last executing test programs: 5m50.528070377s ago: executing program 2 (id=167): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x218c5c, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf5, 0x30c, &(0x7f0000000780)="$eJzs3c1rE2kcwPFf3pN2u+lhWZZlFx66sCjSoQl482CRFsSA0jaCFYSpnWrINCmZUIiIzUHw6tlDDx5FEMGbFxGvvfgX+HbrpZ4sWBx5Msk0TYY0rdS29vs5dJ7O8/ye15kyfdpO1889XCwuOMZXNyqa+iwirmdFPHU5/Wb1/b/Tr3/zPldqcnwmk1UqLCLX7z4deVUdvPri95cJWRu+sb6R/bT2z4zIt5nbElYFR5V0XWquXK6GdPB8wSkaSl2xLdOxVKHkWJWqMhv55pxtqQW7vLRUU2ZpfmhgqWI5jjJLNVW0aqpaVtVKTZm3zEJJGYahhgYEIjLsp8JdeaFegfknm64rG3qBEnW97AGl661ELOkdEz/YWxwhHevfs2zXxRERHXuQ3cMB23Sj/vrHWcsTx7v/Pzzq5/7Hr2f62uyl8VxuYkqppMjig+X8ct47evnvBqUgtliyOnVmdst/NNSXSkh/nLyYmxhTDcPy/+JKM35lOR9pxI8vNOMzktbPKW3x0orPePFqZ3xMBtrjs5KWP4Ljs614CbfFx+XUf23xhqTl7U0piy3zjUfc7fh7GaUuXM51tJ9qlAMAAAAAAAAA4DgylG97/z7k/6g3ZRiJxm98+PkpfVqX8wr4++tjkpat4P35scD9/aj8HT3EgQMAAAAAcII4tTtF07atyt4T0keZyONUjyZiIqITIvdHdGd6Vvhns8cdWbqOgKi4iHTXE+mnz81E6qzX3rOpZsdkvxN1gImwiLSf8f5YQw/eft4qkwqaHye8pwtgNN4986ZtJ3/qkNtHKq7rBhaW5F4vbGnMYSJwgP0kQlutM38FlnFDu9fjmnbMO9O6MXdr/Xzw7dBnQq++t4KdEzX60avX7vFF44u/xQcAAADgGGn7xgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABySfb2JrfXe/p1Z0vwX8V2vbROp72yU9/4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOIK+BwAA//+S9Ld5") unshare(0x6020400) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x3ff8, 0x2000, &(0x7f00008c4000/0x2000)=nil}) 5m50.274346953s ago: executing program 2 (id=170): setns(0xc9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)='t', 0x1) 5m49.969764281s ago: executing program 2 (id=174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4d359558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc2102030100f9a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6", 0x504, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000b80)="cb44032c2a3a51", 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000000780)='./cfg/usb_gadget/g1\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00') read(r0, &(0x7f0000000300)=""/197, 0xc5) socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x78}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) r2 = syz_open_dev$usbfs(0x0, 0x208, 0x509000) fcntl$dupfd(r2, 0x0, r2) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 5m48.80582368s ago: executing program 2 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x12, 0x7, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 5m48.37248167s ago: executing program 2 (id=186): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0, r1}, 0x18) 5m48.241865013s ago: executing program 2 (id=188): r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) r1 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000ea, 0x2, 0x0) 5m32.767551338s ago: executing program 32 (id=188): r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) r1 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000ea, 0x2, 0x0) 4m17.347601712s ago: executing program 4 (id=579): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 4m14.686387328s ago: executing program 4 (id=585): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @pic={0x7, 0xe, 0x54, 0x1, 0x9, 0x9, 0x6, 0x36, 0x0, 0x0, 0x5, 0x2, 0x22, 0x3, 0xda, 0xe}}) 4m14.261651078s ago: executing program 4 (id=588): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4807e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00'}) fallocate(r0, 0x20, 0x0, 0x8000) 4m13.685921803s ago: executing program 4 (id=591): r0 = socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYRES8], 0x16, 0xc49, &(0x7f0000001cc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000006540)='./bus\x00', 0x2029c1b, 0x0, 0x81, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x8efb, 0xb91, 0xec, 0x951, 0x0}) mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1, 0x0) write(r2, 0x0, 0x3f) syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5786dd6c370c8900082b0000000000000000000023000000000000fe8000000000000000000000000000aa"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x20, 0xfffff034}, {0x28, 0x0, 0x2, 0xffffd010}, {0x6, 0x0, 0x2}]}, 0x10) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x110) fadvise64(r3, 0x10001, 0x10, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[], 0x0) 4m9.150611526s ago: executing program 4 (id=598): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000002c0)=0x40000803, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000a00)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0xd, 0x4, 0x0, 0x26, 0x44, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x1f, 0x17, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x10}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 4m7.440665558s ago: executing program 4 (id=604): add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_gettime(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r1, &(0x7f0000000c80)=""/265, 0x109) eventfd2(0x800, 0x1) 4m6.871879132s ago: executing program 33 (id=604): add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_gettime(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r1, &(0x7f0000000c80)=""/265, 0x109) eventfd2(0x800, 0x1) 3.929830322s ago: executing program 5 (id=2128): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000d6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) 3.441774044s ago: executing program 5 (id=2132): add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRESOCT=r2], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x380, 0x87c9, 0x4, 0xffffffff, {{0xb, 0x4, 0x3, 0x25, 0x2c, 0x68, 0x0, 0x0, 0xcadc29bec06e06c8, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, {[@cipso={0x86, 0x16, 0x0, [{0x1, 0x10, "874f3a47b0f9fa4348b16c16313d"}]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000400), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) 3.411233135s ago: executing program 5 (id=2134): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x7, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) get_robust_list(0x0, 0x0, 0x0) 3.301667847s ago: executing program 1 (id=2135): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000100)={[{@i_version}, {@noauto_da_alloc}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.301031087s ago: executing program 3 (id=2136): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@bridge_getneigh={0x20, 0x1e, 0x105, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x3800}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000300)={0x60000018}) 3.265349328s ago: executing program 5 (id=2137): setregid(0xee00, 0x0) syz_clone3(&(0x7f0000000140)={0x104901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x54) pidfd_getfd(r0, r0, 0x0) 2.984786006s ago: executing program 1 (id=2139): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000100)={@desc={0x1, 0x0, @desc2}}) 2.930786537s ago: executing program 6 (id=2140): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x6000170) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc100092e) open$dir(&(0x7f0000000040)='./file0\x00', 0x66602, 0x2) 2.79787756s ago: executing program 1 (id=2141): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_loaded', 0x0, 0x1a) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) read$usbfs(r0, &(0x7f0000000780)=""/59, 0x3b) 2.79772276s ago: executing program 6 (id=2142): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3, 0x204, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3, 0x3}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRES64=0x0], 0x7, 0x257, &(0x7f0000000540)="$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") r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, 0x0) 2.721534382s ago: executing program 1 (id=2143): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) mount(0x0, 0x0, 0x0, 0x3000096, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) 2.40975026s ago: executing program 0 (id=2146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0xe3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x8) syz_io_uring_setup(0x25fb, &(0x7f0000000280)={0x0, 0x42a, 0x1, 0x0, 0x64}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r6 = eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000200)=r6, 0x1) io_uring_enter(r3, 0x6516, 0x6d93, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r7, 0x0, 0x6f4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000020000000000000000c3a00000f100000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x8f, &(0x7f0000000440)=""/143, 0x41000, 0x22}, 0x94) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r9, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) 2.264608034s ago: executing program 3 (id=2147): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x3, 0x1daf6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000711019000000000095000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.936649852s ago: executing program 6 (id=2148): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000002a40)) 1.902294282s ago: executing program 3 (id=2149): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x800000a) 1.793796535s ago: executing program 6 (id=2150): rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) 1.782604345s ago: executing program 3 (id=2151): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000) 1.706498357s ago: executing program 6 (id=2152): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) 816.158739ms ago: executing program 0 (id=2153): bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8001, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r0 = fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x9b2cd000) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000002680)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048884}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a00ffffffff000000000000000000000000640101000000000000000000000000d44686c8a7dbc19bc1f0f77592f240"], 0x38}}, 0x40408c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) clock_gettime(0x0, &(0x7f0000000400)) 816.038499ms ago: executing program 6 (id=2154): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) close(r0) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000581000/0x400000)=nil) 815.050539ms ago: executing program 5 (id=2155): add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f00000005c0), 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRESOCT=r2], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x380, 0x87c9, 0x4, 0xffffffff, {{0xb, 0x4, 0x3, 0x25, 0x2c, 0x68, 0x0, 0x0, 0xcadc29bec06e06c8, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, {[@cipso={0x86, 0x16, 0x0, [{0x1, 0x10, "874f3a47b0f9fa4348b16c16313d"}]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000400), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) 813.403649ms ago: executing program 3 (id=2156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0) 628.770074ms ago: executing program 0 (id=2157): socket(0x10, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x101001a, 0x0, 0xfb, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000100)='./file0\x00') r2 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x1) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000", @ANYRESOCT], 0x3, 0x6c7, &(0x7f0000000600)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 578.883046ms ago: executing program 5 (id=2158): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@bridge_getneigh={0x20, 0x1e, 0x105, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x3800}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000300)={0x60000018}) 387.22152ms ago: executing program 0 (id=2159): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@dioread_lock}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) 151.038136ms ago: executing program 0 (id=2160): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x3, 0x1daf6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000711019000000000095000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 93.876227ms ago: executing program 1 (id=2161): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 93.713417ms ago: executing program 3 (id=2162): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x2, &(0x7f00000001c0)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) splice(r0, 0x0, r1, 0x0, 0x104fc, 0x0) 5.55047ms ago: executing program 1 (id=2163): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001"], 0xc4}}, 0x20050890) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="04080400c8"], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 0 (id=2164): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f00000000c0), 0x1, 0x263, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4249, &(0x7f0000000600)={[{@journal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bsdgroups}, {@grpjquota}, {@data_writeback}, {@noblock_validity}, {@noquota}, {@journal_checksum}]}, 0x0, 0x614, &(0x7f00000014c0)="$eJzs3U1oHNcdAPD/zEqyZKuVXYqpDaWCHmwo1odrcNuT7Ut96MFQH0rpwcKSjPDKFpYMtWuofKuhh1J6LcGXHHLNPZhccwuBJLecA04ICjkkwRtmdsferHbl9Vr7Ic/vB7P73tudfe+/s0/zZkdvJ4BS2440TkTEtSRipql8Or9NYzYiX3a+enA9W5Ko1f78ZRJJo6x4/rPG/ZHsJomYjIgPL0X8rLK7zs17928uVWt1/4yY31rfmN+8d//M2vrSjZUbK7cWz/7u3PmF3y+eW9yXGIu4Jhv3qx9VzyRxIa6O/2M5WuLYL7MxG88aITaXj0XE+SzR5n05aIoQkiG3g95UGp/H8Yg4HjNRyXN1M7H276E2DuirWiWiBpRUov9DSRXjgOLYvh/HwaPs6cX6AdDu+Mfy7zwiJvNjo8M7SdORUf149+g+1J/V8f2Dk//PlujwPcTYPtTTyfbDiPhFu/iTvG1HG9+YHN5JI21aL0svRMRE471Ie6x/tiU/6M/fq8TfvB2yeC807rPySz3WP+z4ASinJxcbO/LtLPdi/5eNDIvxT7QZ/0y32Xf1Ytj7v87jv2J/P5l/R562jMOyMc+V9i853lrw2aPL/+1Uf/P4L1uy+oux4CA8fRhxsiX+f+WDueT59k/abP/sKde6rOOPH39xudNjvce/P2ecao8jTrU9/kl+VNP81vpGUdZyfnJ+da26slC/bVvHex/87e1O9Y/C9o8O8e+1/bOyjS7rePfK4/VOj02/NP7084nkap6aaJT8fWlr685ixETyp8ZTmsrP7t2W4jnFa2Txn/51+/6/R/z5ht7uMv6Nv9zcqad2f2a73v67/qrkntW6bEMnWfzLPW7//3RZxzd/vfvLlqKpIrFX/FO7Xyrp9j0HAAAAAACAMkrzc7BJOvc8naZzc/U5vD+Pw2n19ubWb1Zv3721HHE6/3/I8bQ40z1TzydZfrHx/7BF/mxL/rcRcSwi/leZyvNz129Xl4cdPAAAAAAAAAAAAAAAAAAAAIyII435/8V1qr+u1Of/d2XreJ9bB/RdPy8wB4w2/R/KK+//vV7BFTjQ7P+hvPR/KC/9H8pL/4fy0v+hvLrq/xP9bwcwePb/UF76PwAAAAC8kY796smnSURs/2EqX6LpTN/4UFsG9Nur9/HZvrQDGLzKQFcDRsnzU/+m/0PpdDX+/7bx44D9bw4wBEm7wnxwUNu78z9pu2a3Hr3OygAAAAAAAAAAAABQNqdOmP8PZZXG+005v/EPZdI6kf9Q76sCB4yf/ofycowPvGwW/2SnB15v/j8AAAAAAAAAAAAA8Aqm8yVJ5xqXAJ2ONJ2bi/hJRByN8WR1rbqyEBE/jYhPKuOHsvzisBsNAAAAAAAAAAAAAAAAAAAAb5jNe/dvLlWrK3eaE9/tKnlTE+88zhLFVVCH357diUgGX+lURIxC7P1JjDWVJBHb2ZYfiYbd2YyRaEaaN2PIf5gAAAAAAAAAAAAAAAAAAKCEmuYet3fyrQG3CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG78X1/3tPJC95nWHHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcTD8EAAD//6hXN/4=") syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='.