last executing test programs: 4m10.621656617s ago: executing program 1 (id=28): socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) userfaultfd(0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x3, &(0x7f0000000180)=[{0x3, 0x4, 0x9, 0x9}, {0x9, 0x0, 0x9, 0x6}, {0x172f, 0x6, 0x0, 0x557}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 4m9.713572564s ago: executing program 1 (id=31): io_setup(0x2003, &(0x7f00000002c0)) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000180)='syzkaller\x00', 0xb, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m7.934075999s ago: executing program 1 (id=38): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x1, 0x3, "f395a9"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000300)={0x60, 0x1, 0xd, "d7e2ccc870108259dcf1865f7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4m6.788965055s ago: executing program 1 (id=42): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 4m5.726803322s ago: executing program 1 (id=45): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c40)={{0x12, 0x1, 0x0, 0x1c, 0xa3, 0x7b, 0x10, 0xc72, 0x13, 0xbabe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xb0, 0xd3}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x6, 0x6, 0x4, 0x40, 0xb}, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x274}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0x9d, &(0x7f0000000300)=@string={0x9d, 0x3, "e5dc37b90579f5731dd77e453deceb77ac8ebdbfd943c00a81fb56fd9fb1caf85b6ba86d354f383b550871c6503eee04211bb725239f613b3dc8b3eaf071d5c6d4fc72e108ea0b1dbea8ebc47d0f69f2166ccf9d781b3aff9a8b7876556dd1a7a4784c13e7cae38c01a1a1b2425232a0b2de2620974d1226d0a8a28ae49ca465e3f443077103534c158716099e5de6b60e59787af9e83c8f1f81cc"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x414}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000000)={0x0, 0x17, 0xb, "9246304396acdebc861d50"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m3.067688315s ago: executing program 1 (id=53): semctl$SETVAL(0x0, 0x2, 0x10, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e0dec14004231a022918010203010902220001000000000904000001e36ec200090500000000000000070582"], 0x0) 4m2.918702114s ago: executing program 32 (id=53): semctl$SETVAL(0x0, 0x2, 0x10, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e0dec14004231a022918010203010902220001000000000904000001e36ec200090500000000000000070582"], 0x0) 3m57.245886798s ago: executing program 5 (id=56): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 3m56.751957376s ago: executing program 5 (id=99): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "07f7bbfe1438037928175b3e04cd00", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) 3m51.42383551s ago: executing program 5 (id=132): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [], 0xa, '\x00\x00'}, 0x6) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 3m51.23812428s ago: executing program 33 (id=132): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x8, {"d1b3d695ebf1e3f3f8dc14bb7182b7fb6672df0ef699827552823f27b2fe09a4675e977037acd83eac275c94e133f9daa5cb9f6105eb64378a738493908a6a3e466779df631746ea061f940d1c31878b5564c6f08edf60beefa935b1b1f7a958d921824f3b40e84cc8b06b616a96c03abdc765984750dd8126803d726373a630fcf901f0f30ee0d0eb3bca88896d2e8a06e3a271c2e648690d513cc1083caf3b7e05feb094c1f05292c53c8685e423bb3910cfbfeb680b8e28b008912e020de8ebd922db9e634ec5951dc23c496262c811e61304a5109b6b31a087417d2f7a14c0a7950fd3f568a1b856b3b9ee2a458c3c8d55b93e8c6e68647fc4cd7b74da727a24c30456d48d3fd2eec6a871d853e7947893411228678b239d5f6ec0b43c5cbd755cc33eb3b208e2a12dd8d95a94353b954cf6d31cfb7151eb43fdd925bd13d10457d7562b3b0b89576c273154fa2ecd70bae1e4580734ddc11eb56d7e3bbe3c501cf4157fa24422ba06b2bd488a6795635614855a4f31767db029c02b73268845429d177a52b7ade4f12d77849a42b1b357d8aa5d1f912585b1586c50916681b881a08267f1513cc83ec54e0fdc091d0fdd23ec682c7ef36eb2ef27531d5092f43c4e5a77eaf2678371109b90e3147c9fdef304c46a083e849fd904a57af4784345bf395f0132301e69c7434354062459987c4f17f57b14f2ca3b7c53ef60e2488615c9e7de6e92ac83d629f1e98cecbf345e97e62ed9d65eb79414072837f82a73c6fcb4d82b585df17f45139c4c6b3e3a82ffe54cb573e631284962a406e5531e5cbe0fc2742219e51debc030d0c011fb7f380e52fbe54cb520c1e425cce2a305a6d2c84bff11f17d8f382579a2311b5e128e97f4f5c661e1b90500ecf2c52cd38ec05e98fc59d211925db90519f127a748897bb1dd2b317881b7e2c3e0a92a93bbeff14825b0b992ce8af3dbe7ca47a90f80e325e1fa727aefbcf767b52a9f5f1963d4b5f42f5ed01d86e88dda18f78d849e38f81173a5f5d58441c0e00d7d90d201e4955644090c2946323081d81ab408a582c80e836cdf7103f37fd30b23092d3d70b107717ed476071f9a3eb2d936dad5650f9ad2c2e5abc4f7999a00f777d0391d0b2f18d7981f0acce09f6eaec0285cf4004d0d776786050c279f1f528fefe0943b0d5ce92c7726f4e7e66192c532aaf484165254c54e25edabf426f814ccb94475e518ce3a536f9d71603e44748136178ddf9dc641a0d796f43abb1446fc27871222a6aabccfeae79cd0ebb71accd71d48fffe74c4873a349759a9d6b2119050640c7813f72625e7cf6f004dc6b21738e63cbe8f2227489b01243837475ffd1981b3e573b2062b71df889048f90e16205a94a4fef1efa5f664d26d5a1e83719464563b302176bbdbf6627979d899b13a59ba376f96d304d7c2322e80e0fc9ce340a0a33df0a01eadff62e968c7dd8b91abd942bd4a577444039e972cedea4897729ea5726b487c63ca6978d8ca502835a7e2b203c64cb68c7c9d256ce39af7d6621c7242f0d1281a50d643c89b0ad277bd0f537c521f6a28e2ad38839f2484a140092d214bc4e4b73ce1cca765accc8ef0a651e0c1ec755210df8213f613bdc71c831db84ce27ba56ee1b66c30f103cdbabbabe8ea8de919c8370cc6bf6c87e9b81a8efb7ef434550ade405ff63717655fa725c668e43397f9ca568317eea97dbad6fe24392429ec0f73430baf5ffe8372e5494e12003dc8a31d20afce1ad76ee68a501dfe2d9c2820462c784627756ec5ec6d54bf64f8e3693b1a9577ce7652b2ee26e795263c4202aacb4b5eeebbc611c68831170898ab319e9be1793a8280672f1a029d58d5051605832d8231f355c0b8d1d6f34463316b70eb40e64ebd08a6abd532d6d26fbfbabadd8ef424eb712681bc816c6182308cceaabad0baa4102997462d51b72e04faa593e34797be1ea13780fe5a69cf13d0137aecb1328c6bfd9f66793db5edc36088460818023a5de66e130c98e11e8802580e2d9324d8ea2e4d81dd93de12ff6b1dfd5beca9187b0fb02e5ab5c26a196ed91894ce94a978a3a31ca7fd80711234c00bf65aaee2e338cf1cfb4bc0364c93ba3012f596fc056e29ff162630493dc617e2a7ea02b23118bd3d61ae4f92a8a0333d529e2ef6e46e12b21f6cf74b34a2f85d42dd13d09b8ae93685e4aea8ef27765dd176d0ce43565abf964738632d50308f8a876f9f55eec14e9e7432bd2b404726f9e85d2856cf39916b872d9d1e68db06bf45be11ef36278bd2ceb9bbb6b64f239ceaea182b11cabeac228a0e8293753772975b4c50ea6c549184c6fc32a392d180ce902e30bd47a9ec46d7cc9a7c48eb443cda67334eafa22dc5f3426a6085f42aa310d99c7959b103ddc1fb6e5e4621aa37669c96fa81c9d3fcfd07f5aca3a19c80704b58843dd27a1e997aa6fb3a807e409b22991ff584dd9372d282f1b6d3020a1876fe67568769dec766a52e4a266104f963b68a1912eaa40f491175d3dea21471ec6a4ba6b8bb55e2a59d86e192348ab693558c93d81b039f8e44fff87b753087908b72890e6fa90e9bb7636b810c3175534028a0a9d2978500074a70df5ea55fde86e03ede4dcc105add716dbf6d205dcbed423c8e50cf8011065982707e8dbc10c3de5c0f21f80bfcbe60819a828aa6b02af29afcd6b5ba3640212e57b0ac1adcb380046ff2e959cc133726bf53b2c2e6eee98f1e9d30a908370a6889d293fae20edf23e179ff35b3fc243e13e94f8f81ff1e35da1d6460f1883c0900f165dc76c62d40af1b8b2b02029a3f87e9333e8fec90053b2ce3edad4aba752631b0cc062038856ec2938135320a38beec0444765d6d7a63204afc4f69fe3c77ba85dce392040cf7a6c8b60eb42f722eca4c2cedfc1b7a016d7dbffc13769f7561c9332f36f9a83ad69b75b2c3050befd624136bc95a8e845a30e05b2f71937e77a22d45c16a28b6cf02e0c3c71f2d18ca605890f7431d9f8d9c5eb8fb10afbf5d9b16423afff55bfa481ab5b3ffb7c54e925d589bad14e1f4cfa1fa2434bd53115258e90685b131440f19e78670b1b9df204c70ca74cea2e325a6850c5a5d1fa7b1da18b5287afba5cbcec770131027ce91a4e919356af5b033bbeb6a4c48dafed367ba93cadde2fca773e384fd747b984db12c613282d234e2875da5946cc05679626e4d3439f28204af872a93a6ba630c180054cfdbb334b6d5ec96b8ff6362fddee1f0b61e7d41e1456aaeb01fe6af202273dd14cddff4a3cfacbb58d00fae3a9785723aedf41f07f866f84ef61db5fcebcd4e2c7e86ce486df7a479d90df9ef9a11d220e2f7622197868a7998f4827106e4cfda7c125bde4cf1389afdd02d3c4dc2dc9efbd8f56f42fb3fdca3e44a142e6ccecdd7105f9ad75fb4ac7a2df6d623e8ca24bb848b026b585d90b6c98587a59812a72e84c8ca102032f7500f5f3effd25108531b6ff38083f77a1acb40057dc75bf1b6cbca26dcd520f3838fb48aa168c875448beebc2f794cece7ca64a48492ad2dc6b498b6deb304b3552428b32964ad65a175bb8eaf9b95cc53c073185f5158dc52d7232c0de792921c794e5def26df78b154b26a69d110d4cbe8b2f17fde0026903ce2a1d3cda7b7b0114b8c97e8a11ec4e96a1fa6d146fbe0b942edc9841577751ad70db443216e7428ce82030b06d49a4019507ea001dd38c5123e65f77f4c8402415f700084c6f1527a5f5499e8dcd222da12ed0121aac9c81c5a2949de569f6956b56c5572de5205ad7e4365657708aeabd44d9a64c09b51510941ed4358a916b56b5e9bcaf10e2e6cb3cc67023a5dfe86a88dd73f5f101a6fb7cff7156ea8e0b8cdac7b94a63978665747b7c7504cb113e5dc8fd4d8b8d22112e23c16dd57385b8fb654ae0940f81dbc8e8b175e5e0ac4b19e6524b56c34457523f4d97b08859a6213bcf6f3ecfb714e311579d2d8f8a2f1f37dfaa3b9ea0af347085c496e62886d55d41e59aecabc1aac12a8de088de3558458cb1b33495ffdb8f81b23f0f8ccf27d4b66b2bc3633a55b16b94f6af81f8795ded6c829d835e68258dbe287cff6ef3c155800409ac3f02056ae9ecac5e487c91fb1a4ada1739cd232aeb6bbc6c6aabea959f1b97802b4df9b83cc4abf704f1c65a469fc0801994b9191e3fdd7f719ccf1143ecd9440ec1a130d25500c374cf1e81563e5909f73989c427f4cb9ddd39ac5723d2f3d56bd7aab9511479e50fbc9eb58388b838c95c315859f60ab4ceb44903b4f05aea845fbac61d162e23bc7e814e464d3c580c255a03246e227d4d5d1d05c75c4cb73454774fd2c9777781ae60a3610be2c00ef168c06309da21f7ec714717e326e75ac5b107da0d55d1eb7e7a1c00523136e40ac59406e93a044c209890b20405bfc8861655ebd99ac867b8e1217b973304e93f6b4f30c268d242c6f2770f3417735240d61d08d37393960c14cea24e9f28b42ce207c3edaac67b85571d661b5f92d0a85735072a026e56c7c05a53aabfc65cc38f513f9e622cd25923ed31891ca8a05a552652c24162776b9cdce4c03dfd3a6e39a609127916ba84d76af06b660eff40d807814a126cbcad4bb703b054c9780065901357a9e54bd513bc9aa3d3801cffb298c8e4d0b809986a950d7a156b8e9323e050ae7174d9a62b305f2933f794d2a58da904469cf61ac112f6c8f3482423c5de3a60c504525967bb16f89258447a7dddc53e1b188fb0e9ced2a51548158e871edd4d931ecd50c95ab00fe40d0fdccc4b79f795752e2272e3e785586d01f7d3ae16642330f9937840503b4e47e80a87086cb05c87f18aa6aca2ade4b6a7d2c69ab3ff0bfa78f34dfa598eea50c375577ff85ccbe02ec10208c09ab14f7e602a197416a6d1963b8e2b86170dea20414817fb1a483ca62036906fdf1c6b10c5d8134ecfb1b06638b12ce0fe6c7d0f3fc91382a570c1934c7fe1a5da829fcc226bb3734da68d18a742eac2ab40800771b89254cf5ebee7022f5a4c5b23fd24d618c0d896544254c8b9ae71e6ce143d3fd3f6355161f643f827717eb8332b311ea6cd72649213c69271f4f5faae6f1fdeed26e2b445d4b0f10efb33cf315ba475d2d7c3dff2e9dcc8c4aecf2d9fa997c054a4350b715f8d5eaf0fa7e43c8cb18947b6779debb4ef5a46d95c330b5d4940cafa0246e2447472d1be9fd9853f7c68daa0a819c0f768e30f5e4c9ab5de6b99095e6922610800b751c41cd65a79d584c605e30edf0e8a775cf9c2b91bf719875d7fe6a0b15311a8a745c487526ebbe6e2e0e6b26347bc7af7536b70272099e1479d012d7bec46ea69e60d057d5338235772dd85ac0d44d8f1968582719d5396c2f820b6fc21080aff60d36903d44779fc6b932a08cbadf1a59e7ebfe3f88266d5dd18be781c7b1b5327ece4b7326c0926280794d14ec1124985b55ac4266f756f007e9ca991a9c4bda99f175f5e5b571e9bbca4980c72376dd218d4991e4cbbb0a542b6705af5b89f0e38dbe3fcc2d7e778e4e0495b0d935e2f13237c60a0775782174c924e0e57055dd1ee8b4fc7c72e90282d6f61f56e31a453b5119abe0387b7fe3b289e48323dcf5e20a7b5ab27d48345fe978f2a739b394965336c71b932dc7a163fc8a202c7bd35110103f1a08fca303338b2edb85549f3a94dfa41727196dff2acec4b0a6550e255c0faa5e1513fe9dd0d9aad58e00", 0x1000}}, 0x1006) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [], 0xa, '\x00\x00'}, 0x6) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 3m27.942103871s ago: executing program 2 (id=309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}}, 0x20040054) 3m27.776926841s ago: executing program 2 (id=311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x20000005) socket$inet6(0xa, 0x6, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x2, 0x0, 0x0) 3m26.729835258s ago: executing program 2 (id=313): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m26.014235016s ago: executing program 2 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x484, &(0x7f0000000480), 0x1, 0xb95, &(0x7f00000017c0)="$eJzs3M1vVFUbAPDn3n7TvrS8efO+L8TEJgYxGodCiSbEGHBt0EQXLKntlDQdPmxrYiuLgnt1YYwLEsOfYOJeXLgycYELhb+AGIkhugEXNXc+yqSdKaWd9iD8fsmZe849wzzPw4Xec5K5DeCpNVq85BH7I+JMFjFcP59HRG+11x+xXHvf/buXJouWxcrKO79nkUXEvbuXJhufldWPg/VBf0TceCOLf3+8Pu784tLsRKVSnquPDy+cu3h4fnHp5ZlzE2fLZ8vnj42/emz8lfHxDtZ6++J7Xz7z06nnr1z7ZOytL/b+kMWJGKrPNdfRKaMxuvp30qw7IiY6HSyRrno9zXVm3QkTAgBgQ3nTGu6/MRxd8WDxNhzf/5w0OQAAAKAjVroiVgAAAIAnXGb/DwAAAE+4xvcA7t29NNloab+RsLvunIyIkVr9jeebazPdsVw99kdPROz5I4vmx1qz2h/bttEi0jc/losWj/Ac8kd7b73WgfCxfDki/t/q+mfV+keqT3Gvrz+PiLEOxB9dM97tf3/bqf9EB+Knrh+Ap9P1k7Ub2fr7X766/okW97/uFveurUh9/2us/+6vW/89qL+rzfrv7U3GOPDXizfazTWv/05/emuqiF8ct1XUI7hzOeJAd6v6s9X6szb1n9lkjMHJ21fbzRX1F/U22m7Xv3It4vVTretvyDb6/USHp2cq5bHaa5sYB787fahd/ObrX7QifmMvsMbytottobj+e2Jr1//iJmOM/O+3/e3mHl5//mtv9m6111s/8+HEwsLckYje7M31549unEvjPY3PKOp/4bmN//+3qr+rdkH6or4XuFw/Fu+9sibm4MGjX2+9/p1V1D+1xev/2SZjfPXt1ffbzaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/hjwihiLLS6v9PC+VIgYj4j+xJ69cmF94afrCB+enirmIkejJp2cq5bGIGK6Ns2J8pNp/MD66ZjweEfsi4vPhgeq4NHmhMpW6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFYNRsRQZHkpIvKI+HM4z0ul1FkBAAAAHTeSOgEAAABgx9n/AwAAwJPP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAdtu/Z6zeziFg+PlBthd76XE/SzICdlqdOAEimK3UCQDLdqRMAkrHHB7KHzPe3nenreC4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPL4O7b9+M4uI5eMD1Vborc/1JM0M2Gl56gSAZLpSJwAk093m/MAu5wHsPnt8IHvIfH/bmb6O5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA42uo2rK8FBF5tZ/npVLEvyJiJHqy6ZlKeSwi9kbEL8M9fcX4SOqkAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Lj5xaXZiUqlPKejo6Oz2kn9kwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBTmF5dmJyqV8tx86kwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1OYXl2YnKpXy3A52UtcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA6fwcAAP//184Irg==") 3m24.916465923s ago: executing program 2 (id=332): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005ac0)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4df018cd6ffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 3m23.505366578s ago: executing program 2 (id=344): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/21, 0x15}, {0x0}], 0x2}, 0x1}], 0x1, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 3m23.350324488s ago: executing program 34 (id=344): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/21, 0x15}, {0x0}], 0x2}, 0x1}], 0x1, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 6.84914092s ago: executing program 7 (id=1743): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@nojournal_checksum}, {@minixdf}, {@resgid}, {@nobarrier}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x401c5820, &(0x7f0000000100)=@v1={0x8, @aes256, 0x0, @desc3}) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 6.361978828s ago: executing program 7 (id=1752): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000001e80)=ANY=[], 0x1, 0x37d, &(0x7f00000020c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 5.282098435s ago: executing program 7 (id=1760): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x1794, &(0x7f0000000080)={0x0, 0xf133, 0x0, 0x80000000, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4.115777312s ago: executing program 7 (id=1767): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200015, &(0x7f00000010c0)=ANY=[], 0x1, 0x636, &(0x7f0000002000)="$eJzs3U9oHNcdB/DvrFey1qWOktiJKYYKG9JSUVt/UFr1EreUokMoIT30LGw5Fl4rQVKKEkpR/6XXHtJjIT3o1lOhd0N7bXPLVcdAIZecBIVumdlZeRXJsuR/u7Y+H/Pmvbdv5s1vfvNntRJmA5xYC5Np3k2Rhck3N8r+9tZse3tr9nQ93E5SthtJs1ulWEmaf06upVsy0jdd0T93q6/98fL82599uf15t9esS7V+Y+8UD2OzLplIcqqu9ztkN53Ofee7ft/5jqrYzUyZsMtlvflIE8Lj0dmnd2X+9yibF082OuBpKLrvm3tfSTKenEkyVv8ckPrp0Hj6ET5e3n8BAAA4CS59lJ1s5Oyg4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBnSf39/0VdGr32RIre9/+P1q+lbj9jij29uwOLAwAAAAAAAAAen2/uZCcbOdvrd4rqb/6Xqs65avm1vJ+1LGU1V7KRxaxnPauZTjLeN9HoxuL6+ur0EbacOXDLmQfHeuExHTMAAAAAAAAADL8/tY65wW+ycO/v/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAyK5FS3qsq5Xns8jWaSsSSj5Xqbyae99vA6/cA17qY+KgAAAHiOvbCTnWzkbK/fKarP/K9Un/vH8n5Wsp7lrKedpdyofhfQ/dTf2N6abW9vzd4py/55f/jFscKoZkz3dw8H7/lCtUYrN7NcvXIl1/Nu2rmRRrVl6UIvnoPj+nUZU/FGV3HEyG7Udbn+H+t6OIxXGRnZzchUnYdy+WJ/Flr7MnHI2WkcYU/Taez+5ufcMXL+xhGP7Exdl7n+aKhzPlNffZ+W98zhmUi+9fe//vxWe+X2rZtrk8NzSA+pzsRms87EbN99+OqJysRUlYnzu/2F/CQ/y2Qm8lZWs5xfZDHrWcpEfly1FuvruVyOH56pa3t6bz0oktH6vHSfoseL6VK17dks56d5NzeylNerfzOZzvcyl7nM953h84fE/UV91zeOd9df/nbdaCX5Q10PhzKvL/bltf+ZO16N7X0K97L00v2zVCT/qg7wmM/G5jfqRrmP397neT0YX83EdF8mXj78Ov9Lp1yutVdur95afO+I+3utrsv76PeDfpe4+EJfp7xeXipPVtXbe3WUYy8fODZdjZ3bHWvsGzu/O3bgnbra2/98tfYrB840U429euDYbDV2oW/soJ+3ABh6Z75zZrT1n9a/W5+0fte61Xpz7Eenv3/64mhG/jnyg+bUqdcaF4u/5ZP86t7nfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OGtffDh7cV2e2l1wI2i/iKfYYlH48k3MjYUYQyw8fX6LhyWePacHeA5d3X9zntX1z748LvLdxbfWXpnaWVkbm5+an7u9dmrN5fbS1Pd5aCjBJ6E3Tf94pn/Pl4AAAAAAAAAAAA4MZ7GfycY9DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz7aFyTTvpsj01JWpsr+9NdsuS699b81mkkaS4pdJ8Y/kWrol433TFeXif51O56v7+Xh5/u3Pvtz+/N5czd76jd52R9TY/9JmXTKR5FRdP4I9811/5PmK3hFulgm73EscDNr/AwAA//8Y7w2Q") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x80b0, 0x0, 0x0, 0x0, 0x0) 3.47014562s ago: executing program 7 (id=1771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r1, 0x5414, &(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) prlimit64(r0, 0x3, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2.994130718s ago: executing program 3 (id=1780): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x6c00, 0x0, 0x4044045}, 0x0) 2.993943388s ago: executing program 4 (id=1781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x38}}, 0x0) 2.923045388s ago: executing program 7 (id=1782): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) 2.846122418s ago: executing program 4 (id=1784): socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf", @ANYRES32=r6, @ANYBLOB='\b\x00]\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 2.846004098s ago: executing program 6 (id=1785): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{}, {}, {}, {}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 2.800190558s ago: executing program 35 (id=1782): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) 2.640212327s ago: executing program 3 (id=1787): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x10144d4, &(0x7f0000000a40)=ANY=[], 0xfe, 0xc24, &(0x7f0000001480)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x8001, 0x1, 0xca, 0x9a24}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xc0}, 0x33fe0}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x7b12d845, 0x0}) 1.864466245s ago: executing program 6 (id=1788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000001020300000000000000000002000003240001800c000280050001003a00000014000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 1.815954685s ago: executing program 4 (id=1790): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, r1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x0, 0x0, r1, 0x0, 0x1, 0x93e}, 0x0, 0x0, 0x8, 0x2, 0x5, 0x180000000000000, 0x0, 0x8, 0x3ff, 0x6}) 1.705097184s ago: executing program 0 (id=1791): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e23, 0x80000, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18, 0x29, 0xb, {0x33}}}], 0x18}, 0x0) 1.704952574s ago: executing program 4 (id=1792): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x10, &(0x7f0000000140)={0x3d, 0x3, 0xfffffff9}) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f00000001c0)=[{}, {}, {}, {}]) 1.642236904s ago: executing program 0 (id=1793): r0 = io_uring_setup(0x4410, &(0x7f0000000380)={0x0, 0xfd8a, 0x800, 0x200000}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/85, 0x55}], 0x0}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.642045604s ago: executing program 6 (id=1794): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000340)={{0xff7f000000000000, 0x405}, {0xff7f000004000000, 0x505}, 0x3, 0x4}) 1.574499764s ago: executing program 3 (id=1795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001800010327bd7000000000000a800000ff0300060000000414000100fe"], 0x30}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000240)=""/254, 0xfe}, 0x1}, {{&(0x7f00000003c0)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000005c0)=""/104, 0x68}, 0x6}, {{&(0x7f0000000640)=@tipc=@id, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f00000007c0)=""/102, 0x66}], 0x2}, 0x5}], 0x3, 0x40, &(0x7f0000000940)={0x0, 0x3938700}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010000100030000000200200000000000", @ANYRES32=r7, @ANYBLOB="0000020000000000180079b817bc34801400350067656e6576653000000000000000000008003900"], 0x40}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.530222334s ago: executing program 4 (id=1796): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={0x1c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x6c00, 0x0, 0x4044045}, 0x0) 1.530112014s ago: executing program 0 (id=1797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0x44, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) 1.530020434s ago: executing program 6 (id=1798): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) 1.466589524s ago: executing program 6 (id=1799): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) close(0xffffffffffffffff) fanotify_init(0x8, 0x800) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.441705343s ago: executing program 4 (id=1800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5ae, &(0x7f0000000180)="$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") r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, 0x0) 1.254169523s ago: executing program 0 (id=1801): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0xfffffffd, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) 1.103236313s ago: executing program 6 (id=1802): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@nombcache}, {@i_version}, {@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800343}}]}, 0xfd, 0x587, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x200001d0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r4, 0xc6c3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 1.065171363s ago: executing program 3 (id=1803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000880)=0x401, 0x4) 990.105072ms ago: executing program 0 (id=1804): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000010c0)='./file1/file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1/file0\x00', 0x0) 969.449172ms ago: executing program 3 (id=1805): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x10, &(0x7f0000000140)={0x3d, 0x3, 0xfffffff9}) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f00000001c0)=[{}, {}, {}, {}]) 158.10485ms ago: executing program 0 (id=1806): syz_mount_image$squashfs(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x810801, &(0x7f0000000400)=ANY=[], 0x6, 0x1d6, &(0x7f0000000040)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x40000}, 0x0) 0s ago: executing program 3 (id=1807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) kernel console output (not intermixed with test programs): ected [ 108.208177][ T5308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.218388][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.221070][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.237416][ T5308] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.243621][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.245932][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.247990][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.249532][ T4188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.280515][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.282640][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.285382][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.294934][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.296487][ T4188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.298354][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.301983][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.321016][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.328054][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.339634][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.342966][ T5371] loop4: detected capacity change from 0 to 512 [ 108.345176][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.355108][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.361159][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.367591][ T5308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.375498][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.378414][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.382259][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.384982][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.397383][ T5368] loop0: detected capacity change from 0 to 4096 [ 108.415420][ T5371] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.418040][ T5371] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.424840][ T5368] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 108.475930][ T5371] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.370: bg 0: block 418: padding at end of block bitmap is not set [ 108.493742][ T5371] EXT4-fs (loop4): Remounting filesystem read-only [ 108.495209][ T5371] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 108.514776][ T5371] EXT4-fs (loop4): Remounting filesystem read-only [ 108.516182][ T5371] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.370: invalid indirect mapped block 1 (level 1) [ 108.580448][ T5371] EXT4-fs (loop4): Remounting filesystem read-only [ 108.582065][ T5371] EXT4-fs (loop4): 1 truncate cleaned up [ 108.583272][ T5371] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none. [ 108.646488][ T5386] loop6: detected capacity change from 0 to 256 [ 108.680843][ T5386] exfat: Deprecated parameter 'namecase' [ 108.777347][ T5386] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x6dfb6af6, utbl_chksum : 0xe619d30d) [ 108.867615][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.869345][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.879720][ T5308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.328378][ T5241] Bluetooth: hci2: command 0x041b tx timeout [ 109.859397][ T5404] loop0: detected capacity change from 0 to 4096 [ 110.139442][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.143558][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.163740][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.166144][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.181021][ T5308] device veth0_vlan entered promiscuous mode [ 110.192917][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.195016][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.205523][ T5308] device veth1_vlan entered promiscuous mode [ 110.263460][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.265747][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.269974][ T5308] device veth0_macvtap entered promiscuous mode [ 110.283519][ T5308] device veth1_macvtap entered promiscuous mode [ 110.312368][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.319159][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.328065][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.335042][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.341723][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.349614][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.360468][ T5418] loop6: detected capacity change from 0 to 4096 [ 110.361946][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.364329][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.366742][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.369000][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.373284][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.376464][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.378791][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.388655][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.391105][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.394721][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.396903][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.399054][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.405908][ T5418] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 110.412683][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.417081][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.422269][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.429401][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.434879][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.437966][ T5308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.440853][ T5308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.456627][ T5308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.463957][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.466467][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.480983][ T5418] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 110.487694][ T5308] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.494672][ T5308] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.498890][ T5308] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.507648][ T5308] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.620997][ T4376] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 110.633867][ T4142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.639709][ T4142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.659304][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.705083][ T4142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.706958][ T4142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.713347][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.719559][ T5426] udc-core: couldn't find an available UDC or it's busy [ 110.726318][ T5426] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.859359][ T5432] loop7: detected capacity change from 0 to 512 [ 110.890266][ T4376] usb 1-1: Using ep0 maxpacket: 16 [ 110.953049][ T5432] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: writeback. [ 111.022198][ T4376] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.024306][ T4376] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.074911][ T5438] loop3: detected capacity change from 0 to 8 [ 111.121779][ T5443] udc-core: couldn't find an available UDC or it's busy [ 111.123214][ T5443] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.209329][ T4376] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.211675][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.213522][ T4376] usb 1-1: Product: syz [ 111.214303][ T4376] usb 1-1: Manufacturer: syz [ 111.215386][ T4376] usb 1-1: SerialNumber: syz [ 111.289171][ T5449] binder: 5448:5449 tried to acquire reference to desc 0, got 1 instead [ 111.449515][ T5459] loop5: detected capacity change from 0 to 7 [ 111.456567][ T5459] Dev loop5: unable to read RDB block 7 [ 111.457756][ T5459] loop5: unable to read partition table [ 111.459251][ T5459] loop5: partition table beyond EOD, truncated [ 111.470517][ T5459] loop_reread_partitions: partition scan of loop5 (ţ被xüźŃř éÚ¬§˝dƤ´ŕ–ݡŻ¨ťâ·ű [ 111.470517][ T5459] ) failed (rc=-5) [ 111.471254][ T5241] Bluetooth: hci2: command 0x040f tx timeout [ 111.530359][ T4376] usb 1-1: 0:2 : does not exist [ 111.587380][ T4376] usb 1-1: USB disconnect, device number 12 [ 111.823442][ T5472] udc-core: couldn't find an available UDC or it's busy [ 111.825002][ T5472] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.833934][ T4135] udevd[4135]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.155421][ T5481] loop3: detected capacity change from 0 to 512 [ 112.216355][ T5481] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 112.350590][ T4299] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 112.448894][ T5487] loop7: detected capacity change from 0 to 512 [ 112.544399][ T5492] loop3: detected capacity change from 0 to 64 [ 112.553772][ T5490] IPVS: persistence engine module ip_vs_pe_% not found [ 112.574947][ T5487] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 112.577406][ T5487] EXT4-fs (loop7): orphan cleanup on readonly fs [ 112.582478][ T5487] EXT4-fs warning (device loop7): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 112.590273][ T4299] usb 1-1: Using ep0 maxpacket: 16 [ 112.599727][ T5487] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 112.610266][ T5487] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #16: comm syz.7.412: iget: immutable or append flags not allowed on symlinks [ 112.636991][ T5492] Trying to free block not in datazone [ 112.640040][ T5487] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.412: couldn't read orphan inode 16 (err -117) [ 112.650921][ T5487] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.715398][ T4299] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 112.717054][ T4299] usb 1-1: config 0 has no interface number 0 [ 112.819910][ T5495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.870620][ T4299] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 112.872544][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.874127][ T4299] usb 1-1: Product: syz [ 112.874949][ T4299] usb 1-1: Manufacturer: syz [ 112.875895][ T4299] usb 1-1: SerialNumber: syz [ 112.879313][ T4299] usb 1-1: config 0 descriptor?? [ 112.969198][ T5502] loop4: detected capacity change from 0 to 16 [ 112.992456][ T5502] erofs: (device loop4): mounted with root inode @ nid 36. [ 113.135324][ T4299] usb 1-1: USB disconnect, device number 13 [ 113.270669][ T5514] udc-core: couldn't find an available UDC or it's busy [ 113.272301][ T5514] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.276360][ T5515] loop4: detected capacity change from 0 to 256 [ 113.328890][ T5515] FAT-fs (loop4): Directory bread(block 64) failed [ 113.330515][ T5515] FAT-fs (loop4): Directory bread(block 65) failed [ 113.331896][ T5515] FAT-fs (loop4): Directory bread(block 66) failed [ 113.333308][ T5515] FAT-fs (loop4): Directory bread(block 67) failed [ 113.334800][ T5515] FAT-fs (loop4): Directory bread(block 68) failed [ 113.336190][ T5515] FAT-fs (loop4): Directory bread(block 69) failed [ 113.337833][ T5515] FAT-fs (loop4): Directory bread(block 70) failed [ 113.339312][ T5515] FAT-fs (loop4): Directory bread(block 71) failed [ 113.341746][ T5515] FAT-fs (loop4): Directory bread(block 72) failed [ 113.343252][ T5515] FAT-fs (loop4): Directory bread(block 73) failed [ 113.524014][ T5523] udc-core: couldn't find an available UDC or it's busy [ 113.525496][ T5523] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.550589][ T4299] Bluetooth: hci2: command 0x0419 tx timeout [ 113.888393][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 113.888406][ T26] audit: type=1326 audit(113.840:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a07aba8 code=0x7ffc0000 [ 113.915488][ T26] audit: type=1326 audit(113.870:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffff9a07aba8 code=0x7ffc0000 [ 113.921669][ T26] audit: type=1326 audit(113.870:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a07aba8 code=0x7ffc0000 [ 113.940830][ T26] audit: type=1326 audit(113.880:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9a07aba8 code=0x7ffc0000 [ 113.948111][ T26] audit: type=1326 audit(113.890:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a07aba8 code=0x7ffc0000 [ 113.965029][ T26] audit: type=1326 audit(113.890:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=70 compat=0 ip=0xffff9a07aba8 code=0x7ffc0000 [ 113.980926][ T5545] udc-core: couldn't find an available UDC or it's busy [ 113.982451][ T5545] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.987259][ T26] audit: type=1326 audit(113.890:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.0.436" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a07aba8 code=0x7ffc0000 [ 114.083872][ T5543] loop3: detected capacity change from 0 to 256 [ 114.124428][ T5552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 114.455096][ T5574] netlink: 44 bytes leftover after parsing attributes in process `syz.3.447'. [ 114.498541][ T5575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.448'. [ 114.656982][ T5593] loop0: detected capacity change from 0 to 256 [ 114.734884][ T5593] FAT-fs (loop0): Directory bread(block 64) failed [ 114.736347][ T5593] FAT-fs (loop0): Directory bread(block 65) failed [ 114.737790][ T5593] FAT-fs (loop0): Directory bread(block 66) failed [ 114.739046][ T5593] FAT-fs (loop0): Directory bread(block 67) failed [ 114.751078][ T5593] FAT-fs (loop0): Directory bread(block 68) failed [ 114.755975][ T5593] FAT-fs (loop0): Directory bread(block 69) failed [ 114.759763][ T5593] FAT-fs (loop0): Directory bread(block 70) failed [ 114.766264][ T5593] FAT-fs (loop0): Directory bread(block 71) failed [ 114.769938][ T5593] FAT-fs (loop0): Directory bread(block 72) failed [ 114.778460][ T5593] FAT-fs (loop0): Directory bread(block 73) failed [ 114.825685][ T5601] loop6: detected capacity change from 0 to 512 [ 114.923705][ T5601] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.246977][ T5609] loop3: detected capacity change from 0 to 32768 [ 115.637788][ T5622] loop6: detected capacity change from 0 to 4096 [ 115.741894][ T5622] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 115.948806][ T4520] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 115.953082][ T4520] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 115.954552][ T4520] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 116.166107][ T5652] loop6: detected capacity change from 0 to 64 [ 116.660798][ T5639] loop0: detected capacity change from 0 to 32768 [ 116.749962][ T5682] udc-core: couldn't find an available UDC or it's busy [ 116.757328][ T5682] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 117.336725][ T5704] udc-core: couldn't find an available UDC or it's busy [ 117.342874][ T5704] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 117.662978][ T5724] loop0: detected capacity change from 0 to 1024 [ 117.857197][ T5732] loop6: detected capacity change from 0 to 4096 [ 117.891428][ T5738] udc-core: couldn't find an available UDC or it's busy [ 117.892920][ T5738] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 117.967490][ T5732] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.975638][ T5732] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 4096) [ 117.995218][ T4135] udevd[4135]: incorrect nilfs2 checksum on /dev/loop6 [ 118.035297][ T5744] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.269835][ T5762] loop3: detected capacity change from 0 to 8 [ 118.294264][ T5762] unable to read xattr id index table [ 118.434042][ T26] audit: type=1326 audit(118.390:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5769 comm="syz.3.505" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db48ba8 code=0x0 [ 118.549651][ T5779] udc-core: couldn't find an available UDC or it's busy [ 118.560546][ T5779] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.731473][ T5788] udc-core: couldn't find an available UDC or it's busy [ 118.753235][ T5788] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.170695][ T26] audit: type=1326 audit(119.120:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 119.179798][ T26] audit: type=1326 audit(119.120:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 119.198029][ T26] audit: type=1326 audit(119.130:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa810114c code=0x7ffc0000 [ 119.212799][ T26] audit: type=1326 audit(119.130:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffa8101068 code=0x7ffc0000 [ 119.230600][ T26] audit: type=1326 audit(119.140:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffa8100f6c code=0x7ffc0000 [ 119.235998][ T26] audit: type=1326 audit(119.140:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffa8100f6c code=0x7ffc0000 [ 119.263464][ T5821] device syzkaller0 entered promiscuous mode [ 119.310213][ T26] audit: type=1326 audit(119.140:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffa80fd4ac code=0x7ffc0000 [ 119.314836][ T26] audit: type=1326 audit(119.140:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 119.319221][ T26] audit: type=1326 audit(119.140:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5816 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 119.442691][ T5833] udc-core: couldn't find an available UDC or it's busy [ 119.444165][ T5833] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.646738][ T5864] netlink: 'syz.0.527': attribute type 4 has an invalid length. [ 120.810743][ T5871] loop0: detected capacity change from 0 to 256 [ 120.914024][ T5871] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 120.995630][ T5873] loop3: detected capacity change from 0 to 8192 [ 121.033327][ T5885] udc-core: couldn't find an available UDC or it's busy [ 121.035250][ T5873] loop3: p1 p2 p3 p4 [ 121.035497][ T5885] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.037366][ T5873] loop3: p1 size 108922248 extends beyond EOD, truncated [ 121.048959][ T5873] loop3: p2 start 861536256 is beyond EOD, truncated [ 121.052067][ T5873] loop3: p3 start 851968 is beyond EOD, truncated [ 121.053439][ T5873] loop3: p4 size 65536 extends beyond EOD, truncated [ 121.219887][ T3642] loop3: p1 p2 p3 p4 [ 121.222369][ T3642] loop3: p1 size 108922248 extends beyond EOD, truncated [ 121.226449][ T3642] loop3: p2 start 861536256 is beyond EOD, truncated [ 121.231101][ T3642] loop3: p3 start 851968 is beyond EOD, truncated [ 121.233711][ T3642] loop3: p4 size 65536 extends beyond EOD, truncated [ 122.102258][ T5891] udc-core: couldn't find an available UDC or it's busy [ 122.120265][ T5891] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.162516][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 122.172649][ T4135] udevd[4135]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 122.234113][ T5899] udc-core: couldn't find an available UDC or it's busy [ 122.235596][ T5899] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.252282][ T4288] udevd[4288]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 122.262247][ T4135] udevd[4135]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 122.500249][ T4072] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 122.740348][ T4072] usb 1-1: Using ep0 maxpacket: 32 [ 122.817275][ T5909] udc-core: couldn't find an available UDC or it's busy [ 122.819498][ T5909] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.861006][ T4072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.863479][ T4072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.865639][ T4072] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.867452][ T4072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.883692][ T4072] usb 1-1: config 0 descriptor?? [ 122.921908][ T4072] hub 1-1:0.0: USB hub found [ 123.096086][ T5912] loop3: detected capacity change from 0 to 32768 [ 123.139982][ T5915] udc-core: couldn't find an available UDC or it's busy [ 123.140515][ T4072] hub 1-1:0.0: 1 port detected [ 123.146567][ T5912] JBD2: Ignoring recovery information on journal [ 123.153340][ T5915] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.199991][ T5912] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 123.252290][ T4466] ocfs2: Unmounting device (7,3) on (node local) [ 123.602328][ T4072] usb 1-1: USB disconnect, device number 14 [ 124.642925][ T5932] loop6: detected capacity change from 0 to 128 [ 124.699394][ T5932] EXT4-fs (loop6): Test dummy encryption mode enabled [ 124.737543][ T5932] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 124.935150][ T5939] udc-core: couldn't find an available UDC or it's busy [ 124.936694][ T5939] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.120295][ T4071] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 125.520325][ T4071] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 125.523135][ T4071] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.525565][ T4071] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.535347][ T4071] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 125.539643][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.561119][ T4071] usb 1-1: config 0 descriptor?? [ 125.601174][ T4071] usb-storage 1-1:0.0: USB Mass Storage device detected [ 125.613916][ T4071] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 125.817729][ T4071] usb 1-1: USB disconnect, device number 15 [ 126.046277][ T5955] udc-core: couldn't find an available UDC or it's busy [ 126.047883][ T5955] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.089711][ T5957] loop6: detected capacity change from 0 to 256 [ 126.173689][ T5957] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 126.425395][ T5961] udc-core: couldn't find an available UDC or it's busy [ 126.437857][ T5961] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 127.573046][ T5966] tipc: Resetting bearer [ 127.628988][ T5981] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 127.630642][ T5981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 127.632308][ T5990] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6) [ 127.633802][ T5990] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 127.658682][ T5990] vhci_hcd vhci_hcd.0: Device attached [ 127.680084][ T5996] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.689318][ T5981] vhci_hcd vhci_hcd.0: Device attached [ 127.728879][ T5981] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(5) [ 127.730353][ T5981] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 127.742987][ T5981] vhci_hcd vhci_hcd.0: Device attached [ 127.751517][ T5981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 127.792527][ T6003] loop4: detected capacity change from 0 to 1024 [ 127.799065][ T5981] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(13) [ 127.800469][ T5981] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 127.815204][ T5981] vhci_hcd vhci_hcd.0: Device attached [ 127.817410][ T5991] vhci_hcd: connection closed [ 127.827136][ T5984] vhci_hcd: connection closed [ 127.829051][ T4485] vhci_hcd: stop threads [ 127.829361][ T5997] vhci_hcd: connection closed [ 127.838233][ T4485] vhci_hcd: release socket [ 127.854736][ T4485] vhci_hcd: disconnect device [ 127.859796][ T4485] vhci_hcd: stop threads [ 127.868034][ T4485] vhci_hcd: release socket [ 127.871272][ T4069] vhci_hcd: vhci_device speed not set [ 127.880684][ T4485] vhci_hcd: disconnect device [ 127.885435][ T6005] vhci_hcd: connection closed [ 127.889210][ T4485] vhci_hcd: stop threads [ 127.899216][ T4485] vhci_hcd: release socket [ 127.903589][ T4485] vhci_hcd: disconnect device [ 127.908036][ T4485] vhci_hcd: stop threads [ 127.908961][ T4485] vhci_hcd: release socket [ 127.909967][ T4485] vhci_hcd: disconnect device [ 128.482466][ T6025] loop7: detected capacity change from 0 to 8 [ 128.705219][ T6034] loop7: detected capacity change from 0 to 256 [ 128.752567][ T6034] exfat: Deprecated parameter 'namecase' [ 128.810580][ T6034] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x6dfb6af6, utbl_chksum : 0xe619d30d) [ 130.122609][ T6068] loop4: detected capacity change from 0 to 1024 [ 130.302187][ T6078] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 130.700377][ T4071] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 130.950347][ T4071] usb 1-1: Using ep0 maxpacket: 16 [ 131.070880][ T4071] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.072134][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.073205][ T4071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.074499][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.077695][ T4071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.083461][ T4071] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 131.089946][ T4071] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.171848][ T4071] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.176033][ T4071] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.178656][ T4071] usb 1-1: Manufacturer: syz [ 131.198567][ T4071] usb 1-1: config 0 descriptor?? [ 131.461993][ T4071] Registered IR keymap rc-hauppauge [ 132.370884][ T4071] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 132.373113][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.410288][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.414224][ T6144] netlink: 'syz.7.601': attribute type 4 has an invalid length. [ 132.435962][ T6143] loop6: detected capacity change from 0 to 4096 [ 132.452822][ T4071] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 132.456282][ T4071] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 132.475189][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.510369][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.540387][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.545393][ T6143] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.548081][ T6143] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 4096) [ 132.571595][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.583917][ T6151] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.600493][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.759966][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.782919][ T6157] loop3: detected capacity change from 0 to 1024 [ 132.790757][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.830418][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.862540][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.900531][ T4071] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 132.923802][ T6160] loop6: detected capacity change from 0 to 128 [ 132.935024][ T4071] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 132.936570][ T4071] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 133.402176][ T4071] usb 1-1: USB disconnect, device number 16 [ 135.172607][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 135.174480][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 135.176615][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 135.178661][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 135.238589][ T6190] loop3: detected capacity change from 0 to 512 [ 135.286685][ T6190] EXT4-fs (loop3): error: journal path ./file1 is not a block device [ 135.296167][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.619'. [ 135.328489][ T6192] netlink: 52 bytes leftover after parsing attributes in process `syz.6.619'. [ 135.549663][ T6202] loop3: detected capacity change from 0 to 2048 [ 135.740954][ T6202] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.559225][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.626'. [ 136.606718][ T6202] EXT4-fs (loop3): Ignoring removed orlov option [ 136.608628][ T6202] EXT4-fs (loop3): can't enable nombcache during remount [ 136.957280][ T5031] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 137.240958][ T5031] usb 1-1: Using ep0 maxpacket: 16 [ 137.912815][ T6226] udc-core: couldn't find an available UDC or it's busy [ 137.914404][ T6226] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.918867][ T6226] udc-core: couldn't find an available UDC or it's busy [ 137.920749][ T5031] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.922918][ T5031] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.928050][ T6226] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.043646][ T6230] udc-core: couldn't find an available UDC or it's busy [ 138.045192][ T6230] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.091374][ T5031] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.093270][ T5031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.095110][ T5031] usb 1-1: Product: syz [ 138.096010][ T5031] usb 1-1: Manufacturer: syz [ 138.096939][ T5031] usb 1-1: SerialNumber: syz [ 139.211201][ T6241] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 139.288654][ T5031] usb 1-1: 0:2 : does not exist [ 139.311274][ T5031] usb 1-1: USB disconnect, device number 17 [ 139.328945][ T6251] udc-core: couldn't find an available UDC or it's busy [ 139.331776][ T6251] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 139.351285][ T26] audit: type=1326 audit(139.310:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 139.358708][ T26] audit: type=1326 audit(139.310:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 139.376974][ T26] audit: type=1326 audit(139.330:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 139.382027][ T6250] loop7: detected capacity change from 0 to 1024 [ 139.385731][ T26] audit: type=1326 audit(139.330:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 139.405018][ T26] audit: type=1326 audit(139.330:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 139.409676][ T26] audit: type=1326 audit(139.340:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=51 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 139.448647][ T26] audit: type=1326 audit(139.340:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 139.471058][ T6250] EXT4-fs (loop7): mounted filesystem without journal. Opts: nojournal_checksum,nodiscard,errors=remount-ro,norecovery,debug_want_extra_isize=0x0000000000000080,nombcache,block_validity,usrquota,bsdgroups,. Quota mode: writeback. [ 139.474142][ T26] audit: type=1326 audit(139.340:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 139.484257][ T26] audit: type=1326 audit(139.340:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 139.488841][ T26] audit: type=1326 audit(139.340:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 139.575568][ T6256] loop4: detected capacity change from 0 to 8192 [ 139.687097][ T6256] overlayfs: filesystem on './file0' not supported [ 139.776668][ T4135] udevd[4135]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.927204][ T6271] loop6: detected capacity change from 0 to 16 [ 140.007857][ T6271] erofs: (device loop6): mounted with root inode @ nid 36. [ 140.036160][ T6276] udc-core: couldn't find an available UDC or it's busy [ 140.055925][ T6276] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.091207][ T6276] input: syz0 as /devices/virtual/input/input20 [ 140.140623][ T6274] loop7: detected capacity change from 0 to 2048 [ 140.219331][ T6274] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 140.233654][ T6274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.546018][ T6300] loop3: detected capacity change from 0 to 2048 [ 141.681060][ T6307] loop7: detected capacity change from 0 to 512 [ 141.701754][ T6300] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 141.788998][ T6311] loop6: detected capacity change from 0 to 32768 [ 141.825185][ T6307] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.663: attempt to clear invalid blocks 2 len 1 [ 141.865876][ T6311] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.665 (6311) [ 141.889166][ T6307] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 141.893597][ T6307] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.663: invalid indirect mapped block 1819239214 (level 0) [ 141.902542][ T6307] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.663: invalid indirect mapped block 1819239214 (level 1) [ 141.923163][ T6307] EXT4-fs (loop7): 1 truncate cleaned up [ 141.924353][ T6307] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.977609][ T6307] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.663: Unrecognised inode hash code 20 [ 141.980058][ T6307] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.663: Corrupt directory, running e2fsck is recommended [ 141.983255][ T6311] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 141.985234][ T6311] BTRFS info (device loop6): force clearing of disk cache [ 141.986777][ T6311] BTRFS info (device loop6): setting nodatasum [ 141.988034][ T6311] BTRFS info (device loop6): use zlib compression, level 3 [ 141.989548][ T6311] BTRFS info (device loop6): allowing degraded mounts [ 141.991047][ T6311] BTRFS info (device loop6): enabling disk space caching [ 141.992486][ T6311] BTRFS info (device loop6): disk space caching is enabled [ 141.994031][ T6311] BTRFS info (device loop6): has skinny extents [ 141.996192][ T6307] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz.7.663: corrupted in-inode xattr [ 142.200270][ T6311] BTRFS info (device loop6): enabling ssd optimizations [ 142.202596][ T6311] BTRFS info (device loop6): clearing free space tree [ 142.204015][ T6311] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 142.205983][ T6311] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 142.222145][ T6311] BTRFS info (device loop6): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 143.496693][ T6299] loop4: detected capacity change from 0 to 40427 [ 143.776544][ T6371] loop7: detected capacity change from 0 to 8 [ 145.048889][ T6403] udc-core: couldn't find an available UDC or it's busy [ 145.068424][ T6403] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.178484][ T6408] loop7: detected capacity change from 0 to 512 [ 145.227240][ T6408] EXT4-fs (loop7): Ignoring removed bh option [ 145.228882][ T6408] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 145.285809][ T6408] EXT4-fs (loop7): 1 truncate cleaned up [ 145.287194][ T6408] EXT4-fs (loop7): mounted filesystem without journal. Opts: bh,quota,resgid=0x000000000000ee00,noload,data_err=ignore,errors=remount-ro,. Quota mode: writeback. [ 146.319760][ T6424] loop3: detected capacity change from 0 to 16 [ 146.331555][ T6423] netlink: 'syz.0.703': attribute type 13 has an invalid length. [ 146.360310][ T6424] erofs: (device loop3): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 146.589128][ T6423] gretap0: refused to change device tx_queue_len [ 146.591472][ T6423] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 146.617323][ T6436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.709'. [ 147.803664][ T6459] netlink: 144 bytes leftover after parsing attributes in process `syz.3.716'. [ 147.880881][ T6463] udc-core: couldn't find an available UDC or it's busy [ 147.882423][ T6463] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 148.067770][ T6472] capability: warning: `syz.3.722' uses deprecated v2 capabilities in a way that may be insecure [ 148.158337][ T6478] udc-core: couldn't find an available UDC or it's busy [ 148.159959][ T6478] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 148.210398][ T21] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 148.472278][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 149.070990][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.073190][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.139542][ T4072] Bluetooth: hci5: command 0x1003 tx timeout [ 149.141011][ T4037] Bluetooth: hci5: sending frame failed (-49) [ 149.224055][ T6492] loop3: detected capacity change from 0 to 1024 [ 149.260611][ T21] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.262604][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.270644][ T21] usb 1-1: Product: syz [ 149.271598][ T21] usb 1-1: Manufacturer: syz [ 149.272469][ T21] usb 1-1: SerialNumber: syz [ 149.404755][ T6501] netlink: 'syz.6.736': attribute type 14 has an invalid length. [ 149.416767][ T6501] netlink: 168 bytes leftover after parsing attributes in process `syz.6.736'. [ 149.503158][ T6505] loop6: detected capacity change from 0 to 64 [ 149.620489][ T21] usb 1-1: 0:2 : does not exist [ 149.637160][ T21] usb 1-1: USB disconnect, device number 18 [ 149.856930][ T6509] udc-core: couldn't find an available UDC or it's busy [ 149.872514][ T6509] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 149.907393][ T4135] udevd[4135]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.150400][ T5241] Bluetooth: hci5: command 0x1001 tx timeout [ 151.151798][ T4037] Bluetooth: hci5: sending frame failed (-49) [ 151.986699][ T6540] device pim6reg1 entered promiscuous mode [ 153.230311][ T5241] Bluetooth: hci5: command 0x1009 tx timeout [ 153.239299][ T6536] loop7: detected capacity change from 0 to 32768 [ 153.254331][ T6564] loop0: detected capacity change from 0 to 732 [ 153.263620][ T6560] loop6: detected capacity change from 0 to 2048 [ 153.325116][ T6560] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 153.357867][ T6560] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 153.370479][ T6560] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 153.373248][ T6560] EXT4-fs (loop6): This should not happen!! Data will be lost [ 153.373248][ T6560] [ 153.375255][ T6560] EXT4-fs (loop6): Total free blocks count 0 [ 153.376451][ T6560] EXT4-fs (loop6): Free/Dirty block details [ 153.377723][ T6560] EXT4-fs (loop6): free_blocks=66060288 [ 153.378878][ T6560] EXT4-fs (loop6): dirty_blocks=48 [ 153.379863][ T6560] EXT4-fs (loop6): Block reservation details [ 153.393762][ T6560] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 153.398789][ T6568] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 153.401581][ T6568] EXT4-fs (loop6): This should not happen!! Data will be lost [ 153.401581][ T6568] [ 153.553612][ T6577] loop0: detected capacity change from 0 to 16 [ 153.569342][ T6574] loop7: detected capacity change from 0 to 2048 [ 153.594185][ T6577] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 153.623316][ T6580] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.872460][ T6604] udc-core: couldn't find an available UDC or it's busy [ 154.874022][ T6604] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 155.029804][ T6602] loop6: detected capacity change from 0 to 32768 [ 155.031541][ T4722] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 155.086199][ T6602] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.775 (6602) [ 155.108738][ T6602] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 155.110643][ T6602] BTRFS info (device loop6): enabling auto defrag [ 155.111975][ T6602] BTRFS info (device loop6): doing ref verification [ 155.113366][ T6602] BTRFS info (device loop6): use no compression [ 155.114589][ T6602] BTRFS info (device loop6): force clearing of disk cache [ 155.116237][ T6602] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 155.126481][ T6602] BTRFS info (device loop6): trying to use backup root at mount time [ 155.128305][ T6602] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 155.135651][ T6602] BTRFS info (device loop6): use zstd compression, level 3 [ 155.137183][ T6602] BTRFS info (device loop6): using free space tree [ 155.138530][ T6602] BTRFS info (device loop6): has skinny extents [ 155.202018][ T6621] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.204083][ T6621] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.207244][ T6621] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.215119][ T6621] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.220370][ T6621] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 155.246545][ T6621] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.248797][ T6621] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.256438][ T6621] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.258343][ T6621] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.263449][ T6621] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.265366][ T6621] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.269417][ T6621] virt_wifi0 speed is unknown, defaulting to 1000 [ 155.344424][ T6602] BTRFS info (device loop6): enabling ssd optimizations [ 155.351356][ T6602] BTRFS info (device loop6): clearing free space tree [ 155.352809][ T6602] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.354737][ T6602] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.378241][ T6602] BTRFS info (device loop6): creating free space tree [ 155.387574][ T6602] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.389754][ T6602] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.392536][ T4722] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 155.394303][ T4722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.470536][ T4722] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 155.472356][ T4722] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 155.473901][ T4722] usb 1-1: Manufacturer: syz [ 155.481120][ T4722] usb 1-1: config 0 descriptor?? [ 155.522356][ T4722] Registered IR keymap rc-hauppauge [ 156.311230][ T4722] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 156.317106][ T4722] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 156.319968][ T4722] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 156.416963][ T6653] udc-core: couldn't find an available UDC or it's busy [ 156.418609][ T6653] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.561993][ T6655] loop3: detected capacity change from 0 to 256 [ 156.648263][ T6651] rc rc0: two consecutive events of type space [ 156.650114][ T6655] FAT-fs (loop3): Directory bread(block 64) failed [ 156.660366][ T6655] FAT-fs (loop3): Directory bread(block 65) failed [ 156.662657][ T6655] FAT-fs (loop3): Directory bread(block 66) failed [ 156.664019][ T6655] FAT-fs (loop3): Directory bread(block 67) failed [ 156.665390][ T6655] FAT-fs (loop3): Directory bread(block 68) failed [ 156.666867][ T6655] FAT-fs (loop3): Directory bread(block 69) failed [ 156.668326][ T6655] FAT-fs (loop3): Directory bread(block 70) failed [ 156.669711][ T6655] FAT-fs (loop3): Directory bread(block 71) failed [ 156.706986][ T6655] FAT-fs (loop3): Directory bread(block 72) failed [ 156.708430][ T6655] FAT-fs (loop3): Directory bread(block 73) failed [ 156.800114][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.790'. [ 156.841913][ T4033] usb 1-1: USB disconnect, device number 19 [ 156.847898][ T6662] udc-core: couldn't find an available UDC or it's busy [ 156.852640][ T6662] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.855249][ T6662] udc-core: couldn't find an available UDC or it's busy [ 156.856693][ T6662] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.899763][ T6663] udc-core: couldn't find an available UDC or it's busy [ 156.906969][ T6663] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 157.081565][ T6670] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 158.330690][ T6692] loop6: detected capacity change from 0 to 4096 [ 158.376951][ T6692] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 158.378828][ T6692] ntfs3: loop6: Failed to load $MFT. [ 158.382199][ T6703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.809'. [ 158.423391][ T6706] device syzkaller1 entered promiscuous mode [ 158.462140][ T6708] udc-core: couldn't find an available UDC or it's busy [ 158.463564][ T6708] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 159.447294][ T6723] binder: 6722:6723 got transaction to invalid handle, 1 [ 159.449286][ T6723] binder: 6722:6723 transaction failed 29201/-22, size 0-0 line 2917 [ 159.463792][ T6723] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.599171][ T6729] udc-core: couldn't find an available UDC or it's busy [ 159.600718][ T6729] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 160.819732][ T6737] loop4: detected capacity change from 0 to 32768 [ 161.065127][ T6737] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.823 (6737) [ 161.093902][ T6760] loop7: detected capacity change from 0 to 64 [ 161.180849][ T6737] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 161.182612][ T6737] BTRFS info (device loop4): max_inline at 0 [ 161.183857][ T6737] BTRFS info (device loop4): use zlib compression, level 3 [ 161.200025][ T6737] BTRFS info (device loop4): use no compression [ 161.203931][ T6737] BTRFS info (device loop4): max_inline at 0 [ 161.205144][ T6737] BTRFS info (device loop4): ignoring data csums [ 161.206406][ T6737] BTRFS error (device loop4): unrecognized mount option 'obj_role=btrfs' [ 161.255827][ T6774] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 161.255827][ T6774] The task syz.3.836 (6774) triggered the difference, watch for misbehavior. [ 161.262284][ T6737] BTRFS error (device loop4): open_ctree failed [ 161.284846][ T6776] netlink: 'syz.0.840': attribute type 4 has an invalid length. [ 161.358425][ T6782] loop0: detected capacity change from 0 to 128 [ 162.705317][ T6796] loop7: detected capacity change from 0 to 512 [ 162.799941][ T6782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 162.801786][ T6782] System zones: 1-3, 19-19, 35-36 [ 162.809264][ T6796] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.848: casefold flag without casefold feature [ 162.813006][ T6782] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,debug,,errors=continue. Quota mode: none. [ 162.816100][ T6796] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.848: couldn't read orphan inode 15 (err -117) [ 162.820809][ T6796] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,delalloc,norecovery,journal_dev=0x0000000000000256,,errors=continue. Quota mode: writeback. [ 162.838398][ T6802] loop4: detected capacity change from 0 to 2048 [ 163.029227][ T6802] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.606720][ T6826] virt_wifi0 speed is unknown, defaulting to 1000 [ 163.936048][ T6821] loop6: detected capacity change from 0 to 128 [ 164.750650][ T6821] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.684353][ T6855] loop4: detected capacity change from 0 to 512 [ 165.701931][ T6852] loop7: detected capacity change from 0 to 256 [ 165.766273][ T6855] EXT2-fs (loop4): error: couldn't mount because of unsupported optional features (90000) [ 165.776120][ T6852] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d) [ 166.003153][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 166.008467][ T6874] netlink: 'syz.0.876': attribute type 2 has an invalid length. [ 166.011742][ T6874] netlink: 'syz.0.876': attribute type 1 has an invalid length. [ 167.028753][ T6890] netlink: 87 bytes leftover after parsing attributes in process `syz.0.882'. [ 167.064821][ T6901] udc-core: couldn't find an available UDC or it's busy [ 167.066818][ T6901] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 167.088590][ T6898] loop6: detected capacity change from 0 to 128 [ 167.095029][ T6900] loop7: detected capacity change from 0 to 512 [ 167.855584][ T6898] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.884179][ T4108] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.969812][ T6900] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,grpjquota=,nodioread_nolock,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 169.292211][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 169.421531][ T6934] loop0: detected capacity change from 0 to 512 [ 169.450433][ T6933] netlink: 277 bytes leftover after parsing attributes in process `syz.3.895'. [ 169.472620][ T6933] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 169.500306][ T6934] EXT4-fs (loop0): Ignoring removed nobh option [ 169.501702][ T6934] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.587690][ T6934] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 169.633938][ T6943] loop4: detected capacity change from 0 to 512 [ 169.685612][ T6941] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 169.696945][ T6941] EXT4-fs (loop0): Remounting filesystem read-only [ 169.725003][ T6943] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 169.742890][ T6943] EXT4-fs (loop4): invalid journal inode [ 169.744127][ T6943] EXT4-fs (loop4): can't get journal size [ 169.748304][ T6943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c119, mo2=0002] [ 169.766050][ T6943] System zones: 1-12, 13-13 [ 169.770876][ T6946] loop6: detected capacity change from 0 to 512 [ 169.787020][ T6943] EXT4-fs (loop4): 1 truncate cleaned up [ 169.788203][ T6943] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,debug,nombcache,,errors=continue. Quota mode: writeback. [ 169.816782][ T6950] udc-core: couldn't find an available UDC or it's busy [ 169.818312][ T6950] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 169.983767][ T4033] Bluetooth: hci0: command 0x0406 tx timeout [ 170.518775][ T6959] virt_wifi0 speed is unknown, defaulting to 1000 [ 171.517948][ T6959] loop7: detected capacity change from 0 to 16384 [ 171.646646][ T6946] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.023874][ T6968] mmap: syz.3.905 (6968) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 172.918330][ T6974] loop7: detected capacity change from 0 to 2048 [ 172.938078][ T6975] loop6: detected capacity change from 0 to 512 [ 172.996180][ T6975] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 173.015163][ T6974] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 173.019310][ T6974] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.033279][ T6975] EXT4-fs (loop6): 1 truncate cleaned up [ 173.034416][ T6975] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 175.162843][ T7005] loop0: detected capacity change from 0 to 128 [ 175.217398][ T7005] EXT4-fs (loop0): Ignoring removed nobh option [ 175.235170][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 175.237353][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'. [ 175.263942][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'. [ 175.274312][ T7005] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 175.361410][ T7015] udc-core: couldn't find an available UDC or it's busy [ 175.362854][ T7015] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 177.503502][ T4037] Bluetooth: Wrong link type (-22) [ 177.572717][ T7050] loop6: detected capacity change from 0 to 512 [ 177.659460][ T7050] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 177.662191][ T7050] EXT4-fs (loop6): orphan cleanup on readonly fs [ 177.673670][ T7050] __quota_error: 15 callbacks suppressed [ 177.673683][ T7050] Quota error (device loop6): v2_read_file_info: Free block number too big (0 >= 0). [ 177.677322][ T7050] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.690214][ T7050] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 177.759491][ T7050] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.935: bg 0: block 40: padding at end of block bitmap is not set [ 177.770253][ T7050] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 177.775846][ T7050] EXT4-fs (loop6): 1 truncate cleaned up [ 177.777161][ T7050] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,quota,nodiscard,,errors=continue. Quota mode: writeback. [ 177.786699][ T7057] usb usb4: usbfs: process 7057 (syz.0.938) did not claim interface 0 before use [ 178.215565][ T7066] loop6: detected capacity change from 0 to 2048 [ 178.928677][ T7066] loop6: detected capacity change from 0 to 1024 [ 179.990776][ T7082] ODEBUG: Out of memory. ODEBUG disabled [ 180.230173][ C0] sched: RT throttling activated [ 180.247866][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 180.678445][ T7092] loop4: detected capacity change from 0 to 1024 [ 180.718393][ T7092] EXT4-fs (loop4): Ignoring removed nobh option [ 180.719906][ T7092] EXT4-fs (loop4): Ignoring removed bh option [ 180.721261][ T7092] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 180.725816][ T7096] loop3: detected capacity change from 0 to 764 [ 181.431496][ T7092] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 181.465565][ T7105] loop7: detected capacity change from 0 to 1024 [ 181.542925][ T7105] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 181.597671][ T7115] loop6: detected capacity change from 0 to 256 [ 181.747943][ T7116] loop3: detected capacity change from 0 to 512 [ 181.912568][ T7128] loop0: detected capacity change from 0 to 512 [ 182.019534][ T7128] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.201456][ T7128] EXT4-fs (loop0): 1 truncate cleaned up [ 182.202807][ T7128] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.475478][ T4108] binder: undelivered death notification, 0000000000000000 [ 182.492000][ T7116] EXT4-fs error (device loop3): __ext4_iget:4872: inode #14: block 1886221359: comm syz.3.958: invalid block [ 182.498070][ T7116] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.958: couldn't read orphan inode 14 (err -117) [ 182.502738][ T7116] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,minixdf,noblock_validity,nouid32,lazytime,init_itable=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 183.500317][ T4142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.647027][ T4142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.918917][ T7145] loop4: detected capacity change from 0 to 512 [ 183.962724][ T4142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.664581][ T7153] loop6: detected capacity change from 0 to 1024 [ 184.744799][ T7145] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.969: casefold flag without casefold feature [ 184.775258][ T7145] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.969: couldn't read orphan inode 15 (err -117) [ 184.785350][ T7145] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.785889][ T7159] loop3: detected capacity change from 0 to 512 [ 184.796623][ T4142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.897805][ T7159] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000005,i_version,,errors=continue. Quota mode: writeback. [ 185.116317][ T7164] loop4: detected capacity change from 0 to 2048 [ 186.099500][ T7164] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.114314][ T7181] loop0: detected capacity change from 0 to 512 [ 186.209103][ T7181] EXT4-fs (loop0): orphan cleanup on readonly fs [ 186.214359][ T7181] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 186.216671][ T7181] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 186.228579][ T7181] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.982: attempt to clear invalid blocks 2 len 1 [ 186.235719][ T7181] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.982: invalid indirect mapped block 1819239214 (level 0) [ 186.239120][ T7181] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.982: invalid indirect mapped block 1819239214 (level 1) [ 186.247934][ T7181] EXT4-fs (loop0): 1 truncate cleaned up [ 186.249297][ T7181] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsv0,jqfmt=vfsv1,resgid=0x0000000000000000,delalloc,usrjquota=..,errors=continue. Quota mode: writeback. [ 186.328933][ T7194] udc-core: couldn't find an available UDC or it's busy [ 186.338584][ T7194] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 187.047547][ T7198] device veth2 entered promiscuous mode [ 187.244289][ T7203] loop6: detected capacity change from 0 to 4096 [ 187.281639][ T7203] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.128464][ T7215] loop0: detected capacity change from 0 to 256 [ 188.169409][ T7219] loop3: detected capacity change from 0 to 256 [ 188.230658][ T7215] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 188.239108][ T7219] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 188.297730][ T7219] exFAT-fs (loop3): hint_cluster is invalid (17) [ 188.352124][ T26] audit: type=1326 audit(188.260:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 188.361930][ T26] audit: type=1326 audit(188.310:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 188.415308][ T26] audit: type=1326 audit(188.370:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 188.419799][ T26] audit: type=1326 audit(188.370:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 188.458803][ T26] audit: type=1326 audit(188.370:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 188.463377][ T26] audit: type=1326 audit(188.370:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 188.468034][ T26] audit: type=1326 audit(188.370:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=437 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 188.472937][ T26] audit: type=1326 audit(188.370:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 188.477291][ T26] audit: type=1326 audit(188.370:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 188.484867][ T26] audit: type=1326 audit(188.370:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7226 comm="syz.4.999" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 190.387210][ T7255] loop7: detected capacity change from 0 to 512 [ 190.628005][ T7255] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 191.655659][ T7283] loop0: detected capacity change from 0 to 1024 [ 191.684254][ T7278] loop3: detected capacity change from 0 to 4096 [ 191.765350][ T7283] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback. [ 191.911970][ T7278] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.965872][ T7293] loop6: detected capacity change from 0 to 8 [ 193.561198][ T7294] tc_dump_action: action bad kind [ 193.636999][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.637070][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.118358][ T7307] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 195.119658][ T7307] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.125749][ T7307] vhci_hcd vhci_hcd.0: Device attached [ 196.560322][ T7316] vhci_hcd: connection closed [ 196.590560][ T1691] vhci_hcd: stop threads [ 196.592674][ T1691] vhci_hcd: release socket [ 196.593595][ T1691] vhci_hcd: disconnect device [ 196.969187][ T7343] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1027'. [ 197.798721][ T7354] cgroup: No subsys list or none specified [ 197.928842][ T145] Bluetooth: hci1: unknown advertising packet type: 0x14 [ 197.944121][ T7368] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 197.947222][ T7368] binder: 7362:7368 ioctl 4018620d 20000040 returned -1 [ 199.464847][ T7391] loop6: detected capacity change from 0 to 164 [ 199.582669][ T7397] loop0: detected capacity change from 0 to 512 [ 199.607914][ T7397] EXT4-fs (loop0): Ignoring removed orlov option [ 199.720313][ T5241] Bluetooth: hci4: command 0x0406 tx timeout [ 199.728773][ T7397] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1045: casefold flag without casefold feature [ 199.732473][ T7397] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1045: couldn't read orphan inode 15 (err -117) [ 199.738623][ T7397] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 199.796757][ T7407] udc-core: couldn't find an available UDC or it's busy [ 199.798341][ T7407] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 199.805896][ T4142] device hsr_slave_0 left promiscuous mode [ 199.868480][ T4142] device hsr_slave_1 left promiscuous mode [ 199.910104][ T7411] loop6: detected capacity change from 0 to 256 [ 199.930983][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.932642][ T4142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.939803][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.943308][ T4142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.953127][ T7411] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 199.956378][ T4142] device bridge_slave_1 left promiscuous mode [ 199.957787][ T4142] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.987186][ T7411] [syz.6.1051/7411] FS: loop6 File: /file1 would truncate fibmap result [ 200.049750][ T4142] device bridge_slave_0 left promiscuous mode [ 200.051248][ T4142] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.075227][ T7405] loop4: detected capacity change from 0 to 512 [ 200.145825][ T7405] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.182081][ T7416] udc-core: couldn't find an available UDC or it's busy [ 200.183597][ T7416] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 200.187674][ T7405] EXT4-fs (loop4): 1 truncate cleaned up [ 200.188966][ T7405] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 200.330978][ T4142] device veth1_macvtap left promiscuous mode [ 200.332366][ T4142] device veth0_macvtap left promiscuous mode [ 200.333545][ T4142] device veth1_vlan left promiscuous mode [ 200.334807][ T4142] device veth0_vlan left promiscuous mode [ 201.974285][ T4142] team0 (unregistering): Port device team_slave_1 removed [ 202.008968][ T4142] team0 (unregistering): Port device team_slave_0 removed [ 202.025567][ T4142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.076685][ T4142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.222266][ T7446] loop7: detected capacity change from 0 to 8 [ 202.298219][ T4142] bond0 (unregistering): Released all slaves [ 202.316765][ T7446] SQUASHFS error: zlib decompression failed, data probably corrupt [ 202.318380][ T7446] SQUASHFS error: Failed to read block 0x9b: -5 [ 202.319685][ T7446] SQUASHFS error: Unable to read metadata cache entry [99] [ 202.322798][ T7446] SQUASHFS error: Unable to read inode 0x127 [ 202.613369][ T7457] loop6: detected capacity change from 0 to 2048 [ 202.629323][ T7465] input: syz0 as /devices/virtual/input/input25 [ 202.688783][ T7457] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 202.698680][ T7474] loop3: detected capacity change from 0 to 512 [ 202.704978][ T7457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.751607][ T7474] EXT4-fs (loop3): Ignoring removed oldalloc option [ 202.758090][ T7474] EXT4-fs (loop3): inline encryption not supported [ 202.759524][ T7474] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.852251][ T7474] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1077: bg 0: block 64: padding at end of block bitmap is not set [ 202.870766][ T7474] Quota error (device loop3): write_blk: dquota write failed [ 202.872415][ T7474] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 202.874461][ T7474] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.1077: Failed to acquire dquot type 0 [ 202.930565][ T7474] EXT4-fs (loop3): 1 truncate cleaned up [ 202.931751][ T7474] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,delalloc,noload,delalloc,noload,mb_optimize_scan=0x0000000000000001,lazytime,,errors=continue. Quota mode: writeback. [ 204.277340][ T7530] loop4: detected capacity change from 0 to 1024 [ 204.420354][ T145] Bluetooth: hci2: wrong event for mode 0 [ 204.474030][ T7530] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 204.574346][ T7544] udc-core: couldn't find an available UDC or it's busy [ 204.577666][ T7544] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 204.917163][ T1535] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 205.040588][ T7553] loop4: detected capacity change from 0 to 8192 [ 205.106760][ T7561] loop3: detected capacity change from 0 to 512 [ 205.316634][ T7561] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.358258][ T7561] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes [ 205.501219][ T1535] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.506584][ T1535] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.509364][ T1535] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 206.170475][ T1535] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.172448][ T1535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 206.174107][ T1535] usb 1-1: SerialNumber: syz [ 207.182230][ T1535] usb 1-1: USB disconnect, device number 20 [ 207.447283][ T7602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.264022][ T7615] usb usb7: usbfs: process 7615 (syz.6.1115) did not claim interface 6 before use [ 208.488709][ T7621] loop4: detected capacity change from 0 to 512 [ 208.510475][ T7623] loop6: detected capacity change from 0 to 2048 [ 209.352675][ T7621] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.402933][ T7623] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.407483][ T7621] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz.4.1117: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 209.459636][ T7621] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz.4.1117: directory missing '.' [ 210.995545][ T7687] udc-core: couldn't find an available UDC or it's busy [ 211.005710][ T7687] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 212.967569][ T7711] loop0: detected capacity change from 0 to 256 [ 213.542161][ T7714] 9pnet: Insufficient options for proto=fd [ 213.665307][ T7714] udc-core: couldn't find an available UDC or it's busy [ 213.666829][ T7714] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 213.992343][ T7735] loop6: detected capacity change from 0 to 128 [ 215.237416][ T7754] udc-core: couldn't find an available UDC or it's busy [ 215.238963][ T7754] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 215.558411][ T7759] loop6: detected capacity change from 0 to 8192 [ 215.828651][ T7791] loop7: detected capacity change from 0 to 1024 [ 215.919799][ T7791] EXT4-fs (loop7): mounted filesystem without journal. Opts: data_err=abort,noinit_itable,,errors=continue. Quota mode: none. [ 217.549309][ T7809] loop6: detected capacity change from 0 to 2048 [ 218.398704][ T7809] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 218.400906][ T7809] UDF-fs: Scanning with blocksize 512 failed [ 218.405189][ T7809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.457187][ T7816] loop3: detected capacity change from 0 to 8192 [ 218.548879][ T7816] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.677152][ T7834] loop7: detected capacity change from 0 to 1024 [ 218.734068][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1167'. [ 218.818280][ T7841] loop4: detected capacity change from 0 to 512 [ 218.878896][ T7841] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 218.880772][ T7841] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 218.884115][ T7841] System zones: 0-1, 15-15, 18-18, 34-34 [ 218.885991][ T7841] EXT4-fs (loop4): orphan cleanup on readonly fs [ 218.887344][ T7841] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 218.889201][ T7841] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 219.012975][ T7841] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 219.015203][ T7841] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1172: bg 0: block 40: padding at end of block bitmap is not set [ 219.026252][ T7841] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 219.031722][ T7841] EXT4-fs (loop4): 1 truncate cleaned up [ 219.032891][ T7841] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.230633][ T7862] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 220.232743][ T7862] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 223.207413][ T7914] process 'syz.0.1191' launched './file0' with NULL argv: empty string added [ 223.838823][ T7928] loop6: detected capacity change from 0 to 16 [ 224.758487][ T7928] erofs: (device loop6): mounted with root inode @ nid 36. [ 225.095802][ T7937] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1202'. [ 225.881890][ T7940] loop7: detected capacity change from 0 to 128 [ 226.021956][ T7940] EXT4-fs (loop7): mounted filesystem without journal. Opts: data_err=abort,,errors=continue. Quota mode: none. [ 227.809340][ T7973] syz.6.1216 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 227.995179][ T7983] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 228.107823][ T7986] loop4: detected capacity change from 0 to 8 [ 228.235433][ T7986] SQUASHFS error: Failed to read block 0x2d7: -5 [ 228.248912][ T7986] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 229.689546][ T8009] raw_sendmsg: syz.4.1226 forgot to set AF_INET. Fix it! [ 230.292600][ T8017] loop3: detected capacity change from 0 to 2048 [ 230.390785][ T8017] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.521780][ T8024] loop7: detected capacity change from 0 to 1764 [ 230.589733][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 231.309579][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 231.358101][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1239'. [ 231.377769][ T8054] udc-core: couldn't find an available UDC or it's busy [ 231.379192][ T8054] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 231.379359][ T8053] usb usb8: usbfs: process 8053 (syz.7.1240) did not claim interface 0 before use [ 231.391654][ T8052] loop3: detected capacity change from 0 to 2048 [ 231.441201][ T8058] binder: 8057:8058 BC_ACQUIRE_DONE node 24 has no pending acquire request [ 231.443478][ T8058] binder: 8057:8058 got reply transaction with no transaction stack [ 231.445336][ T8058] binder: 8057:8058 transaction failed 29201/-71, size 0-0 line 2822 [ 231.447739][ T4072] binder: undelivered TRANSACTION_ERROR: 29201 [ 231.605700][ T8052] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 232.424575][ T8052] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=,. Quota mode: writeback. [ 232.460651][ T8052] udc-core: couldn't find an available UDC or it's busy [ 232.462061][ T8052] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.487808][ T26] audit: type=1326 audit(232.440:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.0.1246" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a07aba8 code=0x0 [ 232.545563][ T8085] loop4: detected capacity change from 0 to 256 [ 232.591918][ T8085] FAT-fs (loop4): Unrecognized mount option "euid=00000000000000000000" or missing value [ 232.733984][ T8099] loop6: detected capacity change from 0 to 512 [ 232.818073][ T8099] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.812577][ T4072] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.267533][ T8180] binder: 8179:8180 ioctl 400c620e 20003240 returned -22 [ 236.277608][ T8181] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1270'. [ 236.279752][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1270'. [ 236.335328][ T8185] loop3: detected capacity change from 0 to 512 [ 236.531379][ T8185] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1272: casefold flag without casefold feature [ 236.534420][ T8185] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1272: couldn't read orphan inode 15 (err -117) [ 236.539945][ T8185] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.225957][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 238.283534][ T26] audit: type=1326 audit(238.240:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 238.310557][ T26] audit: type=1326 audit(238.270:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 238.315997][ T26] audit: type=1326 audit(238.270:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 238.328404][ T26] audit: type=1326 audit(238.270:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 238.333454][ T8223] loop4: detected capacity change from 0 to 256 [ 238.337461][ T8227] netlink: 'syz.0.1283': attribute type 4 has an invalid length. [ 238.347704][ T26] audit: type=1326 audit(238.280:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffa80feba8 code=0x7ffc0000 [ 238.373156][ T26] audit: type=1326 audit(238.280:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa80febdc code=0x7ffc0000 [ 238.379244][ T26] audit: type=1326 audit(238.280:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffa80fd270 code=0x7ffc0000 [ 238.418457][ T26] audit: type=1326 audit(238.280:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffa80fec4c code=0x7ffc0000 [ 238.454736][ T26] audit: type=1326 audit(238.280:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa80fd0d4 code=0x7ffc0000 [ 238.459429][ T26] audit: type=1326 audit(238.280:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8222 comm="syz.4.1282" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa80fe6d0 code=0x7ffc0000 [ 241.227674][ T8293] loop6: detected capacity change from 0 to 512 [ 242.921387][ T8293] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1303: casefold flag without casefold feature [ 242.924465][ T8293] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1303: couldn't read orphan inode 15 (err -117) [ 242.927159][ T8293] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.205910][ T8321] loop3: detected capacity change from 0 to 512 [ 243.315260][ T8327] loop4: detected capacity change from 0 to 1024 [ 243.329799][ T8321] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.510886][ T8335] udc-core: couldn't find an available UDC or it's busy [ 243.512402][ T8335] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 243.547780][ T8338] loop3: detected capacity change from 0 to 512 [ 243.581156][ T8338] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1313: invalid indirect mapped block 4294967295 (level 1) [ 243.599000][ T8338] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1313: invalid indirect mapped block 4294967295 (level 1) [ 243.609734][ T8338] EXT4-fs (loop3): 2 truncates cleaned up [ 243.611121][ T8338] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.639304][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.640914][ T8338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.077138][ T8350] loop7: detected capacity change from 0 to 512 [ 244.456475][ T8350] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 244.685914][ T8350] EXT4-fs (loop7): 1 truncate cleaned up [ 244.686965][ T8350] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.176317][ T8364] udc-core: couldn't find an available UDC or it's busy [ 246.176340][ T8364] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 246.739752][ T8371] udc-core: couldn't find an available UDC or it's busy [ 246.741551][ T8371] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 247.173612][ T8369] loop4: detected capacity change from 0 to 8 [ 247.186485][ T8373] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1324'. [ 247.188391][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 247.282685][ T8369] attempt to access beyond end of device [ 247.282685][ T8369] loop4: rw=2048, want=36028797018963976, limit=8 [ 247.285220][ T8369] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 247.286801][ T8369] unable to read xattr id index table [ 247.313545][ T8376] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1325'. [ 247.534070][ T8387] loop3: detected capacity change from 0 to 512 [ 247.624812][ T8391] loop7: detected capacity change from 0 to 512 [ 247.648820][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.869459][ T8391] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000008,minixdf,,errors=continue. Quota mode: writeback. [ 248.038505][ T8400] loop6: detected capacity change from 0 to 512 [ 248.783906][ T8400] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 248.809078][ T8400] EXT4-fs (loop6): 1 truncate cleaned up [ 248.810336][ T8400] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.907776][ T8412] udc-core: couldn't find an available UDC or it's busy [ 249.909265][ T8412] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 250.070586][ T8414] loop6: detected capacity change from 0 to 1764 [ 250.244707][ T8423] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.929073][ T8437] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.970720][ T8437] loop7: detected capacity change from 0 to 16384 [ 252.268328][ T8442] udc-core: couldn't find an available UDC or it's busy [ 252.269786][ T8442] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 252.591491][ T8454] udc-core: couldn't find an available UDC or it's busy [ 252.593049][ T8454] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 252.619196][ T8458] udc-core: couldn't find an available UDC or it's busy [ 252.621789][ T8458] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 253.693647][ T8464] udc-core: couldn't find an available UDC or it's busy [ 253.695257][ T8464] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 254.797232][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.798483][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.839440][ T8468] loop4: detected capacity change from 0 to 2048 [ 255.046735][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1360'. [ 255.099031][ T8468] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.114813][ T8468] fs-verity: sha512 using implementation "sha512-arm64" [ 256.047188][ T8505] udc-core: couldn't find an available UDC or it's busy [ 256.064202][ T8505] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 256.301988][ T8512] loop4: detected capacity change from 0 to 128 [ 256.491958][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1367'. [ 257.063889][ T8512] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 257.578462][ T8526] loop7: detected capacity change from 0 to 256 [ 258.330979][ T8532] udc-core: couldn't find an available UDC or it's busy [ 258.337132][ T8532] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 259.396601][ T8540] udc-core: couldn't find an available UDC or it's busy [ 259.415610][ T8540] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 259.577784][ T8543] loop6: detected capacity change from 0 to 256 [ 259.681117][ T8543] exfat: Bad value for 'uid' [ 259.946168][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 260.580298][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 260.580312][ T26] audit: type=1326 audit(260.510:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db48ba8 code=0x7ffc0000 [ 260.586005][ T26] audit: type=1326 audit(260.510:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db48ba8 code=0x7ffc0000 [ 260.620924][ T26] audit: type=1326 audit(260.570:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8db48ba8 code=0x7ffc0000 [ 260.630498][ T26] audit: type=1326 audit(260.570:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db48ba8 code=0x7ffc0000 [ 260.635078][ T26] audit: type=1326 audit(260.570:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db48ba8 code=0x7ffc0000 [ 260.690359][ T26] audit: type=1326 audit(260.580:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=438 compat=0 ip=0xffff8db48ba8 code=0x7ffc0000 [ 260.720944][ T26] audit: type=1326 audit(260.580:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db48ba8 code=0x7ffc0000 [ 260.731240][ T26] audit: type=1326 audit(260.580:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.3.1383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db48ba8 code=0x7ffc0000 [ 260.822165][ T8563] binder: 8562:8563 tried to acquire reference to desc 0, got 1 instead [ 260.824921][ T8564] udc-core: couldn't find an available UDC or it's busy [ 260.826363][ T8564] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 260.833683][ T8563] binder: 8562:8563 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 260.835926][ T8563] binder: 8562:8563 unknown command 0 [ 260.837127][ T8563] binder: 8562:8563 ioctl c0306201 200001c0 returned -22 [ 260.886605][ T8567] udc-core: couldn't find an available UDC or it's busy [ 260.888261][ T8567] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 261.511351][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 262.206768][ T8583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1397'. [ 262.243637][ T8589] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1402'. [ 263.420479][ T8596] device veth3 entered promiscuous mode [ 263.922660][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 264.571032][ T8623] netlink: 'syz.6.1414': attribute type 1 has an invalid length. [ 264.572783][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1414'. [ 264.628008][ T4037] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 265.761627][ T8659] udc-core: couldn't find an available UDC or it's busy [ 265.763075][ T8659] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 265.765407][ T8660] udc-core: couldn't find an available UDC or it's busy [ 265.766936][ T8660] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 266.024800][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 266.759429][ T8670] loop6: detected capacity change from 0 to 2048 [ 266.900824][ T8670] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 266.923600][ T8670] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 266.949689][ T8682] udc-core: couldn't find an available UDC or it's busy [ 266.951305][ T8682] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 266.960787][ T8670] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 266.963607][ T8670] EXT4-fs (loop6): This should not happen!! Data will be lost [ 266.963607][ T8670] [ 266.965544][ T8670] EXT4-fs (loop6): Total free blocks count 0 [ 266.966810][ T8670] EXT4-fs (loop6): Free/Dirty block details [ 266.968006][ T8670] EXT4-fs (loop6): free_blocks=2415919104 [ 266.969180][ T8670] EXT4-fs (loop6): dirty_blocks=16 [ 266.990594][ T8670] EXT4-fs (loop6): Block reservation details [ 266.991983][ T8670] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 267.863389][ T350] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.903297][ T8696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1444'. [ 267.923069][ T8698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 267.979047][ T350] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.019293][ T8706] loop6: detected capacity change from 0 to 128 [ 268.045942][ T350] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.078940][ T8706] attempt to access beyond end of device [ 268.078940][ T8706] loop6: rw=2051, want=383, limit=128 [ 268.114727][ T350] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.153860][ T8717] loop7: detected capacity change from 0 to 512 [ 268.264273][ T8717] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,errors=remount-ro,. Quota mode: writeback. [ 268.275787][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1465'. [ 268.277771][ T8726] IPv6: NLM_F_REPLACE set, but no existing node found! [ 268.467099][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 268.681284][ T350] tipc: Left network mode [ 268.773280][ T13] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 268.776070][ T13] Bluetooth: hci0: Injecting HCI hardware error event [ 268.780381][ T145] Bluetooth: hci0: hardware error 0x00 [ 269.238923][ T8747] loop4: detected capacity change from 0 to 16 [ 269.612987][ T8747] erofs: (device loop4): mounted with root inode @ nid 36. [ 269.815267][ T8757] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1466'. [ 269.902732][ T8766] udc-core: couldn't find an available UDC or it's busy [ 269.918406][ T8766] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 270.118825][ T8786] loop7: detected capacity change from 0 to 764 [ 270.136534][ T8786] rock: directory entry would overflow storage [ 270.142375][ T8786] rock: sig=0x4654, size=5, remaining=4 [ 270.183944][ T8786] rock: directory entry would overflow storage [ 270.185452][ T8786] rock: sig=0x4f50, size=4, remaining=3 [ 270.186642][ T8786] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 270.219046][ T8792] loop4: detected capacity change from 0 to 128 [ 270.266034][ T8792] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777000000000000000000030xffffffffffffffff˙" or missing value [ 270.328755][ T8799] loop7: detected capacity change from 0 to 2048 [ 271.385053][ T8799] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.622821][ T8833] loop4: detected capacity change from 0 to 128 [ 271.705968][ T8833] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 272.150092][ T8852] loop3: detected capacity change from 0 to 1024 [ 272.972487][ T8852] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.991017][ T8852] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 272.995912][ T8852] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 272.998804][ T8852] EXT4-fs (loop3): This should not happen!! Data will be lost [ 272.998804][ T8852] [ 273.001437][ T8852] EXT4-fs (loop3): Total free blocks count 0 [ 273.002664][ T8852] EXT4-fs (loop3): Free/Dirty block details [ 273.003839][ T8852] EXT4-fs (loop3): free_blocks=68451041280 [ 273.005032][ T8852] EXT4-fs (loop3): dirty_blocks=80 [ 273.006230][ T8852] EXT4-fs (loop3): Block reservation details [ 273.007498][ T8852] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 273.091220][ T8852] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 273.093779][ T8852] EXT4-fs (loop3): This should not happen!! Data will be lost [ 273.093779][ T8852] [ 273.097240][ T8866] udc-core: couldn't find an available UDC or it's busy [ 273.098750][ T8866] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 273.492819][ T8885] loop6: detected capacity change from 0 to 256 [ 273.584834][ T8885] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 273.653025][ T350] device hsr_slave_0 left promiscuous mode [ 273.691119][ T350] device hsr_slave_1 left promiscuous mode [ 273.757717][ T8898] loop6: detected capacity change from 0 to 1024 [ 273.942519][ T8898] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 273.969094][ T8898] hfsplus: xattr search failed [ 273.983620][ T350] device veth1_macvtap left promiscuous mode [ 273.984967][ T350] device veth0_macvtap left promiscuous mode [ 273.986305][ T350] device veth1_vlan left promiscuous mode [ 273.987435][ T350] device veth0_vlan left promiscuous mode [ 275.881744][ T8928] netlink: 276 bytes leftover after parsing attributes in process `syz.6.1511'. [ 276.126831][ T350] bond0 (unregistering): Released all slaves [ 276.277626][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1517'. [ 276.376161][ T4040] Bluetooth: hci0: unexpected event for opcode 0x040e [ 276.417152][ T8953] loop3: detected capacity change from 0 to 128 [ 276.714901][ T8975] loop3: detected capacity change from 0 to 8 [ 277.653652][ T26] audit: type=1326 audit(277.610:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.6.1537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8364dba8 code=0x7ffc0000 [ 277.658175][ T26] audit: type=1326 audit(277.610:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.6.1537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8364dba8 code=0x7ffc0000 [ 277.680915][ T26] audit: type=1326 audit(277.610:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.6.1537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8364dba8 code=0x7ffc0000 [ 277.685369][ T26] audit: type=1326 audit(277.610:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.6.1537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8364dba8 code=0x7ffc0000 [ 277.710582][ T8989] device veth0_to_team entered promiscuous mode [ 277.777018][ T26] audit: type=1326 audit(277.610:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.6.1537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8364dba8 code=0x7ffc0000 [ 277.792325][ T26] audit: type=1326 audit(277.610:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.6.1537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8364dba8 code=0x7ffc0000 [ 277.796814][ T26] audit: type=1326 audit(277.610:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.6.1537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8364dba8 code=0x7ffc0000 [ 277.860312][ T26] audit: type=1326 audit(277.610:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.6.1537" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8364dba8 code=0x7ffc0000 [ 277.907003][ T9006] loop3: detected capacity change from 0 to 512 [ 278.743075][ T9006] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 279.061765][ T9006] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e00ce01c, mo2=0002] [ 279.065028][ T9006] System zones: 1-12 [ 279.275235][ T9006] EXT4-fs (loop3): 1 orphan inode deleted [ 279.276449][ T9006] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,max_batch_time=0x0000000000005314,usrquota,nouid32,debug,resuid=0x0000000000000000,acl,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 279.400095][ T4071] hid (null): global environment stack underflow [ 279.401888][ T4071] hid (null): global environment stack underflow [ 279.403239][ T4071] hid (null): unknown global tag 0xd [ 279.407875][ T4071] hid-generic 0001:000A:0FFF.0001: global environment stack underflow [ 279.409806][ T4071] hid-generic 0001:000A:0FFF.0001: item 0 0 1 11 parsing failed [ 279.450445][ T4071] hid-generic: probe of 0001:000A:0FFF.0001 failed with error -22 [ 279.500620][ T9030] loop6: detected capacity change from 0 to 512 [ 279.575331][ T9038] loop3: detected capacity change from 0 to 512 [ 279.876927][ T9049] loop4: detected capacity change from 0 to 8 [ 279.918147][ T9049] attempt to access beyond end of device [ 279.918147][ T9049] loop4: rw=2048, want=36028797018963976, limit=8 [ 279.920961][ T9049] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 279.922646][ T9049] unable to read xattr id index table [ 280.740460][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.741976][ T9055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.753425][ T9030] loop6: detected capacity change from 0 to 512 [ 280.841619][ T9038] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 281.067722][ T9021] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 281.506821][ T9090] udc-core: couldn't find an available UDC or it's busy [ 281.520257][ T9090] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 281.696759][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1565'. [ 282.338394][ T9097] netlink: 'syz.4.1570': attribute type 1 has an invalid length. [ 282.340105][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1570'. [ 282.461522][ T9106] loop6: detected capacity change from 0 to 512 [ 282.566920][ T9106] EXT4-fs (loop6): Ignoring removed oldalloc option [ 282.619169][ T9106] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1573: invalid indirect mapped block 234881024 (level 0) [ 282.623447][ T9106] EXT4-fs (loop6): 1 truncate cleaned up [ 282.624734][ T9106] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,errors=continue,,errors=continue. Quota mode: none. [ 282.703137][ T9119] loop7: detected capacity change from 0 to 256 [ 282.760683][ T9119] exfat: Unknown parameter 'sys_tz' [ 283.146709][ T9139] udc-core: couldn't find an available UDC or it's busy [ 283.160407][ T9139] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 283.196019][ T9145] udc-core: couldn't find an available UDC or it's busy [ 283.221755][ T9145] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 283.705835][ T9167] loop4: detected capacity change from 0 to 512 [ 283.791053][ T9167] EXT4-fs (loop4): orphan cleanup on readonly fs [ 283.794074][ T9167] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (2048 > 1024). [ 283.797376][ T9167] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 283.810827][ T9167] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 283.821135][ T9167] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1590: bg 0: block 64: padding at end of block bitmap is not set [ 283.824714][ T9167] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 283.843641][ T9167] EXT4-fs (loop4): 1 truncate cleaned up [ 283.844819][ T9167] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.955938][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1592'. [ 283.988450][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1594'. [ 284.248084][ T9196] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1600'. [ 284.298269][ T9199] udc-core: couldn't find an available UDC or it's busy [ 284.299787][ T9199] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 285.341043][ T9213] loop7: detected capacity change from 0 to 16 [ 285.462777][ T9221] loop4: detected capacity change from 0 to 128 [ 285.492437][ T9213] erofs: (device loop7): mounted with root inode @ nid 36. [ 285.506942][ T9221] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.795697][ T9242] input: syz0 as /devices/virtual/input/input28 [ 286.133804][ T26] audit: type=1326 audit(286.090:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.0.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a07aba8 code=0x7ffc0000 [ 286.138470][ T26] audit: type=1326 audit(286.090:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.0.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=432 compat=0 ip=0xffff9a07aba8 code=0x7ffc0000 [ 286.162765][ T26] audit: type=1326 audit(286.090:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9266 comm="syz.0.1633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a07aba8 code=0x7ffc0000 [ 287.205683][ T9285] device veth2 entered promiscuous mode [ 287.872083][ T9321] loop4: detected capacity change from 0 to 2048 [ 288.061502][ T9324] loop3: detected capacity change from 0 to 1024 [ 288.752814][ T9321] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 288.779351][ T9321] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 288.816263][ T9321] EXT4-fs (loop4): Remounting filesystem read-only [ 288.895832][ T9324] EXT4-fs (loop3): Test dummy encryption mode enabled [ 288.926330][ T9332] device syzkaller0 entered promiscuous mode [ 288.933221][ T9324] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000006,stripe=0x0000000000000007,noblock_validity,noinit_itable,barrier=0x0000000000000005,max_batch_time=0x0000000000000004,data_err=abort,,errors=continue. Quota mode: writeback. [ 289.028682][ T9340] device bridge1 entered promiscuous mode [ 289.090113][ T9347] udc-core: couldn't find an available UDC or it's busy [ 289.091720][ T9347] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 289.096909][ T9347] udc-core: couldn't find an available UDC or it's busy [ 289.098366][ T9347] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 289.887228][ T9322] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 289.913275][ T9322] udc-core: couldn't find an available UDC or it's busy [ 289.914642][ T9322] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 289.926659][ T9358] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1651'. [ 289.978056][ T9362] loop4: detected capacity change from 0 to 128 [ 289.994141][ T9362] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 290.003334][ T9362] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 290.006577][ T9362] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 290.009535][ T9362] UDF-fs: Scanning with blocksize 512 failed [ 290.015824][ T9362] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 290.018749][ T9362] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 290.021054][ T9362] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 290.022802][ T9362] UDF-fs: Scanning with blocksize 1024 failed [ 290.024910][ T9362] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 290.027721][ T9362] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 290.030094][ T9362] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 290.041574][ T9362] UDF-fs: Scanning with blocksize 2048 failed [ 290.043434][ T9362] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 290.046153][ T9362] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 290.048190][ T9362] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 290.049785][ T9362] UDF-fs: Scanning with blocksize 4096 failed [ 290.055569][ T9362] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 290.083831][ T9372] loop6: detected capacity change from 0 to 128 [ 290.238108][ T9385] udc-core: couldn't find an available UDC or it's busy [ 290.244145][ T9385] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 290.335529][ T9389] loop4: detected capacity change from 0 to 8 [ 291.535783][ T9406] loop3: detected capacity change from 0 to 2048 [ 291.624900][ T9406] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.645809][ T9406] fs-verity: sha256 using implementation "sha256-ce" [ 291.745127][ T9422] loop4: detected capacity change from 0 to 512 [ 291.767617][ T9424] loop6: detected capacity change from 0 to 1024 [ 291.820438][ T9422] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1676: casefold flag without casefold feature [ 291.825052][ T9422] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1676: couldn't read orphan inode 15 (err -117) [ 291.829408][ T9428] loop3: detected capacity change from 0 to 256 [ 291.839155][ T9424] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 291.840778][ T9424] hfsplus: xattr search failed [ 291.841908][ T9422] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,delalloc,norecovery,journal_dev=0x0000000000000256,,errors=continue. Quota mode: writeback. [ 291.904098][ T9428] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 291.906455][ T9428] FAT-fs (loop3): Filesystem has been set read-only [ 292.387946][ T9447] loop7: detected capacity change from 0 to 1024 [ 292.583395][ T9447] EXT4-fs (loop7): Test dummy encryption mode enabled [ 292.777320][ T9447] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000006,stripe=0x0000000000000007,noblock_validity,noinit_itable,barrier=0x0000000000000005,max_batch_time=0x0000000000000004,data_err=abort,,errors=continue. Quota mode: writeback. [ 292.993719][ T9440] udc-core: couldn't find an available UDC or it's busy [ 292.995392][ T9440] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 293.073723][ T9451] loop6: detected capacity change from 0 to 512 [ 293.118663][ T9451] EXT2-fs (loop6): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 293.139091][ T9451] EXT2-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended [ 293.141681][ T9451] EXT2-fs (loop6): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 293.166035][ T9451] attempt to access beyond end of device [ 293.166035][ T9451] loop6: rw=0, want=1022040, limit=512 [ 293.177219][ T9451] attempt to access beyond end of device [ 293.177219][ T9451] loop6: rw=0, want=1022040, limit=512 [ 293.753383][ T9477] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1697'. [ 293.943935][ T9485] loop6: detected capacity change from 0 to 1764 [ 294.016771][ T9489] loop3: detected capacity change from 0 to 1024 [ 294.151602][ T9489] EXT4-fs (loop3): Ignoring removed bh option [ 294.547727][ T9489] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,nodelalloc,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x0000000000000003,journal_dev=0x0000000000000007,nombcache,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_lock,,errors=continue. Quota mode: none. [ 295.419902][ T9514] loop4: detected capacity change from 0 to 128 [ 295.781969][ T9514] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.294113][ T9521] loop6: detected capacity change from 0 to 8 [ 297.631097][ T9521] SQUASHFS error: Unable to read inode 0xe3 [ 297.836311][ T9546] loop6: detected capacity change from 0 to 256 [ 297.852392][ T9545] loop7: detected capacity change from 0 to 1024 [ 297.926053][ T9549] loop4: detected capacity change from 0 to 1024 [ 297.930550][ T9541] loop3: detected capacity change from 0 to 4096 [ 297.965394][ T9549] EXT4-fs (loop4): Ignoring removed bh option [ 297.966894][ T9549] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 297.991626][ T9545] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,nodelalloc,barrier=0x0000000000000002,dioread_lock,noblock_validity,dioread_nolock,journal_dev=0x0000000000000007,nombcache,max_batch_time=0x0000000000000002,user_xattr,grpid,dioread_lock,,errors=continue. Quota mode: none. [ 298.018679][ T9541] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 298.024748][ T9549] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,i_version,dioread_lock,noblock_validity,inode_readahead_blks=0x0000000000200000,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 298.062821][ T26] audit: type=1326 audit(298.020:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9554 comm="syz.6.1723" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8364dba8 code=0x0 [ 298.155688][ T9549] udc-core: couldn't find an available UDC or it's busy [ 298.164372][ T9549] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 299.682635][ T9570] loop7: detected capacity change from 0 to 1024 [ 299.725247][ T9570] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 299.727661][ T9570] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 299.740886][ T9570] JBD2: no valid journal superblock found [ 299.742159][ T9570] EXT4-fs (loop7): error loading journal [ 299.760334][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1726'. [ 300.088994][ T9588] udc-core: couldn't find an available UDC or it's busy [ 300.139134][ T9588] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 301.246743][ T9610] virt_wifi0 speed is unknown, defaulting to 1000 [ 301.440860][ T9627] loop7: detected capacity change from 0 to 512 [ 301.492633][ T9632] loop6: detected capacity change from 0 to 256 [ 301.513132][ T26] audit: type=1326 audit(301.470:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db48ba8 code=0x7ffc0000 [ 301.518551][ T26] audit: type=1326 audit(301.470:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=7 compat=0 ip=0xffff8db48ba8 code=0x7ffc0000 [ 301.538668][ T26] audit: type=1326 audit(301.490:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9628 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db48ba8 code=0x7ffc0000 [ 301.600697][ T9627] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.1743: inode #1: comm syz.7.1743: iget: illegal inode # [ 301.609160][ T9627] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.1743: error while reading EA inode 1 err=-117 [ 301.657784][ T9627] EXT4-fs (loop7): 1 orphan inode deleted [ 301.659032][ T9627] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,nojournal_checksum,minixdf,resgid=0x0000000000000000,nobarrier,usrjquota=,,errors=continue. Quota mode: none. [ 302.646262][ T4108] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 302.648982][ T4108] Bluetooth: hci4: Injecting HCI hardware error event [ 302.652777][ T145] Bluetooth: hci4: hardware error 0x00 [ 302.749350][ T9678] loop7: detected capacity change from 0 to 128 [ 302.825462][ T9683] virt_wifi0 speed is unknown, defaulting to 1000 [ 303.157877][ T9703] loop4: detected capacity change from 0 to 2048 [ 304.072367][ T9703] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 304.542279][ T9721] loop7: detected capacity change from 0 to 1024 [ 304.724935][ T5308] hfsplus: small file entry [ 304.741563][ T5308] hfsplus: small file entry [ 305.038373][ T9759] loop3: detected capacity change from 0 to 512 [ 305.087831][ T9759] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 305.108992][ T9748] virt_wifi0 speed is unknown, defaulting to 1000 [ 305.401763][ T9782] loop6: detected capacity change from 0 to 8 [ 306.378781][ T9789] loop3: detected capacity change from 0 to 2048 [ 306.487995][ T9789] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 306.513819][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1788'. [ 306.515721][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1788'. [ 306.526244][ T9789] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 306.531336][ T9789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.964410][ T9824] IPv6: Can't replace route, no match found [ 307.017484][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1795'. [ 307.178493][ T9850] loop6: detected capacity change from 0 to 1024 [ 307.300642][ T9811] virt_wifi0 speed is unknown, defaulting to 1000 [ 307.325210][ T9850] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,bsddf,nojournal_checksum,norecovery,nombcache,i_version,nodelalloc,journal_ioprio=0x0000000000000003,auto_da_alloc=0x0000000000800343,,errors=continue. Quota mode: none. [ 308.069648][ T9830] loop4: detected capacity change from 0 to 1024 [ 308.166901][ T9830] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 308.173479][ T9830] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 308.187320][ T9830] JBD2: no valid journal superblock found [ 308.188539][ T9830] EXT4-fs (loop4): error loading journal [ 413.330166][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 413.331607][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4190/1:b..l [ 413.333647][ C1] (detected by 1, t=10502 jiffies, g=26841, q=123) [ 413.334918][ C1] task:kworker/u4:13 state:R running task stack: 0 pid: 4190 ppid: 2 flags:0x00000008 [ 413.337935][ C1] Workqueue: netns cleanup_net [ 413.338957][ C1] Call trace: [ 413.339612][ C1] __switch_to+0x308/0x588 [ 413.340463][ C1] __schedule+0xf10/0x1e48 [ 413.341426][ C1] preempt_schedule_irq+0x90/0x274 [ 413.342561][ C1] arm64_preempt_schedule_irq+0x174/0x2c4 [ 413.343648][ C1] el1_interrupt+0x40/0x58 [ 413.344477][ C1] el1h_64_irq_handler+0x18/0x24 [ 413.345434][ C1] el1h_64_irq+0x78/0x7c [ 413.346258][ C1] __sanitizer_cov_trace_pc+0x8/0xac [ 413.347322][ C1] dccp_v4_exit_batch+0x20/0x2c [ 413.348324][ C1] cleanup_net+0x5e0/0x9bc [ 413.349218][ C1] process_one_work+0x790/0x11b8 [ 413.350214][ C1] worker_thread+0x910/0x1034 [ 413.351117][ C1] kthread+0x37c/0x45c [ 413.351877][ C1] ret_from_fork+0x10/0x20 [ 413.352736][ C1] rcu: rcu_preempt kthread starved for 10504 jiffies! g26841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 413.354976][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 413.356924][ C1] rcu: RCU grace-period kthread stack dump: [ 413.358158][ C1] task:rcu_preempt state:R running task stack: 0 pid: 15 ppid: 2 flags:0x00000008 [ 413.360401][ C1] Call trace: [ 413.361080][ C1] __switch_to+0x308/0x588 [ 413.361924][ C1] __schedule+0xf10/0x1e48 [ 413.362797][ C1] preempt_schedule_common+0x140/0x260 [ 413.363877][ C1] preempt_schedule+0x64/0x84 [ 413.364837][ C1] _raw_spin_unlock_irqrestore+0x114/0x158 [ 413.366030][ C1] finish_swait+0x170/0x1ac [ 413.366993][ C1] rcu_gp_fqs_loop+0x28c/0x13d4 [ 413.368013][ C1] rcu_gp_kthread+0xc4/0x2c4 [ 413.368896][ C1] kthread+0x37c/0x45c [ 413.369721][ C1] ret_from_fork+0x10/0x20 [ 413.370623][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 413.371826][ C1] Task dump for CPU 0: [ 413.372647][ C1] task:syz.6.1802 state:R running task stack: 0 pid: 9849 ppid: 4520 flags:0x00000001 [ 413.374743][ C1] Call trace: [ 413.375364][ C1] __switch_to+0x308/0x588 [ 413.376250][ C1] 0xffff800021e07860 [ 420.103769][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 420.105240][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.140638][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 420.166104][ T4071] BUG: MAX_LOCKDEP_CHAINS too low! [ 420.167206][ T4071] turning off the locking correctness validator. [ 420.168089][ C0] BUG: workqueue lockup - pool cpus=0 [ 420.168712][ T4071] CPU: 1 PID: 4071 Comm: kworker/1:5 Not tainted 5.15.176-syzkaller #0 [ 420.168728][ C0] node=0 [ 420.168742][ T4071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 420.169814][ C0] flags=0x0 nice=0 [ 420.171631][ T4071] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 420.171659][ T4071] Call trace: [ 420.171662][ T4071] dump_backtrace+0x0/0x530 [ 420.172236][ C0] stuck for 111s! [ 420.174821][ T4071] show_stack+0x2c/0x3c [ 420.175620][ C0] Showing busy workqueues and worker pools: [ 420.177133][ T4071] dump_stack_lvl+0x108/0x170 [ 420.177848][ C0] workqueue events: flags=0x0 [ 420.178850][ T4071] dump_stack+0x1c/0x58 [ 420.179724][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=15/256 refcnt=16 [ 420.179751][ C0] in-flight: 7:pwq_unbound_release_workfn [ 420.179769][ C0] pending: bpf_prog_free_deferred, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, nsim_dev_trap_report_work, psi_avgs_work, vmstat_shepherd, psi_avgs_work, switchdev_deferred_process_work, rht_deferred_worker, ovs_dp_masks_rebalance, bpf_map_free_deferred, free_work [ 420.179890][ C0] workqueue events_long: flags=0x0 [ 420.180586][ T4071] __lock_acquire+0x1b64/0x7638 [ 420.180602][ T4071] lock_acquire+0x240/0x77c [ 420.180612][ T4071] seqcount_lockdep_reader_access+0x11c/0x234 [ 420.181863][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=11/256 refcnt=12 [ 420.181891][ C0] pending: br_fdb_cleanup, defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, defense_work_handler, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup [ 420.181974][ C0] workqueue events_unbound: flags=0x2 [ 420.182871][ T4071] bad_range+0xa8/0x2b4 [ 420.183865][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/512 refcnt=3 [ 420.183889][ C0] in-flight: 4142:call_usermodehelper_exec_work [ 420.183907][ C0] workqueue events_power_efficient: flags=0x82 [ 420.184748][ T4071] get_page_from_freelist+0x3958/0x3b14 [ 420.186367][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 420.186391][ C0] in-flight: 350:neigh_periodic_work, 4484:gc_worker [ 420.186419][ C0] workqueue rcu_gp: flags=0x8 [ 420.187692][ T4071] __alloc_pages+0x20c/0x674 [ 420.194325][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 420.194359][ C0] pending: wait_rcu_exp_gp [ 420.194376][ C0] workqueue netns: flags=0xe000a [ 420.195447][ T4071] alloc_pages+0x368/0x5d4 [ 420.196449][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=4 [ 420.196471][ C0] in-flight: 4190:cleanup_net [ 420.196487][ C0] inactive: cleanup_net [ 420.196498][ C0] workqueue mm_percpu_wq: flags=0x8 [ 420.197439][ T4071] new_slab+0xec/0x56c [ 420.198698][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 420.198725][ C0] pending: vmstat_update [ 420.198745][ C0] workqueue writeback: flags=0x4a [ 420.200341][ T4071] ___slab_alloc+0x6bc/0xdbc [ 420.200356][ T4071] kmem_cache_alloc_node+0x304/0x49c [ 420.200370][ T4071] __alloc_skb+0x174/0x584 [ 420.205156][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 420.205183][ C0] in-flight: 4140:wb_workfn [ 420.205242][ C0] workqueue dm_bufio_cache: flags=0x8 [ 420.206383][ T4071] wg_packet_send_keepalive+0x6c/0x240 [ 420.207293][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 420.207320][ C0] pending: work_fn [ 420.207344][ C0] workqueue mld: flags=0x40008 [ 420.208816][ T4071] wg_packet_handshake_receive_worker+0x594/0xc74 [ 420.210235][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 420.210263][ C0] pending: mld_dad_work [ 420.210286][ C0] inactive: mld_ifc_work [ 420.210301][ C0] workqueue krxrpcd: flags=0x0 [ 420.211507][ T4071] process_one_work+0x790/0x11b8 [ 420.212666][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 420.212693][ C0] pending: rxrpc_peer_keepalive_worker [ 420.212709][ C0] inactive: rxrpc_peer_keepalive_worker, rxrpc_peer_keepalive_worker [ 420.212734][ C0] workqueue bat_events: flags=0xe000a [ 420.214356][ T4071] worker_thread+0x910/0x1034 [ 420.215740][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=47 [ 420.215765][ C0] in-flight: 4143:batadv_tt_purge [ 420.215781][ C0] inactive: batadv_nc_worker, batadv_nc_worker, batadv_nc_worker, batadv_nc_worker, batadv_nc_worker, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_mcast_mla_update, batadv_tt_purge, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_purge_orig, batadv_purge_orig, batadv_purge_orig, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge [ 420.216031][ C0] , batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, batadv_bla_periodic_work, batadv_bla_periodic_work, batadv_dat_purge, batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_bla_periodic_work, batadv_dat_purge, batadv_dat_purge [ 420.216128][ C0] workqueue wg-kex-wg0: flags=0x24 [ 420.216737][ T4071] kthread+0x37c/0x45c [ 420.217682][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 420.217716][ C0] pending: wg_packet_handshake_receive_worker [ 420.217733][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 420.219422][ T4071] ret_from_fork+0x10/0x20 [ 420.220405][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 420.220440][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 420.220467][ C0] workqueue wg-kex-wg1: flags=0x24 [ 420.223960][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 420.224962][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 420.224988][ C0] in-flight: 4071:wg_packet_handshake_receive_worker [ 420.225010][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 420.226075][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.227097][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 420.227122][ C0] in-flight: 5031:wg_packet_tx_worker [ 420.227145][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 420.227166][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 420.227192][ C0] workqueue wg-kex-wg2: flags=0x24 [ 420.309081][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 420.309119][ C0] pending: wg_packet_handshake_receive_worker [ 420.309139][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 420.313173][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 420.313202][ C0] pending: wg_packet_encrypt_worker [ 420.313222][ C0] workqueue wg-kex-wg1: flags=0x24 [ 420.317232][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 420.317262][ C0] pending: wg_packet_handshake_receive_worker [ 420.317278][ C0] workqueue wg-kex-wg2: flags=0x24 [ 420.321365][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 420.321392][ C0] pending: wg_packet_handshake_receive_worker [ 420.321411][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 420.325343][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 420.325367][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 420.325395][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 420.330068][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 420.330094][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 420.330116][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 420.334442][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 420.334469][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 420.334503][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=112s workers=12 idle: 4033 4108 1535 4072 13 5241 4299 4073 4070 4298 4110 [ 420.334576][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=0s workers=10 idle: 5031 21 4069 4722 3322 25 4376 4074 4104 [ 420.334630][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=0s workers=17 idle: 350 4142 4140 4485 4188 4483 1691 136 289 426 9 4189 143 4141 [ 420.353761][ T9811] chnl_net:caif_netlink_parms(): no params data found SYZFAIL: failed to send rpc fd=3 want=648 sent=0 n=-1 (errno 104: Connection reset by peer) [ 421.467215][ T4190] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.536095][ T4190] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.583917][ T4190] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.652925][ T4190] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.834137][ T4190] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.874249][ T4190] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.915186][ T4190] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.954919][ T4190] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0