last executing test programs: 12.566776034s ago: executing program 1 (id=2120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e", 0x2b}], 0x1}, 0x0) 12.119013423s ago: executing program 3 (id=2125): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 12.067309607s ago: executing program 2 (id=2127): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) 12.036762219s ago: executing program 3 (id=2128): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x104, &(0x7f00000003c0)={[{0x91, 0x4e00, "9e9f50914506db228e734b48a41406b3bdf3ad701be261b92ae9a3d9a6e461cde3694fe61755b30d3c9bd627a1424082a6c1dc9eec77c0986afc9ea71abf831b51bf1aaa232f4e558decfaf0c8f546cb4a5c9c6edee5542b8a4493d83bb163aeb5e582a265bf6fb6005c311823bf32fa0ac9b88e717a45ac0516cd1a8c484c7c25736357671804f40e2b6adb6614d2297a"}, {0xd, 0x4e00, "2df83d112368b3e069a12252e9"}, {0x51, 0x4e00, "6e39cdfcd823a5b47b5bcbf29ecc83437eccb260bf5e0f3757e05705e65ffb2a7b6f622fa9ec8b792e208f1eb30fb17515a1a16b83c0478c9648cbe572e7e8777c10e3a64bac70702fe2ba2f411aba623c"}]}) 11.851197993s ago: executing program 0 (id=2130): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7df", 0x2a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd4824", 0x38}, {&(0x7f0000000740)}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c5", 0x52}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af98057ad0674eff7875169861ce6274b379522d411d3766aa7de767671efa60a1fb949feae7ec37efdfbcf1afd4d5cf86a0f9ae55644480d6a5e735b84303583d6c2534badb3981b5448037697faa59cc666dd9ac5c7d019b47f102d78fcc0f1b609fdc51fd8d0ff81d918cbd51e9215d34ed61bd9b1bdc7afd86dc924080a278f4a7c1031bd8c64d14781e109678224f0af3631ca72a0f9c1da8d03e2f9fda9368b50f087578e25371749e0ba68e30e020b44de5ce89e0ee0bc6f843647bed3295d40858bc264defce7e12a15aea29c34861634a2c6768676349fdb9496607461a6d87cf9ae33a1bb2227a97c80a0442a79f5e268a06751322cb161d0d952368dd4c7eae22466981250b4a6de41b00e121a01b26b23bb1804c7f2d92834965cd55f0cb95d60be7dec94b05ccd6ca29191bbd26ac4241fedbd649806a3a904381bbf5e13a25cc40161c73daa80a01d682cc0ed95e15d2ad32d87b4eb88d8240dcd2e6e935d35f7229b3fa299c036276924cf034f4187516b4246a6591ff2f9a32a7ea652741703b3a4aa4de4977d61078ea09962ce6435b65ff94de3eb1248c8e80b9d146e6c09e5d1e639285b9b162c6cf08ec8e86cd865522f5af1a76b8a1cd8672d5367c90310016f806b42512891c2c11110b44abf6dba45bbf8daf3a6a85c5d5d838499e5e5a207", 0x26f}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="fec6", 0x2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11.826547065s ago: executing program 2 (id=2131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1bb50}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 11.696526643s ago: executing program 1 (id=2132): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) 11.495428826s ago: executing program 3 (id=2133): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x295, 0x1, 0xfffffffc, 0x4, 0x0, 0xddb0, 0x4, 0xf2e, 0xfff}}}}]}, 0x58}}, 0x4000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x24dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 11.309624318s ago: executing program 4 (id=2134): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 11.256859501s ago: executing program 4 (id=2135): close(0x3) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) 11.162144548s ago: executing program 4 (id=2136): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000004c0)={r1, 0x7, 0x268e, 0x1, 0xe2d, 0x20, 0x7, 0x8, {r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x6, 0x96, 0xcd, 0x4b, 0xfffffffd}}, &(0x7f0000000240)=0xb0) 11.071760943s ago: executing program 4 (id=2137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x197, 0x7, 0x9}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xa}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) 10.985521019s ago: executing program 0 (id=2138): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 10.949157481s ago: executing program 0 (id=2139): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ftruncate(r0, 0x81ff) 10.790236032s ago: executing program 0 (id=2140): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}]}}]}, 0x3c}}, 0x20004015) 727.470272ms ago: executing program 0 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x0) 696.106544ms ago: executing program 0 (id=2142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e", 0x2b}], 0x1}, 0x0) 695.015644ms ago: executing program 2 (id=2143): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x1000000) 650.324467ms ago: executing program 2 (id=2144): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7df", 0x2a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd4824", 0x38}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e3", 0x5e}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c5", 0x52}, {&(0x7f00000021c0)="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", 0x26f}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="fe", 0x1}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 618.855219ms ago: executing program 1 (id=2145): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 618.496449ms ago: executing program 3 (id=2146): close(0x3) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) 617.769299ms ago: executing program 4 (id=2147): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x104, &(0x7f00000003c0)={[{0x91, 0x4e00, "9e9f50914506db228e734b48a41406b3bdf3ad701be261b92ae9a3d9a6e461cde3694fe61755b30d3c9bd627a1424082a6c1dc9eec77c0986afc9ea71abf831b51bf1aaa232f4e558decfaf0c8f546cb4a5c9c6edee5542b8a4493d83bb163aeb5e582a265bf6fb6005c311823bf32fa0ac9b88e717a45ac0516cd1a8c484c7c25736357671804f40e2b6adb6614d2297a"}, {0xd, 0x4e00, "2df83d112368b3e069a12252e9"}, {0x51, 0x4e00, "6e39cdfcd823a5b47b5bcbf29ecc83437eccb260bf5e0f3757e05705e65ffb2a7b6f622fa9ec8b792e208f1eb30fb17515a1a16b83c0478c9648cbe572e7e8777c10e3a64bac70702fe2ba2f411aba623c"}]}) 288.098321ms ago: executing program 1 (id=2148): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7df", 0x2a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd4824", 0x38}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917", 0x36}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c5", 0x52}, {&(0x7f00000021c0)="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", 0x26f}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="fec6", 0x2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 287.213081ms ago: executing program 2 (id=2149): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 230.166205ms ago: executing program 1 (id=2150): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ftruncate(r0, 0x81ff) 216.796555ms ago: executing program 2 (id=2151): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x682, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000002c0)={0x2, 0xffffffff, 0xed0, 0x2, 0x0, 0x42}) 148.54214ms ago: executing program 3 (id=2152): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@none, 0x2, 0xe, "d08f5c", 0x3, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x7, "5a77ba", 0xf2, 0x81}]}}}, 0x20) 89.420414ms ago: executing program 3 (id=2153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x4, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x69}]}, &(0x7f0000001880)='syzkaller\x00', 0x3, 0x40, &(0x7f00000018c0)=""/64, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x400000}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdb", 0x32}], 0x1}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x0, 0x6, 0x0, 0xb, 0xfffffffffffffff8, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000200)=@raw=[@ringbuf_query], &(0x7f0000000300)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xee26, r8, 0x0, 0x0, 0x0, 0x10, 0xdf}, 0x94) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000240)={r4}, &(0x7f0000000280)=0x8) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000100)={0x1, 0x101}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x180a0, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x44}}, 0x24) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x10, 0x1, 0x3, 0x47, @local, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x80, 0x0, 0x0, 0x6}}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000500)={'filter\x00', 0x4}, 0x68) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 54.328366ms ago: executing program 4 (id=2154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ffedffffff000000ffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[], 0xfe37, 0x0) 0s ago: executing program 1 (id=2155): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}]}}]}, 0x3c}}, 0x20004015) kernel console output (not intermixed with test programs): EAD) flags 0x80700 phys_seg 1 prio class 2 [ 117.745618][ T7154] loop3: detected capacity change from 0 to 64 [ 117.821404][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.807'. [ 118.413571][ T7176] loop2: detected capacity change from 0 to 512 [ 118.416981][ T7176] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.418942][ T7176] EXT4-fs (loop2): filesystem is read-only [ 118.648816][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.819'. [ 118.895994][ T7202] loop3: detected capacity change from 0 to 32768 [ 118.897752][ T7202] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.823 (7202) [ 118.901396][ T7202] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 118.903033][ T7202] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 118.904376][ T7202] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 118.906023][ T7202] BTRFS info (device loop3): trying to use backup root at mount time [ 118.907275][ T7202] BTRFS info (device loop3): force clearing of disk cache [ 118.908340][ T7202] BTRFS info (device loop3): enabling ssd optimizations [ 118.909497][ T7202] BTRFS info (device loop3): using spread ssd allocation scheme [ 118.910692][ T7202] BTRFS info (device loop3): turning on flush-on-commit [ 118.911848][ T7202] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 118.913287][ T7202] BTRFS info (device loop3): use lzo compression, level 0 [ 118.914355][ T7202] BTRFS info (device loop3): turning off flush-on-commit [ 118.915461][ T7202] BTRFS info (device loop3): allowing degraded mounts [ 118.916534][ T7202] BTRFS info (device loop3): using free space tree [ 119.022286][ T7202] BTRFS info (device loop3): rebuilding free space tree [ 119.025722][ T7202] BTRFS info (device loop3): checking UUID tree [ 119.101620][ T4322] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.429744][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.438377][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.515793][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.830'. [ 120.155623][ T7256] loop4: detected capacity change from 0 to 128 [ 120.157295][ T7256] FAT-fs (loop4): Unrecognized mount option "1844674407370955161500000000000000000000ÿ" or missing value [ 120.400115][ T7274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.841'. [ 120.667262][ T7286] loop1: detected capacity change from 0 to 1024 [ 120.672355][ T7286] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.693557][ T7286] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.713186][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 121.257242][ T7302] loop0: detected capacity change from 0 to 8192 [ 121.365496][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.852'. [ 121.494301][ T7313] loop2: detected capacity change from 0 to 1024 [ 121.500569][ T7313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.960396][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 122.148656][ T7345] loop4: detected capacity change from 0 to 1024 [ 122.155675][ T7345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.170552][ T7345] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.186937][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 122.290192][ T7354] loop4: detected capacity change from 0 to 8 [ 122.335839][ T7354] SQUASHFS error: lzo decompression failed, data probably corrupt [ 122.337123][ T7354] SQUASHFS error: Failed to read block 0x91: -5 [ 122.338074][ T7354] SQUASHFS error: Unable to read metadata cache entry [8f] [ 122.339164][ T7354] SQUASHFS error: Unable to read inode 0x11f [ 122.448989][ T7362] loop4: detected capacity change from 0 to 1024 [ 122.461970][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.465943][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.872037][ T7369] loop1: detected capacity change from 0 to 4096 [ 122.873633][ T7369] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 122.882790][ T7369] ntfs3: loop1: Failed to load $Extend. [ 123.374653][ T7398] 9pnet_fd: Insufficient options for proto=fd [ 123.420472][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.424907][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.926633][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 123.933136][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.934710][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.947252][ T7410] loop2: detected capacity change from 0 to 7 [ 123.948666][ T7410] Dev loop2: unable to read RDB block 7 [ 123.949583][ T7410] loop2: unable to read partition table [ 123.950600][ T7410] loop2: partition table beyond EOD, truncated [ 124.019072][ T7410] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 124.477352][ T7422] loop1: detected capacity change from 0 to 32768 [ 124.481207][ T7422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.896 (7422) [ 124.489706][ T7422] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.491285][ T7422] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 124.492590][ T7422] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 124.494082][ T7422] BTRFS info (device loop1): trying to use backup root at mount time [ 124.495304][ T7422] BTRFS info (device loop1): force clearing of disk cache [ 124.496344][ T7422] BTRFS info (device loop1): enabling ssd optimizations [ 124.497388][ T7422] BTRFS info (device loop1): using spread ssd allocation scheme [ 124.498612][ T7422] BTRFS info (device loop1): turning on flush-on-commit [ 124.499678][ T7422] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 124.501183][ T7422] BTRFS info (device loop1): use lzo compression, level 0 [ 124.502289][ T7422] BTRFS info (device loop1): turning off flush-on-commit [ 124.503423][ T7422] BTRFS info (device loop1): allowing degraded mounts [ 124.504502][ T7422] BTRFS info (device loop1): using free space tree [ 124.540587][ T7422] BTRFS info (device loop1): rebuilding free space tree [ 124.545794][ T7422] BTRFS info (device loop1): checking UUID tree [ 124.574049][ T4321] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.682188][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.683954][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.471060][ T7472] 9pnet_fd: Insufficient options for proto=fd [ 125.581053][ T7486] loop3: detected capacity change from 0 to 1024 [ 125.588478][ T7486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.603244][ T7486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.630385][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 125.932202][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933311][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.096497][ T7508] 9pnet_fd: Insufficient options for proto=fd [ 126.544568][ T7513] loop2: detected capacity change from 0 to 4096 [ 126.546451][ T7513] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 126.582868][ T7517] loop4: detected capacity change from 0 to 128 [ 126.594838][ T7513] ntfs3: loop2: Failed to load $Extend. [ 126.597741][ T7519] loop1: detected capacity change from 0 to 1024 [ 126.599809][ T7519] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.647032][ T7519] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 