last executing test programs: 2m15.811164549s ago: executing program 1 (id=587): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x29, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x48, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xa, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000001c0)={0x20, 0x8, 0x2b, {0x2b, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251fba6257"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m13.483952273s ago: executing program 1 (id=598): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000009000000e93ee9fd290495b9585dde83000000000b01007a15b3"], 0x0}, 0x0) 2m11.432755608s ago: executing program 1 (id=607): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002940)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="2023a0000000a00f23838722da6b7e84"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m7.792198653s ago: executing program 1 (id=619): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200800, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224, @ANYRES64, @ANYRES16, @ANYRES16], 0x9, 0x155d, &(0x7f0000002640)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) 2m7.344742828s ago: executing program 1 (id=624): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file6\x00', 0x3000040, &(0x7f0000003280)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xee01, 0xffffffffffffffff, 0x1000) 2m5.722099849s ago: executing program 1 (id=627): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r0, 0x0, &(0x7f0000000180)) 2m5.267326763s ago: executing program 32 (id=627): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r0, 0x0, &(0x7f0000000180)) 8.009788587s ago: executing program 4 (id=1110): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000180)="aa581ff83dac4a636cb9b825c4009d215634b12c4ce8a4e1d32e2e4b6e56cfa1ba584ba7d17f3a6a991d96384d307c768c81c980e56f316d71e106acf3d5b8711479f234fa73a5a6d7b4b4f6ad2b48b5117919f03f0438c805edae16d30a2dc7351754cdae8ef35f9d152a", 0x6b}], 0x2}, 0x0) close(r0) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) 7.960240548s ago: executing program 3 (id=1111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x982}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000001c0)={0x16, 0x1, 0xde}) 7.58747213s ago: executing program 4 (id=1112): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000140000000800160007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080014"], 0x4c}}, 0x0) 7.298286689s ago: executing program 3 (id=1114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000ac0)={0x9, 0x6, [{0x6, 0x0, 0xc2}, {0x7, 0x0, 0x2000000000000005}, {0x7fff, 0x0, 0x401}, {0x5, 0x0, 0x10001}, {0x8, 0x0, 0x7fff}, {0xffffffff, 0x0, 0x6}, {0x80000001, 0x0, 0x6}, {0x1800, 0x0, 0xb}, {0x400, 0x0, 0x3fd}, {0x9, 0x0, 0x2}, {0xc, 0x0, 0x9}, {0x7, 0x0, 0x6}, {0x2, 0x0, 0x1}, {0x807, 0x0, 0x1}, {0x3ff, 0x0, 0xf5}, {0x401, 0x0, 0x85f7}]}) 7.086723155s ago: executing program 4 (id=1115): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x106, 0x2, 0xff, 0x1}}) 6.746299166s ago: executing program 3 (id=1117): open(0x0, 0x2000, 0x18) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$join(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[], 0x2c}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x2f) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xb8, 0x8, 0xfa04, 0xb8, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x90, 0xb8, 0x0, {0x0, 0x74020000}, [@common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 6.551507273s ago: executing program 4 (id=1119): open(0x0, 0x2000, 0x18) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$join(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[], 0x2c}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x2f) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xb8, 0x8, 0xfa04, 0xb8, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x90, 0xb8, 0x0, {0x0, 0x74020000}, [@common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 4.634532703s ago: executing program 0 (id=1121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000024000000040000000100000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\n'], 0x5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000080), 0x0}, 0x20) 4.590191224s ago: executing program 2 (id=1122): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.586853685s ago: executing program 3 (id=1123): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000094, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000006c0)={0x0, 0x2, 0x0, [0xffffffffffffffff, 0x2, 0x7fffffffffffffff, 0x6], [0x8, 0x100, 0x2, 0x5, 0x3, 0x6, 0x5, 0x2d6d, 0x7, 0x100, 0xb234, 0x1, 0x3, 0x0, 0xb80, 0x5, 0x5, 0x9, 0x1, 0x5, 0x3a, 0x2, 0x8bc, 0x9, 0x9, 0x4, 0x9, 0x5, 0x200, 0x38, 0x3, 0x6, 0x3, 0xffffffff, 0xfffffffffffffff7, 0xd808, 0x9, 0x7, 0x38, 0xfffffffffffffffd, 0xffffffffab17f72c, 0x87, 0x4, 0x3, 0xfff, 0x3, 0x8, 0x2, 0x2481, 0x9, 0x81, 0x8000000000000000, 0x7, 0x183, 0x7, 0x3, 0x15b, 0x2b, 0x1, 0x375, 0xfc, 0x0, 0x8, 0x8000000000000001, 0x66, 0x80000001, 0x96, 0x3, 0xffffffffffffffc0, 0x5, 0xb6, 0x0, 0xfffffffffffffffb, 0x2, 0x927, 0x0, 0xffff, 0x15a0ad9e, 0x800, 0x1, 0x0, 0x4, 0x0, 0x6068099d, 0x5, 0x0, 0xfffffffffffffffb, 0x3, 0x3, 0xad7f, 0x81, 0x401, 0x100, 0xffffffff, 0x5, 0x0, 0x6, 0x40, 0xc5b, 0x1, 0x8001, 0x1, 0xb, 0x5, 0x6, 0x9, 0xe, 0x6, 0x5, 0x6, 0xe0, 0x7, 0x1cd7, 0x5, 0x6b557414, 0x2, 0x1, 0x4, 0x758, 0x9, 0x4]}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xffffffffffffff9b, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x2da715dd}]}}]}, 0x38}}, 0x0) syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz7GNAjEQBdDvPe2uLr+CLiRGogEIERkBOYWQk1EDEm3QAEUg71qUAATvBdbY4/mWw0eVJEOS3yQ/yThXya3LJSm1lcWyrtdtvT62ua7vW/V3qFN5lByn/b60xr2f46fAdTs87TbD6/H/1fk9vwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7/YMAAD//5CmCfw=") 4.298393404s ago: executing program 0 (id=1124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0xe}) 4.215835067s ago: executing program 2 (id=1125): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fe9000/0x13000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)="530feb542392864e7c3cc09214a6da1f675053b9caa9de1e6361792ace8ab977bcaa11df67a35de8cc80fc9eb97f1a87a3196a35e4c968250d5b625260f0211a936162e7", 0x44}, 0x68) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 3.817366249s ago: executing program 0 (id=1126): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0, 0x0, 0x10}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) read(r0, &(0x7f00000011c0)=""/221, 0x8) 3.574262257s ago: executing program 0 (id=1127): syz_mount_image$jfs(&(0x7f0000007ec0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3800400, &(0x7f0000007f40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="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"], 0xfe, 0x6245, &(0x7f0000025840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) fdatasync(r1) 3.527802328s ago: executing program 2 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.211029719s ago: executing program 4 (id=1129): rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) unshare(0x6020400) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) 3.048820024s ago: executing program 2 (id=1130): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f00000002c0)=""/80, 0x50) 2.706354014s ago: executing program 2 (id=1131): open(0x0, 0x2000, 0x18) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$join(0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[], 0x2c}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x2f) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xb8, 0x8, 0xfa04, 0xb8, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x90, 0xb8, 0x0, {0x0, 0x74020000}, [@common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 2.706055004s ago: executing program 3 (id=1132): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) io_setup(0x3, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x80800400, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x0, 0x0) 1.204331682s ago: executing program 4 (id=1133): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) truncate(&(0x7f0000000000)='./file1\x00', 0x9c56) 817.881724ms ago: executing program 0 (id=1134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 134.512376ms ago: executing program 0 (id=1135): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x0, 0x4, 0xfe, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @empty, 0x8000, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r3, 0x0, 0x5, 0x64, 0x7, 0x0, @private2, @mcast2, 0x0, 0x8000, 0xd, 0xa174}}) 119.958976ms ago: executing program 3 (id=1136): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) unlink(&(0x7f0000000040)='./file1\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x5b) getdents(r0, 0x0, 0x0) 0s ago: executing program 2 (id=1137): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) kernel console output (not intermixed with test programs): ournal. Quota mode: writeback. [ 275.451750][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.502111][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.094059][ T6862] loop2: detected capacity change from 0 to 1024 [ 277.874384][ T6862] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 278.195918][ T6865] loop1: detected capacity change from 0 to 8 [ 278.223044][ T6865] SQUASHFS error: lzo decompression failed, data probably corrupt [ 278.243492][ T6865] SQUASHFS error: Failed to read block 0x91: -5 [ 278.318547][ T6865] SQUASHFS error: Unable to read metadata cache entry [8f] [ 278.327767][ T6865] SQUASHFS error: Unable to read inode 0x11f [ 278.385194][ T6688] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 278.722816][ T6873] loop1: detected capacity change from 0 to 1024 [ 278.732637][ T6873] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.754046][ T6873] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 278.899375][ T6682] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.797401][ T6886] loop0: detected capacity change from 0 to 2048 [ 279.824746][ T6886] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 279.845732][ T5814] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 279.869835][ T6886] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 280.630681][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 281.750227][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 281.759815][ T5814] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.769816][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.785930][ T5814] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.828750][ T5814] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 281.848240][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.859888][ T5814] usb 3-1: Product: syz [ 281.868520][ T5814] usb 3-1: Manufacturer: syz [ 281.878703][ T5814] usb 3-1: SerialNumber: syz [ 282.151973][ T5814] usb 3-1: unit 0 not found! [ 282.216486][ T5814] usb 3-1: USB disconnect, device number 6 [ 282.319328][ T6688] udevd[6688]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.155701][ T6922] loop1: detected capacity change from 0 to 1024 [ 285.165170][ T6922] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.192646][ T6922] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 286.065422][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 289.450628][ T6933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.627240][ T6938] loop1: detected capacity change from 0 to 512 [ 289.653573][ T6938] EXT4-fs: Invalid want_extra_isize 1130 [ 290.304539][ T6942] loop1: detected capacity change from 0 to 32768 [ 290.354640][ T6942] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 66 has empty extent list at depth 3 [ 290.400483][ T6942] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 290.430239][ T6942] OCFS2: File system is now read-only. [ 290.435791][ T6942] (syz.1.255,6942,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 290.459510][ T6942] (syz.1.255,6942,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 290.480325][ T6942] (syz.1.255,6942,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 290.488063][ T6942] (syz.1.255,6942,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 290.520276][ T6942] (syz.1.255,6942,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 290.528829][ T6942] (syz.1.255,6942,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 290.553087][ T6942] (syz.1.255,6942,1):ocfs2_init_global_system_inodes:461 ERROR: status = -30 [ 290.730607][ T6942] (syz.1.255,6942,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 290.730654][ T6942] (syz.1.255,6942,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 290.810451][ T6942] (syz.1.255,6942,1):ocfs2_initialize_super:2254 ERROR: status = -30 [ 290.818814][ T6942] (syz.1.255,6942,1):ocfs2_fill_super:1178 ERROR: status = -30 [ 291.262082][ T5778] Bluetooth: hci3: unexpected event for opcode 0x203c [ 292.332983][ T6965] loop1: detected capacity change from 0 to 1024 [ 292.341038][ T6965] EXT4-fs: Ignoring removed mblk_io_submit option [ 293.058974][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 294.173720][ T6965] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 294.208783][ T6961] loop2: detected capacity change from 0 to 4096 [ 294.218226][ T6961] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 294.248213][ T6961] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 294.301891][ T6961] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 294.326220][ T6961] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 294.499170][ T6961] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 294.570698][ T6961] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 294.752640][ T6961] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 294.855985][ T6961] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 294.989099][ T6961] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 295.030277][ T6961] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 295.191171][ T6961] ntfs: volume version 3.1. [ 295.696849][ T6982] loop2: detected capacity change from 0 to 8 [ 297.923621][ T6997] loop1: detected capacity change from 0 to 8 [ 298.094754][ T6999] loop2: detected capacity change from 0 to 1024 [ 298.115252][ T6999] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.128881][ T6999] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 298.509109][ T7001] loop1: detected capacity change from 0 to 2048 [ 298.742507][ T7001] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only [ 299.715114][ T7015] loop1: detected capacity change from 0 to 1024 [ 299.729823][ T7015] hfsplus: unable to change nls mapping [ 299.766051][ T7015] hfsplus: unable to parse mount options [ 301.202777][ T7030] loop0: detected capacity change from 0 to 1024 [ 301.238329][ T7030] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.267444][ T7030] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 301.784533][ T7025] loop2: detected capacity change from 0 to 32768 [ 301.934417][ T7025] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.287 (7025) [ 302.124452][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 302.124469][ T28] audit: type=1326 audit(2000000954.807:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.1.