5353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd37535e84e code=0x7ffc0000 [ 667.964575][T19949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.009269][ T28] audit: type=1326 audit(2000000206.281:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19948 comm="syz.3.5353" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd37535e84e code=0x7ffc0000 [ 668.063337][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.194390][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 668.201996][ T5878] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 668.211019][ T5878] usb 2-1: config 179 has no interface number 0 [ 668.218284][ T5878] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 668.226096][T19932] BTRFS info (device loop4): enabling ssd optimizations [ 668.232187][ T5878] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 668.251247][ T5878] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 668.273411][ T5878] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 668.300996][T19932] BTRFS info (device loop4): auto enabling async discard [ 668.353379][ T5878] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 668.384465][ T5878] usb 2-1: config 179 interface 65 has no altsetting 0 [ 668.424240][ T27] tipc: Node number set to 3762356222 [ 668.434628][ T5878] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 668.462002][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.586553][ T5878] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input38 [ 668.675404][ T5124] input input38: unable to receive magic message: -110 [ 668.818191][ T5816] usb 2-1: USB disconnect, device number 35 [ 668.818424][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 668.834039][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 668.887317][ T5816] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 669.080597][T17001] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 669.253278][ T5785] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop4 scanned by udevd (5785) [ 669.366097][ T1031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.005744][ T5816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.333289][T20010] bridge0: entered promiscuous mode [ 670.360627][T20010] bridge0: entered allmulticast mode [ 670.507171][T20010] team0: Port device bridge0 added [ 670.798556][T20020] loop4: detected capacity change from 0 to 1024 [ 670.819794][T20020] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 670.897078][T20020] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.5376: lblock 2 mapped to illegal pblock 2 (length 1) [ 670.916235][T20020] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.5376: lblock 0 mapped to illegal pblock 48 (length 1) [ 671.011078][T20020] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.5376: Failed to acquire dquot type 0 [ 671.097663][T20020] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 671.101614][T19998] loop1: detected capacity change from 0 to 32768 [ 671.149614][T20020] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.5376: mark_inode_dirty error [ 671.168910][T19998] XFS: attr2 mount option is deprecated. [ 671.201314][T20020] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 671.245861][T20020] EXT4-fs (loop4): 1 orphan inode deleted [ 671.255090][T19998] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 671.270750][T20020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.288529][ T3535] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 671.317954][ T3535] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 671.397387][T20020] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.5376: Invalid inode table block 1 in block_group 0 [ 671.455294][T20020] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 671.505671][T19998] XFS (loop1): Ending clean mount [ 671.515045][T19998] XFS (loop1): Quotacheck needed: Please wait. [ 671.613709][T17001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.657940][T20043] loop3: detected capacity change from 0 to 4096 [ 671.661788][T17001] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 671.684029][T19998] XFS (loop1): Quotacheck: Done. [ 671.743996][T20043] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 671.773092][T17001] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 671.803676][T17001] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 672.018234][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 672.164148][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 672.172241][ C1] lec:lec_tx_timeout: lec0 [ 672.176941][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 672.678551][T20067] loop4: detected capacity change from 0 to 256 [ 673.029933][T20056] loop7: detected capacity change from 0 to 32768 [ 673.093450][T20056] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 673.341133][T20056] XFS (loop7): Ending clean mount [ 673.736610][T20091] loop3: detected capacity change from 0 to 64 [ 674.062507][T16906] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 674.105679][ T5816] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 674.133800][ T5816] XFS (loop7): Unmount and run xfs_repair [ 674.156864][ T5816] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 674.183962][ T5816] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 674.221256][ T5816] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 674.247318][ T5816] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 674.261104][T20099] geneve0: entered promiscuous mode [ 674.274664][ T5816] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 674.283612][ T5816] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 674.300097][ T5816] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 674.310287][T20099] geneve0: left promiscuous mode [ 674.325640][ T5816] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 674.348089][ T5816] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 674.358943][ T5878] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 674.417879][ T5878] XFS (loop7): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xc7d/0x1230 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 674.464051][ T5878] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 674.967402][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5415'. [ 675.020626][T20119] loop7: detected capacity change from 0 to 512 [ 675.130737][ T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.150715][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5416'. [ 675.160283][T20123] netlink: 'syz.4.5416': attribute type 5 has an invalid length. [ 675.193022][T20119] EXT4-fs error (device loop7): dx_probe:823: inode #2: comm syz.7.5406: Directory hole found for htree index block 0 [ 675.215260][T20119] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 675.227364][T20119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.359236][T16906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.617084][T20131] loop3: detected capacity change from 0 to 8192 [ 675.645598][T20131] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 675.659066][T20131] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 675.668813][T20131] REISERFS (device loop3): using ordered data mode [ 675.676353][T20131] reiserfs: using flush barriers [ 675.689494][T20131] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 675.707470][T20131] REISERFS (device loop3): checking transaction log (loop3) [ 675.759912][T20133] loop7: detected capacity change from 0 to 1024 [ 675.772982][ T3535] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.854510][T20133] EXT4-fs: Ignoring removed bh option [ 675.916381][T20133] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 675.965275][T20131] REISERFS (device loop3): Using tea hash to sort names [ 676.000291][T20131] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 