126.673831][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 126.932522][ T7547] loop1: detected capacity change from 0 to 256 [ 126.960990][ T7547] FAT-fs (loop1): Directory bread(block 64) failed [ 126.964531][ T7547] FAT-fs (loop1): Directory bread(block 65) failed [ 126.965727][ T7547] FAT-fs (loop1): Directory bread(block 66) failed [ 126.966926][ T7547] FAT-fs (loop1): Directory bread(block 67) failed [ 126.968073][ T7547] FAT-fs (loop1): Directory bread(block 68) failed [ 126.969106][ T7547] FAT-fs (loop1): Directory bread(block 69) failed [ 126.970352][ T7547] FAT-fs (loop1): Directory bread(block 70) failed [ 126.971755][ T7547] FAT-fs (loop1): Directory bread(block 71) failed [ 126.972754][ T7547] FAT-fs (loop1): Directory bread(block 72) failed [ 126.973801][ T7547] FAT-fs (loop1): Directory bread(block 73) failed [ 127.059816][ T7553] loop3: detected capacity change from 0 to 1024 [ 127.067586][ T7553] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.069744][ T7555] netlink: 68 bytes leftover after parsing attributes in process `syz.1.939'. [ 127.089423][ T7553] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.116928][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 127.157462][ T7561] loop3: detected capacity change from 0 to 1024 [ 127.247209][ T7559] loop1: detected capacity change from 0 to 32768 [ 127.263825][ T7559] JBD2: Ignoring recovery information on journal [ 127.303971][ T7559] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 127.357623][ T4321] ocfs2: Unmounting device (7,1) on (node local) [ 127.855477][ T7584] netlink: 68 bytes leftover after parsing attributes in process `syz.0.950'. [ 127.883067][ T7587] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.897091][ T7589] overlayfs: overlapping lowerdir path [ 127.913317][ T7587] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.949659][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 127.996158][ T7597] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 127.997353][ T7597] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 128.038807][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.959'. [ 128.045600][ T7605] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.047145][ T7605] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.048452][ T7605] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.049776][ T7605] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.054012][ T7605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.959'. [ 128.120392][ T7594] JBD2: Ignoring recovery information on journal [ 128.133839][ T7594] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 128.169961][ T4321] ocfs2: Unmounting device (7,1) on (node local) [ 128.300127][ T7624] netlink: 68 bytes leftover after parsing attributes in process `syz.1.964'. [ 128.338977][ T7626] overlayfs: overlapping lowerdir path [ 128.389263][ T7628] device syzkaller0 entered promiscuous mode [ 128.453455][ T7632] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 128.455005][ T7632] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 128.582590][ T7638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.585343][ T7638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.777515][ T7640] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.972 (7640) [ 128.783185][ T7640] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.784830][ T7640] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 128.786119][ T7640] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 128.787796][ T7640] BTRFS info (device loop1): trying to use backup root at mount time [ 128.789209][ T7640] BTRFS info (device loop1): force clearing of disk cache [ 128.790374][ T7640] BTRFS info (device loop1): enabling ssd optimizations [ 128.791688][ T7640] BTRFS info (device loop1): using spread ssd allocation scheme [ 128.793023][ T7640] BTRFS info (device loop1): turning on flush-on-commit [ 128.794200][ T7640] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 128.795797][ T7640] BTRFS info (device loop1): use lzo compression, level 0 [ 128.797054][ T7640] BTRFS info (device loop1): turning off flush-on-commit [ 128.798263][ T7640] BTRFS info (device loop1): allowing degraded mounts [ 128.799367][ T7640] BTRFS info (device loop1): using free space tree [ 128.814605][ T7640] BTRFS info (device loop1): rebuilding free space tree [ 128.819029][ T7640] BTRFS info (device loop1): checking UUID tree [ 128.884772][ T4321] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.064039][ T7674] netlink: 68 bytes leftover after parsing attributes in process `syz.4.977'. [ 129.093250][ T7678] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 129.094519][ T7678] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.248286][ T7696] set_capacity_and_notify: 3 callbacks suppressed [ 129.248295][ T7696] loop2: detected capacity change from 0 to 7 [ 129.257899][ T7696] Dev loop2: unable to read RDB block 7 [ 129.258988][ T7696] loop2: AHDI p1 p2 p3 [ 129.259719][ T7696] loop2: partition table partially beyond EOD, truncated [ 129.265327][ T7696] loop2: p1 start 1601398130 is beyond EOD, truncated [ 129.273550][ T7696] loop2: p2 start 1702059890 is beyond EOD, truncated [ 129.283959][ T7698] loop8: detected capacity change from 0 to 8 [ 129.287659][ T7698] Dev loop8: unable to read RDB block 8 [ 129.289771][ T7698] loop8: unable to read partition table [ 129.294986][ T7698] loop8: partition table beyond EOD, truncated [ 129.301653][ T7698] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 129.343994][ T7690] loop2: detected capacity change from 0 to 32768 [ 129.348493][ T7690] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.985 (7690) [ 129.353557][ T7704] netlink: 72 bytes leftover after parsing attributes in process `syz.3.991'. [ 129.359943][ T7690] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.364561][ T7690] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 129.367075][ T7690] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 129.371074][ T7690] BTRFS info (device loop2): trying to use backup root at mount time [ 129.374813][ T7690] BTRFS info (device loop2): force clearing of disk cache [ 129.377361][ T7690] BTRFS info (device loop2): enabling ssd optimizations [ 129.379549][ T7690] BTRFS info (device loop2): using spread ssd allocation scheme [ 129.382996][ T7690] BTRFS info (device loop2): turning on flush-on-commit [ 129.385008][ T7690] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 129.388227][ T7690] BTRFS info (device loop2): use lzo compression, level 0 [ 129.391315][ T7690] BTRFS info (device loop2): turning off flush-on-commit [ 129.393588][ T7690] BTRFS info (device loop2): allowing degraded mounts [ 129.397046][ T7690] BTRFS info (device loop2): using free space tree [ 129.484530][ T7709] loop4: detected capacity change from 0 to 32768 [ 129.490035][ T7709] JBD2: Ignoring recovery information on journal [ 129.501897][ T7709] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 129.515732][ T7709] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 129.518387][ T7709] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 129.519842][ T7709] OCFS2: File system is now read-only. [ 129.520652][ T7709] (syz.4.993,7709,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 129.521883][ T7709] (syz.4.993,7709,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 129.523268][ T7709] (syz.4.993,7709,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 129.524537][ T7709] (syz.4.993,7709,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 129.525767][ T7709] (syz.4.993,7709,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 129.526950][ T7709] (syz.4.993,7709,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 129.528228][ T7709] (syz.4.993,7709,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 129.529511][ T7709] (syz.4.993,7709,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 129.530790][ T7709] (syz.4.993,7709,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 129.532361][ T7709] (syz.4.993,7709,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 129.533752][ T7709] (syz.4.993,7709,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 129.535118][ T7709] (syz.4.993,7709,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 129.536484][ T7709] (syz.4.993,7709,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 129.537810][ T7709] (syz.4.993,7709,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 129.539069][ T7709] (syz.4.993,7709,0):ocfs2_lock_allocators:2682 ERROR: status = -30 [ 129.540193][ T7709] (syz.4.993,7709,0):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 129.541448][ T7709] (syz.4.993,7709,0):ocfs2_write_begin:1907 ERROR: status = -30 [ 129.568144][ T4330] ocfs2: Unmounting device (7,4) on (node local) [ 129.570201][ T7719] netlink: 68 bytes leftover after parsing attributes in process `syz.3.994'. [ 129.659902][ T7690] BTRFS info (device loop2): rebuilding free space tree [ 129.664636][ T7690] BTRFS info (device loop2): checking UUID tree [ 129.742553][ T4326] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.795560][ T7742] loop8: detected capacity change from 0 to 7 [ 129.804178][ T7742] Dev loop8: unable to read RDB block 7 [ 129.805304][ T7742] loop8: unable to read partition table [ 129.806378][ T7742] loop8: partition table beyond EOD, truncated [ 129.807324][ T7742] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 129.896136][ T7752] loop2: detected capacity change from 0 to 7 [ 129.903679][ T7752] Dev loop2: unable to read RDB block 7 [ 129.904603][ T7752] loop2: AHDI p1 p2 p3 [ 129.905248][ T7752] loop2: partition table partially beyond EOD, truncated [ 129.913304][ T7752] loop2: p1 start 1601398130 is beyond EOD, truncated [ 129.914380][ T7752] loop2: p2 start 1702059890 is beyond EOD, truncated [ 129.925918][ T7754] autofs4:pid:7754:autofs_fill_super: called with bogus options [ 129.974805][ T7759] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1006'. [ 130.063497][ T7769] loop8: detected capacity change from 0 to 7 [ 130.064993][ T7769] Dev loop8: unable to read RDB block 7 [ 130.065887][ T7769] loop8: unable to read partition table [ 130.066959][ T7769] loop8: partition table beyond EOD, truncated [ 130.067928][ T7769] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 130.096107][ T7771] loop2: detected capacity change from 0 to 4096 [ 130.119027][ T7771] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 130.170645][ T7771] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 130.172348][ T7764] loop1: detected capacity change from 0 to 32768 [ 130.174999][ T7764] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1009 (7764) [ 130.187296][ T7764] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.189222][ T7764] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 130.190528][ T7764] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 130.192305][ T7764] BTRFS info (device loop1): trying to use backup root at mount time [ 130.194132][ T7764] BTRFS info (device loop1): force clearing of disk cache [ 130.195184][ T7764] BTRFS info (device loop1): enabling ssd optimizations [ 130.196251][ T7764] BTRFS info (device loop1): using spread ssd allocation scheme [ 130.197347][ T7764] BTRFS info (device loop1): turning on flush-on-commit [ 130.198302][ T7764] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 130.199642][ T7764] BTRFS info (device loop1): use lzo compression, level 0 [ 130.200681][ T7764] BTRFS info (device loop1): turning off flush-on-commit [ 130.201844][ T7764] BTRFS info (device loop1): allowing degraded mounts [ 130.202840][ T7764] BTRFS info (device loop1): using free space tree [ 130.315566][ T7803] loop2: detected capacity change from 0 to 7 [ 130.316992][ T7803] Dev loop2: unable to read RDB block 7 [ 130.318112][ T7803] loop2: AHDI p1 p2 p3 [ 130.319506][ T7764] BTRFS info (device loop1): rebuilding free space tree [ 130.321521][ T7803] loop2: partition table partially beyond EOD, truncated [ 130.322837][ T7803] loop2: p1 start 1601398130 is beyond EOD, truncated [ 130.323869][ T7803] loop2: p2 start 1702059890 is beyond EOD, truncated [ 130.326728][ T7764] BTRFS info (device loop1): checking UUID tree [ 130.331215][ T6090] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.383107][ T4321] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.470129][ T6837] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop1 scanned by udevd (6837) [ 130.493151][ T7816] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1022'. [ 130.513895][ T6090] usb 1-1: Using ep0 maxpacket: 32 [ 130.516758][ T6090] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.518748][ T6090] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 130.520022][ T6090] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 130.523567][ T6090] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 130.525215][ T6090] usb 1-1: config 128 has no interface number 0 [ 130.526217][ T6090] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 130.528029][ T6090] usb 1-1: config 128 interface 127 has no altsetting 0 [ 130.555079][ T6090] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 130.556515][ T6090] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.557637][ T6090] usb 1-1: Product: syz [ 130.558229][ T6090] usb 1-1: Manufacturer: syz [ 130.558889][ T6090] usb 1-1: SerialNumber: syz [ 130.562277][ T7773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.579286][ T7821] Dev loop8: unable to read RDB block 7 [ 130.580377][ T7821] loop8: unable to read partition table [ 130.582111][ T7821] loop8: partition table beyond EOD, truncated [ 130.583083][ T7821] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 130.755655][ T7834] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1031'. [ 130.799982][ T6090] usb 1-1: USB disconnect, device number 6 [ 130.808457][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.811700][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.001780][ T6837] udevd[6837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.039640][ T7845] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1035'. [ 131.113548][ T6837] Dev loop8: unable to read RDB block 8 [ 131.114489][ T6837] loop8: unable to read partition table [ 131.115420][ T6837] loop8: partition table beyond EOD, truncated [ 131.120191][ T7847] Dev loop8: unable to read RDB block 8 [ 131.121082][ T7847] loop8: unable to read partition table [ 131.122492][ T7847] loop8: partition table beyond EOD, truncated [ 131.123490][ T7847] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 131.235397][ T7857] Dev loop8: unable to read RDB block 7 [ 131.236464][ T7857] loop8: unable to read partition table [ 131.243628][ T7857] loop8: partition table beyond EOD, truncated [ 131.245248][ T7859] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1042'. [ 131.246846][ T7857] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 131.390626][ T7868] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1046'. [ 131.561276][ T6090] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.652606][ T6837] Dev loop8: unable to read RDB block 8 [ 131.654668][ T6837] loop8: unable to read partition table [ 131.656017][ T6837] loop8: partition table beyond EOD, truncated [ 131.662311][ T7877] Dev loop8: unable to read RDB block 8 [ 131.663225][ T7877] loop8: unable to read partition table [ 131.664312][ T7877] loop8: partition table beyond EOD, truncated [ 131.665331][ T7877] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 131.743301][ T6090] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 131.745039][ T6090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.747767][ T6090] usb 1-1: config 