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 302.301951][ T28] audit: type=1326 audit(2000000954.847:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.1.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 302.450226][ T28] audit: type=1326 audit(2000000954.857:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.1.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 302.547154][ T28] audit: type=1326 audit(2000000954.857:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.1.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 302.572662][ T28] audit: type=1326 audit(2000000954.867:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.1.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 302.607880][ T7025] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 302.614749][ T28] audit: type=1326 audit(2000000954.867:128): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.1.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 302.648934][ T7025] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 302.661635][ T28] audit: type=1326 audit(2000000954.867:129): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.1.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 302.686735][ T7025] BTRFS info (device loop2): enabling auto defrag [ 302.703022][ T7025] BTRFS info (device loop2): use no compression [ 302.709456][ T7025] BTRFS info (device loop2): turning on sync discard [ 302.719343][ T28] audit: type=1326 audit(2000000954.877:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.1.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 302.743676][ T7025] BTRFS info (device loop2): using free space tree [ 302.773371][ T28] audit: type=1326 audit(2000000954.877:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.1.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 303.074872][ T7025] BTRFS info (device loop2): enabling ssd optimizations [ 303.353802][ T5770] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 304.005750][ T7079] loop1: detected capacity change from 0 to 1024 [ 304.015489][ T7079] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.059238][ T7079] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 309.873574][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.952935][ T7093] loop1: detected capacity change from 0 to 4096 [ 310.124631][ T7093] EXT4-fs: inline encryption not supported [ 310.564203][ T7093] EXT4-fs (loop1): Test dummy encryption mode enabled [ 310.584529][ T7093] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 310.593518][ T7093] System zones: 0-5 [ 310.606503][ T7093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.791480][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.070770][ T5778] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 311.252612][ T7124] loop0: detected capacity change from 0 to 16 [ 311.288839][ T7123] loop1: detected capacity change from 0 to 1024 [ 311.326332][ T7123] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.357735][ T7124] erofs: (device loop0): mounted with root inode @ nid 36. [ 311.366362][ T7123] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 311.414932][ T6682] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 311.439488][ T7123] loop1: detected capacity change from 0 to 16 [ 311.452561][ T6682] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 311.481934][ T6682] Buffer I/O error on dev loop1, logical block 0, async page read [ 311.523078][ T7123] erofs: (device loop1): mounted with root inode @ nid 36. [ 312.326309][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 313.468624][ T7145] xt_TCPMSS: Only works on TCP SYN packets [ 313.802713][ T7141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.417797][ T7150] loop2: detected capacity change from 0 to 1024 [ 314.427042][ T7150] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.442227][ T7150] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 314.613473][ T7150] loop2: detected capacity change from 0 to 16 [ 314.653639][ T7150] erofs: (device loop2): mounted with root inode @ nid 36. [ 315.287645][ T7156] kvm_intel: kvm [7155]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa2b2 [ 315.306420][ T7156] kvm: kvm [7155]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2a69 [ 315.333358][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 316.590384][ T1195] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 316.599599][ T7186] netlink: 'syz.0.341': attribute type 3 has an invalid length. [ 316.624715][ T7186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.341'. [ 316.788202][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'. [ 316.810157][ T1195] usb 2-1: Using ep0 maxpacket: 32 [ 316.822086][ T1195] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.852910][ T1195] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 316.862420][ T1195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.890173][ T1195] usb 2-1: Product: syz [ 316.894541][ T1195] usb 2-1: Manufacturer: syz [ 316.899181][ T1195] usb 2-1: SerialNumber: syz [ 316.933349][ T1195] usb 2-1: config 0 descriptor?? [ 316.966250][ T1195] usb 2-1: bad CDC descriptors [ 316.972274][ T1195] usb 2-1: unsupported MDLM descriptors [ 317.196069][ T1195] usb 2-1: USB disconnect, device number 2 [ 317.209531][ T7183] loop2: detected capacity change from 0 to 32768 [ 317.235954][ T7183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.339 (7183) [ 317.291052][ T7183] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 317.320627][ T7183] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 317.339711][ T7183] BTRFS info (device loop2): force clearing of disk cache [ 317.366524][ T7183] BTRFS info (device loop2): metadata ratio 0 [ 317.384730][ T7183] BTRFS info (device loop2): enabling ssd optimizations [ 317.406538][ T7183] BTRFS info (device loop2): using spread ssd allocation scheme [ 317.424900][ T7183] BTRFS info (device loop2): using free space tree [ 317.500324][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.506761][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.570362][ T7183] BTRFS info (device loop2): auto enabling async discard [ 317.604990][ T7183] BTRFS info (device loop2): rebuilding free space tree [ 317.749008][ T7192] loop0: detected capacity change from 0 to 32768 [ 317.900486][ T7192] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 318.185328][ T7192] XFS (loop0): Ending clean mount [ 318.227632][ T5770] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 318.952911][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 319.639482][ T7233] kvm_intel: kvm [7232]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa2b2 [ 319.685800][ T7233] kvm: kvm [7232]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2a69 [ 319.707785][ T7240] loop0: detected capacity change from 0 to 8 [ 319.725227][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.352'. [ 320.097862][ T7237] loop1: detected capacity change from 0 to 8192 [ 320.305306][ T7237] loop1: p1 p2 p4 [ 320.309337][ T7237] loop1: p1 start 3959422976 is beyond EOD, truncated [ 320.369668][ T7237] loop1: p2 size 384768 extends beyond EOD, truncated [ 320.430872][ T7237] loop1: p4 size 1073741824 extends beyond EOD, truncated [ 321.810825][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 322.185492][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 322.213331][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 322.359862][ T7260] loop2: detected capacity change from 0 to 8192 [ 322.445815][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.365'. [ 322.514820][ T7276] loop0: detected capacity change from 0 to 256 [ 322.572315][ T7276] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 322.586994][ T7277] comedi comedi3: fl512: I/O port conflict (0x7,16) [ 322.600899][ T7276] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 323.208381][ T28] audit: type=1326 audit(2000001487.697:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 324.222302][ T28] audit: type=1326 audit(2000001487.697:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 324.311323][ T28] audit: type=1326 audit(2000001487.777:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff984d59bbb code=0x7ffc0000 [ 324.409746][ T7299] loop1: detected capacity change from 0 to 512 [ 324.475329][ T28] audit: type=1326 audit(2000001487.777:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7ff984d592ac code=0x7ffc0000 [ 324.576109][ T28] audit: type=1326 audit(2000001487.777:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 324.600554][ T28] audit: type=1326 audit(2000001487.777:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff984d5930e code=0x7ffc0000 [ 324.626237][ T28] audit: type=1326 audit(2000001487.787:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 324.650697][ T28] audit: type=1326 audit(2000001487.797:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff984d9caeb code=0x7ffc0000 [ 324.691010][ T7299] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 324.702394][ T28] audit: type=1326 audit(2000001487.807:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 324.749807][ T7299] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 324.782203][ T28] audit: type=1326 audit(2000001487.807:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7283 comm="syz.1.378" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff984d9ce59 code=0x7ffc0000 [ 324.839840][ T7299] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 324.875857][ T7299] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 324.889886][ T7303] loop0: detected capacity change from 0 to 4096 [ 324.907541][ T7299] System zones: 0-2, 18-18, 34-35 [ 324.918504][ T7306] loop2: detected capacity change from 0 to 1024 [ 324.931366][ T7306] EXT4-fs: Ignoring removed mblk_io_submit option [ 324.956465][ T7306] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 324.988762][ T7299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.045313][ T7306] loop2: detected capacity change from 0 to 16 [ 325.104669][ T7306] erofs: (device loop2): mounted with root inode @ nid 36. [ 325.137875][ T7299] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.1.371: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 325.168848][ T7303] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 325.355632][ T7299] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 325.936038][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.999503][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 326.417796][ T7320] loop2: detected capacity change from 0 to 4096 [ 326.508963][ T7320] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 326.731333][ T7326] loop1: detected capacity change from 0 to 4096 [ 326.927416][ T7326] ntfs3: loop1: ino=5, "/" directory corrupted [ 326.951581][ T7326] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 327.222999][ T7342] gretap1: entered promiscuous mode [ 327.747877][ T7334] loop2: detected capacity change from 0 to 32768 [ 329.230652][ T7362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.497187][ T7371] loop1: detected capacity change from 0 to 128 [ 329.526636][ T7352] loop0: detected capacity change from 0 to 32768 [ 329.569531][ T7352] [ 329.569531][ T7352] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.569531][ T7352] [ 329.739094][ T5771] [ 329.739094][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.739094][ T5771] [ 329.764193][ T5771] [ 329.764193][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 329.764193][ T5771] [ 330.288458][ T7379] kvm_intel: kvm [7378]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa2b2 [ 330.313641][ T7388] comedi comedi4: bad chanlist[0]=0x04000009 chan=9 range length=2 [ 330.337993][ T7379] kvm: kvm [7378]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2a69 [ 330.534229][ T7384] loop0: detected capacity change from 0 to 8192 [ 330.592006][ T7384] loop0: p1 p2 p4 [ 330.605435][ T7384] loop0: p1 start 3959422976 is beyond EOD, truncated [ 330.635775][ T7384] loop0: p2 size 384768 extends beyond EOD, truncated [ 330.658981][ T7384] loop0: p4 size 1073741824 extends beyond EOD, truncated [ 331.760649][ T7397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.150859][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 332.159762][ T7404] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 332.245201][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 332.274043][ T6825] udevd[6825]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 332.312011][ T7407] loop1: detected capacity change from 0 to 128 [ 332.330321][ T7407] EXT4-fs (loop1): Test dummy encryption mode enabled [ 332.440651][ T7408] delete_channel: no stack [ 332.461667][ T7407] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.572962][ T7407] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.966163][ T7407] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 333.005463][ T7407] EXT4-fs error (device loop1): ext4_validate_block_bitmap:421: comm syz.1.420: bg 0: bad block bitmap checksum [ 333.189056][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.295714][ T7425] kvm_intel: kvm [7424]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa2b2 [ 333.336715][ T7425] kvm: kvm [7424]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2a69 [ 333.606296][ T7427] loop0: detected capacity change from 0 to 8192 [ 334.341055][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 335.450182][ T7427] loop0: p1 p2 p4 [ 335.490325][ T7427] loop0: p1 start 3959422976 is beyond EOD, truncated [ 335.522949][ T7427] loop0: p2 size 384768 extends beyond EOD, truncated [ 335.545863][ T7427] loop0: p4 size 1073741824 extends beyond EOD, truncated [ 336.110979][ T7446] capability: warning: `syz.1.436' uses 32-bit capabilities (legacy support in use) [ 336.166079][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 336.180338][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 336.300412][ T7451] netlink: 56 bytes leftover after parsing attributes in process `syz.0.438'. [ 337.438360][ T7455] xt_TCPMSS: Only works on TCP SYN packets [ 337.445984][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.824753][ T7467] capability: warning: `syz.0.445' uses deprecated v2 capabilities in a way that may be insecure [ 337.948850][ T7470] loop1: detected capacity change from 0 to 2048 [ 338.094552][ T7470] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 338.112034][ T7472] loop0: detected capacity change from 0 to 256 [ 338.180929][ T6682] udevd[6682]: incorrect nilfs2 checksum on /dev/loop1 [ 338.204986][ T7475] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.337561][ T7470] NILFS (loop1): error -2 truncating bmap (ino=16) [ 338.453963][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 338.453978][ T28] audit: type=1326 audit(2000001503.147:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7bf9ce59 code=0x7ffc0000 [ 338.541924][ T28] audit: type=1326 audit(2000001503.147:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7bf9ce59 code=0x7ffc0000 [ 338.634996][ T28] audit: type=1326 audit(2000001503.157:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f7e7bf9ce59 code=0x7ffc0000 [ 338.695271][ T28] audit: type=1326 audit(2000001503.157:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.0.450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7bf9ce59 code=0x7ffc0000 [ 