676.017720][T20133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.386729][T16906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.633721][ T27] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 676.693145][ T5878] kernel write not supported for file /516/attr/keycreate (pid: 5878 comm: kworker/1:4) [ 676.814143][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 676.821782][ T27] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 676.840916][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 676.850026][ T27] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 676.864937][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.882429][ T27] usb 5-1: config 0 descriptor?? [ 677.184031][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 677.192180][ C1] lec:lec_tx_timeout: lec0 [ 677.196896][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 677.224048][T20174] hub 8-0:1.0: USB hub found [ 677.242224][T20174] hub 8-0:1.0: 1 port detected [ 677.337686][ T27] gt683r_led 0003:1770:FF00.0021: hidraw0: USB HID v0.81 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 677.620561][ T5804] usb 5-1: USB disconnect, device number 18 [ 677.645528][ T27] gt683r_led 0003:1770:FF00.0021: failed to send set report request: -19 [ 677.845971][T20185] loop7: detected capacity change from 0 to 2048 [ 677.878187][T20190] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 678.402347][T20202] loop1: detected capacity change from 0 to 256 [ 678.559839][T20202] exFAT-fs (loop1): failed to read sector(0x100) [ 678.603648][T20202] exFAT-fs (loop1): failed to load upcase table [ 678.610119][T20202] exFAT-fs (loop1): failed to recognize exfat type [ 678.756770][T20211] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5453'. [ 678.787154][T20211] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5453'. [ 679.011156][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5457'. [ 679.040303][T20221] loop4: detected capacity change from 0 to 512 [ 679.041742][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5457'. [ 679.089693][T20221] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 679.099223][T20220] netlink: 'syz.7.5457': attribute type 11 has an invalid length. [ 679.157014][T20221] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 679.226397][T20221] EXT4-fs (loop4): orphan cleanup on readonly fs [ 679.255053][T20221] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4059: comm syz.4.5459: Allocating blocks 41-42 which overlap fs metadata [ 679.322729][T20221] EXT4-fs (loop4): Remounting filesystem read-only [ 679.346431][T20221] __quota_error: 16 callbacks suppressed [ 679.346451][T20221] Quota error (device loop4): write_blk: dquota write failed [ 679.413247][T20221] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 679.458851][T20221] EXT4-fs (loop4): 1 truncate cleaned up [ 679.488246][T20221] EXT4-fs (loop4): pa ffff88805ba99cb0: logic 1, phys. 41, len 23 [ 679.507280][T20221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 679.645629][T20235] loop7: detected capacity change from 0 to 64 [ 679.675340][T17001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.748755][T20235] syz.7.5465: attempt to access beyond end of device [ 679.748755][T20235] loop7: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 679.793924][T20235] Buffer I/O error on dev loop7, logical block 512, async page read [ 679.802407][T20235] syz.7.5465: attempt to access beyond end of device [ 679.802407][T20235] loop7: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 679.870207][T20239] loop3: detected capacity change from 0 to 512 [ 679.886638][T20235] Buffer I/O error on dev loop7, logical block 56576, async page read [ 679.907544][T20239] EXT4-fs: Ignoring removed i_version option [ 679.961465][T20239] EXT4-fs: Ignoring removed oldalloc option [ 679.981797][T20239] EXT4-fs (loop3): Test dummy encryption mode enabled [ 679.996446][T20239] EXT4-fs (loop3): 1 truncate cleaned up [ 680.007300][T20239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.054931][T17476] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 680.265086][T17476] usb 2-1: Using ep0 maxpacket: 8 [ 680.282447][T17476] usb 2-1: unable to get BOS descriptor or descriptor too short [ 680.296146][T17476] usb 2-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 680.308102][T17476] usb 2-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 680.311201][T17476] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 680.311235][T17476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.311259][T17476] usb 2-1: Product: syz [ 680.311277][T17476] usb 2-1: Manufacturer: syz [ 680.311294][T17476] usb 2-1: SerialNumber: syz [ 680.370591][ T27] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 680.426554][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.557730][T17476] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 680.579972][ T27] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 680.595251][ T27] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 680.610976][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 680.627636][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 680.639499][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 680.669185][ T27] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 680.687945][ T27] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 680.717984][ T27] usb 5-1: Product: syz [ 680.722256][ T27] usb 5-1: Manufacturer: syz [ 680.734992][T20254] loop3: detected capacity change from 0 to 4096 [ 680.761027][ T27] cdc_wdm 5-1:1.0: skipping garbage [ 680.773402][ T27] cdc_wdm 5-1:1.0: skipping garbage [ 680.784810][T20254] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 680.797754][ T27] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 680.806275][ T27] cdc_wdm 5-1:1.0: Unknown control protocol [ 680.827461][T20254] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 680.848020][T20254] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 680.860582][T20254] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 680.887357][ T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 680.903921][T20254] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 680.932078][T20254] ntfs: volume version 3.1. [ 680.944449][T20254] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 680.963955][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 680.989864][T20254] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 681.031798][T20254] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 681.051038][ T27] usb 5-1: USB disconnect, device number 19 [ 681.113707][T17476] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 681.355362][T17476] usb 2-1: unable to get BOS descriptor or descriptor too short [ 681.391364][T17476] usb 2-1: device firmware changed [ 681.435465][T17476] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 681.453495][T17476] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 681.461664][ T5816] usb 2-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 681.481825][ T5816] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 681.516900][T17476] usb 2-1: USB disconnect, device number 36 [ 681.929573][T20260] loop7: detected capacity change from 0 to 32768 [ 681.950371][T20260] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.5476 (20260) [ 681.987110][T20260] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 682.000925][T20260] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 682.004186][T17474] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 682.028106][T20260] BTRFS info (device loop7): using free space tree [ 682.125337][T20260] BTRFS info (device loop7): enabling ssd optimizations [ 682.132385][T20260] BTRFS info (device loop7): auto enabling async discard [ 682.203682][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 682.211824][ C1] lec:lec_tx_timeout: lec0 [ 682.217077][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 682.223594][T17474] usb 