last executing test programs: 4m53.811722953s ago: executing program 0 (id=335): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x0, 0x9}}, &(0x7f0000000000), 0x0) 4m52.712996107s ago: executing program 0 (id=336): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f1, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x80da, 0x0, 0x0, 0xfffffffe, 0x103}) 4m47.546952783s ago: executing program 0 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x18) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x891, 0x340, {0x77359400}, {}, {0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0xb, 0x2, 0x0, 0x0, "0a7c7f0dc3f5eeab1c90d7f1281e2b311069803045c6e2e7c652262e39e89272d2424a0902303bc5e6ee70a9eb045336d93ae80eaf2cce5d6832029b3c214da1"}}, 0x80}, 0x1, 0x0, 0x0, 0x880}, 0x14000) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 4m46.605716965s ago: executing program 0 (id=350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @multicast2}, {0x6, @broadcast}, 0x0, {0x2, 0x4e23, @empty}, 'bond_slave_0\x00'}) 4m46.282533002s ago: executing program 0 (id=352): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 4m46.085835826s ago: executing program 0 (id=353): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x9) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x7a, 0xf252, 0x4, 0x8, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x8, 0x0, 0x981, 0x4, 0x100, 0xe, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0xc, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0xa, 0x9, 0x0, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x5, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x1, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x7fffffff, 0x7ff, 0x441, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x0, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 4m30.500727165s ago: executing program 32 (id=353): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x9) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x7a, 0xf252, 0x4, 0x8, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x8, 0x0, 0x981, 0x4, 0x100, 0xe, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0xc, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0xa, 0x9, 0x0, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x5, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x1, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x7fffffff, 0x7ff, 0x441, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x0, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 13.83911534s ago: executing program 1 (id=1296): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) 11.730341617s ago: executing program 2 (id=1303): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f00000003c0)=0x204, 0x4) bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @private=0xa010100}, 0x56) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x4e24, 0x8, @empty}, 0x1c) pread64(r5, &(0x7f0000000140)=""/245, 0xf5, 0x4) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000280)=0x8000006, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x5, 0xfffffffb, 0x3, 0xd, "4e51d01d5236922570b08e53c9119bbedc290f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x4) 11.58298132s ago: executing program 1 (id=1304): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7ffffffd) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000980)=""/55, 0x0, 0x41000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000840)={0x1, 0x1, &(0x7f0000000380)=""/238, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x1, 0x0, [{0x58000, 0x26, &(0x7f0000000180)=""/38}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 10.749806829s ago: executing program 2 (id=1306): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000040c0)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x2d, 0x1, 0xffffffff80000040, 0x1, 0x3, 0x9, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x2000}) 10.474935285s ago: executing program 1 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2b, 0x6, 0x0, {0x1, 0x1, 0x2, 0x0, '}-'}}, 0x2b) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84d23c44d09305222fd3a0ec4be3e563112f0b39bd87afe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6ee82a73b787046b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b4000000000000072c57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced91180604b6dd2499d16d7d9158ffffffff00000000d6069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c1c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000022000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69f865ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9c42b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5c97947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd878e0b3bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fadb85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c2ed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000000000000000000002928efeae918fc0a8169a3c965af4a789e5d8f5a51d00d9deb18086071556a0a4d1c562f721450807b770449f6affc91e7f9dbe0ec29c1bf00632ec723262c665af7c56a8538bb99a5b9733a34ef2bb36a2cb72c7bc7052f89809a375825cc4cb42837e07df102dc16a4e422ab0f8865a26cdd4597aca429d7f1ae655de15ad84ff77589ea56ca53190dc65c9ea21c375c2659c854ae12d16ccbd84753230dc8ed63ef4e245ef42884485811f26dcd1c40a193bbbf39931afa4d8c6b9202b4bc15d20cf20608fb81b70180e6c754b4f771b0a3bdf5c22d8d15bd518bbf4ee73a54786cb6d353a360677ac"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004cfe050000000000002f77fbac141416e000030a94079f03b1800044150510e0845013f2325f003909050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff3e}, 0x2c) 9.36304558s ago: executing program 2 (id=1309): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0x6a4, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) 9.160382815s ago: executing program 1 (id=1310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@jqfmt_vfsv1}, {@quota}, {@abort}, {@init_itable}, {@nodioread_nolock}]}, 0xf9, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xd) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r1, 0xa6d60000) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 9.002826928s ago: executing program 2 (id=1312): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x20, 0x11, 0x47, {0x47, 0x4, "d005bb4b4dc1642c1dfc1946bfb25fd5850b49ded02fa261d27147866588c2afc93fcd32220f700aa3f42f20821733f580d02070180bda85ed6896851396d4d6176665639c"}}, &(0x7f0000000300)={0x0, 0x3, 0xde, @string={0xde, 0x3, "2431daa7dc448f65496993b81809abb673b5b261eaf377172e6227c75ab1a276ac22a3c586f71cd770b83ecb0ded87b95acdf5fa641e5e2c01855a8b6f920795c87875c5085dddcedab4bd4c0314c0223b01ab4641d687c55107b88b7085fbf88e7242c86b431321bd7e1a4e5d3fadeac86cc4a7d030ec8154748be563cbdce38113aaf6f70aada4b98e057e40ba028aa848c58e4c6175f7549f3b8bd7d1a9455a2588211a07be98c07f86973e5939fa8d89723b4a68533ac19372e43ef6ecd084475fe7db236474cf523e7d7628da5b989791a322dccfcdb9800b30"}}, 0x0, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x669}}}}, &(0x7f0000000980)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000740), &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x7}}) r5 = gettid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xe, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x14c}}, 0x4c0c8) tkill(r5, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b80423", 0x28, 0x0, 0x0, @empty, @local, {[@dstopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x9, [0x3, 0x800]}}, @padn, @ra]}]}}}}}, 0x0) ioctl$VT_RESIZEX(r6, 0x560a, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 8.47273588s ago: executing program 2 (id=1313): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = memfd_create(0x0, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) 7.357703955s ago: executing program 5 (id=1314): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) 7.206817498s ago: executing program 5 (id=1316): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f00000003c0)=0x204, 0x4) bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @private=0xa010100}, 0x56) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x4e24, 0x8, @empty}, 0x1c) pread64(r5, &(0x7f0000000140)=""/245, 0xf5, 0x4) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000280)=0x8000006, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x5, 0xfffffffb, 0x3, 0xd, "4e51d01d5236922570b08e53c9119bbedc290f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x4) 7.162976929s ago: executing program 4 (id=1317): mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000600)='securityfs\x00', 0x410, 0x0) inotify_init1(0x80000) ftruncate(0xffffffffffffffff, 0x800799c) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) 7.037011352s ago: executing program 4 (id=1318): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7ffffffd) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000980)=""/55, 0x0, 0x41000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000840)={0x1, 0x1, &(0x7f0000000380)=""/238, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x1, 0x0, [{0x58000, 0x26, &(0x7f0000000180)=""/38}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 5.904166788s ago: executing program 5 (id=1319): r0 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0x297a, 0x40, 0x80003, 0x7}) exit(0x1ff) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000004e80)=[{0x0, 0x0, 0x0}], 0x1) 5.815214189s ago: executing program 2 (id=1320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2b, 0x6, 0x0, {0x1, 0x1, 0x2, 0x0, '}-'}}, 0x2b) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004cfe050000000000002f77fbac141416e000030a94079f03b1800044150510e0845013f2325f003909050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff3e}, 0x2c) 4.949046389s ago: executing program 4 (id=1322): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0x6a4, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) 4.89492724s ago: executing program 5 (id=1323): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x24, &(0x7f0000000180)={0x20, 0x11, 0x47, {0x47, 0x4, "d005bb4b4dc1642c1dfc1946bfb25fd5850b49ded02fa261d27147866588c2afc93fcd32220f700aa3f42f20821733f580d02070180bda85ed6896851396d4d6176665639c"}}, &(0x7f0000000300)={0x0, 0x3, 0xde, @string={0xde, 0x3, "2431daa7dc448f65496993b81809abb673b5b261eaf377172e6227c75ab1a276ac22a3c586f71cd770b83ecb0ded87b95acdf5fa641e5e2c01855a8b6f920795c87875c5085dddcedab4bd4c0314c0223b01ab4641d687c55107b88b7085fbf88e7242c86b431321bd7e1a4e5d3fadeac86cc4a7d030ec8154748be563cbdce38113aaf6f70aada4b98e057e40ba028aa848c58e4c6175f7549f3b8bd7d1a9455a2588211a07be98c07f86973e5939fa8d89723b4a68533ac19372e43ef6ecd084475fe7db236474cf523e7d7628da5b989791a322dccfcdb9800b30"}}, 0x0, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x669}}}}, &(0x7f0000000980)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000740)={0x20, 0x1, 0x2a, "5c65384872b72263760a08ec524da4c53a5102f87ed3a19534a67d46490fce44d8f4504d04011481290f"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x7}}) r5 = gettid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xe, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x14c}}, 0x4c0c8) tkill(r5, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b80423", 0x28, 0x0, 0x0, @empty, @local, {[@dstopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x9, [0x3, 0x800]}}, @padn, @ra]}]}}}}}, 0x0) ioctl$VT_RESIZEX(r6, 0x560a, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.842397511s ago: executing program 4 (id=1325): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 4.334925843s ago: executing program 5 (id=1326): syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@commit={'commit', 0x3d, 0x9e}}, {@block_validity}], [{@dont_hash}, {@measure}, {@subj_type}, {@smackfsroot={'smackfsroot', 0x3d, 'B'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x99'}}]}, 0x1, 0x507, &(0x7f00000002c0)="$eJzs3c9vW0kdAPCvnThx0uwmu+wBEOyW3YWCSp3E3Y1We4DlhBBaCbFHkLohcaModhzFzrIJPaRnrkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORu/5OXVTu4maxM7Gn4/09GbeuP5+p65n+iaxJ4CRdT0i9iNiIiI+jojZ7HouO+KD9pE87vHBvZXDg3sruWi1PvpnLm1PrkXXn0lcy56zGBE//G7ET3LPxm3s7m0sV6uV7aw+36xtzTd2926t15bXKmuVzXJ5aXFp4b3b75bPra9v1Cay0pcf/WH/Gz9L0prJrnT34zy1u144ipMYj4jvX0SwIRjL+jMx7ER4IfmIeDUi3kzf/7Mxlr6aAMBV1mrNRmu2uw4AXHX5dA0sly9lawEzkc+XSu01vNdiOl+tN5o379Z3Nlfba2VzUcjfXa9WFrK1wrko5JL6Ylp+Ui8fq9+OiFci4heTU2m9tFKvrg7zPz4AMMKuHZv//zPZnv8BgCuuOOwEAICBM/8DwOjpnv+/OcQ8AIDBcf8PAKOnPf9PDTsNAGCA3P8DwOgx/wPASPnBhx8mR+sw+/7r1U92dzbqn9xarTQ2SrWdldJKfXurtFavr6Xf2VM76fmq9frW4jux8+nct7YazfnG7t6dWn1ns3kn/V7vO5VC+qj9AfQMAOjnlTce/jmXzMjvT6VHdO3lUBhqZsBFyw87AWBoxoadADA0dvuC0XWGe3zLA3BF9Nii9ynFXh8QarVarYtLCbhgN75g/R9GVdf6v98ChhFj/R9Gl/V/GF2tVu60e/7HaR8IAFxu1viBPj//fzU7/zb74cCPV48/4sFFZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACXW2f/31K2F/hM5POlUsRLETEXhdzd9WplISJejog/TRYmk/rikHMGAM4q/7dctv/Xjdm3Z55qev3aUXEiIn76q49++elys7n9x4iJ3L8mO9ebD7Lr5cFnDwCcrDNPp+euG/nHB/dWOscg8/n7dyKi2I5/eDARh0fxx2M8PRejEBHT/85l9bZc19rFWezfj4jP9+p/LmbSNZD2zqfH4yexXxpo/PxT8fNpW/uc/F187hxygVHzMBl/Puj1/svH9fTc+/1fTEeos8vGv+SpVg7TMfBJ/M74N9Zn/Lt+2hjv/P577dLUs233I744HtGJfdg1/nTi5/rEf/uU8f/ypdff7NfW+nXEjegdvzvWfLO2Nd/Y3bu1Xlteq6xVNsvlpcWlhfduv1ueT9eo5/vPBv94/+bL/dqS/k/3iV88of9fPWX/f/O/j3/0lefE//pbveLn47XnxE/mxK+dMv7y9O+K/dqS+Kt9+n/S63/zlPEf/XXvmW3DAYDhaezubSxXq5Vthc9sofNaXpZ8LrCQdPMSpNGz8O1BxZqI3k0/f6v97+BYU6v1QrH6jRjnseoGXAZHb/qI+O+wkwEAAAAAAAAAAAAAAHoaxCeWht1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArq7/BwAA//9DP8vn") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x22802) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x40, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x4, 0x0, &(0x7f0000000300)="01010000", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000840)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0}) 3.214260958s ago: executing program 3 (id=1328): mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000600)='securityfs\x00', 0x410, 0x0) inotify_init1(0x80000) ftruncate(0xffffffffffffffff, 0x800799c) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) 2.511685513s ago: executing program 3 (id=1329): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f00000003c0)=0x204, 0x4) bind$inet(r6, &(0x7f0000000400)={0x2, 0x4e23, @private=0xa010100}, 0x56) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x4e24, 0x8, @empty}, 0x1c) pread64(r5, &(0x7f0000000140)=""/245, 0xf5, 0x4) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000280)=0x8000006, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x5, 0xfffffffb, 0x3, 0xd, "4e51d01d5236922570b08e53c9119bbedc290f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x4) 2.159381911s ago: executing program 1 (id=1330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x348, 0x348, 0xffffffff, 0x140, 0x278, 0x3f0, 0x3f0, 0xffffffff, 0x3f0, 0x3f0, 0x5, 0x0, {[{{@ip={@multicast1, @private=0xa010102, 0x0, 0xff, 'veth1_vlan\x00', 'macvlan0\x00', {0xff}, {}, 0x4, 0x2, 0x21}, 0x0, 0x108, 0x140, 0x0, {}, [@common=@ah={{0x30}, {[0x7, 0x401]}}, @common=@unspec=@physdev={{0x68}, {'bond_slave_1\x00', {0xff}, 'bridge0\x00', {0xff}, 0x4, 0x10}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x5}}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0xff000000, 0xffff00, 'wlan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x0, 0x2, 0x6c}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x1}}, @common=@set={{0x40}, {{0x3, [0x2, 0x6, 0x4, 0x0, 0x1], 0x2, 0x1}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1a, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x67, @icmp_id=0x65}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @loopback, 0x0, 0xffffff00, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x2, 0x60}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x6, 0x0, 0x4, 0x6, 