338.790337][ T7481] loop0: detected capacity change from 0 to 512 [ 338.896417][ T6682] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.123090][ T7477] loop2: detected capacity change from 0 to 32768 [ 339.161961][ T7477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.449 (7477) [ 339.218852][ T7477] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.241038][ T7477] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 339.253077][ T7477] BTRFS info (device loop2): using free space tree [ 339.420310][ T7477] BTRFS info (device loop2): enabling ssd optimizations [ 339.427357][ T7477] BTRFS info (device loop2): auto enabling async discard [ 339.523430][ T7483] loop1: detected capacity change from 0 to 32768 [ 339.545735][ T7483] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.451 (7483) [ 339.632051][ T7483] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 339.662727][ T7483] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 339.700210][ T7483] BTRFS info (device loop1): force zlib compression, level 3 [ 339.718226][ T7483] BTRFS info (device loop1): turning on flush-on-commit [ 339.740324][ T7483] BTRFS info (device loop1): max_inline at 4096 [ 339.752928][ T5770] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.780397][ T7483] BTRFS info (device loop1): using free space tree [ 339.975498][ T7483] BTRFS info (device loop1): enabling ssd optimizations [ 340.010246][ T7483] BTRFS info (device loop1): auto enabling async discard [ 340.211012][ T5772] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 341.276957][ T7525] xt_TCPMSS: Only works on TCP SYN packets [ 341.283611][ T7524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.465529][ T7500] loop0: detected capacity change from 0 to 32768 [ 341.544003][ T7500] [ 341.544003][ T7500] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 341.544003][ T7500] [ 341.619373][ T7500] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 341.619373][ T7500] [ 341.702137][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 341.778243][ T6393] read_mapping_page failed! [ 341.888181][ T6393] ERROR: (device loop0): txCommit: [ 341.888181][ T6393] [ 341.930403][ T6393] jfs_write_inode: jfs_commit_inode failed! [ 341.948001][ T5771] [ 341.948001][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 341.948001][ T5771] [ 341.980226][ T5771] [ 341.980226][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 341.980226][ T5771] [ 342.101620][ T7529] loop2: detected capacity change from 0 to 8192 [ 342.173429][ T7529] loop2: p1 p2 p4 [ 342.200783][ T7529] loop2: p1 start 3959422976 is beyond EOD, truncated [ 342.207647][ T7529] loop2: p2 size 384768 extends beyond EOD, truncated [ 342.881631][ T7537] xt_TCPMSS: Only works on TCP SYN packets [ 343.262550][ T7533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.845922][ T7529] loop2: p4 size 1073741824 extends beyond EOD, truncated [ 343.951408][ T7540] loop0: detected capacity change from 0 to 128 [ 344.068376][ T7540] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 344.119435][ T7540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.314896][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 344.331886][ T7532] udevd[7532]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 345.808714][ T7554] xt_TCPMSS: Only works on TCP SYN packets [ 346.182446][ T7552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.830689][ T7545] loop2: detected capacity change from 0 to 32768 [ 346.875287][ T7545] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 347.057389][ T7545] XFS (loop2): Ending clean mount [ 347.095770][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 347.139670][ T7545] XFS (loop2): Quotacheck needed: Please wait. [ 347.291104][ T7545] XFS (loop2): Quotacheck: Done. [ 347.475729][ T5770] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 348.161745][ T7573] xt_TCPMSS: Only works on TCP SYN packets [ 348.542506][ T7571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.291953][ T7576] xt_TCPMSS: Only works on TCP SYN packets [ 350.298600][ T7575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.890863][ T7589] xt_TCPMSS: Only works on TCP SYN packets [ 352.232829][ T7585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.485288][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 353.673803][ T7603] loop0: detected capacity change from 0 to 128 [ 353.765339][ T7595] loop1: detected capacity change from 0 to 8192 [ 353.840176][ T7595] loop1: p1 p2 p4 [ 353.844911][ T7595] loop1: p1 start 3959422976 is beyond EOD, truncated [ 353.880278][ T7595] loop1: p2 size 384768 extends beyond EOD, truncated [ 353.911808][ T7595] loop1: p4 size 1073741824 extends beyond EOD, truncated [ 355.664343][ T7622] loop2: detected capacity change from 0 to 2048 [ 355.828116][ T7625] xt_TCPMSS: Only works on TCP SYN packets [ 355.945762][ T7612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.225457][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 356.244612][ T7622] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 356.258241][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 356.329943][ T7622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.363153][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 356.365606][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 356.411354][ T7629] loop1: detected capacity change from 0 to 512 [ 356.451277][ T7622] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 356.510551][ T7629] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 356.706503][ T7629] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.490: corrupted xattr entries [ 356.762148][ T7629] EXT4-fs (loop1): Remounting filesystem read-only [ 356.781266][ T7629] EXT4-fs (loop1): 1 truncate cleaned up [ 356.788417][ T7629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.861598][ T7629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.214933][ T7643] loop1: detected capacity change from 0 to 164 [ 357.602045][ T7645] loop1: detected capacity change from 0 to 4096 [ 357.639987][ T7645] EXT4-fs: inline encryption not supported [ 357.676180][ T7645] EXT4-fs (loop1): Test dummy encryption mode enabled [ 357.698866][ T7645] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 357.737452][ T7645] System zones: 0-5 [ 357.800740][ T7645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.967084][ T7641] loop2: detected capacity change from 0 to 32768 [ 358.008084][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.060242][ T7641] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.495 (7641) [ 358.139353][ T7641] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 358.210237][ T7641] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 358.233913][ T7641] BTRFS info (device loop2): setting nodatacow, compression disabled [ 358.279901][ T7641] BTRFS info (device loop2): force clearing of disk cache [ 358.296753][ T7641] BTRFS info (device loop2): enabling ssd optimizations [ 358.312994][ T7649] loop1: detected capacity change from 0 to 64 [ 358.319714][ T7641] BTRFS info (device loop2): using spread ssd allocation scheme [ 358.338321][ T7641] BTRFS info (device loop2): turning off barriers [ 358.375807][ T7641] BTRFS info (device loop2): disabling free space tree [ 358.400220][ T7641] BTRFS info (device loop2): not using ssd optimizations [ 358.407343][ T7641] BTRFS info (device loop2): not using spread ssd allocation scheme [ 358.592226][ T7637] loop0: detected capacity change from 0 to 32768 [ 358.655155][ T7641] BTRFS info (device loop2): rebuilding free space tree [ 358.838288][ T7641] BTRFS info (device loop2): disabling free space tree [ 358.855812][ T7637] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 358.881351][ T7641] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 358.910250][ T7641] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 360.097702][ T7679] xt_TCPMSS: Only works on TCP SYN packets [ 360.104330][ T7673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.228690][ T5770] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 360.353697][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'. [ 360.425080][ T7637] XFS (loop0): Ending clean mount [ 360.581709][ T7683] loop1: detected capacity change from 0 to 8192 [ 360.589728][ T7637] XFS (loop0): Quotacheck needed: Please wait. [ 360.773316][ T7683] loop1: p1 p2 p4 [ 360.777451][ T7683] loop1: p1 start 3959422976 is beyond EOD, truncated [ 360.857723][ T7683] loop1: p2 size 384768 extends beyond EOD, truncated [ 360.920694][ T7637] XFS (loop0): Quotacheck: Done. [ 360.937463][ T7683] loop1: p4 size 1073741824 extends beyond EOD, truncated [ 361.190232][ T5771] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 361.222548][ T6682] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 361.372670][ T7532] udevd[7532]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 361.417673][ T7688] loop1: detected capacity change from 0 to 256 [ 361.452120][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 361.585409][ T7688] FAT-fs (loop1): Directory bread(block 64) failed [ 361.646074][ T7688] FAT-fs (loop1): Directory bread(block 65) failed [ 361.690264][ T7688] FAT-fs (loop1): Directory bread(block 66) failed [ 361.696899][ T7688] FAT-fs (loop1): Directory bread(block 67) failed [ 361.760270][ T7688] FAT-fs (loop1): Directory bread(block 68) failed [ 361.800420][ T7688] FAT-fs (loop1): Directory bread(block 69) failed [ 361.831204][ T7688] FAT-fs (loop1): Directory bread(block 70) failed [ 361.837839][ T7688] FAT-fs (loop1): Directory bread(block 71) failed [ 361.900629][ T7688] FAT-fs (loop1): Directory bread(block 72) failed [ 361.907293][ T7688] FAT-fs (loop1): Directory bread(block 73) failed [ 362.004811][ T7686] loop2: detected capacity change from 0 to 32768 [ 362.545355][ T7690] loop1: detected capacity change from 0 to 2048 [ 362.606729][ T7690] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.865262][ T7694] loop0: detected capacity change from 0 to 4096 [ 362.909988][ T7700] loop1: detected capacity change from 0 to 16 [ 364.045495][ T7702] xt_TCPMSS: Only works on TCP SYN packets [ 364.052115][ T7701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.104178][ T7700] erofs: (device loop1): mounted with root inode @ nid 36. [ 364.505619][ T7709] loop1: detected capacity change from 0 to 64 [ 364.767374][ T7709] Trying to free block not in datazone [ 364.793755][ T7709] Trying to free block not in datazone [ 364.799577][ T7709] Trying to free block not in datazone [ 364.840413][ T7709] Trying to free block not in datazone [ 364.846070][ T7709] minix_free_block (loop1:6): bit already cleared [ 364.860450][ T7709] Trying to free block not in datazone [ 364.874457][ T7709] Trying to free block not in datazone [ 365.891671][ T7713] loop2: detected capacity change from 0 to 32768 [ 365.929044][ T7713] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.516 (7713) [ 365.991828][ T7713] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 366.024108][ T7713] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 366.060454][ T7713] BTRFS info (device loop2): using free space tree [ 366.142761][ T7717] loop1: detected capacity change from 0 to 32768 [ 366.196034][ T7717] (syz.1.518,7717,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.283449][ T7713] BTRFS info (device loop2): enabling ssd optimizations [ 366.286622][ T7717] (syz.1.518,7717,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.310977][ T7713] BTRFS info (device loop2): auto enabling async discard [ 366.435985][ T7717] JBD2: Ignoring recovery information on journal [ 366.551032][ T7717] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 366.595131][ T7745] loop0: detected capacity change from 0 to 256 [ 366.766067][ T5770] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 367.124990][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 367.845812][ T7752] xt_TCPMSS: Only works on TCP SYN packets [ 368.192950][ T7748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.570213][ T1195] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 369.753553][ T1195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.782344][ T1195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.803590][ T1195] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 369.817139][ T7759] loop0: detected capacity change from 0 to 32768 [ 369.824028][ T1195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.824086][ T1195] usb 2-1: SerialNumber: syz [ 369.855628][ T1195] usb 2-1: 0:2 : does not exist [ 371.263549][ T7775] xt_TCPMSS: Only works on TCP SYN packets [ 371.270137][ T7774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.585607][ T7781] sock: sock_timestamping_bind_phc: sock not bind to device [ 371.596549][ T1195] usb 2-1: USB disconnect, device number 3 [ 371.657835][ T7783] loop0: detected capacity change from 0 to 16 [ 371.693248][ T7783] erofs: (device loop0): mounted with root inode @ nid 36. [ 371.994183][ T7787] loop0: detected capacity change from 0 to 1024 [ 372.040190][ T8] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 372.264362][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 372.283742][ T8] usb 3-1: not running at top speed; connect to a high speed hub [ 372.317506][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.339811][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.342952][ T8] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 372.342983][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.343006][ T8] usb 3-1: Product: syz [ 372.343022][ T8] usb 3-1: Manufacturer: syz [ 372.343037][ T8] usb 3-1: SerialNumber: syz [ 372.600014][ T8] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 372.654280][ T8] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 372.681040][ T8] usb 3-1: USB disconnect, device number 7 [ 372.735642][ T6682] udevd[6682]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.128855][ T7791] loop1: detected capacity change from 0 to 32768 [ 373.185941][ T7791] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 373.292938][ T7791] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 373.387522][ T7791] XFS (loop1): Starting recovery (logdev: internal) [ 373.482118][ T7791] XFS (loop1): Ending recovery (logdev: internal) [ 373.611887][ T7791] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 373.628223][ T7795] loop0: detected capacity change from 0 to 32768 [ 373.656220][ T7795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.546 (7795) [ 373.706411][ T7795] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 374.780217][ T7813] xt_TCPMSS: Only works on TCP SYN packets [ 374.786720][ T7812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.800856][ T7795] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 374.866504][ T7795] BTRFS info (device loop0): using free space tree [ 374.874049][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 375.056737][ T7795] BTRFS info (device loop0): enabling ssd optimizations [ 375.100160][ T7795] BTRFS info (device loop0): auto enabling async discard [ 375.233712][ T7809] loop2: detected capacity change from 0 to 32768 [ 375.243443][ T7809] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.548 (7809) [ 375.296966][ T7809] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 