5-1: Using ep0 maxpacket: 16 [ 682.264609][T17474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.290818][T17474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.329577][T17474] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 682.382663][T17474] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 682.412450][T17474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.447551][T17474] usb 5-1: config 0 descriptor?? [ 682.461323][T16906] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 682.715303][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5487'. [ 682.742828][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5487'. [ 682.753026][T20300] netlink: 'syz.1.5487': attribute type 13 has an invalid length. [ 682.781419][T20300] netlink: 'syz.1.5487': attribute type 12 has an invalid length. [ 682.915684][T17474] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 682.923033][T17474] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 682.957222][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 682.966035][T17474] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 682.977965][T17474] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 682.987318][T17474] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 682.994997][T17474] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 683.021068][T17474] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 683.029092][T17474] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 683.046564][T17474] microsoft 0003:045E:07DA.0022: No inputs registered, leaving [ 683.110148][T17474] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 683.132243][T17474] microsoft 0003:045E:07DA.0022: no inputs found [ 683.140394][T17474] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway [ 683.161057][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 683.195692][T20306] devtmpfs: Too few inodes for current use [ 683.213692][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 683.234736][ T9] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 683.251067][T17474] usb 5-1: USB disconnect, device number 20 [ 683.265191][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.347340][ T9] usb 4-1: config 0 descriptor?? [ 683.501545][T20308] fido_id[20308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 683.837866][ T9] thrustmaster 0003:044F:B323.0023: unknown main item tag 0x4 [ 683.876781][ T9] thrustmaster 0003:044F:B323.0023: unknown main item tag 0xd [ 683.910668][ T9] thrustmaster 0003:044F:B323.0023: hidraw0: USB HID v9.42 Device [HID 044f:b323] on usb-dummy_hcd.3-1/input0 [ 683.944867][ T9] thrustmaster 0003:044F:B323.0023: no inputs found [ 684.088004][ T9] usb 4-1: USB disconnect, device number 26 [ 684.433978][T20316] loop7: detected capacity change from 0 to 32768 [ 684.484360][T20316] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 684.567430][T20316] XFS (loop7): Ending clean mount [ 684.780448][T16906] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 685.317012][T20350] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5505'. [ 685.346754][T20350] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5505'. [ 685.407286][T20352] loop4: detected capacity change from 0 to 512 [ 685.487841][T20352] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 685.541737][T20352] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #11: comm syz.4.5506: corrupted inode contents [ 685.612264][T20352] EXT4-fs error (device loop4): ext4_dirty_inode:6144: inode #11: comm syz.4.5506: mark_inode_dirty error [ 685.641108][T20352] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5506: invalid indirect mapped block 1 (level 1) [ 685.660940][T20352] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #11: comm syz.4.5506: corrupted inode contents [ 685.675742][T20352] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 685.692803][T20352] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #11: comm syz.4.5506: corrupted inode contents [ 685.717398][T20352] EXT4-fs error (device loop4): ext4_truncate:4302: inode #11: comm syz.4.5506: mark_inode_dirty error [ 685.745734][T20352] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 685.764728][T20352] EXT4-fs (loop4): 1 truncate cleaned up [ 685.782160][T20352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.904312][T20352] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.5506: path /254/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 686.018770][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.025534][T17474] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 686.038411][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.057135][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 686.133875][T17001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.279399][T20364] loop7: detected capacity change from 0 to 512 [ 686.287252][T20358] loop3: detected capacity change from 0 to 32768 [ 686.314807][T20364] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 686.340597][T20358] (syz.3.5507,20358,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 686.364635][T20364] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 686.383784][T20358] (syz.3.5507,20358,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 686.408270][T20364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 686.424891][T20364] System zones: 1-12 [ 686.438892][T20364] EXT4-fs (loop7): 1 truncate cleaned up [ 686.449062][T20358] JBD2: Ignoring recovery information on journal [ 686.468466][T20364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.625382][T20358] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 686.645950][T14607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 686.647968][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 686.648006][ T28] audit: type=1800 audit(2000000225.252:636): pid=20364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5511" name="mnt" dev="loop7" ino=18 res=0 errno=0 [ 686.802081][T16906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.153953][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 687.223004][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 687.231106][ C1] lec:lec_tx_timeout: lec0 [ 687.236167][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 687.446518][T20389] loop3: detected capacity change from 0 to 512 [ 687.488157][T20389] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 687.526577][T20389] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 687.551372][T20389] EXT4-fs (loop3): orphan cleanup on readonly fs [ 687.635793][T20389] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.5516: Allocating blocks 41-42 which overlap fs metadata [ 687.727210][T20389] EXT4-fs (loop3): Remounting filesystem read-only [ 687.783440][T20389] Quota error (device loop3): write_blk: dquota write failed [ 687.791762][T20389] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 687.838825][T20389] EXT4-fs (loop3): 1 truncate cleaned up [ 687.856400][T20389] EXT4-fs (loop3): pa ffff88805ba99cb0: logic 1, phys. 41, len 23 [ 687.875852][T20389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 687.929786][T20396] loop4: detected capacity change from 0 to 4096 [ 688.033167][T20399] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 688.120301][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.684131][T20411] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 688.747703][T20383] loop1: detected capacity change from 0 to 32768 [ 688.790637][T20413] loop4: detected capacity change from 0 to 512 [ 688.882625][T20383] diRead: diIAGRead returned -5 [ 688.890794][T20413] EXT4-fs (loop4): orphan cleanup on readonly fs [ 688.957322][T20413] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #4: comm syz.4.5532: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 688.979027][T20413] EXT4-fs error (device loop4): ext4_quota_enable:7147: comm syz.4.5532: Bad quota