0x5, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x1, 0x2, 0x0, 0x4, 0x2], 0x3, 0x1}}}}, {{@ip={@empty, @broadcast, 0xffffffff, 0xff000000, 'veth1_to_hsr\x00', 'vcan0\x00', {0xff}, {}, 0x29, 0x1, 0x30}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @broadcast, @broadcast, @icmp_id=0x65, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.490944877s ago: executing program 3 (id=1331): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7f, 0x202, 0x0, 0x0, 0x20, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e461519b104962775f9527ad4d3ff4ad351f4bd845ffcfba9be710877453dd32", [0x1ce, 0x20000001]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 1.460749457s ago: executing program 3 (id=1332): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.33504351s ago: executing program 3 (id=1333): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7ffffffd) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000980)=""/55, 0x0, 0x41000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000840)={0x1, 0x1, &(0x7f0000000380)=""/238, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x1, 0x0, [{0x58000, 0x26, &(0x7f0000000180)=""/38}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 1.264683591s ago: executing program 4 (id=1334): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f00000003c0)=0x204, 0x4) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x4e24, 0x8, @empty}, 0x1c) pread64(r5, &(0x7f0000000140)=""/245, 0xf5, 0x4) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000280)=0x8000006, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x4) 1.264261491s ago: executing program 1 (id=1335): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0x6a4, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) 158.903586ms ago: executing program 3 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400008c}, 0x8000) 25.962529ms ago: executing program 4 (id=1337): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r0 = timerfd_create(0x0, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x5, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x0, 0x800, 0x9, 0x0, 0x100, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x1ff, 0x0, 0x3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 0s ago: executing program 5 (id=1338): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101041, 0xf0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x11) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x2, 0x200fff, 0x7}) kernel console output (not intermixed with test programs): .115151][ T5110] F2FS-fs (loop0): invalid crc value [ 141.169296][ T5129] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 141.196565][ T5129] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.229403][ T5110] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 141.907886][ T9] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set [ 142.548553][ T5163] loop2: detected capacity change from 0 to 8 [ 142.608259][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 142.636859][ T5166] overlayfs: failed to resolve './file0': -2 [ 142.659530][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.659530][ T9] [ 142.689644][ T5168] capability: warning: `syz.0.250' uses deprecated v2 capabilities in a way that may be insecure [ 142.731066][ T5166] overlayfs: failed to resolve './file0/file0': -2 [ 142.747122][ T9] EXT4-fs (loop1): Total free blocks count 0 [ 142.769713][ T4202] Bluetooth: hci1: unexpected event for opcode 0x200c [ 142.777549][ T9] EXT4-fs (loop1): Free/Dirty block details [ 143.180391][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 143.621021][ T9] EXT4-fs (loop1): free_blocks=0 [ 143.640801][ T5176] netlink: 104 bytes leftover after parsing attributes in process `syz.4.251'. [ 143.699144][ T9] EXT4-fs (loop1): dirty_blocks=16 [ 143.702154][ T5179] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.720980][ T9] EXT4-fs (loop1): Block reservation details [ 143.727002][ T9] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 143.833302][ T5183] loop4: detected capacity change from 0 to 256 [ 144.602053][ T5198] loop4: detected capacity change from 0 to 128 [ 145.544648][ T5210] overlayfs: failed to resolve './file0': -2 [ 145.570417][ T5202] loop2: detected capacity change from 0 to 2048 [ 145.603284][ T5210] overlayfs: failed to resolve './file0/file0': -2 [ 146.658157][ T5226] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 147.219766][ T4232] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.260982][ T4263] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 147.479873][ T4232] usb 5-1: Using ep0 maxpacket: 16 [ 147.685547][ T5249] loop1: detected capacity change from 0 to 512 [ 147.712585][ T5250] loop0: detected capacity change from 0 to 1024 [ 147.789882][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.802230][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.812481][ T4232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.826805][ T4232] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.837638][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.846366][ T4263] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.858142][ T4232] usb 5-1: config 0 descriptor?? [ 147.969855][ T4263] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 147.979188][ T4263] usb 3-1: can't read configurations, error -71 [ 148.024689][ T5252] overlayfs: failed to resolve './file0': -2 [ 148.033475][ T5252] overlayfs: failed to resolve './file0/file0': -2 [ 148.059464][ T5250] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 148.080959][ T5250] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.096189][ T5259] binder: 5258:5259 ioctl c0306201 2000000003c0 returned -14 [ 148.708642][ T5265] loop4: detected capacity change from 0 to 164 [ 149.262569][ T4336] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:10: bg 0: block 112: padding at end of block bitmap is not set [ 149.345029][ T4336] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 149.360028][ T4336] EXT4-fs (loop0): This should not happen!! Data will be lost [ 149.360028][ T4336] [ 149.373586][ T4336] EXT4-fs (loop0): Total free blocks count 0 [ 149.379581][ T4336] EXT4-fs (loop0): Free/Dirty block details [ 149.394237][ T4336] EXT4-fs (loop0): free_blocks=0 [ 149.399474][ T4336] EXT4-fs (loop0): dirty_blocks=16 [ 149.416480][ T4232] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 149.436085][ T4336] EXT4-fs (loop0): Block reservation details [ 149.443792][ T4232] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 149.452006][ T4336] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 149.459524][ T4232] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 149.469013][ T5277] loop3: detected capacity change from 0 to 16 [ 149.483684][ T4232] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 149.495434][ T4232] microsoft 0003:045E:07DA.0001: no inputs found [ 149.568308][ T4232] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 149.852979][ T5277] erofs: (device loop3): mounted with root inode @ nid 36. [ 149.877805][ T4202] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 149.904020][ T4232] usb 5-1: USB disconnect, device number 5 [ 149.922352][ T5274] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 150.080064][ T25] audit: type=1800 audit(1784182217.077:14): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.282" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 151.390886][ T5300] loop4: detected capacity change from 0 to 1024 [ 151.426868][ T5296] fido_id[5296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 151.527539][ T5304] loop0: detected capacity change from 0 to 1024 [ 151.566873][ T5292] loop2: detected capacity change from 0 to 40427 [ 151.656610][ T5292] F2FS-fs (loop2): invalid crc value [ 151.665787][ T5304] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 151.703559][ T5292] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.768684][ T5304] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.064040][ T5292] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.993059][ T4348] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:11: bg 0: block 112: padding at end of block bitmap is not set [ 153.025498][ T4348] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 153.109585][ T4348] EXT4-fs (loop0): This should not happen!! Data will be lost [ 153.109585][ T4348] [ 153.163495][ T4348] EXT4-fs (loop0): Total free blocks count 0 [ 153.169495][ T4348] EXT4-fs (loop0): Free/Dirty block details [ 153.187309][ T4348] EXT4-fs (loop0): free_blocks=0 [ 153.195726][ T4348] EXT4-fs (loop0): dirty_blocks=16 [ 153.201189][ T4348] EXT4-fs (loop0): Block reservation details [ 153.237738][ T4348] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 153.398464][ T5340] binder: 5339:5340 ioctl c0306201 200000000080 returned -14 [ 153.447906][ T5340] binder: 5339:5340 ioctl c0306201 2000000003c0 returned -14 [ 153.685518][ T5345] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 153.853963][ T5349] netlink: 'syz.4.301': attribute type 1 has an invalid length. [ 156.064808][ T5372] loop2: detected capacity change from 0 to 1024 [ 156.276297][ T5372] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 156.379929][ T5372] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.358598][ T4481] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:14: bg 0: block 112: padding at end of block bitmap is not set [ 157.449900][ T4481] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 157.479729][ T4481] EXT4-fs (loop2): This should not happen!! Data will be lost [ 157.479729][ T4481] [ 157.489378][ T4481] EXT4-fs (loop2): Total free blocks count 0 [ 157.580108][ T4481] EXT4-fs (loop2): Free/Dirty block details [ 157.637500][ T4481] EXT4-fs (loop2): free_blocks=0 [ 157.659694][ T4481] EXT4-fs (loop2): dirty_blocks=16 [ 157.702036][ T4481] EXT4-fs (loop2): Block reservation details [ 157.757007][ T4481] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 158.322940][ T5400] loop0: detected capacity change from 0 to 32768 [ 158.550399][ T5400] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.307 (5400) [ 158.576215][ T5400] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 158.585956][ T5400] BTRFS info (device loop0): metadata ratio 0 [ 158.592307][ T5400] BTRFS info (device loop0): turning on sync discard [ 158.599116][ T5400] BTRFS info (device loop0): using free space tree [ 158.605781][ T5400] BTRFS info (device loop0): has skinny extents [ 160.392986][ T5433] loop1: detected capacity change from 0 to 1764 [ 160.408101][ T5400] BTRFS info (device loop0): enabling ssd optimizations [ 161.839474][ T5445] binder: 5444:5445 ioctl 40046210 0 returned -14 [ 161.969217][ T5447] loop4: detected capacity change from 0 to 512 [ 162.017702][ T5447] EXT4-fs (loop4): Ignoring removed oldalloc option [ 162.110413][ T5454] loop1: detected capacity change from 0 to 256 [ 162.111146][ T5447] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 162.178423][ T5454] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 162.275220][ T5454] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 162.321115][ T5454] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 162.343637][ T5454] UDF-fs: Scanning with blocksize 512 failed [ 162.365674][ T5454] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 162.389614][ T5470] overlayfs: failed to resolve './file0/file0': -2 [ 162.433093][ T5454] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 162.632482][ T5473] loop0: detected capacity change from 0 to 2048 [ 162.681549][ T5473] UDF-fs: bad mount option "0x0000000000000004" or missing value [ 163.313490][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 164.314723][ T5492] loop1: detected capacity change from 0 to 32768 [ 164.338644][ T5495] netlink: 168 bytes leftover after parsing attributes in process `syz.0.334'. [ 164.350933][ T5492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.332 (5492) [ 164.394480][ T5496] loop4: detected capacity change from 0 to 1024 [ 164.404287][ T5498] loop0: detected capacity change from 0 to 512 [ 164.436294][ T5492] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 164.444992][ T5492] BTRFS info (device loop1): metadata ratio 0 [ 164.451128][ T5492] BTRFS info (device loop1): turning on sync discard [ 164.457804][ T5492] BTRFS info (device loop1): using free space tree [ 164.464342][ T5492] BTRFS info (device loop1): has skinny extents [ 165.631526][ T5496] hfsplus: failed to load root directory [ 165.756137][ T5492] BTRFS info (device loop1): enabling ssd optimizations [ 168.217012][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (4179) [ 168.321056][ T5530] netlink: 64 bytes leftover after parsing attributes in process `syz.2.331'. [ 169.754227][ T5544] loop0: detected capacity change from 0 to 1024 [ 169.936113][ T5544] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.776102][ T5558] overlayfs: failed to resolve './file0/file0': -2 [ 171.903743][ T5566] loop4: detected capacity change from 0 to 32768 [ 173.040142][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.054339][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.062348][ T5587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.076974][ T5587] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 173.950260][ T5603] overlayfs: failed to resolve './file0/file0': -2 [ 175.206136][ T5618] loop4: detected capacity change from 0 to 1024 [ 175.886626][ T5623] loop2: detected capacity change from 0 to 1024 [ 175.944463][ T5618] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.956692][ T5623] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 176.009952][ T5618] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.075345][ T5623] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.142485][ T5618] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.364: lblock 0 mapped to illegal pblock 0 (length 1) [ 176.241927][ T5618] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 176.299313][ T5618] EXT4-fs (loop4): This should not happen!! Data will be lost [ 176.299313][ T5618] [ 176.313264][ T5618] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: comm syz.4.364: lblock 0 mapped to illegal pblock 0 (length 1) [ 176.932547][ T5634] device bridge1 entered promiscuous mode [ 177.134102][ T4333] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:9: bg 0: block 112: padding at end of block bitmap is not set [ 177.331354][ T4333] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 177.404423][ T4333] EXT4-fs (loop2): This should not happen!! Data will be lost [ 177.404423][ T4333] [ 177.464854][ T4333] EXT4-fs (loop2): Total free blocks count 0 [ 177.508660][ T4333] EXT4-fs (loop2): Free/Dirty block details [ 177.514938][ T4333] EXT4-fs (loop2): free_blocks=0 [ 177.527553][ T4333] EXT4-fs (loop2): dirty_blocks=16 [ 177.533572][ T4333] EXT4-fs (loop2): Block reservation details [ 177.574810][ T4333] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 179.069236][ T5654] loop2: detected capacity change from 0 to 256 [ 179.158178][ T5654] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.776758][ T5654] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 179.872749][ T5654] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xdca9dc68, utbl_chksum : 0xe619d30d) [ 180.154411][ T5668] loop1: detected capacity change from 0 to 1024 [ 180.284442][ T5668] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 180.430144][ T5668] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.858499][ T2304] Bluetooth: hci4: command 0x0406 tx timeout [ 180.900288][ T2304] Bluetooth: hci2: command 0x0406 tx timeout [ 180.972146][ T2304] Bluetooth: hci0: command 0x0406 tx timeout [ 180.978531][ T2304] Bluetooth: hci1: command 