375.416750][ T7809] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 375.456186][ T7809] BTRFS info (device loop2): enabling ssd optimizations [ 375.465802][ T7809] BTRFS info (device loop2): not using ssd optimizations [ 375.473794][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 375.510324][ T7809] BTRFS info (device loop2): turning off barriers [ 375.516928][ T7809] BTRFS info (device loop2): using free space tree [ 375.679948][ T7840] loop1: detected capacity change from 0 to 512 [ 375.763575][ T7840] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 375.841570][ T7840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.942108][ T7840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.996669][ T7840] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.113398][ T7840] EXT4-fs error (device loop1): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.1.551: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 376.150113][ T7840] EXT4-fs (loop1): Remounting filesystem read-only [ 376.309050][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.456239][ T5770] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 376.641364][ T7860] loop1: detected capacity change from 0 to 1024 [ 376.715451][ T7860] EXT4-fs: Ignoring removed mblk_io_submit option [ 376.820471][ T7860] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 376.981024][ T7860] loop1: detected capacity change from 0 to 16 [ 377.036590][ T7860] erofs: (device loop1): mounted with root inode @ nid 36. [ 377.712883][ T7850] loop0: detected capacity change from 0 to 40427 [ 377.765360][ T7850] F2FS-fs (loop0): invalid crc value [ 378.241588][ T7850] F2FS-fs (loop0): Start checkpoint disabled! [ 378.258842][ T7862] loop2: detected capacity change from 0 to 32768 [ 378.304512][ T7862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.554 (7862) [ 378.328913][ T7850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 378.349054][ T7873] loop1: detected capacity change from 0 to 256 [ 378.379447][ T7862] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 378.429641][ T7862] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 378.452806][ T7862] BTRFS info (device loop2): using free space tree [ 378.553617][ T59] kworker/u4:4: attempt to access beyond end of device [ 378.553617][ T59] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 378.578428][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 378.730454][ T7862] BTRFS info (device loop2): enabling ssd optimizations [ 378.738060][ T7862] BTRFS info (device loop2): auto enabling async discard [ 378.951050][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.957755][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.964642][ T5770] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 378.980756][ T7889] loop1: detected capacity change from 0 to 4096 [ 379.232942][ T7889] ntfs: volume version 3.1. [ 380.051178][ T7897] xt_TCPMSS: Only works on TCP SYN packets [ 380.412187][ T7895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.491289][ T7902] loop1: detected capacity change from 0 to 64 [ 382.581027][ T7905] xt_TCPMSS: Only works on TCP SYN packets [ 383.106756][ T7916] loop0: detected capacity change from 0 to 64 [ 383.397096][ T7918] loop1: detected capacity change from 0 to 512 [ 383.469842][ T7918] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 383.528450][ T7918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 383.550215][ T7918] System zones: 1-12 [ 383.554523][ T7918] EXT4-fs (loop1): orphan cleanup on readonly fs [ 383.563586][ T7918] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.568: invalid indirect mapped block 12 (level 1) [ 383.607984][ T7918] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.568: invalid indirect mapped block 2 (level 2) [ 383.656756][ T7918] EXT4-fs (loop1): 1 truncate cleaned up [ 383.720235][ T7918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 383.974576][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 384.722108][ T7931] xt_TCPMSS: Only works on TCP SYN packets [ 386.479487][ T7935] xt_TCPMSS: Only works on TCP SYN packets [ 387.699658][ T7940] loop2: detected capacity change from 0 to 256 [ 387.843993][ T7940] FAT-fs (loop2): Directory bread(block 64) failed [ 387.852428][ T7940] FAT-fs (loop2): Directory bread(block 65) failed [ 387.859118][ T7940] FAT-fs (loop2): Directory bread(block 66) failed [ 387.913707][ T7940] FAT-fs (loop2): Directory bread(block 67) failed [ 387.923949][ T7940] FAT-fs (loop2): Directory bread(block 68) failed [ 387.953300][ T7940] FAT-fs (loop2): Directory bread(block 69) failed [ 387.975378][ T7940] FAT-fs (loop2): Directory bread(block 70) failed [ 387.985527][ T7940] FAT-fs (loop2): Directory bread(block 71) failed [ 388.010516][ T7940] FAT-fs (loop2): Directory bread(block 72) failed [ 388.017126][ T7940] FAT-fs (loop2): Directory bread(block 73) failed [ 388.529155][ T7944] loop2: detected capacity change from 0 to 4096 [ 388.577284][ T7944] EXT4-fs: inline encryption not supported [ 388.597193][ T7944] EXT4-fs (loop2): Test dummy encryption mode enabled [ 388.621010][ T7944] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 388.639635][ T7944] System zones: 0-5 [ 388.679355][ T7944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.779451][ T7949] loop1: detected capacity change from 0 to 8192 [ 388.838135][ T7949] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 388.855670][ T7944] EXT4-fs: Ignoring sb option on remount [ 388.881953][ T7944] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 388.886623][ T7949] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 388.905553][ T7944] EXT4-fs: Cannot change journaled quota options when quota turned on [ 388.942331][ T7949] REISERFS (device loop1): using ordered data mode [ 388.948926][ T7949] reiserfs: using flush barriers [ 389.002228][ T7949] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 389.062388][ T7949] REISERFS (device loop1): checking transaction log (loop1) [ 389.063713][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.255274][ T7953] loop2: detected capacity change from 0 to 256 [ 389.318707][ T7953] exfat: Deprecated parameter 'utf8' [ 389.344690][ T7953] exfat: Deprecated parameter 'namecase' [ 389.354166][ T7953] exfat: Deprecated parameter 'namecase' [ 389.370186][ T7953] exfat: Deprecated parameter 'utf8' [ 389.392700][ T7949] REISERFS (device loop1): Using tea hash to sort names [ 389.413521][ T7949] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 389.425392][ T7953] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 390.554499][ T7955] loop2: detected capacity change from 0 to 32768 [ 390.600915][ T7955] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.580 (7955) [ 390.703585][ T7955] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 390.719271][ T7955] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 390.744647][ T7955] BTRFS info (device loop2): turning on async discard [ 390.764670][ T7955] BTRFS info (device loop2): using free space tree [ 390.870898][ T7955] BTRFS info (device loop2): enabling ssd optimizations [ 390.970673][ T5770] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 391.095678][ T5842] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 391.242433][ T7992] loop2: detected capacity change from 0 to 16 [ 391.281949][ T7992] erofs: (device loop2): mounted with root inode @ nid 36. [ 391.320215][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 391.331493][ T5842] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.372348][ T5842] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 391.399254][ T28] audit: type=1800 audit(2000001556.077:149): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.588" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 391.438289][ T5842] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.454618][ T5842] usb 2-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 391.480181][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.528786][ T5842] usb 2-1: config 0 descriptor?? [ 391.978377][ T5842] wacom 0003:056A:0029.0001: ignoring exceeding usage max [ 392.010999][ T5842] wacom 0003:056A:0029.0001: unknown main item tag 0x0 [ 392.019373][ T5842] wacom 0003:056A:0029.0001: unknown main item tag 0x0 [ 392.039736][ T5842] wacom 0003:056A:0029.0001: unknown main item tag 0x0 [ 392.057884][ T5842] wacom 0003:056A:0029.0001: unknown main item tag 0x0 [ 392.068003][ T5842] wacom 0003:056A:0029.0001: unknown main item tag 0x0 [ 392.083877][ T5842] wacom 0003:056A:0029.0001: unknown main item tag 0x0 [ 392.100196][ T5842] wacom 0003:056A:0029.0001: unknown main item tag 0x0 [ 392.117505][ T5842] wacom 0003:056A:0029.0001: unknown main item tag 0x0 [ 392.136085][ T5842] wacom 0003:056A:0029.0001: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 392.192014][ T5842] wacom 0003:056A:0029.0001: hidraw0: USB HID v0.06 Device [HID 056a:0029] on usb-dummy_hcd.1-1/input0 [ 392.257178][ T5842] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0029.0001/input/input6 [ 392.471510][ T5842] usb 2-1: USB disconnect, device number 4 [ 392.598560][ T8005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.594'. [ 393.351286][ T8017] loop2: detected capacity change from 0 to 1024 [ 393.367372][ T5814] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 393.367871][ T8017] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 393.562677][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.590292][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.600820][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.617113][ T5814] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 393.632157][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.646420][ T5814] usb 2-1: config 0 descriptor?? [ 394.307977][ T5814] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 394.512281][ T5814] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 394.540512][ T5814] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 394.570365][ T5814] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 394.620984][ T5814] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 394.666701][ T5814] hid-generic 0003:0457:07DA.0002: unknown main item tag 0x0 [ 394.686670][ T1195] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 394.718755][ T5814] hid-generic 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 394.775834][ T5814] usb 2-1: USB disconnect, device number 5 [ 394.895126][ T1195] usb 3-1: Using ep0 maxpacket: 8 [ 394.905298][ T1195] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 394.924559][ T8028] fido_id[8028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 394.944949][ T1195] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 394.960148][ T1195] usb 3-1: Product: syz [ 394.964386][ T1195] usb 3-1: Manufacturer: syz [ 394.969026][ T1195] usb 3-1: SerialNumber: syz [ 395.000480][ T1195] usb 3-1: config 0 descriptor?? [ 395.023648][ T1195] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 395.410289][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 395.620581][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 395.629180][ T1195] gspca_zc3xx: reg_w_i err -71 [ 395.641030][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.644900][ T1195] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 395.668652][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.687178][ T1195] usb 3-1: USB disconnect, device number 8 [ 395.688962][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.708877][ T23] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 395.735849][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.760902][ T23] usb 2-1: config 0 descriptor?? [ 396.197288][ T23] elecom 0003:056E:010C.0003: report_id 0 is invalid [ 396.208264][ T23] elecom 0003:056E:010C.0003: item 0 0 1 8 parsing failed [ 396.219350][ T23] elecom: probe of 0003:056E:010C.0003 failed with error -22 [ 396.407212][ T23] usb 2-1: USB disconnect, device number 6 [ 397.700820][ T8056] xt_TCPMSS: Only works on TCP SYN packets [ 398.062542][ T8051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.747655][ T8064] loop1: detected capacity change from 0 to 256 [ 398.759344][ T8064] exfat: Deprecated parameter 'namecase' [ 398.855579][ T8064] exfat: Deprecated parameter 'utf8' [ 398.946935][ T8064] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 400.860826][ T6392] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.901615][ T8079] loop2: detected capacity change from 0 to 64 [ 401.058012][ T6392] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.232315][ T6392] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.366245][ T6392] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.397957][ T8088] xt_TCPMSS: Only works on TCP SYN packets [ 403.708464][ T8094] loop0: detected capacity change from 0 to 256 [ 404.359839][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.381430][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.390468][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.411945][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.420240][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 404.442229][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.895676][ T8103] loop0: detected capacity change from 0 to 32768 [ 406.089076][ T8103] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 406.089076][ T8103] [ 406.114093][ T8103] ERROR: (device loop0): remounting filesystem as read-only [ 406.131863][ T8103] jfs_lookup: dtSearch returned -5 [ 406.554437][ T5787] Bluetooth: hci1: command tx timeout [ 407.329035][ T8096] chnl_net:caif_netlink_parms(): no params data found [ 407.562614][ T8127] loop2: detected capacity change from 0 to 32768 [ 407.609107][ T8127] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 407.772442][ T8127] XFS (loop2): Ending clean mount [ 407.855853][ T6392] hsr_slave_0: left promiscuous mode [ 407.896568][ T6392] hsr_slave_1: left promiscuous mode [ 407.935362][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.965647][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.000245][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.007731][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.016347][ T5770] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 408.042686][ T6392] bridge_slave_1: left allmulticast mode [ 408.048415][ T6392] bridge_slave_1: left promiscuous mode [ 408.068163][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.118676][ T6392] bridge_slave_0: left allmulticast mode [ 408.145512][ T6392] bridge_slave_0: left promiscuous mode [ 408.173798][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.313783][ T6392] veth1_macvtap: left promiscuous mode [ 408.327604][ T6392] veth0_macvtap: left promiscuous mode [ 408.350978][ T6392] veth1_vlan: left promiscuous mode [ 408.356748][ T6392] veth0_vlan: left promiscuous mode [ 408.626251][ T5787] Bluetooth: hci1: command tx timeout [ 408.655070][ T8164] loop2: detected capacity change from 0 to 512 [ 408.705076][ T8164] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.644: dx entry: limit 0 != root limit 125 [ 408.720694][ T8164] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.644: Corrupt directory, running e2fsck is recommended [ 408.778906][ T8164] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 