inode: 4, type: 1 [ 688.998347][T20413] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 689.020675][T20413] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 689.037544][T20413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 689.151385][T20413] EXT4-fs error (device loop4): ext4_lookup:1855: inode #2: comm syz.4.5532: 'file0' linked to parent dir [ 689.346643][T17001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.483582][T20424] loop1: detected capacity change from 0 to 1024 [ 689.509806][T20426] loop4: detected capacity change from 0 to 256 [ 689.593068][T17474] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 689.724143][T20424] hfsplus: found bad thread record in catalog [ 689.782955][T17474] usb 8-1: Using ep0 maxpacket: 16 [ 689.799626][T17474] usb 8-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 689.843355][T17474] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 689.891676][T17474] usb 8-1: config 0 interface 0 has no altsetting 0 [ 689.924750][ T60] hfsplus: found bad thread record in catalog [ 689.944046][T17474] usb 8-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 689.979947][T17474] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.013512][T17474] usb 8-1: config 0 descriptor?? [ 690.379394][T20443] loop4: detected capacity change from 0 to 1024 [ 690.433362][T20443] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 690.463823][T17474] apple 0003:05AC:0241.0024: ignoring exceeding usage max [ 690.495145][T17474] apple 0003:05AC:0241.0024: hidraw0: USB HID v0.02 Device [HID 05ac:0241] on usb-dummy_hcd.7-1/input0 [ 690.543731][T20443] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.5546: lblock 2 mapped to illegal pblock 2 (length 1) [ 690.635143][T20443] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 690.654625][T20443] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.5546: lblock 0 mapped to illegal pblock 48 (length 1) [ 690.704625][T20443] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 690.758330][T20450] loop3: detected capacity change from 0 to 256 [ 690.763568][T20443] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.5546: Failed to acquire dquot type 0 [ 690.780197][T17474] usb 8-1: USB disconnect, device number 2 [ 690.828819][T20443] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 690.870710][T20443] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.5546: mark_inode_dirty error [ 690.885111][T20443] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 690.902607][T20443] EXT4-fs (loop4): 1 orphan inode deleted [ 690.915271][T20443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.932932][ T3535] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 690.969532][ T3535] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 691.017359][ T3535] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 0 [ 691.041479][T20443] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.5546: Invalid inode table block 1 in block_group 0 [ 691.168865][T17001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.200094][T20437] loop1: detected capacity change from 0 to 32768 [ 691.213092][T17001] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 691.239321][T17001] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 691.262167][T17001] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 691.327332][T20437] ea_get: invalid extended attribute [ 691.349554][T20437] ffff88805bb095b0: 04 00 00 00 .... [ 691.359936][T20452] loop3: detected capacity change from 0 to 4096 [ 691.447171][T20437] ea_get: invalid extended attribute [ 691.452556][T20437] ffff88805bb095b0: 04 00 00 00 .... [ 691.595735][T20452] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 691.714108][T20452] ntfs3: loop3: ino=5, "/" attr_set_size [ 691.763584][T14607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 692.217978][T20468] openvswitch: netlink: Actions may not be safe on all matching packets [ 692.255617][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 692.263787][ C1] lec:lec_tx_timeout: lec0 [ 692.268576][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 692.403622][ T3535] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 692.853343][T20477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5561'. [ 692.887367][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5561'. [ 692.979415][T20460] loop1: detected capacity change from 0 to 32768 [ 692.999785][T20464] loop3: detected capacity change from 0 to 32768 [ 693.078481][T20460] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 693.134862][T20464] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 693.251996][T20460] XFS (loop1): Ending clean mount [ 693.446589][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 693.474647][T20464] XFS (loop3): Ending clean mount [ 693.547705][T20464] XFS (loop3): Quotacheck needed: Please wait. [ 693.579574][T20472] loop7: detected capacity change from 0 to 32768 [ 693.746602][T20464] XFS (loop3): Quotacheck: Done. [ 693.751834][T20472] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 693.890790][T20472] XFS (loop7): Ending clean mount [ 694.126367][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 694.296204][T16906] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 694.850632][T20523] loop1: detected capacity change from 0 to 256 [ 694.906280][T20525] loop7: detected capacity change from 0 to 512 [ 694.936210][T20523] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 695.022244][T20525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 695.073476][T20530] program syz.1.5575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.083267][T20525] ext4 filesystem being mounted at /289/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 695.148350][T16906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 695.291300][T20532] loop4: detected capacity change from 0 to 1024 [ 695.307112][T20532] EXT4-fs: Invalid gid value -1 [ 695.804723][T20544] loop7: detected capacity change from 0 to 256 [ 696.158626][T20553] loop7: detected capacity change from 0 to 8 [ 696.263925][T20557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5586'. [ 696.288735][T20556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5586'. [ 696.555143][T20565] loop1: detected capacity change from 0 to 8 [ 696.634630][T20565] SQUASHFS error: lzo decompression failed, data probably corrupt [ 696.671015][T20565] SQUASHFS error: Failed to read block 0x91: -5 [ 696.691270][T20565] SQUASHFS error: Unable to read metadata cache entry [8f] [ 696.707593][T20565] SQUASHFS error: Unable to read inode 0x11f [ 697.128833][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5597'. [ 697.524350][T14607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.082430][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 698.090588][ C1] lec:lec_tx_timeout: lec0 [ 698.095615][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 698.163001][ T1145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.352963][T20611] netlink: 'syz.3.5612': attribute type 5 has an invalid length. [ 698.443598][T20615] loop7: detected capacity change from 0 to 1024 [ 698.471729][T20616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5614'. [ 698.501959][T20615] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 698.699397][T20594] loop4: detected capacity change from 0 to 32768 [ 698.804464][T20594] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 698.974488][T20594] XFS (loop4): Ending clean mount [ 699.267905][T20637] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5620'. [ 699.274964][T17001] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 700.166062][T20641] loop3: detected capacity change from 0 to 32768 [ 700.208130][T20641] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.5623 (20641) [ 700.287516][T20641] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 700.322875][T20641] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 