last executing test programs: 26m16.110302522s ago: executing program 32 (id=174): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0}) 26m13.837137039s ago: executing program 33 (id=190): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r1}}, 0x18) 13m24.672036359s ago: executing program 34 (id=7302): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040)=0x2000000, 0x4) 13m15.823829662s ago: executing program 35 (id=7363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 9m2.68169454s ago: executing program 36 (id=9256): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x20040600) 5m59.334580011s ago: executing program 37 (id=10489): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000005, 0x6031, 0xffffffffffffffff, 0xc4b89000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 4m39.674296335s ago: executing program 38 (id=10914): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m38.296075774s ago: executing program 39 (id=10919): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0xa) setreuid(0xee00, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x4) 4m34.315957426s ago: executing program 40 (id=10935): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) tkill(r0, 0x8) 4m28.234236144s ago: executing program 6 (id=10961): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0xfdf4, r0, 0x80000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000100)=0x1) 4m27.695636561s ago: executing program 41 (id=10961): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0xfdf4, r0, 0x80000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000100)=0x1) 3m57.212942678s ago: executing program 8 (id=11068): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002ee0000000000001910be1a000000000000000000000000000000000000000008000000000000000000000000000000fdfffffffffeffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) 3m56.766423029s ago: executing program 8 (id=11070): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x400) 3m56.462017037s ago: executing program 8 (id=11075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a010400000000000000000a0000080900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010140009800800014000000003080001400100600014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) 3m55.226453243s ago: executing program 42 (id=11076): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m55.182203949s ago: executing program 3 (id=11080): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 3m54.942897723s ago: executing program 43 (id=11080): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 3m54.934309132s ago: executing program 8 (id=11081): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000000)={[{@block_validity}, {@minixdf}, {@usrquota}, {@lazytime}, {@noauto_da_alloc}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@auto_da_alloc}, {@norecovery}]}, 0xfe, 0x479, &(0x7f0000001440)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 3m53.818095396s ago: executing program 8 (id=11090): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x40f0f022}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x88, 0x3, 0x10000, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) 3m50.106307282s ago: executing program 8 (id=11100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000b00)="63eced8e46dc3f0adf33c9f7b987", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m49.65749338s ago: executing program 44 (id=11100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000b00)="63eced8e46dc3f0adf33c9f7b987", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m7.216738785s ago: executing program 5 (id=12152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x8070bd24, 0x0, {0x2, 0x20, 0x14, 0xfc, 0xff, 0x0, 0xff, 0xb, 0x200}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0xea5bc50b619917ee) 1m6.900556407s ago: executing program 5 (id=12153): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x947a, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xfffffffe, 0xffffffff, 0x0, 0x1004, 0x7, 0x20005, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x0, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8004, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf5, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x0, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x8005f31, 0x2, 0x200004e1, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x8, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x1000, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x5, 0x3, 0x2, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x8001, 0x4, 0x1000, 0x5, 0xb1, 0x100ac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffdff, 0xfffffc00, 0x7ff, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0x4, 0x23], [0x9, 0xbb33, 0x7, 0xb, 0x7, 0x4, 0x6, 0x6, 0x0, 0x80000001, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x80000002, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x7, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7a, 0x100, 0x9620, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x6c1b, 0xfffffffd, 0x4, 0x5, 0x1, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m6.441165774s ago: executing program 5 (id=12158): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000080)) syz_ublk_add_dev(r0, r4, r2, r3, &(0x7f0000000540)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3b4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)) 1m5.717878135s ago: executing program 5 (id=12162): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000001380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r0, 0x103, 0x1) getdents64(r0, 0x0, 0x0) 1m4.557770348s ago: executing program 5 (id=12168): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2800000, &(0x7f0000000800)={[{@block_validity}, {@sysvgroups}, {@resuid}, {@commit}, {@errors_continue}, {@data_err_ignore}, {@nodiscard}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc2800, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m2.341832276s ago: executing program 5 (id=12185): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0xfffffffffffffece, 0x0}, 0x8a}], 0x40001b1, 0x22, 0x0) 47.120044065s ago: executing program 45 (id=12185): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0xfffffffffffffece, 0x0}, 0x8a}], 0x40001b1, 0x22, 0x0) 37.919536762s ago: executing program 6 (id=12293): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) 36.906703016s ago: executing program 6 (id=12308): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 36.026814358s ago: executing program 6 (id=12329): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x200005c, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x1, 0x152b, &(0x7f0000002780)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 35.448793386s ago: executing program 6 (id=12334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001600)={{r0}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="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"}) 34.617994103s ago: executing program 6 (id=12341): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 33.933718754s ago: executing program 46 (id=12341): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 30.686124759s ago: executing program 9 (id=12360): setresuid(0xee01, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = getpid() prlimit64(r0, 0x6, 0x0, 0x0) 30.208178556s ago: executing program 9 (id=12363): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0x41) 29.807345881s ago: executing program 9 (id=12365): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 29.290462164s ago: executing program 9 (id=12370): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='./file1\x00', 0x804, &(0x7f0000001f80)=ANY=[@ANYBLOB='allow_utime=00000000000000000000006,dmask=00000000000000000000010,sys_tz,iocharset=cp932,umask=00000000000000000000015,namecase=1,keep_last_dots,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c00f96e5b623ab6ac457ac7b0494ce434e5328fcfc500b38491c3278aa8e5e1e0e39de4dc97c724a6e1d9796e8b281b94f30dcb4d328a4f084f23b65caaf205a313b608000000000000001ad3357a0993f21fcad205f7cf7f03111458a7da03c4b1a12d12e868474fb9df62caa3b1474eccfbb0967b59d9eaea3a0000000000000000"], 0x51, 0x152e, &(0x7f000000a300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 28.583293113s ago: executing program 9 (id=12378): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) 27.66616889s ago: executing program 9 (id=12383): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x342, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 26.977457262s ago: executing program 47 (id=12383): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x342, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 7.623988754s ago: executing program 1 (id=12484): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0x2f9d, @local}}}, 0x32) 7.324985755s ago: executing program 1 (id=12496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast}, 0x0, 0x0, @default, @val={0x1, 0x4, [{0x4}, {0xb}, {0x4, 0x1}, {0x4}]}, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x800) 6.796718496s ago: executing program 1 (id=12498): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000400)={0x0, 0x8, 0x4000, 0x6, 0x0, 0x9}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 6.147491696s ago: executing program 7 (id=12501): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x48}}, 0x0) 5.711895774s ago: executing program 7 (id=12492): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="0003030000001501"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 5.510905198s ago: executing program 0 (id=12493): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) 4.927330912s ago: executing program 1 (id=12494): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.792130947s ago: executing program 4 (id=12502): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040), 0x1, 0x51d, &(0x7f0000000e00)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x2000000, @desc1}}) 3.771459457s ago: executing program 1 (id=12513): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0, 0x1ff) 3.710481841s ago: executing program 2 (id=12503): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.183796361s ago: executing program 2 (id=12504): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x48800) 2.917825833s ago: executing program 4 (id=12505): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="92", 0x1}], 0x1}, 0x5) sendmsg$sock(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="d9", 0x1}], 0x1}, 0x34) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40) 2.902357574s ago: executing program 0 (id=12506): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) 2.707676325s ago: executing program 2 (id=12507): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1000400, &(0x7f0000000000)=ANY=[], 0x2, 0x662, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./file0\x00') 2.517350555s ago: executing program 3 (id=12384): socket$inet(0x2, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 2.452098146s ago: executing program 0 (id=12508): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x4}, {}, {0x2, 0x6}, {0x2, 0x5}, {}], {0x4, 0x4}, [{0x8, 0x2}], {}, {0x20, 0x7}}, 0x5c, 0x3) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0xffffe1ac, 0x8, 0x6, 0x7}) 2.394122406s ago: executing program 7 (id=12509): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x18, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4c}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3328e821}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf758}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) 2.386690932s ago: executing program 4 (id=12510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfdff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x40c0080) 2.1446945s ago: executing program 3 (id=12511): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 2.065793235s ago: executing program 7 (id=12512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 1.73672368s ago: executing program 3 (id=12514): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x679}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) 1.736519945s ago: executing program 4 (id=12515): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0xfe7c, 0x0, 0x0) socket(0x3, 0xa, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.736330728s ago: executing program 7 (id=12516): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f00000002c0), 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x20044000}, 0xc31fe084736598c) 1.20921875s ago: executing program 4 (id=12517): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) 