408.790483][ T8164] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.644: corrupted in-inode xattr: invalid ea_ino [ 408.820961][ T8164] EXT4-fs (loop2): Remounting filesystem read-only [ 408.830505][ T8164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.969152][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.254360][ T8172] xt_TCPMSS: Only works on TCP SYN packets [ 410.420144][ T966] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 410.691234][ T5778] Bluetooth: hci1: command tx timeout [ 410.702073][ T966] usb 3-1: Using ep0 maxpacket: 16 [ 410.709375][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.726544][ T966] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 410.753235][ T966] usb 3-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 410.764510][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.783856][ T966] usb 3-1: config 0 descriptor?? [ 411.031625][ T6392] team0 (unregistering): Port device team_slave_1 removed [ 411.101638][ T6392] team0 (unregistering): Port device team_slave_0 removed [ 411.172959][ T6392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.221272][ T966] holtek_mouse 0003:04D9:A0C2.0004: ignoring exceeding usage max [ 411.244786][ T966] holtek_mouse 0003:04D9:A0C2.0004: item fetching failed at offset 39/41 [ 411.275463][ T966] holtek_mouse 0003:04D9:A0C2.0004: hid parse failed: -22 [ 411.283438][ T966] holtek_mouse: probe of 0003:04D9:A0C2.0004 failed with error -22 [ 411.307741][ T6392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.497613][ T966] usb 3-1: USB disconnect, device number 9 [ 412.294331][ T6392] bond0 (unregistering): Released all slaves [ 412.770169][ T5778] Bluetooth: hci1: command tx timeout [ 413.387178][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.405681][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.414070][ T8096] bridge_slave_0: entered allmulticast mode [ 413.423082][ T8096] bridge_slave_0: entered promiscuous mode [ 413.433517][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.442636][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.450492][ T8096] bridge_slave_1: entered allmulticast mode [ 413.459315][ T8096] bridge_slave_1: entered promiscuous mode [ 413.548002][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'. [ 413.562971][ T8188] netem: change failed [ 413.597166][ T8096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.652747][ T8096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.813048][ T8096] team0: Port device team_slave_0 added [ 413.818501][ T8096] team0: Port device team_slave_1 added [ 413.944330][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.968892][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.968926][ T8096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.977075][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.977092][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.977116][ T8096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.242276][ T8096] hsr_slave_0: entered promiscuous mode [ 414.266252][ T8096] hsr_slave_1: entered promiscuous mode [ 414.267151][ T8096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.267221][ T8096] Cannot create hsr debugfs directory [ 414.850254][ T5778] Bluetooth: hci1: command tx timeout [ 415.034697][ T8096] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.050268][ T5816] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 415.067224][ T8096] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.108379][ T8096] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.125519][ T8096] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 415.259865][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9990, setting to 1024 [ 415.285048][ T5816] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 415.309363][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.344922][ T5816] usb 3-1: config 0 descriptor?? [ 415.371660][ T8216] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 415.508549][ T8096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.622081][ T8096] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.656845][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.664131][ T6392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.734018][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.741335][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.899036][ T5816] input: HID 28bd:0935 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0935.0005/input/input9 [ 415.900847][ T8243] netlink: 277 bytes leftover after parsing attributes in process `syz.3.670'. [ 415.934056][ T8096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.041433][ T5816] uclogic 0003:28BD:0935.0005: input,hidraw0: USB HID v7f.fd Mouse [HID 28bd:0935] on usb-dummy_hcd.2-1/input0 [ 416.165017][ T5816] usb 3-1: USB disconnect, device number 10 [ 416.346174][ T8249] fido_id[8249]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 416.577715][ T8096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.628453][ T8266] loop0: detected capacity change from 0 to 512 [ 416.666023][ T8266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 416.710579][ T8266] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.674: invalid indirect mapped block 4294967295 (level 0) [ 416.736174][ T8266] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.674: invalid indirect mapped block 4294967295 (level 1) [ 416.792829][ T8266] EXT4-fs (loop0): 1 orphan inode deleted [ 416.798792][ T8266] EXT4-fs (loop0): 1 truncate cleaned up [ 416.913667][ T8266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.021132][ T8266] EXT4-fs error (device loop0): ext4_nfs_get_inode:1548: inode #15: comm syz.0.674: iget: bad extra_isize 46 (inode size 256) [ 417.194196][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.769824][ T8096] veth0_vlan: entered promiscuous mode [ 417.809469][ T8096] veth1_vlan: entered promiscuous mode [ 417.851122][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 417.947664][ T8096] veth0_macvtap: entered promiscuous mode [ 417.999676][ T8096] veth1_macvtap: entered promiscuous mode [ 418.047935][ T8303] loop2: detected capacity change from 0 to 512 [ 418.064167][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.090373][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.115929][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.153812][ T8303] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 418.174054][ T8293] loop0: detected capacity change from 0 to 8192 [ 418.174836][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.184107][ T8303] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 418.191383][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.209384][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.224139][ T8096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.236362][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.248860][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.263215][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.276447][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.286483][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.298903][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.311386][ T8096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.321501][ T8303] EXT4-fs (loop2): 1 truncate cleaned up [ 418.328622][ T8303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.338217][ T8293] loop0: p1 p2 p4 [ 418.356956][ T8293] loop0: p1 start 3959422976 is beyond EOD, truncated [ 418.371991][ T8293] loop0: p2 size 384768 extends beyond EOD, truncated [ 418.391213][ T8293] loop0: p4 size 1073741824 extends beyond EOD, truncated [ 418.399309][ T8096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.445039][ T8303] EXT4-fs: group quota file already specified [ 418.451855][ T8096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.480355][ T8096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.500186][ T8096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.638266][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.799212][ T6121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.819341][ T6121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.605995][ T8316] xt_TCPMSS: Only works on TCP SYN packets [ 420.515109][ T6392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.540097][ T6392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.577888][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 420.601311][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 421.259684][ T8330] loop0: detected capacity change from 0 to 256 [ 421.358452][ T8330] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 421.719638][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'. [ 422.409285][ T8346] xt_TCPMSS: Only works on TCP SYN packets [ 422.762520][ T8344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.314261][ T8341] loop0: detected capacity change from 0 to 2048 [ 423.367143][ T8350] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 424.232999][ T8367] loop0: detected capacity change from 0 to 256 [ 424.311282][ T8367] exfat: Deprecated parameter 'namecase' [ 424.344996][ T8367] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 425.497209][ T8380] xt_TCPMSS: Only works on TCP SYN packets [ 425.833431][ T8378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.620274][ T5787] Bluetooth: hci1: command tx timeout [ 427.048107][ T8377] loop2: detected capacity change from 0 to 32768 [ 427.182315][ T8377] ea_get: invalid extended attribute [ 427.188126][ T8377] ffff88805b290330: 04 00 00 00 .... [ 428.562903][ T8409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.101851][ T8411] xt_TCPMSS: Only works on TCP SYN packets [ 429.508710][ T966] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 429.732803][ T966] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 429.746705][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.783592][ T966] usb 3-1: config 0 descriptor?? [ 429.805836][ T966] cp210x 3-1:0.0: cp210x converter detected [ 430.064040][ T8431] loop0: detected capacity change from 0 to 136 [ 430.261915][ T966] usb 3-1: cp210x converter now attached to ttyUSB0 [ 430.477812][ T966] usb 3-1: USB disconnect, device number 11 [ 430.521138][ T966] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 430.578289][ T966] cp210x 3-1:0.0: device disconnected [ 432.092315][ T8451] xt_TCPMSS: Only works on TCP SYN packets [ 432.099048][ T8449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.277242][ T8437] loop0: detected capacity change from 0 to 32768 [ 432.418791][ T8437] ea_get: invalid extended attribute [ 432.449115][ T8437] ffff88805b2db170: 04 00 00 00 .... [ 432.462022][ T8462] loop4: detected capacity change from 0 to 64 [ 433.279194][ T8480] loop2: detected capacity change from 0 to 128 [ 433.384279][ T8480] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 433.498933][ T8480] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.523413][ T8485] loop4: detected capacity change from 0 to 2048 [ 433.618017][ T8485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.736290][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.749258][ T8490] veth0_macvtap: left promiscuous mode [ 434.318604][ T8505] loop0: detected capacity change from 0 to 512 [ 434.363832][ T8505] EXT4-fs: Ignoring removed i_version option [ 434.397791][ T8505] EXT4-fs: Ignoring removed bh option [ 434.468545][ T8505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.482785][ T8505] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 434.542169][ T8505] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 434.583670][ T8505] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 434.619550][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.741'. [ 434.654219][ T8505] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.742: Failed to acquire dquot type 1 [ 434.776601][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.973268][ T8507] loop4: detected capacity change from 0 to 8192 [ 435.053978][ T8507] loop4: p1 p2 p4 [ 435.070948][ T8507] loop4: p1 start 3959422976 is beyond EOD, truncated [ 435.090718][ T8507] loop4: p2 size 384768 extends beyond EOD, truncated [ 435.146154][ T8507] loop4: p4 size 1073741824 extends beyond EOD, truncated [ 435.461240][ T8500] loop2: detected capacity change from 0 to 40427 [ 435.500179][ T8500] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 435.506600][ T8500] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 435.580276][ T8500] F2FS-fs (loop2): invalid crc value [ 436.024588][ T8500] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 436.053165][ T8500] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 436.134757][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 436.162951][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 436.175706][ T8536] loop4: detected capacity change from 0 to 1024 [ 436.214103][ T8536] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.277981][ T8536] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 436.380103][ T6682] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 436.403699][ T8536] loop4: detected capacity change from 0 to 16 [ 436.410213][ T6682] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 436.419538][ T6682] Buffer I/O error on dev loop4, logical block 0, async page read [ 436.464004][ T8536] erofs: (device loop4): mounted with root inode @ nid 36. [ 436.653158][ T8528] loop0: detected capacity change from 0 to 32768 [ 436.664438][ T8528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus scanned by syz.0.748 (8528) [ 436.684822][ T8528] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 436.986994][ T7532] udevd[7532]: incorrect btrfs checksum on /dev/loop0 [ 437.014532][ T8528] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 437.070449][ T8528] BTRFS error (device loop0): superblock checksum mismatch [ 437.356633][ T7532] udevd[7532]: incorrect btrfs checksum on /dev/loop0 [ 437.453291][ T8528] BTRFS error (device loop0): open_ctree failed: -22 [ 437.707950][ T8544] loop4: detected capacity change from 0 to 128 [ 437.758953][ T8544] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.785763][ T8544] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.973809][ T8096] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.128684][ T8557] loop4: detected capacity change from 0 to 2048 [ 438.158028][ T8557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.237596][ T8557] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.369573][ T28] audit: type=1800 audit(2000001603.057:150): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.757" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 438.394097][ T8557] fs-verity: sha256 using implementation "sha256-avx2" [ 438.512768][ T8557] fs-verity (loop4, inode 16): Error -22 reading file data [ 438.556779][ T8557] fs-verity (loop4, inode 16): Error -22 building Merkle tree [ 438.714025][ T8096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.976041][ T8579] loop4: detected capacity change from 0 to 512 [ 439.067595][ T8579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.104496][ T8554] loop0: detected capacity change from 0 to 40427 [ 439.128182][ T8579] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.179371][ T8554] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 439.232545][ T8554] F2FS-fs (loop0): invalid crc value [ 439.266352][ T8554] F2FS-fs (loop0): Found nat_bits in checkpoint [ 439.425765][ T8096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.447448][ T8554] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 439.890467][ T5787] Bluetooth: hci1: command tx timeout [ 440.617257][ T8599] xt_TCPMSS: Only works on TCP SYN packets [ 440.962421][ T8597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.463330][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.469730][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.938940][ T8588] loop2: detected capacity change from 0 to 40427 [ 441.989983][ T8588] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 441.998487][ T8588] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 442.026288][ T8605] loop0: detected capacity change from 0 to 128 [ 442.043643][ T8605] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 442.099017][ T28] audit: type=1800 audit(2000001606.787:151): pid=8605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.771" name="file1" dev="loop0" ino=1048655 res=0 errno=0 [ 442.147131][ T8588] F2FS-fs (loop2): Found nat_bits in checkpoint [ 442.362430][ T8588] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 442.390875][ T8588] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 442.755029][ T8618] loop0: detected capacity change from 0 to 2048 [ 442.825529][ T8618] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 442.906868][ T8620] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.986717][ T6682] udevd[6682]: incorrect nilfs2 checksum on /dev/loop0 [ 444.439350][ T8635] loop4: detected capacity change from 0 to 256 [ 444.515599][ T8635] FAT-fs (loop4): Directory bread(block 64) failed [ 444.540384][ T8635] FAT-fs (loop4): Directory bread(block 65) failed [ 444.547432][ T8635] FAT-fs (loop4): Directory bread(block 66) failed [ 444.583199][ T8635] FAT-fs (loop4): Directory bread(block 67) failed [ 444.589929][ T8635] FAT-fs (loop4): Directory bread(block 68) failed [ 444.650176][ T8635] FAT-fs (loop4): Directory bread(block 69) failed [ 444.656925][ T8635] FAT-fs (loop4): Directory bread(block 70) failed [ 444.682538][ T8635] FAT-fs (loop4): Directory bread(block 71) failed [ 444.684620][ T8637] loop2: detected capacity change from 0 to 4096 [ 444.689493][ T8635] FAT-fs (loop4): Directory bread(block 72) failed [ 444.746107][ T8635] FAT-fs (loop4): Directory bread(block 73) failed [ 444.758385][ T8637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.886600][ T8622] loop0: detected capacity change from 0 to 32768 [ 445.120336][ T8622] JBD2: Ignoring recovery information on journal [ 445.236738][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.244961][ T8654] loop4: detected capacity change from 0 to 2048 [ 445.347392][ T8622] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 445.391006][ T8657] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.526044][ T28] audit: type=1800 audit(2000001610.207:152): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.784" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 445.571641][ T8654] syz.4.784: attempt to access beyond end of device [ 445.571641][ T8654] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 445.671186][ T8654] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 445.739186][ T8654] syz.4.784: attempt to access beyond end of device [ 445.739186][ T8654] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 445.791121][ T8654] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 445.815824][ T8654] syz.4.784: attempt to access beyond end of device [ 445.815824][ T8654] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 445.858862][ T8654] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15) [ 445.883007][ T8654] NILFS (loop4): error -5 truncating bmap (ino=16) [ 445.993168][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 446.845070][ T8659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.442822][ T8687] loop4: detected capacity change from 0 to 128 [ 447.759969][ T8676] loop0: detected capacity change from 0 to 32768 [ 447.848321][ T8676] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 448.156501][ T8676] XFS (loop0): Ending clean mount [ 448.261179][ T8705] loop2: detected capacity change from 0 to 64 [ 448.473657][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 449.919222][ T8713] xt_TCPMSS: Only works on TCP SYN packets [ 449.925917][ T8712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.421682][ T5787] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 450.989296][ T8709] loop4: detected capacity change from 0 to 32768 [ 451.015682][ T8709] XFS: noikeep mount option is deprecated. [ 451.101709][ T8709] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 451.172005][ T8738] loop2: detected capacity change from 0 to 64 [ 451.572544][ T8709] XFS (loop4): Ending clean mount [ 451.611302][ T8709] XFS (loop4): Quotacheck needed: Please wait. [ 451.706991][ T8709] XFS (loop4): Quotacheck: Done. [ 451.875509][ T8096] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 453.729061][ T8774] xt_TCPMSS: Only works on TCP SYN packets [ 454.052900][ T8771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.570635][ T5787] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 454.581082][ T5787] Bluetooth: hci3: Injecting HCI hardware error event [ 454.590241][ T5787] Bluetooth: hci3: hardware error 0x00 [ 455.276780][ T8765] loop0: detected capacity change from 0 to 32768 [ 455.391970][ T8765] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 455.579650][ T8765] JBD2: Ignoring recovery information on journal [ 455.675844][ T8765] JBD2: journal reset failed [ 455.700180][ T8765] (syz.0.805,8765,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 455.714847][ T8765] (syz.0.805,8765,0):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 456.033015][ T8790] loop2: detected capacity change from 0 to 1024 [ 456.250612][ T8790] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 456.532952][ T8797] loop0: detected capacity change from 0 to 64 [ 456.624523][ T5787] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 456.745351][ T8797] hfs: request for non-existent node 327680 in B*Tree [ 456.780999][ T8797] hfs: request for non-existent node 327680 in B*Tree [ 457.602522][ T8815] loop4: detected capacity change from 0 to 256 [ 458.720774][ T8819] xt_TCPMSS: Only works on TCP SYN packets [ 458.727439][ T8817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.786313][ T8815] FAT-fs (loop4): Directory bread(block 64) failed [ 458.796856][ T8815] FAT-fs (loop4): Directory bread(block 65) failed [ 458.812568][ T8815] FAT-fs (loop4): Directory bread(block 66) failed [ 458.819449][ T8815] FAT-fs (loop4): Directory bread(block 67) failed [ 458.829006][ T8815] FAT-fs (loop4): Directory bread(block 68) failed [ 458.838431][ T8815] FAT-fs (loop4): Directory bread(block 69) failed [ 458.868141][ T8815] FAT-fs (loop4): Directory bread(block 70) failed [ 458.904164][ T8815] FAT-fs (loop4): Directory bread(block 71) failed [ 458.950402][ T8815] FAT-fs (loop4): Directory bread(block 72) failed [ 459.010358][ T8815] FAT-fs (loop4): Directory bread(block 73) failed [ 459.559870][ T8830] loop4: detected capacity change from 0 to 512 [ 459.671930][ T8830] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.820: ea_inode file size=16777216 entry size=6 [ 459.775517][ T8830] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.820: iget: bad extra_isize 90 (inode size 256) [ 459.850317][ T8830] EXT4-fs (loop4): Remounting filesystem read-only [ 459.858657][ T8830] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -5) [ 459.917923][ T8830] EXT4-fs (loop4): 1 orphan inode deleted [ 459.929396][ T8830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.125145][ T8096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.666667][ T8847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.674699][ T8847] IPv6: NLM_F_CREATE should be set when creating new route [ 460.682200][ T8847] IPv6: NLM_F_CREATE should be set when creating new route [ 460.689481][ T8847] IPv6: NLM_F_CREATE should be set when creating new route [ 460.796796][ T8847] netlink: 'syz.4.823': attribute type 20 has an invalid length. [ 460.816800][ T8852] loop0: detected capacity change from 0 to 1024 [ 460.882453][ T8852] EXT4-fs: Ignoring removed mblk_io_submit option [ 460.921426][ T8852] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 463.105972][ T8858] xt_TCPMSS: Only works on TCP SYN packets [ 463.112655][ T8856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.146806][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 463.256468][ T8874] loop0: detected capacity change from 0 to 8 [ 464.055664][ T8886] loop0: detected capacity change from 0 to 4096 [ 464.090279][ T8886] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 464.148978][ T8886] ntfs3: loop0: It is recommened to use chkdsk. [ 464.373642][ T8886] ntfs3: loop0: failed to convert "076c" to cp874 [ 464.410259][ T8886] ntfs3: loop0: ino=5, "/" directory corrupted [ 465.298242][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 465.540967][ T8912] loop0: detected capacity change from 0 to 8192 [ 465.582099][ T8912] loop0: p1 p2 p4 [ 465.586155][ T8912] loop0: p1 start 3959422976 is beyond EOD, truncated [ 465.603571][ T8912] loop0: p2 size 384768 extends beyond EOD, truncated [ 465.645816][ T8912] loop0: p4 size 1073741824 extends beyond EOD, truncated [ 465.958794][ T8928] loop4: detected capacity change from 0 to 128 [ 467.056492][ T8927] xt_TCPMSS: Only works on TCP SYN packets [ 467.063254][ T8926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.256043][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 467.267878][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 468.169693][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 468.419773][ T8940] loop2: detected capacity change from 0 to 8192 [ 468.512680][ T8940] loop2: p1 p2 p4 [ 468.516790][ T8940] loop2: p1 start 3959422976 is beyond EOD, truncated [ 468.531240][ T8940] loop2: p2 size 384768 extends beyond EOD, truncated [ 468.556960][ T8940] loop2: p4 size 1073741824 extends beyond EOD, truncated [ 468.625921][ T8948] loop4: detected capacity change from 0 to 4096 [ 468.676685][ T8948] NILFS (loop4): invalid segment: Checksum error in segment payload [ 468.715475][ T8948] NILFS (loop4): trying rollback from an earlier position [ 468.801249][ T8948] NILFS (loop4): recovery complete [ 468.841451][ T8951] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.960385][ T8953] tap0: tun_chr_ioctl cmd 1074041702 [ 469.093598][ T8955] netlink: 'syz.2.853': attribute type 8 has an invalid length. [ 469.294078][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 469.323877][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 470.481286][ T8961] xt_TCPMSS: Only works on TCP SYN packets [ 470.487941][ T8960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.569446][ T8957] loop4: detected capacity change from 0 to 32768 [ 471.611138][ T8957] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.854 (8957) [ 471.660432][ T8957] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 471.681181][ T8957] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 471.693844][ T8957] BTRFS info (device loop4): using free space tree [ 471.926051][ T8957] BTRFS info (device loop4): enabling ssd optimizations [ 471.957172][ T8957] BTRFS info (device loop4): auto enabling async discard [ 472.207073][ T8096] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 474.122663][ T8991] loop2: detected capacity change from 0 to 32768 [ 474.154924][ T8991] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 474.235200][ T9009] kvm: kvm [9007]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa258 [ 474.250592][ T5816] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 474.273455][ T9009] kvm: kvm [9007]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x78f4 [ 474.284087][ T9009] kvm: kvm [9007]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 474.289557][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'. [ 474.305502][ T9009] kvm: kvm [9007]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 474.314887][ T8991] XFS (loop2): Ending clean mount [ 474.443121][ T5816] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 474.462266][ T5816] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 474.491033][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 474.500119][ T5816] usb 5-1: config 220 has no interface number 2 [ 474.512768][ T5816] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 474.557438][ T5816] usb 5-1: config 220 interface 0 has no altsetting 0 [ 474.594885][ T5816] usb 5-1: config 220 interface 76 has no altsetting 0 [ 474.613279][ T5816] usb 5-1: config 220 interface 1 has no altsetting 0 [ 474.658320][ T5816] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 474.697270][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.727109][ T5816] usb 5-1: Product: syz [ 474.739443][ T5816] usb 5-1: Manufacturer: syz [ 474.755140][ T9018] loop0: detected capacity change from 0 to 8192 [ 474.761786][ T5816] usb 5-1: SerialNumber: syz [ 474.841485][ T9018] loop0: p1 p2 p4 [ 474.853517][ T9018] loop0: p1 start 3959422976 is beyond EOD, truncated [ 474.878418][ T9018] loop0: p2 size 384768 extends beyond EOD, truncated [ 474.914205][ T9018] loop0: p4 size 1073741824 extends beyond EOD, truncated [ 475.045261][ T5816] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 475.065350][ T5816] usb 5-1: No valid video chain found. [ 475.077480][ T5816] usb 5-1: selecting invalid altsetting 0 [ 475.134288][ T5816] usb 5-1: selecting invalid altsetting 0 [ 475.149882][ T5816] usbtest: probe of 5-1:220.1 failed with error -22 [ 475.167259][ T5816] usb 5-1: USB disconnect, device number 2 [ 475.447606][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 475.460845][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 476.019072][ T9052] loop2: detected capacity change from 0 to 512 [ 476.056668][ T9052] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 476.136306][ T9052] EXT4-fs (loop2): 1 orphan inode deleted [ 476.151478][ T9052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.266001][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.620628][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.882'. [ 477.317768][ T9071] loop4: detected capacity change from 0 to 512 [ 477.424171][ T9071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.500264][ T9071] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.756987][ T9062] loop0: detected capacity change from 0 to 32768 [ 477.781906][ T8096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.833610][ T9080] loop2: detected capacity change from 0 to 256 [ 477.932803][ T9062] JBD2: Ignoring recovery information on journal [ 478.158131][ T9062] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 478.250115][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 478.408481][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 478.571122][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 478.611186][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 478.660254][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 478.705201][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 478.732596][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 478.760204][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.769676][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.897'. [ 478.807732][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 478.830979][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.867797][ T9] usbtmc: probe of 3-1:16.0 failed with error -22 [ 478.883841][ T9097] loop4: detected capacity change from 0 to 8192 [ 478.951814][ T9097] loop4: p1 p2 p4 [ 478.964337][ T9097] loop4: p1 start 3959422976 is beyond EOD, truncated [ 478.971814][ T9097] loop4: p2 size 384768 extends beyond EOD, truncated [ 478.982164][ T9097] loop4: p4 size 1073741824 extends beyond EOD, truncated [ 480.211627][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 480.226385][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 480.458512][ T9118] overlayfs: workdir and upperdir must be separate subtrees [ 480.635094][ T9124] loop4: detected capacity change from 0 to 1024 [ 480.643908][ T9124] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.651809][ T9124] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 480.964464][ T5842] usb 3-1: USB disconnect, device number 12 [ 481.149734][ T9127] kvm: kvm [9126]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa258 [ 481.173069][ T9127] kvm: kvm [9126]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x78f4 [ 481.183271][ T9127] kvm: kvm [9126]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 481.195415][ T9127] kvm: kvm [9126]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x26cc [ 481.205496][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 481.217962][ T9127] kvm: kvm [9126]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 481.320476][ T9129] loop2: detected capacity change from 0 to 8192 [ 481.431882][ T9129] loop2: p1 p2 p4 [ 481.443349][ T9129] loop2: p1 start 3959422976 is beyond EOD, truncated [ 481.541348][ T9129] loop2: p2 size 384768 extends beyond EOD, truncated [ 482.114307][ T9129] loop2: p4 size 1073741824 extends beyond EOD, truncated [ 482.281759][ T9135] loop4: detected capacity change from 0 to 1024 [ 482.306861][ T9135] EXT4-fs: Ignoring removed mblk_io_submit option [ 482.363674][ T9135] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 483.327318][ T9144] loop2: detected capacity change from 0 to 8 [ 483.352315][ T9144] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 483.555601][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 483.574686][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 483.888516][ T9152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'. [ 484.194501][ T9152] loop2: detected capacity change from 0 to 8192 [ 484.271320][ T9152] loop2: p1 p2 p4 [ 484.278117][ T9152] loop2: p1 start 3959422976 is beyond EOD, truncated [ 484.314158][ T9152] loop2: p2 size 384768 extends beyond EOD, truncated [ 484.350787][ T9152] loop2: p4 size 1073741824 extends beyond EOD, truncated [ 484.394826][ T9158] loop4: detected capacity change from 0 to 1024 [ 484.428454][ T9158] EXT4-fs: Ignoring removed mblk_io_submit option [ 484.509719][ T9158] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 485.784145][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 485.817415][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 485.915210][ T9161] loop0: detected capacity change from 0 to 32768 [ 485.982779][ T9161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.918 (9161) [ 486.061550][ T9161] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 486.095494][ T9161] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 486.146082][ T9161] BTRFS info (device loop0): metadata ratio 0 [ 486.179255][ T9161] BTRFS info (device loop0): enabling ssd optimizations [ 486.209139][ T9161] BTRFS info (device loop0): using spread ssd allocation scheme [ 486.250221][ T9161] BTRFS info (device loop0): using free space tree [ 486.358117][ T9161] BTRFS info (device loop0): auto enabling async discard [ 486.733748][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 486.938110][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 487.030190][ T9211] loop2: detected capacity change from 0 to 1024 [ 487.037680][ T9211] EXT4-fs: Ignoring removed mblk_io_submit option [ 487.104846][ T9211] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 487.166667][ T6682] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (6682) [ 487.711036][ T5842] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 488.004550][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 488.058166][ T5842] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 488.087984][ T5842] usb 5-1: config 179 has no interface number 0 [ 488.105889][ T5842] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 488.129492][ T5842] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 488.166937][ T5842] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 488.191397][ T5842] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 488.233441][ T5842] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 488.257919][ T5842] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 488.313412][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.375452][ T9213] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 489.213466][ T5842] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input10 [ 489.479349][ T9242] loop0: detected capacity change from 0 to 1024 [ 489.541345][ T9242] EXT4-fs: Ignoring removed mblk_io_submit option [ 489.617309][ T9242] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 489.676511][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 489.703172][ T966] usb 5-1: USB disconnect, device number 3 [ 489.703238][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 489.703307][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 489.742546][ T966] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 489.757362][ T9242] loop0: detected capacity change from 0 to 16 [ 489.780674][ T9242] erofs: (device loop0): mounted with root inode @ nid 36. [ 490.181664][ T9241] loop2: detected capacity change from 0 to 8192 [ 490.254434][ T9241] loop2: p1 p2 p4 [ 490.262580][ T9241] loop2: p1 start 3959422976 is beyond EOD, truncated [ 490.269436][ T9241] loop2: p2 size 384768 extends beyond EOD, truncated [ 490.308701][ T9241] loop2: p4 size 1073741824 extends beyond EOD, truncated [ 490.711395][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 490.725844][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 490.921648][ T9259] loop0: detected capacity change from 0 to 256 [ 491.244009][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.953'. [ 491.289636][ T9265] ipvlan2: entered allmulticast mode [ 491.314121][ T9265] syz_tun: entered allmulticast mode [ 491.336354][ T9269] loop0: detected capacity change from 0 to 1024 [ 491.379085][ T9269] EXT4-fs: Ignoring removed mblk_io_submit option [ 491.413821][ T9269] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 491.855700][ T9269] loop0: detected capacity change from 0 to 16 [ 491.882774][ T9269] erofs: (device loop0): mounted with root inode @ nid 36. [ 492.256972][ T9277] loop2: detected capacity change from 0 to 4096 [ 492.385981][ T9283] loop0: detected capacity change from 0 to 512 [ 492.413796][ T9283] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 492.510466][ T9283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.591495][ T9283] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.035561][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.092236][ T9299] loop4: detected capacity change from 0 to 1024 [ 493.099716][ T9299] EXT4-fs: Ignoring removed mblk_io_submit option [ 493.224112][ T9299] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 493.292939][ T9305] loop0: detected capacity change from 0 to 1024 [ 493.317599][ T9305] EXT4-fs: Ignoring removed mblk_io_submit option [ 493.390391][ T9305] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 493.447534][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.970'. [ 495.313007][ T9319] xt_TCPMSS: Only works on TCP SYN packets [ 495.320092][ T9317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.234852][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.985'. [ 496.853705][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 497.097358][ T9360] xt_TCPMSS: Only works on TCP SYN packets [ 497.104447][ T9359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.134704][ T9362] loop4: detected capacity change from 0 to 1024 [ 497.137352][ T9365] loop0: detected capacity change from 0 to 1024 [ 497.148103][ T9362] EXT4-fs: Ignoring removed mblk_io_submit option [ 497.162503][ T9362] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 497.174458][ T9365] EXT4-fs: Ignoring removed mblk_io_submit option [ 497.245115][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 497.267281][ T9365] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 497.284465][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 497.320482][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 497.329615][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.341939][ T9365] loop0: detected capacity change from 0 to 16 [ 497.370584][ T9365] erofs: (device loop0): mounted with root inode @ nid 36. [ 497.390652][ T9352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 497.402813][ T9] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 497.446250][ T9367] loop4: detected capacity change from 0 to 256 [ 497.963337][ T23] usb 3-1: USB disconnect, device number 13 [ 498.076077][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 498.182752][ T9373] loop4: detected capacity change from 0 to 8192 [ 498.253505][ T9373] loop4: p1 p2 p4 [ 498.262241][ T9373] loop4: p1 start 3959422976 is beyond EOD, truncated [ 498.271178][ T9373] loop4: p2 size 384768 extends beyond EOD, truncated [ 498.281240][ T9373] loop4: p4 size 1073741824 extends beyond EOD, truncated [ 498.503576][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 498.505947][ T9388] loop4: detected capacity change from 0 to 1024 [ 498.527302][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 498.552666][ T9388] EXT4-fs: Ignoring removed mblk_io_submit option [ 498.586844][ T9388] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 498.789080][ T9391] xt_TCPMSS: Only works on TCP SYN packets [ 498.795838][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.836684][ T9388] loop4: detected capacity change from 0 to 16 [ 498.863494][ T9388] erofs: (device loop4): mounted with root inode @ nid 36. [ 500.209514][ T9401] loop2: detected capacity change from 0 to 32768 [ 500.218253][ T9401] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 500.534764][ T6682] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 500.570859][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'. [ 500.827251][ T9408] loop0: detected capacity change from 0 to 8192 [ 500.876777][ T9419] loop2: detected capacity change from 0 to 2048 [ 500.894036][ T9408] loop0: p1 p2 p4 [ 500.908749][ T9408] loop0: p1 start 3959422976 is beyond EOD, truncated [ 500.934184][ T9408] loop0: p2 size 384768 extends beyond EOD, truncated [ 500.951174][ T9408] loop0: p4 size 1073741824 extends beyond EOD, truncated [ 500.972028][ T9419] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 500.994513][ T9419] UDF-fs: Scanning with blocksize 512 failed [ 501.059085][ T9419] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.536605][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 501.564148][ T7532] udevd[7532]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 501.822099][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.854960][ T9428] xt_TCPMSS: Only works on TCP SYN packets [ 501.864556][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.139566][ T9425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.877611][ T9444] loop4: detected capacity change from 0 to 64 [ 503.068497][ T8096] hfs: node 4:3 still has 1 user(s)! [ 503.265127][ T9434] loop0: detected capacity change from 0 to 32768 [ 503.340108][ T9434] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 503.369833][ T9434] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 503.399134][ T9434] BTRFS info (device loop0): turning on async discard [ 503.406951][ T9434] BTRFS info (device loop0): metadata ratio 0 [ 503.416652][ T9434] BTRFS info (device loop0): setting nodatasum [ 503.436937][ T9434] BTRFS info (device loop0): using free space tree [ 503.538903][ T9434] BTRFS info (device loop0): enabling ssd optimizations [ 503.551390][ T9441] loop2: detected capacity change from 0 to 32768 [ 503.573052][ T9441] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1024 (9441) [ 503.916260][ T6688] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (6688) [ 503.957367][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 504.190569][ T5842] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 505.185391][ T9490] xt_TCPMSS: Only works on TCP SYN packets [ 505.309851][ T9487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.450397][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 505.633862][ T5842] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 505.730199][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.747165][ T5842] usb 3-1: Product: syz [ 505.753780][ T5842] usb 3-1: Manufacturer: syz [ 505.758445][ T5842] usb 3-1: SerialNumber: syz [ 505.771679][ T5842] usb 3-1: config 0 descriptor?? [ 505.777932][ T6682] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (6682) [ 505.794307][ T5842] gspca_main: se401-2.14.0 probing 047d:5003 [ 506.067233][ T9493] kvm: kvm [9492]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1862 [ 506.100422][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 506.116498][ T9493] kvm: kvm [9492]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 506.226180][ T5842] gspca_se401: Wrong descriptor type [ 506.388194][ T9496] loop4: detected capacity change from 0 to 8192 [ 506.430990][ T5842] usb 3-1: USB disconnect, device number 14 [ 506.514001][ T9496] loop4: p1 p2 p4 [ 506.518110][ T9496] loop4: p1 start 3959422976 is beyond EOD, truncated [ 506.543509][ T9496] loop4: p2 size 384768 extends beyond EOD, truncated [ 506.574830][ T9496] loop4: p4 size 1073741824 extends beyond EOD, truncated [ 507.036841][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 507.052700][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 507.391671][ T9509] kvm: kvm [9508]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1862 [ 507.401050][ T9509] kvm: kvm [9508]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 507.413052][ T9509] kvm: kvm [9508]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xf97f [ 507.422377][ T9509] kvm: kvm [9508]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 507.438829][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1043'. [ 507.520319][ T5842] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 507.579006][ T9515] loop2: detected capacity change from 0 to 8192 [ 507.635517][ T9515] loop2: p1 p2 p4 [ 507.640273][ T9515] loop2: p1 start 3959422976 is beyond EOD, truncated [ 507.647865][ T9515] loop2: p2 size 384768 extends beyond EOD, truncated [ 507.657687][ T9515] loop2: p4 size 1073741824 extends beyond EOD, truncated [ 507.723975][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 507.732659][ T5842] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.764229][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 507.777188][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 507.810770][ T5842] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 507.828528][ T5842] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.846841][ T5842] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 507.858563][ T5842] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 507.870252][ T5842] usb 5-1: Manufacturer: syz [ 507.904760][ T5842] usb 5-1: config 0 descriptor?? [ 508.002771][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 508.016220][ T7532] udevd[7532]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 508.240251][ T5842] rc_core: IR keymap rc-hauppauge not found [ 508.254294][ T5842] Registered IR keymap rc-empty [ 508.264169][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.095016][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.136694][ T9530] xt_TCPMSS: Only works on TCP SYN packets [ 509.256435][ T9527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.330982][ T5842] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 509.570562][ T5842] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 509.675315][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.720562][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.752318][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.790293][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.822513][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.850193][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.888076][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.924703][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 509.970629][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.006475][ T5842] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 510.062871][ T5842] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 510.090396][ T5842] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 510.111864][ T5842] usb 5-1: USB disconnect, device number 4 [ 510.503310][ T9546] loop4: detected capacity change from 0 to 1024 [ 510.516812][ T9546] EXT4-fs: Ignoring removed orlov option [ 510.556415][ T9546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.704795][ T9554] loop0: detected capacity change from 0 to 512 [ 510.794525][ T9554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.829405][ T8096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.841247][ T9554] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.983800][ T9554] EXT4-fs warning (device loop0): ext4_group_add:1722: Can't resize non-sparse filesystem further [ 512.058593][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.134988][ T9565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.221811][ T9568] xt_TCPMSS: Only works on TCP SYN packets [ 513.026597][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:1) [ 513.228677][ T9594] loop0: detected capacity change from 0 to 2048 [ 513.264698][ T9594] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.551457][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1077'. [ 514.653348][ T9614] loop2: detected capacity change from 0 to 128 [ 514.772651][ T9614] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 514.819401][ T9614] ext4 filesystem being mounted at /249/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 514.892525][ T9614] fscrypt (loop2, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 514.963043][ T9619] loop0: detected capacity change from 0 to 4096 [ 515.026356][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 515.859958][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1089'. [ 516.041624][ T9644] loop2: detected capacity change from 0 to 8192 [ 516.135571][ T9644] loop2: p1 p2 p4 [ 516.159259][ T9644] loop2: p1 start 3959422976 is beyond EOD, truncated [ 516.170315][ T9644] loop2: p2 size 384768 extends beyond EOD, truncated [ 516.189167][ T9644] loop2: p4 size 1073741824 extends beyond EOD, truncated [ 516.267281][ T9657] batadv0: entered promiscuous mode [ 516.276709][ T9656] batadv0: left promiscuous mode [ 516.937881][ T6682] udevd[6682]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 516.949425][ T6688] udevd[6688]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 517.607130][ T9678] xt_TCPMSS: Only works on TCP SYN packets [ 517.624334][ T9677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.101304][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 518.450525][ T9674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.691357][ T9694] warning: `syz.4.1110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 519.133360][ T9699] loop0: detected capacity change from 0 to 256 [ 519.204245][ T9699] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.244604][ T9699] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 519.333797][ T9699] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 520.586386][ T9710] xt_TCPMSS: Only works on TCP SYN packets [ 520.596879][ T9706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.200268][ T9714] xt_TCPMSS: Only works on TCP SYN packets [ 522.224316][ T9713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.544236][ T9731] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1125'. [ 522.600214][ T9731] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 522.773548][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1123'. [ 525.208650][ T9748] xt_TCPMSS: Only works on TCP SYN packets [ 525.215240][ T9747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.377725][ T9738] loop0: detected capacity change from 0 to 32768 [ 525.795929][ T9755] loop4: detected capacity change from 0 to 2048 [ 526.191688][ T9755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.399875][ T28] audit: type=1800 audit(2000001691.087:153): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1133" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 526.610697][ T9763] [ 526.613118][ T9763] ====================================================== [ 526.620186][ T9763] WARNING: possible circular locking dependency detected [ 526.627257][ T9763] syzkaller #0 Not tainted [ 526.631747][ T9763] ------------------------------------------------------ [ 526.638899][ T9763] syz.4.1133/9763 is trying to acquire lock: [ 526.644939][ T9763] ffff8880601680c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x28/0xe0 [ 526.654772][ T9763] [ 526.654772][ T9763] but task is already holding lock: [ 526.662197][ T9763] ffff88805bc0ac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 526.672294][ T9763] [ 526.672294][ T9763] which lock already depends on the new lock. [ 526.672294][ T9763] [ 526.682744][ T9763] [ 526.682744][ T9763] the existing dependency chain (in reverse order) is: [ 526.691783][ T9763] [ 526.691783][ T9763] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 526.700247][ T9763] percpu_down_read+0x44/0x1a0 [ 526.705584][ T9763] ext4_writepages+0x1a4/0x350 [ 526.710910][ T9763] do_writepages+0x3b3/0x630 [ 526.716079][ T9763] __writeback_single_inode+0x153/0xec0 [ 526.722180][ T9763] writeback_single_inode+0x21f/0x760 [ 526.728107][ T9763] write_inode_now+0x183/0x210 [ 526.733512][ T9763] iput+0x5ae/0x920 [ 526.737873][ T9763] ext4_xattr_block_set+0x273f/0x32b0 [ 526.743798][ T9763] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 526.750244][ T9763] __ext4_expand_extra_isize+0x306/0x400 [ 526.756444][ T9763] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 526.762454][ T9763] ext4_evict_inode+0x7f3/0xea0 [ 526.767851][ T9763] evict+0x4ca/0x8d0 [ 526.772296][ T9763] ext4_orphan_cleanup+0xbec/0x1420 [ 526.778037][ T9763] ext4_fill_super+0x5eea/0x67b0 [ 526.783522][ T9763] get_tree_bdev+0x3f3/0x520 [ 526.788664][ T9763] vfs_get_tree+0x8c/0x280 [ 526.793628][ T9763] do_new_mount+0x24b/0xa40 [ 526.798684][ T9763] __se_sys_mount+0x2e7/0x3d0 [ 526.803907][ T9763] do_syscall_64+0x55/0xb0 [ 526.808868][ T9763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.815310][ T9763] [ 526.815310][ T9763] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 526.822988][ T9763] __lock_acquire+0x2df1/0x7d40 [ 526.828388][ T9763] lock_acquire+0x19e/0x420 [ 526.833437][ T9763] down_write+0x97/0x200 [ 526.838228][ T9763] ext4_destroy_inline_data+0x28/0xe0 [ 526.844158][ T9763] ext4_do_writepages+0x4f0/0x3990 [ 526.850085][ T9763] ext4_writepages+0x1dd/0x350 [ 526.855490][ T9763] do_writepages+0x3b3/0x630 [ 526.860632][ T9763] filemap_fdatawrite_wbc+0x122/0x180 [ 526.866567][ T9763] filemap_flush+0xe4/0x150 [ 526.871626][ T9763] ext4_convert_inline_data+0x18f/0x5f0 [ 526.877724][ T9763] ext4_setattr+0xf0d/0x1dc0 [ 526.882864][ T9763] notify_change+0xb0d/0xe10 [ 526.888087][ T9763] do_truncate+0x1b0/0x240 [ 526.893063][ T9763] vfs_truncate+0x266/0x300 [ 526.898114][ T9763] do_sys_truncate+0xf6/0x1c0 [ 526.903344][ T9763] do_syscall_64+0x55/0xb0 [ 526.908309][ T9763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.914757][ T9763] [ 526.914757][ T9763] other info that might help us debug this: [ 526.914757][ T9763] [ 526.925470][ T9763] Possible unsafe locking scenario: [ 526.925470][ T9763] [ 526.932949][ T9763] CPU0 CPU1 [ 526.938335][ T9763] ---- ---- [ 526.943728][ T9763] rlock(&sbi->s_writepages_rwsem); [ 526.949052][ T9763] lock(&ei->xattr_sem); [ 526.956060][ T9763] lock(&sbi->s_writepages_rwsem); [ 526.963909][ T9763] lock(&ei->xattr_sem); [ 526.968276][ T9763] [ 526.968276][ T9763] *** DEADLOCK *** [ 526.968276][ T9763] [ 526.976446][ T9763] 3 locks held by syz.4.1133/9763: [ 526.981577][ T9763] #0: ffff88805bc0c418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 526.990855][ T9763] #1: ffff888060168410 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x19c/0x240 [ 527.001166][ T9763] #2: ffff88805bc0ac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 527.011670][ T9763] [ 527.011670][ T9763] stack backtrace: [ 527.017728][ T9763] CPU: 0 PID: 9763 Comm: syz.4.1133 Not tainted syzkaller #0 [ 527.025476][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.035663][ T9763] Call Trace: [ 527.038978][ T9763] [ 527.041933][ T9763] dump_stack_lvl+0x18c/0x250 [ 527.046641][ T9763] ? load_image+0x420/0x420 [ 527.051176][ T9763] ? show_regs_print_info+0x20/0x20 [ 527.056409][ T9763] ? print_circular_bug+0x12b/0x1a0 [ 527.061639][ T9763] check_noncircular+0x2fc/0x400 [ 527.066618][ T9763] ? print_deadlock_bug+0x5d0/0x5d0 [ 527.071844][ T9763] ? lockdep_lock+0xf5/0x230 [ 527.076461][ T9763] ? _find_first_zero_bit+0xd3/0x100 [ 527.081787][ T9763] __lock_acquire+0x2df1/0x7d40 [ 527.086681][ T9763] ? verify_lock_unused+0x140/0x140 [ 527.091924][ T9763] lock_acquire+0x19e/0x420 [ 527.096464][ T9763] ? ext4_destroy_inline_data+0x28/0xe0 [ 527.102392][ T9763] ? __might_sleep+0xe0/0xe0 [ 527.107023][ T9763] ? read_lock_is_recursive+0x20/0x20 [ 527.112444][ T9763] ? __might_sleep+0xe0/0xe0 [ 527.117070][ T9763] ? register_lock_class+0xc4/0x8a0 [ 527.122299][ T9763] down_write+0x97/0x200 [ 527.126577][ T9763] ? ext4_destroy_inline_data+0x28/0xe0 [ 527.132160][ T9763] ? down_read_killable+0x340/0x340 [ 527.137391][ T9763] ? mark_lock+0x94/0x320 [ 527.141801][ T9763] ? ext4_journal_check_start+0x178/0x250 [ 527.147566][ T9763] ext4_destroy_inline_data+0x28/0xe0 [ 527.152978][ T9763] ext4_do_writepages+0x4f0/0x3990 [ 527.158132][ T9763] ? verify_lock_unused+0x140/0x140 [ 527.163361][ T9763] ? __lock_acquire+0x1347/0x7d40 [ 527.168423][ T9763] ? verify_lock_unused+0x140/0x140 [ 527.173665][ T9763] ? verify_lock_unused+0x140/0x140 [ 527.178901][ T9763] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 527.185795][ T9763] ? rcu_read_lock_any_held+0xb4/0x140 [ 527.191294][ T9763] ext4_writepages+0x1dd/0x350 [ 527.196103][ T9763] ? ext4_read_folio+0x2f0/0x2f0 [ 527.201077][ T9763] ? __rwlock_init+0x150/0x150 [ 527.205875][ T9763] ? __lock_acquire+0x1347/0x7d40 [ 527.210938][ T9763] ? do_raw_spin_unlock+0x121/0x230 [ 527.216175][ T9763] ? ext4_read_folio+0x2f0/0x2f0 [ 527.221154][ T9763] do_writepages+0x3b3/0x630 [ 527.225892][ T9763] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 527.231649][ T9763] ? __lock_acquire+0x7d40/0x7d40 [ 527.236705][ T9763] ? __rwlock_init+0x150/0x150 [ 527.241507][ T9763] ? __lock_acquire+0x1347/0x7d40 [ 527.246563][ T9763] ? do_raw_spin_unlock+0x121/0x230 [ 527.251803][ T9763] filemap_fdatawrite_wbc+0x122/0x180 [ 527.257218][ T9763] filemap_flush+0xe4/0x150 [ 527.261760][ T9763] ? filemap_fdatawrite_range+0x160/0x160 [ 527.267530][ T9763] ? __asan_memset+0x22/0x40 [ 527.272157][ T9763] ext4_convert_inline_data+0x18f/0x5f0 [ 527.277737][ T9763] ? ktime_get_coarse_real_ts64+0x3a/0x120 [ 527.283576][ T9763] ? ext4_inline_data_truncate+0xb90/0xb90 [ 527.289422][ T9763] ? setattr_prepare+0x1e6/0xac0 [ 527.294405][ T9763] ? i_gid_needs_update+0x51/0x160 [ 527.299571][ T9763] ext4_setattr+0xf0d/0x1dc0 [ 527.304252][ T9763] ? bpf_lsm_inode_setattr+0x9/0x10 [ 527.309487][ T9763] ? ext4_write_inode+0x550/0x550 [ 527.314558][ T9763] notify_change+0xb0d/0xe10 [ 527.319190][ T9763] do_truncate+0x1b0/0x240 [ 527.323640][ T9763] ? put_page_bootmem+0x2c0/0x2c0 [ 527.328702][ T9763] ? bpf_lsm_path_truncate+0x9/0x10 [ 527.333935][ T9763] vfs_truncate+0x266/0x300 [ 527.338474][ T9763] do_sys_truncate+0xf6/0x1c0 [ 527.343180][ T9763] ? lock_chain_count+0x20/0x20 [ 527.348084][ T9763] ? break_lease+0xd0/0xd0 [ 527.352537][ T9763] ? lockdep_hardirqs_on+0x98/0x150 [ 527.357773][ T9763] do_syscall_64+0x55/0xb0 [ 527.362214][ T9763] ? clear_bhb_loop+0x40/0x90 [ 527.366924][ T9763] ? clear_bhb_loop+0x40/0x90 [ 527.371646][ T9763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.377571][ T9763] RIP: 0033:0x7f07f959ce59 [ 527.382029][ T9763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.402016][ T9763] RSP: 002b:00007f07fa404028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 527.410464][ T9763] RAX: ffffffffffffffda RBX: 00007f07f9816090 RCX: 00007f07f959ce59 [ 527.418480][ T9763] RDX: 0000000000000000 RSI: 0000000000009c56 RDI: 0000200000000000 [ 527.426609][ T9763] RBP: 00007f07f9632d6f R08: 0000000000000000 R09: 0000000000000000 [ 527.434610][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.442606][ T9763] R13: 00007f07f9816128 R14: 00007f07f9816090 R15: 00007ffcc406c5c8 [ 527.450642][ T9763] [ 527.500524][ T9760] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 527.715813][ T9763] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 54 with error 28 [ 527.776507][ T9763] EXT4-fs (loop4): This should not happen!! Data will be lost [ 527.776507][ T9763] [ 527.808392][ T9763] EXT4-fs (loop4): Total free blocks count 0 [ 527.849870][ T9763] EXT4-fs (loop4): Free/Dirty block details [ 527.872749][ T9763] EXT4-fs (loop4): free_blocks=66060288 [ 527.892712][ T9763] EXT4-fs (loop4): dirty_blocks=64 [ 527.914119][ T9763] EXT4-fs (loop4): Block reservation details [ 527.942978][ T9763] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 527.968036][ T9763] EXT4-fs error (device loop4) in ext4_setattr:5682: error 28 [ 528.067519][ T8096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.