700.362902][T20641] BTRFS info (device loop3): using free space tree [ 700.634789][T20641] BTRFS info (device loop3): enabling ssd optimizations [ 700.641840][T20641] BTRFS info (device loop3): auto enabling async discard [ 701.170892][ T5776] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 701.592487][T17474] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 701.785351][T17474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.853166][T17474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.884219][T17474] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.919254][T17474] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.940552][T20690] loop1: detected capacity change from 0 to 32768 [ 701.949704][T17474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.016414][T17474] usb 5-1: config 0 descriptor?? [ 702.516455][T17474] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 702.607517][T17474] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 702.792892][ T9] usb 5-1: USB disconnect, device number 21 [ 702.846396][T20722] loop3: detected capacity change from 0 to 1024 [ 703.102113][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 703.110246][ C1] lec:lec_tx_timeout: lec0 [ 703.115087][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 703.284322][ T1031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.923309][ T3535] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.247496][T20734] loop3: detected capacity change from 0 to 32768 [ 704.290134][T20734] read_mapping_page failed! [ 704.327062][T20734] ERROR: (device loop3): txCommit: [ 704.327062][T20734] [ 704.399928][T20734] ERROR: (device loop3): remounting filesystem as read-only [ 704.432585][T20734] ERROR: (device loop3): diFree: numfree > numinos [ 704.432585][T20734] [ 704.547661][T20759] tmpfs: Cannot disable swap on remount [ 704.999867][T20768] tipc: Enabling of bearer rejected, failed to enable media [ 705.068455][T20771] loop1: detected capacity change from 0 to 512 [ 705.165278][T20771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.178140][T20771] ext4 filesystem being mounted at /1429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.337800][T20756] loop4: detected capacity change from 0 to 32768 [ 705.390703][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.400867][T20756] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 705.429599][T20783] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 705.499506][T20756] XFS (loop4): Ending clean mount [ 705.583214][ T5804] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 705.640891][T17001] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 705.660155][T20790] loop3: detected capacity change from 0 to 256 [ 705.717770][T20790] FAT-fs (loop3): Directory bread(block 1285) failed [ 705.731079][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.738541][T20790] FAT-fs (loop3): Directory bread(block 1286) failed [ 705.747399][T20790] FAT-fs (loop3): Directory bread(block 1287) failed [ 705.756777][T20790] FAT-fs (loop3): Directory bread(block 1288) failed [ 705.856506][ T5804] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 705.893226][ T5804] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 705.941745][ T5804] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 705.979749][ T5804] usb 8-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 706.017248][ T5804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.032999][ T5804] usb 8-1: config 0 descriptor?? [ 706.046919][T20776] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 706.287994][T20796] loop4: detected capacity change from 0 to 24 [ 706.479658][ T5804] uclogic 0003:5543:0004.0026: unknown main item tag 0x2 [ 706.521541][ T5804] uclogic 0003:5543:0004.0026: unknown main item tag 0x4 [ 706.542277][ T5804] uclogic 0003:5543:0004.0026: unknown main item tag 0x0 [ 706.549482][ T5804] uclogic 0003:5543:0004.0026: unknown main item tag 0x0 [ 706.578406][ T5804] uclogic 0003:5543:0004.0026: unknown main item tag 0x0 [ 706.599198][ T5804] uclogic 0003:5543:0004.0026: unknown main item tag 0x0 [ 706.616843][ T5804] uclogic 0003:5543:0004.0026: unknown main item tag 0x0 [ 706.632413][ T5804] uclogic 0003:5543:0004.0026: item fetching failed at offset 28/40 [ 706.650490][ T5804] uclogic 0003:5543:0004.0026: parse failed [ 706.667272][ T5804] uclogic: probe of 0003:5543:0004.0026 failed with error -22 [ 706.702379][ T5804] usb 8-1: USB disconnect, device number 3 [ 706.805857][T20807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 707.160699][T20816] loop4: detected capacity change from 0 to 4096 [ 707.206635][T20819] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 707.317076][ T28] audit: type=1800 audit(2000000245.923:637): pid=20816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5689" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 707.736294][T20829] loop4: detected capacity change from 0 to 2048 [ 707.768768][T20829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 707.978791][T20833] veth1_macvtap: left promiscuous mode [ 707.988479][T20833] macsec0: entered promiscuous mode [ 708.060949][T20833] veth1_macvtap: entered promiscuous mode [ 708.078235][T20833] macsec0: left promiscuous mode [ 708.121895][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 708.130156][ C1] lec:lec_tx_timeout: lec0 [ 708.134873][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 708.670371][T20850] loop4: detected capacity change from 0 to 4096 [ 708.682401][T20850] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 708.816371][T20850] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 708.873358][T20857] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[16906] was attempted by " [ 709.054261][T17001] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 709.070811][ T1145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 709.230746][T20862] loop7: detected capacity change from 0 to 64 [ 709.292399][T20864] kAFS: unable to lookup cell 'sէKyy [ 709.292399][T20864] [ 709.292399][T20864] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 709.675412][T20872] tipc: Enabled bearer , priority 12 [ 709.683229][ T1145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 709.752921][T20870] loop3: detected capacity change from 0 to 4096 [ 709.834285][T20875] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 709.970116][ T28] audit: type=1800 audit(2000000248.563:638): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5713" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 710.444096][T20892] loop3: detected capacity change from 0 to 128 [ 710.510001][T20892] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 710.563775][T20892] ext4 filesystem being mounted at /1517/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 710.786703][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 710.879387][T20906] loop1: detected capacity change from 0 to 4096 [ 710.918704][T20906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.000553][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.243213][T20913] loop1: detected capacity change from 0 to 4096 [ 711.318826][T20919] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 711.352375][T20917] loop3: detected capacity change from 0 to 2048 [ 711.459903][T20917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.482663][ T28] audit: type=1800 audit(2000000250.094:639): pid=20913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5729" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 711.620588][T20917] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 711.695712][T20926] loop4: detected capacity change from 0 to 4096 [ 711.788957][T20926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.835339][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.070840][T17001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.581359][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5745'. [ 