1.207384922s ago: executing program 2 (id=12529): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 1.206047946s ago: executing program 0 (id=12518): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) poll(0x0, 0x0, 0xd4) landlock_restrict_self(0xffffffffffffffff, 0xc) landlock_restrict_self(r0, 0x9) 1.034435529s ago: executing program 1 (id=12519): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x947a, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xfffffffe, 0xffffffff, 0x0, 0x1004, 0x7, 0x20005, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x0, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8004, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf5, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x0, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x8005f31, 0x2, 0x200004e1, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x8, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x1000, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x5, 0x3, 0x2, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x8001, 0x4, 0x1000, 0x5, 0xb1, 0x100ac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffdff, 0xfffffc00, 0x7ff, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0x4, 0x23], [0x9, 0xbb33, 0x7, 0xb, 0x7, 0x4, 0x6, 0x6, 0x0, 0x80000001, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x80000002, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x7, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7a, 0x100, 0x9620, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x6c1b, 0xfffffffd, 0x4, 0x5, 0x1, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 893.894143ms ago: executing program 7 (id=12520): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x48, r3, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) 840.640885ms ago: executing program 4 (id=12521): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 823.327594ms ago: executing program 3 (id=12522): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000010000200000000061f300008500000053000000b7080000000000007b8af8ff00000000b7080000ffffffff6b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 639.870341ms ago: executing program 0 (id=12523): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendto$inet6(r0, 0x0, 0xfffffffffffffff8, 0x41, &(0x7f0000000200)={0xa, 0x4e1d, 0x20000000, @mcast1}, 0x1c) 590.315666ms ago: executing program 2 (id=12524): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00656f470caf0cb05f53287dcb33b0ed54816d3cf1e38a748fae4a83cf02bd6205a4860261fddf1032c8f65ae2cb14d510b9e52885f3782dd9adaea825309fa5ffee042f00"], 0x1, 0x5d7, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, 0x0) 320.034298ms ago: executing program 3 (id=12525): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f00000005c0)={0x40, 0xe, 0x49, "0435581805e05d845542c3cf274f309b4fb7dc75946793dc0cf7fa52fc1056632bee2df944c0a3ace012f0378d586fa9f7c3c64f3f08771f38954626122d596e03929b66c9a42f2dc1"}, 0x0, 0x0}) 247.482701ms ago: executing program 0 (id=12526): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x181083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x1, 0xd7, 0x800000002, 0x1, 0x9}) 0s ago: executing program 2 (id=12527): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x11000}) kernel console output (not intermixed with test programs): ][ T3398] loop9: lost filesystem error report for type 5 error -117 [ 1561.557283][ T3398] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1561.659181][ T3398] loop9: lost filesystem error report for type 5 error -117 [ 1561.659741][ T30] audit: type=1800 audit(1780160017.142:435): pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11659" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1561.666662][ T3398] EXT4-fs error (device loop9): ext4_evict_inode:267: inode #11: comm syz.9.11669: mark_inode_dirty error [ 1561.729090][ T3398] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1561.729924][ T3398] EXT4-fs warning (device loop9): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 1561.823483][ T3398] EXT4-fs (loop9): 1 orphan inode deleted [ 1561.862118][ T57] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1561.899441][ T6488] usb 5-1: USB disconnect, device number 43 [ 1561.924192][ T3398] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1561.944714][ T57] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1561.948626][ T57] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1562.040793][ T57] EXT4-fs error (device loop9): ext4_release_dquot:7068: comm kworker/u8:4: Failed to release dquot type 0 [ 1562.216387][ T3398] EXT4-fs: Ignoring removed bh option [ 1562.248547][ T3398] EXT4-fs (loop9): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 1562.333349][ T3398] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 48: comm syz.9.11669: lblock 0 mapped to illegal pblock 48 (length 1) [ 1562.364170][ T3398] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=-117 [ 1562.384946][ T1207] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1562.568813][ T3398] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1562.816297][ T1231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.088024][ T3447] loop9: detected capacity change from 0 to 512 [ 1563.142576][ T3447] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1563.167604][ T3447] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1563.285142][ T3447] EXT4-fs (loop9): 1 truncate cleaned up [ 1563.351281][ T3447] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1563.613386][ T3455] bond1: ARP target 9.0.0.0 is already present [ 1563.630037][ T3455] bond1: option arp_ip_target: invalid value (9) [ 1563.696139][ T3455] bond1 (unregistering): Released all slaves [ 1563.787197][ T1231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.891409][T23799] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1564.049198][T23799] usb 2-1: Using ep0 maxpacket: 16 [ 1564.071948][T23799] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 1564.110007][T23799] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1564.135118][T23799] usb 2-1: config 0 has no interface number 0 [ 1564.167643][T23799] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1564.195788][T23799] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1564.233038][T23799] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1564.254543][T23799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.291519][T23799] usb 