\x00', 0x854028, &(0x7f0000000600)=ANY=[], 0xfe, 0x0, 0x0) kernel console output (not intermixed with test programs): 7.758749][ T8086] loop0: detected capacity change from 0 to 256 [ 297.810836][ T4232] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 297.989888][ T8083] hfsplus: xattr searching failed [ 298.405992][ T4424] hfsplus: bad catalog file entry [ 298.444491][ T8092] loop1: detected capacity change from 0 to 1024 [ 298.462480][ T4424] hfsplus: b-tree write err: -5, ino 3 [ 298.511819][ T8092] hfsplus: invalid length 32517 has been corrected to 255 [ 298.594649][ T8092] hfsplus: b-tree write err: -5, ino 20 [ 298.603238][ T4232] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.624560][ T4232] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.656702][ T4232] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.687464][ T4232] usb 6-1: config 0 interface 0 has no altsetting 0 [ 298.704471][ T4232] usb 6-1: New USB device found, idVendor=2f32, idProduct=011d, bcdDevice= 0.00 [ 298.726771][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.755492][ T4232] usb 6-1: config 0 descriptor?? [ 298.781722][ T150] hfsplus: b-tree write err: -5, ino 20 [ 298.905985][ T8104] capability: warning: `syz.3.1150' uses 32-bit capabilities (legacy support in use) [ 299.068140][ T8110] loop3: detected capacity change from 0 to 1024 [ 299.100053][ T8110] EXT4-fs (loop3): Ignoring removed bh option [ 299.156684][ T8110] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 299.218823][ T8110] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.279170][ T8110] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.1152: lblock 3 mapped to illegal pblock 3 (length 3) [ 299.341150][ T8110] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 299.377049][ T8110] EXT4-fs (loop3): This should not happen!! Data will be lost [ 299.377049][ T8110] [ 299.412962][ T8120] EXT4-fs error (device loop3): ext4_ext_remove_space:2944: inode #15: comm syz.3.1152: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 299.466045][ T8120] EXT4-fs error (device loop3) in ext4_setattr:5645: Corrupt filesystem [ 299.492883][ T4232] usbhid 6-1:0.0: can't add hid device: -71 [ 299.508602][ T4232] usbhid: probe of 6-1:0.0 failed with error -71 [ 299.549136][ T4232] usb 6-1: USB disconnect, device number 23 [ 299.597117][ T4478] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm kworker/u4:13: lblock 0 mapped to illegal pblock 0 (length 1) [ 299.756757][ T4478] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 300.029010][ T4478] EXT4-fs (loop3): This should not happen!! Data will be lost [ 300.029010][ T4478] [ 300.799736][ T8142] set_capacity_and_notify: 1 callbacks suppressed [ 300.799747][ T8142] loop0: detected capacity change from 0 to 512 [ 300.930065][ T8142] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 301.014507][ T8142] EXT4-fs (loop0): first meta block group too large: 4194304000 (group descriptor block count 1) [ 301.143657][ T8153] loop5: detected capacity change from 0 to 1024 [ 301.189076][ T8153] EXT4-fs (loop5): Ignoring removed bh option [ 301.246743][ T8153] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 301.286696][ T8153] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.297601][ T8160] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 301.325493][ T8162] loop0: detected capacity change from 0 to 4096 [ 301.341927][ T8153] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 8: comm syz.5.1167: lblock 8 mapped to illegal pblock 8 (length 1) [ 301.382703][ T8162] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 301.415876][ T8153] EXT4-fs error (device loop5): ext4_ext_remove_space:2944: inode #15: comm syz.5.1167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 301.489401][ T8166] EXT4-fs error (device loop5): ext4_ext_remove_space:2944: inode #15: comm syz.5.1167: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 301.514698][ T8166] EXT4-fs error (device loop5) in ext4_setattr:5645: Corrupt filesystem [ 301.552244][ T8152] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm syz.5.1167: lblock 0 mapped to illegal pblock 0 (length 1) [ 301.626789][ T8152] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.1167: lblock 0 mapped to illegal pblock 0 (length 1) [ 301.676689][ T8152] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.1167: lblock 0 mapped to illegal pblock 0 (length 1) [ 301.828932][ T8152] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.1167: lblock 0 mapped to illegal pblock 0 (length 1) [ 302.108066][ T8152] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.1167: lblock 0 mapped to illegal pblock 0 (length 1) [ 302.139144][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 302.334118][ T8180] loop5: detected capacity change from 0 to 2048 [ 302.371488][ T8180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.809511][ T8194] loop3: detected capacity change from 0 to 1024 [ 302.939020][ T8194] hfsplus: xattr searching failed [ 303.029143][ T4478] hfsplus: bad catalog file entry [ 303.052452][ T4478] hfsplus: b-tree write err: -5, ino 3 [ 303.295906][ T8201] binder: BINDER_SET_CONTEXT_MGR already set [ 303.326156][ T8201] binder: 8200:8201 ioctl 4018620d 200000000040 returned -16 [ 303.511592][ T8204] loop1: detected capacity change from 0 to 1024 [ 303.562374][ T8204] hfsplus: invalid length 32517 has been corrected to 255 [ 303.638783][ T8204] hfsplus: b-tree write err: -5, ino 20 [ 303.699660][ T4478] hfsplus: b-tree write err: -5, ino 20 [ 303.806615][ T8206] loop1: detected capacity change from 0 to 1024 [ 303.850042][ T8206] EXT4-fs (loop1): Ignoring removed bh option [ 303.917175][ T8206] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 303.973929][ T8206] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.145954][ T8206] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.1186: lblock 3 mapped to illegal pblock 3 (length 3) [ 304.463636][ T8206] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 304.517135][ T8206] EXT4-fs (loop1): This should not happen!! Data will be lost [ 304.517135][ T8206] [ 304.547192][ T8213] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.1186: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 304.597812][ T8213] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 304.710341][ T4232] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 305.504533][ T8237] loop6: detected capacity change from 0 to 512 [ 305.569686][ T8237] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 305.598265][ T8241] loop1: detected capacity change from 0 to 2048 [ 305.635015][ T8237] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1194: invalid indirect mapped block 9 (level 0) [ 305.665650][ T8241] UDF-fs: bad mount option "ÿÿ000000000000000000000030xffffffffffffffffÿÿÿÿ" or missing value [ 305.676327][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.717108][ T8237] EXT4-fs (loop6): 1 truncate cleaned up [ 305.756892][ T8237] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 305.771006][ T4232] usb 4-1: no configurations [ 305.775595][ T4232] usb 4-1: can't read configurations, error -22 [ 305.791025][ T8244] loop5: detected capacity change from 0 to 512 [ 305.857225][ T8244] EXT4-fs (loop5): Ignoring removed oldalloc option [ 305.923397][ T8244] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 305.993948][ T8246] binder: BINDER_SET_CONTEXT_MGR already set [ 306.020993][ T8246] binder: 8245:8246 ioctl 4018620d 200000000040 returned -16 [ 306.084475][ T8244] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,grpjquota=./file1,noinit_itable,,errors=continue. Quota mode: writeback. [ 306.178424][ T8244] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.455027][ T8257] loop0: detected capacity change from 0 to 1024 [ 306.499698][ T8257] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 306.564600][ T8257] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 306.710433][ T4232] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 306.788316][ T8261] loop5: detected capacity change from 0 to 2048 [ 306.921943][ T4232] usb 4-1: device descriptor read/64, error -71 [ 306.936777][ T8265] loop6: detected capacity change from 0 to 512 [ 306.955107][ T8263] loop0: detected capacity change from 0 to 1024 [ 306.964318][ T8261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 307.032825][ T8265] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 307.044452][ T8263] EXT4-fs (loop0): Ignoring removed bh option [ 307.060435][ T4232] usb usb4-port1: attempt power cycle [ 307.143476][ T8265] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1204: invalid indirect mapped block 9 (level 0) [ 307.159705][ T8263] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 307.342505][ T8265] EXT4-fs (loop6): 1 truncate cleaned up [ 307.348307][ T8263] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.369235][ T8265] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 307.417494][ T8263] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm syz.0.1203: lblock 3 mapped to illegal pblock 3 (length 3) [ 307.500331][ T4232] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 307.538081][ T8263] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 307.620745][ T4232] usb 4-1: device descriptor read/8, error -71 [ 307.637530][ T8263] EXT4-fs (loop0): This should not happen!! Data will be lost [ 307.637530][ T8263] [ 308.058978][ T8271] EXT4-fs error (device loop0): ext4_ext_remove_space:2944: inode #15: comm syz.0.1203: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 308.100970][ T4232] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 308.147348][ T8271] EXT4-fs error (device loop0) in ext4_setattr:5645: Corrupt filesystem [ 308.210838][ T4232] usb 4-1: device descriptor read/8, error -71 [ 308.341856][ T4232] usb usb4-port1: unable to enumerate USB device [ 308.358028][ T8278] loop0: detected capacity change from 0 to 512 [ 308.427500][ T8278] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 308.472009][ T8278] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.492115][ T8280] loop1: detected capacity change from 0 to 4096 [ 308.619680][ T8280] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 308.771458][ T8288] loop6: detected capacity change from 0 to 1024 [ 308.889914][ T8290] loop0: detected capacity change from 0 to 512 [ 308.931542][ T8288] hfsplus: xattr searching failed [ 308.984878][ T8290] EXT4-fs (loop0): Ignoring removed oldalloc option [ 309.042300][ T8290] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 309.070728][ T4424] hfsplus: bad catalog file entry [ 309.100409][ T4424] hfsplus: b-tree write err: -5, ino 3 [ 309.124819][ T8290] EXT4-fs (loop0): 1 truncate cleaned up [ 309.192781][ T8290] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000001,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 309.261798][ T8300] binder: BINDER_SET_CONTEXT_MGR already set [ 309.280070][ T8299] loop6: detected capacity change from 0 to 512 [ 309.301071][ T8300] binder: 8297:8300 ioctl 4018620d 200000000040 returned -16 [ 309.358461][ T8299] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.1213: iget: bad i_size value: 38620345925642 [ 309.441820][ T8299] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.1213: couldn't read orphan inode 15 (err -117) [ 309.535114][ T8299] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 309.577594][ T8308] loop0: detected capacity change from 0 to 2048 [ 309.632884][ T8308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.729523][ T4478] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:13: bg 0: block 5: invalid block bitmap [ 309.812292][ T4478] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 16 with error 28 [ 310.013662][ T4478] EXT4-fs (loop6): This should not happen!! Data will be lost [ 310.013662][ T4478] [ 310.051477][ T4478] EXT4-fs (loop6): Total free blocks count 0 [ 310.312457][ T4478] EXT4-fs (loop6): Free/Dirty block details [ 310.344250][ T4478] EXT4-fs (loop6): free_blocks=0 [ 310.369587][ T4478] EXT4-fs (loop6): dirty_blocks=16 [ 310.399400][ T4478] EXT4-fs (loop6): Block reservation details [ 310.435704][ T4478] EXT4-fs (loop6): i_reserved_data_blocks=16 [ 310.883388][ T8332] EXT4-fs (loop1): Ignoring removed oldalloc option [ 310.892477][ T8326] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 310.938001][ T8332] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 311.001355][ T8332] EXT4-fs (loop1): 1 truncate cleaned up [ 311.033530][ T8332] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000001,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 311.080477][ T13] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 311.293999][ T8339] EXT4-fs (loop1): Ignoring removed bh option [ 311.342832][ T8341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.360351][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 311.367995][ T8339] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 311.436652][ T8339] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.473306][ T8339] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.1228: lblock 3 mapped to illegal pblock 3 (length 3) [ 311.529643][ T8339] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 311.545521][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.587820][ T13] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.617139][ T8339] EXT4-fs (loop1): This should not happen!! Data will be lost [ 311.617139][ T8339] [ 311.637268][ T13] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 311.663855][ T8345] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.1228: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 311.687661][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.713861][ T13] usb 1-1: config 0 descriptor?? [ 311.746824][ T8345] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 311.835720][ T150] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 311.867112][ T150] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 311.899304][ T150] EXT4-fs (loop1): This should not happen!! Data will be lost [ 311.899304][ T150] [ 312.173078][ T8360] set_capacity_and_notify: 4 callbacks suppressed [ 312.173090][ T8360] loop5: detected capacity change from 0 to 1024 [ 312.247426][ T8360] EXT4-fs warning (device loop5): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 312.282926][ T13] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 312.901445][ T8368] loop5: detected capacity change from 0 to 512 [ 312.943372][ T8368] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 312.953718][ T13] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.975473][ T13] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.997969][ T13] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.021275][ T8368] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1237: invalid indirect mapped block 9 (level 0) [ 