712.592048][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5745'. [ 712.601085][T20947] netlink: 'syz.1.5745': attribute type 12 has an invalid length. [ 712.627065][T20947] netlink: 'syz.1.5745': attribute type 11 has an invalid length. [ 713.092852][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5751'. [ 713.116052][T20962] netlink: 'syz.1.5751': attribute type 5 has an invalid length. [ 713.141797][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 713.149983][ C1] lec:lec_tx_timeout: lec0 [ 713.154792][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 713.350525][T20964] loop3: detected capacity change from 0 to 4096 [ 713.396455][T20964] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 713.528976][T20964] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 713.572596][T20964] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 713.695572][T20948] loop4: detected capacity change from 0 to 40427 [ 713.729231][T20948] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 713.762742][T20948] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 713.820466][T20948] F2FS-fs (loop4): Found nat_bits in checkpoint [ 713.909692][T20960] loop7: detected capacity change from 0 to 32768 [ 714.053120][T20960] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 714.114869][T20948] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 714.187257][T20948] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 714.506763][T16906] ocfs2: Unmounting device (7,7) on (node local) [ 714.750414][T20992] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 714.805550][ T1031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.060252][T20997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5767'. [ 715.441904][ T1031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.695216][T21016] loop3: detected capacity change from 0 to 64 [ 715.753650][T21016] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 715.758280][T21019] hugetlbfs: Bad value for 'uid' [ 716.051123][T21030] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5781'. [ 716.250135][T21031] loop1: detected capacity change from 0 to 4096 [ 716.301712][T21031] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 716.447205][T21031] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 716.484889][T21036] loop4: detected capacity change from 0 to 4096 [ 716.496714][T21031] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 716.510474][T21036] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 716.669075][T21036] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 716.716003][T21038] loop3: detected capacity change from 0 to 8192 [ 716.762519][T21038] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 716.776384][T21038] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 716.786268][T21038] REISERFS (device loop3): using ordered data mode [ 716.793446][T21038] reiserfs: using flush barriers [ 716.801760][T21038] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 716.818677][T21038] REISERFS (device loop3): checking transaction log (loop3) [ 716.857170][T21038] REISERFS (device loop3): Using r5 hash to sort names [ 716.899315][T21038] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 717.392589][ T5878] kernel write not supported for file /sequencer (pid: 5878 comm: kworker/1:4) [ 717.505813][T21057] loop1: detected capacity change from 0 to 128 [ 717.549383][T21057] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 717.899570][T21064] loop3: detected capacity change from 0 to 1024 [ 717.926175][T21067] loop1: detected capacity change from 0 to 512 [ 717.947427][T21042] loop7: detected capacity change from 0 to 32768 [ 717.978534][T21064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.988231][T21067] EXT4-fs: Ignoring removed nobh option [ 718.071635][T21042] [ 718.071635][T21042] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 718.071635][T21042] [ 718.084345][ T28] audit: type=1800 audit(2000000256.694:640): pid=21064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5795" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 718.171508][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 718.179602][ C1] lec:lec_tx_timeout: lec0 [ 718.184751][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 718.198800][T21042] jfs_create: dtInsert returned -EIO [ 718.208996][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.228903][T21067] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 718.246780][T21042] ERROR: (device loop7): jfs_create: [ 718.246780][T21042] [ 718.271552][T21067] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 718.292439][T21042] ERROR: (device loop7): remounting filesystem as read-only [ 718.302515][T21067] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.5794: inode has both inline data and extents flags [ 718.374818][T21067] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.5794: couldn't read orphan inode 13 (err -117) [ 718.403769][T21067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.502658][T21075] netlink: 'syz.4.5798': attribute type 1 has an invalid length. [ 718.702523][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.922432][T21087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5801'. [ 719.029124][T21089] batadv0: entered promiscuous mode [ 719.075472][T21089] batadv0: left promiscuous mode [ 719.458683][T21098] loop7: detected capacity change from 0 to 1024 [ 719.497176][T21098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 719.550743][T21098] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 719.630183][T21098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.670915][T21098] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.924762][ T32] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.992823][T16906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 720.038781][T21118] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 720.059042][T21117] netlink: 'syz.3.5815': attribute type 1 has an invalid length. [ 720.065496][T21118] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 720.131624][T21118] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 720.734461][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.805903][T21114] loop4: detected capacity change from 0 to 32768 [ 720.862049][T21114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5814 (21114) [ 720.912773][T21114] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 720.933983][T21114] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 720.953228][T21114] BTRFS info (device loop4): setting nodatasum [ 720.990253][T21114] BTRFS info (device loop4): force zlib compression, level 3 [ 721.012369][T21114] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 721.043752][T21114] BTRFS info (device loop4): use lzo compression, level 0 [ 721.050985][T21114] BTRFS info (device loop4): turning on flush-on-commit [ 721.067015][T21137] loop1: detected capacity change from 0 to 1024 [ 721.095329][T21137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 721.106561][T21114] BTRFS info (device loop4): enabling auto defrag [ 721.141866][T21114] BTRFS info (device loop4): max_inline at 4096 [ 721.148266][T21114] BTRFS info (device loop4): using free space tree [ 721.151535][T21137] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 721.201818][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 721.220781][T21141] loop7: detected capacity change from 0 to 256 [ 721.318100][T21137] EXT4-fs (loop1): can't mount with commit=4, fs mounted w/o journal [ 721.465471][T21114] BTRFS info (device loop4): enabling ssd optimizations [ 721.487028][T21141] FAT-fs (loop7): Directory bread(block 64) failed [ 721.507512][T21141] FAT-fs (loop7): Directory bread(block 65) failed [ 721.553969][T21141] FAT-fs (loop7): Directory bread(block 66) failed [ 721.560609][T21141] FAT-fs (loop7): Directory bread(block 67) failed [ 721.592698][T21141] FAT-fs (loop7): Directory bread(block 68) failed [ 721.599335][T21141] FAT-fs (loop7): Directory bread(block 69) failed [ 721.640679][T21141] FAT-fs (loop7): Directory bread(block 70) failed [ 721.673635][T21141] FAT-fs (loop7): Directory bread(block 71) failed [ 721.680423][T21141] FAT-fs (loop7): Directory bread(block 72) failed [ 721.706549][T21141] FAT-fs (loop7): Directory bread(block 73) failed [ 721.758835][T21126] loop3: detected capacity change from 0 to 40427 [ 721.805820][T21126] F2FS-fs (loop3): invalid crc value [ 721.829226][T17001] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 721.873148][T21126] F2FS-fs (loop3): Found nat_bits in checkpoint [ 722.011875][T21164] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 722.071811][T21126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 722.305308][ T5776] syz-executor: attempt to access beyond end of device [ 722.305308][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 722.372932][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 722.577158][T21174] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 722.984555][T21180] netlink: 'syz.1.5836': attribute type 62 has an invalid length. [ 723.191236][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 723.199329][ C1] lec:lec_tx_timeout: lec0 [ 723.204189][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 723.471398][ T27] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 723.503657][T21192] loop1: detected capacity change from 0 to 64 [ 723.691887][ T27] usb 8-1: Using ep0 maxpacket: 16 [ 723.738106][ T27] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.743949][T21200] loop3: detected capacity change from 0 to 256 [ 723.756390][ T27] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 723.795950][T21200] FAT-fs (loop3): Unrecognized mount option "(HVE[*UbCJ " or missing value [ 723.799178][ T27] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 723.839813][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.901474][ T27] usb 8-1: Product: syz [ 723.902563][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5846'. [ 723.905714][ T27] usb 8-1: Manufacturer: syz [ 723.952421][ T27] usb 8-1: SerialNumber: syz [ 724.182335][ T27] usb 8-1: 0:2 : does not exist [ 724.232186][ T27] usb 8-1: USB disconnect, device number 4 [ 724.298661][ T6097] udevd[6097]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.327649][T21210] loop3: detected capacity change from 0 to 8192 [ 724.399464][T21210] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 724.463601][T21210] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 724.522231][T21210] REISERFS (device loop3): using ordered data mode [ 724.528827][T21210] reiserfs: using flush barriers [ 724.571804][T21210] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 724.610552][T21210] REISERFS (device loop3): checking transaction log (loop3) [ 724.804293][T21224] loop1: detected capacity change from 0 to 16 [ 724.820566][T21224] erofs: (device loop1): mounted with root inode @ nid 36. [ 724.869612][T21224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 724.890764][T21210] REISERFS (device loop3): Using tea hash to sort names [ 724.901555][T21224] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 724.912167][T21210] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 724.926318][T21224] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 724.936091][T21224] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 725.682551][T14607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 726.099002][T21237] loop4: detected capacity change from 0 to 32768 [ 726.318321][T21257] loop7: detected capacity change from 0 to 256 [ 726.392738][T21257] exfat: Bad value for 'time_offset' [ 726.713709][T21245] loop1: detected capacity change from 0 to 32768 [ 726.924780][T21267] loop3: detected capacity change from 0 to 2048 [ 726.961740][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 726.987380][T21267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.131003][ T28] audit: type=1800 audit(2000000265.734:641): pid=21267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5877" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 727.134881][ T27] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 727.151597][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.176361][T21267] [ 727.178826][T21267] ====================================================== [ 727.185913][T21267] WARNING: possible circular locking dependency detected [ 727.192995][T21267] syzkaller #0 Not tainted [ 727.197490][T21267] ------------------------------------------------------ [ 727.204585][T21267] syz.3.5877/21267 is trying to acquire lock: [ 727.210697][T21267] ffff88807772bcc8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x28/0xe0 [ 727.220578][T21267] [ 727.220578][T21267] but task is already holding lock: [ 727.227989][T21267] ffff88802d944c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 727.238102][T21267] [ 727.238102][T21267] which lock already depends on the new lock. [ 727.238102][T21267] [ 727.248558][T21267] [ 727.248558][T21267] the existing dependency chain (in reverse order) is: [ 727.257624][T21267] [ 727.257624][T21267] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 727.266215][T21267] percpu_down_read+0x44/0x1a0 [ 727.271574][T21267] ext4_writepages+0x1a4/0x350 [ 727.276912][T21267] do_writepages+0x351/0x590 [ 727.282208][T21267] __writeback_single_inode+0x14e/0xee0 [ 727.288423][T21267] writeback_single_inode+0x21f/0x760 [ 727.294472][T21267] write_inode_now+0x183/0x210 [ 727.299826][T21267] iput+0x58f/0x900 [ 727.304217][T21267] ext4_xattr_block_set+0x2228/0x2fe0 [ 727.310208][T21267] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 727.316697][T21267] __ext4_expand_extra_isize+0x306/0x400 [ 727.322970][T21267] __ext4_mark_inode_dirty+0x458/0x6d0 [ 727.329015][T21267] ext4_evict_inode+0x7dd/0xe70 [ 727.334450][T21267] evict+0x4b7/0x8a0 [ 727.339017][T21267] ext4_orphan_cleanup+0xc33/0x1470 [ 727.344796][T21267] ext4_fill_super+0x5fb5/0x6870 [ 727.350322][T21267] get_tree_bdev+0x3e5/0x520 [ 727.355521][T21267] vfs_get_tree+0x8c/0x280 [ 727.360521][T21267] do_new_mount+0x24a/0xa40 [ 727.365617][T21267] __se_sys_mount+0x2e7/0x3d0 [ 727.370876][T21267] do_syscall_64+0x55/0xb0 [ 727.375951][T21267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 727.382543][T21267] [ 727.382543][T21267] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 727.390185][T21267] __lock_acquire+0x37ef/0x7d80 [ 727.395674][T21267] lock_acquire+0x19e/0x420 [ 727.400750][T21267] down_write+0x97/0x200 [ 727.405710][T21267] ext4_destroy_inline_data+0x28/0xe0 [ 727.411678][T21267] ext4_do_writepages+0x4f2/0x3990 [ 727.417378][T21267] ext4_writepages+0x1dd/0x350 [ 727.422725][T21267] do_writepages+0x351/0x590 [ 727.427912][T21267] filemap_fdatawrite_wbc+0x122/0x180 [ 727.433859][T21267] file_write_and_wait_range+0x197/0x280 [ 727.440075][T21267] generic_buffers_fsync_noflush+0x6f/0x160 [ 727.446557][T21267] ext4_sync_file+0x460/0xd50 [ 727.451819][T21267] ext4_buffered_write_iter+0x2c0/0x350 [ 727.457944][T21267] ext4_file_write_iter+0x1e7/0x1980 [ 727.463859][T21267] vfs_write+0x474/0x9a0 [ 727.468689][T21267] __x64_sys_pwrite64+0x198/0x220 [ 727.474339][T21267] do_syscall_64+0x55/0xb0 [ 727.479342][T21267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 727.485825][T21267] [ 727.485825][T21267] other info that might help us debug this: [ 727.485825][T21267] [ 727.496100][T21267] Possible unsafe locking scenario: [ 727.496100][T21267] [ 727.503600][T21267] CPU0 CPU1 [ 727.509003][T21267] ---- ---- [ 727.514408][T21267] rlock(&sbi->s_writepages_rwsem); [ 727.519747][T21267] lock(&ei->xattr_sem); [ 727.526651][T21267] lock(&sbi->s_writepages_rwsem); [ 727.534439][T21267] lock(&ei->xattr_sem); [ 727.538832][T21267] [ 