2-1: Product: syz [ 1564.303816][T23799] usb 2-1: Manufacturer: syz [ 1564.316260][T23799] usb 2-1: SerialNumber: syz [ 1564.337952][T23799] usb 2-1: config 0 descriptor?? [ 1564.352346][ T3461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1564.380933][ T3461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1564.579355][ T5787] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1564.648886][ T3461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1564.649234][T23054] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1564.685506][ T3461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1564.761797][ T5787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.790030][ T5787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.818747][ T5787] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1564.849085][ T5787] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1564.868547][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.869899][T23054] usb 10-1: Using ep0 maxpacket: 32 [ 1564.904393][ T5787] usb 5-1: config 0 descriptor?? [ 1564.924889][T23054] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.968268][T23054] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.009538][T23054] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1565.046464][T23054] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.096258][T23054] usb 10-1: config 0 descriptor?? [ 1565.133168][T23054] hub 10-1:0.0: USB hub found [ 1565.141757][T23799] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 1565.155488][T30829] IPVS: starting estimator thread 0... [ 1565.181685][T23799] asix 2-1:0.251: probe with driver asix failed with error -524 [ 1565.259296][ T3496] IPVS: using max 22 ests per chain, 52800 per kthread [ 1565.345724][ T5787] plantronics 0003:047F:FFFF.0088: unbalanced delimiter at end of report description [ 1565.365243][T23054] hub 10-1:0.0: config failed, can't read hub descriptor (err -90) [ 1565.394330][ T5787] plantronics 0003:047F:FFFF.0088: parse failed [ 1565.428043][ T5787] plantronics 0003:047F:FFFF.0088: probe with driver plantronics failed with error -22 [ 1565.452025][T30842] usb 2-1: USB disconnect, device number 65 [ 1565.551154][ T3481] loop5: detected capacity change from 0 to 32768 [ 1565.587311][ T3481] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1565.618219][ T5787] usb 5-1: USB disconnect, device number 44 [ 1565.722942][ T3481] XFS (loop5): Ending clean mount [ 1565.732725][ T3512] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1565.741775][ T3512] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1565.750801][ T3512] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1565.759811][ T3512] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1565.768793][ T3512] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1565.777828][ T3512] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1565.786843][ T3512] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1565.795855][ T3512] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1565.804853][ T3512] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1565.813856][ T3512] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 1565.857700][T23054] hid-generic 0003:046D:C31C.0089: item fetching failed at offset 0/1 [ 1565.860739][ T3481] XFS (loop5): Quotacheck needed: Please wait. [ 1565.884383][T23054] hid-generic 0003:046D:C31C.0089: probe with driver hid-generic failed with error -22 [ 1565.954741][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1565.988897][ T3481] XFS (loop5): Quotacheck: Done. [ 1566.189477][ T5787] usb 10-1: USB disconnect, device number 20 [ 1566.266650][ T1207] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1567.225220][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11701'. [ 1568.309393][ T5787] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1568.505123][ T5787] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1568.566337][ T5787] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1568.626396][ T5787] usb 10-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 1568.672478][ T5787] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.733478][ T5787] usb 10-1: config 0 descriptor?? [ 1568.800432][ T3550] loop5: detected capacity change from 0 to 32768 [ 1568.862266][ T3550] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1568.948377][ T3550] VFS: Lookup of '' in ocfs2 loop5 would have caused loop [ 1569.213898][ T5787] razer 0003:1532:010D.008A: unknown main item tag 0x0 [ 1569.239571][ T1207] ocfs2: Unmounting device (7,5) on (node local) [ 1569.242668][ T5787] razer 0003:1532:010D.008A: unknown main item tag 0x0 [ 1569.254534][ T5787] razer 0003:1532:010D.008A: unknown main item tag 0x0 [ 1569.262515][ T5787] razer 0003:1532:010D.008A: unknown main item tag 0x0 [ 1569.276980][ T5787] razer 0003:1532:010D.008A: unknown main item tag 0x0 [ 1569.311737][ T5787] razer 0003:1532:010D.008A: unknown main item tag 0x0 [ 1569.320144][T26963] Bluetooth: hci0: ISO packet too small [ 1569.326526][ T5787] razer 0003:1532:010D.008A: unknown main item tag 0x0 [ 1569.343058][ T5787] razer 0003:1532:010D.008A: unknown main item tag 0x0 [ 1569.350967][ T5787] razer 0003:1532:010D.008A: unknown main item tag 0x0 [ 1569.358235][ T5787] razer 0003:1532:010D.008A: unknown main item tag 0x0 [ 1569.412013][ T5787] razer 0003:1532:010D.008A: hidraw0: USB HID v0.06 Device [HID 1532:010d] on usb-dummy_hcd.9-1/input0 [ 1569.506552][ T5787] usb 10-1: USB disconnect, device number 21 [ 1569.856937][ T3598] fido_id[3598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1569.888784][ T3605] loop4: detected capacity change from 0 to 256 [ 1570.036844][ T3605] FAT-fs (loop4): Directory bread(block 64) failed [ 1570.064557][ T3605] FAT-fs (loop4): Directory bread(block 65) failed [ 1570.108943][ T3605] FAT-fs (loop4): Directory bread(block 66) failed [ 1570.160629][ T3605] FAT-fs (loop4): Directory bread(block 67) failed [ 1570.196260][ T3605] FAT-fs (loop4): Directory bread(block 68) failed [ 1570.220684][ T3612] loop5: detected capacity change from 0 to 128 [ 1570.231284][ T3605] FAT-fs (loop4): Directory bread(block 69) failed [ 1570.262228][ T3605] FAT-fs (loop4): Directory bread(block 70) failed [ 1570.291832][ T3605] FAT-fs (loop4): Directory bread(block 71) failed [ 1570.330109][ T30] audit: type=1800 audit(1780160025.812:436): pid=3612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11722" name="file2" dev="loop5" ino=1049409 res=0 errno=0 [ 1570.361735][ T3605] FAT-fs (loop4): Directory bread(block 72) failed [ 1570.393301][ T3605] FAT-fs (loop4): Directory bread(block 73) failed [ 1570.437642][ T3612] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1570.453509][ T30] audit: type=1800 audit(1780160025.842:437): pid=3612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11722" name="file2" dev="loop5" ino=1049409 res=0 errno=0 [ 1570.478121][ T3612] FAT-fs (loop5): Filesystem has been set read-only [ 1570.485877][ T3612] syz.5.11722: attempt to access beyond end of device [ 1570.485877][ T3612] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1570.521431][ T3612] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1570.551777][ T3612] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1570.606338][ T3619] loop9: detected capacity change from 0 to 1024 [ 1570.712224][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1570.732141][ T3612] syz.5.11722: attempt to access beyond end of device [ 1570.732141][ T3612] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1570.767829][ T3619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1570.801930][ T3608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1570.859599][ T3619] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1570.898396][ T3612] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1570.943767][ T3612] syz.5.11722: attempt to access beyond end of device [ 1570.943767][ T3612] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1570.979722][ T30] audit: type=1800 audit(1780160026.462:438): pid=3619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11731" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1571.170823][ T3620] syz.5.11722: attempt to access beyond end of device [ 1571.170823][ T3620] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 1571.211777][ T1231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1571.236895][ T3612] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1571.299826][ T3612] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1571.312193][ T3620] buffer_io_error: 138 callbacks suppressed [ 1571.312220][ T3620] Buffer I/O error on dev loop5, logical block 2065, async page read [ 1571.419464][ T3620] syz.5.11722: attempt to access beyond end of device [ 1571.419464][ T3620] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 1571.502541][ T3640] loop1: detected capacity change from 0 to 1024 [ 1571.502962][ T3620] Buffer I/O error on dev loop5, logical block 2066, async page read [ 1571.546253][ T3640] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1571.576744][ T3620] syz.5.11722: attempt to access beyond end of device [ 1571.576744][ T3620] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 1571.631883][ T3640] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.11735: lblock 2 mapped to illegal pblock 2 (length 1) [ 1571.669431][ T3640] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1571.669765][ T3640] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1571.687674][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1571.687708][ C0] EXT4-fs (loop1): initial error at time 1780160027: ext4_map_blocks:791: inode 3: block 2 [ 1571.687776][ C0] EXT4-fs (loop1): last error at time 1780160027: ext4_map_blocks:791: inode 3: block 2 [ 1571.703608][ T3620] Buffer I/O error on dev loop5, logical block 2067, async page read [ 1571.723806][ T3620] syz.5.11722: attempt to access beyond end of device [ 1571.723806][ T3620] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 1571.740589][ T3620] Buffer I/O error on dev loop5, logical block 2068, async page read [ 1571.748818][ T3620] syz.5.11722: attempt to access beyond end of device [ 1571.748818][ T3620] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 1571.762852][ T3620] Buffer I/O error on dev loop5, logical block 2069, async page read [ 1571.776699][ T3640] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.11735: lblock 0 mapped to illegal pblock 48 (length 1) [ 1571.797670][ T3620] syz.5.11722: attempt to access beyond end of device [ 1571.797670][ T3620] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 1571.843410][ T3620] Buffer I/O error on dev loop5, logical block 2070, async page read [ 1571.852028][ T3640] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1571.852403][ T3640] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1571.894786][ T3620] syz.5.11722: attempt to access beyond end of device [ 1571.894786][ T3620] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 1571.947487][ T3640] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.11735: Failed to acquire dquot type 0 [ 1571.960812][ T3620] Buffer I/O error on dev loop5, logical block 2071, async page read [ 1571.986830][ T3620] Buffer I/O error on dev loop5, logical block 2072, async page read [ 1572.056542][ T3640] loop1: lost filesystem error report for type 5 error -117 [ 1572.056887][ T3640] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1572.141483][ T3640] loop1: lost filesystem error report for type 5 error -117 [ 1572.142827][ T3640] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.11735: mark_inode_dirty error [ 1572.214469][ T3640] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1572.219388][ T3640] EXT4-fs warning (device loop1): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 1572.312345][ T3640] EXT4-fs (loop1): 1 orphan inode deleted [ 1572.345504][ T1167] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1572.360321][ T3640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1572.491368][ T1167] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1572.528849][ T1167] EXT4-fs error (device loop1): ext4_release_dquot:7068: comm kworker/u8:7: Failed to release dquot type 0 [ 1572.622073][ T3640] EXT4-fs: Ignoring removed bh option [ 1572.647696][ T3640] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 1572.717570][ T3640] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.11735: lblock 0 mapped to illegal pblock 48 (length 1) [ 1572.772909][ T3640] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 1572.783047][ T3665] loop5: detected capacity change from 0 to 4096 [ 1572.903359][ T3672] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1572.934441][ T3640] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1573.019788][ T3665] NILFS error (device loop5): nilfs_readdir: zero-length directory entry [ 1573.119175][ T3665] Remounting filesystem read-only [ 1573.146765][ T1305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1573.472883][ T3680] netlink: 'syz.1.11750': attribute type 1 has an invalid length. [ 1573.521559][ T3680] netlink: 'syz.1.11750': attribute type 2 has an invalid length. [ 1573.533589][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1573.565665][ T3680] netlink: 'syz.1.11750': attribute type 1 has an invalid length. [ 1574.028884][ T3692] loop5: detected capacity change from 0 to 1024 [ 1574.052401][ T3656] loop0: detected capacity change from 0 to 32768 [ 1574.118887][ T3656] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1574.233731][ T1167] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1574.369997][ T3668] loop9: detected capacity change from 0 to 32768 [ 1574.389664][ T3656] XFS (loop0): Ending clean mount [ 1574.442666][ T3668] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.11744 (3668) [ 1574.520947][ T3656] XFS (loop0): Quotacheck needed: Please wait. [ 1574.562732][ T3668] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1574.637539][ T3668] BTRFS info (device loop9): using crc32c checksum algorithm [ 1574.835584][ T3656] XFS (loop0): Quotacheck: Done. [ 1575.010097][ T3668] BTRFS info (device loop9): enabling ssd optimizations [ 1575.068911][ T3668] BTRFS info (device loop9): turning on async discard [ 1575.107451][ T3668] BTRFS info (device loop9): enabling free space tree [ 1575.223939][T28176] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1575.287409][ T30] audit: type=1800 audit(1780160030.772:439): pid=3668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11744" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 1575.955214][ T1231] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1576.031640][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1576.468652][ T3758] loop0: detected capacity change from 0 to 16 [ 1576.510620][ T3758] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1576.555312][ T3757] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input81 [ 1576.599431][ T5659] udevd[5659]: incorrect cramfs checksum on /dev/loop0 [ 1576.863172][ T3767] loop4: detected capacity change from 0 to 1024 [ 1576.993589][ T3767] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1577.208818][ T3778] loop5: detected capacity change from 0 to 128 [ 1577.284994][ T3767] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.11763: lblock 2 mapped to illegal pblock 2 (length 1) [ 1577.394999][ T3767] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1577.398557][ T3767] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1577.407729][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1577.407761][ C1] EXT4-fs (loop4): initial error at time 1780160032: ext4_map_blocks:791: inode 3: block 2 [ 1577.407828][ C1] EXT4-fs (loop4): last error at time 1780160032: ext4_map_blocks:791: inode 3: block 2 [ 1577.462413][ T3767] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.11763: lblock 0 mapped to illegal pblock 48 (length 1) [ 1577.548055][ T3767] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1577.548390][ T3767] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1577.655854][ T3767] EXT4-fs error (device loop4): ext4_acquire_dquot:7032: comm syz.4.11763: Failed to acquire dquot type 0 [ 1577.715706][ T3767] loop4: lost filesystem error report for type 5 error -117 [ 1577.716076][ T3767] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 1577.766136][ T3767] loop4: lost filesystem error report for type 5 error -117 [ 1577.766455][ T3767] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.11763: mark_inode_dirty error [ 1577.814994][ T3767] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1577.815336][ T3767] EXT4-fs warning (device loop4): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 1577.865515][ T3767] EXT4-fs (loop4): 1 orphan inode deleted [ 1577.879953][ T184] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 1577.921749][ T184] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1577.925700][ T184] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1577.949940][ T3767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1577.979195][ T184] EXT4-fs error (device loop4): ext4_release_dquot:7068: comm kworker/u8:6: Failed to release dquot type 0 [ 1578.137117][ T3767] EXT4-fs: Ignoring removed bh option [ 1578.163661][ T3767] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 1578.218213][ T3767] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.11763: lblock 0 mapped to illegal pblock 48 (length 1) [ 1578.268837][ T3767] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 1578.377586][ T3767] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1578.545469][ T443] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.808340][ T3804] loop5: detected capacity change from 0 to 128 [ 1578.865773][ T3804] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1578.974462][ T3804] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1579.074110][ T3812] loop1: detected capacity change from 0 to 128 [ 1579.124869][ T3803] loop4: detected capacity change from 0 to 4096 [ 1579.166235][ T3812] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1579.231423][ T3803] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1579.329653][ T3803] ntfs3(loop4): ino=3, mi_enum_attr [ 1579.361385][ T3812] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1579.488515][ T3803] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1579.610469][ T1305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1579.719961][ T1207] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1579.820277][T23530] ntfs3(loop4): ino=1f, failed to open parent directory r=5 to update [ 1580.038131][ T3799] loop9: detected capacity change from 0 to 32768 [ 1580.138939][ T3799] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1580.393782][ T3826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.542699][ T3841] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11789'. [ 1580.938205][ T3849] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11791'. [ 1581.098351][ T3856] netem: change failed [ 1581.322832][ T3862] loop1: detected capacity change from 0 to 512 [ 1581.346848][ T3862] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1581.385322][ T1231] ocfs2: Unmounting device (7,9) on (node local) [ 1581.412189][ T3862] EXT4-fs (loop1): 1 truncate cleaned up [ 1581.420928][ T3862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1581.512962][ T3867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11800'. [ 1581.522393][ T3867] netlink: 'syz.4.11800': attribute type 21 has an invalid length. [ 1581.536183][ T1305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.035602][ T3878] loop5: detected capacity change from 0 to 256 [ 1582.063847][ T3878] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1582.383648][ T3888] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.11808'. [ 1583.016716][ T3903] loop0: detected capacity change from 0 to 2048 [ 1583.064579][ T3903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1583.196475][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1583.489177][ T6488] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1583.582006][ T3921] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11821'. [ 1583.679357][ T6488] usb 2-1: Using ep0 maxpacket: 32 [ 1583.707582][ T6488] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1583.741332][ T6488] usb 2-1: config 0 has no interface number 0 [ 1583.762482][ T6488] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1583.788240][ T6488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.816700][ T6488] usb 2-1: Product: syz [ 1583.842646][ T6488] usb 2-1: Manufacturer: syz [ 1583.863548][ T6488] usb 2-1: SerialNumber: syz [ 1583.898724][ T6488] usb 2-1: config 0 descriptor?? [ 1583.948237][ T6488] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1583.959328][ T3893] loop4: detected capacity change from 0 to 32768 [ 1584.074168][ T3893] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1584.223668][ T6488] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1584.328105][ T6488] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1584.377854][ T3941] loop9: detected capacity change from 0 to 128 [ 1584.609481][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1584.611104][ T5772] usb 2-1: USB disconnect, device number 66 [ 1584.704971][ T3944] loop0: detected capacity change from 0 to 1024 [ 1584.715814][ T5772] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1584.770918][ T5772] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1584.805983][ T3944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1584.831720][ T3944] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1584.840960][ T5772] quatech2 2-1:0.51: device disconnected [ 1584.855318][ T30] audit: type=1800 audit(1780160040.342:440): pid=3944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11827" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1585.028876][ T3953] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 1585.056599][ T3953] pim6reg0: owner set to 0 [ 1585.083763][T28176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1585.107231][ T443] ocfs2: Unmounting device (7,4) on (node local) [ 1585.197598][ T3956] loop9: detected capacity change from 0 to 1024 [ 1585.240505][ T3956] EXT4-fs: Ignoring removed orlov option [ 1585.288233][ T3956] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1585.962579][ T1231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1586.239501][ T6488] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1586.299261][T23799] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1586.411543][ T6488] usb 2-1: Using ep0 maxpacket: 8 [ 1586.428678][ T6488] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1586.457488][ T6488] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1586.475802][ T6488] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1586.476687][T23799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1586.507363][ T6488] usb 2-1: config 250 has no interface number 0 [ 1586.521312][ T6488] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1586.533941][T23799] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1586.543460][ T6488] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1586.558224][T23799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.566756][ T6488] usb 2-1: config 250 interface 228 altsetting 255 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 1586.588668][T23799] usb 5-1: config 0 descriptor?? [ 1586.612481][ T6488] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1586.661180][ T6488] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1586.685668][ T6488] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1586.753510][ T6488] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1586.793861][ T6488] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1586.825646][ T6488] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1586.855985][T23799] usbhid 5-1:0.0: can't add hid device: -71 [ 1586.872824][ T6488] usb 2-1: Product: syz [ 1586.877231][T23799] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1586.888288][ T3998] loop0: detected capacity change from 0 to 256 [ 1586.891105][ T6488] usb 2-1: SerialNumber: syz [ 1586.917116][T23799] usb 5-1: USB disconnect, device number 45 [ 1586.929451][ T3998] exfat: Deprecated parameter 'utf8' [ 1586.952319][ T6488] hub 2-1:250.228: bad descriptor, ignoring hub [ 1586.983417][ T3998] exfat: Deprecated parameter 'utf8' [ 1586.987022][ T6488] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1587.010685][ T3998] exfat: Deprecated parameter 'utf8' [ 1587.107462][ T3998] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1587.164202][ T6488] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 67 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1587.430084][T23799] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1587.574546][ T4007] loop0: detected capacity change from 0 to 128 [ 1587.639599][T23799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1587.685538][T23799] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 1587.724220][ T30] audit: type=1800 