0x0406 tx timeout [ 180.985965][ T2304] Bluetooth: hci3: command 0x0406 tx timeout [ 181.450550][ T5650] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:17: bg 0: block 112: padding at end of block bitmap is not set [ 181.599371][ T5650] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 181.641496][ T5650] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.641496][ T5650] [ 181.672931][ T5650] EXT4-fs (loop1): Total free blocks count 0 [ 181.806351][ T5650] EXT4-fs (loop1): Free/Dirty block details [ 181.886931][ T5650] EXT4-fs (loop1): free_blocks=0 [ 181.929690][ T5650] EXT4-fs (loop1): dirty_blocks=16 [ 181.976498][ T5650] EXT4-fs (loop1): Block reservation details [ 182.029490][ T5650] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 183.849245][ T5705] loop1: detected capacity change from 0 to 2048 [ 184.507331][ T5705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.804237][ T5712] loop1: detected capacity change from 0 to 512 [ 184.858315][ T5712] EXT4-fs (loop1): bad geometry: block count 204800 exceeds size of device (64 blocks) [ 185.161638][ T5714] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 185.172846][ T5714] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 186.349103][ T5724] loop2: detected capacity change from 0 to 1024 [ 186.419325][ T5724] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 186.476101][ T5724] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.773329][ T5650] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:17: bg 0: block 112: padding at end of block bitmap is not set [ 187.879780][ T5650] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 188.609250][ T5741] 9pnet_virtio: no channels available for device ./bus [ 189.424185][ T5650] EXT4-fs (loop2): This should not happen!! Data will be lost [ 189.424185][ T5650] [ 189.436446][ T5650] EXT4-fs (loop2): Total free blocks count 0 [ 189.468323][ T5650] EXT4-fs (loop2): Free/Dirty block details [ 189.488562][ T5650] EXT4-fs (loop2): free_blocks=0 [ 189.528934][ T5650] EXT4-fs (loop2): dirty_blocks=16 [ 189.539706][ T5650] EXT4-fs (loop2): Block reservation details [ 189.545699][ T5650] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 189.627894][ T4190] ODEBUG: Out of memory. ODEBUG disabled [ 189.645977][ T5755] loop4: detected capacity change from 0 to 1024 [ 189.832150][ T5755] EXT4-fs (loop4): Test dummy encryption mode enabled [ 190.574910][ T5755] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 190.891517][ T5768] loop2: detected capacity change from 0 to 32768 [ 190.903774][ T5770] ipt_REJECT: TCP_RESET invalid for non-tcp [ 194.294916][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.299241][ T5467] Bluetooth: hci5: command 0x0409 tx timeout [ 194.301259][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.400259][ T5794] 9pnet_virtio: no channels available for device ./bus [ 194.479608][ T5795] loop1: detected capacity change from 0 to 128 [ 194.633687][ T5795] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 194.664293][ T5759] chnl_net:caif_netlink_parms(): no params data found [ 194.713963][ T25] audit: type=1800 audit(1784182261.737:15): pid=5795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.410" name="file2" dev="loop1" ino=1048605 res=0 errno=0 [ 195.914413][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.946351][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.954946][ T5759] device bridge_slave_0 entered promiscuous mode [ 195.971351][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.978459][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.994186][ T5813] loop1: detected capacity change from 0 to 1024 [ 196.016639][ T5759] device bridge_slave_1 entered promiscuous mode [ 196.124678][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.138997][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.340283][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 196.914253][ T5759] team0: Port device team_slave_0 added [ 196.986450][ T5759] team0: Port device team_slave_1 added [ 197.050479][ T5817] loop1: detected capacity change from 0 to 32768 [ 197.677553][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.711434][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.745896][ T5817] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 197.754695][ T5817] BTRFS info (device loop1): metadata ratio 0 [ 197.760925][ T5817] BTRFS info (device loop1): turning on sync discard [ 197.767604][ T5817] BTRFS info (device loop1): using free space tree [ 197.799890][ T5817] BTRFS info (device loop1): has skinny extents [ 197.815675][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.828086][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.842271][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.956212][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.099210][ T5842] 9pnet_virtio: no channels available for device ./bus [ 198.116952][ T5759] device hsr_slave_0 entered promiscuous mode [ 198.150724][ T5759] device hsr_slave_1 entered promiscuous mode [ 198.159374][ T5759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.167022][ T5759] Cannot create hsr debugfs directory [ 198.215556][ T5817] BTRFS info (device loop1): enabling ssd optimizations [ 198.461659][ T1108] Bluetooth: hci5: command 0x040f tx timeout [ 199.931396][ T5849] No such timeout policy "syz1" [ 200.066087][ T5860] loop2: detected capacity change from 0 to 764 [ 200.226220][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (4179) [ 200.419957][ T5860] netlink: 96 bytes leftover after parsing attributes in process `syz.2.425'. [ 200.500186][ T1108] Bluetooth: hci5: command 0x0419 tx timeout [ 200.536187][ T4448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.674179][ T4448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.758549][ T4448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.860697][ T5886] loop1: detected capacity change from 0 to 512 [ 200.880669][ T4448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.942029][ T5886] EXT4-fs (loop1): Ignoring removed oldalloc option [ 201.636060][ T5886] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 201.996613][ T5759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.013255][ T5898] loop4: detected capacity change from 0 to 32768 [ 202.076246][ T5759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.138697][ T5759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.517771][ T5759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.474649][ T5922] fuse: Bad value for 'fd' [ 205.564750][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.594828][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.636218][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.650882][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.701876][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.718486][ T5923] loop2: detected capacity change from 0 to 32768 [ 205.727920][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.736720][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.743825][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.797768][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.820379][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.845767][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.852887][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.915111][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.380064][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.388271][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.398831][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.410462][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.418886][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.428267][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.437078][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.462428][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.500146][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.933867][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.107422][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.426893][ T5973] loop1: detected capacity change from 0 to 1024 [ 208.475144][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.505400][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.542521][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.595006][ T5973] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.640547][ T5973] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.717758][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 208.728620][ T5973] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.445: lblock 0 mapped to illegal pblock 0 (length 1) [ 208.805230][ T5973] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 208.879408][ T5973] EXT4-fs (loop1): This should not happen!! Data will be lost [ 208.879408][ T5973] [ 209.088017][ T5999] loop4: detected capacity change from 0 to 32768 [ 209.094652][ T5998] loop2: detected capacity change from 0 to 32768 [ 209.116633][ T6000] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.445: lblock 0 mapped to illegal pblock 0 (length 1) [ 209.160580][ T5983] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 209.190197][ T5650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.215730][ T5650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.351312][ T5650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.638701][ T5650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.823778][ T5650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.831567][ T5650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.898194][ T5759] device veth0_vlan entered promiscuous mode [ 212.013625][ T5759] device veth1_vlan entered promiscuous mode [ 212.301403][ T5759] device veth0_macvtap entered promiscuous mode [ 212.377911][ T5759] device veth1_macvtap entered promiscuous mode [ 212.520488][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.599535][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.610469][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.621920][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.636084][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.636600][ T6027] loop2: detected capacity change from 0 to 1024 [ 212.654140][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.664928][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.675805][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.697204][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.739275][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.810947][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.813980][ T6037] loop1: detected capacity change from 0 to 512 [ 212.829798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.838295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.919934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.937238][ T6040] loop2: detected capacity change from 0 to 128 [ 214.008812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.086449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.968345][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.964156][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.985072][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.014480][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.038988][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.065676][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.089937][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.114630][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.159747][ T5759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.184966][ T5759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.220838][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.228745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.250223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.278009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.330494][ T5759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.339605][ T5759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.420214][ T5759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.429083][ T5759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.550731][ T4448] device hsr_slave_0 left promiscuous mode [ 216.560569][ T4448] device hsr_slave_1 left promiscuous mode [ 216.583439][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.615272][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.648596][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.672730][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.696273][ T4448] device bridge_slave_1 left promiscuous mode [ 216.719274][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.773244][ T4448] device bridge_slave_0 left promiscuous mode [ 216.790799][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.849822][ T4448] device veth1_macvtap left promiscuous mode [ 216.884490][ T4448] device veth1_vlan left promiscuous mode [ 216.947196][ T4448] device veth0_vlan left promiscuous mode [ 217.599487][ T6083] loop1: detected capacity change from 0 to 512 [ 217.623148][ T6083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.674897][ T6083] EXT4-fs (loop1): 1 truncate cleaned up [ 217.680585][ T6083] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 217.735019][ T6087] loop2: detected capacity change from 0 to 2048 [ 217.779009][ T6087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.142713][ T6095] loop4: detected capacity change from 0 to 32768 [ 218.386328][ T25] audit: type=1800 audit(1784182285.267:16): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.478" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 218.433471][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 218.575211][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 218.737932][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.868085][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.108727][ T4448] bond0 (unregistering): Released all slaves [ 219.121697][ T6108] loop1: detected capacity change from 0 to 128 [ 219.409000][ T6120] loop2: detected capacity change from 0 to 16 [ 219.474872][ T6120] erofs: (device loop2): erofs_read_superblock: blkszbits 10 isn't supported on this platform [ 220.224847][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.240850][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.770076][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.928569][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.000642][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.064133][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.077544][ T6139] loop4: detected capacity change from 0 to 256 [ 221.998416][ T6139] FAT-fs (loop4): Directory bread(block 64) failed [ 222.015301][ T6139] FAT-fs (loop4): Directory bread(block 65) failed [ 222.069751][ T6139] FAT-fs (loop4): Directory bread(block 66) failed [ 222.112719][ T6139] FAT-fs (loop4): Directory bread(block 67) failed [ 222.130903][ T6139] FAT-fs (loop4): Directory bread(block 68) failed [ 222.161901][ T6139] FAT-fs (loop4): Directory bread(block 69) failed [ 222.185986][ T6139] FAT-fs (loop4): Directory bread(block 70) failed [ 222.193014][ T6139] FAT-fs (loop4): Directory bread(block 71) failed [ 222.199594][ T6139] FAT-fs (loop4): Directory bread(block 72) failed [ 222.207162][ T6139] FAT-fs (loop4): Directory bread(block 73) failed [ 224.362282][ T25] audit: type=1326 audit(1784182291.387:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.2.505" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a29f15e59 code=0x0 [ 225.410301][ T6211] loop4: detected capacity change from 0 to 1024 [ 225.494336][ T6220] loop1: detected capacity change from 0 to 1764 [ 225.549241][ T6224] Invalid option length (1046377) for dns_resolver key [ 226.727907][ T6211] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 226.795211][ T6211] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.643238][ T6250] loop1: detected capacity change from 0 to 128 [ 227.645941][ T4333] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:9: bg 0: block 112: padding at end of block bitmap is not set [ 228.669933][ T4333] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 228.855092][ T4333] EXT4-fs (loop4): This should not happen!! Data will be lost [ 228.855092][ T4333] [ 228.865421][ T4333] EXT4-fs (loop4): Total free blocks count 0 [ 228.940819][ T4333] EXT4-fs (loop4): Free/Dirty block details [ 228.969293][ T4333] EXT4-fs (loop4): free_blocks=0 [ 229.027398][ T4333] EXT4-fs (loop4): dirty_blocks=16 [ 229.032721][ T4333] EXT4-fs (loop4): Block reservation details [ 229.039577][ T4333] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 231.318183][ T6299] loop1: detected capacity change from 0 to 1024 [ 231.532675][ T6299] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 231.553685][ T6313] ipt_REJECT: TCP_RESET invalid for non-tcp [ 231.749520][ T6299] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.987150][ T6324] loop2: detected capacity change from 0 to 1024 [ 232.995736][ T4333] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:9: bg 0: block 112: padding at end of block bitmap is not set [ 233.079669][ T4333] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 233.106238][ T6324] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.131295][ T6324] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.150910][ T6297] loop4: detected capacity change from 0 to 40427 [ 233.161437][ T4333] EXT4-fs (loop1): This should not happen!! Data will be lost [ 233.161437][ T4333] [ 233.226107][ T6324] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.537: lblock 0 mapped to illegal pblock 0 (length 1) [ 233.243902][ T6297] F2FS-fs (loop4): invalid crc value [ 233.251032][ T4333] EXT4-fs (loop1): Total free blocks count 0 [ 233.257023][ T4333] EXT4-fs (loop1): Free/Dirty block details [ 233.301555][ T4333] EXT4-fs (loop1): free_blocks=0 [ 233.327339][ T6297] F2FS-fs (loop4): Found nat_bits in checkpoint [ 233.334903][ T4333] EXT4-fs (loop1): dirty_blocks=16 [ 233.357087][ T4333] EXT4-fs (loop1): Block reservation details [ 233.359909][ T6324] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 233.386340][ T4333] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 233.419886][ T6324] EXT4-fs (loop2): This should not happen!! Data will be lost [ 233.419886][ T6324] [ 233.450151][ T6332] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.537: lblock 0 mapped to illegal pblock 0 (length 1) [ 233.573047][ T6297] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 233.638104][ T6340] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 233.691375][ T6340] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 234.328118][ T6352] loop2: detected capacity change from 0 to 128 [ 237.240691][ T4189] attempt to access beyond end of device [ 237.240691][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 237.367424][ T6371] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.374150][ T6371] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 237.470257][ T6373] loop5: detected capacity change from 0 to 128 [ 238.513905][ T6404] syz.5.553 uses obsolete (PF_INET,SOCK_PACKET) [ 238.547791][ T6403] loop2: detected capacity change from 0 to 1024 [ 239.387878][ T6436] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.558'. [ 239.420709][ T6403] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.445348][ T6403] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.529816][ T6437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 239.562598][ T6403] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.550: lblock 0 mapped to illegal pblock 0 (length 1) [ 239.682585][ T6403] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 239.800228][ T6403] EXT4-fs (loop2): This should not happen!! Data will be lost [ 239.800228][ T6403] [ 239.984421][ T6450] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.550: lblock 0 mapped to illegal pblock 0 (length 1) [ 240.599594][ T6478] loop5: detected capacity change from 0 to 128 [ 241.123896][ T6495] netlink: 'syz.5.577': attribute type 25 has an invalid length. [ 241.140048][ T6495] netlink: 'syz.5.577': attribute type 29 has an invalid length. [ 242.910895][ T6500] device bridge2 entered promiscuous mode [ 243.155268][ T6508] loop2: detected capacity change from 0 to 1024 [ 243.960696][ T6508] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.979854][ T6508] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.997077][ T6526] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 244.071053][ T6508] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.580: lblock 0 mapped to illegal pblock 0 (length 1) [ 244.165752][ T6508] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 244.203843][ T6508] EXT4-fs (loop2): This should not happen!! Data will be lost [ 244.203843][ T6508] [ 244.235027][ T6530] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: comm syz.2.580: lblock 0 mapped to illegal pblock 0 (length 1) [ 244.388206][ T6538] loop4: detected capacity change from 0 to 128 [ 244.454152][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.105912][ T6561] device bridge2 entered promiscuous mode [ 246.798682][ T6566] loop2: detected capacity change from 0 to 1024 [ 246.881940][ T6568] loop4: detected capacity change from 0 to 1024 [ 246.912119][ T6566] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 246.928647][ T6566] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.932514][ T6568] EXT4-fs (loop4): Test dummy encryption mode enabled [ 247.176618][ T6568] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 247.836750][ T6584] ipt_REJECT: TCP_RESET invalid for non-tcp [ 247.972628][ T9] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set [ 248.100241][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 248.185898][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 248.185898][ T9] [ 248.244053][ T9] EXT4-fs (loop2): Total free blocks count 0 [ 248.250277][ T9] EXT4-fs (loop2): Free/Dirty block details [ 248.256179][ T9] EXT4-fs (loop2): free_blocks=0 [ 248.261151][ T9] EXT4-fs (loop2): dirty_blocks=16 [ 248.266262][ T9] EXT4-fs (loop2): Block reservation details [ 248.277710][ T9] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 249.114635][ T6614] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.606'. [ 249.162579][ T6614] netlink: zone id is out of range [ 249.187428][ T6614] netlink: zone id is out of range [ 249.226467][ T6614] netlink: zone id is out of range [ 249.259687][ T6614] netlink: zone id is out of range [ 249.264819][ T6614] netlink: zone id is out of range [ 249.270571][ T6614] netlink: zone id is out of range [ 249.275694][ T6614] netlink: zone id is out of range [ 249.290173][ T6614] netlink: zone id is out of range [ 249.303593][ T6614] netlink: zone id is out of range [ 249.318960][ T6614] netlink: zone id is out of range [ 249.450776][ T6627] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.611'. [ 250.472779][ T6640] netlink: 'syz.2.615': attribute type 29 has an invalid length. [ 250.489967][ T6640] netlink: 'syz.2.615': attribute type 29 has an invalid length. [ 250.512034][ T6640] netlink: 'syz.2.615': attribute type 29 has an invalid length. [ 250.541239][ T6640] netlink: 'syz.2.615': attribute type 29 has an invalid length. [ 250.576693][ T6640] netlink: 'syz.2.615': attribute type 29 has an invalid length. [ 250.594905][ T6640] netlink: 'syz.2.615': attribute type 29 has an invalid length. [ 250.603402][ T6647] netlink: 'syz.3.617': attribute type 39 has an invalid length. [ 250.619466][ T6646] netlink: 'syz.5.618': attribute type 29 has an invalid length. [ 250.685125][ T6647] device hsr_slave_0 left promiscuous mode [ 250.706204][ T6646] netlink: 'syz.5.618': attribute type 29 has an invalid length. [ 251.342175][ T6648] device bridge3 entered promiscuous mode [ 251.346474][ T6657] loop1: detected capacity change from 0 to 1024 [ 251.502654][ T6657] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.551414][ T6657] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.618870][ T6657] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.610: lblock 0 mapped to illegal pblock 0 (length 1) [ 251.708119][ T6657] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 251.761968][ T6657] EXT4-fs (loop1): This should not happen!! Data will be lost [ 251.761968][ T6657] [ 251.784839][ T6670] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.610: lblock 0 mapped to illegal pblock 0 (length 1) [ 252.829886][ T6667] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 254.447445][ T6697] loop4: detected capacity change from 0 to 1764 [ 255.903149][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.909474][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.103023][ T6723] loop1: detected capacity change from 0 to 8 [ 256.812564][ T6723] SQUASHFS error: zlib decompression failed, data probably corrupt [ 256.829727][ T6723] SQUASHFS error: Failed to read block 0x4de: -5 [ 256.836872][ T6723] SQUASHFS error: Failed to read block 0x4e2: -5 [ 256.843715][ T6723] SQUASHFS error: Failed to read block 0x9ca: -5 [ 256.850414][ T6723] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 257.920785][ T6723] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 257.927382][ T6723] SQUASHFS error: Failed to read block 0x535f2: -5 [ 257.950117][ T25] audit: type=1800 audit(1784182324.969:18): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.636" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 258.729164][ T6769] loop4: detected capacity change from 0 to 256 [ 259.445450][ T6769] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 260.778900][ T6768] loop1: detected capacity change from 0 to 32768 [ 260.836148][ T6768] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 260.870366][ T6768] BTRFS info (device loop1): metadata ratio 0 [ 260.884751][ T6768] BTRFS info (device loop1): turning on sync discard [ 260.929754][ T6768] BTRFS info (device loop1): using free space tree [ 260.936273][ T6768] BTRFS info (device loop1): has skinny extents [ 261.069891][ T4193] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 261.832372][ T6768] BTRFS error (device loop1): open_ctree failed: -12 [ 261.856043][ T6821] device bridge2 entered promiscuous mode [ 261.909801][ T4193] usb 5-1: Using ep0 maxpacket: 32 [ 263.107527][ T4193] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.309998][ T4193] usb 5-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 263.324270][ T4193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.345321][ T4193] usb 5-1: Product: syz [ 263.349498][ T4193] usb 5-1: Manufacturer: syz [ 263.379675][ T4193] usb 5-1: SerialNumber: syz [ 263.671299][ T6798] udc-core: couldn't find an available UDC or it's busy [ 263.678270][ T6798] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 263.945089][ T4193] usb 5-1: USB disconnect, device number 6 [ 264.773778][ T6865] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.785713][ T6865] blk_update_request: I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.797134][ T6865] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 264.807190][ T6865] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.818365][ T6865] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 264.828085][ T6865] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 264.835851][ T6865] UDF-fs: Scanning with blocksize 512 failed [ 264.843869][ T6865] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.855548][ T6865] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.866781][ T6865] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 264.881334][ T6865] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.892517][ T6865] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 264.902081][ T6865] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 264.909724][ T6865] UDF-fs: Scanning with blocksize 1024 failed [ 264.916170][ T6865] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.927290][ T6865] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.938447][ T6865] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 264.948064][ T6865] blk_update_request: I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.959184][ T6865] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 264.968721][ T6865] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 264.976342][ T6865] UDF-fs: Scanning with blocksize 2048 failed [ 264.982733][ T6865] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.993788][ T6865] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 265.003404][ T6865] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 265.012938][ T6865] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 265.020555][ T6865] UDF-fs: Scanning with blocksize 4096 failed [ 265.026590][ T6865] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 265.276848][ T6868] loop4: detected capacity change from 0 to 16 [ 265.437798][ T6868] erofs: (device loop4): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms 2 [ 265.450488][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.114799][ T6884] loop2: detected capacity change from 0 to 2048 [ 266.302176][ T6884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.378646][ T6893] loop4: detected capacity change from 0 to 512 [ 267.079852][ T6893] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 267.126184][ T6893] EXT4-fs (loop4): orphan cleanup on readonly fs [ 267.174670][ T6893] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.668: Block bitmap for bg 0 marked uninitialized [ 267.340412][ T6893] EXT4-fs (loop4): Remounting filesystem read-only [ 267.346943][ T6893] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 267.362922][ T6893] EXT4-fs (loop4): Remounting filesystem read-only [ 267.369462][ T6893] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.668: Block bitmap for bg 0 marked uninitialized [ 267.430090][ T6893] EXT4-fs (loop4): Remounting filesystem read-only [ 267.437642][ T6893] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 267.482041][ T6893] EXT4-fs (loop4): Remounting filesystem read-only [ 267.488617][ T6893] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.668: Block bitmap for bg 0 marked uninitialized [ 267.544966][ T6893] EXT4-fs (loop4): Remounting filesystem read-only [ 267.551587][ T6893] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 267.614765][ T6893] EXT4-fs (loop4): Remounting filesystem read-only [ 268.731494][ T6893] EXT4-fs (loop4): 1 orphan inode deleted [ 268.737260][ T6893] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 268.878400][ T6893] EXT4-fs (loop4): shut down requested (2) [ 269.190283][ T6902] loop2: detected capacity change from 0 to 32768 [ 270.990157][ T6902] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.669 (6902) [ 271.274842][ T6902] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 271.329809][ T6902] BTRFS info (device loop2): metadata ratio 0 [ 271.335908][ T6902] BTRFS info (device loop2): turning on sync discard [ 271.458902][ T6902] BTRFS info (device loop2): using free space tree [ 271.507743][ T6945] loop4: detected capacity change from 0 to 2048 [ 271.531433][ T6902] BTRFS info (device loop2): has skinny extents [ 271.662301][ T6902] BTRFS error (device loop2): open_ctree failed: -12 [ 272.173337][ T6971] xt_bpf: check failed: parse error [ 273.389818][ T6945] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.677: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 273.444437][ T6945] EXT4-fs (loop4): get root inode failed [ 273.472985][ T6945] EXT4-fs (loop4): mount failed [ 273.710840][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.683'. [ 275.404239][ T7009] 9pnet_virtio: no channels available for device ./bus [ 278.744896][ T7037] loop5: detected capacity change from 0 to 1024 [ 278.835890][ T7037] EXT4-fs (loop5): Test dummy encryption mode enabled [ 278.931442][ T7037] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 278.970729][ T7041] device bridge4 entered promiscuous mode [ 279.363295][ T7046] loop2: detected capacity change from 0 to 1024 [ 279.392756][ T7045] ipt_REJECT: TCP_RESET invalid for non-tcp [ 280.132426][ T7046] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.195583][ T7046] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.246455][ T7049] loop4: detected capacity change from 0 to 512 [ 280.274802][ T7046] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.698: lblock 3 mapped to illegal pblock 3 (length 3) [ 280.320025][ T7046] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 281.350957][ T7046] EXT4-fs (loop2): This should not happen!! Data will be lost [ 281.350957][ T7046] [ 281.524184][ T5650] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 281.613007][ T5650] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 281.630759][ T5650] EXT4-fs (loop2): This should not happen!! Data will be lost [ 281.630759][ T5650] [ 281.671872][ T7061] loop5: detected capacity change from 0 to 128 [ 281.817352][ T7061] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.873963][ T7068] loop2: detected capacity change from 0 to 512 [ 281.889753][ T7061] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 281.942460][ T7072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.661328][ T7068] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 282.692138][ T7078] 9pnet_virtio: no channels available for device ./bus [ 283.416671][ T7068] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 283.517644][ T7068] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.298195][ T7101] loop2: detected capacity change from 0 to 1024 [ 284.450589][ T7101] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 284.484709][ T7101] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.767039][ T7101] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.712: lblock 3 mapped to illegal pblock 3 (length 3) [ 284.849672][ T7101] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 284.994641][ T7116] loop5: detected capacity change from 0 to 512 [ 285.019840][ T7101] EXT4-fs (loop2): This should not happen!! Data will be lost [ 285.019840][ T7101] [ 285.840129][ T9] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 285.842322][ T7132] loop5: detected capacity change from 0 to 2048 [ 285.901698][ T7134] 9pnet_virtio: no channels available for device ./bus [ 285.913873][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 285.941784][ T7132] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 285.963568][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 285.963568][ T9] [ 285.983875][ T7136] loop4: detected capacity change from 0 to 1024 [ 286.093200][ T7132] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback. [ 286.232683][ T7136] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,block_validity,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,grpjquota=,bsddf,norecovery,,errors=continue. Quota mode: none. [ 286.284263][ T7149] loop2: detected capacity change from 0 to 1024 [ 286.446644][ T7149] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 286.469376][ T7132] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.719: bg 0: block 2: invalid block bitmap [ 286.499802][ T7149] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.649969][ T7132] EXT4-fs (loop5): Remounting filesystem read-only [ 287.923777][ T154] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 287.941200][ T7164] loop4: detected capacity change from 0 to 512 [ 288.002919][ T7164] EXT4-fs (loop4): Mount option "commit=0x000000000000009e" incompatible with ext2 [ 288.079092][ T154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 288.162889][ T154] EXT4-fs (loop2): This should not happen!! Data will be lost [ 288.162889][ T154] [ 288.183267][ T154] EXT4-fs (loop2): Total free blocks count 0 [ 288.247090][ T154] EXT4-fs (loop2): Free/Dirty block details [ 288.283502][ T154] EXT4-fs (loop2): free_blocks=0 [ 288.288459][ T154] EXT4-fs (loop2): dirty_blocks=16 [ 288.310783][ T154] EXT4-fs (loop2): Block reservation details [ 288.326264][ T154] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 288.339708][ T6975] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 288.572974][ T7166] loop2: detected capacity change from 0 to 512 [ 288.599685][ T6975] usb 5-1: Using ep0 maxpacket: 32 [ 288.740032][ T6975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 288.751690][ T6975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25644, setting to 1024 [ 288.763271][ T6975] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.772439][ T6975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.785714][ T6975] usb 5-1: config 0 descriptor?? [ 288.809471][ T7171] 9pnet_virtio: no channels available for device ./bus [ 288.820907][ T7164] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 288.851527][ T6975] hub 5-1:0.0: USB hub found [ 289.069889][ T6975] hub 5-1:0.0: 1 port detected [ 289.171342][ T7181] loop1: detected capacity change from 0 to 1024 [ 289.432577][ T9] hfsplus: request for non-existent node 33554434 in B*Tree [ 289.474070][ T9] hfsplus: request for non-existent node 33554434 in B*Tree [ 289.814907][ T7189] loop5: detected capacity change from 0 to 1024 [ 290.184175][ T7189] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 290.196572][ T7204] loop2: detected capacity change from 0 to 1024 [ 290.217958][ T7189] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.353608][ T7164] udc-core: couldn't find an available UDC or it's busy [ 290.370201][ T7164] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 290.417112][ T7164] udc-core: couldn't find an available UDC or it's busy [ 290.442194][ T7204] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.457701][ T7164] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 290.459922][ T7204] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.477569][ T5464] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 290.530045][ T5270] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:16: bg 0: block 112: padding at end of block bitmap is not set [ 290.619923][ T5270] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 290.669151][ T7209] 9pnet_virtio: no channels available for device ./bus [ 290.697326][ T7204] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.742: lblock 3 mapped to illegal pblock 3 (length 3) [ 290.706205][ T5270] EXT4-fs (loop5): This should not happen!! Data will be lost [ 290.706205][ T5270] [ 290.724341][ T5464] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 290.766124][ T5270] EXT4-fs (loop5): Total free blocks count 0 [ 290.772651][ T5270] EXT4-fs (loop5): Free/Dirty block details [ 290.778568][ T7204] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 290.791772][ T5270] EXT4-fs (loop5): free_blocks=0 [ 290.796739][ T5270] EXT4-fs (loop5): dirty_blocks=16 [ 290.809634][ T5270] EXT4-fs (loop5): Block reservation details [ 290.823878][ T5270] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 290.840778][ T7204] EXT4-fs (loop2): This should not happen!! Data will be lost [ 290.840778][ T7204] [ 290.865949][ T7212] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm syz.2.742: lblock 8 mapped to illegal pblock 8 (length 8) [ 291.530173][ T7212] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 291.666714][ T7212] EXT4-fs (loop2): This should not happen!! Data will be lost [ 291.666714][ T7212] [ 292.583725][ T6975] usb 5-1: USB disconnect, device number 7 [ 292.872563][ T7223] device bridge1 entered promiscuous mode [ 295.048791][ T7259] loop2: detected capacity change from 0 to 2048 [ 295.120117][ T7259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.398656][ T7267] loop2: detected capacity change from 0 to 1024 [ 295.868246][ T7267] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 296.129082][ T7267] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.867728][ T144] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 112: padding at end of block bitmap is not set [ 297.127600][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 297.170377][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 297.170377][ T144] [ 297.318408][ T144] EXT4-fs (loop2): Total free blocks count 0 [ 297.324654][ T144] EXT4-fs (loop2): Free/Dirty block details [ 297.330687][ T144] EXT4-fs (loop2): free_blocks=0 [ 297.335621][ T144] EXT4-fs (loop2): dirty_blocks=16 [ 297.341348][ T144] EXT4-fs (loop2): Block reservation details [ 297.347330][ T144] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 297.510191][ T7300] loop2: detected capacity change from 0 to 512 [ 297.580946][ T7300] EXT4-fs (loop2): Ignoring removed nobh option [ 297.598664][ T7300] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 297.647695][ T7308] loop5: detected capacity change from 0 to 2048 [ 297.665247][ T7308] UDF-fs: bad mount option "EŽü2HÍPgSb{“þ6Ô¨ñ(ÎÍTÑ/Á$½è«ÈRί¡ŽªÏŒÀFÌBõC7)ž\Cº%Æü¼¥ü3‘é·D€Ç˜." or missing value [ 297.700044][ T7300] EXT4-fs (loop2): orphan cleanup on readonly fs [ 297.721364][ T7300] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 297.791451][ T7300] EXT4-fs (loop2): Remounting filesystem read-only [ 297.817243][ T7300] Quota error (device loop2): write_blk: dquota write failed [ 297.826077][ T7300] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 297.836350][ T7300] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.769: Failed to acquire dquot type 0 [ 297.852525][ T7313] loop5: detected capacity change from 0 to 512 [ 297.854041][ T7300] EXT4-fs (loop2): Remounting filesystem read-only [ 297.872111][ T7313] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 297.877280][ T7300] EXT4-fs (loop2): 1 truncate cleaned up [ 297.913122][ T7313] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 297.914445][ T7300] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,norecovery,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012. Quota mode: writeback. [ 297.963096][ T7313] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.606800][ T7323] loop4: detected capacity change from 0 to 256 [ 300.420660][ T7343] loop2: detected capacity change from 0 to 512 [ 300.537855][ T7343] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 300.553702][ T7343] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.576576][ T25] audit: type=1800 audit(1784182367.589:19): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.789" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 300.825920][ T7361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.567424][ T7369] loop5: detected capacity change from 0 to 1024 [ 301.674728][ T7369] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 302.306613][ T7353] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 302.327771][ T7369] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.893960][ T7393] loop2: detected capacity change from 0 to 1024 [ 302.923203][ T7395] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.796: Freeing blocks not in datazone - block = 0, count = 16 [ 302.956507][ T7393] EXT4-fs (loop2): inline encryption not supported [ 302.995379][ T7393] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 303.089817][ T7393] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 303.249831][ T7393] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.804: Failed to acquire dquot type 0 [ 303.274536][ T7393] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 303.377133][ T7393] EXT4-fs (loop2): 1 truncate cleaned up [ 303.384235][ T7393] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,inlinecrypt,,errors=continue. Quota mode: writeback. [ 303.641094][ T7393] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 303.651095][ T7393] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 303.662742][ T7393] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.804: Failed to acquire dquot type 0 [ 303.716050][ T7393] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 303.746505][ T7393] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 303.747855][ T7406] loop5: detected capacity change from 0 to 512 [ 303.774751][ T7393] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.804: Failed to acquire dquot type 0 [ 304.353885][ T7406] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 304.516398][ T7406] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 304.565029][ T7406] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.866168][ T7435] loop2: detected capacity change from 0 to 1024 [ 306.128373][ T7435] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 306.165578][ T7435] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.581087][ T542] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set [ 306.628877][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 306.667656][ T542] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 306.749404][ T542] EXT4-fs (loop2): This should not happen!! Data will be lost [ 306.749404][ T542] [ 306.791828][ T542] EXT4-fs (loop2): Total free blocks count 0 [ 306.817691][ T542] EXT4-fs (loop2): Free/Dirty block details [ 306.828902][ T542] EXT4-fs (loop2): free_blocks=0 [ 306.854542][ T542] EXT4-fs (loop2): dirty_blocks=16 [ 306.875799][ T7443] loop4: detected capacity change from 0 to 32768 [ 306.878489][ T542] EXT4-fs (loop2): Block reservation details [ 307.913753][ T542] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 307.926923][ T7443] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.818 (7443) [ 307.993493][ T7443] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 308.002385][ T7443] BTRFS info (device loop4): metadata ratio 0 [ 308.008467][ T7443] BTRFS info (device loop4): turning on sync discard [ 308.015206][ T7443] BTRFS info (device loop4): using free space tree [ 308.021808][ T7443] BTRFS info (device loop4): has skinny extents [ 308.807849][ T7443] BTRFS info (device loop4): enabling ssd optimizations [ 309.922653][ T7518] loop4: detected capacity change from 0 to 1024 [ 309.999399][ T7518] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 310.012679][ T7522] loop5: detected capacity change from 0 to 8 [ 310.061850][ T7518] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.611005][ T7415] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 311.818288][ T5650] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 311.884529][ T5650] EXT4-fs (loop4): This should not happen!! Data will be lost [ 311.884529][ T5650] [ 311.929671][ T5650] EXT4-fs (loop4): Total free blocks count 0 [ 311.935689][ T5650] EXT4-fs (loop4): Free/Dirty block details [ 311.981631][ T5650] EXT4-fs (loop4): free_blocks=0 [ 311.986616][ T5650] EXT4-fs (loop4): dirty_blocks=16 [ 312.035195][ T5650] EXT4-fs (loop4): Block reservation details [ 312.063553][ T5650] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 314.430259][ T7565] device bridge2 entered promiscuous mode [ 315.031960][ T7576] loop5: detected capacity change from 0 to 32768 [ 315.067845][ T7576] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.858 (7576) [ 315.209305][ T7576] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 315.218021][ T7576] BTRFS info (device loop5): metadata ratio 0 [ 315.224542][ T7576] BTRFS info (device loop5): turning on sync discard [ 315.231262][ T7576] BTRFS info (device loop5): using free space tree [ 315.237762][ T7576] BTRFS info (device loop5): has skinny extents [ 315.924348][ T7576] BTRFS info (device loop5): enabling ssd optimizations [ 316.014832][ T7610] loop2: detected capacity change from 0 to 1024 [ 316.912350][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.918693][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.187369][ T7625] loop4: detected capacity change from 0 to 1024 [ 317.527200][ T7610] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 317.590254][ T7625] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 317.667330][ T7610] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.678438][ T7625] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.981837][ T4309] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:7: bg 0: block 112: padding at end of block bitmap is not set [ 318.035541][ T4309] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 318.078260][ T4309] EXT4-fs (loop2): This should not happen!! Data will be lost [ 318.078260][ T4309] [ 318.086314][ T7638] loop5: detected capacity change from 0 to 1024 [ 318.149935][ T4309] EXT4-fs (loop2): Total free blocks count 0 [ 318.155934][ T4309] EXT4-fs (loop2): Free/Dirty block details [ 318.172171][ T4309] EXT4-fs (loop2): free_blocks=0 [ 318.179789][ T4309] EXT4-fs (loop2): dirty_blocks=16 [ 318.191851][ T4309] EXT4-fs (loop2): Block reservation details [ 318.204842][ T4309] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 318.232329][ T7638] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 318.249819][ T7638] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.283452][ T7647] process 'syz.3.867' launched './file0' with NULL argv: empty string added [ 319.044846][ T4348] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:11: bg 0: block 112: padding at end of block bitmap is not set [ 319.050633][ T7662] loop2: detected capacity change from 0 to 128 [ 319.226133][ T4348] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 319.290161][ T7662] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 319.305452][ T7659] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 319.319634][ T4348] EXT4-fs (loop5): This should not happen!! Data will be lost [ 319.319634][ T4348] [ 319.334243][ T4348] EXT4-fs (loop5): Total free blocks count 0 [ 319.371095][ T4348] EXT4-fs (loop5): Free/Dirty block details [ 319.379793][ T4348] EXT4-fs (loop5): free_blocks=0 [ 319.381011][ T7662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 319.384741][ T4348] EXT4-fs (loop5): dirty_blocks=16 [ 319.411618][ T4348] EXT4-fs (loop5): Block reservation details [ 319.417672][ T4348] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 321.231776][ T7691] loop4: detected capacity change from 0 to 1024 [ 321.262292][ T7693] loop2: detected capacity change from 0 to 2048 [ 321.440583][ T7693] UDF-fs: bad mount option "EŽü2HÍPgSb{“þ6Ô¨ñ(ÎÍTÑ/Á$½è«ÈRί¡ŽªÏŒÀFÌBõC7)ž\Cº%Æü¼¥ü3‘é·D€Ç˜." or missing value [ 321.484025][ T7691] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 321.521279][ T7691] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.049722][ T7709] loop2: detected capacity change from 0 to 1024 [ 322.056305][ T4448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:13: bg 0: block 112: padding at end of block bitmap is not set [ 322.155214][ T7709] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 322.177329][ T4448] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 322.201543][ T7709] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.273253][ T4448] EXT4-fs (loop4): This should not happen!! Data will be lost [ 322.273253][ T4448] [ 322.344982][ T4481] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:14: bg 0: block 112: padding at end of block bitmap is not set [ 322.382454][ T4448] EXT4-fs (loop4): Total free blocks count 0 [ 322.396380][ T4448] EXT4-fs (loop4): Free/Dirty block details [ 322.407297][ T4481] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 322.436574][ T4448] EXT4-fs (loop4): free_blocks=0 [ 322.460526][ T4448] EXT4-fs (loop4): dirty_blocks=16 [ 322.477998][ T4481] EXT4-fs (loop2): This should not happen!! Data will be lost [ 322.477998][ T4481] [ 322.510989][ T4448] EXT4-fs (loop4): Block reservation details [ 322.517157][ T4481] EXT4-fs (loop2): Total free blocks count 0 [ 322.529018][ T4481] EXT4-fs (loop2): Free/Dirty block details [ 322.552885][ T4448] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 322.572324][ T4481] EXT4-fs (loop2): free_blocks=0 [ 322.591297][ T4481] EXT4-fs (loop2): dirty_blocks=16 [ 323.322340][ T4481] EXT4-fs (loop2): Block reservation details [ 323.328361][ T4481] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 324.829921][ T7735] loop2: detected capacity change from 0 to 2048 [ 324.880608][ T7735] UDF-fs: bad mount option "EŽü2HÍPgSb{“þ6Ô¨ñ(ÎÍTÑ/Á$½è«ÈRί¡ŽªÏŒÀFÌBõC7)ž\Cº%Æü¼¥ü3‘é·D€Ç˜." or missing value [ 325.266113][ T7743] loop2: detected capacity change from 0 to 512 [ 325.761906][ T7747] loop4: detected capacity change from 0 to 1024 [ 325.805312][ T7743] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,discard,quota,,errors=continue. Quota mode: writeback. [ 325.822185][ T7743] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.370968][ T7747] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 326.388000][ T7747] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.550626][ T4448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:13: bg 0: block 112: padding at end of block bitmap is not set [ 326.601722][ T4448] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 326.614188][ T4448] EXT4-fs (loop4): This should not happen!! Data will be lost [ 326.614188][ T4448] [ 326.626361][ T4448] EXT4-fs (loop4): Total free blocks count 0 [ 326.632591][ T4448] EXT4-fs (loop4): Free/Dirty block details [ 326.638585][ T4448] EXT4-fs (loop4): free_blocks=0 [ 326.675038][ T4448] EXT4-fs (loop4): dirty_blocks=16 [ 326.789471][ T4448] EXT4-fs (loop4): Block reservation details [ 326.838121][ T4448] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 328.251899][ T7785] loop2: detected capacity change from 0 to 1024 [ 328.364854][ T7788] loop5: detected capacity change from 0 to 1024 [ 328.406685][ T7785] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 328.463885][ T7788] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 328.560277][ T7785] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.609792][ T7788] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.391280][ T4308] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:6: bg 0: block 112: padding at end of block bitmap is not set [ 329.621094][ T4308] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 330.222464][ T4308] EXT4-fs (loop2): This should not happen!! Data will be lost [ 330.222464][ T4308] [ 330.282979][ T4308] EXT4-fs (loop2): Total free blocks count 0 [ 330.288992][ T4308] EXT4-fs (loop2): Free/Dirty block details [ 330.294910][ T4308] EXT4-fs (loop2): free_blocks=0 [ 330.299924][ T4308] EXT4-fs (loop2): dirty_blocks=16 [ 330.305033][ T4308] EXT4-fs (loop2): Block reservation details [ 330.311539][ T4308] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 331.424608][ T7828] loop2: detected capacity change from 0 to 32768 [ 331.473459][ T7828] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.925 (7828) [ 331.515325][ T7828] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 331.524002][ T7828] BTRFS info (device loop2): metadata ratio 0 [ 331.530079][ T7828] BTRFS info (device loop2): turning on sync discard [ 331.536733][ T7828] BTRFS info (device loop2): using free space tree [ 331.543609][ T7828] BTRFS info (device loop2): has skinny extents [ 331.690811][ T7828] BTRFS info (device loop2): enabling ssd optimizations [ 332.282329][ T7859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.933'. [ 332.971598][ T7863] loop5: detected capacity change from 0 to 512 [ 333.026591][ T7863] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 333.151136][ T7863] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 333.198701][ T7873] loop4: detected capacity change from 0 to 2048 [ 333.205459][ T7863] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.216846][ T7873] UDF-fs: bad mount option "EŽü2HÍPgSb{“þ6Ô¨ñ(ÎÍTÑ/Á$½è«ÈRί¡ŽªÏŒÀFÌBõC7)ž\Cº%Æü¼¥ü3‘é·D€Ç˜." or missing value [ 333.743090][ T7877] overlayfs: failed to clone upperpath [ 334.008782][ T7887] loop4: detected capacity change from 0 to 128 [ 334.827139][ T7893] loop2: detected capacity change from 0 to 1024 [ 335.179099][ T7893] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 335.285836][ T7893] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.610171][ T7870] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 336.811406][ T7917] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.944: Freeing blocks not in datazone - block = 0, count = 16 [ 337.230342][ T7925] overlayfs: failed to clone upperpath [ 344.212984][ T8004] overlayfs: failed to clone upperpath [ 344.358764][ T8009] loop5: detected capacity change from 0 to 1024 [ 344.494572][ T8009] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 344.545489][ T8009] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.665860][ T9] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set [ 344.728740][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 344.731038][ T8021] loop4: detected capacity change from 0 to 128 [ 344.762878][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 344.762878][ T9] [ 344.774767][ T9] EXT4-fs (loop5): Total free blocks count 0 [ 344.780805][ T9] EXT4-fs (loop5): Free/Dirty block details [ 344.799282][ T9] EXT4-fs (loop5): free_blocks=0 [ 344.834192][ T9] EXT4-fs (loop5): dirty_blocks=16 [ 344.851270][ T9] EXT4-fs (loop5): Block reservation details [ 344.867089][ T9] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 345.256939][ T8027] loop5: detected capacity change from 0 to 512 [ 345.297021][ T8027] EXT4-fs (loop5): Mount option "commit=0x000000000000009e" incompatible with ext2 [ 345.506138][ T8029] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 345.723425][ T5863] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 346.646237][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 347.187266][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 347.199306][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25644, setting to 1024 [ 347.210954][ T5863] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 347.220223][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.233850][ T5863] usb 6-1: config 0 descriptor?? [ 347.256120][ T8027] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 347.278869][ T5863] hub 6-1:0.0: USB hub found [ 348.448512][ T5863] hub 6-1:0.0: 1 port detected [ 349.542955][ T8027] udc-core: couldn't find an available UDC or it's busy [ 351.001348][ T8027] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 351.023512][ T8077] overlayfs: missing 'lowerdir' [ 351.065877][ T1111] usb 6-1: USB disconnect, device number 2 [ 351.077408][ T5863] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 352.463164][ T8088] loop5: detected capacity change from 0 to 32768 [ 352.551190][ T8088] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1004 (8088) [ 352.567278][ T8088] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 352.576091][ T8088] BTRFS info (device loop5): metadata ratio 0 [ 352.582614][ T8088] BTRFS info (device loop5): turning on sync discard [ 352.589550][ T8088] BTRFS info (device loop5): using free space tree [ 352.596096][ T8088] BTRFS info (device loop5): has skinny extents [ 353.579472][ T8117] loop4: detected capacity change from 0 to 2048 [ 354.341931][ T8088] BTRFS error (device loop5): open_ctree failed: -12 [ 354.372904][ T8117] UDF-fs: bad mount option "&Ø900000000000000000000" or missing value [ 357.725332][ T8154] loop5: detected capacity change from 0 to 1024 [ 357.820479][ T8154] EXT4-fs (loop5): Test dummy encryption mode enabled [ 357.930599][ T8154] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 358.090853][ T8158] overlayfs: missing 'lowerdir' [ 358.142782][ T8161] ipt_REJECT: TCP_RESET invalid for non-tcp [ 358.409934][ T8165] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 358.710042][ T8165] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 361.626743][ T8202] overlayfs: failed to clone upperpath [ 361.653303][ T8202] overlayfs: missing 'lowerdir' [ 361.983964][ T8210] loop4: detected capacity change from 0 to 1024 [ 362.739113][ T8214] netlink: 'syz.1.1037': attribute type 29 has an invalid length. [ 362.757861][ T8214] netlink: 'syz.1.1037': attribute type 29 has an invalid length. [ 362.777644][ T8210] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 362.783559][ T8219] loop2: detected capacity change from 0 to 1024 [ 362.794099][ T8210] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.332676][ T8219] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 363.550850][ T4336] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:10: bg 0: block 112: padding at end of block bitmap is not set [ 363.688807][ T8219] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.697148][ T8233] loop5: detected capacity change from 0 to 16 [ 363.702306][ T4336] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 364.478886][ T4336] EXT4-fs (loop4): This should not happen!! Data will be lost [ 364.478886][ T4336] [ 364.509118][ T4336] EXT4-fs (loop4): Total free blocks count 0 [ 364.524810][ T4336] EXT4-fs (loop4): Free/Dirty block details [ 364.546130][ T4336] EXT4-fs (loop4): free_blocks=0 [ 364.571162][ T4336] EXT4-fs (loop4): dirty_blocks=16 [ 364.587591][ T4336] EXT4-fs (loop4): Block reservation details [ 364.688211][ T8233] erofs: (device loop5): mounted with root inode @ nid 36. [ 364.708494][ T8233] erofs: (device loop5): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 364.784248][ T4336] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 365.006737][ T8246] loop4: detected capacity change from 0 to 256 [ 365.047120][ T8246] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 365.161670][ T8253] loop5: detected capacity change from 0 to 1024 [ 365.777969][ T8218] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 365.846647][ T8253] EXT4-fs (loop5): Test dummy encryption mode enabled [ 365.873009][ T8258] loop_set_status: loop4 () has still dirty pages (nrpages=32) [ 365.892836][ T4336] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 365.926474][ T4336] EXT4-fs (loop2): This should not happen!! Data will be lost [ 365.926474][ T4336] [ 365.948214][ T8253] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 365.961703][ T4336] EXT4-fs (loop2): Total free blocks count 0 [ 365.981196][ T4336] EXT4-fs (loop2): Free/Dirty block details [ 365.988763][ T4336] EXT4-fs (loop2): free_blocks=0 [ 365.994310][ T4336] EXT4-fs (loop2): dirty_blocks=16 [ 365.999427][ T4336] EXT4-fs (loop2): Block reservation details [ 366.005935][ T4336] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 366.176365][ T8266] ipt_REJECT: TCP_RESET invalid for non-tcp [ 368.156822][ T8275] loop5: detected capacity change from 0 to 1024 [ 368.349872][ T8275] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 368.411660][ T8275] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.670246][ T8287] netlink: 'syz.1.1051': attribute type 29 has an invalid length. [ 368.678451][ T8287] netlink: 'syz.1.1051': attribute type 29 has an invalid length. [ 369.926712][ T8303] loop2: detected capacity change from 0 to 512 [ 369.961255][ T8305] loop4: detected capacity change from 0 to 512 [ 370.243609][ T8305] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 370.258192][ T8305] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.746778][ T8318] loop4: detected capacity change from 0 to 1024 [ 371.415375][ T8318] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 371.523401][ T8318] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.732131][ T4441] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:12: bg 0: block 112: padding at end of block bitmap is not set [ 372.350802][ T4441] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 372.386230][ T4441] EXT4-fs (loop5): This should not happen!! Data will be lost [ 372.386230][ T4441] [ 372.437670][ T4441] EXT4-fs (loop5): Total free blocks count 0 [ 372.443666][ T4441] EXT4-fs (loop5): Free/Dirty block details [ 372.506610][ T4441] EXT4-fs (loop5): free_blocks=0 [ 372.511885][ T4441] EXT4-fs (loop5): dirty_blocks=16 [ 372.518161][ T4441] EXT4-fs (loop5): Block reservation details [ 372.524219][ T4441] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 372.600611][ T8337] loop2: detected capacity change from 0 to 2048 [ 372.679616][ T8337] UDF-fs: bad mount option "EŽü2HÍPgSb{“þ6Ô¨ñ(ÎÍTÑ/Á$½è«ÈRί¡ŽªÏŒÀFÌBõC7)ž\Cº%Æü¼¥ü3‘é·D€Ç˜." or missing value [ 375.431339][ T4481] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:14: bg 0: block 112: padding at end of block bitmap is not set [ 375.497073][ T4481] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 375.540662][ T4481] EXT4-fs (loop4): This should not happen!! Data will be lost [ 375.540662][ T4481] [ 375.560561][ T4481] EXT4-fs (loop4): Total free blocks count 0 [ 375.577968][ T4481] EXT4-fs (loop4): Free/Dirty block details [ 375.602621][ T4481] EXT4-fs (loop4): free_blocks=0 [ 375.644231][ T4481] EXT4-fs (loop4): dirty_blocks=16 [ 375.658603][ T4481] EXT4-fs (loop4): Block reservation details [ 375.675537][ T4481] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 376.316057][ T8364] loop5: detected capacity change from 0 to 128 [ 376.382416][ T8367] loop2: detected capacity change from 0 to 256 [ 376.620821][ T25] audit: type=1326 audit(1784182443.180:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.5.