313.037992][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 313.045564][ T8368] EXT4-fs (loop5): 1 truncate cleaned up [ 313.055420][ T13] usb 2-1: New USB device found, idVendor=2f32, idProduct=011d, bcdDevice= 0.00 [ 313.064742][ T8368] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 313.082112][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.103930][ T13] usb 2-1: config 0 descriptor?? [ 313.215389][ T8372] loop5: detected capacity change from 0 to 512 [ 313.242980][ T8372] EXT4-fs (loop5): Ignoring removed oldalloc option [ 313.260084][ T8372] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 313.277882][ T8372] EXT4-fs (loop5): 1 truncate cleaned up [ 313.283985][ T8372] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000001,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 313.464994][ T8377] netlink: 87 bytes leftover after parsing attributes in process `syz.5.1239'. [ 313.542661][ T8381] loop5: detected capacity change from 0 to 2048 [ 313.556993][ T8383] loop3: detected capacity change from 0 to 1024 [ 313.581371][ T8381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.608097][ T8383] EXT4-fs (loop3): Ignoring removed bh option [ 313.661228][ T8383] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 313.682012][ T8383] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.699785][ T8383] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.1243: lblock 3 mapped to illegal pblock 3 (length 3) [ 313.728299][ T8383] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 313.774512][ T8383] EXT4-fs (loop3): This should not happen!! Data will be lost [ 313.774512][ T8383] [ 313.848750][ T8389] EXT4-fs error (device loop3): ext4_ext_remove_space:2944: inode #15: comm syz.3.1243: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 313.890405][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 313.911247][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 313.959407][ T13] usb 2-1: USB disconnect, device number 18 [ 313.994390][ T8389] EXT4-fs error (device loop3) in ext4_setattr:5645: Corrupt filesystem [ 314.041651][ T1109] usb 1-1: USB disconnect, device number 12 [ 314.573524][ T8403] loop3: detected capacity change from 0 to 512 [ 314.870123][ T8403] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.1249: iget: bad i_size value: 38620345925642 [ 314.974095][ T8403] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1249: couldn't read orphan inode 15 (err -117) [ 315.060146][ T8403] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 315.222234][ T8416] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 315.376683][ T8420] loop1: detected capacity change from 0 to 512 [ 315.448795][ T8420] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 315.487313][ T8425] loop5: detected capacity change from 0 to 1024 [ 315.535735][ T8420] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.1257: corrupted inode contents [ 315.576531][ T26] audit: type=1800 audit(1791429818.052:20): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1258" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 315.618973][ T8420] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #11: comm syz.1.1257: mark_inode_dirty error [ 315.660204][ T8420] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1257: invalid indirect mapped block 1 (level 1) [ 315.660451][ T4230] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 315.687353][ T8420] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.1257: corrupted inode contents [ 315.754992][ T8420] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 315.803300][ T8420] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #11: comm syz.1.1257: corrupted inode contents [ 315.849325][ T8420] EXT4-fs error (device loop1): ext4_truncate:4286: inode #11: comm syz.1.1257: mark_inode_dirty error [ 315.895979][ T8420] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 316.053330][ T8420] EXT4-fs (loop1): 1 truncate cleaned up [ 316.066636][ T8420] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.326879][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 316.433561][ T8420] EXT4-fs error (device loop1): ext4_lookup:1860: inode #12: comm syz.1.1257: iget: bogus i_mode (3355) [ 316.462754][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.501011][ T4230] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.544535][ T4230] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 316.579645][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.621443][ T4230] usb 1-1: config 0 descriptor?? [ 316.630108][ T8440] loop3: detected capacity change from 0 to 512 [ 316.715471][ T8440] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.1265: iget: bad i_size value: 38620345925642 [ 316.867714][ T8440] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1265: couldn't read orphan inode 15 (err -117) [ 316.893473][ T8445] loop5: detected capacity change from 0 to 2048 [ 316.981657][ T8445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.994102][ T8440] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 317.241946][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.248237][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.868337][ T8457] loop3: detected capacity change from 0 to 2048 [ 317.918472][ T8457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.067761][ T8462] loop6: detected capacity change from 0 to 1024 [ 318.119522][ T8462] hfsplus: invalid length 32517 has been corrected to 255 [ 318.263265][ T8462] hfsplus: b-tree write err: -5, ino 20 [ 318.353951][ T4326] hfsplus: b-tree write err: -5, ino 20 [ 318.582608][ T8477] loop1: detected capacity change from 0 to 164 [ 318.662422][ T7] usb 1-1: USB disconnect, device number 13 [ 318.674024][ T26] audit: type=1326 audit(1791429821.152:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 319.291912][ T26] audit: type=1326 audit(1791429821.202:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 319.569320][ T8492] xt_hashlimit: max too large, truncated to 1048576 [ 319.629327][ T8486] mount: server not responding, timed out [ 319.795940][ T26] audit: type=1326 audit(1791429821.202:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 319.858150][ T8497] loop6: detected capacity change from 0 to 1024 [ 319.924858][ T8497] hfsplus: invalid length 32517 has been corrected to 255 [ 319.977866][ T26] audit: type=1326 audit(1791429821.202:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 320.105110][ T8497] hfsplus: b-tree write err: -5, ino 20 [ 320.184567][ T4294] hfsplus: b-tree write err: -5, ino 20 [ 320.200036][ T8511] loop0: detected capacity change from 0 to 512 [ 320.214104][ T26] audit: type=1326 audit(1791429821.202:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 320.317764][ T8511] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 320.362469][ T7] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 320.387833][ T8511] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1293: invalid indirect mapped block 9 (level 0) [ 320.411535][ T26] audit: type=1326 audit(1791429821.202:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 320.465797][ T8511] EXT4-fs (loop0): 1 truncate cleaned up [ 320.586609][ T8511] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 320.614156][ T26] audit: type=1326 audit(1791429821.202:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 320.910432][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 320.985465][ T26] audit: type=1326 audit(1791429821.202:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 321.050568][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.086703][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.123730][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 321.148374][ T26] audit: type=1326 audit(1791429821.202:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 321.198455][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.253105][ T7] usb 4-1: config 0 descriptor?? [ 321.295841][ T26] audit: type=1326 audit(1791429821.202:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 322.150439][ T26] audit: type=1326 audit(1791429821.202:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 322.224427][ T8546] loop5: detected capacity change from 0 to 512 [ 322.259190][ T8545] loop1: detected capacity change from 0 to 2048 [ 322.306761][ T8546] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.1315: iget: bad i_size value: 38620345925642 [ 322.405923][ T8545] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.554548][ T26] audit: type=1326 audit(1791429821.202:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 322.858401][ T8546] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1315: couldn't read orphan inode 15 (err -117) [ 322.908927][ T8546] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 322.929965][ T26] audit: type=1326 audit(1791429821.202:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 323.014393][ T8546] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1315: bg 0: block 5: invalid block bitmap [ 323.058227][ T26] audit: type=1326 audit(1791429821.202:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1280" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 323.349656][ T8562] loop6: detected capacity change from 0 to 256 [ 323.415786][ T8562] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x06cd387c, utbl_chksum : 0xe619d30d) [ 323.686729][ T8564] loop6: detected capacity change from 0 to 2048 [ 323.737027][ T8564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.768728][ T8566] loop0: detected capacity change from 0 to 512 [ 323.825156][ T8566] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 323.899581][ T8566] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1308: invalid indirect mapped block 9 (level 0) [ 323.940150][ T1109] usb 4-1: USB disconnect, device number 11 [ 324.010086][ T8566] EXT4-fs (loop0): 1 truncate cleaned up [ 324.096896][ T8574] loop3: detected capacity change from 0 to 128 [ 324.154385][ T8574] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 324.165049][ T8574] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.205861][ T8566] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 324.270036][ T8580] loop1: detected capacity change from 0 to 1024 [ 324.418199][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 324.426498][ T8580] EXT4-fs (loop1): Ignoring removed bh option [ 324.479932][ T8580] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 324.509078][ T8585] loop3: detected capacity change from 0 to 2048 [ 324.635929][ T8589] loop5: detected capacity change from 0 to 512 [ 324.645617][ T8580] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.661046][ T8585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.742507][ T8589] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.1322: iget: bad i_size value: 38620345925642 [ 324.783575][ T8580] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.1318: lblock 3 mapped to illegal pblock 3 (length 3) [ 325.001710][ T8589] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1322: couldn't read orphan inode 15 (err -117) [ 325.297586][ T8580] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 325.340363][ T8589] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 325.409520][ T8580] EXT4-fs (loop1): This should not happen!! Data will be lost [ 325.409520][ T8580] [ 326.224856][ T8589] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1322: bg 0: block 5: invalid block bitmap [ 326.291063][ T8601] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.1318: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 326.491246][ T8601] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 326.535717][ T8615] loop5: detected capacity change from 0 to 128 [ 326.603771][ T8615] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.691454][ T8615] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.806473][ T8618] loop1: detected capacity change from 0 to 16 [ 326.830811][ T8618] erofs: Unknown parameter 'fault_injection' [ 327.098363][ T8621] loop1: detected capacity change from 0 to 128 [ 327.118598][ T8621] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 327.129297][ T8621] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 327.240754][ T8624] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 327.371935][ T8624] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1331: invalid indirect mapped block 9 (level 0) [ 327.434463][ T8628] hfsplus: invalid length 32517 has been corrected to 255 [ 327.492409][ T8630] EXT4-fs warning (device loop0): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 327.518207][ T8624] EXT4-fs (loop5): 1 truncate cleaned up [ 327.558930][ T8628] hfsplus: b-tree write err: -5, ino 20 [ 327.586183][ T8624] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 327.651134][ T4243] hfsplus: b-tree write err: -5, ino 20 [ 327.920963][ T8633] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.196228][ T8644] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 328.218469][ T8650] netlink: 'syz.5.1341': attribute type 1 has an invalid length. [ 328.232267][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 328.261882][ T8644] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.508845][ T8657] set_capacity_and_notify: 5 callbacks suppressed [ 328.508857][ T8657] loop5: detected capacity change from 0 to 1024 [ 328.522159][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 328.603657][ T8657] hfsplus: invalid length 32517 has been corrected to 255 [ 328.640646][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.674643][ T8657] hfsplus: b-tree write err: -5, ino 20 [ 328.684054][ T7] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 328.726923][ T8665] loop1: detected capacity change from 0 to 512 [ 328.749199][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 328.772017][ T8665] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 328.794902][ T8667] loop0: detected capacity change from 0 to 1024 [ 328.805189][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 328.830113][ T8667] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 328.845595][ T8665] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1347: invalid indirect mapped block 9 (level 0) [ 328.864383][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.888712][ T8667] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 328.915427][ T7] usb 4-1: config 0 descriptor?? [ 328.921392][ T8665] EXT4-fs (loop1): 1 truncate cleaned up [ 328.931313][ T4243] hfsplus: b-tree write err: -5, ino 20 [ 328.941579][ T8665] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 328.962113][ T7] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 329.027856][ T26] audit: type=1800 audit(1791429831.502:35): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1348" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 329.219745][ T8677] loop1: detected capacity change from 0 to 256 [ 330.057247][ T8677] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 330.102677][ T8684] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.1352'. [ 330.203177][ T8689] loop6: detected capacity change from 0 to 512 [ 330.244238][ T8690] loop0: detected capacity change from 0 to 1024 [ 330.283688][ T8689] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 330.378557][ T8689] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1356: invalid indirect mapped block 9 (level 0) [ 330.400177][ T8690] hfsplus: xattr searching failed [ 330.456160][ T8689] EXT4-fs (loop6): 1 truncate cleaned up [ 330.480126][ T4424] hfsplus: b-tree write err: -5, ino 3 [ 330.490150][ T8689] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 330.918433][ T8704] loop0: detected capacity change from 0 to 512 [ 330.993465][ T8707] loop1: detected capacity change from 0 to 1024 [ 331.016418][ T8704] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 331.091912][ T8707] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 331.124152][ T8704] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1362: invalid indirect mapped block 9 (level 0) [ 331.172681][ T8707] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 331.224702][ T8704] EXT4-fs (loop0): 1 truncate cleaned up [ 331.255793][ T8704] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 331.323253][ T26] audit: type=1800 audit(1791429833.802:36): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1363" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 331.384414][ T1109] usb 4-1: USB disconnect, device number 12 [ 331.653915][ T8719] loop5: detected capacity change from 0 to 2048 [ 331.708992][ T8719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.972179][ T1109] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 332.351152][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.413882][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.446313][ T8726] loop3: detected capacity change from 0 to 1024 [ 332.494891][ T8726] EXT4-fs (loop3): Ignoring removed bh option [ 332.505855][ T1109] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.572605][ T8726] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 332.606830][ T1109] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.636305][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.654686][ T8726] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.684895][ T1109] usb 1-1: config 0 descriptor?? [ 332.771781][ T8734] hfsplus: xattr searching failed [ 332.784101][ T8726] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.1368: lblock 3 mapped to illegal pblock 3 (length 3) [ 332.869442][ T8737] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 332.902714][ T8726] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 332.936904][ T4326] hfsplus: b-tree write err: -5, ino 3 [ 332.959844][ T8737] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1371: invalid indirect mapped block 9 (level 0) [ 333.012791][ T8726] EXT4-fs (loop3): This should not happen!! Data will be lost [ 333.012791][ T8726] [ 333.053526][ T8737] EXT4-fs (loop1): 1 truncate cleaned up [ 333.060045][ T8738] EXT4-fs error (device loop3): ext4_ext_remove_space:2944: inode #15: comm syz.3.1368: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 333.118391][ T8737] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 333.141857][ T8742] EXT4-fs (loop6): Unsupported blocksize for fs-verity [ 333.211621][ T1109] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 333.238604][ T8738] EXT4-fs error (device loop3) in ext4_setattr:5645: Corrupt filesystem [ 333.270568][ T1109] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 333.314535][ T1109] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 333.353507][ T1109] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 333.453404][ T4243] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm kworker/u4:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 333.562886][ T1109] Bluetooth: hci0: command 0x080f tx timeout [ 333.575983][ T4243] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 333.646730][ T4243] EXT4-fs (loop3): This should not happen!! Data will be lost [ 333.646730][ T4243] [ 334.061698][ T1109] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 334.085036][ T8757] set_capacity_and_notify: 3 callbacks suppressed [ 334.085048][ T8757] loop5: detected capacity change from 0 to 2048 [ 334.178509][ T8757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.344093][ T1109] usb 4-1: Using ep0 maxpacket: 16 [ 334.472055][ T1109] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.505358][ T1109] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 334.558686][ T1109] usb 4-1: config 0 interface 0 has no altsetting 0 [ 334.588195][ T1109] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 334.628026][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.670014][ T1109] usb 4-1: config 0 descriptor?? [ 334.731902][ T1109] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 335.085137][ T8762] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1379'. [ 335.165330][ T8762] loop5: detected capacity change from 0 to 1024 [ 335.174755][ T7] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 335.338221][ T8767] loop5: detected capacity change from 0 to 128 [ 335.374646][ T8767] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 335.467593][ T8767] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 335.503594][ T7] usb 1-1: device firmware changed [ 335.527177][ T1109] usb 1-1: USB disconnect, device number 14 [ 335.564343][ T8767] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 336.466369][ T8767] FAT-fs (loop5): Filesystem has been set read-only [ 336.581634][ T1109] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 336.625353][ T8773] loop5: detected capacity change from 0 to 2048 [ 336.672492][ T8773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.903365][ T8775] loop5: detected capacity change from 0 to 4096 [ 337.000520][ T1109] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.014796][ T8775] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 337.061728][ T1109] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.074997][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 337.118718][ T1109] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.182374][ T1109] usb 1-1: config 0 interface 0 has no altsetting 0 [ 337.207798][ T1109] usb 1-1: New USB device found, idVendor=2f32, idProduct=011d, bcdDevice= 0.00 [ 337.228064][ T8784] loop1: detected capacity change from 0 to 1024 [ 337.243319][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.267613][ T8784] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 337.301670][ T1109] usb 1-1: config 0 descriptor?? [ 337.355322][ T8784] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 337.448306][ T4232] usb 4-1: USB disconnect, device number 13 [ 337.703138][ T8796] loop1: detected capacity change from 0 to 2048 [ 337.761619][ T8796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.800702][ T1109] hid (null): unknown global tag 0xc [ 337.814420][ T1109] hid-generic 0003:2F32:011D.000B: unknown main item tag 0x7 [ 337.822135][ T13] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 338.009644][ T1109] hid-generic 0003:2F32:011D.000B: unknown global tag 0xc [ 338.023528][ T1109] hid-generic 0003:2F32:011D.000B: item 0 2 1 12 parsing failed [ 338.044067][ T1109] hid-generic: probe of 0003:2F32:011D.000B failed with error -22 [ 338.070411][ T4232] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 338.085554][ T1109] usb 1-1: USB disconnect, device number 15 [ 338.258578][ T8805] loop1: detected capacity change from 0 to 512 [ 338.317003][ T8805] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 338.328308][ T13] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 338.358441][ T13] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 338.372285][ T8805] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.401508][ T13] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 338.438837][ T13] usb 6-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 338.468378][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.476729][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 338.526283][ T8792] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 338.581431][ T4232] usb 4-1: no configurations [ 338.616431][ T4232] usb 4-1: can't read configurations, error -22 [ 338.641787][ T8810] loop0: detected capacity change from 0 to 8 [ 338.720609][ T8810] SQUASHFS error: lzo decompression failed, data probably corrupt [ 338.759360][ T8810] SQUASHFS error: Failed to read block 0x91: -5 [ 338.799509][ T8810] SQUASHFS error: Unable to read metadata cache entry [8f] [ 338.820498][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 338.839563][ T8810] SQUASHFS error: Unable to read inode 0x7 [ 339.037245][ T4230] usb 6-1: USB disconnect, device number 24 [ 339.117327][ T8824] loop3: detected capacity change from 0 to 1024 [ 339.159871][ T8824] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 339.222443][ T8824] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 340.030604][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'. [ 340.043991][ T8831] ip_tables: iptables: counters copy to user failed while replacing table [ 340.352509][ T8837] loop3: detected capacity change from 0 to 2048 [ 340.423724][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1411'. [ 340.445980][ T8837] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 340.457166][ T13] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 340.501823][ T8837] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 340.600412][ T4197] Bluetooth: hci4: Reading Intel version command failed (-110) [ 340.851707][ T13] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.878859][ T8845] loop3: detected capacity change from 0 to 512 [ 340.905665][ T13] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.942929][ T8845] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 340.975263][ T13] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.032372][ T4230] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 341.052894][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 341.059519][ T13] usb 2-1: New USB device found, idVendor=2f32, idProduct=011d, bcdDevice= 0.00 [ 341.073766][ T8845] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000101,sysvgroups,dioread_nolock,,errors=continue. Quota mode: writeback. [ 341.119908][ T8845] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.153730][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.190831][ T13] usb 2-1: config 0 descriptor?? [ 341.365631][ T8850] loop0: detected capacity change from 0 to 512 [ 341.406136][ T8853] loop6: detected capacity change from 0 to 128 [ 341.429504][ T8850] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 341.468988][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1416'. [ 341.478215][ T4230] usb 6-1: unable to get BOS descriptor or descriptor too short [ 341.493894][ T8850] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1408: invalid indirect mapped block 9 (level 0) [ 341.578730][ T8850] EXT4-fs (loop0): 1 truncate cleaned up [ 341.590527][ T4230] usb 6-1: no configurations [ 341.595146][ T4230] usb 6-1: can't read configurations, error -22 [ 341.619854][ T8850] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 341.690754][ T13] hid (null): unknown global tag 0xc [ 341.698472][ T8860] loop3: detected capacity change from 0 to 2048 [ 341.717825][ T13] hid-generic 0003:2F32:011D.000C: unknown main item tag 0x7 [ 341.758810][ T8860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.770864][ T13] hid-generic 0003:2F32:011D.000C: unknown global tag 0xc [ 341.804687][ T13] hid-generic 0003:2F32:011D.000C: item 0 2 1 12 parsing failed [ 341.945730][ T13] hid-generic: probe of 0003:2F32:011D.000C failed with error -22 [ 342.221821][ T13] usb 2-1: USB disconnect, device number 19 [ 342.237197][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1422'. [ 342.364553][ T8869] loop0: detected capacity change from 0 to 1024 [ 343.367315][ T8869] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 344.240500][ T8869] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 344.502958][ T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 344.519791][ T8888] loop1: detected capacity change from 0 to 1024 [ 344.599111][ T8888] hfsplus: invalid length 32517 has been corrected to 255 [ 344.755636][ T8888] hfsplus: b-tree write err: -5, ino 20 [ 344.768767][ T8892] loop0: detected capacity change from 0 to 512 [ 344.823720][ T8892] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 344.870798][ T4288] hfsplus: b-tree write err: -5, ino 20 [ 344.891837][ T8892] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1431: invalid indirect mapped block 9 (level 0) [ 344.940587][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 344.979724][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 21 [ 345.013855][ T8892] EXT4-fs (loop0): 1 truncate cleaned up [ 345.019516][ T8892] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 345.133590][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.161203][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 345.212340][ T7] usb 4-1: SerialNumber: syz [ 345.270020][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 345.279361][ T8878] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 345.345123][ T8901] loop6: detected capacity change from 0 to 1024 [ 345.389336][ T8901] EXT4-fs (loop6): Ignoring removed oldalloc option [ 345.442229][ T13] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 345.449968][ T8901] EXT4-fs (loop6): Ignoring removed oldalloc option [ 345.459647][ T8903] loop0: detected capacity change from 0 to 2048 [ 345.475488][ T8901] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 345.519736][ T8903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.533518][ T8878] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 345.689953][ T8901] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 346.010549][ T8901] loop_set_status: loop6 () has still dirty pages (nrpages=2) [ 346.110419][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 346.180409][ T13] usb 2-1: no configurations [ 346.198148][ T13] usb 2-1: can't read configurations, error -22 [ 346.277435][ T8909] loop6: detected capacity change from 0 to 1024 [ 346.284290][ T7] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 346.327158][ T8909] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 346.457122][ T8909] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 346.529165][ T4230] usb 4-1: USB disconnect, device number 16 [ 346.563410][ T4230] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 346.575842][ T8918] loop0: detected capacity change from 0 to 2048 [ 346.591170][ T8917] loop5: detected capacity change from 0 to 2048 [ 346.678097][ T8917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.694059][ T8918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.188436][ T8932] loop0: detected capacity change from 0 to 1024 [ 347.220012][ T8934] loop6: detected capacity change from 0 to 512 [ 347.311470][ T8934] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 347.333472][ T8932] hfsplus: invalid length 32517 has been corrected to 255 [ 347.524028][ T8934] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1445: invalid indirect mapped block 9 (level 0) [ 347.850510][ T8932] hfsplus: b-tree write err: -5, ino 20 [ 347.895338][ T8951] loop1: detected capacity change from 0 to 1024 [ 347.944626][ T8934] EXT4-fs (loop6): 1 truncate cleaned up [ 347.955135][ T8934] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 347.979666][ T4424] hfsplus: b-tree write err: -5, ino 20 [ 348.016904][ T8951] EXT4-fs (loop1): Ignoring removed bh option [ 348.127257][ T8951] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 348.213481][ T8956] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 348.520585][ T8951] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.541725][ T8956] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 348.663080][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1452'. [ 348.683246][ T8951] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.1448: lblock 3 mapped to illegal pblock 3 (length 3) [ 348.746163][ T8970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.807099][ T8951] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 348.829298][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1452'. [ 348.916608][ T8951] EXT4-fs (loop1): This should not happen!! Data will be lost [ 348.916608][ T8951] [ 349.237279][ T8972] EXT4-fs error (device loop1): ext4_ext_remove_space:2944: inode #15: comm syz.1.1448: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 349.337923][ T8990] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1457'. [ 349.565631][ T8972] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 349.618761][ T8998] set_capacity_and_notify: 2 callbacks suppressed [ 349.618773][ T8998] loop5: detected capacity change from 0 to 1024 [ 349.834092][ T9003] loop6: detected capacity change from 0 to 512 [ 350.149307][ T8998] hfsplus: invalid length 32517 has been corrected to 255 [ 350.244292][ T9003] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 350.304034][ T9011] loop3: detected capacity change from 0 to 1024 [ 350.333666][ T8998] hfsplus: b-tree write err: -5, ino 20 [ 350.346040][ T9003] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1463: invalid indirect mapped block 9 (level 0) [ 350.388659][ T9011] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 350.447514][ T9003] EXT4-fs (loop6): 1 truncate cleaned up [ 350.458362][ T4294] hfsplus: b-tree write err: -5, ino 20 [ 350.469366][ T9011] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 350.567801][ T9003] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 350.645696][ T9022] loop0: detected capacity change from 0 to 2048 [ 350.714478][ T9022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.875756][ T9028] loop5: detected capacity change from 0 to 512 [ 350.972905][ T9030] loop6: detected capacity change from 0 to 128 [ 351.041258][ T9030] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.052030][ T9030] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.116237][ T9028] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.1470: iget: bad i_size value: 38620345925642 [ 351.289347][ T9028] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1470: couldn't read orphan inode 15 (err -117) [ 351.383529][ T9028] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 351.395296][ T9040] binder: 9039:9040 ioctl c0306201 0 returned -14 [ 351.475614][ T9045] loop0: detected capacity change from 0 to 1024 [ 351.600170][ T9045] hfsplus: request for non-existent node 62977 in B*Tree [ 351.662129][ T9045] hfsplus: request for non-existent node 62977 in B*Tree [ 351.706893][ T9053] loop3: detected capacity change from 0 to 128 [ 351.717301][ T9051] loop5: detected capacity change from 0 to 1024 [ 351.729181][ T9050] hfsplus: request for non-existent node 62977 in B*Tree [ 351.784442][ T9053] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.799685][ T9050] hfsplus: request for non-existent node 62977 in B*Tree [ 351.816011][ T9051] hfsplus: invalid length 32517 has been corrected to 255 [ 351.854847][ T9054] hfsplus: request for non-existent node 62977 in B*Tree [ 351.872652][ T9053] ext4 filesystem being mounted at /329/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 351.913910][ T9051] hfsplus: b-tree write err: -5, ino 20 [ 351.928657][ T9054] hfsplus: request for non-existent node 62977 in B*Tree [ 351.967441][ T4478] hfsplus: b-tree write err: -5, ino 20 [ 351.985747][ T4478] hfsplus: b-tree write err: -5, ino 3 [ 351.998659][ T9053] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 3391 (only 1 groups) [ 352.349507][ T4197] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 352.397714][ T26] audit: type=1326 audit(1791429854.872:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 352.567095][ T9067] loop1: detected capacity change from 0 to 2048 [ 352.588263][ T9068] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 352.649604][ T26] audit: type=1326 audit(1791429854.872:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 352.708572][ T9067] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.723511][ T9068] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 352.859866][ T26] audit: type=1326 audit(1791429854.872:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 353.073370][ T26] audit: type=1326 audit(1791429854.872:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 353.167749][ T9083] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.1487: iget: bad i_size value: 38620345925642 [ 353.237562][ T9083] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1487: couldn't read orphan inode 15 (err -117) [ 353.301776][ T26] audit: type=1326 audit(1791429854.872:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 353.344568][ T9091] hfsplus: invalid length 32517 has been corrected to 255 [ 353.377000][ T9083] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.406180][ T9091] hfsplus: b-tree write err: -5, ino 20 [ 353.487084][ T9094] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.498574][ T26] audit: type=1326 audit(1791429854.872:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 353.532532][ T4478] hfsplus: b-tree write err: -5, ino 20 [ 353.830611][ T9097] binder: 9095:9097 ioctl c0306201 0 returned -14 [ 354.721650][ T26] audit: type=1326 audit(1791429854.872:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 354.896326][ T26] audit: type=1326 audit(1791429854.872:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 354.929892][ T9113] set_capacity_and_notify: 4 callbacks suppressed [ 354.929903][ T9113] loop3: detected capacity change from 0 to 1024 [ 356.961111][ T9114] syz.0.1497 (9114) used greatest stack depth: 20384 bytes left [ 356.979186][ T4233] Bluetooth: hci2: command 0x0405 tx timeout [ 357.017223][ T9116] loop1: detected capacity change from 0 to 2048 [ 357.217144][ T9116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.232053][ T26] audit: type=1326 audit(1791429854.872:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 357.604217][ T26] audit: type=1326 audit(1791429854.872:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 357.630318][ T4230] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 357.813160][ T26] audit: type=1326 audit(1791429854.872:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 357.840969][ T9122] loop1: detected capacity change from 0 to 1024 [ 357.898579][ T9122] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 357.975111][ T9122] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 358.010372][ T4230] usb 6-1: unable to get BOS descriptor or descriptor too short [ 358.042436][ T26] audit: type=1326 audit(1791429854.872:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 358.120156][ T9127] loop3: detected capacity change from 0 to 2048 [ 358.128144][ T4230] usb 6-1: no configurations [ 358.138159][ T4230] usb 6-1: can't read configurations, error -22 [ 358.163984][ T9129] loop6: detected capacity change from 0 to 1024 [ 358.208853][ T26] audit: type=1326 audit(1791429854.872:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 358.241436][ T9127] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.297411][ T9129] hfsplus: invalid length 32517 has been corrected to 255 [ 358.467324][ T9129] hfsplus: b-tree write err: -5, ino 20 [ 358.526223][ T26] audit: type=1326 audit(1791429854.872:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 358.619390][ T4288] hfsplus: b-tree write err: -5, ino 20 [ 358.716152][ T26] audit: type=1326 audit(1791429854.872:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 358.883920][ T26] audit: type=1326 audit(1791429854.872:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 359.185597][ T9143] loop3: detected capacity change from 0 to 128 [ 359.230825][ T9143] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 359.241507][ T9143] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.264450][ T26] audit: type=1326 audit(1791429854.872:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 359.460030][ T9149] loop6: detected capacity change from 0 to 2048 [ 359.493993][ T9148] loop3: detected capacity change from 0 to 2048 [ 359.513178][ T26] audit: type=1326 audit(1791429854.872:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 359.600789][ T9149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.645249][ T9148] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 359.663710][ T9152] loop5: detected capacity change from 0 to 1024 [ 359.733315][ T26] audit: type=1326 audit(1791429854.872:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.1480" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4150140199 code=0x7ffc0000 [ 359.868022][ T9152] hfsplus: xattr searching failed [ 360.008814][ T9161] loop3: detected capacity change from 0 to 512 [ 360.082753][ T4478] hfsplus: bad catalog file entry [ 360.087934][ T4478] hfsplus: b-tree write err: -5, ino 3 [ 360.108558][ T9161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 360.223668][ T9161] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1514: invalid indirect mapped block 9 (level 0) [ 360.245559][ T9160] loop6: detected capacity change from 0 to 8192 [ 360.278279][ T9166] loop1: detected capacity change from 0 to 1024 [ 360.324119][ T9161] EXT4-fs (loop3): 1 truncate cleaned up [ 360.381753][ T9166] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 360.392485][ T9161] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 360.481861][ T9166] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 360.593550][ T7] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 360.958811][ T9181] loop6: detected capacity change from 0 to 512 [ 361.074652][ T9181] EXT4-fs (loop6): Ignoring removed bh option [ 361.085144][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 361.128063][ T9181] EXT4-fs (loop6): Ignoring removed bh option [ 361.157423][ T9181] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 361.172074][ T7] usb 6-1: no configurations [ 361.186053][ T7] usb 6-1: can't read configurations, error -22 [ 361.287021][ T9181] EXT4-fs (loop6): mounted filesystem without journal. Opts: bh,init_itable,grpquota,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 361.371202][ T9181] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.694511][ T9192] loop3: detected capacity change from 0 to 2048 [ 361.707639][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1524'. [ 361.742374][ T9195] loop5: detected capacity change from 0 to 2048 [ 361.812980][ T9192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.865314][ T9195] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 361.945194][ T9200] loop6: detected capacity change from 0 to 2048 [ 362.098383][ T9200] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.213524][ T9200] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.235902][ T9208] loop3: detected capacity change from 0 to 512 [ 362.414240][ T9208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 363.693339][ T9208] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1529: invalid indirect mapped block 9 (level 0) [ 363.953136][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 363.977356][ T9208] EXT4-fs (loop3): 1 truncate cleaned up [ 364.000493][ T9208] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 364.236070][ T9220] ip_tables: iptables: counters copy to user failed while replacing table [ 364.258342][ T9219] loop6: detected capacity change from 0 to 1024 [ 364.288213][ T9219] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 364.341695][ T9219] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,init_itable,sysvgroups,resuid=0x0000000000000000,init_itable,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 364.440843][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 364.490699][ T7] usb 2-1: no configurations [ 364.503583][ T7] usb 2-1: can't read configurations, error -22 [ 364.701471][ T7] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 364.747477][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 364.788578][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 364.817927][ T9233] loop5: detected capacity change from 0 to 2048 [ 364.824399][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 364.855623][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 364.873780][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 364.887346][ T9233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.908956][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 365.030289][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 365.050261][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 365.055809][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 365.070755][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 365.090417][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 365.098272][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 365.114478][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 365.133802][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 365.155583][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 365.168420][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 365.176640][ T7] usb 2-1: device descriptor read/all, error -71 [ 365.186431][ T7] usb usb2-port1: attempt power cycle [ 365.192310][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 365.211486][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 365.233077][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.094542][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.124879][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.153531][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.183087][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.211920][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.242786][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.258451][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.287477][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.323000][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.348425][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.377259][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.415922][ T4264] hid-generic 0005:FFFD057E:0305.000D: unknown main item tag 0x0 [ 366.453382][ T4264] hid-generic 0005:FFFD057E:0305.000D: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 366.688941][ T9244] loop5: detected capacity change from 0 to 128 [ 367.134151][ T9247] loop3: detected capacity change from 0 to 512 [ 367.212279][ T9247] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 367.280100][ T9247] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1543: invalid indirect mapped block 9 (level 0) [ 367.493213][ T9247] EXT4-fs (loop3): 1 truncate cleaned up [ 368.405145][ T9255] loop1: detected capacity change from 0 to 128 [ 368.452983][ T9247] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,dioread_lock,nodiscard,,errors=continue. Quota mode: none. [ 368.519171][ T9255] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 368.530365][ T9255] ext4 filesystem being mounted at /325/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 368.579126][ T9262] ip_tables: iptables: counters copy to user failed while replacing table [ 368.645907][ T9267] loop5: detected capacity change from 0 to 512 [ 368.689492][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 368.835001][ T9267] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 369.009184][ T9277] loop3: detected capacity change from 0 to 2048 [ 369.037561][ T9267] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.301731][ T9279] loop1: detected capacity change from 0 to 1024 [ 369.327528][ T9277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 369.369666][ T9279] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 369.546674][ T9279] EXT4-fs (loop1): invalid journal inode [ 369.586129][ T9279] EXT4-fs (loop1): can't get journal size [ 369.605430][ T9283] loop6: detected capacity change from 0 to 16 [ 369.618497][ T9279] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback. [ 369.796952][ T9283] erofs: (device loop6): mounted with root inode @ nid 36. [ 369.901500][ T9283] attempt to access beyond end of device [ 369.901500][ T9283] loop6: rw=524288, want=34359738368, limit=16 [ 370.104751][ T9283] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 370.187123][ T9283] erofs: (device loop6): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 370.206830][ T9298] loop3: detected capacity change from 0 to 2048 [ 370.215447][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.234219][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.245328][ T9283] erofs: (device loop6): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 370.263714][ T9301] loop1: detected capacity change from 0 to 2048 [ 370.276209][ T9298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.287946][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.297143][ T9283] erofs: (device loop6): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 370.308983][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.326079][ T9301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.339429][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 370.339439][ T26] audit: type=1800 audit(1791429872.812:60): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1557" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 370.371204][ T9283] attempt to access beyond end of device [ 370.371204][ T9283] loop6: rw=524288, want=56, limit=16 [ 370.387658][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.648111][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.665789][ T9283] attempt to access beyond end of device [ 370.665789][ T9283] loop6: rw=0, want=34359738368, limit=16 [ 370.679654][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.690013][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.702621][ T26] audit: type=1800 audit(1791429873.182:61): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1552" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 370.734179][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.746800][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.754858][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.766251][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.775575][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.791281][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.809228][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.829287][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.847442][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.868507][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.893175][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.912363][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.923676][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.933051][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.942942][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.952184][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.960151][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.970071][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.982520][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.991148][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 370.998890][ T4233] hid-generic 0005:FFFD057E:0305.000E: unknown main item tag 0x0 [ 371.010072][ T4233] hid-generic 0005:FFFD057E:0305.000E: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 371.174821][ T9314] loop6: detected capacity change from 0 to 256 [ 371.244602][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'. [ 371.273797][ T9317] erofs: (device loop3): mounted with root inode @ nid 36. [ 371.343127][ T9314] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 371.366834][ T9317] attempt to access beyond end of device [ 371.366834][ T9317] loop3: rw=524288, want=34359738368, limit=16 [ 371.476782][ T4230] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 371.547136][ T9317] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 371.582783][ T9314] attempt to access beyond end of device [ 371.582783][ T9314] loop6: rw=524288, want=408, limit=256 [ 371.604193][ T9317] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 371.628914][ T9314] attempt to access beyond end of device [ 371.628914][ T9314] loop6: rw=524288, want=664, limit=256 [ 371.647860][ T9317] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 371.768000][ T9317] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 371.781016][ T9314] attempt to access beyond end of device [ 371.781016][ T9314] loop6: rw=0, want=288, limit=256 [ 371.810181][ T9317] attempt to access beyond end of device [ 371.810181][ T9317] loop3: rw=524288, want=56, limit=16 [ 371.839123][ T26] audit: type=1800 audit(1791429874.312:62): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1562" name="file1" dev="loop6" ino=1048713 res=0 errno=0 [ 371.875756][ T9317] attempt to access beyond end of device [ 371.875756][ T9317] loop3: rw=0, want=34359738368, limit=16 [ 371.939394][ T26] audit: type=1800 audit(1791429874.412:63): pid=9317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1560" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 371.959390][ T4230] usb 6-1: unable to get BOS descriptor or descriptor too short [ 372.090554][ T4230] usb 6-1: no configurations [ 372.095205][ T4230] usb 6-1: can't read configurations, error -22 [ 372.690911][ T26] audit: type=1326 audit(1791429874.452:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.1.1570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1123f199 code=0x7ffc0000 [ 372.809859][ T9343] set_capacity_and_notify: 1 callbacks suppressed [ 372.809870][ T9343] loop3: detected capacity change from 0 to 16 [ 372.904909][ T26] audit: type=1326 audit(1791429874.452:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.1.1570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1123f199 code=0x7ffc0000 [ 372.961457][ T9343] erofs: (device loop3): mounted with root inode @ nid 36. [ 372.976960][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 373.077106][ T9350] loop5: detected capacity change from 0 to 128 [ 373.095247][ T9343] attempt to access beyond end of device [ 373.095247][ T9343] loop3: rw=524288, want=34359738368, limit=16 [ 373.150828][ T9350] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 373.161748][ T9350] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 373.235839][ T26] audit: type=1326 audit(1791429874.452:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.1.1570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7faa111fb5ec code=0x7ffc0000 [ 373.308480][ T9343] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 373.476349][ T9343] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 373.507381][ T9364] loop5: detected capacity change from 0 to 128 [ 373.545038][ T9343] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 373.563567][ T26] audit: type=1326 audit(1791429874.452:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.1.1570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7faa111fb64e code=0x7ffc0000 [ 373.595478][ T9366] loop1: detected capacity change from 0 to 512 [ 373.685241][ T9343] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 373.711996][ T9366] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 373.797089][ T26] audit: type=1326 audit(1791429874.452:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.1.1570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa1123ee2b code=0x7ffc0000 [ 373.973241][ T9366] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.355021][ T26] audit: type=1326 audit(1791429874.452:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.1.1570" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7faa1123f199 code=0x7ffc0000 [ 374.695590][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 374.765941][ T9393] loop1: detected capacity change from 0 to 512 [ 374.860592][ T9393] EXT4-fs (loop1): Test dummy encryption mode enabled [ 374.908469][ T9393] EXT4-fs (loop1): Ignoring removed oldalloc option [ 374.962992][ T9393] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 375.070671][ T4230] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 375.133339][ T9413] fuse: Bad value for 'fd' [ 375.378694][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 375.378707][ T26] audit: type=1326 audit(1791429877.852:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.1604" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 375.513795][ T9422] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1605'. [ 375.592462][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.607556][ T9424] loop1: detected capacity change from 0 to 1024 [ 375.637189][ T26] audit: type=1326 audit(1791429877.852:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.1604" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 375.680170][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.701385][ T9424] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 375.762204][ T4230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.800898][ T9424] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 375.831383][ T26] audit: type=1326 audit(1791429877.852:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.1604" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 375.865740][ T4230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.897305][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.946973][ T4230] usb 4-1: config 0 descriptor?? [ 375.963510][ T26] audit: type=1326 audit(1791429877.852:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.1604" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 376.127884][ T26] audit: type=1326 audit(1791429877.852:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.1604" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 376.274203][ T26] audit: type=1326 audit(1791429877.852:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.1604" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 376.389043][ T26] audit: type=1326 audit(1791429877.852:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.1604" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 376.475890][ T4230] plantronics 0003:047F:FFFF.000F: collection stack underflow [ 376.515149][ T4230] plantronics 0003:047F:FFFF.000F: item 0 1 0 12 parsing failed [ 376.526746][ T26] audit: type=1326 audit(1791429877.852:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.1604" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 376.582121][ T4230] plantronics 0003:047F:FFFF.000F: parse failed [ 376.712740][ T4230] plantronics: probe of 0003:047F:FFFF.000F failed with error -22 [ 376.762980][ T4230] usb 4-1: USB disconnect, device number 17 [ 376.778090][ T26] audit: type=1326 audit(1791429877.852:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.1604" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 377.019774][ T26] audit: type=1326 audit(1791429877.852:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.5.1604" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 377.381989][ T9484] loop3: detected capacity change from 0 to 128 [ 377.444296][ T9484] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 377.455109][ T9484] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 377.686777][ T9492] loop3: detected capacity change from 0 to 256 [ 378.501858][ T9492] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 379.289420][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.307563][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.192730][ T4233] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 380.590468][ T4233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.755485][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 380.755498][ T26] audit: type=1326 audit(1791429883.212:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.6.1656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 380.796255][ T4233] usb 4-1: config 0 has no interfaces? [ 380.816488][ T4233] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 380.855328][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.888667][ T4233] usb 4-1: config 0 descriptor?? [ 380.897140][ T26] audit: type=1326 audit(1791429883.212:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.6.1656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 381.104492][ T26] audit: type=1326 audit(1791429883.212:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.6.1656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 381.239876][ T26] audit: type=1326 audit(1791429883.212:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.6.1656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 381.328870][ T26] audit: type=1326 audit(1791429883.212:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.6.1656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 381.376059][ T9523] udc-core: couldn't find an available UDC or it's busy [ 381.389703][ T9523] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 381.423891][ T26] audit: type=1326 audit(1791429883.212:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.6.1656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 382.423641][ T26] audit: type=1326 audit(1791429883.212:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.6.1656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 382.558864][ T26] audit: type=1326 audit(1791429883.212:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.6.1656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 382.665446][ T9581] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 382.708171][ T4230] usb 4-1: USB disconnect, device number 18 [ 382.749765][ T26] audit: type=1326 audit(1791429883.212:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.6.1656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 383.607437][ T26] audit: type=1326 audit(1791429883.212:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.6.1656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 384.199346][ T9606] loop3: detected capacity change from 0 to 1024 [ 384.266487][ T9606] EXT4-fs (loop3): Ignoring removed bh option [ 385.555138][ T9606] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 385.694628][ T9606] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.530063][ T4478] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm kworker/u4:13: lblock 0 mapped to illegal pblock 0 (length 1) [ 386.621298][ T4478] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 386.664913][ T4478] EXT4-fs (loop3): This should not happen!! Data will be lost [ 386.664913][ T4478] [ 386.865411][ T9634] loop3: detected capacity change from 0 to 128 [ 386.931518][ T9634] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 386.942245][ T9634] ext4 filesystem being mounted at /360/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 387.073000][ T9637] Bluetooth: hci0: unsupported parameter 255 [ 387.108658][ T9637] Bluetooth: hci0: unsupported parameter 255 [ 388.986166][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 388.986177][ T26] audit: type=1326 audit(1791429891.422:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.3.1697" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 389.879435][ T26] audit: type=1326 audit(1791429891.422:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.3.1697" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 390.089620][ T26] audit: type=1326 audit(1791429891.422:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.3.1697" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 390.507195][ T26] audit: type=1326 audit(1791429891.422:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.3.1697" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 390.686599][ T26] audit: type=1326 audit(1791429891.422:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.3.1697" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 390.849334][ T26] audit: type=1326 audit(1791429891.422:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.3.1697" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 391.045659][ T26] audit: type=1326 audit(1791429891.422:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.3.1697" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 392.450620][ T26] audit: type=1326 audit(1791429891.422:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.3.1697" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 392.641633][ T26] audit: type=1326 audit(1791429891.422:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.3.1697" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 392.817619][ T26] audit: type=1326 audit(1791429891.422:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.3.1697" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 393.739663][ T9694] loop3: detected capacity change from 0 to 512 [ 396.285152][ T9710] syz.6.1721 uses obsolete (PF_INET,SOCK_PACKET) [ 397.170306][ T4230] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 397.401538][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 397.561313][ T4230] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 397.592753][ T4230] usb 4-1: config 0 has no interface number 0 [ 398.331377][ T4230] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 398.371831][ T4230] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 398.411644][ T4230] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 398.451542][ T4230] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 398.574385][ T9740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 398.651780][ T4230] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 398.694379][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.743592][ T4230] usb 4-1: Product: syz [ 398.773909][ T4230] usb 4-1: Manufacturer: syz [ 398.804309][ T4230] usb 4-1: SerialNumber: syz [ 398.845361][ T4230] usb 4-1: config 0 descriptor?? [ 398.886079][ T9746] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 398.914084][ T4230] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 399.102227][ T4230] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input15 [ 399.539464][ T4230] usb 4-1: USB disconnect, device number 19 [ 399.626490][ T4230] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 401.051430][ T9778] device bridge_slave_1 left promiscuous mode [ 401.057681][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.158117][ T9778] device bridge_slave_0 left promiscuous mode [ 401.211985][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.130095][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1747'. [ 407.464246][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 407.464258][ T26] audit: type=1326 audit(1791429909.942:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.6.1804" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 407.662831][ T26] audit: type=1326 audit(1791429909.982:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.6.1804" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 407.813919][ T26] audit: type=1326 audit(1791429909.982:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.6.1804" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 407.969269][ T26] audit: type=1326 audit(1791429909.982:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.6.1804" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 408.289258][ T26] audit: type=1326 audit(1791429909.982:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.6.1804" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 408.438768][ T26] audit: type=1326 audit(1791429909.982:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.6.1804" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 408.609574][ T26] audit: type=1326 audit(1791429909.982:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.6.1804" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 408.760327][ T26] audit: type=1326 audit(1791429909.982:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.6.1804" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 408.908434][ T26] audit: type=1326 audit(1791429909.982:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.6.1804" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 409.063160][ T26] audit: type=1326 audit(1791429909.982:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9917 comm="syz.6.1804" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 409.394278][ T9977] loop3: detected capacity change from 0 to 128 [ 409.566239][ T9977] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 409.577668][ T9977] ext4 filesystem being mounted at /371/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 410.033837][ T9991] cgroup: Bad value for 'name' [ 411.797880][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 411.823488][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.830849][T10033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.067376][T10039] FAULT_INJECTION: forcing a failure. [ 412.067376][T10039] name failslab, interval 1, probability 0, space 0, times 1 [ 412.426181][T10039] CPU: 0 PID: 10039 Comm: syz.3.1859 Not tainted syzkaller #0 [ 412.433681][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.443734][T10039] Call Trace: [ 412.447029][T10039] [ 412.449952][T10039] dump_stack_lvl+0x188/0x250 [ 412.454684][T10039] ? show_regs_print_info+0x20/0x20 [ 412.459883][T10039] ? load_image+0x410/0x410 [ 412.464428][T10039] ? __might_sleep+0xf0/0xf0 [ 412.469063][T10039] ? __lock_acquire+0x7d40/0x7d40 [ 412.474133][T10039] should_fail+0x383/0x4b0 [ 412.478569][T10039] should_failslab+0x5/0x20 [ 412.483102][T10039] slab_pre_alloc_hook+0x51/0xc0 [ 412.488110][T10039] kmem_cache_alloc_trace+0x47/0x290 [ 412.493404][T10039] ? nfs_alloc_fhandle+0x46/0x90 [ 412.498395][T10039] nfs_alloc_fhandle+0x46/0x90 [ 412.503156][T10039] nfs_init_fs_context+0x65/0xe80 [ 412.508222][T10039] alloc_fs_context+0x628/0x7d0 [ 412.513141][T10039] __se_sys_fsopen+0x111/0x320 [ 412.517903][T10039] do_syscall_64+0x4c/0xa0 [ 412.522323][T10039] ? clear_bhb_loop+0x30/0x80 [ 412.527030][T10039] ? clear_bhb_loop+0x30/0x80 [ 412.531704][T10039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 412.537598][T10039] RIP: 0033:0x7fe452d02199 [ 412.542009][T10039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.562067][T10039] RSP: 002b:00007fe450f5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 412.570475][T10039] RAX: ffffffffffffffda RBX: 00007fe452f89fa0 RCX: 00007fe452d02199 [ 412.578440][T10039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 412.586406][T10039] RBP: 00007fe452d998e0 R08: 0000000000000000 R09: 0000000000000000 [ 412.594396][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.602387][T10039] R13: 00007fe452f8a038 R14: 00007fe452f89fa0 R15: 00007ffffd9a7c68 [ 412.610387][T10039] [ 413.789864][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1870'. [ 414.148699][T10079] loop3: detected capacity change from 0 to 764 [ 414.213097][T10083] netlink: 'syz.5.1876': attribute type 3 has an invalid length. [ 414.245708][T10085] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 414.415352][T10089] loop3: detected capacity change from 0 to 1024 [ 414.561874][T10089] EXT4-fs (loop3): Ignoring removed bh option [ 414.636324][T10089] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,noquota,auto_da_alloc,nodioread_nolock,bh,,errors=continue. Quota mode: none. [ 414.787456][T10089] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.891948][T10089] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.1878: lblock 3 mapped to illegal pblock 3 (length 3) [ 414.937374][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 415.071754][T10089] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 415.530393][T10089] EXT4-fs (loop3): This should not happen!! Data will be lost [ 415.530393][T10089] [ 415.695668][T10117] EXT4-fs error (device loop3): ext4_ext_remove_space:2944: inode #15: comm syz.3.1878: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 416.280503][T10099] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 416.572470][T10117] EXT4-fs error (device loop3) in ext4_setattr:5645: Corrupt filesystem [ 417.176028][T10158] loop3: detected capacity change from 0 to 1024 [ 418.187036][T10190] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1919'. [ 418.554067][T10202] loop3: detected capacity change from 0 to 512 [ 418.654884][T10202] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 418.729961][T10202] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.031479][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 419.031491][ T26] audit: type=1326 audit(1791429921.512:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1931" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 419.237986][ T26] audit: type=1326 audit(1791429921.552:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1931" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 419.355792][T10231] loop3: detected capacity change from 0 to 512 [ 419.403738][T10231] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 419.420460][ T26] audit: type=1326 audit(1791429921.552:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1931" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 419.696562][T10231] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1938: invalid indirect mapped block 256 (level 2) [ 419.783066][ T26] audit: type=1326 audit(1791429921.552:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1931" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 419.856673][T10231] EXT4-fs (loop3): 2 truncates cleaned up [ 419.882114][T10231] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 420.006897][ T26] audit: type=1326 audit(1791429921.552:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1931" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 420.557993][ T26] audit: type=1326 audit(1791429921.552:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1931" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 420.767158][ T26] audit: type=1326 audit(1791429921.552:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1931" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 421.027816][ T26] audit: type=1326 audit(1791429921.552:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1931" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 421.758607][ T26] audit: type=1326 audit(1791429921.552:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1931" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 421.931961][ T26] audit: type=1326 audit(1791429921.552:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10217 comm="syz.3.1931" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe452d02199 code=0x7ffc0000 [ 422.095901][T10273] loop3: detected capacity change from 0 to 128 [ 422.154040][T10273] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 422.164800][T10273] ext4 filesystem being mounted at /386/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 422.681933][T10277] ip_tables: iptables: counters copy to user failed while replacing table [ 423.220321][ T4232] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 423.600792][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.700442][ T4232] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 423.721379][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 423.741985][ T4232] usb 4-1: SerialNumber: syz [ 423.760727][ T4232] usb 4-1: config 0 descriptor?? [ 423.815955][ T4232] usb 4-1: selecting invalid altsetting 1 [ 423.828093][ T4232] usb 4-1: Can not set alternate setting to 1, error: -22 [ 423.859157][ T4232] synaptics_usb: probe of 4-1:0.0 failed with error -22 [ 424.392703][ T4233] usb 4-1: USB disconnect, device number 20 [ 433.676809][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 433.676820][ T26] audit: type=1326 audit(1791429936.152:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.1.2040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1123f199 code=0x7ffc0000 [ 433.886425][ T26] audit: type=1326 audit(1791429936.202:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.1.2040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7faa1123f199 code=0x7ffc0000 [ 434.080368][ T26] audit: type=1326 audit(1791429936.202:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.1.2040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1123f199 code=0x7ffc0000 [ 434.293368][ T26] audit: type=1326 audit(1791429936.202:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.1.2040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7faa1123f199 code=0x7ffc0000 [ 434.490509][ T26] audit: type=1326 audit(1791429936.202:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10488 comm="syz.1.2040" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1123f199 code=0x7ffc0000 [ 435.149946][ T26] audit: type=1326 audit(1791429937.622:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10540 comm="syz.6.2063" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 435.304276][ T26] audit: type=1326 audit(1791429937.672:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10540 comm="syz.6.2063" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 435.586754][ T26] audit: type=1326 audit(1791429937.672:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10540 comm="syz.6.2063" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 436.008390][ T26] audit: type=1326 audit(1791429937.672:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10540 comm="syz.6.2063" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 436.167114][ T26] audit: type=1326 audit(1791429937.672:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10540 comm="syz.6.2063" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2ab8055199 code=0x7ffc0000 [ 436.416206][T10572] netlink: 14752 bytes leftover after parsing attributes in process `syz.6.2078'. [ 436.578381][T10583] loop3: detected capacity change from 0 to 8 [ 436.763776][T10583] SQUASHFS error: zlib decompression failed, data probably corrupt [ 436.815634][T10583] SQUASHFS error: Failed to read block 0x4de: -5 [ 436.857825][T10583] SQUASHFS error: Failed to read block 0x4e2: -5 [ 436.907181][T10583] SQUASHFS error: Failed to read block 0x9ca: -5 [ 437.047161][T10583] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 437.075088][T10583] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 437.306456][ T4230] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 437.352293][T10583] SQUASHFS error: Failed to read block 0x535f2: -5 [ 437.624324][T10623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2101'. [ 438.090536][ T4230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.255982][ T4230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.997587][ T4230] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.050103][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 439.120238][ T4230] usb 4-1: SerialNumber: syz [ 439.251280][T10653] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2112'. [ 439.335396][T10662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2116'. [ 439.522573][ T4230] usb 4-1: 0:2 : does not exist [ 439.600810][ T4230] usb 4-1: USB disconnect, device number 21 [ 439.663595][T10594] udevd[10594]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.078769][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.086103][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.642454][T10692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2129'. [ 440.739808][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 440.739819][ T26] audit: type=1326 audit(1791429943.212:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.2134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 441.151806][ T26] audit: type=1326 audit(1791429943.262:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.2134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 441.317586][ T26] audit: type=1326 audit(1791429943.262:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.2134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 441.463667][ T26] audit: type=1326 audit(1791429943.262:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.2134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 441.558911][T10731] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2145'. [ 441.599579][ T26] audit: type=1326 audit(1791429943.262:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.2134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 441.883551][ T26] audit: type=1326 audit(1791429943.262:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.2134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 442.127630][T10737] ip_tables: iptables: counters copy to user failed while replacing table [ 442.283203][ T26] audit: type=1326 audit(1791429943.262:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.2134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 442.448270][ T26] audit: type=1326 audit(1791429943.272:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.2134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 443.730776][ T26] audit: type=1326 audit(1791429943.272:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.2134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 443.899573][T10762] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2156'. [ 443.988540][ T26] audit: type=1326 audit(1791429943.272:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.5.2134" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f7b43efd199 code=0x7ffc0000 [ 444.148679][ T4197] [ 444.151050][ T4197] ====================================================== [ 444.158055][ T4197] WARNING: possible circular locking dependency detected [ 444.165056][ T4197] syzkaller #0 Not tainted [ 444.169458][ T4197] ------------------------------------------------------ [ 444.176609][ T4197] kworker/u5:3/4197 is trying to acquire lock: [ 444.182762][ T4197] ffffffff8d5b4408 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 444.192026][ T4197] [ 444.192026][ T4197] but task is already holding lock: [ 444.199378][ T4197] ffffffff8d594a88 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 444.208713][ T4197] [ 444.208713][ T4197] which lock already depends on the new lock. [ 444.208713][ T4197] [ 444.219186][ T4197] [ 444.219186][ T4197] the existing dependency chain (in reverse order) is: [ 444.228182][ T4197] [ 444.228182][ T4197] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 444.235897][ T4197] __mutex_lock_common+0x1e5/0x2400 [ 444.241620][ T4197] mutex_lock_nested+0x17/0x20 [ 444.246902][ T4197] hci_remote_features_evt+0x5d9/0xa10 [ 444.252882][ T4197] hci_event_packet+0x600/0x1310 [ 444.258342][ T4197] hci_rx_work+0x255/0xa10 [ 444.263327][ T4197] process_one_work+0x867/0xff0 [ 444.268735][ T4197] worker_thread+0xad7/0x12a0 [ 444.273920][ T4197] kthread+0x42e/0x520 [ 444.278488][ T4197] ret_from_fork+0x1f/0x30 [ 444.283436][ T4197] [ 444.283436][ T4197] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 444.290733][ T4197] __mutex_lock_common+0x1e5/0x2400 [ 444.296438][ T4197] mutex_lock_nested+0x17/0x20 [ 444.301713][ T4197] l2cap_chan_connect+0xfb/0xe20 [ 444.307199][ T4197] l2cap_sock_connect+0x5a3/0x770 [ 444.312766][ T4197] kernel_connect+0x11c/0x180 [ 444.318025][ T4197] rfcomm_dlc_open+0x600/0x10c0 [ 444.323390][ T4197] rfcomm_sock_connect+0x2e9/0x600 [ 444.329019][ T4197] __sys_connect+0x3cb/0x450 [ 444.334124][ T4197] __x64_sys_connect+0x76/0x80 [ 444.339418][ T4197] do_syscall_64+0x4c/0xa0 [ 444.344367][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.350789][ T4197] [ 444.350789][ T4197] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 444.358175][ T4197] __lock_acquire+0x38f7/0x7d40 [ 444.363556][ T4197] lock_acquire+0x19f/0x400 [ 444.368570][ T4197] __mutex_lock_common+0x1e5/0x2400 [ 444.374275][ T4197] mutex_lock_nested+0x17/0x20 [ 444.379546][ T4197] rfcomm_security_cfm+0x95/0x780 [ 444.385078][ T4197] hci_encrypt_cfm+0x363/0x4d0 [ 444.390349][ T4197] hci_encrypt_change_evt+0xa04/0xdd0 [ 444.396225][ T4197] hci_event_packet+0x67e/0x1310 [ 444.401673][ T4197] hci_rx_work+0x255/0xa10 [ 444.406618][ T4197] process_one_work+0x867/0xff0 [ 444.411984][ T4197] worker_thread+0xad7/0x12a0 [ 444.417180][ T4197] kthread+0x42e/0x520 [ 444.421770][ T4197] ret_from_fork+0x1f/0x30 [ 444.426708][ T4197] [ 444.426708][ T4197] other info that might help us debug this: [ 444.426708][ T4197] [ 444.436940][ T4197] Chain exists of: [ 444.436940][ T4197] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 444.436940][ T4197] [ 444.449433][ T4197] Possible unsafe locking scenario: [ 444.449433][ T4197] [ 444.456883][ T4197] CPU0 CPU1 [ 444.462242][ T4197] ---- ---- [ 444.467605][ T4197] lock(hci_cb_list_lock); [ 444.472103][ T4197] lock(&hdev->lock); [ 444.478683][ T4197] lock(hci_cb_list_lock); [ 444.485691][ T4197] lock(rfcomm_mutex); [ 444.489834][ T4197] [ 444.489834][ T4197] *** DEADLOCK *** [ 444.489834][ T4197] [ 444.497975][ T4197] 4 locks held by kworker/u5:3/4197: [ 444.503244][ T4197] #0: ffff888079419138 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 444.513494][ T4197] #1: ffffc90002f8fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 444.524783][ T4197] #2: ffff888079098478 (&hdev->lock){+.+.}-{3:3}, at: hci_encrypt_change_evt+0xd9/0xdd0 [ 444.534591][ T4197] #3: ffffffff8d594a88 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 444.544313][ T4197] [ 444.544313][ T4197] stack backtrace: [ 444.550197][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 444.557745][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.567790][ T4197] Workqueue: hci3 hci_rx_work [ 444.572467][ T4197] Call Trace: [ 444.575992][ T4197] [ 444.578928][ T4197] dump_stack_lvl+0x188/0x250 [ 444.583603][ T4197] ? load_image+0x410/0x410 [ 444.588097][ T4197] ? show_regs_print_info+0x20/0x20 [ 444.593301][ T4197] ? print_circular_bug+0x12b/0x1a0 [ 444.598501][ T4197] check_noncircular+0x2f8/0x400 [ 444.603442][ T4197] ? print_deadlock_bug+0x5d0/0x5d0 [ 444.608622][ T4197] ? lockdep_lock+0xf1/0x1f0 [ 444.613222][ T4197] ? mark_lock+0x94/0x320 [ 444.617573][ T4197] ? _find_first_zero_bit+0xd1/0xf0 [ 444.622825][ T4197] __lock_acquire+0x38f7/0x7d40 [ 444.627670][ T4197] ? verify_lock_unused+0x140/0x140 [ 444.632876][ T4197] lock_acquire+0x19f/0x400 [ 444.637365][ T4197] ? rfcomm_security_cfm+0x95/0x780 [ 444.642568][ T4197] ? __might_sleep+0xf0/0xf0 [ 444.647151][ T4197] ? read_lock_is_recursive+0x10/0x10 [ 444.652512][ T4197] __mutex_lock_common+0x1e5/0x2400 [ 444.657722][ T4197] ? rfcomm_security_cfm+0x95/0x780 [ 444.662907][ T4197] ? rcu_lock_release+0x20/0x20 [ 444.667756][ T4197] ? __mutex_trylock_common+0x15c/0x260 [ 444.673288][ T4197] ? rfcomm_security_cfm+0x95/0x780 [ 444.678472][ T4197] ? mutex_lock_io_nested+0x60/0x60 [ 444.683658][ T4197] ? l2cap_security_cfm+0x12b4/0x1340 [ 444.689017][ T4197] ? __mutex_lock_common+0x435/0x2400 [ 444.694396][ T4197] ? l2cap_disconn_cfm+0xc0/0xc0 [ 444.699322][ T4197] mutex_lock_nested+0x17/0x20 [ 444.704084][ T4197] rfcomm_security_cfm+0x95/0x780 [ 444.709102][ T4197] ? __lock_acquire+0x7d40/0x7d40 [ 444.714112][ T4197] ? rfcomm_send_msc+0x340/0x340 [ 444.719036][ T4197] ? hci_event_packet+0x363/0x1310 [ 444.724147][ T4197] ? rfcomm_send_msc+0x340/0x340 [ 444.729073][ T4197] hci_encrypt_cfm+0x363/0x4d0 [ 444.733823][ T4197] hci_encrypt_change_evt+0xa04/0xdd0 [ 444.739182][ T4197] ? hci_remote_name_evt+0x5b0/0x5b0 [ 444.744454][ T4197] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 444.750428][ T4197] ? lock_chain_count+0x20/0x20 [ 444.755284][ T4197] ? __rwlock_init+0x140/0x140 [ 444.760033][ T4197] hci_event_packet+0x67e/0x1310 [ 444.764961][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 444.769800][ T4197] ? rcu_lock_release+0x20/0x20 [ 444.774640][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 444.780020][ T4197] hci_rx_work+0x255/0xa10 [ 444.784453][ T4197] process_one_work+0x867/0xff0 [ 444.789309][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 444.794940][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 444.800218][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 444.805422][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 444.810962][ T4197] ? wq_worker_running+0x97/0x170 [ 444.815975][ T4197] worker_thread+0xad7/0x12a0 [ 444.820647][ T4197] kthread+0x42e/0x520 [ 444.824701][ T4197] ? rcu_lock_release+0x20/0x20 [ 444.829540][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 444.834118][ T4197] ret_from_fork+0x1f/0x30 [ 444.838528][ T4197] [ 444.872361][T10776] loop3: detected capacity change from 0 to 512 [ 444.923720][T10776] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.2165: corrupted in-inode xattr [ 444.969232][T10776] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.2165: couldn't read orphan inode 15 (err -117) [ 445.010354][T10776] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 445.038988][T10776] EXT4-fs error (device loop3): empty_inline_dir:1890: inode #12: block 7: comm syz.3.2165: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 445.081887][T10776] EXT4-fs warning (device loop3): empty_inline_dir:1897: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60