0 descriptor?? [ 131.750738][ T6090] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 132.070686][ T6090] gspca_cpia1: usb_control_msg 05, error -71 [ 132.072070][ T6090] gspca_cpia1: usb_control_msg 01, error -71 [ 132.073284][ T6090] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 132.075270][ T6090] usb 1-1: USB disconnect, device number 7 [ 132.167797][ T7896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.169470][ T7896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.210251][ T7898] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1057'. [ 132.273463][ T7901] FAT-fs (loop4): Directory bread(block 64) failed [ 132.274838][ T7901] FAT-fs (loop4): Directory bread(block 65) failed [ 132.276006][ T7901] FAT-fs (loop4): Directory bread(block 66) failed [ 132.277240][ T7901] FAT-fs (loop4): Directory bread(block 67) failed [ 132.278453][ T7901] FAT-fs (loop4): Directory bread(block 68) failed [ 132.279602][ T7901] FAT-fs (loop4): Directory bread(block 69) failed [ 132.280968][ T7901] FAT-fs (loop4): Directory bread(block 70) failed [ 132.283054][ T7901] FAT-fs (loop4): Directory bread(block 71) failed [ 132.284277][ T7901] FAT-fs (loop4): Directory bread(block 72) failed [ 132.285451][ T7901] FAT-fs (loop4): Directory bread(block 73) failed [ 132.485463][ T4469] Dev loop8: unable to read RDB block 8 [ 132.486530][ T4469] loop8: unable to read partition table [ 132.487489][ T4469] loop8: partition table beyond EOD, truncated [ 132.490255][ T7905] Dev loop8: unable to read RDB block 8 [ 132.499182][ T7905] loop8: unable to read partition table [ 132.500113][ T7905] loop8: partition table beyond EOD, truncated [ 132.501084][ T7905] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 132.527313][ T7907] Dev loop8: unable to read RDB block 7 [ 132.528268][ T7907] loop8: unable to read partition table [ 132.529225][ T7907] loop8: partition table beyond EOD, truncated [ 132.530191][ T7907] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 132.948019][ T7924] FAT-fs (loop3): Directory bread(block 64) failed [ 132.952404][ T7924] FAT-fs (loop3): Directory bread(block 65) failed [ 132.956725][ T7924] FAT-fs (loop3): Directory bread(block 66) failed [ 132.968324][ T7924] FAT-fs (loop3): Directory bread(block 67) failed [ 132.969511][ T7924] FAT-fs (loop3): Directory bread(block 68) failed [ 132.974808][ T7924] FAT-fs (loop3): Directory bread(block 69) failed [ 132.979205][ T7924] FAT-fs (loop3): Directory bread(block 70) failed [ 132.979770][ T7922] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1068 (7922) [ 132.980342][ T7924] FAT-fs (loop3): Directory bread(block 71) failed [ 132.987577][ T7924] FAT-fs (loop3): Directory bread(block 72) failed [ 132.989765][ T7924] FAT-fs (loop3): Directory bread(block 73) failed [ 132.992227][ T7922] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.993935][ T7922] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 132.998008][ T7922] BTRFS info (device loop1): turning off barriers [ 132.999071][ T7922] BTRFS info (device loop1): setting nodatasum [ 133.011494][ T7922] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 133.013558][ T7922] BTRFS error (device loop1): open_ctree failed: -22 [ 133.047409][ T7929] Dev loop8: unable to read RDB block 8 [ 133.050608][ T7929] loop8: unable to read partition table [ 133.054962][ T7929] loop8: partition table beyond EOD, truncated [ 133.060272][ T7929] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 133.089909][ T7932] Dev loop8: unable to read RDB block 7 [ 133.091002][ T7932] loop8: unable to read partition table [ 133.093051][ T7932] loop8: partition table beyond EOD, truncated [ 133.094162][ T7932] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 133.143002][ T4469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4469) [ 133.413938][ T7937] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1073 (7937) [ 133.427058][ T7937] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.429205][ T7937] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 133.430840][ T7937] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 133.433072][ T7937] BTRFS info (device loop3): trying to use backup root at mount time [ 133.434786][ T7937] BTRFS info (device loop3): force clearing of disk cache [ 133.436722][ T7937] BTRFS info (device loop3): enabling ssd optimizations [ 133.438370][ T7937] BTRFS info (device loop3): using spread ssd allocation scheme [ 133.440060][ T7937] BTRFS info (device loop3): turning on flush-on-commit [ 133.441400][ T7937] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 133.442966][ T7937] BTRFS info (device loop3): use lzo compression, level 0 [ 133.444171][ T7937] BTRFS info (device loop3): turning off flush-on-commit [ 133.445421][ T7937] BTRFS info (device loop3): allowing degraded mounts [ 133.446498][ T7937] BTRFS info (device loop3): using free space tree [ 133.455775][ T7937] BTRFS info (device loop3): rebuilding free space tree [ 133.460293][ T7937] BTRFS info (device loop3): checking UUID tree [ 133.503715][ T4322] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.797728][ T7977] Dev loop8: unable to read RDB block 8 [ 133.798757][ T7977] loop8: unable to read partition table [ 133.799747][ T7977] loop8: partition table beyond EOD, truncated [ 133.800731][ T7977] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 133.897439][ T7983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.018447][ T7981] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.020172][ T7981] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 134.022868][ T7981] BTRFS info (device loop0): turning off barriers [ 134.023947][ T7981] BTRFS info (device loop0): setting nodatasum [ 134.024928][ T7981] BTRFS error (device loop0): support for check_integrity* not compiled in! [ 134.031809][ T7981] BTRFS error (device loop0): open_ctree failed: -22 [ 134.063242][ T4469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4469) [ 134.147628][ T7985] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1086 (7985) [ 134.150675][ T7985] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.152250][ T7985] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 134.153470][ T7985] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 134.155960][ T7985] BTRFS info (device loop2): trying to use backup root at mount time [ 134.157270][ T7985] BTRFS info (device loop2): force clearing of disk cache [ 134.160537][ T7985] BTRFS info (device loop2): enabling ssd optimizations [ 134.162033][ T7985] BTRFS info (device loop2): using spread ssd allocation scheme [ 134.163233][ T7985] BTRFS info (device loop2): turning on flush-on-commit [ 134.164245][ T7985] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 134.165616][ T7985] BTRFS info (device loop2): use lzo compression, level 0 [ 134.166678][ T7985] BTRFS info (device loop2): turning off flush-on-commit [ 134.167685][ T7985] BTRFS info (device loop2): allowing degraded mounts [ 134.168639][ T7985] BTRFS info (device loop2): using free space tree [ 134.359494][ T8011] set_capacity_and_notify: 17 callbacks suppressed [ 134.359504][ T8011] loop0: detected capacity change from 0 to 40427 [ 134.368297][ T8011] F2FS-fs (loop0): invalid crc value [ 134.376569][ T8011] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.388535][ T8011] F2FS-fs (loop0): Start checkpoint disabled! [ 134.394959][ T7985] BTRFS info (device loop2): rebuilding free space tree [ 134.395973][ T8011] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 134.404213][ T7985] BTRFS info (device loop2): checking UUID tree [ 134.446445][ T277] kworker/u4:4: attempt to access beyond end of device [ 134.446445][ T277] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 134.557368][ T4326] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.760491][ T8036] loop8: detected capacity change from 0 to 8 [ 134.765565][ T8036] Dev loop8: unable to read RDB block 8 [ 134.767603][ T8036] loop8: unable to read partition table [ 134.769879][ T8036] loop8: partition table beyond EOD, truncated [ 134.772182][ T8036] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 134.775556][ T4469] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop2 scanned by udevd (4469) [ 134.829416][ T8039] loop3: detected capacity change from 0 to 1024 [ 134.838796][ T8039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.139383][ T8048] loop4: detected capacity change from 0 to 32768 [ 135.162580][ T8048] JBD2: Ignoring recovery information on journal [ 135.178904][ T8048] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 135.212394][ T4330] ocfs2: Unmounting device (7,4) on (node local) [ 135.272940][ T8054] loop2: detected capacity change from 0 to 764 [ 135.335656][ T8054] rock: directory entry would overflow storage [ 135.336798][ T8054] rock: sig=0x4654, size=5, remaining=4 [ 135.395426][ T8065] loop8: detected capacity change from 0 to 8 [ 135.396965][ T8065] Dev loop8: unable to read RDB block 8 [ 135.398003][ T8065] loop8: unable to read partition table [ 135.400886][ T8065] loop8: partition table beyond EOD, truncated [ 135.425185][ T8065] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 135.473059][ T8070] loop4: detected capacity change from 0 to 1024 [ 135.479879][ T8073] loop0: detected capacity change from 0 to 512 [ 135.483844][ T8073] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.486930][ T8070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.488120][ T8073] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.514259][ T8073] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 135.520116][ T8073] EXT4-fs (loop0): 1 truncate cleaned up [ 135.524439][ T8073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.547392][ T8077] loop4: detected capacity change from 0 to 1024 [ 135.683054][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 135.740836][ T8072] loop2: detected capacity change from 0 to 32768 [ 135.790665][ T8079] [ 135.790665][ T8079] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.790665][ T8079] [ 135.798582][ T8072] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.800784][ T8072] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 135.802725][ T8072] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 135.804543][ T8072] BTRFS info (device loop2): trying to use backup root at mount time [ 135.805850][ T8072] BTRFS info (device loop2): force clearing of disk cache [ 135.807025][ T8072] BTRFS info (device loop2): enabling ssd optimizations [ 135.808163][ T8072] BTRFS info (device loop2): using spread ssd allocation scheme [ 135.809496][ T8072] BTRFS info (device loop2): turning on flush-on-commit [ 135.810601][ T8072] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 135.812151][ T8072] BTRFS info (device loop2): use lzo compression, level 0 [ 135.813318][ T8072] BTRFS info (device loop2): turning off flush-on-commit [ 135.814467][ T8072] BTRFS info (device loop2): allowing degraded mounts [ 135.815420][ T8072] BTRFS info (device loop2): using free space tree [ 135.847752][ T4327] [ 135.847752][ T4327] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.847752][ T4327] [ 135.853347][ T4327] [ 135.853347][ T4327] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.853347][ T4327] [ 135.895057][ T8072] BTRFS info (device loop2): rebuilding free space tree [ 135.899703][ T8072] BTRFS info (device loop2): checking UUID tree [ 135.974606][ T4326] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.091943][ T8113] Dev loop8: unable to read RDB block 8 [ 136.093063][ T8113] loop8: unable to read partition table [ 136.094164][ T8113] loop8: partition table beyond EOD, truncated [ 136.095123][ T8113] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 136.234246][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 136.239840][ T8127] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.241398][ T8127] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.242740][ T8127] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.243958][ T8127] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.248677][ T8127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'. [ 136.784539][ T8136] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1129 (8136) [ 136.790858][ T8136] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.800333][ T8136] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 136.802039][ T8136] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 136.803737][ T8136] BTRFS info (device loop3): trying to use backup root at mount time [ 136.805010][ T8136] BTRFS info (device loop3): force clearing of disk cache [ 136.806130][ T8136] BTRFS info (device loop3): enabling ssd optimizations [ 136.807145][ T8136] BTRFS info (device loop3): using spread ssd allocation scheme [ 136.808277][ T8136] BTRFS info (device loop3): turning on flush-on-commit [ 136.809325][ T8136] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 136.810660][ T8136] BTRFS info (device loop3): use lzo compression, level 0 [ 136.812068][ T8136] BTRFS info (device loop3): turning off flush-on-commit [ 136.813138][ T8136] BTRFS info (device loop3): allowing degraded mounts [ 136.814189][ T8136] BTRFS info (device loop3): using free space tree [ 136.867821][ T8136] BTRFS info (device loop3): rebuilding free space tree [ 136.875891][ T8136] BTRFS info (device loop3): checking UUID tree [ 136.923866][ T4322] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 137.082386][ T8163] Dev loop8: unable to read RDB block 8 [ 137.083582][ T8163] loop8: unable to read partition table [ 137.088824][ T8163] loop8: partition table beyond EOD, truncated [ 137.090880][ T8163] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 137.169025][ T8173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.269748][ T8196] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1142 (8196) [ 138.274337][ T8196] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.275930][ T8196] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 138.277318][ T8196] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 138.278879][ T8196] BTRFS info (device loop4): trying to use backup root at mount time [ 138.280080][ T8196] BTRFS info (device loop4): force clearing of disk cache [ 138.281098][ T8196] BTRFS info (device loop4): enabling ssd optimizations [ 138.282291][ T8196] BTRFS info (device loop4): using spread ssd allocation scheme [ 138.283522][ T8196] BTRFS info (device loop4): turning on flush-on-commit [ 138.284503][ T8196] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 138.285847][ T8196] BTRFS info (device loop4): use lzo compression, level 0 [ 138.286861][ T8196] BTRFS info (device loop4): turning off flush-on-commit [ 138.287950][ T8196] BTRFS info (device loop4): allowing degraded mounts [ 138.288950][ T8196] BTRFS info (device loop4): using free space tree [ 138.303345][ T8196] BTRFS info (device loop4): rebuilding free space tree [ 138.306506][ T8196] BTRFS info (device loop4): checking UUID tree [ 138.329731][ T4330] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.506379][ T8220] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 138.514925][ T8220] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 138.567587][ T8222] Dev loop8: unable to read RDB block 8 [ 138.568626][ T8222] loop8: unable to read partition table [ 138.570013][ T8222] loop8: partition table beyond EOD, truncated [ 138.571069][ T8222] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 138.608317][ T8224] Dev loop8: unable to read RDB block 8 [ 138.609232][ T8224] loop8: unable to read partition table [ 138.610310][ T8224] loop8: partition table beyond EOD, truncated [ 138.615070][ T8224] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 138.638813][ T8226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.668914][ T8228] exfat: Deprecated parameter 'utf8' [ 138.680993][ T8228] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 139.727393][ T8243] set_capacity_and_notify: 13 callbacks suppressed [ 139.727404][ T8243] loop4: detected capacity change from 0 to 32768 [ 139.739989][ T8243] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1153 (8243) [ 139.747573][ T8243] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.749267][ T8243] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 139.750581][ T8243] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 139.752296][ T8243] BTRFS info (device loop4): trying to use backup root at mount time [ 139.753613][ T8243] BTRFS info (device loop4): force clearing of disk cache [ 139.754682][ T8243] BTRFS info (device loop4): enabling ssd optimizations [ 139.755927][ T8243] BTRFS info (device loop4): using spread ssd allocation scheme [ 139.757138][ T8243] BTRFS info (device loop4): turning on flush-on-commit [ 139.758250][ T8243] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 139.759694][ T8243] BTRFS info (device loop4): use lzo compression, level 0 [ 139.760775][ T8243] BTRFS info (device loop4): turning off flush-on-commit [ 139.761977][ T8243] BTRFS info (device loop4): allowing degraded mounts [ 139.762970][ T8243] BTRFS info (device loop4): using free space tree [ 139.777346][ T8243] BTRFS info (device loop4): rebuilding free space tree [ 139.780180][ T8243] BTRFS info (device loop4): checking UUID tree [ 139.814067][ T4330] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.898344][ T6837] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (6837) [ 147.600789][ T8237] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 147.641581][ T8241] netlink: 'syz.1.1152': attribute type 4 has an invalid length. [ 147.644329][ T8273] netlink: 'syz.4.1157': attribute type 10 has an invalid length. [ 147.645567][ T8273] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1157'. [ 147.669975][ T8276] loop8: detected capacity change from 0 to 8 [ 147.674412][ T8276] Dev loop8: unable to read RDB block 8 [ 147.675404][ T8276] loop8: unable to read partition table [ 147.676422][ T8276] loop8: partition table beyond EOD, truncated [ 147.677413][ T8276] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 147.704822][ T8282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.706268][ T8282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.715358][ T8279] loop8: detected capacity change from 0 to 8 [ 147.716727][ T8279] Dev loop8: unable to read RDB block 8 [ 147.717611][ T8279] loop8: unable to read partition table [ 147.718898][ T8279] loop8: partition table beyond EOD, truncated [ 147.719907][ T8279] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 147.750536][ T8289] loop1: detected capacity change from 0 to 256 [ 147.759645][ T8291] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.781789][ T8289] exfat: Deprecated parameter 'utf8' [ 147.786042][ T8289] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 147.803026][ T8283] loop0: detected capacity change from 0 to 2048 [ 147.810438][ T8283] hpfs: hpfs_map_sector(): read error [ 148.268987][ T8316] loop8: detected capacity change from 0 to 8 [ 148.270259][ T8316] Dev loop8: unable to read RDB block 8 [ 148.274147][ T8316] loop8: unable to read partition table [ 148.275202][ T8316] loop8: partition table beyond EOD, truncated [ 148.276288][ T8316] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 148.338782][ T8322] loop8: detected capacity change from 0 to 8 [ 148.340453][ T8322] Dev loop8: unable to read RDB block 8 [ 148.341481][ T8322] loop8: unable to read partition table [ 148.342364][ T8322] loop8: partition table beyond EOD, truncated [ 148.347236][ T8322] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 148.369446][ T8324] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 148.445282][ T8336] loop4: detected capacity change from 0 to 256 [ 148.451270][ T7666] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 148.478508][ T8338] loop1: detected capacity change from 0 to 8 [ 148.481323][ T4329] Bluetooth: hci2: command 0x0406 tx timeout [ 148.481383][ T4325] Bluetooth: hci0: command 0x0406 tx timeout [ 148.483287][ T4325] Bluetooth: hci1: command 0x0406 tx timeout [ 148.483417][ T4329] Bluetooth: hci3: command 0x0406 tx timeout [ 148.484229][ T4325] Bluetooth: hci4: command 0x0406 tx timeout [ 148.492109][ T8340] loop8: detected capacity change from 0 to 8 [ 148.496530][ T8340] Dev loop8: unable to read RDB block 8 [ 148.497477][ T8340] loop8: unable to read partition table [ 148.504219][ T8340] loop8: partition table beyond EOD, truncated [ 148.504933][ T8338] process 'syz.1.1184' launched './file2' with NULL argv: empty string added [ 148.507512][ T8340] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 148.616196][ T8349] loop8: detected capacity change from 0 to 8 [ 148.623840][ T8349] Dev loop8: unable to read RDB block 8 [ 148.624709][ T8349] loop8: unable to read partition table [ 148.636679][ T7666] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.638405][ T7666] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 148.640002][ T7666] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 148.642298][ T8349] loop8: partition table beyond EOD, truncated [ 148.643286][ T8349] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 148.646648][ T7666] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.648018][ T7666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.689231][ T8358] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 148.708920][ T7666] snd-usb-audio: probe of 1-1:27.0 failed with error -12 [ 148.724534][ T8362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.725964][ T8362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.755847][ T8275] udevd[8275]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.926711][ T8381] Dev loop8: unable to read RDB block 8 [ 148.929164][ T8381] loop8: unable to read partition table [ 148.931578][ T8381] loop8: partition table beyond EOD, truncated [ 148.934265][ T8381] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 148.948321][ T8386] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 149.642390][ T8414] Dev loop8: unable to read RDB block 8 [ 149.643333][ T8414] loop8: unable to read partition table [ 149.644333][ T8414] loop8: partition table beyond EOD, truncated [ 149.645336][ T8414] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 149.667405][ T8413] XFS (loop3): Mounting V5 Filesystem [ 149.687326][ T8413] XFS (loop3): Ending clean mount [ 149.724806][ T4322] XFS (loop3): Unmounting Filesystem [ 149.735505][ T8426] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 149.967364][ T8445] Dev loop8: unable to read RDB block 8 [ 149.968491][ T8445] loop8: unable to read partition table [ 149.969467][ T8445] loop8: partition table beyond EOD, truncated [ 149.978284][ T8445] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 150.107648][ T8454] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.556263][ T8475] Dev loop8: unable to read RDB block 8 [ 150.557343][ T8475] loop8: unable to read partition table [ 150.558344][ T8475] loop8: partition table beyond EOD, truncated [ 150.565748][ T8475] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 150.825730][ T8489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 151.236162][ T7666] usb 1-1: USB disconnect, device number 8 [ 151.308278][ T8504] Dev loop8: unable to read RDB block 8 [ 151.309431][ T8504] loop8: unable to read partition table [ 151.313615][ T8504] loop8: partition table beyond EOD, truncated [ 151.318915][ T8504] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 151.386772][ T8516] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 151.443428][ T8520] Dev loop8: unable to read RDB block 8 [ 151.444515][ T8520] loop8: unable to read partition table [ 151.445425][ T8520] loop8: partition table beyond EOD, truncated [ 151.455540][ T8520] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 151.945739][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.947242][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.955061][ T8531] Dev loop2: unable to read RDB block 7 [ 151.956014][ T8531] loop2: AHDI p1 p2 p3 [ 151.956832][ T8531] loop2: partition table partially beyond EOD, truncated [ 151.957962][ T8531] loop2: p1 start 1601398130 is beyond EOD, truncated [ 151.958957][ T8531] loop2: p2 start 1702059890 is beyond EOD, truncated [ 152.072011][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.074640][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.148709][ T8536] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 152.190125][ T8298] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 152.299488][ T8548] Dev loop8: unable to read RDB block 8 [ 152.300541][ T8548] loop8: unable to read partition table [ 152.302549][ T8548] loop8: partition table beyond EOD, truncated [ 152.303672][ T8548] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 152.315467][ T8550] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 152.329959][ T8552] Dev loop8: unable to read RDB block 8 [ 152.331118][ T8552] loop8: unable to read partition table [ 152.332463][ T8552] loop8: partition table beyond EOD, truncated [ 152.333515][ T8552] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 153.370356][ T8590] set_capacity_and_notify: 14 callbacks suppressed [ 153.370367][ T8590] loop8: detected capacity change from 0 to 8 [ 153.373860][ T8590] Dev loop8: unable to read RDB block 8 [ 153.376596][ T8588] device syzkaller0 entered promiscuous mode [ 153.379077][ T8590] loop8: unable to read partition table [ 153.381597][ T8590] loop8: partition table beyond EOD, truncated [ 153.383685][ T8590] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 153.438553][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.440566][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.446672][ T8575] loop0: detected capacity change from 0 to 32768 [ 153.456721][ T8575] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 153.459878][ T8594] loop2: detected capacity change from 0 to 7 [ 153.464477][ T8594] Dev loop2: unable to read RDB block 7 [ 153.466795][ T8594] loop2: AHDI p1 p2 p3 [ 153.467423][ T8594] loop2: partition table partially beyond EOD, truncated [ 153.470608][ T8594] loop2: p1 start 1601398130 is beyond EOD, truncated [ 153.473087][ T8594] loop2: p2 start 1702059890 is beyond EOD, truncated [ 153.508581][ T8306] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 154.145076][ T8623] loop8: detected capacity change from 0 to 8 [ 154.154595][ T8623] Dev loop8: unable to read RDB block 8 [ 154.155692][ T8623] loop8: unable to read partition table [ 154.158990][ T8623] loop8: partition table beyond EOD, truncated [ 154.168229][ T8623] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 154.200211][ T8628] device syzkaller0 entered promiscuous mode [ 154.277950][ T8635] autofs4:pid:8635:autofs_fill_super: called with bogus options [ 154.303547][ T8630] loop2: detected capacity change from 0 to 32768 [ 154.305273][ T8630] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 154.361308][ T8306] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.577954][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.579441][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.940276][ T8655] loop2: detected capacity change from 0 to 7 [ 154.946222][ T8655] Dev loop2: unable to read RDB block 7 [ 154.947059][ T8655] loop2: unable to read partition table [ 154.947912][ T8655] loop2: partition table beyond EOD, truncated [ 154.952702][ T8655] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 154.960751][ T8661] autofs4:pid:8661:autofs_fill_super: called with bogus options [ 154.989327][ T8664] device syzkaller0 entered promiscuous mode [ 155.140709][ T8666] loop3: detected capacity change from 0 to 32768 [ 155.143046][ T8666] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 155.169153][ T8298] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 155.384037][ T8685] autofs4:pid:8685:autofs_fill_super: called with bogus options [ 155.968735][ T8704] loop4: detected capacity change from 0 to 32768 [ 155.975827][ T8704] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.977793][ T8704] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 155.979496][ T8704] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 155.982234][ T8704] BTRFS info (device loop4): trying to use backup root at mount time [ 155.983807][ T8704] BTRFS info (device loop4): force clearing of disk cache [ 155.985177][ T8704] BTRFS info (device loop4): enabling ssd optimizations [ 155.986515][ T8704] BTRFS info (device loop4): using spread ssd allocation scheme [ 155.987935][ T8704] BTRFS info (device loop4): turning on flush-on-commit [ 155.989190][ T8704] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 155.990719][ T8704] BTRFS info (device loop4): use lzo compression, level 0 [ 155.999966][ T8704] BTRFS info (device loop4): turning off flush-on-commit [ 156.001568][ T8704] BTRFS info (device loop4): allowing degraded mounts [ 156.002747][ T8704] BTRFS info (device loop4): using free space tree [ 156.133653][ T8704] BTRFS info (device loop4): rebuilding free space tree [ 156.138086][ T8704] BTRFS info (device loop4): checking UUID tree [ 156.509622][ T4330] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.534188][ T8745] autofs4:pid:8745:autofs_fill_super: called with bogus options [ 156.576631][ T8749] autofs4:pid:8749:autofs_fill_super: called with bogus options [ 156.905842][ T7666] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.997168][ T8780] autofs4:pid:8780:autofs_fill_super: called with bogus options [ 157.034860][ T8777] loop3: detected capacity change from 0 to 32768 [ 157.037048][ T8777] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1347 (8777) [ 157.039914][ T8777] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.041814][ T8777] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 157.043079][ T8777] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 157.044838][ T8777] BTRFS info (device loop3): trying to use backup root at mount time [ 157.046420][ T8777] BTRFS info (device loop3): force clearing of disk cache [ 157.047685][ T8777] BTRFS info (device loop3): enabling ssd optimizations [ 157.048919][ T8777] BTRFS info (device loop3): using spread ssd allocation scheme [ 157.050464][ T8777] BTRFS info (device loop3): turning on flush-on-commit [ 157.051771][ T8777] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 157.053694][ T8777] BTRFS info (device loop3): use lzo compression, level 0 [ 157.055029][ T8777] BTRFS info (device loop3): turning off flush-on-commit [ 157.056312][ T8777] BTRFS info (device loop3): allowing degraded mounts [ 157.057521][ T8777] BTRFS info (device loop3): using free space tree [ 157.091382][ T7666] usb 1-1: Using ep0 maxpacket: 16 [ 157.307738][ T7666] usb 1-1: config 0 has no interfaces? [ 157.308796][ T7666] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.310285][ T7666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.312795][ T7666] usb 1-1: config 0 descriptor?? [ 157.328646][ T8793] autofs4:pid:8793:autofs_fill_super: called with bogus options [ 157.388578][ T8777] BTRFS info (device loop3): rebuilding free space tree [ 157.399634][ T8777] BTRFS info (device loop3): checking UUID tree [ 157.451476][ T4322] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.494771][ T8821] loop2: detected capacity change from 0 to 1024 [ 157.526229][ T4518] usb 1-1: USB disconnect, device number 9 [ 158.116567][ T8841] autofs4:pid:8841:autofs_fill_super: called with bogus options [ 158.140399][ T8844] autofs4:pid:8844:autofs_fill_super: called with bogus options [ 158.396687][ T8857] loop1: detected capacity change from 0 to 32768 [ 158.402531][ T8857] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1367 (8857) [ 158.410521][ T8857] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.416221][ T8857] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 158.418254][ T8857] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 158.420335][ T8857] BTRFS info (device loop1): trying to use backup root at mount time [ 158.423588][ T8857] BTRFS info (device loop1): force clearing of disk cache [ 158.425425][ T8866] device syzkaller0 entered promiscuous mode [ 158.428719][ T8857] BTRFS info (device loop1): enabling ssd optimizations [ 158.429870][ T8857] BTRFS info (device loop1): using spread ssd allocation scheme [ 158.430998][ T8857] BTRFS info (device loop1): turning on flush-on-commit [ 158.438022][ T8857] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 158.439325][ T8857] BTRFS info (device loop1): use lzo compression, level 0 [ 158.440419][ T8857] BTRFS info (device loop1): turning off flush-on-commit [ 158.451756][ T8857] BTRFS info (device loop1): allowing degraded mounts [ 158.452871][ T8857] BTRFS info (device loop1): using free space tree [ 158.468143][ T8871] autofs4:pid:8871:autofs_fill_super: called with bogus options [ 158.637361][ T8857] BTRFS info (device loop1): rebuilding free space tree [ 158.649400][ T8903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.650767][ T8857] BTRFS info (device loop1): checking UUID tree [ 158.661375][ T8903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.675209][ T4321] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.676445][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 158.678187][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1381'. [ 158.679689][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'. [ 158.681588][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1381'. [ 158.707117][ T8903] loop2: detected capacity change from 0 to 7 [ 158.708744][ T8903] Dev loop2: unable to read RDB block 7 [ 158.709682][ T8903] loop2: unable to read partition table [ 158.710656][ T8903] loop2: partition table beyond EOD, truncated [ 158.803596][ T8903] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 158.898246][ T8915] autofs4:pid:8915:autofs_fill_super: called with bogus options [ 159.284154][ T8928] device syzkaller0 entered promiscuous mode [ 159.435467][ T8934] loop0: detected capacity change from 0 to 32768 [ 159.439227][ T8934] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1392 (8934) [ 159.447385][ T8934] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.449302][ T8934] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 159.450842][ T8934] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 159.452869][ T8934] BTRFS info (device loop0): trying to use backup root at mount time [ 159.454334][ T8934] BTRFS info (device loop0): force clearing of disk cache [ 159.455650][ T8934] BTRFS info (device loop0): enabling ssd optimizations [ 159.456858][ T8934] BTRFS info (device loop0): using spread ssd allocation scheme [ 159.458122][ T8934] BTRFS info (device loop0): turning on flush-on-commit [ 159.459407][ T8934] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 159.460958][ T8934] BTRFS info (device loop0): use lzo compression, level 0 [ 159.464592][ T8934] BTRFS info (device loop0): turning off flush-on-commit [ 159.465870][ T8934] BTRFS info (device loop0): allowing degraded mounts [ 159.467303][ T8934] BTRFS info (device loop0): using free space tree [ 159.479869][ T8934] BTRFS info (device loop0): rebuilding free space tree [ 159.485460][ T8934] BTRFS info (device loop0): checking UUID tree [ 159.521727][ T4327] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.673786][ T8959] autofs4:pid:8959:autofs_fill_super: called with bogus options [ 159.771813][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 159.773405][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1394'. [ 159.794992][ T8977] device syzkaller0 entered promiscuous mode [ 159.969344][ T8982] loop0: detected capacity change from 0 to 32768 [ 160.231541][ T8982] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1404 (8982) [ 160.243051][ T8982] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.244793][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.246646][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.247958][ T8982] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 160.250604][ T8992] loop2: detected capacity change from 0 to 7 [ 160.254410][ T8992] Dev loop2: unable to read RDB block 7 [ 160.255342][ T8992] loop2: unable to read partition table [ 160.256243][ T8992] loop2: partition table beyond EOD, truncated [ 160.257085][ T8992] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.257807][ T8982] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 160.273737][ T8982] BTRFS info (device loop0): trying to use backup root at mount time [ 160.275162][ T8982] BTRFS info (device loop0): force clearing of disk cache [ 160.276256][ T8982] BTRFS info (device loop0): enabling ssd optimizations [ 160.277345][ T8982] BTRFS info (device loop0): using spread ssd allocation scheme [ 160.278562][ T8982] BTRFS info (device loop0): turning on flush-on-commit [ 160.279709][ T8982] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 160.282480][ T8982] BTRFS info (device loop0): use lzo compression, level 0 [ 160.283661][ T8982] BTRFS info (device loop0): turning off flush-on-commit [ 160.284711][ T8982] BTRFS info (device loop0): allowing degraded mounts [ 160.285702][ T8982] BTRFS info (device loop0): using free space tree [ 160.288276][ T8994] autofs4:pid:8994:autofs_fill_super: called with bogus options [ 160.326471][ T8982] BTRFS info (device loop0): rebuilding free space tree [ 160.335177][ T8982] BTRFS info (device loop0): checking UUID tree [ 160.360367][ T4327] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.446640][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 160.459750][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'. [ 160.462270][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 160.463910][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'. [ 160.798081][ T9038] device syzkaller0 entered promiscuous mode [ 160.868432][ T9041] autofs4:pid:9041:autofs_fill_super: called with bogus options [ 161.132855][ T9056] loop1: detected capacity change from 0 to 1024 [ 161.347701][ T9067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.349071][ T9067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.359870][ T9067] loop2: detected capacity change from 0 to 7 [ 161.367074][ T9067] Dev loop2: unable to read RDB block 7 [ 161.369315][ T9067] loop2: unable to read partition table [ 161.370171][ T9067] loop2: partition table beyond EOD, truncated [ 161.377179][ T9067] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.204918][ T9076] device syzkaller0 entered promiscuous mode [ 162.325887][ T9090] loop0: detected capacity change from 0 to 1024 [ 162.483205][ T9101] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 162.841885][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.843480][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.847156][ T9108] loop2: detected capacity change from 0 to 7 [ 162.848637][ T9108] Dev loop2: unable to read RDB block 7 [ 162.849688][ T9108] loop2: unable to read partition table [ 162.850670][ T9108] loop2: partition table beyond EOD, truncated [ 162.854995][ T9108] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.926454][ T9116] loop3: detected capacity change from 0 to 256 [ 162.927991][ T9116] exfat: Deprecated parameter 'utf8' [ 162.939423][ T9116] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 162.992468][ T9120] device syzkaller0 entered promiscuous mode [ 163.141931][ T9128] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.209173][ T9126] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1456 (9126) [ 163.219445][ T9126] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.221907][ T9126] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 163.223254][ T9126] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 163.225471][ T9126] BTRFS info (device loop1): trying to use backup root at mount time [ 163.233795][ T9126] BTRFS info (device loop1): force clearing of disk cache [ 163.234864][ T9126] BTRFS info (device loop1): enabling ssd optimizations [ 163.236562][ T9126] BTRFS info (device loop1): using spread ssd allocation scheme [ 163.237737][ T9126] BTRFS info (device loop1): turning on flush-on-commit [ 163.238777][ T9126] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 163.240148][ T9126] BTRFS info (device loop1): use lzo compression, level 0 [ 163.242846][ T9126] BTRFS info (device loop1): turning off flush-on-commit [ 163.244013][ T9126] BTRFS info (device loop1): allowing degraded mounts [ 163.245141][ T9126] BTRFS info (device loop1): using free space tree [ 163.288444][ T9126] BTRFS info (device loop1): rebuilding free space tree [ 163.294838][ T9126] BTRFS info (device loop1): checking UUID tree [ 163.349074][ T4321] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.451475][ T9167] set_capacity_and_notify: 3 callbacks suppressed [ 163.451485][ T9167] loop2: detected capacity change from 0 to 256 [ 163.460096][ T9166] loop4: detected capacity change from 0 to 1024 [ 163.466507][ T9167] exfat: Deprecated parameter 'utf8' [ 163.496106][ T9170] loop3: detected capacity change from 0 to 256 [ 163.500370][ T9167] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 163.539426][ T9171] device syzkaller0 entered promiscuous mode [ 164.078583][ T4389] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 164.093615][ T4389] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.102908][ T9195] loop0: detected capacity change from 0 to 1024 [ 164.125361][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.126860][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.132641][ T9198] loop2: detected capacity change from 0 to 7 [ 164.141474][ T9198] Dev loop2: unable to read RDB block 7 [ 164.142345][ T9198] loop2: unable to read partition table [ 164.143394][ T9198] loop2: partition table beyond EOD, truncated [ 164.144367][ T9198] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 164.147638][ T246] hfsplus: b-tree write err: -5, ino 4 [ 164.169407][ T9196] fido_id[9196]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.200901][ T9193] loop4: detected capacity change from 0 to 32768 [ 164.205241][ T9193] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1473 (9193) [ 164.210730][ T9193] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.218020][ T9193] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 164.220724][ T9193] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 164.224840][ T9193] BTRFS info (device loop4): trying to use backup root at mount time [ 164.227522][ T9193] BTRFS info (device loop4): force clearing of disk cache [ 164.229913][ T9193] BTRFS info (device loop4): enabling ssd optimizations [ 164.233506][ T9193] BTRFS info (device loop4): using spread ssd allocation scheme [ 164.236604][ T9193] BTRFS info (device loop4): turning on flush-on-commit [ 164.238415][ T9193] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 164.241870][ T9193] BTRFS info (device loop4): use lzo compression, level 0 [ 164.244186][ T9193] BTRFS info (device loop4): turning off flush-on-commit [ 164.246549][ T9193] BTRFS info (device loop4): allowing degraded mounts [ 164.248667][ T9193] BTRFS info (device loop4): using free space tree [ 164.278183][ T9193] BTRFS info (device loop4): rebuilding free space tree [ 164.282988][ T9193] BTRFS info (device loop4): checking UUID tree [ 164.308387][ T4330] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 164.398874][ T9225] loop0: detected capacity change from 0 to 1024 [ 164.495539][ T8298] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (8298) [ 164.525514][ T9235] loop2: detected capacity change from 0 to 256 [ 164.526965][ T9235] exfat: Deprecated parameter 'utf8' [ 164.538830][ T9235] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 164.635983][ T9247] device syzkaller0 entered promiscuous mode [ 164.856901][ T9253] loop1: detected capacity change from 0 to 32768 [ 164.865654][ T9253] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 164.913229][ T8298] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 165.005823][ T9264] loop1: detected capacity change from 0 to 1024 [ 165.552968][ T9287] EXT4-fs: Ignoring removed i_version option [ 165.586466][ T9287] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 165.591346][ T4517] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 165.599415][ T9291] Dev loop2: unable to read RDB block 7 [ 165.600325][ T9291] loop2: unable to read partition table [ 165.605244][ T9287] fs-verity: sha512 using implementation "sha512-ce" [ 165.613534][ T9291] loop2: partition table beyond EOD, truncated [ 165.614593][ T9291] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.666823][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 165.676097][ T9297] device syzkaller0 entered promiscuous mode [ 165.761929][ T9301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.763417][ T9301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.771441][ T4517] usb 1-1: Using ep0 maxpacket: 16 [ 165.773819][ T4517] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 165.775063][ T4517] usb 1-1: config 252 has no interface number 0 [ 165.775974][ T4517] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.779189][ T4517] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 165.780656][ T4517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.791344][ T4517] usb 1-1: Product: syz [ 165.792037][ T4517] usb 1-1: Manufacturer: syz [ 165.792752][ T4517] usb 1-1: SerialNumber: syz [ 165.815078][ T4517] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 165.821260][ T9296] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 165.862710][ T8306] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 166.016708][ T39] usb 1-1: Failed to submit usb control message: -71 [ 166.016737][ T4517] usb 1-1: USB disconnect, device number 10 [ 166.017956][ T39] usb 1-1: unable to send the bmi data to the device: -71 [ 166.019825][ T39] usb 1-1: unable to get target info from device [ 166.020723][ T39] usb 1-1: could not get target info (-71) [ 166.023446][ T39] usb 1-1: could not probe fw (-71) [ 166.344829][ T9329] Dev loop2: unable to read RDB block 7 [ 166.345790][ T9329] loop2: unable to read partition table [ 166.346855][ T9329] loop2: partition table beyond EOD, truncated [ 166.347796][ T9329] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 166.500569][ T9339] device syzkaller0 entered promiscuous mode [ 166.579697][ T9337] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 166.658958][ T8306] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 166.724201][ T9348] __nla_validate_parse: 16 callbacks suppressed [ 166.724219][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 166.726740][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1519'. [ 166.728263][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 166.729652][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1519'. [ 166.805750][ T9354] Dev loop2: unable to read RDB block 7 [ 166.806942][ T9354] loop2: unable to read partition table [ 166.808057][ T9354] loop2: partition table beyond EOD, truncated [ 166.809215][ T9354] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 