727.538832][T21267] *** DEADLOCK *** [ 727.538832][T21267] [ 727.547025][T21267] 2 locks held by syz.3.5877/21267: [ 727.552274][T21267] #0: ffff88802c30e418 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 727.561257][T21267] #1: ffff88802d944c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 727.571777][T21267] [ 727.571777][T21267] stack backtrace: [ 727.577715][T21267] CPU: 1 PID: 21267 Comm: syz.3.5877 Not tainted syzkaller #0 [ 727.585224][T21267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.595380][T21267] Call Trace: [ 727.598785][T21267] [ 727.601862][T21267] dump_stack_lvl+0x18c/0x250 [ 727.606687][T21267] ? load_image+0x420/0x420 [ 727.611339][T21267] ? show_regs_print_info+0x20/0x20 [ 727.616604][T21267] ? print_circular_bug+0x12b/0x1a0 [ 727.621870][T21267] check_noncircular+0x2fc/0x400 [ 727.626886][T21267] ? print_deadlock_bug+0x5d0/0x5d0 [ 727.632196][T21267] ? lockdep_lock+0xf5/0x230 [ 727.636864][T21267] ? _find_first_zero_bit+0xd6/0x100 [ 727.642272][T21267] __lock_acquire+0x37ef/0x7d80 [ 727.647207][T21267] ? verify_lock_unused+0x140/0x140 [ 727.652474][T21267] ? __lock_acquire+0x1336/0x7d80 [ 727.657553][T21267] ? verify_lock_unused+0x140/0x140 [ 727.662822][T21267] lock_acquire+0x19e/0x420 [ 727.667388][T21267] ? ext4_destroy_inline_data+0x28/0xe0 [ 727.673009][T21267] ? __might_sleep+0xe0/0xe0 [ 727.677701][T21267] ? read_lock_is_recursive+0x20/0x20 [ 727.683180][T21267] ? mark_lock+0x94/0x320 [ 727.687580][T21267] ? __might_sleep+0xe0/0xe0 [ 727.692236][T21267] ? register_lock_class+0xc4/0x8a0 [ 727.697505][T21267] down_write+0x97/0x200 [ 727.701860][T21267] ? ext4_destroy_inline_data+0x28/0xe0 [ 727.707473][T21267] ? down_read_killable+0x340/0x340 [ 727.712738][T21267] ? __lock_acquire+0x1336/0x7d80 [ 727.717829][T21267] ? ext4_journal_check_start+0x178/0x250 [ 727.723617][T21267] ext4_destroy_inline_data+0x28/0xe0 [ 727.729056][T21267] ext4_do_writepages+0x4f2/0x3990 [ 727.734254][T21267] ? verify_lock_unused+0x140/0x140 [ 727.739556][T21267] ? __lock_acquire+0x1336/0x7d80 [ 727.744652][T21267] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 727.751586][T21267] ? rcu_read_lock_any_held+0xb4/0x140 [ 727.757127][T21267] ext4_writepages+0x1dd/0x350 [ 727.761961][T21267] ? ext4_read_folio+0x2f0/0x2f0 [ 727.766963][T21267] ? __rwlock_init+0x150/0x150 [ 727.771785][T21267] ? ext4_da_get_block_prep+0xdf0/0x1030 [ 727.777486][T21267] ? do_raw_spin_unlock+0x121/0x230 [ 727.782739][T21267] ? ext4_read_folio+0x2f0/0x2f0 [ 727.787735][T21267] do_writepages+0x351/0x590 [ 727.792407][T21267] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 727.798186][T21267] ? __lock_acquire+0x7d80/0x7d80 [ 727.803284][T21267] ? __rwlock_init+0x150/0x150 [ 727.808103][T21267] ? do_raw_spin_unlock+0x121/0x230 [ 727.813439][T21267] filemap_fdatawrite_wbc+0x122/0x180 [ 727.818862][T21267] file_write_and_wait_range+0x197/0x280 [ 727.824528][T21267] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 727.829955][T21267] ? __might_sleep+0xe0/0xe0 [ 727.834594][T21267] ? folio_unlock+0x118/0x2f0 [ 727.839310][T21267] generic_buffers_fsync_noflush+0x6f/0x160 [ 727.845240][T21267] ext4_sync_file+0x460/0xd50 [ 727.849989][T21267] ? trace_ext4_fsmap_mapping+0x210/0x210 [ 727.855769][T21267] ? vfs_fsync_range+0x130/0x1a0 [ 727.860740][T21267] ext4_buffered_write_iter+0x2c0/0x350 [ 727.866337][T21267] ext4_file_write_iter+0x1e7/0x1980 [ 727.871672][T21267] ? rcu_read_lock_any_held+0xb4/0x140 [ 727.877175][T21267] ? ext4_file_read_iter+0x660/0x660 [ 727.882506][T21267] vfs_write+0x474/0x9a0 [ 727.886815][T21267] ? file_end_write+0x250/0x250 [ 727.891733][T21267] ? __fget_files+0x3fc/0x460 [ 727.896486][T21267] ? __fdget+0x180/0x210 [ 727.900788][T21267] ? __x64_sys_pwrite64+0xf7/0x220 [ 727.905986][T21267] __x64_sys_pwrite64+0x198/0x220 [ 727.911051][T21267] ? ksys_pwrite64+0x1c0/0x1c0 [ 727.915863][T21267] ? lockdep_hardirqs_on+0x98/0x150 [ 727.921104][T21267] do_syscall_64+0x55/0xb0 [ 727.925593][T21267] ? clear_bhb_loop+0x40/0x90 [ 727.930335][T21267] ? clear_bhb_loop+0x40/0x90 [ 727.935066][T21267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 727.941010][T21267] RIP: 0033:0x7fd37539e019 [ 727.945548][T21267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.965236][T21267] RSP: 002b:00007fd37623b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 727.973765][T21267] RAX: ffffffffffffffda RBX: 00007fd375625fa0 RCX: 00007fd37539e019 [ 727.981813][T21267] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 727.989842][T21267] RBP: 00007fd37543500c R08: 0000000000000000 R09: 0000000000000000 [ 727.997860][T21267] R10: 0000000000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 728.005872][T21267] R13: 00007fd375626038 R14: 00007fd375625fa0 R15: 00007fff5bb75338 [ 728.013909][T21267] [ 728.026622][T21267] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 728.041957][T21267] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 728.054636][T21267] EXT4-fs (loop3): This should not happen!! Data will be lost [ 728.054636][T21267] [ 728.064410][T21267] EXT4-fs (loop3): Total free blocks count 0 [ 728.070538][T21267] EXT4-fs (loop3): Free/Dirty block details [ 728.076617][T21267] EXT4-fs (loop3): free_blocks=66060288 [ 728.082842][T21267] EXT4-fs (loop3): dirty_blocks=48 [ 728.088084][T21267] EXT4-fs (loop3): Block reservation details [ 728.094499][T21267] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 728.184962][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.210670][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 728.218795][ C1] lec:lec_tx_timeout: lec0 [ 728.223731][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 728.231454][ T27] usb 8-1: Using ep0 maxpacket: 32 [ 728.241761][ T27] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 728.252365][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.260423][ T27] usb 8-1: Product: syz [ 728.270767][ T27] usb 8-1: Manufacturer: syz [ 728.275476][ T27] usb 8-1: SerialNumber: syz [ 728.312159][ T27] usb 8-1: config 0 descriptor?? [ 728.322704][ T27] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 728.330411][ T27] dvb-usb: bulk message failed: -22 (4/0) [ 728.344767][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 728.355419][ T27] dvb-usb: bulk message failed: -22 (5/0) [ 728.361784][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 728.384158][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 728.406189][ T27] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 728.414899][ T27] usb 8-1: media controller created [ 728.440340][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 728.460307][ T27] usb 8-1: selecting invalid altsetting 3 [ 728.466164][ T27] ttusb2: set interface to alts=3 failed [ 728.497065][ T27] DVB: Unable to find symbol tda10086_attach() [ 728.503790][ T27] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 728.514928][ T27] dvb-usb: bulk message failed: -22 (4/0) [ 728.526520][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 728.537346][ T27] dvb-usb: bulk message failed: -22 (5/0) [ 728.543816][ T27] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 728.548153][T21265] dvb-usb: bulk message failed: -22 (7/0) [ 728.554008][ T27] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 728.571124][T21265] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 728.587436][T21265] ttusb2: i2c transfer failed. [ 728.657494][ T27] usb 8-1: USB disconnect, device number 5 [ 728.685491][ T27] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 731.441226][ T1031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.721695][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 733.240719][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 733.248886][ C1] lec:lec_tx_timeout: lec0 [ 733.253675][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 736.571018][ T1145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration