last executing test programs: 1m14.797877745s ago: executing program 3 (id=35): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r4, r2, r3, 0x2000001, 0x80000001, 0x7f, 0x0, 0x2, 0x4000000, 0x5, 0x20000}) 1m14.558948475s ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x400, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) 1m14.332173963s ago: executing program 3 (id=40): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m12.115820842s ago: executing program 3 (id=49): syz_open_dev$vbi(0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m10.312007838s ago: executing program 3 (id=58): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 1m8.781363331s ago: executing program 3 (id=62): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffff9}, 0x1c, 0x0}}], 0x1, 0x20004808) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/5, 0x5}, 0x9d39}], 0x1, 0x12141, 0x0) 1m8.503206943s ago: executing program 32 (id=62): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffff9}, 0x1c, 0x0}}], 0x1, 0x20004808) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/5, 0x5}, 0x9d39}], 0x1, 0x12141, 0x0) 11.801146118s ago: executing program 1 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000340)={[{@barrier}, {@autodefrag}, {@notreelog}, {@enospc_debug}, {@noflushoncommit}, {@usebackuproot}, {@max_inline={'max_inline', 0x3d, [0x37, 0x37, 0x6b, 0x37]}}, {@clear_cache}, {@ssd_spread}]}, 0x1, 0x55ae, &(0x7f0000005600)="$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") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r6, @ANYRESDEC=r5, @ANYRES16=r2, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRESHEX=0x0, @ANYRES32=r1], 0x5, 0x0, &(0x7f0000000000)) 10.675816388s ago: executing program 4 (id=387): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x80) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c) fcntl$setlease(r2, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 10.493142784s ago: executing program 4 (id=388): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xd, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 10.262869272s ago: executing program 4 (id=393): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x1a2, &(0x7f0000000280)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) 9.946383798s ago: executing program 4 (id=394): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c1, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffbf, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0xd18d3}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0x6, &(0x7f0000000140)="194e8c9ed853", 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.861257134s ago: executing program 0 (id=396): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000080)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@nobarrier}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFSlUqBfVSpMRV7PfWu8+e7npsz9q7v5/07ds3b3a+b7yRMzOefRuAkdVYfTx5cr4I4d1P33n05aeK315fdld7jSOrj0XstUIIzY5+kW3v87jg6pWXzmzWFuH46mPqh8cut187HUJYDkfCZ6EVPlpc+vLD9x45+vHrU7e8dfGZV3Zp99vy/QAAgGF06c9Lf7/vn396YO6rS4dPh8n28nR83or96XjcfyweKKfj5Ubo7hcd0WkiW28sRiNbbyxbbzzLM16Sr5ltp1my3kSPfGMdyzbbTwAAANiP0nltKxSNha5+o7GwsHbef93nsxPFwnPnl85dGFChAAAAQGX/eXX1plshhBBCCCGEEEIMcazMDvoKBAAAADBq8vnCNlje2Zm62ltr9Zf/8sONzV8PO6Duf//y76/8H7zmNw4AANUN69Fk2q90HJ3mMcjnERzLXrfV4/9Gtp3xLdZZNq/gfplvsKzO/Oe6V5XVv9X3cVDK6s/nw9yryurP5+ncq8rqn6y5jqrK6p+quY6qyuo/UHMdVZXVf7DmOqoqq3+65jqqKqt/puY6qiqr/4aa66iqrP5DNddRVVn9++W22rL6WzXXUVVZ/XM111FVWf031lxHVWX131RzHVWV1X9zzXUMyp2xTT+Hw9l45/lzfk63X87xAAAAYNT91/x/QgghhBBCCCHE0Merg74AAQAAAAxc+lxA+tT7SpTGx3qMj/cYb/YYn+gxPtljHAAAAAjhd2+cu+3tYv1z/tudDy/NG5XmX9rqPEb5fIRbzb/dec+2m3+/zFsGAADAaCm+99m1+x99/4W5ry4dPt1x9nstnu+meUDH47WBT2I/3Rcwk/WLdA59ujtPo2S9/PrADWXbe3ybOwoAAAAjLJ2/t0LRWOg4726FRmNhYf18fD40i3Pnl84ei/30/Sx/nG1OXl/+UM11AwAAAP1bP9/f/Pw/fY/vfJgoFp47v3Tuwlp/pr282ei8LjC7vrzovC7QypYfL1l+IvbT93f+YPbA6vKFMz9cemqndx4AAABGxIUXLz7z5NLS2R954oknnrSfDPo3EwAAsNO++OKd5o9PzPx+7fP/6/Pfpc//H4n9Vpzb7y9xhXSfQPocwIbP6z/RnWe2bL3nu9drZeuNxZjM6p7q2E7omG8wvW6uLF+rezsTJfmms3wzWb58noLxbP2U71C2PJ+fMK03my3P52Ecz3IUWf67AwAAAJRbfOHZ5xcvvHjxwfPPPvn02afPPnfi+Knvnjp17KHvPLS4el//Yufd/QAAAMB+tH7T76ArAQAAAAAAAAAAAAAAAAAAgNFVx9eJDXofAQAAYNT9+9UQwrIQoiTWvgJz8HUIIYQQQvSOsT1QgxBiz8bKSv5N8wAAAAC76+qVl850thssFzuar7211lpzLeZN7cyDf5u7Hmm1yw93Xy85uKPVMOrq/vcv//7K/8FrO5t/Kj3p+/dfo3sDp6vlvXfxl/Od+W8f7zN/vv+PV8t/NMt/b+gv/8r7Wf4nquW/L8t/sM/8G/b/+Wr574/552P/6D395u9+/ydjm/bjQJ/5v53t/1Oh3/zZ/rf6TJh5IOYHgFHUGHQBuyQdJaTj6OnYT/sbDzdDfvfDVo//G9l2xrddefd203HQrbGfjpdmsrzJVuufzrZ3Q8U6c/vlrpKy+nfqfdxtZfU3a66jqrL6J2quo6qy+idrrqOqsvqnaq6jqrL6+z0PHbSy+vfLdeWy+qdrrqOqsvpnaq6jqrL6t/r/+KCU1X+o5jqqKqt/tuY6qiqrv+JltdqV1T9Xcx1VldV/Y811VFVW/00111FVWf0311zHoNwR27Lz4XT+ORvHUr+V9Sc3+VkO67UFAAAA2G/+Zf4/IYQQQgghhBBi6GNlZdBXIBik3f00MwB7ld//o837P9q8/6PN+8//k+7hL7J+MtZjfLzHeLPH+EQ2nv97newxflO23ZUojd/cY/xrPcYP9Ri/tcf4fI/x23qM395j/I4e4wAAAIyGW2Lr/BAAAACG18u/+uTN39z7xJW5ry4dPh0mNsw7fyz2J+Pf1t+I/Xze+6QZ/+b/k9j/RWz/ENt/ZOu7/wQAAAB2X/qeGH//BwAAgOGVvqfU+T8AAAAMr7nYOv8HAACA4XVjbJ3/AwAAwBArpjZfHNt0XeDu2PY7rx8AsPd9PbZ3xvZwbO+K7Tdim44D7ontN2uqDwDYOT///k9PvV2sz/d/Ihu/GpendoPltSsFRaN7Jv8DsT0Y22/1WU/+fQD95k8O9Zlnt/LPbjM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8GquPJ0/OFyG8++k7j/5s4s2/Xl92V3uNI6uPRey1QgjN9uvS6Hr/13HFq1deOtPZXottEY6HIhTt5eGxy+1M0yGE5XAkfBZa4aPFpS8/fO+Rox+/PnXLWxefeWUXfwRd+wcAAADD6H8BAAD//8WNHkw=") r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 9.861024045s ago: executing program 2 (id=397): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0x400}], 0x18, 0x20000840}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4040845}, 0x40000) recvmsg$can_bcm(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000080)=""/138, 0x8a}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000c40)=""/138, 0x8a}, {&(0x7f0000000940)=""/246, 0xf6}, {&(0x7f0000000680)=""/148, 0x94}], 0x6}, 0x0) 9.499664043s ago: executing program 4 (id=398): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 9.498012464s ago: executing program 2 (id=399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x28800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xde14f6606b4aed1d) 9.41659469s ago: executing program 0 (id=400): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 9.275613972s ago: executing program 1 (id=402): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)={"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"}) syz_usb_connect(0x0, 0x138, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xc0, 0xe7, 0x9f, 0x10, 0x1199, 0x6859, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x126, 0x2, 0xf, 0x8, 0x60, 0x5, [{{0x9, 0x4, 0xae, 0x1, 0x6, 0xf7, 0x34, 0x51, 0x0, [], [{{0x9, 0x5, 0x8, 0xa, 0x20, 0x2, 0x2, 0x0, [@generic={0x58, 0xe, "a052cbfb3cc656b28c4608c0bd92f9bda347fd10be0e9c2b13dd2ed50c46952e2c708a964e2a1e396fe540b469affc969ff306807e8bcb681b5359aae2fbec45e849314a5d207164559fa0d3a7901715c6f886370146"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x1, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x9, 0xc0}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x24, 0xac, 0x2}}, {{0x9, 0x5, 0x794fab014817e5b7, 0x8, 0x20, 0x32, 0xb, 0x4, [@generic={0x47, 0xc, "a5c48224b081cbdaba331dc6ecfe041ab405618d2b2569dac0d8216989fbc7917aa964ca3b3dc90d160c393e40e123f3cea7ab855bd365475133b3eeebc880cca4fd1cf34c"}]}}]}}, {{0x9, 0x4, 0x5, 0x80, 0x2, 0x9f, 0xaa, 0xe4, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x1b}}], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x5, 0x9f}}]}}]}}]}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.721214039s ago: executing program 0 (id=404): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000001c0)={[{@dax}, {@noquota}, {@qnoenforce}, {@swidth}, {@dax}, {@dax}, {@gqnoenforce}, {@usrquota}, {@dax_always}]}, 0x1, 0x9799, &(0x7f000000a5c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) ioctl$FS_IOC_GETFSMAP(r0, 0xc0105872, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00L']) 4.721027479s ago: executing program 4 (id=405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d7649507481edcff41f7349c9fbc15468ac5b3101bd"], 0x66) 4.720863839s ago: executing program 2 (id=406): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e23, 0x7fffffff, @mcast1}}}, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000020000000e7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006ce11bc3008b071000900000000000000000000000000009444000000002000000000000005"], 0x310) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 4.668367963s ago: executing program 1 (id=407): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x60000000, 0x0, 0xffffffffffffff1f, 0x0, 0x0, 0x7, 0x0, 0xfffffffe}, 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 4.564076512s ago: executing program 1 (id=408): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB="0000000004000000b705"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 4.481437209s ago: executing program 5 (id=409): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) close(0x4) 4.472290859s ago: executing program 2 (id=410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)=ANY=[], 0x3c}}, 0x4044081) write$P9_RMKNOD(r1, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x80, 0x2, 0x5}}, 0x14) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/4072, 0xfe8, 0x1, 0x0, 0xfffffffffffffedc}, &(0x7f0000000200)=0x40) 4.262583556s ago: executing program 1 (id=411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.080898881s ago: executing program 5 (id=412): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) 3.925275043s ago: executing program 1 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x2, 0x18c, 0xa}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000004) 3.619091378s ago: executing program 5 (id=414): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840) sendto$inet(r0, &(0x7f0000000c00)="ff2b", 0x2, 0x80, 0x0, 0x0) shutdown(r0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 3.357508379s ago: executing program 2 (id=415): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0xcf, 0x4e, 0xb3, 0xff, 0xaf0, 0x8300, 0x344c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x9, 0x60, 0x0, [{{0x9, 0x4, 0xe2, 0x1, 0x0, 0xf, 0x2a, 0xaf, 0x7}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.302306053s ago: executing program 5 (id=416): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x101, 0x1) getdents64(r2, &(0x7f0000000000)=""/48, 0x30) 3.182858193s ago: executing program 0 (id=417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x18, 0x7}) 3.109386439s ago: executing program 5 (id=418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000003c0), 0x12) ftruncate(r2, 0x8979) sendfile(r1, r2, 0x0, 0x108d) 3.064019023s ago: executing program 5 (id=419): unshare(0x62000000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0], 0xfd, 0x11c3, &(0x7f0000003600)="$eJzs209rI2UcB/Df1nWTzdpa/63uXnzwpJfB3YMH8VKkC7KBlbYRWkGY0lRDYhIyOSTioWdPvg7x6E1Q30DfhbciiF56cqRNbam0h/5N0c/nMPOD78zwe56BgQee2fng2y/bm0W2mQ9j5tatmOlHpN0UKWbiH1vxzs/v//nN8ura04V6fXEppScLK4/eSynNvfnTp19//9Yvw3uf/DD3YyW25z/b+f3xr9v3tx/s/LXyRatIrSJ1e8OUp/Veb5ivd5ppo1W0s5Q+7jTzopla3aI5OJZvdnr9/jjl3Y3ZWn/QLIqUd8ep3RynYS8NB+OUf563uinLsjRbC86pundofLdblmVEWT4fd6Isy/Ju1OJevBCzMRcvxny8FC/HK/FqvBb34/V4Ix7sXzXt5gEAAAAAAAAAAAAAAAAAAOC/xf//AAAAAAAAAAAAAAAAAAAAMH3Lq2tPF+r1xaWUqhG/bY0ao8bkPMmffFRfrKZ980d3/TEaNZ47zB9N8nQ8r0TtIH98Yn473n42yfeyD5/V/5U/jI2rHz4AAAD8L2Tp0Inr+yw7LZ9Ue+v3d09Z3z+8fW3D4JyK8VftvNNpDm5ScfeguQs+584l9FOd/mycv6hcfA4Vl1FUI+IGtHGmYsofJq7F0UufdicAAAAAAAAAAACcxZXuIqzYWQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN/swIEAAAAAgCB/6w0mKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFcAAAD//zKfcB0=") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') socket(0xa, 0x3, 0x3a) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/187, 0xbb}], 0x1, 0x46ae, 0x80a) 1.245294269s ago: executing program 0 (id=420): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x1, 0x0, 0x1001f0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$UHID_INPUT(r1, &(0x7f0000001200)={0x8, {"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", 0x1000}}, 0x1006) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 160.03µs ago: executing program 0 (id=421): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x521, &(0x7f0000000e00)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 0s ago: executing program 2 (id=422): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2400c000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x78) kernel console output (not intermixed with test programs): comes ready [ 74.080150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.090618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.101185][ T4309] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.102538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.126794][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.139118][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.149949][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.161293][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.172621][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.183845][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.194787][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.209764][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.221978][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.236484][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.247121][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.257440][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.269556][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.281063][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.292624][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.305383][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.313060][ T4309] usb 4-1: Using ep0 maxpacket: 16 [ 74.318873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.333416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.336744][ T4309] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 74.351707][ T4309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.354749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.360002][ T4309] usb 4-1: Product: syz [ 74.360019][ T4309] usb 4-1: Manufacturer: syz [ 74.360032][ T4309] usb 4-1: SerialNumber: syz [ 74.384232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.386081][ T4309] usb 4-1: config 0 descriptor?? [ 74.405410][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.406361][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.417941][ T4309] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 74.435301][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.439374][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.454308][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.465116][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.475724][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.487243][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.497304][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.508204][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.522097][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.541571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.550625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.561964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.580113][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.592498][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.611719][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.622747][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.659797][ T4273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.683839][ T4273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.698027][ T4309] ssu100: probe of 4-1:0.0 failed with error -71 [ 74.700210][ T4273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.715912][ T4309] usb 4-1: USB disconnect, device number 2 [ 74.723802][ T4273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.741693][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.818286][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.866781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.897424][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.926332][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.950152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.968752][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.986321][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.992648][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.029596][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.038061][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.053090][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.076299][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 75.084870][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 75.084883][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 75.118415][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.118761][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.139147][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.146857][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.149233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.164601][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 75.171591][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 75.185466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.364658][ T4390] loop1: detected capacity change from 0 to 24 [ 75.375378][ T4392] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 75.772150][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.933538][ T4393] loop0: detected capacity change from 0 to 32768 [ 76.000145][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.016390][ T26] audit: type=1800 audit(1756483034.929:2): pid=4393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="file1" dev="loop0" ino=0 res=0 errno=0 [ 76.048220][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.070947][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.087467][ T22] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.124088][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.169045][ T4403] find_entry called with index = 0 [ 76.201559][ T22] usb 4-1: config 0 descriptor?? [ 76.216810][ T4403] read_mapping_page failed! [ 76.227442][ T4403] ERROR: (device loop0): txCommit: [ 76.227442][ T4403] [ 76.233223][ T4397] loop1: detected capacity change from 0 to 32768 [ 76.292147][ T4397] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.8 (4397) [ 76.378867][ T4397] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 76.439465][ T4397] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 76.457808][ T4405] loop4: detected capacity change from 0 to 4096 [ 76.504927][ T4397] BTRFS info (device loop1): force zlib compression, level 3 [ 76.588692][ T4397] BTRFS info (device loop1): force clearing of disk cache [ 76.596081][ T4397] BTRFS info (device loop1): turning off barriers [ 76.675569][ T4397] BTRFS info (device loop1): doing ref verification [ 76.686808][ T22] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xe [ 76.706793][ T4397] BTRFS info (device loop1): enabling disk space caching [ 76.709602][ T22] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 76.757568][ T4397] BTRFS info (device loop1): disk space caching is enabled [ 76.764764][ T22] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 76.880143][ T22] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 76.920822][ T4408] loop2: detected capacity change from 0 to 4096 [ 77.017381][ T22] usb 4-1: USB disconnect, device number 3 [ 77.165980][ T4273] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 77.287668][ T4273] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 77.303289][ T4397] BTRFS info (device loop1): enabling ssd optimizations [ 77.346921][ T4397] BTRFS info (device loop1): rebuilding free space tree [ 77.386669][ T4425] fido_id[4425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 77.571823][ T4397] BTRFS info (device loop1): disabling free space tree [ 77.605135][ T4397] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.647818][ T4397] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.870992][ T4343] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.887204][ T4443] loop3: detected capacity change from 0 to 512 [ 77.908252][ T4326] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.946805][ T4443] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.994633][ T4266] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 78.006713][ T4443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.014171][ T4441] loop2: detected capacity change from 0 to 4096 [ 78.053936][ T4443] EXT4-fs (loop3): 1 truncate cleaned up [ 78.069750][ T4343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.090979][ T4443] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.111631][ T4326] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 78.138076][ T4343] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 78.155368][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.183869][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.213925][ T4326] usb 1-1: config 0 descriptor?? [ 78.235758][ T4326] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 78.251861][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 78.254930][ T4343] usb 5-1: config 0 descriptor?? [ 78.461524][ T4278] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 78.493592][ T4343] usbhid 5-1:0.0: can't add hid device: -71 [ 78.501549][ T4278] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 78.509387][ T4343] usbhid: probe of 5-1:0.0 failed with error -71 [ 78.511731][ T4343] usb 5-1: USB disconnect, device number 2 [ 78.755137][ T4464] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.278352][ T4316] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 79.470391][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.485466][ T4316] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 79.497277][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.524411][ T4316] usb 2-1: config 0 descriptor?? [ 79.558153][ C0] sched: RT throttling activated [ 79.564940][ T4326] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 79.947914][ T4316] uclogic 0003:28BD:0074.0002: interface is invalid, ignoring [ 80.115660][ T4462] loop3: detected capacity change from 0 to 262144 [ 80.131475][ T4326] gspca_cpia1: usb_control_msg 05, error -71 [ 80.138893][ T4326] cpia1 1-1:0.0: unexpected systemstate: 00 [ 80.150854][ T4462] F2FS-fs (loop3): invalid crc value [ 80.160345][ T4326] usb 1-1: USB disconnect, device number 2 [ 80.181840][ T4459] usb 2-1: USB disconnect, device number 2 [ 80.194057][ T4462] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.254068][ T4462] F2FS-fs (loop3): Start checkpoint disabled! [ 80.271947][ T4462] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 80.428822][ T4343] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.491283][ T4477] loop2: detected capacity change from 0 to 32768 [ 80.618307][ T4343] usb 5-1: Using ep0 maxpacket: 32 [ 80.645951][ T4343] usb 5-1: device descriptor read/all, error -71 [ 80.696834][ T4477] XFS (loop2): Mounting V5 Filesystem [ 80.893206][ T4477] XFS (loop2): Ending clean mount [ 81.002403][ T4477] XFS (loop2): Quotacheck needed: Please wait. [ 81.016751][ T4498] capability: warning: `syz.4.29' uses deprecated v2 capabilities in a way that may be insecure [ 81.153228][ T4477] XFS (loop2): Quotacheck: Done. [ 81.652595][ T4278] XFS (loop2): Unmounting Filesystem [ 81.846348][ T4521] loop0: detected capacity change from 0 to 1024 [ 81.977467][ T4521] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 82.080339][ T4528] vivid-003: disconnect [ 82.110352][ T4527] vivid-003: reconnect [ 82.281966][ T126] cfg80211: failed to load regulatory.db [ 82.308682][ T4510] loop4: detected capacity change from 0 to 32768 [ 82.359475][ T4510] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.32 (4510) [ 82.398591][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 82.525007][ T4510] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.604758][ T4510] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 82.678384][ T4510] BTRFS info (device loop4): setting nodatacow, compression disabled [ 82.708539][ T4510] BTRFS info (device loop4): max_inline at 0 [ 82.778356][ T4510] BTRFS info (device loop4): enabling disk space caching [ 82.864434][ T4510] BTRFS info (device loop4): turning off barriers [ 82.955923][ T4510] BTRFS info (device loop4): turning on flush-on-commit [ 82.995845][ T4510] BTRFS info (device loop4): doing ref verification [ 83.026234][ T4510] BTRFS info (device loop4): force clearing of disk cache [ 83.082819][ T4510] BTRFS info (device loop4): enabling ssd optimizations [ 83.120853][ T4510] BTRFS info (device loop4): max_inline at 4096 [ 83.127601][ T4510] BTRFS info (device loop4): disk space caching is enabled [ 83.236866][ T4545] loop2: detected capacity change from 0 to 1024 [ 83.583119][ T4530] loop3: detected capacity change from 0 to 40427 [ 83.607943][ T4530] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 83.624289][ T4530] F2FS-fs (loop3): invalid crc value [ 83.668619][ T4510] BTRFS info (device loop4): rebuilding free space tree [ 83.707127][ T4510] BTRFS info (device loop4): disabling free space tree [ 83.719488][ T26] audit: type=1800 audit(1756483042.639:3): pid=4565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.45" name="bus" dev="loop2" ino=27 res=0 errno=0 [ 83.743904][ T4530] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.758792][ T4510] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.796043][ T4538] loop0: detected capacity change from 0 to 32768 [ 83.838318][ T4510] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.902991][ T4530] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.990002][ T4529] syz.3.40: attempt to access beyond end of device [ 83.990002][ T4529] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 83.991838][ T4538] XFS (loop0): Mounting V5 Filesystem [ 84.059776][ T4576] input: syz0 as /devices/virtual/input/input5 [ 84.115111][ T9] hfsplus: b-tree write err: -5, ino 4 [ 84.243593][ T4265] syz-executor: attempt to access beyond end of device [ 84.243593][ T4265] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 84.370196][ T4538] XFS (loop0): Ending clean mount [ 84.479102][ T4583] loop1: detected capacity change from 0 to 1024 [ 84.575809][ T4264] XFS (loop0): Unmounting Filesystem [ 84.580279][ T4273] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.588410][ T26] audit: type=1800 audit(1756483043.499:4): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.50" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 84.688331][ T4343] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.930797][ T4343] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 84.942647][ T4343] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 84.953426][ T4343] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 84.963069][ T4343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.964285][ T4587] loop3: detected capacity change from 0 to 1024 [ 84.983073][ T4584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.093140][ T4587] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 85.104003][ T4587] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 85.115701][ T4587] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.49: Failed to acquire dquot type 0 [ 85.143721][ T4587] EXT4-fs error (device loop3): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 85.208497][ T4587] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #13: comm syz.3.49: corrupted inode contents [ 85.248589][ T4343] usb 3-1: USB disconnect, device number 2 [ 85.289786][ T4587] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #13: comm syz.3.49: mark_inode_dirty error [ 85.332440][ T4587] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #13: comm syz.3.49: corrupted inode contents [ 85.366016][ T4587] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.49: mark_inode_dirty error [ 85.398076][ T4587] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #13: comm syz.3.49: corrupted inode contents [ 85.503188][ T4587] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 85.518659][ T4587] EXT4-fs error (device loop3): ext4_do_update_inode:5254: inode #13: comm syz.3.49: corrupted inode contents [ 85.545142][ T4587] EXT4-fs error (device loop3): ext4_truncate:4312: inode #13: comm syz.3.49: mark_inode_dirty error [ 85.557693][ T4587] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 85.577292][ T4587] EXT4-fs (loop3): 1 truncate cleaned up [ 85.602081][ T4587] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.643026][ T4282] udevd[4282]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.666892][ T4587] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 85.722494][ T4587] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 85.764387][ T4592] loop4: detected capacity change from 0 to 32768 [ 85.783468][ T4587] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 85.792043][ T4592] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.51 (4592) [ 85.823374][ T4587] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 85.885951][ T4587] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.49: Failed to acquire dquot type 0 [ 85.899094][ T4592] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.926113][ T4592] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 85.947103][ T4587] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 85.984921][ T4592] BTRFS info (device loop4): using free space tree [ 86.051632][ T4265] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /10/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 86.085702][ T4265] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 86.125889][ T4265] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /10/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 86.162408][ T4612] netlink: 56 bytes leftover after parsing attributes in process `syz.0.57'. [ 86.173597][ T4612] netlink: 56 bytes leftover after parsing attributes in process `syz.0.57'. [ 86.194949][ T4265] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 86.228488][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.278819][ T4265] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /10/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 86.280661][ T4592] BTRFS info (device loop4): enabling ssd optimizations [ 86.301018][ T4316] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.317714][ T4265] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 86.351482][ T4265] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /10/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 86.377533][ T4265] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 74: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=11008, inode=0, rec_len=0, size=1024 fake=0 [ 86.402206][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.416807][ T4265] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /10/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 86.439801][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.440461][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.497613][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.511731][ T22] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 86.525355][ T4316] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.544100][ T4316] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 86.563690][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.574859][ T4316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.600626][ T22] usb 2-1: config 0 descriptor?? [ 86.616462][ T4316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 86.629153][ T4316] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 86.670632][ T4316] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.682589][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.692078][ T4316] usb 3-1: Product: syz [ 86.697593][ T4316] usb 3-1: Manufacturer: syz [ 86.714856][ T4273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.732459][ T4316] cdc_wdm 3-1:1.0: skipping garbage [ 86.741100][ T4316] cdc_wdm 3-1:1.0: skipping garbage [ 86.798483][ T4344] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.858801][ T4316] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 86.866698][ T4316] cdc_wdm 3-1:1.0: Unknown control