166.894500][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.896144][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.146717][ T9368] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 167.177382][ T8298] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 167.252130][ T9383] Dev loop2: unable to read RDB block 7 [ 167.253243][ T9383] loop2: unable to read partition table [ 167.254356][ T9383] loop2: partition table beyond EOD, truncated [ 167.255287][ T9383] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 167.736761][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.738408][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.009323][ T9413] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 168.058949][ T9417] autofs4:pid:9417:autofs_fill_super: called with bogus options [ 168.089727][ T8298] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 168.218606][ T8298] Dev loop2: unable to read RDB block 7 [ 168.219686][ T8298] loop2: unable to read partition table [ 168.220859][ T8298] loop2: partition table beyond EOD, truncated [ 168.229930][ T9437] Dev loop2: unable to read RDB block 7 [ 168.230960][ T9437] loop2: unable to read partition table [ 168.233380][ T9437] loop2: partition table beyond EOD, truncated [ 168.236505][ T9437] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 168.240172][ T3936] Dev loop2: unable to read RDB block 7 [ 168.246521][ T3936] loop2: unable to read partition table [ 168.248757][ T3936] loop2: partition table beyond EOD, truncated [ 168.563405][ T9452] set_capacity_and_notify: 17 callbacks suppressed [ 168.563415][ T9452] loop1: detected capacity change from 0 to 32768 [ 168.578128][ T9452] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 168.618692][ T8298] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 168.780395][ T9456] autofs4:pid:9456:autofs_fill_super: called with bogus options [ 168.936757][ T9474] loop2: detected capacity change from 0 to 256 [ 168.979379][ T9477] device syzkaller1 entered promiscuous mode [ 168.994951][ T9475] loop4: detected capacity change from 0 to 32768 [ 168.996443][ T9475] XFS: attr2 mount option is deprecated. [ 169.006238][ T9475] XFS (loop4): Mounting V5 Filesystem [ 169.021950][ T9475] XFS (loop4): Ending clean mount [ 169.026159][ T9475] XFS (loop4): Quotacheck needed: Please wait. [ 169.066259][ T9475] XFS (loop4): Quotacheck: Done. [ 169.086229][ T4330] XFS (loop4): Unmounting Filesystem [ 169.197233][ T9491] loop2: detected capacity change from 0 to 7 [ 169.205368][ T9491] Dev loop2: unable to read RDB block 7 [ 169.206253][ T9491] loop2: unable to read partition table [ 169.207215][ T9491] loop2: partition table beyond EOD, truncated [ 169.208221][ T9491] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.239401][ T9498] autofs4:pid:9498:autofs_fill_super: called with bogus options [ 169.583597][ T9522] loop2: detected capacity change from 0 to 256 [ 169.617759][ T9524] binder: 9523:9524 tried to acquire reference to desc 0, got 1 instead [ 169.622529][ T9524] binder_alloc: 9523: pid 9523 spamming oneway? 2 buffers allocated for a total size of 5120 [ 169.625059][ T9524] binder_alloc: 9523: pid 9523 spamming oneway? 3 buffers allocated for a total size of 5128 [ 169.627118][ T6090] binder: undelivered TRANSACTION_COMPLETE [ 169.628685][ T6090] binder: undelivered TRANSACTION_COMPLETE [ 169.629570][ T6090] binder: undelivered TRANSACTION_COMPLETE [ 169.639818][ T6090] binder: undelivered transaction 6, process died. [ 169.640938][ T6090] binder: undelivered transaction 7, process died. [ 169.642153][ T6090] binder: undelivered transaction 5, process died. [ 169.691989][ T9528] loop2: detected capacity change from 0 to 4096 [ 169.697809][ T9528] ntfs3: Unknown parameter 'nocase' [ 170.017886][ T9537] autofs4:pid:9537:autofs_fill_super: called with bogus options [ 170.277035][ T9558] loop1: detected capacity change from 0 to 256 [ 170.379013][ T9567] autofs4:pid:9567:autofs_fill_super: called with bogus options [ 170.782960][ T9596] loop0: detected capacity change from 0 to 256 [ 170.840507][ T9601] autofs4:pid:9601:autofs_fill_super: called with bogus options [ 171.467942][ T9631] netlink: 'syz.1.1612': attribute type 29 has an invalid length. [ 171.478205][ T9631] netlink: 'syz.1.1612': attribute type 29 has an invalid length. [ 171.482750][ T9631] netlink: 'syz.1.1612': attribute type 29 has an invalid length. [ 171.487672][ T9631] netlink: 'syz.1.1612': attribute type 29 has an invalid length. [ 171.566067][ T9639] loop4: detected capacity change from 0 to 256 [ 171.602784][ T9637] autofs4:pid:9637:autofs_fill_super: called with bogus options [ 172.068880][ T9676] loop2: detected capacity change from 0 to 256 [ 172.123504][ T9673] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1624 (9673) [ 172.126714][ T9673] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.128322][ T9673] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 172.129809][ T9673] BTRFS info (device loop3): turning on sync discard [ 172.130817][ T9673] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 172.132325][ T9673] BTRFS info (device loop3): use zstd compression, level 3 [ 172.133342][ T9673] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 172.134816][ T9673] BTRFS info (device loop3): trying to use backup root at mount time [ 172.136022][ T9673] BTRFS info (device loop3): enabling auto defrag [ 172.137020][ T9673] BTRFS info (device loop3): using free space tree [ 172.185931][ T246] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 172.188481][ T9673] BTRFS error (device loop3): failed to load root extent [ 172.189700][ T9673] BTRFS warning (device loop3): try to load backup roots slot 1 [ 172.191056][ T246] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 172.193507][ T9673] BTRFS warning (device loop3): couldn't read tree root [ 172.194674][ T9673] BTRFS warning (device loop3): try to load backup roots slot 2 [ 172.196322][ T9673] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 172.198340][ T9673] BTRFS warning (device loop3): couldn't read tree root [ 172.198657][ T9692] autofs4:pid:9692:autofs_fill_super: called with bogus options [ 172.199316][ T9673] BTRFS warning (device loop3): try to load backup roots slot 3 [ 172.210780][ T9673] BTRFS info (device loop3): enabling ssd optimizations [ 172.212864][ T9673] BTRFS info (device loop3): rebuilding free space tree [ 172.219160][ T9673] BTRFS info (device loop3): checking UUID tree [ 172.424901][ T9704] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.434719][ T9704] EXT4-fs (loop2): 1 truncate cleaned up [ 172.435840][ T9704] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.488449][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 172.859304][ T4322] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.968624][ T9723] autofs4:pid:9723:autofs_fill_super: called with bogus options [ 173.495459][ T9748] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1648: inode has both inline data and extents flags [ 173.498736][ T9748] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1648: couldn't read orphan inode 15 (err -117) [ 173.500810][ T9748] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.504404][ T9748] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 173.520079][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 173.606161][ T9758] autofs4:pid:9758:autofs_fill_super: called with bogus options [ 173.645484][ T9763] set_capacity_and_notify: 4 callbacks suppressed [ 173.645494][ T9763] loop1: detected capacity change from 0 to 256 [ 173.646201][ T9761] loop4: detected capacity change from 0 to 1024 [ 173.688820][ T4409] hfsplus: b-tree write err: -5, ino 4 [ 174.297778][ T9782] loop3: detected capacity change from 0 to 32768 [ 174.305983][ T9782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1661 (9782) [ 174.309088][ T9782] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.310716][ T9782] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 174.312095][ T9782] BTRFS info (device loop3): using free space tree [ 174.471208][ T9782] BTRFS info (device loop3): enabling ssd optimizations [ 174.587711][ T4322] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.683097][ T8298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (8298) [ 174.870245][ T9830] loop4: detected capacity change from 0 to 64 [ 175.541822][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.543410][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.957583][ T9907] block device autoloading is deprecated and will be removed. [ 176.961664][ T9902] md: md2 stopped. [ 177.399690][ T9940] loop3: detected capacity change from 0 to 1024 [ 177.421200][ T3898] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 177.438302][ T9940] EXT4-fs: Ignoring removed orlov option [ 177.460474][ T9940] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 177.493848][ T9940] EXT4-fs error (device loop3): ext4_free_inode:355: comm syz.3.1710: bit already cleared for inode 13 [ 177.504960][ T9940] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 177.512526][ T9940] EXT4-fs error (device loop3): ext4_lookup:1862: inode #12: comm syz.3.1710: deleted inode referenced: 14 [ 177.532987][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 177.652895][ T3898] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 177.654736][ T3898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.656837][ T3898] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.658605][ T3898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.663036][ T3898] usb 1-1: config 0 descriptor?? [ 177.668210][ T3898] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 178.554649][ T9983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1723'. [ 178.822778][ T9997] loop4: detected capacity change from 0 to 2048 [ 178.836973][ T9997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 178.849733][ T4330] EXT4-fs (loop4): unmounting filesystem. [ 179.007221][T10008] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1731'. [ 179.008982][T10008] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1731'. [ 179.645258][T10028] autofs4:pid:10028:autofs_fill_super: called with bogus options [ 179.830749][T10041] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1742'. [ 179.832430][T10041] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1742'. [ 180.210063][ T3898] usb 1-1: USB disconnect, device number 11 [ 180.336269][T10053] loop3: detected capacity change from 0 to 32768 [ 180.339260][T10053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1747 (10053) [ 180.342882][T10053] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 180.344419][T10053] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 180.345747][T10053] BTRFS info (device loop3): setting nodatasum [ 180.346694][T10053] BTRFS info (device loop3): force clearing of disk cache [ 180.347731][T10053] BTRFS info (device loop3): turning on async discard [ 180.348749][T10053] BTRFS info (device loop3): unrecognized rescue option 'imetacsums' [ 180.349978][T10053] BTRFS error (device loop3): unrecognized rescue value imetacsums [ 180.351676][T10053] BTRFS error (device loop3): open_ctree failed: -22 [ 180.411032][ T8298] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (8298) [ 180.418745][T10061] autofs4:pid:10061:autofs_fill_super: called with bogus options [ 180.703254][T10075] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1753'. [ 180.704811][T10075] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1753'. [ 180.858519][T10085] loop1: detected capacity change from 0 to 2048 [ 180.914979][T10085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 180.984992][T10085] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 180.990178][T10085] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 752 with error 28 [ 180.992818][T10085] EXT4-fs (loop1): This should not happen!! Data will be lost [ 180.992818][T10085] [ 180.994583][T10085] EXT4-fs (loop1): Total free blocks count 0 [ 180.995748][T10085] EXT4-fs (loop1): Free/Dirty block details [ 180.996761][T10085] EXT4-fs (loop1): free_blocks=2415919504 [ 180.997783][T10085] EXT4-fs (loop1): dirty_blocks=768 [ 180.998876][T10085] EXT4-fs (loop1): Block reservation details [ 180.999802][T10085] EXT4-fs (loop1): i_reserved_data_blocks=48 [ 181.092364][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 181.279678][T10096] autofs4:pid:10096:autofs_fill_super: called with bogus options [ 181.376536][T10104] loop1: detected capacity change from 0 to 4096 [ 181.397958][T10104] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 181.458995][ T4321] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 181.462432][ T4321] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 181.780739][T10116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1766'. [ 181.791845][T10116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1766'. [ 181.845909][T10120] loop1: detected capacity change from 0 to 1024 [ 182.426583][T10148] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1778'. [ 183.413820][T10189] netlink: 'syz.0.1791': attribute type 1 has an invalid length. [ 183.415180][T10189] netlink: 'syz.0.1791': attribute type 4 has an invalid length. [ 183.599007][T10201] loop3: detected capacity change from 0 to 32768 [ 183.605854][T10201] (syz.3.1797,10201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 183.608304][T10201] (syz.3.1797,10201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 183.636666][T10201] JBD2: Ignoring recovery information on journal [ 183.654544][T10201] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 183.685230][ T4322] ocfs2: Unmounting device (7,3) on (node local) [ 183.860807][T10215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.863660][T10215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.877355][T10215] loop2: detected capacity change from 0 to 7 [ 183.880673][T10215] Dev loop2: unable to read RDB block 7 [ 183.883881][T10215] loop2: unable to read partition table [ 183.887513][T10215] loop2: partition table beyond EOD, truncated [ 183.889654][T10215] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.902681][T10217] __nla_validate_parse: 4 callbacks suppressed [ 183.902692][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 183.905094][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1802'. [ 183.924346][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 183.925849][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1802'. [ 184.337691][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.342518][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.049215][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1814'. [ 185.050730][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1814'. [ 185.067434][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1814'. [ 185.069037][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1814'. [ 185.306623][T10269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.308779][T10269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.315813][T10269] loop2: detected capacity change from 0 to 7 [ 185.318046][T10269] Dev loop2: unable to read RDB block 7 [ 185.318858][T10269] loop2: unable to read partition table [ 185.319882][T10269] loop2: partition table beyond EOD, truncated [ 185.320952][T10269] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 185.493855][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 185.495385][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1825'. [ 185.593002][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.595389][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.793636][T10321] vcan0: MTU too low for tipc bearer [ 186.794853][T10321] tipc: Enabling of bearer rejected, failed to enable media [ 187.291205][ T4381] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 187.361646][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.363630][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.441165][ T4381] usb 1-1: device descriptor read/64, error -71 [ 187.721704][ T4381] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 187.881291][ T4381] usb 1-1: device descriptor read/64, error -71 [ 188.010169][ T4381] usb usb1-port1: attempt power cycle [ 188.641230][ T4381] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 188.682662][ T4381] usb 1-1: device descriptor read/8, error -71 [ 188.723258][T10384] loop3: detected capacity change from 0 to 1024 [ 188.726238][T10384] hfsplus: invalid btree flag [ 188.727487][T10384] hfsplus: failed to load attributes file [ 188.834694][T10390] loop4: detected capacity change from 0 to 1764 [ 188.883313][ T8298] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.925703][T10390] loop4: detected capacity change from 0 to 8192 [ 188.934238][T10390] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 188.935428][T10390] UDF-fs: Scanning with blocksize 512 failed [ 188.936698][T10390] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 188.937811][T10390] UDF-fs: Scanning with blocksize 1024 failed [ 188.939445][T10390] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 188.942456][T10390] UDF-fs: Scanning with blocksize 2048 failed [ 188.947237][T10390] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.971852][ T4381] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 189.011796][ T4381] usb 1-1: device descriptor read/8, error -71 [ 189.141292][ T4381] usb usb1-port1: unable to enumerate USB device [ 189.655392][T10410] __nla_validate_parse: 14 callbacks suppressed [ 189.655404][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 189.657872][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1872'. [ 189.670786][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 189.672551][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1872'. [ 189.756595][T10418] loop2: detected capacity change from 0 to 256 [ 189.769075][T10416] loop3: detected capacity change from 0 to 4096 [ 189.770489][T10416] ntfs3: Unknown parameter 'nocase' [ 189.789777][T10418] FAT-fs (loop2): Directory bread(block 64) failed [ 189.791100][T10418] FAT-fs (loop2): Directory bread(block 65) failed [ 189.792511][T10418] FAT-fs (loop2): Directory bread(block 66) failed [ 189.793639][T10418] FAT-fs (loop2): Directory bread(block 67) failed [ 189.794931][T10418] FAT-fs (loop2): Directory bread(block 68) failed [ 189.796218][T10418] FAT-fs (loop2): Directory bread(block 69) failed [ 189.797623][T10418] FAT-fs (loop2): Directory bread(block 70) failed [ 189.798807][T10418] FAT-fs (loop2): Directory bread(block 71) failed [ 189.799999][T10418] FAT-fs (loop2): Directory bread(block 72) failed [ 189.804073][T10418] FAT-fs (loop2): Directory bread(block 73) failed [ 189.828526][ T8306] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.920399][T10425] syz.3.1878 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 190.803291][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'. [ 190.804812][T10442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1883'. [ 190.828531][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'. [ 190.830253][T10442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1883'. [ 191.421208][ T3898] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 191.581377][ T3898] usb 1-1: device descriptor read/64, error -71 [ 192.060535][ T3898] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 192.178482][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 192.180112][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1897'. [ 192.211327][ T3898] usb 1-1: device descriptor read/64, error -71 [ 192.362762][ T3898] usb usb1-port1: attempt power cycle [ 192.761734][T10499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.767489][T10499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.011193][ T3898] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 193.041667][ T3898] usb 1-1: device descriptor read/8, error -71 [ 193.312179][ T3898] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 193.393926][ T3898] usb 1-1: device descriptor read/8, error -71 [ 193.621873][ T3898] usb usb1-port1: unable to enumerate USB device [ 194.226804][T10533] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 194.396308][T10548] netlink: 'syz.2.1915': attribute type 4 has an invalid length. [ 194.749011][T10553] __nla_validate_parse: 6 callbacks suppressed [ 194.749024][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 194.754144][T10553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1920'. [ 194.769128][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 194.770831][T10553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1920'. [ 194.810641][T10557] loop4: detected capacity change from 0 to 1024 [ 194.825755][T10557] hfsplus: invalid btree flag [ 194.826600][T10557] hfsplus: failed to load attributes file [ 195.478416][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1929'. [ 195.504675][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1931'. [ 195.506318][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1931'. [ 195.523424][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1931'. [ 195.524892][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1931'. [ 195.727514][T10591] loop3: detected capacity change from 0 to 1764 [ 195.761208][ T4381] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 195.772721][ T8298] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.810125][T10591] loop3: detected capacity change from 0 to 8192 [ 195.812302][T10591] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 195.813672][T10591] UDF-fs: Scanning with blocksize 512 failed [ 195.815198][T10591] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 195.816487][T10591] UDF-fs: Scanning with blocksize 1024 failed [ 195.817932][T10591] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 195.819228][T10591] UDF-fs: Scanning with blocksize 2048 failed [ 195.824755][T10591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.864330][T10594] loop4: detected capacity change from 0 to 256 [ 195.879361][T10594] FAT-fs (loop4): Directory bread(block 64) failed [ 195.880528][T10594] FAT-fs (loop4): Directory bread(block 65) failed [ 195.882468][T10594] FAT-fs (loop4): Directory bread(block 66) failed [ 195.883450][T10594] FAT-fs (loop4): Directory bread(block 67) failed [ 195.884712][T10594] FAT-fs (loop4): Directory bread(block 68) failed [ 195.885975][T10594] FAT-fs (loop4): Directory bread(block 69) failed [ 195.887135][T10594] FAT-fs (loop4): Directory bread(block 70) failed [ 195.888230][T10594] FAT-fs (loop4): Directory bread(block 71) failed [ 195.889317][T10594] FAT-fs (loop4): Directory bread(block 72) failed [ 195.890370][T10594] FAT-fs (loop4): Directory bread(block 73) failed [ 195.911474][ T4381] usb 1-1: device descriptor read/64, error -71 [ 196.073125][T10608] loop4: detected capacity change from 0 to 256 [ 196.371320][T10608] syz.4.1941: attempt to access beyond end of device [ 196.371320][T10608] loop4: rw=0, sector=272, nr_sectors = 4 limit=256 [ 196.377925][T10615] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1943'. [ 196.385464][T10608] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 196.386958][T10608] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 196.433621][ T4381] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 196.858058][ T4381] usb 1-1: device descriptor read/64, error -71 [ 196.949659][T10634] loop1: detected capacity change from 0 to 2048 [ 196.957398][T10634] hpfs: hpfs_map_sector(): read error [ 196.971369][ T4381] usb usb1-port1: attempt power cycle [ 197.690407][ T4381] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 197.734114][ T4381] usb 1-1: device descriptor read/8, error -71 [ 198.021311][ T4381] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 198.084702][ T4381] usb 1-1: device descriptor read/8, error -71 [ 198.114538][T10671] loop4: detected capacity change from 0 to 2048 [ 198.130748][T10671] hpfs: hpfs_map_sector(): read error [ 198.468700][ T4381] usb usb1-port1: unable to enumerate USB device [ 199.111437][T10706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.112841][T10706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.119136][T10706] loop2: detected capacity change from 0 to 7 [ 199.402452][T10706] Dev loop2: unable to read RDB block 7 [ 199.403522][T10706] loop2: unable to read partition table [ 199.404598][T10706] loop2: partition table beyond EOD, truncated [ 199.426665][T10706] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.438285][T10704] loop0: detected capacity change from 0 to 2048 [ 199.445034][T10704] hpfs: hpfs_map_sector(): read error [ 199.476841][ T8306] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.538151][T10718] tipc: Started in network mode [ 199.539058][T10718] tipc: Node identity 9a7dbf402e8b, cluster identity 4711 [ 199.545127][T10718] tipc: Enabled bearer , priority 0 [ 199.547278][T10718] device syzkaller0 entered promiscuous mode [ 199.550739][T10718] tipc: Resetting bearer [ 199.579640][T10723] loop4: detected capacity change from 0 to 1764 [ 199.605397][ T8298] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 199.615156][T10718] tipc: Disabling bearer [ 200.724233][T10744] loop0: detected capacity change from 0 to 256 [ 200.762936][T10744] FAT-fs (loop0): Directory bread(block 64) failed [ 200.764187][T10744] FAT-fs (loop0): Directory bread(block 65) failed [ 200.767372][T10744] FAT-fs (loop0): Directory bread(block 66) failed [ 200.770540][T10744] FAT-fs (loop0): Directory bread(block 67) failed [ 200.776594][T10744] FAT-fs (loop0): Directory bread(block 68) failed [ 200.780952][T10744] FAT-fs (loop0): Directory bread(block 69) failed [ 200.785645][T10744] FAT-fs (loop0): Directory bread(block 70) failed [ 200.791779][T10744] FAT-fs (loop0): Directory bread(block 71) failed [ 200.794119][T10744] FAT-fs (loop0): Directory bread(block 72) failed [ 200.797362][T10744] FAT-fs (loop0): Directory bread(block 73) failed [ 200.865712][T10754] loop4: detected capacity change from 0 to 1764 [ 200.926711][ T8306] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.275043][T10762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.276614][T10762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.287670][T10762] loop2: detected capacity change from 0 to 7 [ 201.299439][T10762] Dev loop2: unable to read RDB block 7 [ 201.301567][T10762] loop2: unable to read partition table [ 201.304710][T10762] loop2: partition table beyond EOD, truncated [ 201.305600][T10762] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 201.457046][T10781] loop2: detected capacity change from 0 to 512 [ 201.462943][T10783] loop3: detected capacity change from 0 to 1764 [ 201.487828][T10781] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 201.493398][ T8306] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.527803][ T4326] EXT4-fs (loop2): unmounting filesystem. [ 201.595062][T10792] loop3: detected capacity change from 0 to 256 [ 201.619189][T10792] FAT-fs (loop3): Directory bread(block 64) failed [ 201.620326][T10792] FAT-fs (loop3): Directory bread(block 65) failed [ 201.622433][T10792] FAT-fs (loop3): Directory bread(block 66) failed [ 201.623457][T10792] FAT-fs (loop3): Directory bread(block 67) failed [ 201.624552][T10792] FAT-fs (loop3): Directory bread(block 68) failed [ 201.625617][T10792] FAT-fs (loop3): Directory bread(block 69) failed [ 201.630395][T10794] __nla_validate_parse: 5 callbacks suppressed [ 201.630403][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 201.631382][T10792] FAT-fs (loop3): Directory bread(block 70) failed [ 201.631411][T10792] FAT-fs (loop3): Directory bread(block 71) failed [ 201.631445][T10792] FAT-fs (loop3): Directory bread(block 72) failed [ 201.636192][T10792] FAT-fs (loop3): Directory bread(block 73) failed [ 201.973881][T10802] netlink: 'syz.0.2015': attribute type 10 has an invalid length. [ 201.975500][T10802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2015'. [ 201.978213][T10802] device dummy0 entered promiscuous mode [ 201.980123][T10802] bridge0: port 3(dummy0) entered blocking state [ 201.981479][T10802] bridge0: port 3(dummy0) entered disabled state [ 202.149772][T10816] loop1: detected capacity change from 0 to 1764 [ 202.155262][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'. [ 202.205084][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2024'. [ 202.226276][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2025'. [ 202.230879][ T8298] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.258657][T10816] loop1: detected capacity change from 0 to 8192 [ 202.258709][ T8298] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.264849][T10816] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 202.266260][T10816] UDF-fs: Scanning with blocksize 512 failed [ 202.267845][T10816] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 202.269099][T10816] UDF-fs: Scanning with blocksize 1024 failed [ 202.270427][T10816] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 202.271981][T10816] UDF-fs: Scanning with blocksize 2048 failed [ 202.274819][T10816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.696682][T10829] loop2: detected capacity change from 0 to 256 [ 202.718221][T10829] FAT-fs (loop2): Directory bread(block 64) failed [ 202.719515][T10829] FAT-fs (loop2): Directory bread(block 65) failed [ 202.720669][T10829] FAT-fs (loop2): Directory bread(block 66) failed [ 202.721926][T10829] FAT-fs (loop2): Directory bread(block 67) failed [ 202.723109][T10829] FAT-fs (loop2): Directory bread(block 68) failed [ 202.724233][T10829] FAT-fs (loop2): Directory bread(block 69) failed [ 202.725279][T10829] FAT-fs (loop2): Directory bread(block 70) failed [ 202.726345][T10829] FAT-fs (loop2): Directory bread(block 71) failed [ 202.727289][T10829] FAT-fs (loop2): Directory bread(block 72) failed [ 202.728348][T10829] FAT-fs (loop2): Directory bread(block 73) failed [ 202.803227][T10833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.804926][T10833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.808906][T10833] loop2: detected capacity change from 0 to 7 [ 202.810406][T10833] Dev loop2: unable to read RDB block 7 [ 202.814464][T10833] loop2: unable to read partition table [ 202.815531][T10833] loop2: partition table beyond EOD, truncated [ 202.816580][T10833] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.854731][T10837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.856897][T10837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.084293][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'. [ 203.253755][T10851] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 203.255363][T10851] UDF-fs: Scanning with blocksize 512 failed [ 203.256661][T10851] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 203.257856][T10851] UDF-fs: Scanning with blocksize 1024 failed [ 203.260143][T10851] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 203.261752][T10851] UDF-fs: Scanning with blocksize 2048 failed [ 203.264839][T10851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.700569][ T27] kauditd_printk_skb: 2779 callbacks suppressed [ 203.700581][ T27] audit: type=1326 audit(203.680:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa27da81c code=0x7ffc0000 [ 203.707025][ T27] audit: type=1326 audit(203.680:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa27da81c