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bc4fbe59 code=0x7ffc0000 [ 376.780835][ T25] audit: type=1326 audit(1784182443.180:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.5.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bc4fbe59 code=0x7ffc0000 [ 376.906179][ T25] audit: type=1326 audit(1784182443.190:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.5.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f76bc4fbe59 code=0x7ffc0000 [ 377.031879][ T25] audit: type=1326 audit(1784182443.190:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.5.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bc4fbe59 code=0x7ffc0000 [ 377.112192][ T25] audit: type=1326 audit(1784182443.190:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.5.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bc4fbe59 code=0x7ffc0000 [ 377.156636][ T25] audit: type=1326 audit(1784182443.190:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.5.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f76bc4fbe59 code=0x7ffc0000 [ 377.266805][ T25] audit: type=1326 audit(1784182443.190:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.5.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bc4fbe59 code=0x7ffc0000 [ 377.376661][ T25] audit: type=1326 audit(1784182443.190:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.5.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76bc4fbe59 code=0x7ffc0000 [ 377.462158][ T25] audit: type=1326 audit(1784182443.190:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8359 comm="syz.5.1083" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f76bc4fbe59 code=0x7ffc0000 [ 377.645402][ T25] audit: type=1800 audit(1784182444.017:29): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1077" name="file1" dev="loop2" ino=1048611 res=0 errno=0 [ 379.014267][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.020551][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.346574][ T8385] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.354750][ T8385] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.706829][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.728930][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.749474][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.759077][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.784768][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.788390][ T8374] device bridge5 entered promiscuous mode [ 379.801059][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.818874][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.834907][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.853757][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.872272][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.897235][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.925384][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 379.929153][ T8394] overlayfs: failed to clone upperpath [ 379.943305][ T8394] overlayfs: missing 'workdir' [ 379.966505][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.002586][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.023634][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.046793][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.064934][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.107797][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.132252][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.159805][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.167671][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.175626][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.183500][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.191404][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.199342][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.207239][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.215108][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.223012][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.264647][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.340222][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.348089][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.444470][ T8401] loop4: detected capacity change from 0 to 2048 [ 380.451893][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.499053][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.523867][ T8401] UDF-fs: bad mount option "&Ø900000000000000000000" or missing value [ 380.579387][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.629510][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.669911][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.677778][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.788326][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.847096][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.890435][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.900308][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.908159][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.916064][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.923942][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.931838][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.939748][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.948795][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.956900][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.965377][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.978451][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 380.988878][ T4308] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 381.040918][ T5863] Bluetooth: hci5: command 0x0406 tx timeout [ 381.677872][ T8408] loop2: detected capacity change from 0 to 1024 [ 383.544440][ T8431] loop5: detected capacity change from 0 to 2048 [ 383.573841][ T8434] overlayfs: failed to clone upperpath [ 383.627601][ T8437] overlayfs: missing 'workdir' [ 383.634382][ T8431] UDF-fs: bad mount option "EŽü2HÍPgSb{“þ6Ô¨ñ(ÎÍTÑ/Á$½è«ÈRί¡ŽªÏŒÀFÌBõC7)ž\Cº%Æü¼¥ü3‘é·D€Ç˜." or missing value [ 385.050820][ T4200] Bluetooth: hci5: Unknown advertising packet type: 0xff00 [ 385.118119][ T8463] netlink: 'syz.4.1098': attribute type 29 has an invalid length. [ 386.593659][ T8463] netlink: 'syz.4.1098': attribute type 29 has an invalid length. [ 386.940303][ T8472] overlayfs: failed to clone upperpath [ 386.975283][ T8472] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 389.135205][ T8478] loop4: detected capacity change from 0 to 8 [ 389.190780][ T8472] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 389.226100][ T8478] SQUASHFS error: lzo decompression failed, data probably corrupt [ 389.233981][ T8478] SQUASHFS error: Failed to read block 0x91: -5 [ 389.240268][ T8478] SQUASHFS error: Unable to read metadata cache entry [8f] [ 389.247469][ T8478] SQUASHFS error: Unable to read inode 0x13f [ 389.952233][ T5863] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 390.161743][ T5863] usb 5-1: device descriptor read/64, error -71 [ 392.207850][ T8516] netlink: 'syz.3.1129': attribute type 29 has an invalid length. [ 392.376730][ T8516] netlink: 'syz.3.1129': attribute type 29 has an invalid length. [ 393.991680][ T8532] device bridge3 entered promiscuous mode [ 394.719481][ T8541] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1137'. [ 395.441670][ T8555] loop5: detected capacity change from 0 to 128 [ 395.783942][ T8562] netlink: 'syz.4.1143': attribute type 29 has an invalid length. [ 395.812377][ T8562] netlink: 'syz.4.1143': attribute type 29 has an invalid length. [ 395.821009][ T8564] overlayfs: failed to clone upperpath [ 395.835966][ T8564] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 395.886282][ T8564] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 395.946502][ T8565] loop2: detected capacity change from 0 to 1024 [ 396.562336][ T8571] netlink: 'syz.1.1145': attribute type 8 has an invalid length. [ 396.570072][ T8571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1145'. [ 396.579025][ T8571] netlink: 'syz.1.1145': attribute type 8 has an invalid length. [ 396.586743][ T8571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1145'. [ 396.596584][ T8571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1145'. [ 396.605741][ T8571] netlink: 'syz.1.1145': attribute type 8 has an invalid length. [ 396.613476][ T8571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1145'. [ 396.622420][ T8571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1145'. [ 396.631595][ T8571] netlink: 'syz.1.1145': attribute type 8 has an invalid length. [ 396.639302][ T8571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1145'. [ 396.648626][ T8571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1145'. [ 396.657789][ T8571] netlink: 'syz.1.1145': attribute type 8 has an invalid length. [ 396.665512][ T8571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1145'. [ 396.674602][ T8571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1145'. [ 396.683717][ T8571] netlink: 'syz.1.1145': attribute type 8 has an invalid length. [ 396.832699][ T8575] loop4: detected capacity change from 0 to 1024 [ 396.961852][ T8575] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 397.014598][ T8565] EXT4-fs (loop2): Test dummy encryption mode enabled [ 397.050348][ T8575] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.106388][ T8565] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 397.255220][ T8565] ipt_REJECT: TCP_RESET invalid for non-tcp [ 397.674588][ T4333] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:9: bg 0: block 112: padding at end of block bitmap is not set [ 397.867902][ T4333] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 397.906148][ T4333] EXT4-fs (loop4): This should not happen!! Data will be lost [ 397.906148][ T4333] [ 397.936323][ T4333] EXT4-fs (loop4): Total free blocks count 0 [ 397.955618][ T4333] EXT4-fs (loop4): Free/Dirty block details [ 397.971770][ T4333] EXT4-fs (loop4): free_blocks=0 [ 397.979300][ T4333] EXT4-fs (loop4): dirty_blocks=16 [ 397.994982][ T4333] EXT4-fs (loop4): Block reservation details [ 398.011127][ T4333] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 398.186708][ T8589] loop4: detected capacity change from 0 to 512 [ 398.272497][ T8589] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 398.514488][ T8589] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 398.823557][ T8589] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.423605][ T8614] validate_nla: 7 callbacks suppressed [ 400.423620][ T8614] netlink: 'syz.3.1155': attribute type 29 has an invalid length. [ 400.479332][ T8614] netlink: 'syz.3.1155': attribute type 29 has an invalid length. [ 400.512401][ T8616] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 400.529215][ T8616] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 401.064247][ T8631] loop4: detected capacity change from 0 to 256 [ 401.169519][ T8631] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 402.561036][ T8647] loop4: detected capacity change from 0 to 512 [ 402.785029][ T8647] EXT4-fs (loop4): inline encryption not supported [ 402.797596][ T8647] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 402.876873][ T8647] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 402.891529][ T8647] EXT4-fs (loop4): 1 truncate cleaned up [ 402.898207][ T8647] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000003,discard,,errors=continue. Quota mode: none. [ 402.956026][ T8656] netlink: 'syz.2.1168': attribute type 29 has an invalid length. [ 402.966976][ T8659] loop5: detected capacity change from 0 to 512 [ 402.989848][ T8656] netlink: 'syz.2.1168': attribute type 29 has an invalid length. [ 403.020526][ T8659] EXT4-fs (loop5): Ignoring removed bh option [ 403.039382][ T8659] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 403.050368][ T8659] EXT4-fs (loop5): Ignoring removed bh option [ 403.085131][ T8661] loop4: detected capacity change from 0 to 128 [ 403.091642][ T8659] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 403.170242][ T8659] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,mblk_io_submit,grpquota,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 403.170330][ T8659] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.233130][ T8659] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1170: Invalid block bitmap block 4193380351 in block_group 0 [ 403.389584][ T5759] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 531915205 in block_group 0 [ 403.509339][ T5759] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 403.640288][ T8671] loop2: detected capacity change from 0 to 256 [ 403.657995][ T5759] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 403.684830][ T5759] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 531915205 in block_group 0 [ 404.145938][ T8671] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 404.168327][ T5759] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 404.188026][ T5759] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #4: comm syz-executor: mark_inode_dirty error [ 405.553578][ T8687] loop2: detected capacity change from 0 to 512 [ 405.652123][ T8687] EXT4-fs (loop2): Unrecognized mount option "hash" or missing value [ 406.511010][ T8694] loop5: detected capacity change from 0 to 1024 [ 407.550112][ T8714] overlayfs: failed to clone upperpath [ 407.567745][ T8714] overlayfs: missing 'lowerdir' [ 412.918993][ T8753] loop4: detected capacity change from 0 to 1024 [ 413.116516][ T8760] loop5: detected capacity change from 0 to 128 [ 418.402258][ T8814] loop4: detected capacity change from 0 to 1024 [ 418.511898][ T8814] EXT4-fs (loop4): Test dummy encryption mode enabled [ 418.544900][ T8816] fuse: Bad value for 'fd' [ 418.605790][ T8814] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 418.796618][ T8826] ipt_REJECT: TCP_RESET invalid for non-tcp [ 418.996343][ T8832] netlink: 'syz.1.1205': attribute type 29 has an invalid length. [ 419.056320][ T8832] netlink: 'syz.1.1205': attribute type 29 has an invalid length. [ 420.648908][ T8847] loop2: detected capacity change from 0 to 2048 [ 421.010887][ T8847] UDF-fs: bad mount option "EŽü2HÍPgSb{“þ6Ô¨ñ(ÎÍTÑ/Á$½è«ÈRί¡ŽªÏŒÀFÌBõC7)ž\Cº%Æü¼¥ü3‘é·D€Ç˜." or missing value [ 422.906401][ T5531] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 422.934129][ T8866] loop5: detected capacity change from 0 to 4096 [ 422.956499][ T5531] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 422.985302][ T8866] EXT4-fs (loop5): Test dummy encryption mode enabled [ 423.033703][ T8866] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,bsddf,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,init_itable,,errors=continue. Quota mode: writeback. [ 423.302277][ T8871] fido_id[8871]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 424.878641][ T8896] fuse: Bad value for 'fd' [ 426.454104][ T5652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.544986][ T5652] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 427.552636][ T8929] loop4: detected capacity change from 0 to 512 [ 427.579197][ T8914] loop2: detected capacity change from 0 to 4096 [ 427.704470][ T8929] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 427.785959][ T8934] fuse: Bad value for 'fd' [ 427.802630][ T8914] EXT4-fs (loop2): Test dummy encryption mode enabled [ 428.167215][ T8929] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 428.185320][ T8914] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,bsddf,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,init_itable,,errors=continue. Quota mode: writeback. [ 428.204882][ T8929] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 429.443805][ T8957] loop4: detected capacity change from 0 to 1024 [ 430.259840][ T8957] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 430.391095][ T8957] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.476172][ T8974] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 430.746018][ T8984] loop5: detected capacity change from 0 to 128 [ 431.319099][ T8988] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.1252: Freeing blocks not in datazone - block = 0, count = 16 [ 436.706612][ T4457] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 436.903864][ T9029] loop5: detected capacity change from 0 to 128 [ 436.949466][ T4457] usb 3-1: Using ep0 maxpacket: 32 [ 437.066880][ T4457] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 437.075116][ T4457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.134051][ T9037] fuse: Bad value for 'fd' [ 439.254391][ T4457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.355728][ T4457] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 439.406324][ T4457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.471364][ T4457] usb 3-1: config 0 descriptor?? [ 439.572555][ T4457] usb 3-1: can't set config #0, error -71 [ 439.604323][ T4457] usb 3-1: USB disconnect, device number 4 [ 441.232823][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.239845][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.272175][ T9060] loop5: detected capacity change from 0 to 2048 [ 441.278661][ T9059] loop4: detected capacity change from 0 to 512 [ 441.380136][ T9060] UDF-fs: bad mount option "EŽü2HÍPgSb{“þ6Ô¨ñ(ÎÍTÑ/Á$½è«ÈRί¡ŽªÏŒÀFÌBõC7)ž\Cº%Æü¼¥ü3‘é·D€Ç˜." or missing value [ 441.415386][ T9059] EXT4-fs (loop4): Mount option "commit=0x000000000000009e" incompatible with ext2 [ 441.595092][ T9066] loop5: detected capacity change from 0 to 1024 [ 442.167034][ T4457] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 442.427073][ T4457] usb 5-1: Using ep0 maxpacket: 32 [ 442.547274][ T4457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 442.572025][ T4457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25644, setting to 1024 [ 442.620145][ T9081] loop2: detected capacity change from 0 to 1024 [ 442.636718][ T4457] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 442.720869][ T9083] loop5: detected capacity change from 0 to 1024 [ 442.799836][ T4457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.955874][ T4457] usb 5-1: config 0 descriptor?? [ 443.187277][ T4457] usb 5-1: can't set config #0, error -71 [ 443.240741][ T4457] usb 5-1: USB disconnect, device number 10 [ 444.361760][ T9081] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv1,quota,abort,init_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 444.380122][ T9083] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 444.387283][ T9081] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.401730][ T9083] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.420321][ T9102] loop4: detected capacity change from 0 to 128 [ 444.426404][ T9083] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 3: comm syz.5.1291: lblock 3 mapped to illegal pblock 3 (length 3) [ 444.444275][ T9083] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 444.466981][ T9083] EXT4-fs (loop5): This should not happen!! Data will be lost [ 444.466981][ T9083] [ 444.519595][ T9083] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 8: comm syz.5.1291: lblock 8 mapped to illegal pblock 8 (length 8) [ 444.586352][ T9083] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 444.750211][ T9083] EXT4-fs (loop5): This should not happen!! Data will be lost [ 444.750211][ T9083] [ 445.001817][ T9110] loop5: detected capacity change from 0 to 128 [ 445.413599][ T9110] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 445.427592][ T154] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 445.457131][ T9110] FAT-fs (loop5): Filesystem has been set read-only [ 445.464086][ T154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 8 with error 28 [ 445.482182][ T9110] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 445.499137][ T154] EXT4-fs (loop2): This should not happen!! Data will be lost [ 445.499137][ T154] [ 445.516729][ T9110] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 548, start 00000401) [ 445.537062][ T154] EXT4-fs (loop2): Total free blocks count 0 [ 445.544782][ T154] EXT4-fs (loop2): Free/Dirty block details [ 445.558700][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 445.558711][ T25] audit: type=1800 audit(1784182512.068:32): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1298" name="file1" dev="loop5" ino=1048614 res=0 errno=0 [ 445.577170][ T154] EXT4-fs (loop2): free_blocks=0 [ 445.607537][ T154] EXT4-fs (loop2): dirty_blocks=16 [ 445.612714][ T154] EXT4-fs (loop2): Block reservation details [ 445.640789][ T154] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 446.505159][ T9127] loop5: detected capacity change from 0 to 512 [ 446.641632][ T9127] EXT4-fs (loop5): Mount option "commit=0x000000000000009e" incompatible with ext2 [ 447.193166][ T4457] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 447.507623][ T4457] usb 6-1: Using ep0 maxpacket: 32 [ 447.659098][ T4457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 447.726051][ T4457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25644, setting to 1024 [ 447.809833][ T4457] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.823621][ T9145] fuse: Bad value for 'fd' [ 447.827314][ T4457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.844948][ T4457] usb 6-1: config 0 descriptor?? [ 448.297869][ T9127] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 448.437777][ T4457] hub 6-1:0.0: USB hub found [ 448.847726][ T4457] hub 6-1:0.0: 1 port detected [ 449.144327][ T9154] loop4: detected capacity change from 0 to 1024 [ 449.252356][ T9154] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 450.844047][ T4457] usb 6-1: USB disconnect, device number 3 [ 450.850039][ T5652] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 450.910742][ T9154] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 453.913922][ T9211] loop5: detected capacity change from 0 to 512 [ 453.981012][ T9211] EXT4-fs (loop5): Mount option "commit=0x000000000000009e" incompatible with ext2 [ 454.287983][ T1111] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 454.636076][ T1111] usb 6-1: Using ep0 maxpacket: 32 [ 454.928156][ T1111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 454.962607][ T1111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25644, setting to 1024 [ 454.984300][ T1111] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 455.007506][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.051791][ T1111] usb 6-1: config 0 descriptor?? [ 455.067711][ T9211] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 455.108493][ T1111] hub 6-1:0.0: USB hub found [ 455.722251][ T1111] hub 6-1:0.0: 1 port detected [ 455.971922][ T9207] loop4: detected capacity change from 0 to 40427 [ 456.058545][ T9207] F2FS-fs (loop4): invalid crc value [ 456.658499][ T9227] x_tables: duplicate underflow at hook 1 [ 456.728391][ T9207] F2FS-fs (loop4): Found nat_bits in checkpoint [ 456.871433][ T9207] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 457.261549][ T9240] udc-core: couldn't find an available UDC or it's busy [ 457.299018][ T9240] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 457.330498][ T9211] udc-core: couldn't find an available UDC or it's busy [ 457.337454][ T9211] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 457.377736][ T1111] hub 6-1:0.0: hub_ext_port_status failed (err = 0) [ 458.356363][ T9251] loop5: detected capacity change from 0 to 1024 [ 563.697773][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 563.704590][ C1] rcu: 1-...!: (10500 ticks this GP) idle=3b5/1/0x4000000000000000 softirq=27351/27351 fqs=1 [ 563.715937][ C1] (t=10502 jiffies g=31233 q=43) [ 563.720938][ C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g31233 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 563.732100][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 563.742039][ C1] rcu: RCU grace-period kthread stack dump: [ 563.747898][ C1] task:rcu_preempt state:R running task stack:27376 pid: 15 ppid: 2 flags:0x00004000 [ 563.758646][ C1] Call Trace: [ 563.761903][ C1] [ 563.764812][ C1] __schedule+0x11c3/0x4350 [ 563.769338][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 563.775207][ C1] ? rcu_is_watching+0x11/0xa0 [ 563.779943][ C1] ? release_firmware_map_entry+0x190/0x190 [ 563.785814][ C1] schedule+0x11b/0x1e0 [ 563.789944][ C1] schedule_timeout+0x184/0x2d0 [ 563.794769][ C1] ? console_conditional_schedule+0x40/0x40 [ 563.800632][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 563.806497][ C1] ? update_process_times+0x200/0x200 [ 563.811846][ C1] ? prepare_to_swait_event+0x33d/0x360 [ 563.817372][ C1] rcu_gp_fqs_loop+0x2be/0x11f0 [ 563.822198][ C1] ? dump_blkd_tasks+0x7f0/0x7f0 [ 563.827107][ C1] ? rcu_gp_init+0x10f0/0x10f0 [ 563.831844][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 563.837015][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 563.842187][ C1] rcu_gp_kthread+0x9a/0x370 [ 563.846752][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 563.851834][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 563.857701][ C1] ? __kthread_parkme+0x14e/0x1b0 [ 563.862700][ C1] kthread+0x42e/0x520 [ 563.866740][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 563.871822][ C1] ? kthread_blkcg+0xd0/0xd0 [ 563.876386][ C1] ret_from_fork+0x1f/0x30 [ 563.880781][ C1] [ 563.883774][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 563.890115][ C1] Sending NMI from CPU 1 to CPUs 0: [ 563.895306][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 563.896293][ C1] NMI backtrace for cpu 1 [ 563.908444][ C1] CPU: 1 PID: 9249 Comm: syz.4.1337 Not tainted syzkaller #0 [ 563.915781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.925809][ C1] Call Trace: [ 563.929064][ C1] [ 563.931885][ C1] dump_stack_lvl+0x188/0x250 [ 563.936535][ C1] ? vprintk_emit+0x150/0x150 [ 563.941185][ C1] ? show_regs_print_info+0x20/0x20 [ 563.946354][ C1] ? load_image+0x410/0x410 [ 563.950831][ C1] ? irq_work_queue+0xbf/0x140 [ 563.955571][ C1] nmi_cpu_backtrace+0x3a2/0x3d0 [ 563.960482][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 563.966610][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 563.972041][ C1] ? _raw_spin_lock+0x40/0x40 [ 563.976691][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 563.982730][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 563.988682][ C1] rcu_dump_cpu_stacks+0x22d/0x380 [ 563.993770][ C1] print_cpu_stall+0x31f/0x5f0 [ 563.998509][ C1] rcu_sched_clock_irq+0x6ec/0x1120 [ 564.003683][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 564.008506][ C1] ? hrtimer_run_queues+0x162/0x400 [ 564.013680][ C1] ? account_process_tick+0x22a/0x3a0 [ 564.019043][ C1] update_process_times+0x193/0x200 [ 564.024215][ C1] tick_sched_timer+0x37d/0x560 [ 564.029047][ C1] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 564.034564][ C1] __hrtimer_run_queues+0x4b0/0xb60 [ 564.039733][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 564.045689][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 564.050772][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 564.056812][ C1] hrtimer_interrupt+0x397/0x8b0 [ 564.061734][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 564.067689][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 564.073295][ C1] [ 564.076204][ C1] [ 564.079113][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 564.085071][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 564.090852][ C1] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 6e cf 94 f7 48 89 df e8 a6 a6 95 f7 e8 91 8f b6 f7 fb bf 01 00 00 00 66 bf 89 f7 65 8b 05 77 e6 39 76 85 c0 74 02 5b c3 e8 b4 f3 37 [ 564.110431][ C1] RSP: 0018:ffffc90002defbc0 EFLAGS: 00000282 [ 564.116472][ C1] RAX: 7ba26c4dc6063100 RBX: ffff8880253e1bc0 RCX: 7ba26c4dc6063100 [ 564.124417][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001 [ 564.132361][ C1] RBP: 0000000000000000 R08: ffff8880253e1bc3 R09: 1ffff11004a7c378 [ 564.140305][ C1] R10: dffffc0000000000 R11: ffffed1004a7c379 R12: dffffc0000000000 [ 564.148249][ C1] R13: ffff8880253e1bc0 R14: 0000000000000021 R15: 000000001c000004 [ 564.156204][ C1] get_signal+0x11f2/0x12e0 [ 564.160693][ C1] arch_do_signal_or_restart+0xe6/0x12a0 [ 564.166300][ C1] ? __ia32_sys_rt_sigreturn+0x624/0x750 [ 564.171907][ C1] ? load_gs_index+0x130/0x130 [ 564.176643][ C1] ? get_sigframe_size+0x10/0x10 [ 564.181575][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 564.187019][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 564.192281][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 564.197809][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 564.203245][ C1] do_syscall_64+0x58/0xa0 [ 564.207632][ C1] ? clear_bhb_loop+0x30/0x80 [ 564.212281][ C1] ? clear_bhb_loop+0x30/0x80 [ 564.216933][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 564.222807][ C1] RIP: 0033:0x7fd858951e57 [ 564.227232][ C1] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 564.246815][ C1] RSP: 002b:00007fd856baa028 EFLAGS: 00000246 [ 564.252861][ C1] RAX: 0000000000000000 RBX: 00007fd858bd9fa0 RCX: 00007fd858951e59 [ 564.260819][ C1] RDX: 000000000000007b RSI: 0000200000000240 RDI: 0000000000000004 [ 564.268775][ C1] RBP: 00007fd8589e7e6f R08: 0000000000000000 R09: 0000000000000000 [ 564.276720][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.284661][ C1] R13: 00007fd858bda038 R14: 00007fd858bd9fa0 R15: 00007ffe4eba1168 [ 564.292617][ C1]