protocol [ 87.044590][ T4344] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.060744][ T22] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 87.072719][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 87.079910][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 87.096358][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 87.103029][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 87.113918][ T22] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0003/input/input6 [ 87.126217][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 87.126246][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 87.140288][ T4309] usb 3-1: USB disconnect, device number 3 [ 87.157705][ T4628] loop4: detected capacity change from 0 to 128 [ 87.162617][ T4344] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 87.176262][ T4628] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 87.182479][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 87.199601][ T4344] usb 1-1: Product: syz [ 87.203839][ T4344] usb 1-1: Manufacturer: syz [ 87.214321][ T22] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 87.227949][ T4344] usb 1-1: SerialNumber: syz [ 87.266939][ T4628] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.359195][ T22] usb 2-1: USB disconnect, device number 3 [ 87.449440][ T4344] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 87.492892][ T4629] fido_id[4629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 87.620278][ T4363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.688859][ T4326] usb 1-1: USB disconnect, device number 3 [ 87.733847][ T4326] usblp0: removed [ 87.809275][ T4363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.904027][ T4634] loop2: detected capacity change from 0 to 512 [ 87.942239][ T4363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.971485][ T4634] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.054387][ T4634] EXT4-fs (loop2): 1 truncate cleaned up [ 88.137466][ T4634] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.150532][ T4363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.378054][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 88.903611][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.919424][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.928404][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.941936][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.951056][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.959708][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.006828][ T4636] loop4: detected capacity change from 0 to 32768 [ 89.122041][ T4636] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 89.159563][ T4636] XFS (loop4): Mounting V5 Filesystem [ 89.331164][ T4636] XFS (loop4): Ending clean mount [ 89.413225][ T4636] XFS (loop4): Quotacheck needed: Please wait. [ 89.532990][ T4636] XFS (loop4): Quotacheck: Done. [ 89.646196][ T26] audit: type=1800 audit(1756483048.559:5): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.65" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 89.669070][ T4676] loop1: detected capacity change from 0 to 4096 [ 89.683059][ T4676] ======================================================= [ 89.683059][ T4676] WARNING: The mand mount option has been deprecated and [ 89.683059][ T4676] and is ignored by this kernel. Remove the mand [ 89.683059][ T4676] option from the mount to silence this warning. [ 89.683059][ T4676] ======================================================= [ 89.893608][ T4646] loop2: detected capacity change from 0 to 32768 [ 89.975006][ T4646] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.69 (4646) [ 90.009635][ T4684] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.079044][ T4646] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.128380][ T4646] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 90.131457][ T4273] XFS (loop4): Unmounting Filesystem [ 90.137802][ T4646] BTRFS info (device loop2): enabling auto defrag [ 90.137835][ T4646] BTRFS info (device loop2): disabling tree log [ 90.184834][ T4646] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 90.216573][ T4646] BTRFS info (device loop2): trying to use backup root at mount time [ 90.254152][ T4646] BTRFS info (device loop2): max_inline at 4096 [ 90.264959][ T4651] chnl_net:caif_netlink_parms(): no params data found [ 90.272256][ T4646] BTRFS info (device loop2): force clearing of disk cache [ 90.319036][ T4646] BTRFS info (device loop2): enabling ssd optimizations [ 90.346732][ T4646] BTRFS info (device loop2): using spread ssd allocation scheme [ 90.367000][ T4646] BTRFS info (device loop2): using free space tree [ 90.841050][ T4680] loop0: detected capacity change from 0 to 40427 [ 90.875741][ T4646] BTRFS info (device loop2): rebuilding free space tree [ 90.928223][ T4680] F2FS-fs (loop0): invalid crc value [ 90.984612][ T4710] loop1: detected capacity change from 0 to 2048 [ 90.991270][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 91.029063][ T4680] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.127856][ T4710] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.140599][ T4651] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.165991][ T4651] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.225498][ T4651] device bridge_slave_0 entered promiscuous mode [ 91.236441][ T4680] F2FS-fs (loop0): Start checkpoint disabled! [ 91.293065][ T4680] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 91.301822][ T4278] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.485639][ T4459] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.617401][ T4421] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (4421) [ 91.719785][ T4651] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.727858][ T4651] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.742041][ T4459] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 91.758810][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 91.765152][ T4651] device bridge_slave_1 entered promiscuous mode [ 91.768687][ T4459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.854000][ T4459] usb 5-1: Product: syz [ 91.875867][ T4459] usb 5-1: Manufacturer: syz [ 91.887837][ T4459] usb 5-1: SerialNumber: syz [ 91.929012][ T4459] usb 5-1: config 0 descriptor?? [ 92.007496][ T4651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.052922][ T4357] kworker/u4:6: attempt to access beyond end of device [ 92.052922][ T4357] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 92.200610][ T4746] loop1: detected capacity change from 0 to 4096 [ 92.260806][ T4459] usb 5-1: USB disconnect, device number 5 [ 92.407953][ T4651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.552847][ T4363] device hsr_slave_0 left promiscuous mode [ 92.616321][ T4363] device hsr_slave_1 left promiscuous mode [ 92.670801][ T4270] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 92.681235][ T4270] Bluetooth: hci2: Injecting HCI hardware error event [ 92.693136][ T4270] Bluetooth: hci2: hardware error 0x00 [ 92.693446][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.789043][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.837559][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.876021][ T4363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.940226][ T4363] device bridge_slave_1 left promiscuous mode [ 92.948984][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.042185][ T4760] loop0: detected capacity change from 0 to 512 [ 93.069933][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 93.083805][ T4363] device bridge_slave_0 left promiscuous mode [ 93.098649][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.101484][ T4760] FAT-fs (loop0): Unrecognized mount option "–þNÌ" or missing value [ 93.151203][ T4762] loop1: detected capacity change from 0 to 1024 [ 93.237943][ T4363] device veth1_macvtap left promiscuous mode [ 93.247284][ T4363] device veth0_macvtap left promiscuous mode [ 93.255981][ T4762] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.290172][ T4363] device veth1_vlan left promiscuous mode [ 93.335856][ T4363] device veth0_vlan left promiscuous mode [ 93.384012][ T4760] loop0: detected capacity change from 0 to 2048 [ 93.414216][ T4770] loop2: detected capacity change from 0 to 512 [ 93.454929][ T4760] FAT-fs (loop0): bogus sectors per cluster 3 [ 93.486430][ T4760] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 93.533557][ T4770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.568596][ T4760] FAT-fs (loop0): Can't find a valid FAT filesystem [ 93.601658][ T4770] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.838060][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 93.895193][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 94.176744][ T4781] loop1: detected capacity change from 0 to 64 [ 94.388093][ T4781] syz.1.88: attempt to access beyond end of device [ 94.388093][ T4781] loop1: rw=2049, sector=73, nr_sectors = 89 limit=64 [ 94.497261][ T4781] hfs: request for non-existent node 8 in B*Tree [ 94.517877][ T4781] hfs: request for non-existent node 8 in B*Tree [ 94.525106][ T4784] loop4: detected capacity change from 0 to 512 [ 94.533481][ T4781] hfs: request for non-existent node 9 in B*Tree [ 94.554243][ T4781] hfs: request for non-existent node 9 in B*Tree [ 94.835230][ T4270] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 94.837407][ T4784] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.91: corrupted inode contents [ 94.887774][ T4789] loop0: detected capacity change from 0 to 8192 [ 94.927587][ T4789] FAT-fs (loop0): bogus number of directory entries (9) [ 94.935392][ T4789] FAT-fs (loop0): Can't find a valid FAT filesystem [ 95.013947][ T4784] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #16: comm syz.4.91: mark_inode_dirty error [ 95.043487][ T4784] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.91: corrupted inode contents [ 95.064383][ T4784] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.91: mark_inode_dirty error [ 95.139504][ T4784] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.91: corrupted inode contents [ 95.155064][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 95.171997][ T4792] loop1: detected capacity change from 0 to 4096 [ 95.213965][ T4784] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 95.246473][ T4784] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #16: comm syz.4.91: corrupted inode contents [ 95.273837][ T4784] EXT4-fs error (device loop4): ext4_truncate:4312: inode #16: comm syz.4.91: mark_inode_dirty error [ 95.307838][ T4784] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 95.391501][ T4784] EXT4-fs (loop4): 1 truncate cleaned up [ 95.397655][ T4784] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 95.417612][ T4346] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 95.428348][ T4784] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.438039][ T26] audit: type=1800 audit(1756483054.349:6): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.92" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 95.478574][ T4346] EXT4-fs error (device loop4): ext4_release_dquot:6852: comm kworker/u4:5: Failed to release dquot type 1 [ 95.916149][ T4794] loop0: detected capacity change from 0 to 32768 [ 96.032961][ T4794] XFS (loop0): Mounting V5 Filesystem [ 96.069634][ T4363] team0 (unregistering): Port device team_slave_1 removed [ 96.145194][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 96.212790][ T4794] XFS (loop0): Ending clean mount [ 96.218445][ T4794] XFS (loop0): Quotacheck needed: Please wait. [ 96.338299][ T4794] XFS (loop0): Quotacheck: Done. [ 96.361851][ T4363] team0 (unregistering): Port device team_slave_0 removed [ 96.492453][ T4794] XFS (loop0): User initiated shutdown received. [ 96.524848][ T4794] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 96.572753][ T4363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.584220][ T4794] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 96.717958][ T4264] XFS (loop0): Unmounting Filesystem [ 96.725835][ T4363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.881816][ T4815] loop1: detected capacity change from 0 to 128 [ 97.179782][ T4808] loop4: detected capacity change from 0 to 40427 [ 97.199525][ T4808] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 97.228608][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 97.258063][ T4808] F2FS-fs (loop4): invalid crc value [ 97.287554][ T4808] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.301351][ T4820] loop0: detected capacity change from 0 to 512 [ 97.369488][ T4820] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.388082][ T4820] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.402251][ T4808] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.512779][ T4817] f2fs_ckpt-7:4: attempt to access beyond end of device [ 97.512779][ T4817] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.779653][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 98.167369][ T4830] loop4: detected capacity change from 0 to 512 [ 98.234573][ T4830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.344041][ T4830] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.447901][ T4830] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.480833][ T4826] loop1: detected capacity change from 0 to 32768 [ 98.503185][ T4826] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.99 (4826) [ 98.593344][ T4826] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.611394][ T4826] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 98.645034][ T4826] BTRFS info (device loop1): setting nodatacow, compression disabled [ 98.674070][ T4826] BTRFS info (device loop1): enabling disk space caching [ 98.698285][ T4826] BTRFS info (device loop1): turning off barriers [ 98.715817][ T4826] BTRFS info (device loop1): doing ref verification [ 98.736513][ T4826] BTRFS info (device loop1): force clearing of disk cache [ 98.770616][ T4363] bond0 (unregistering): Released all slaves [ 98.772586][ T4826] BTRFS info (device loop1): enabling ssd optimizations [ 98.803681][ T4826] BTRFS info (device loop1): max_inline at 4096 [ 98.810834][ T4826] BTRFS info (device loop1): disk space caching is enabled [ 99.013686][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 99.143367][ T4651] team0: Port device team_slave_0 added [ 99.160770][ T4860] loop4: detected capacity change from 0 to 64 [ 99.198985][ T4826] BTRFS info (device loop1): rebuilding free space tree [ 99.207990][ T4862] loop2: detected capacity change from 0 to 64 [ 99.221795][ T4651] team0: Port device team_slave_1 added [ 99.260390][ T4826] BTRFS info (device loop1): disabling free space tree [ 99.303393][ T4826] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.324141][ T4826] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.341774][ T4856] device pim6reg1 entered promiscuous mode [ 99.407074][ T4651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.420445][ T4860] hfs: walked past end of dir [ 99.425819][ T4651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.536653][ T4651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.562359][ T4273] hfs: node 4:3 still has 2 user(s)! [ 99.693973][ T4651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.723230][ T4651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.875865][ T4651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.118668][ T4651] device hsr_slave_0 entered promiscuous mode [ 100.133122][ T4651] device hsr_slave_1 entered promiscuous mode [ 100.149422][ T4326] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.172385][ T4266] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.355349][ T4882] loop0: detected capacity change from 0 to 8192 [ 100.368226][ T4326] usb 3-1: Using ep0 maxpacket: 8 [ 100.384580][ T4326] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 100.430672][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.458430][ T4326] usb 3-1: Product: syz [ 100.462749][ T4326] usb 3-1: Manufacturer: syz [ 100.481609][ T4326] usb 3-1: SerialNumber: syz [ 100.485151][ T4882] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.509901][ T4326] usb 3-1: config 0 descriptor?? [ 100.630597][ T4882] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 100.658588][ T4882] REISERFS (device loop0): using ordered data mode [ 100.665511][ T4882] reiserfs: using flush barriers [ 100.725829][ T4882] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.819124][ T4882] REISERFS (device loop0): checking transaction log (loop0) [ 100.910780][ T4882] REISERFS (device loop0): Using r5 hash to sort names [ 100.922988][ T4326] msi2500 3-1:0.0: Registered as swradio24 [ 100.935255][ T4326] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 100.955147][ T4882] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 100.990354][ T4326] usb 3-1: USB disconnect, device number 4 [ 101.362453][ T4897] loop1: detected capacity change from 0 to 512 [ 101.444651][ T4897] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.517506][ T4897] EXT4-fs (loop1): 1 truncate cleaned up [ 101.528796][ T4897] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.543073][ T4897] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.110: corrupted in-inode xattr [ 101.622164][ T4651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.651668][ T4651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.652014][ T4737] kernel read not supported for file /snd/controlC0 (pid: 4737 comm: kworker/1:17) [ 101.674564][ T4651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.721089][ T4897] EXT4-fs (loop1): Remounting filesystem read-only [ 101.752073][ T4651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.781381][ T4897] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1732: inode #15: comm syz.1.110: unable to update i_inline_off [ 101.813709][ T4907] loop0: detected capacity change from 0 to 512 [ 101.833572][ T4897] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.853463][ T4897] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.110: corrupted in-inode xattr [ 101.871413][ T4907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.899743][ T4911] loop4: detected capacity change from 0 to 512 [ 101.907436][ T4911] EXT4-fs: Ignoring removed oldalloc option [ 101.910744][ T4907] EXT4-fs (loop0): 1 truncate cleaned up [ 101.936679][ T4897] EXT4-fs (loop1): Remounting filesystem read-only [ 101.968371][ T4907] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.001466][ T4905] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.110: corrupted in-inode xattr [ 102.035194][ T4905] EXT4-fs (loop1): Remounting filesystem read-only [ 102.039418][ T4911] EXT4-fs (loop4): 1 truncate cleaned up [ 102.077322][ T4907] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.111: corrupted in-inode xattr [ 102.091074][ T4911] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.138018][ T26] audit: type=1804 audit(1756483061.049:7): pid=4911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.113" name="/newroot/19/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 102.189305][ T4651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.196699][ T4907] EXT4-fs (loop0): Remounting filesystem read-only [ 102.221361][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 102.221366][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.230705][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.235104][ T4737] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.253656][ T4907] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1732: inode #15: comm syz.0.111: unable to update i_inline_off [ 102.272910][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 102.301094][ T4907] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.111: corrupted in-inode xattr [ 102.317046][ T4651] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.370753][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.397670][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.423085][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.430780][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.449628][ T4907] EXT4-fs (loop0): Remounting filesystem read-only [ 102.449723][ T4922] Zero length message leads to an empty skb [ 102.463345][ T4737] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 102.488323][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.491669][ T4737] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 102.506456][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.508704][ T4925] [U] ÿ{®ÑÎt´@ [ 102.520311][ T4737] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.522781][ T4923] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.111: corrupted in-inode xattr [ 102.540433][ T4737] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 102.555537][ T4737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.563807][ T4737] usb 3-1: Product: syz [ 102.567988][ T4737] usb 3-1: Manufacturer: syz [ 102.573274][ T4737] usb 3-1: SerialNumber: syz [ 102.589317][ T4737] usb 3-1: config 0 descriptor?? [ 102.596881][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.613497][ T4737] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 102.621148][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.628604][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.634761][ T4923] EXT4-fs (loop0): Remounting filesystem read-only [ 102.654571][ T4737] usb 3-1: No valid video chain found. [ 102.688692][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.717857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.747378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.785677][ T4730] kernel write not supported for file /56/clear_refs (pid: 4730 comm: kworker/1:12) [ 102.790384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.815176][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 102.838886][ T4346] Bluetooth: hci5: Frame reassembly failed (-84) [ 102.849170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.864856][ T4730] usb 3-1: USB disconnect, device number 5 [ 102.866952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.919428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.929972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.939507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.949561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.958582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.968861][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.363123][ T4737] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.396171][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.405380][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.418999][ T4651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.448635][ T4730] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.568367][ T4737] usb 5-1: Using ep0 maxpacket: 16 [ 103.578567][ T4737] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 103.598219][ T4737] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 103.608764][ T4737] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 103.627433][ T4737] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 103.640460][ T4730] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.658442][ T4730] usb 1-1: config 0 has no interface number 0 [ 103.666244][ T4737] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 103.677034][ T4737] usb 5-1: config 0 has no interface number 0 [ 103.684206][ T4737] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 103.696887][ T4737] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 103.713083][ T4309] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.723099][ T4730] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 103.732756][ T4737] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.743594][ T4730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.753368][ T4737] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.768392][ T4730] usb 1-1: Product: syz [ 103.772598][ T4730] usb 1-1: Manufacturer: syz [ 103.777377][ T4730] usb 1-1: SerialNumber: syz [ 103.783504][ T4737] usb 5-1: config 0 interface 125 has no altsetting 0 [ 103.796472][ T4730] usb 1-1: config 0 descriptor?? [ 103.801918][ T4737] usb 5-1: config 0 interface 125 has no altsetting 2 [ 103.814465][ T4737] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 103.834248][ T4737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.854540][ T4737] usb 5-1: Product: syz [ 103.865886][ T4737] usb 5-1: Manufacturer: syz [ 103.871496][ T4737] usb 5-1: SerialNumber: syz [ 103.879500][ T4737] usb 5-1: config 0 descriptor?? [ 103.890683][ T4737] usb 5-1: selecting invalid altsetting 2 [ 103.928304][ T4309] usb 3-1: Using ep0 maxpacket: 32 [ 103.935367][ T4309] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 103.958294][ T4309] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 103.979952][ T4309] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.992595][ T4309] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.019813][ T4730] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 104.041465][ T4309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.055620][ T4309] usb 3-1: Product: syz [ 104.064740][ T4730] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.078363][ T4309] usb 3-1: Manufacturer: syz [ 104.083045][ T4309] usb 3-1: SerialNumber: syz [ 104.088957][ T4730] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 104.123457][ T4730] usb 1-1: media controller created [ 104.127136][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.153403][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.153583][ T4730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.207467][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.227335][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.237410][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.251826][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.265766][ T4651] device veth0_vlan entered promiscuous mode [ 104.285617][ T4651] device veth1_vlan entered promiscuous mode [ 104.296796][ T4730] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 104.323709][ T4309] usb 3-1: 0:2 : does not exist [ 104.394479][ T4309] usb 3-1: USB disconnect, device number 6 [ 104.441802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.468346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.468646][ T4256] udevd[4256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.503591][ T4651] device veth0_macvtap entered promiscuous mode [ 104.537348][ T4651] device veth1_macvtap entered promiscuous mode [ 104.569844][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.582782][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.594215][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.605594][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.615774][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.626324][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.636972][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.648015][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.659952][ T4651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.670475][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.681462][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.690156][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.700362][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.712789][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.720897][ T4737] parport0: fix this legacy no-device port driver! [ 104.728613][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.746181][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.757559][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.771473][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.782770][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.793592][ T4651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.806307][ T4651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.819437][ T4651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.830598][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.840880][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.859580][ T4651] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.877144][ T4651] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.887638][ T4651] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.897443][ T4651] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.908490][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.908743][ T4274] Bluetooth: hci0: command 0x0c2d tx timeout [ 105.030362][ T4309] usb 5-1: USB disconnect, device number 6 [ 105.173443][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.204223][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.271849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.297894][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.346603][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.384851][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.399116][ T4988] loop2: detected capacity change from 0 to 512 [ 105.403168][ T4730] usb 1-1: USB disconnect, device number 4 [ 105.452724][ T4988] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.624963][ T4988] EXT4-fs (loop2): 1 truncate cleaned up [ 105.636534][ T4988] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 105.707525][ T4988] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.125: corrupted in-inode xattr [ 105.738238][ T4988] EXT4-fs (loop2): Remounting filesystem read-only [ 105.751666][ T4988] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1732: inode #15: comm syz.2.125: unable to update i_inline_off [ 105.765118][ T4997] loop5: detected capacity change from 0 to 2048 [ 105.773404][ T4988] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.125: corrupted in-inode xattr [ 105.823106][ T4997] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 105.858329][ T4988] EXT4-fs (loop2): Remounting filesystem read-only [ 105.875831][ T5004] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.125: corrupted in-inode xattr [ 105.906321][ T5004] EXT4-fs (loop2): Remounting filesystem read-only [ 105.929186][ T4997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.047761][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 106.077196][ T5008] loop1: detected capacity change from 0 to 512 [ 106.153254][ T5008] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 106.205793][ T5008] EXT4-fs (loop1): 1 truncate cleaned up [ 106.319329][ T5008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 106.399913][ T5008] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.129: corrupted in-inode xattr [ 106.495569][ T5008] EXT4-fs (loop1): Remounting filesystem read-only [ 106.566718][ T5029] loop0: detected capacity change from 0 to 256 [ 106.593631][ T5008] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1732: inode #15: comm syz.1.129: unable to update i_inline_off [ 106.670323][ T5008] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.129: corrupted in-inode xattr [ 106.680085][ T5029] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 106.744406][ T5029] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 106.757577][ T5008] EXT4-fs (loop1): Remounting filesystem read-only [ 106.799043][ T5024] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.129: corrupted in-inode xattr [ 106.831227][ T5024] EXT4-fs (loop1): Remounting filesystem read-only [ 106.845206][ T26] audit: type=1800 audit(1756483065.759:8): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.134" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 106.891273][ T5029] syz.0.134: attempt to access beyond end of device [ 106.891273][ T5029] loop0: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 106.913537][ T26] audit: type=1800 audit(1756483065.789:9): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.134" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 107.001819][ T5029] syz.0.134: attempt to access beyond end of device [ 107.001819][ T5029] loop0: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 107.056479][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 107.143433][ T5029] syz.0.134: attempt to access beyond end of device [ 107.143433][ T5029] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 107.160594][ T26] audit: type=1800 audit(1756483066.059:10): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.134" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 107.484601][ T5050] loop2: detected capacity change from 0 to 512 [ 107.543425][ T5054] loop5: detected capacity change from 0 to 256 [ 107.557839][ T5050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.611545][ T5054] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.637152][ T5050] EXT4-fs (loop2): 1 truncate cleaned up [ 107.655470][ T5050] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.697280][ T5061] loop4: detected capacity change from 0 to 1024 [ 107.708838][ T5054] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 107.766967][ T5050] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.141: corrupted in-inode xattr [ 107.784581][ T5061] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 107.809884][ T5054] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 107.881170][ T5050] EXT4-fs (loop2): Remounting filesystem read-only [ 107.888064][ T5050] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1732: inode #15: comm syz.2.141: unable to update i_inline_off [ 107.901864][ T5050] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.141: corrupted in-inode xattr [ 107.914694][ T5050] EXT4-fs (loop2): Remounting filesystem read-only [ 107.923348][ T5050] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.141: corrupted in-inode xattr [ 107.937217][ T5050] EXT4-fs (loop2): Remounting filesystem read-only [ 107.938534][ T4730] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 107.962285][ T5050] netlink: 'syz.2.141': attribute type 2 has an invalid length. [ 108.027801][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 108.144247][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 108.181832][ T4730] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 108.247067][ T4730] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 108.313635][ T4730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.338265][ T4730] usb 1-1: Product: syz [ 108.356348][ T4730] usb 1-1: Manufacturer: syz [ 108.367247][ T4730] usb 1-1: SerialNumber: syz [ 108.376411][ T5081] loop1: detected capacity change from 0 to 512 [ 108.397530][ T4730] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 108.426658][ T5079] loop4: detected capacity change from 0 to 4096 [ 108.458405][ T5081] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.485502][ T5081] EXT4-fs (loop1): 1 truncate cleaned up [ 108.509886][ T5081] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.530625][ T4326] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 108.545688][ T5081] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.149: corrupted in-inode xattr [ 108.625005][ T5087] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.674269][ T5081] EXT4-fs (loop1): Remounting filesystem read-only [ 108.701281][ T5081] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1732: inode #15: comm syz.1.149: unable to update i_inline_off [ 108.734327][ T5081] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.149: corrupted in-inode xattr [ 108.776408][ T4326] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.793786][ T4326] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.817165][ T4730] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 108.820968][ T5081] EXT4-fs (loop1): Remounting filesystem read-only [ 108.836027][ T4326] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.856780][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.860924][ T5095] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.149: corrupted in-inode xattr [ 108.870370][ T5092] loop5: detected capacity change from 0 to 8192 [ 108.892388][ T5095] EXT4-fs (loop1): Remounting filesystem read-only [ 108.935090][ T5094] syz.4.147 (5094) used greatest stack depth: 19792 bytes left [ 109.054290][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 109.103196][ T4326] usb 3-1: usb_control_msg returned -32 [ 109.117179][ T4326] usbtmc 3-1:16.0: can't read capabilities [ 109.735034][ T5101] loop4: detected capacity change from 0 to 32768 [ 109.944904][ T5101] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 110.156597][ T26] audit: type=1800 audit(1756483069.069:11): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.151" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 110.303635][ T4273] ocfs2: Unmounting device (7,4) on (node local) [ 110.482035][ T5143] loop4: detected capacity change from 0 to 512 [ 110.504170][ T5143] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.548256][ T4458] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 110.569340][ T5143] EXT4-fs (loop4): 1 truncate cleaned up [ 110.575915][ T5143] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.592865][ T5143] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.156: corrupted in-inode xattr [ 110.609138][ T5143] EXT4-fs (loop4): Remounting filesystem read-only [ 110.624280][ T5143] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1732: inode #15: comm syz.4.156: unable to update i_inline_off [ 110.639639][ T5143] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.156: corrupted in-inode xattr [ 110.655320][ T5143] EXT4-fs (loop4): Remounting filesystem read-only [ 110.663162][ T5148] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.156: corrupted in-inode xattr [ 110.679221][ T5148] EXT4-fs (loop4): Remounting filesystem read-only [ 110.698086][ T4739] usb 1-1: USB disconnect, device number 5 [ 110.720234][ T5143] netlink: 'syz.4.156': attribute type 2 has an invalid length. [ 110.760233][ T4458] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.785360][ T4458] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.806148][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 110.816842][ T4458] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.834074][ T4458] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.858848][ T4458] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 110.900551][ T4458] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 110.939474][ T4458] usb 6-1: Manufacturer: syz [ 110.963564][ T4458] usb 6-1: config 0 descriptor?? [ 111.278476][ T4739] usb 3-1: USB disconnect, device number 7 [ 111.396173][ T4458] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 111.403880][ T4274] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 111.410892][ T4272] Bluetooth: hci5: command 0x1003 tx timeout [ 111.421475][ T4458] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 111.457168][ T4458] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 111.494595][ T5156] loop4: detected capacity change from 0 to 32768 [ 111.524080][ T5156] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.158 (5156) [ 111.604857][ T5156] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 111.639899][ T5156] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 111.712869][ T5156] BTRFS info (device loop4): force zlib compression, level 3 [ 111.751167][ T5156] BTRFS info (device loop4): force clearing of disk cache [ 111.785579][ T5156] BTRFS info (device loop4): turning off barriers [ 111.844055][ T5156] BTRFS info (device loop4): doing ref verification [ 111.872928][ T5156] BTRFS info (device loop4): enabling disk space caching [ 111.918230][ T5156] BTRFS info (device loop4): disk space caching is enabled [ 112.153265][ T5187] sctp: [Deprecated]: syz.1.164 (pid 5187) Use of int in max_burst socket option deprecated. [ 112.153265][ T5187] Use struct sctp_assoc_value instead [ 112.231789][ T5156] BTRFS info (device loop4): enabling ssd optimizations [ 112.251145][ T5156] BTRFS info (device loop4): rebuilding free space tree [ 112.340429][ T5156] BTRFS info (device loop4): disabling free space tree [ 112.355049][ T5156] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.366338][ T5156] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.465860][ T5205] loop1: detected capacity change from 0 to 8 [ 112.667817][ T4273] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 112.684972][ T5205] SQUASHFS error: lzo decompression failed, data probably corrupt [ 112.706886][ T5205] SQUASHFS error: Failed to read block 0x202: -5 [ 112.729911][ T5205] SQUASHFS error: Unable to read metadata cache entry [200] [ 112.858236][ T4458] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 113.049986][ T4458] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 113.078314][ T4458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.099381][ T4458] usb 1-1: config 0 descriptor?? [ 113.135121][ T5218] loop1: detected capacity change from 0 to 512 [ 113.213144][ T5218] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.170: attempt to clear invalid blocks 1 len 1 [ 113.290446][ T5218] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.170: bg 0: block 343: padding at end of block bitmap is not set [ 113.323477][ T5218] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 113.325425][ T4458] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 113.344940][ T5218] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.170: invalid indirect mapped block 1819239214 (level 0) [ 113.375973][ T5218] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.170: invalid indirect mapped block 1819239214 (level 1) [ 113.381692][ T4458] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 113.407722][ T5218] EXT4-fs (loop1): 1 truncate cleaned up [ 113.413752][ T5218] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.444193][ T4458] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 113.464188][ T4458] [drm] Initialized udl on minor 2 [ 113.543713][ T4729] usb 6-1: USB disconnect, device number 2 [ 113.621826][ T4458] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 113.630609][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 113.645123][ T4458] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 113.912052][ T4326] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 113.912256][ T5213] usb 1-1: USB disconnect, device number 6 [ 113.946275][ T4326] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 113.956102][ T4326] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 114.162734][ T4729] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.304930][ T5248] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 114.350879][ T4729] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 114.363106][ T4729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 114.376203][ T4729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 114.394827][ T4729] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.417566][ T4729] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.427968][ T4729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.500826][ T4729] usb 2-1: config 0 descriptor?? [ 114.506780][ T5244] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 114.624908][ T5252] loop4: detected capacity change from 0 to 512 [ 114.669402][ T5252] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.698918][ T5252] EXT4-fs (loop4): 1 truncate cleaned up [ 114.704849][ T5252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 114.773226][ T5252] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.182: corrupted in-inode xattr [ 114.803749][ T5257] netlink: 'syz.2.184': attribute type 11 has an invalid length. [ 114.814368][ T5252] EXT4-fs (loop4): Remounting filesystem read-only [ 114.837007][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 114.847467][ T5252] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1732: inode #15: comm syz.4.182: unable to update i_inline_off [ 114.881817][ T5257] netlink: 'syz.2.184': attribute type 11 has an invalid length. [ 114.897417][ T5252] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.182: corrupted in-inode xattr [ 114.901607][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 114.925580][ T5252] EXT4-fs (loop4): Remounting filesystem read-only [ 114.932619][ T5258] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.182: corrupted in-inode xattr [ 114.956656][ T4729] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 114.961295][ T5252] netlink: 'syz.4.182': attribute type 2 has an invalid length. [ 114.972230][ T4729] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 114.997901][ T4729] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 115.044318][ T5258] EXT4-fs (loop4): Remounting filesystem read-only [ 115.147639][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 115.250180][ T5214] usb 2-1: USB disconnect, device number 4 [ 115.263453][ T5268] loop2: detected capacity change from 0 to 512 [ 115.298896][ T5268] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.357073][ T5268] EXT4-fs (loop2): 1 truncate cleaned up [ 115.373216][ T5268] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 115.390943][ T4729] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 115.450640][ T5268] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.187: corrupted in-inode xattr [ 115.547086][ T5268] EXT4-fs (loop2): Remounting filesystem read-only [ 115.588410][ T5268] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1732: inode #15: comm syz.2.187: unable to update i_inline_off [ 115.619995][ T4729] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.623037][ T5268] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.187: corrupted in-inode xattr [ 115.638295][ T4729] usb 6-1: config 0 has no interfaces? [ 115.655082][ T5268] EXT4-fs (loop2): Remounting filesystem read-only [ 115.655278][ T5275] netlink: 'syz.2.187': attribute type 2 has an invalid length. [ 115.674849][ T4729] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 115.705417][ T4729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.722332][ T5282] loop4: detected capacity change from 0 to 8192 [ 115.745732][ T5278] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.187: corrupted in-inode xattr [ 115.749214][ T5282] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 115.762308][ T5278] EXT4-fs (loop2): Remounting filesystem read-only [ 115.791933][ T5282] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 115.801698][ T5282] REISERFS (device loop4): using ordered data mode [ 115.808675][ T5282] reiserfs: using flush barriers [ 115.820589][ T5282] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.839909][ T5282] REISERFS (device loop4): checking transaction log (loop4) [ 115.866162][ T4729] usb 6-1: config 0 descriptor?? [ 115.975350][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 116.026468][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 116.075987][ T5282] REISERFS (device loop4): Using tea hash to sort names [ 116.109597][ T5282] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 116.174334][ T4729] usb 6-1: USB disconnect, device number 3 [ 116.322656][ T5282] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 116.578497][ T4458] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.620717][ T5306] loop2: detected capacity change from 0 to 256 [ 116.643134][ T5306] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.773600][ T4458] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.808314][ T4458] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 116.878097][ T4458] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.902863][ T4458] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 116.923812][ T4458] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 116.963317][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.201'. [ 116.980370][ T4458] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.010932][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.201'. [ 117.041819][ T4458] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.063891][ T4458] usb 2-1: Product: syz [ 117.071844][ T4458] usb 2-1: Manufacturer: syz [ 117.079959][ T5319] loop2: detected capacity change from 0 to 64 [ 117.103365][ T4458] cdc_wdm 2-1:1.0: skipping garbage [ 117.118980][ T4458] cdc_wdm 2-1:1.0: skipping garbage [ 117.127897][ T4458] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 117.139643][ T4458] cdc_wdm 2-1:1.0: Unknown control protocol [ 117.148682][ T5213] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.358763][ T5213] usb 1-1: Using ep0 maxpacket: 16 [ 117.370759][ T5213] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.393642][ T5213] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 117.399828][ T5329] loop4: detected capacity change from 0 to 512 [ 