code=0x7ffc0000 [ 203.715739][ T27] audit: type=1326 audit(203.680:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa27da81c code=0x7ffc0000 [ 203.719669][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'. [ 203.726276][ T27] audit: type=1326 audit(203.680:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa27da81c code=0x7ffc0000 [ 203.737022][ T27] audit: type=1326 audit(203.680:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa27da81c code=0x7ffc0000 [ 203.758285][ T27] audit: type=1326 audit(203.680:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa27da81c code=0x7ffc0000 [ 203.768924][ T27] audit: type=1326 audit(203.680:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa27da81c code=0x7ffc0000 [ 203.777769][ T27] audit: type=1326 audit(203.690:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa27da81c code=0x7ffc0000 [ 203.784813][ T27] audit: type=1326 audit(203.690:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa27da81c code=0x7ffc0000 [ 203.797602][ T27] audit: type=1326 audit(203.690:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.3.2045" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffa27da81c code=0x7ffc0000 [ 203.808803][T10877] device syzkaller0 entered promiscuous mode [ 204.745120][ T8298] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.798721][T10895] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 204.802532][T10895] UDF-fs: Scanning with blocksize 512 failed [ 204.805995][T10895] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 204.808201][T10895] UDF-fs: Scanning with blocksize 1024 failed [ 204.816761][T10895] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 204.817897][T10895] UDF-fs: Scanning with blocksize 2048 failed [ 204.824668][T10895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.186263][T10896] vcan0: MTU too low for tipc bearer [ 215.187176][T10896] tipc: Enabling of bearer rejected, failed to enable media [ 215.188477][T10898] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2055'. [ 215.192009][T10907] netlink: 'syz.3.2058': attribute type 10 has an invalid length. [ 215.193303][T10907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2058'. [ 215.194913][T10907] device dummy0 entered promiscuous mode [ 215.199291][T10907] bridge0: port 3(dummy0) entered blocking state [ 215.203630][T10907] bridge0: port 3(dummy0) entered disabled state [ 215.257634][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 215.406432][T10921] set_capacity_and_notify: 4 callbacks suppressed [ 215.406444][T10921] loop0: detected capacity change from 0 to 32768 [ 215.421851][T10921] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 216.021257][ T3898] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 216.035204][T10945] device syzkaller0 entered promiscuous mode [ 216.152271][T10949] loop3: detected capacity change from 0 to 2048 [ 216.169840][T10949] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 216.187936][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 216.211701][ T3898] usb 1-1: Using ep0 maxpacket: 16 [ 216.212996][ T3898] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 216.214893][ T3898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.217082][ T3898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.219500][ T3898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.229596][ T3898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.232794][ T3898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.235138][ T3898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.238176][ T3898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.243406][ T3898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.246730][ T3898] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 216.248043][ T3898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 216.249287][ T3898] usb 1-1: SerialNumber: syz [ 216.258180][ T3898] usb 1-1: config 0 descriptor?? [ 216.266709][ T3898] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input3 [ 216.488838][T10938] input: syz0 as /devices/virtual/input/input4 [ 216.548336][ T3898] usb 1-1: USB disconnect, device number 24 [ 216.560660][T10908] bcm5974 1-1:0.0: could not read from device [ 216.727064][T10969] loop4: detected capacity change from 0 to 8 [ 218.815361][T10987] loop0: detected capacity change from 0 to 2048 [ 218.822947][T10987] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 218.841867][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 227.273546][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 227.280728][T11006] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2093'. [ 227.784182][T11006] device hsr_slave_1 left promiscuous mode [ 227.858043][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 227.919935][T11037] device syzkaller0 entered promiscuous mode [ 228.260493][T11055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2113'. [ 228.617802][T11061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.619346][T11061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.634203][T11061] input: syz0 as /devices/virtual/input/input5 [ 238.947389][T11045] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2109'. [ 238.948942][T11055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2113'. [ 239.453066][T11088] netlink: 'syz.0.2123': attribute type 10 has an invalid length. [ 239.454459][T11088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2123'. [ 239.520752][T11098] netlink: 'syz.2.2127': attribute type 27 has an invalid length. [ 239.532869][T11096] loop0: detected capacity change from 0 to 2048 [ 239.545764][T11101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.547631][T11101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.552504][T11096] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 239.601845][T11098] bond0: (slave bond_slave_0): Releasing backup interface [ 239.619724][T11096] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 239.625034][T11096] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1650 with error 28 [ 239.626972][T11096] EXT4-fs (loop0): This should not happen!! Data will be lost [ 239.626972][T11096] [ 239.628335][T11096] EXT4-fs (loop0): Total free blocks count 0 [ 239.629199][T11096] EXT4-fs (loop0): Free/Dirty block details [ 239.630081][T11096] EXT4-fs (loop0): free_blocks=2415919504 [ 239.630926][T11096] EXT4-fs (loop0): dirty_blocks=1664 [ 239.631689][T11096] EXT4-fs (loop0): Block reservation details [ 239.632812][T11096] EXT4-fs (loop0): i_reserved_data_blocks=104 [ 239.666008][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 239.704941][T11106] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2129'. [ 239.706668][T11106] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2129'. [ 239.775732][T11110] device syzkaller0 entered promiscuous mode [ 240.635113][T11142] loop0: detected capacity change from 0 to 2048 [ 240.657625][T11142] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 240.724574][T11142] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 240.727550][T11142] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1866 with error 28 [ 240.729712][T11142] EXT4-fs (loop0): This should not happen!! Data will be lost [ 240.729712][T11142] [ 240.731819][T11142] EXT4-fs (loop0): Total free blocks count 0 [ 240.733012][T11142] EXT4-fs (loop0): Free/Dirty block details [ 240.733965][T11142] EXT4-fs (loop0): free_blocks=2415919504 [ 240.734994][T11142] EXT4-fs (loop0): dirty_blocks=1872 [ 240.735769][T11142] EXT4-fs (loop0): Block reservation details [ 240.736878][T11142] EXT4-fs (loop0): i_reserved_data_blocks=117 [ 240.779457][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 248.801527][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.802540][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.831658][T11147] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2140'. [ 250.897702][T11156] netlink: 'syz.2.2143': attribute type 10 has an invalid length. [ 250.898922][T11156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2143'. [ 250.900334][T11156] device dummy0 entered promiscuous mode [ 250.904945][T11156] bridge0: port 3(dummy0) entered blocking state [ 250.905989][T11156] bridge0: port 3(dummy0) entered disabled state [ 250.955834][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.960196][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.370941][T11176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.373861][T11176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.382388][T11174] loop1: detected capacity change from 0 to 2048 [ 251.417798][T11174] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 251.498437][T11174] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 251.501365][T11174] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2018 with error 28 [ 251.510025][T11174] EXT4-fs (loop1): This should not happen!! Data will be lost [ 251.510025][T11174] [ 251.511623][T11174] EXT4-fs (loop1): Total free blocks count 0 [ 251.512488][T11174] EXT4-fs (loop1): Free/Dirty block details [ 251.513663][T11174] EXT4-fs (loop1): free_blocks=2415919504 [ 251.514549][T11174] EXT4-fs (loop1): dirty_blocks=2032 [ 251.515649][T11174] EXT4-fs (loop1): Block reservation details [ 251.516625][T11174] EXT4-fs (loop1): i_reserved_data_blocks=127 [ 251.529672][T11186] loop4: detected capacity change from 0 to 1024 [ 251.536624][T11186] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.554957][T11186] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 251.568393][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 251.586851][T11186] ================================================================== [ 251.588169][T11186] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x7c0/0x15a0 [ 251.589309][T11186] Read of size 18446744073709551588 at addr ffff0000ce0c2040 by task syz.4.2154/11186 [ 251.590695][T11186] [ 251.591079][T11186] CPU: 1 PID: 11186 Comm: syz.4.2154 Not tainted syzkaller #0 [ 251.592277][T11186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 251.593946][T11186] Call trace: [ 251.594452][T11186] dump_backtrace+0x1c0/0x1ec [ 251.595238][T11186] show_stack+0x2c/0x3c [ 251.595928][T11186] __dump_stack+0x30/0x40 [ 251.596608][T11186] dump_stack_lvl+0xf4/0x15c [ 251.597344][T11186] print_address_description+0x88/0x218 [ 251.598185][T11186] print_report+0x50/0x68 [ 251.598850][T11186] kasan_report+0xa8/0xfc [ 251.599559][T11186] kasan_check_range+0x258/0x290 [ 251.600381][T11186] memmove+0x48/0x90 [ 251.601009][T11186] ext4_xattr_set_entry+0x7c0/0x15a0 [ 251.601425][T11190] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2155'. [ 251.601884][T11186] ext4_xattr_block_set+0x640/0x2880 [ 251.603520][T11190] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2155'. [ 251.604085][T11186] ext4_xattr_set_handle+0x10dc/0x1344 [ 251.606154][T11186] ext4_xattr_set+0x1f4/0x2c0 [ 251.606901][T11186] ext4_xattr_trusted_set+0x4c/0x64 [ 251.607647][T11186] __vfs_setxattr+0x384/0x3a0 [ 251.608352][T11186] __vfs_setxattr_noperm+0x120/0x564 [ 251.609113][T11186] __vfs_setxattr_locked+0x1ec/0x218 [ 251.609879][T11186] vfs_setxattr+0x158/0x2ac [ 251.610518][T11186] setxattr+0x258/0x2d8 [ 251.611083][T11186] path_setxattr+0x130/0x260 [ 251.611780][T11186] __arm64_sys_lsetxattr+0xbc/0xd8 [ 251.612589][T11186] invoke_syscall+0x98/0x2b4 [ 251.613218][T11186] el0_svc_common+0x138/0x258 [ 251.613938][T11186] do_el0_svc+0x58/0x130 [ 251.614553][T11186] el0_svc+0x58/0x128 [ 251.615117][T11186] el0t_64_sync_handler+0x84/0xf0 [ 251.615943][T11186] el0t_64_sync+0x18c/0x190 [ 251.616636][T11186] [ 251.616987][T11186] Allocated by task 11186: [ 251.617662][T11186] kasan_set_track+0x4c/0x80 [ 251.618373][T11186] kasan_save_alloc_info+0x24/0x30 [ 251.619132][T11186] __kasan_kmalloc+0xa0/0xb8 [ 251.619795][T11186] __kmalloc_node_track_caller+0xe0/0x16c [ 251.620610][T11186] kmemdup+0x5c/0x98 [ 251.621196][T11186] ext4_xattr_block_set+0x574/0x2880 [ 251.621983][T11186] ext4_xattr_set_handle+0x10dc/0x1344 [ 251.622762][T11186] ext4_xattr_set+0x1f4/0x2c0 [ 251.623414][T11186] ext4_xattr_trusted_set+0x4c/0x64 [ 251.624191][T11186] __vfs_setxattr+0x384/0x3a0 [ 251.624851][T11186] __vfs_setxattr_noperm+0x120/0x564 [ 251.625605][T11186] __vfs_setxattr_locked+0x1ec/0x218 [ 251.626377][T11186] vfs_setxattr+0x158/0x2ac [ 251.627069][T11186] setxattr+0x258/0x2d8 [ 251.627691][T11186] path_setxattr+0x130/0x260 [ 251.628368][T11186] __arm64_sys_lsetxattr+0xbc/0xd8 [ 251.629122][T11186] invoke_syscall+0x98/0x2b4 [ 251.629746][T11186] el0_svc_common+0x138/0x258 [ 251.630438][T11186] do_el0_svc+0x58/0x130 [ 251.631087][T11186] el0_svc+0x58/0x128 [ 251.631687][T11186] el0t_64_sync_handler+0x84/0xf0 [ 251.632472][T11186] el0t_64_sync+0x18c/0x190 [ 251.633148][T11186] [ 251.633528][T11186] Last potentially related work creation: [ 251.634360][T11186] kasan_save_stack+0x40/0x70 [ 251.635053][T11186] __kasan_record_aux_stack+0xc0/0xdc [ 251.635800][T11186] kasan_record_aux_stack_noalloc+0x14/0x20 [ 251.636699][T11186] call_rcu+0x100/0x94c [ 251.637298][T11186] pwq_unbound_release_workfn+0x210/0x254 [ 251.638133][T11186] process_one_work+0x7f8/0x13a4 [ 251.638832][T11186] worker_thread+0x8c4/0xfec [ 251.639570][T11186] kthread+0x250/0x2d8 [ 251.640112][T11186] ret_from_fork+0x10/0x20 [ 251.640758][T11186] [ 251.641100][T11186] Second to last potentially related work creation: [ 251.642041][T11186] kasan_save_stack+0x40/0x70 [ 251.642774][T11186] __kasan_record_aux_stack+0xc0/0xdc [ 251.643498][T11186] kasan_record_aux_stack_noalloc+0x14/0x20 [ 251.644357][T11186] call_rcu+0x100/0x94c [ 251.645018][T11186] pwq_unbound_release_workfn+0x210/0x254 [ 251.645871][T11186] process_one_work+0x7f8/0x13a4 [ 251.646691][T11186] worker_thread+0x8c4/0xfec [ 251.647441][T11186] kthread+0x250/0x2d8 [ 251.648076][T11186] ret_from_fork+0x10/0x20 [ 251.648745][T11186] [ 251.649120][T11186] The buggy address belongs to the object at ffff0000ce0c2000 [ 251.649120][T11186] which belongs to the cache kmalloc-1k of size 1024 [ 251.651329][T11186] The buggy address is located 64 bytes inside of [ 251.651329][T11186] 1024-byte region [ffff0000ce0c2000, ffff0000ce0c2400) [ 251.653372][T11186] [ 251.653695][T11186] The buggy address belongs to the physical page: [ 251.654724][T11186] page:000000001ecea927 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000ce0c0000 pfn:0x10e0c0 [ 251.656483][T11186] head:000000001ecea927 order:3 compound_mapcount:0 compound_pincount:0 [ 251.657763][T11186] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 251.659015][T11186] raw: 05ffc00000010200 0000000000000000 dead000000000001 ffff0000c0002780 [ 251.660276][T11186] raw: ffff0000ce0c0000 000000008010000f 00000001ffffffff 0000000000000000 [ 251.661547][T11186] page dumped because: kasan: bad access detected [ 251.662475][T11186] [ 251.662816][T11186] Memory state around the buggy address: [ 251.663741][T11186] ffff0000ce0c1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 251.664944][T11186] ffff0000ce0c1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 251.666162][T11186] >ffff0000ce0c2000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 251.667299][T11186] ^ [ 251.668278][T11186] ffff0000ce0c2080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 251.669508][T11186] ffff0000ce0c2100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 251.670732][T11186] ================================================================== [ 251.671917][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.676443][T11193] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 251.681383][T11186] Disabling lock debugging due to kernel taint [ 251.720682][ T4330] EXT4-fs (loop4): unmounting filesystem.