117.404180][ T5213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.418310][ T5329] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.452970][ T5329] EXT4-fs (loop4): 1 truncate cleaned up [ 117.459744][ T5329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.467919][ T5213] usb 1-1: config 0 descriptor?? [ 117.476708][ T5329] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.205: corrupted in-inode xattr [ 117.594375][ T5329] EXT4-fs (loop4): Remounting filesystem read-only [ 117.602226][ T5329] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1732: inode #15: comm syz.4.205: unable to update i_inline_off [ 117.622998][ T5329] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.205: corrupted in-inode xattr [ 117.635834][ T5329] EXT4-fs (loop4): Remounting filesystem read-only [ 117.645218][ T5337] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.205: corrupted in-inode xattr [ 117.662910][ T5337] EXT4-fs (loop4): Remounting filesystem read-only [ 117.672494][ T5329] netlink: 'syz.4.205': attribute type 2 has an invalid length. [ 117.721541][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 117.793052][ T4458] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 117.890470][ T4737] usb 2-1: USB disconnect, device number 5 [ 117.907898][ T5213] hid (null): global environment stack underflow [ 117.919356][ T5213] hid (null): global environment stack underflow [ 117.934579][ T5213] hid (null): report_id 3899690137 is invalid [ 117.941661][ T5213] hid (null): report_id 1862125167 is invalid [ 117.994043][ T4458] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 118.021437][ T4458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.039784][ T4458] usb 3-1: config 0 descriptor?? [ 118.053817][ T4458] gspca_main: spca508-2.14.0 probing 8086:0110 [ 118.117445][ T5213] usb 1-1: USB disconnect, device number 7 [ 118.250051][ T4458] gspca_spca508: reg_read err -32 [ 118.256339][ T4458] gspca_spca508: reg_read err -32 [ 118.325989][ T5350] input: syz0 as /devices/virtual/input/input9 [ 118.466464][ T4458] gspca_spca508: reg_read err -71 [ 118.474399][ T4458] gspca_spca508: reg_read err -71 [ 118.495766][ T4458] gspca_spca508: reg write: error -71 [ 118.514278][ T4458] spca508: probe of 3-1:0.0 failed with error -71 [ 118.534597][ T4458] usb 3-1: USB disconnect, device number 8 [ 119.570254][ T5364] loop0: detected capacity change from 0 to 32768 [ 119.619545][ T5390] loop5: detected capacity change from 0 to 164 [ 119.649677][ T5364] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.217 (5364) [ 119.676053][ T5390] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.706588][ T5390] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 119.722829][ T5364] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.770061][ T5364] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 119.818195][ T5364] BTRFS info (device loop0): setting nodatacow, compression disabled [ 119.867088][ T5364] BTRFS info (device loop0): max_inline at 0 [ 119.900116][ T5364] BTRFS info (device loop0): enabling disk space caching [ 119.955748][ T5364] BTRFS info (device loop0): turning off barriers [ 119.984384][ T5364] BTRFS info (device loop0): turning on flush-on-commit [ 119.997040][ T5364] BTRFS info (device loop0): doing ref verification [ 120.005280][ T5364] BTRFS info (device loop0): force clearing of disk cache [ 120.021154][ T5364] BTRFS info (device loop0): enabling ssd optimizations [ 120.050156][ T5364] BTRFS info (device loop0): max_inline at 4096 [ 120.056671][ T5364] BTRFS info (device loop0): disk space caching is enabled [ 120.322853][ T5416] input: syz1 as /devices/virtual/input/input10 [ 120.360234][ T5386] loop2: detected capacity change from 0 to 32768 [ 120.360462][ T5364] BTRFS info (device loop0): rebuilding free space tree [ 120.378021][ T5386] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.403579][ T5386] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 120.420034][ T5386] BTRFS info (device loop2): enabling auto defrag [ 120.426593][ T5386] BTRFS info (device loop2): max_inline at 0 [ 120.433712][ T5386] BTRFS info (device loop2): force clearing of disk cache [ 120.441474][ T5386] BTRFS info (device loop2): turning on sync discard [ 120.456722][ T5386] BTRFS info (device loop2): using free space tree [ 120.486056][ T5364] BTRFS info (device loop0): disabling free space tree [ 120.521350][ T5364] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.547255][ T5364] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.635110][ T5437] loop1: detected capacity change from 0 to 512 [ 120.695129][ T5437] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.795237][ T5437] EXT4-fs (loop1): 1 truncate cleaned up [ 120.805722][ T5386] BTRFS info (device loop2): enabling ssd optimizations [ 120.820510][ T5386] BTRFS info (device loop2): rebuilding free space tree [ 120.829210][ T5437] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.869541][ T4264] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.881854][ T5437] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.233: corrupted in-inode xattr [ 120.935771][ T5437] EXT4-fs (loop1): Remounting filesystem read-only [ 120.983872][ T5437] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1732: inode #15: comm syz.1.233: unable to update i_inline_off [ 121.057510][ T5450] netlink: 'syz.1.233': attribute type 2 has an invalid length. [ 121.099360][ T5437] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.233: corrupted in-inode xattr [ 121.156925][ T4258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop0 scanned by udevd (4258) [ 121.191745][ T5437] EXT4-fs (loop1): Remounting filesystem read-only [ 121.223444][ T5448] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.233: corrupted in-inode xattr [ 121.272448][ T5448] EXT4-fs (loop1): Remounting filesystem read-only [ 121.511429][ T5395] loop4: detected capacity change from 0 to 32768 [ 121.706140][ T5395] XFS (loop4): Mounting V5 Filesystem [ 121.723688][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 121.986475][ T5395] XFS (loop4): Ending clean mount [ 122.020256][ T5474] macvtap0: refused to change device tx_queue_len [ 122.030698][ T5395] XFS (loop4): Quotacheck needed: Please wait. [ 122.060424][ T4278] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 122.185275][ T5395] XFS (loop4): Quotacheck: Done. [ 122.198657][ T5481] Illegal XDP return value 4294967294 on prog (id 13) dev N/A, expect packet loss! [ 122.806062][ T4273] XFS (loop4): Unmounting Filesystem [ 122.937762][ T5500] loop0: detected capacity change from 0 to 512 [ 122.972025][ T5500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.036947][ T5500] EXT4-fs (loop0): 1 truncate cleaned up [ 123.049993][ T5500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 123.136117][ T5500] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.247: corrupted in-inode xattr [ 123.265881][ T5500] EXT4-fs (loop0): Remounting filesystem read-only [ 123.308294][ T5511] netlink: 'syz.0.247': attribute type 2 has an invalid length. [ 123.325071][ T5500] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1732: inode #15: comm syz.0.247: unable to update i_inline_off [ 123.356183][ T5500] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.247: corrupted in-inode xattr [ 123.399347][ T5500] EXT4-fs (loop0): Remounting filesystem read-only [ 123.408431][ T5509] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.247: corrupted in-inode xattr [ 123.469886][ T5509] EXT4-fs (loop0): Remounting filesystem read-only [ 123.660641][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 123.794768][ T5524] loop5: detected capacity change from 0 to 512 [ 123.858796][ T5524] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 124.069764][ T4651] EXT4-fs (loop5): unmounting filesystem. [ 124.777420][ T5554] input: syz0 as /devices/virtual/input/input11 [ 125.211708][ T5558] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.259'. [ 125.378935][ T5566] loop1: detected capacity change from 0 to 512 [ 125.445060][ T5566] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.536468][ T5566] EXT4-fs (loop1): 1 truncate cleaned up [ 125.551519][ T5573] loop2: detected capacity change from 0 to 512 [ 125.607711][ T5566] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.643141][ T4270] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 125.654703][ T4270] CPU: 1 PID: 4270 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 125.662835][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.676970][ T4270] Workqueue: hci3 hci_rx_work [ 125.683216][ T4270] Call Trace: [ 125.687833][ T4270] [ 125.691689][ T4270] dump_stack_lvl+0x168/0x22e [ 125.696674][ T4270] ? show_regs_print_info+0x12/0x12 [ 125.702442][ T4270] ? load_image+0x3b0/0x3b0 [ 125.707388][ T4270] sysfs_create_dir_ns+0x252/0x280 [ 125.714897][ T4270] ? hci_rx_work+0x3eb/0xd40 [ 125.721126][ T4270] ? sysfs_warn_dup+0xa0/0xa0 [ 125.726575][ T4270] ? do_raw_spin_unlock+0x11d/0x230 [ 125.731993][ T4270] kobject_add_internal+0x6b8/0xc80 [ 125.738143][ T4270] kobject_add+0x152/0x210 [ 125.742915][ T4270] ? kobject_init+0x1d0/0x1d0 [ 125.747637][ T4270] ? klist_children_get+0x50/0x50 [ 125.752967][ T4270] ? get_device_parent+0x121/0x3f0 [ 125.758555][ T4270] device_add+0x483/0xfb0 [ 125.763180][ T4270] ? kmem_cache_free+0xf7/0x290 [ 125.769007][ T5573] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.769318][ T4270] hci_conn_add_sysfs+0xd1/0x1e0 [ 125.783452][ T4270] le_conn_complete_evt+0xd1d/0x1320 [ 125.788789][ T4270] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 125.795172][ T4270] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 125.800940][ T4270] ? skb_pull_data+0xf7/0x200 [ 125.805821][ T4270] hci_le_conn_complete_evt+0x183/0x440 [ 125.811678][ T4270] ? hci_remote_host_features_evt+0x270/0x270 [ 125.819039][ T4270] hci_event_packet+0x791/0x1210 [ 125.821711][ T5566] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.261: corrupted in-inode xattr [ 125.826110][ T4270] ? bis_list+0x280/0x280 [ 125.826141][ T4270] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 125.826168][ T4270] ? kcov_remote_start+0x4c7/0x7e0 [ 125.844059][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.849212][ T4270] ? __show_mem+0x160/0x308 [ 125.874595][ T4270] ? hci_send_to_monitor+0x9c/0x4a0 [ 125.881343][ T4270] hci_rx_work+0x3eb/0xd40 [ 125.886373][ T4270] ? _raw_spin_unlock+0x40/0x40 [ 125.892625][ T4270] ? process_one_work+0x7a1/0x1160 [ 125.898944][ T4270] process_one_work+0x898/0x1160 [ 125.904197][ T4270] ? worker_detach_from_pool+0x240/0x240 [ 125.911573][ T4270] ? _raw_spin_lock_irq+0xab/0xe0 [ 125.917618][ T4270] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 125.923990][ T4270] ? kthread_data+0x4b/0xc0 [ 125.929144][ T4270] worker_thread+0xaa2/0x1250 [ 125.934728][ T4270] kthread+0x29d/0x330 [ 125.939031][ T4270] ? worker_clr_flags+0x1a0/0x1a0 [ 125.945253][ T4270] ? kthread_blkcg+0xd0/0xd0 [ 125.950977][ T4270] ret_from_fork+0x1f/0x30 [ 125.957282][ T4270] [ 125.965247][ T4270] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 125.981280][ T4270] Bluetooth: hci3: failed to register connection device [ 125.993071][ T5581] loop4: detected capacity change from 0 to 512 [ 126.024643][ T5586] netlink: 'syz.1.261': attribute type 2 has an invalid length. [ 126.092787][ T5581] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.105168][ T5566] EXT4-fs (loop1): Remounting filesystem read-only [ 126.118211][ T5566] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1732: inode #15: comm syz.1.261: unable to update i_inline_off [ 126.154100][ T5566] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.261: corrupted in-inode xattr [ 126.245780][ T5581] EXT4-fs (loop4): 1 truncate cleaned up [ 126.264060][ T5566] EXT4-fs (loop1): Remounting filesystem read-only [ 126.277300][ T5581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.295827][ T5552] loop0: detected capacity change from 0 to 32768 [ 126.318698][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 126.399978][ T5552] XFS (loop0): Mounting V5 Filesystem [ 126.468354][ T5581] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.266: corrupted in-inode xattr [ 126.492328][ T5581] EXT4-fs (loop4): Remounting filesystem read-only [ 126.536976][ T5581] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1732: inode #15: comm syz.4.266: unable to update i_inline_off [ 126.557466][ T5581] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.266: corrupted in-inode xattr [ 126.583103][ T5581] EXT4-fs (loop4): Remounting filesystem read-only [ 126.616582][ T5610] netlink: 'syz.4.266': attribute type 2 has an invalid length. [ 126.624034][ T5604] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.266: corrupted in-inode xattr [ 126.669137][ T5607] vcan0: tx drop: invalid da for name 0x0000000006fffff9 [ 126.699650][ T5604] EXT4-fs (loop4): Remounting filesystem read-only [ 126.706452][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 126.781805][ T5552] XFS (loop0): Ending clean mount [ 126.862483][ T5552] XFS (loop0): Quotacheck needed: Please wait. [ 126.905614][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 126.993329][ T5618] loop5: detected capacity change from 0 to 128 [ 127.144500][ T5552] XFS (loop0): Quotacheck: Done. [ 127.171409][ T5618] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 127.234551][ T5625] Bluetooth: MGMT ver 1.22 [ 127.417554][ T4264] XFS (loop0): Unmounting Filesystem [ 128.223907][ T5620] loop1: detected capacity change from 0 to 32768 [ 128.294106][ T5620] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.271 (5620) [ 128.375043][ T5620] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.404077][ T5642] loop5: detected capacity change from 0 to 32768 [ 128.407440][ T5620] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 128.467558][ T5620] BTRFS info (device loop1): using free space tree [ 128.498176][ T5642] JBD2: Ignoring recovery information on journal [ 128.597864][ T5642] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 128.624425][ T5636] loop4: detected capacity change from 0 to 40427 [ 128.650819][ T5636] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 128.663390][ T5636] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 128.760327][ T5636] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.859160][ T5620] BTRFS info (device loop1): enabling ssd optimizations [ 129.011904][ T5636] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 129.028509][ T5636] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 129.070015][ T4651] ocfs2: Unmounting device (7,5) on (node local) [ 129.558532][ T5684] syz.4.278 (5684): drop_caches: 2 [ 129.586961][ T4266] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.016353][ T5697] loop5: detected capacity change from 0 to 512 [ 130.053863][ T5697] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.132927][ T5697] EXT4-fs (loop5): 1 truncate cleaned up [ 130.161910][ T5697] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 130.224551][ T5697] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.285: corrupted in-inode xattr [ 130.272820][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 130.280304][ T4274] Bluetooth: hci5: command 0x1003 tx timeout [ 130.296544][ T5697] EXT4-fs (loop5): Remounting filesystem read-only [ 130.336777][ T5697] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1732: inode #15: comm syz.5.285: unable to update i_inline_off [ 130.419208][ T5707] netlink: 'syz.5.285': attribute type 2 has an invalid length. [ 130.438319][ T5697] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.285: corrupted in-inode xattr [ 130.498427][ T5697] EXT4-fs (loop5): Remounting filesystem read-only [ 130.506228][ T5706] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.285: corrupted in-inode xattr [ 130.564180][ T5706] EXT4-fs (loop5): Remounting filesystem read-only [ 130.645290][ T5715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 130.696238][ T4651] EXT4-fs (loop5): unmounting filesystem. [ 131.257317][ T5731] loop4: detected capacity change from 0 to 8192 [ 131.308637][ T5731] FAT-fs (loop4): bogus number of directory entries (9) [ 131.320949][ T5731] FAT-fs (loop4): Can't find a valid FAT filesystem [ 131.589922][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.294'. [ 131.628760][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.294'. [ 131.906484][ T5753] input: syz1 as /devices/virtual/input/input12 [ 132.004329][ T5754] loop1: detected capacity change from 0 to 512 [ 132.093318][ T5754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.174619][ T5754] EXT4-fs (loop1): 1 truncate cleaned up [ 132.185708][ T5754] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.226914][ T5754] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.300: corrupted in-inode xattr [ 132.276817][ T5765] device veth0 entered promiscuous mode [ 132.283840][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 132.313508][ T5754] EXT4-fs (loop1): Remounting filesystem read-only [ 132.338002][ T5754] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1732: inode #15: comm syz.1.300: unable to update i_inline_off [ 132.402462][ T5754] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.300: corrupted in-inode xattr [ 132.415714][ T5767] netlink: 'syz.1.300': attribute type 2 has an invalid length. [ 132.468232][ T5754] EXT4-fs (loop1): Remounting filesystem read-only [ 132.506273][ T5769] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.300: corrupted in-inode xattr [ 132.539093][ T5771] loop5: detected capacity change from 0 to 4096 [ 132.547565][ T5769] EXT4-fs (loop1): Remounting filesystem read-only [ 132.721304][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 132.989983][ T4651] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 133.041572][ T4651] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 133.053557][ T5780] loop1: detected capacity change from 0 to 1024 [ 133.088082][ T5743] loop4: detected capacity change from 0 to 32768 [ 133.154146][ T5743] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 133.296845][ T5786] device ipvlan2 entered promiscuous mode [ 133.471821][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.478791][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.606297][ T56] hfsplus: b-tree write err: -5, ino 4 [ 133.700583][ T4256] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 133.882101][ T5799] loop1: detected capacity change from 0 to 512 [ 133.945291][ T5799] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.015933][ T5799] EXT4-fs (loop1): 1 truncate cleaned up [ 134.058477][ T5804] loop0: detected capacity change from 0 to 2048 [ 134.081549][ T5799] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 134.126953][ T5799] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.311: corrupted in-inode xattr [ 134.154181][ T5804] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.204578][ T5804] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.205498][ T5799] EXT4-fs (loop1): Remounting filesystem read-only [ 134.268398][ T5799] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1732: inode #15: comm syz.1.311: unable to update i_inline_off [ 134.289053][ T5799] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.311: corrupted in-inode xattr [ 134.310672][ T5799] EXT4-fs (loop1): Remounting filesystem read-only [ 134.317594][ T5813] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.311: corrupted in-inode xattr [ 134.326803][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'. [ 134.349134][ T5799] netlink: 'syz.1.311': attribute type 2 has an invalid length. [ 134.379363][ T5817] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.382782][ T5813] EXT4-fs (loop1): Remounting filesystem read-only [ 134.389392][ T5817] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.405222][ T5817] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.414367][ T5817] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.431981][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 134.564218][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 134.579208][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'. [ 134.784813][ T5787] loop5: detected capacity change from 0 to 32768 [ 134.819544][ T5787] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.306 (5787) [ 134.921964][ T5787] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 134.950108][ T5787] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 135.003241][ T5787] BTRFS info (device loop5): enabling disk space caching [ 135.028291][ T5787] BTRFS info (device loop5): force clearing of disk cache [ 135.066754][ T5787] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 135.154131][ T5787] BTRFS info (device loop5): use zstd compression, level 3 [ 135.184562][ T5787] BTRFS info (device loop5): disk space caching is enabled [ 135.286611][ T5837] loop1: detected capacity change from 0 to 1024 [ 135.812337][ T5787] BTRFS info (device loop5): enabling ssd optimizations [ 135.900582][ T5787] BTRFS info (device loop5): rebuilding free space tree [ 136.069196][ T5787] BTRFS info (device loop5): disabling free space tree [ 136.182957][ T5787] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 136.243055][ T5864] loop1: detected capacity change from 0 to 1024 [ 136.285177][ T5787] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 136.356400][ T5864] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 136.487283][ T5864] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 136.595776][ T5864] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.324: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 136.655525][ T4651] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 136.768969][ T5864] EXT4-fs (loop1): no journal found [ 136.774463][ T5864] EXT4-fs (loop1): can't get journal size [ 136.879563][ T5864] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 137.047792][ T5836] loop4: detected capacity change from 0 to 262144 [ 137.068008][ T5836] F2FS-fs (loop4): invalid crc value [ 137.107405][ T5836] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.159212][ T5836] F2FS-fs (loop4): Start checkpoint disabled! [ 137.179031][ T5836] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 137.510175][ T4258] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop5 scanned by udevd (4258) [ 137.668856][ T5840] loop2: detected capacity change from 0 to 40427 [ 137.698790][ T5840] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 137.707405][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 137.750790][ T5840] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.853039][ T5840] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.067761][ T5840] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 138.106090][ T5840] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 138.445928][ T4278] syz-executor: attempt to access beyond end of device [ 138.445928][ T4278] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.898906][ T5912] loop0: detected capacity change from 0 to 4096 [ 138.935067][ T5891] loop5: detected capacity change from 0 to 32768 [ 138.940798][ T5912] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.071870][ T5891] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 139.465231][ T4651] ocfs2: Unmounting device (7,5) on (node local) [ 139.577005][ T5912] EXT4-fs (loop0): Test dummy encryption mode enabled [ 139.660958][ T5912] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 139.876830][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 139.931900][ T5941] loop5: detected capacity change from 0 to 64 [ 140.046260][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 140.534874][ T5956] loop0: detected capacity change from 0 to 1024 [ 140.631309][ T26] audit: type=1800 audit(1756483099.549:12): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.347" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 140.691035][ T126] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 140.750385][ T5965] loop5: detected capacity change from 0 to 1024 [ 140.767816][ T126] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.900150][ T26] audit: type=1800 audit(1756483099.819:13): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.350" name="bus" dev="loop5" ino=27 res=0 errno=0 [ 141.116871][ T5975] syz.0.351 sent an empty control message without MSG_MORE. [ 141.119096][ T11] hfsplus: b-tree write err: -5, ino 4 [ 141.309289][ T5978] loop4: detected capacity change from 0 to 512 [ 141.342851][ T5974] loop1: detected capacity change from 0 to 4096 [ 141.401160][ T5974] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 141.427343][ T5978] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 141.457085][ T5974] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 141.467344][ T5978] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.549774][ T5974] ntfs3: loop1: volume is dirty and "force" flag is not set! [ 141.589632][ T5984] A link change request failed with some changes committed already. Interface ip6tnl1 may have been left with an inconsistent configuration, please check. [ 141.615921][ T5978] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 141.681352][ T5986] EXT4-fs (loop4): shut down requested (2) [ 141.892991][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 142.150190][ T5998] loop0: detected capacity change from 0 to 1024 [ 142.175783][ T5998] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 142.210946][ T5998] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 142.221695][ T5998] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.361: Failed to acquire dquot type 0 [ 142.240702][ T5998] EXT4-fs error (device loop0): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 142.271166][ T6003] loop4: detected capacity change from 0 to 1024 [ 142.288358][ T5998] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.361: corrupted inode contents [ 142.311219][ T5998] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #13: comm syz.0.361: mark_inode_dirty error [ 142.314320][ T26] audit: type=1800 audit(1756483101.229:14): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.362" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 142.330691][ T126] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.400019][ T5998] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.361: corrupted inode contents [ 142.414036][ T5998] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.361: mark_inode_dirty error [ 142.426860][ T5998] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.361: corrupted inode contents [ 142.459741][ T5998] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 142.525799][ T5998] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.361: corrupted inode contents [ 142.532378][ T6007] loop2: detected capacity change from 0 to 4096 [ 142.563745][ T5998] EXT4-fs error (device loop0): ext4_truncate:4312: inode #13: comm syz.0.361: mark_inode_dirty error [ 142.590150][ T126] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.610612][ T5998] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 142.622468][ T126] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.635128][ T6011] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.668663][ T5998] EXT4-fs (loop0): 1 truncate cleaned up [ 142.677214][ T126] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.692834][ T5998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.724631][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.752412][ T5995] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 142.823498][ T5998] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 142.883806][ T5998] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 142.924536][ T5998] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 142.952223][ T5998] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 142.971730][ T5998] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.361: Failed to acquire dquot type 0 [ 142.993459][ T5998] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 143.061487][ T6018] device netdevsim0 entered promiscuous mode [ 143.099853][ T4326] usb 6-1: USB disconnect, device number 4 [ 143.117455][ T6018] device vlan0 entered promiscuous mode [ 143.167652][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 143.348416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.386630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 143.487668][ T6031] loop4: detected capacity change from 0 to 2048 [ 143.565006][ T6031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.723823][ T6028] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 143.843952][ T6028] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 143.904174][ T6028] EXT4-fs (loop4): This should not happen!! Data will be lost [ 143.904174][ T6028] [ 143.949827][ T6028] EXT4-fs (loop4): Total free blocks count 0 [ 143.962468][ T6028] EXT4-fs (loop4): Free/Dirty block details [ 143.977572][ T6028] EXT4-fs (loop4): free_blocks=2415919504 [ 143.986687][ T6028] EXT4-fs (loop4): dirty_blocks=160 [ 143.993170][ T6028] EXT4-fs (loop4): Block reservation details [ 144.003013][ T6028] EXT4-fs (loop4): i_reserved_data_blocks=10 [ 144.153368][ T6043] loop1: detected capacity change from 0 to 256 [ 144.193688][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 144.782335][ T6057] loop5: detected capacity change from 0 to 4096 [ 144.921277][ T6063] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.117012][ T6065] loop2: detected capacity change from 0 to 1024 [ 145.234418][ T6065] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 145.342949][ T6065] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 145.402505][ T6065] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.382: Failed to acquire dquot type 0 [ 145.471116][ T6065] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 145.497807][ T6065] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.382: corrupted inode contents [ 145.543622][ T6065] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #13: comm syz.2.382: mark_inode_dirty error [ 145.625553][ T6065] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.382: corrupted inode contents [ 145.675754][ T6065] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.382: mark_inode_dirty error [ 145.728887][ T6065] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.382: corrupted inode contents [ 145.811513][ T6065] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 145.846116][ T6065] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.382: corrupted inode contents [ 145.866810][ T6065] EXT4-fs error (device loop2): ext4_truncate:4312: inode #13: comm syz.2.382: mark_inode_dirty error [ 145.909835][ T6065] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 145.937933][ T6065] EXT4-fs (loop2): 1 truncate cleaned up [ 145.981948][ T6055] loop1: detected capacity change from 0 to 32768 [ 145.988840][ T6065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.020788][ T6055] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.389 (6055) [ 146.056681][ T6055] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.067495][ T6055] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 146.080823][ T6065] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 146.119787][ T6055] BTRFS info (device loop1): enabling auto defrag [ 146.131363][ T6065] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 146.148043][ T6055] BTRFS info (device loop1): disabling tree log [ 146.157705][ T6065] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 146.180049][ T6055] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 146.196661][ T6065] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 146.213700][ T6092] loop4: detected capacity change from 0 to 8 [ 146.222705][ T6065] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.382: Failed to acquire dquot type 0 [ 146.238089][ T6055] BTRFS info (device loop1): trying to use backup root at mount time [ 146.267208][ T6092] unable to read xattr id index table [ 146.280204][ T6055] BTRFS info (device loop1): max_inline at 4096 [ 146.286976][ T6055] BTRFS info (device loop1): force clearing of disk cache [ 146.330075][ T6065] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 146.369417][ T6055] BTRFS info (device loop1): enabling ssd optimizations [ 146.376696][ T6055] BTRFS info (device loop1): using spread ssd allocation scheme [ 146.429560][ T6055] BTRFS info (device loop1): using free space tree [ 146.440185][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 146.633966][ T6108] loop0: detected capacity change from 0 to 4096 [ 146.676877][ T6055] BTRFS info (device loop1): rebuilding free space tree [ 146.734076][ T6122] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.029914][ T6126] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.081787][ T4266] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.190676][ T4258] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (4258) [ 147.776481][ T953] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.968982][ T953] usb 2-1: Using ep0 maxpacket: 16 [ 151.652291][ T953] usb 2-1: unable to get BOS descriptor or descriptor too short [ 151.690566][ T953] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 151.726185][ T953] usb 2-1: can't read configurations, error -71 [ 152.329855][ T6172] loop5: detected capacity change from 0 to 128 [ 152.362845][ T6147] loop0: detected capacity change from 0 to 32768 [ 152.387055][ T6172] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 152.442185][ T6172] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.537692][ T6147] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 152.550594][ T6147] XFS (loop0): Mounting V5 Filesystem [ 152.693581][ T6147] XFS (loop0): Ending clean mount [ 152.724251][ T6147] XFS (loop0): Quotacheck needed: Please wait. [ 152.743147][ T4651] EXT4-fs (loop5): unmounting filesystem. [ 152.853361][ T6147] XFS (loop0): Quotacheck: Done. [ 152.894906][ T26] audit: type=1800 audit(1756483111.809:15): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.404" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 153.171504][ T4264] XFS (loop0): Unmounting Filesystem [ 153.371911][ T5213] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.452556][ T6202] loop5: detected capacity change from 0 to 8192 [ 153.571649][ T5213] usb 3-1: Using ep0 maxpacket: 16 [ 153.579037][ T5213] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 153.614319][ T5213] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 153.623278][ T5213] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 153.633316][ T5213] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 153.642712][ T5213] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 153.654211][ T5213] usb 3-1: config 0 has no interface number 0 [ 153.662764][ T5213] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 153.674963][ T5213] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 153.685258][ T5213] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.697419][ T5213] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.712304][ T5213] usb 3-1: config 0 interface 125 has no altsetting 0 [ 153.720129][ T5213] usb 3-1: config 0 interface 125 has no altsetting 2 [ 153.752424][ T5213] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 153.762178][ T5213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.772231][ T5213] usb 3-1: Product: syz [ 153.776830][ T5213] usb 3-1: Manufacturer: syz [ 153.782267][ T5213] usb 3-1: SerialNumber: syz [ 153.790684][ T5213] usb 3-1: config 0 descriptor?? [ 153.809683][ T5213] usb 3-1: selecting invalid altsetting 2 [ 154.035413][ T6195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.067258][ T6195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.828446][ T5213] get_1284_register timeout [ 154.838308][ C1] usb 3-1: async_complete: urb error -104 [ 154.860993][ T5213] uss720: probe of 3-1:0.125 failed with error -5 [ 154.978895][ T5213] usb 3-1: USB disconnect, device number 9 [ 155.365875][ T6209] loop0: detected capacity change from 0 to 32768 [ 155.405684][ T6209] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.428456][ T6209] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 155.437409][ T6209] BTRFS info (device loop0): setting nodatacow, compression disabled [ 155.467165][ T6209] BTRFS info (device loop0): max_inline at 0 [ 155.486123][ T6209] BTRFS info (device loop0): enabling disk space caching [ 155.516055][ T6209] BTRFS info (device loop0): turning off barriers [ 155.531156][ T6209] BTRFS info (device loop0): turning on flush-on-commit [ 155.579176][ T6209] BTRFS info (device loop0): doing ref verification [ 155.598323][ T6209] BTRFS info (device loop0): force clearing of disk cache [ 155.605642][ T6209] BTRFS info (device loop0): enabling ssd optimizations [ 155.625513][ T6209] BTRFS info (device loop0): max_inline at 4096 [ 155.632144][ T6209] BTRFS info (device loop0): disk space caching is enabled [ 155.874322][ T6209] BTRFS info (device loop0): rebuilding free space tree [ 155.950635][ T6209] BTRFS info (device loop0): disabling free space tree [ 155.958064][ T6209] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.968654][ T6209] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.389301][ T4264] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.854668][ T6234] loop0: detected capacity change from 0 to 512 [ 156.991205][ T6234] [ 156.993588][ T6234] ====================================================== [ 157.000655][ T6234] WARNING: possible circular locking dependency detected [ 157.007860][ T6234] syzkaller #0 Not tainted [ 157.012388][ T6234] ------------------------------------------------------ [ 157.019583][ T6234] syz.0.421/6234 is trying to acquire lock: [ 157.025809][ T6234] ffff888070360ce8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 157.034845][ T6234] [ 157.034845][ T6234] but task is already holding lock: [ 157.042473][ T6234] ffff8880700c66d8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x987/0x1230 [ 157.052127][ T6234] [ 157.052127][ T6234] which lock already depends on the new lock. [ 157.052127][ T6234] [ 157.062870][ T6234] [ 157.062870][ T6234] the existing dependency chain (in reverse order) is: [ 157.072345][ T6234] [ 157.072345][ T6234] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 157.080332][ T6234] down_read+0x42/0x2d0 [ 157.085122][ T6234] ext4_map_blocks+0x316/0x1b60 [ 157.090719][ T6234] ext4_getblk+0x1ab/0x6d0 [ 157.095862][ T6234] ext4_bread+0x26/0x170 [ 157.100897][ T6234] ext4_quota_write+0x230/0x570 [ 157.106639][ T6234] get_free_dqblk+0x312/0x660 [ 157.112014][ T6234] do_insert_tree+0x22b/0x1040 [ 157.117992][ T6234] do_insert_tree+0x9eb/0x1040 [ 157.123888][ T6234] do_insert_tree+0x9eb/0x1040 [ 157.129705][ T6234] do_insert_tree+0x9eb/0x1040 [ 157.135168][ T6234] qtree_write_dquot+0x48d/0x5b0 [ 157.140812][ T6234] v2_write_dquot+0x108/0x190 [ 157.146243][ T6234] dquot_acquire+0x2d5/0x520 [ 157.151690][ T6234] ext4_acquire_dquot+0x2d9/0x4a0 [ 157.157575][ T6234] dqget+0x778/0xeb0 [ 157.162236][ T6234] __dquot_initialize+0x3b6/0xcb0 [ 157.167958][ T6234] ext4_process_orphan+0x54/0x300 [ 157.173596][ T6234] ext4_orphan_cleanup+0xbd3/0x1400 [ 157.179794][ T6234] ext4_fill_super+0x7bc2/0x8150 [ 157.185256][ T6234] get_tree_bdev+0x3f1/0x610 [ 157.190449][ T6234] vfs_get_tree+0x88/0x270 [ 157.195816][ T6234] do_new_mount+0x24a/0xa40 [ 157.201171][ T6234] __se_sys_mount+0x2d6/0x3c0 [ 157.206480][ T6234] do_syscall_64+0x4c/0xa0 [ 157.211755][ T6234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.218232][ T6234] [ 157.218232][ T6234] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 157.226680][ T6234] down_read+0x42/0x2d0 [ 157.231439][ T6234] v2_read_dquot+0x4a/0x110 [ 157.236451][ T6234] dquot_acquire+0x152/0x520 [ 157.241563][ T6234] ext4_acquire_dquot+0x2d9/0x4a0 [ 157.247096][ T6234] dqget+0x778/0xeb0 [ 157.251587][ T6234] __dquot_initialize+0x3b6/0xcb0 [ 157.257219][ T6234] ext4_process_orphan+0x54/0x300 [ 157.263202][ T6234] ext4_orphan_cleanup+0xbd3/0x1400 [ 157.269317][ T6234] ext4_fill_super+0x7bc2/0x8150 [ 157.275121][ T6234] get_tree_bdev+0x3f1/0x610 [ 157.280418][ T6234] vfs_get_tree+0x88/0x270 [ 157.285821][ T6234] do_new_mount+0x24a/0xa40 [ 157.290974][ T6234] __se_sys_mount+0x2d6/0x3c0 [ 157.296189][ T6234] do_syscall_64+0x4c/0xa0 [ 157.301402][ T6234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.308126][ T6234] [ 157.308126][ T6234] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 157.315972][ T6234] __lock_acquire+0x2cf8/0x7c50 [ 157.321440][ T6234] lock_acquire+0x1b4/0x490 [ 157.326461][ T6234] __mutex_lock+0x120/0xaf0 [ 157.331652][ T6234] dquot_commit+0x5a/0x410 [ 157.336580][ T6234] ext4_write_dquot+0x1f0/0x360 [ 157.341970][ T6234] mark_all_dquot_dirty+0xf9/0x400 [ 157.347599][ T6234] __dquot_free_space+0x7ec/0xbc0 [ 157.353483][ T6234] ext4_free_blocks+0x1bab/0x2640 [ 157.359210][ T6234] ext4_ext_remove_space+0x1f0d/0x4490 [ 157.365171][ T6234] ext4_ext_truncate+0x211/0x370 [ 157.370912][ T6234] ext4_truncate+0xa0b/0x1230 [ 157.376278][ T6234] ext4_process_orphan+0x1cb/0x300 [ 157.381903][ T6234] ext4_orphan_cleanup+0xbd3/0x1400 [ 157.387724][ T6234] ext4_fill_super+0x7bc2/0x8150 [ 157.393548][ T6234] get_tree_bdev+0x3f1/0x610 [ 157.398910][ T6234] vfs_get_tree+0x88/0x270 [ 157.404106][ T6234] do_new_mount+0x24a/0xa40 [ 157.409400][ T6234] __se_sys_mount+0x2d6/0x3c0 [ 157.414598][ T6234] do_syscall_64+0x4c/0xa0 [ 157.419725][ T6234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.426138][ T6234] [ 157.426138][ T6234] other info that might help us debug this: [ 157.426138][ T6234] [ 157.436437][ T6234] Chain exists of: [ 157.436437][ T6234] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 157.436437][ T6234] [ 157.450243][ T6234] Possible unsafe locking scenario: [ 157.450243][ T6234] [ 157.457687][ T6234] CPU0 CPU1 [ 157.463121][ T6234] ---- ---- [ 157.468499][ T6234] lock(&ei->i_data_sem/2); [ 157.473118][ T6234] lock(&s->s_dquot.dqio_sem); [ 157.480572][ T6234] lock(&ei->i_data_sem/2); [ 157.488057][ T6234] lock(&dquot->dq_lock); [ 157.492571][ T6234] [ 157.492571][ T6234] *** DEADLOCK *** [ 157.492571][ T6234] [ 157.500818][ T6234] 4 locks held by syz.0.421/6234: [ 157.506566][ T6234] #0: ffff88805df200e0 (&type->s_umount_key#27/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 157.517566][ T6234] #1: ffff8880700c6850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_process_orphan+0x187/0x300 [ 157.528841][ T6234] #2: ffff8880700c66d8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x987/0x1230 [ 157.538719][ T6234] #3: ffffffff8cc72c48 (dquot_srcu){....}-{0:0}, at: __dquot_free_space+0x174/0xbc0 [ 157.548487][ T6234] [ 157.548487][ T6234] stack backtrace: [ 157.554464][ T6234] CPU: 0 PID: 6234 Comm: syz.0.421 Not tainted syzkaller #0 [ 157.561935][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.572378][ T6234] Call Trace: [ 157.575740][ T6234] [ 157.578785][ T6234] dump_stack_lvl+0x168/0x22e [ 157.583550][ T6234] ? load_image+0x3b0/0x3b0 [ 157.588146][ T6234] ? show_regs_print_info+0x12/0x12 [ 157.593380][ T6234] ? print_circular_bug+0x12b/0x1a0 [ 157.599026][ T6234] check_noncircular+0x274/0x310 [ 157.605137][ T6234] ? add_chain_block+0x940/0x940 [ 157.610365][ T6234] ? lockdep_lock+0xdc/0x1e0 [ 157.615039][ T6234] ? __lock_acquire+0x13c0/0x7c50 [ 157.620151][ T6234] ? _find_first_zero_bit+0xcf/0x100 [ 157.625532][ T6234] __lock_acquire+0x2cf8/0x7c50 [ 157.630488][ T6234] ? check_noncircular+0x16f/0x310 [ 157.635698][ T6234] ? verify_lock_unused+0x140/0x140 [ 157.640970][ T6234] ? add_chain_block+0x940/0x940 [ 157.645904][ T6234] ? lockdep_lock+0xdc/0x1e0 [ 157.650482][ T6234] ? lockdep_unlock+0x133/0x2d0 [ 157.655472][ T6234] ? lockdep_lock+0x1e0/0x1e0 [ 157.660153][ T6234] ? mark_lock+0x94/0x320 [ 157.664582][ T6234] lock_acquire+0x1b4/0x490 [ 157.669075][ T6234] ? dquot_commit+0x5a/0x410 [ 157.673827][ T6234] ? __might_sleep+0xd0/0xd0 [ 157.678545][ T6234] ? read_lock_is_recursive+0x10/0x10 [ 157.684102][ T6234] __mutex_lock+0x120/0xaf0 [ 157.688598][ T6234] ? dquot_commit+0x5a/0x410 [ 157.693285][ T6234] ? __might_sleep+0xd0/0xd0 [ 157.698074][ T6234] ? dquot_commit+0x5a/0x410 [ 157.702847][ T6234] ? mutex_lock_nested+0x10/0x10 [ 157.708044][ T6234] ? ext4_journal_check_start+0x17e/0x240 [ 157.713855][ T6234] dquot_commit+0x5a/0x410 [ 157.718265][ T6234] ext4_write_dquot+0x1f0/0x360 [ 157.723196][ T6234] mark_all_dquot_dirty+0xf9/0x400 [ 157.728470][ T6234] __dquot_free_space+0x7ec/0xbc0 [ 157.733484][ T6234] ? __dquot_free_space+0x174/0xbc0 [ 157.738756][ T6234] ? ext4_free_blocks+0x18a2/0x2640 [ 157.744044][ T6234] ext4_free_blocks+0x1bab/0x2640 [ 157.749163][ T6234] ? ext4_mb_discard_preallocations_should_retry+0x710/0x710 [ 157.756662][ T6234] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 157.762919][ T6234] ? ext4_inode_journal_mode+0x18f/0x460 [ 157.768637][ T6234] ext4_ext_remove_space+0x1f0d/0x4490 [ 157.774102][ T6234] ? mark_buffer_dirty+0x2d8/0x7a0 [ 157.779302][ T6234] ? ext4_da_release_space+0x133/0x5d0 [ 157.784843][ T6234] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 157.790659][ T6234] ext4_ext_truncate+0x211/0x370 [ 157.795854][ T6234] ext4_truncate+0xa0b/0x1230 [ 157.800614][ T6234] ? __might_sleep+0xd0/0xd0 [ 157.805215][ T6234] ? rwsem_write_trylock+0x12f/0x1b0 [ 157.810578][ T6234] ? __ext4_mark_inode_dirty+0x770/0x770 [ 157.816268][ T6234] ext4_process_orphan+0x1cb/0x300 [ 157.821471][ T6234] ext4_orphan_cleanup+0xbd3/0x1400 [ 157.826675][ T6234] ? ext4_orphan_del+0xb90/0xb90 [ 157.831689][ T6234] ? errseq_check_and_advance+0x62/0x120 [ 157.837400][ T6234] ext4_fill_super+0x7bc2/0x8150 [ 157.842503][ T6234] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 157.849027][ T6234] ? snprintf+0xd7/0x120 [ 157.853440][ T6234] ? preempt_count_add+0x8d/0x190 [ 157.858839][ T6234] ? set_blocksize+0x1d3/0x350 [ 157.863766][ T6234] ? sb_set_blocksize+0xa5/0xe0 [ 157.868647][ T6234] get_tree_bdev+0x3f1/0x610 [ 157.873624][ T6234] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 157.880072][ T6234] vfs_get_tree+0x88/0x270 [ 157.884866][ T6234] do_new_mount+0x24a/0xa40 [ 157.889885][ T6234] __se_sys_mount+0x2d6/0x3c0 [ 157.894561][ T6234] ? __x64_sys_mount+0xc0/0xc0 [ 157.899765][ T6234] ? lockdep_hardirqs_on+0x94/0x140 [ 157.905072][ T6234] ? __x64_sys_mount+0x1c/0xc0 [ 157.910006][ T6234] do_syscall_64+0x4c/0xa0 [ 157.914426][ T6234] ? clear_bhb_loop+0x60/0xb0 [ 157.919438][ T6234] ? clear_bhb_loop+0x60/0xb0 [ 157.924271][ T6234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.930263][ T6234] RIP: 0033:0x7faeebb9038a [ 157.934813][ T6234] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.955222][ T6234] RSP: 002b:00007faee9df5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.963740][ T6234] RAX: ffffffffffffffda RBX: 00007faee9df5ef0 RCX: 00007faeebb9038a [ 157.971798][ T6234] RDX: 00002000000000c0 RSI: 0000200000000640 RDI: 00007faee9df5eb0 [ 157.980197][ T6234] RBP: 00002000000000c0 R08: 00007faee9df5ef0 R09: 0000000003000010 [ 157.988509][ T6234] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000640 [ 157.996585][ T6234] R13: 00007faee9df5eb0 R14: 0000000000000521 R15: 0000200000000000 [ 158.004566][ T6234] [ 158.037188][ T6234] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.421: corrupted inode contents [ 158.049897][ T6234] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #16: comm syz.0.421: mark_inode_dirty error [ 158.062286][ T6234] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.421: corrupted inode contents [ 158.074724][ T6234] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.421: mark_inode_dirty error [ 158.087573][ T6234] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.421: corrupted inode contents [ 158.100091][ T6234] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 158.114377][ T6234] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.421: corrupted inode contents [ 158.127957][ T6234] EXT4-fs error (device loop0): ext4_truncate:4312: inode #16: comm syz.0.421: mark_inode_dirty error [ 158.142151][ T6234] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 158.153752][ T6234] EXT4-fs (loop0): 1 truncate cleaned up [ 158.161103][ T6234] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.170970][ T6234] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.171001][ T4363] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 158.217352][ T4363] EXT4-fs error (device loop0): ext4_release_dquot:6852: comm kworker/u4:7: Failed to release dquot type 1 [ 158.297020][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 158.360584][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'.