audit(1780160043.212:441): pid=4007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11845" name="file2" dev="loop0" ino=1049418 res=0 errno=0 [ 1587.752295][T23799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.787116][T23799] usb 5-1: config 0 descriptor?? [ 1587.812479][ T4006] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1587.846705][T23799] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input82 [ 1587.850114][ T4006] FAT-fs (loop0): Filesystem has been set read-only [ 1587.875870][ T30] audit: type=1800 audit(1780160043.212:442): pid=4007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11845" name="file2" dev="loop0" ino=1049418 res=0 errno=0 [ 1587.936466][ T4006] bio_check_eod: 1 callbacks suppressed [ 1587.936491][ T4006] syz.0.11845: attempt to access beyond end of device [ 1587.936491][ T4006] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1588.017887][ T4006] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1588.065651][ C1] usb 5-1: pegasus_irq - urb shutting down with status: -2 [ 1588.087365][ T5772] usb 2-1: USB disconnect, device number 67 [ 1588.100196][ T4006] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1588.170269][ T5772] usblp0: removed [ 1588.183159][ T4007] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1588.262139][ T4007] syz.0.11845: attempt to access beyond end of device [ 1588.262139][ T4007] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1588.305670][ T4015] syz.0.11845: attempt to access beyond end of device [ 1588.305670][ T4015] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 1588.305695][ T4007] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1588.305766][ T4007] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 1588.350757][ C1] usb 5-1: pegasus_irq - nonzero urb status received: -71 [ 1588.353358][T23799] usb 5-1: USB disconnect, device number 46 [ 1588.357905][ C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19 [ 1588.371901][ T4978] usb 5-1: control msg error: -71 [ 1588.378037][ T4015] Buffer I/O error on dev loop0, logical block 2065, async page read [ 1588.459145][ T4015] syz.0.11845: attempt to access beyond end of device [ 1588.459145][ T4015] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 1588.601463][ T4015] Buffer I/O error on dev loop0, logical block 2066, async page read [ 1588.657395][ T4015] syz.0.11845: attempt to access beyond end of device [ 1588.657395][ T4015] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 1588.690659][ T4015] Buffer I/O error on dev loop0, logical block 2067, async page read [ 1588.750312][ T4015] syz.0.11845: attempt to access beyond end of device [ 1588.750312][ T4015] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 1588.816029][ T4015] Buffer I/O error on dev loop0, logical block 2068, async page read [ 1588.853592][ T4015] syz.0.11845: attempt to access beyond end of device [ 1588.853592][ T4015] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 1588.865112][ T4026] loop1: detected capacity change from 0 to 1024 [ 1588.903958][ T4015] Buffer I/O error on dev loop0, logical block 2069, async page read [ 1588.910292][ T4026] EXT4-fs: inline encryption not supported [ 1589.027098][ T4015] syz.0.11845: attempt to access beyond end of device [ 1589.027098][ T4015] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 1589.114537][ T4015] Buffer I/O error on dev loop0, logical block 2070, async page read [ 1589.183256][ T4015] syz.0.11845: attempt to access beyond end of device [ 1589.183256][ T4015] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 1589.253698][ T4026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1589.304602][ T4015] Buffer I/O error on dev loop0, logical block 2071, async page read [ 1589.374430][ T4015] syz.0.11845: attempt to access beyond end of device [ 1589.374430][ T4015] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 1589.480412][ T4015] Buffer I/O error on dev loop0, logical block 2072, async page read [ 1589.717358][ T1305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1590.151724][ T4028] loop5: detected capacity change from 0 to 131072 [ 1590.162815][ T4028] F2FS-fs (loop5): invalid crc value [ 1590.286088][ T4028] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1590.303970][ T4028] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1590.680225][ T4064] net_ratelimit: 54 callbacks suppressed [ 1590.680253][ T4064] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1591.226173][ T4074] Set syz1 is full, maxelem 0 reached [ 1591.938927][ T4090] loop4: detected capacity change from 0 to 128 [ 1592.018967][ T30] audit: type=1800 audit(1780160047.502:443): pid=4090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11870" name="file2" dev="loop4" ino=1049419 res=0 errno=0 [ 1592.044325][ T4090] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1592.085478][ T4090] FAT-fs (loop4): Filesystem has been set read-only [ 1592.110832][ T4090] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1592.127050][ T30] audit: type=1800 audit(1780160047.532:444): pid=4090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11870" name="file2" dev="loop4" ino=1049419 res=0 errno=0 [ 1592.164021][ T4090] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1592.228028][ T4095] Buffer I/O error on dev loop4, logical block 2065, async page read [ 1592.254516][ T4095] Buffer I/O error on dev loop4, logical block 2066, async page read [ 1592.941547][ T4090] bio_check_eod: 964 callbacks suppressed [ 1592.941576][ T4090] syz.4.11870: attempt to access beyond end of device [ 1592.941576][ T4090] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 1592.966574][ T4068] Bluetooth: hci5: command 0x0406 tx timeout [ 1592.973198][T29517] Bluetooth: hci1: command 0x0406 tx timeout [ 1593.068621][ T4090] syz.4.11870: attempt to access beyond end of device [ 1593.068621][ T4090] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 1593.085228][ T4090] syz.4.11870: attempt to access beyond end of device [ 1593.085228][ T4090] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 1593.085984][ T30] audit: type=1326 audit(1780160048.582:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4097 comm="syz.7.11872" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31fbd9ce59 code=0x7fc00000 [ 1593.099269][ T4090] syz.4.11870: attempt to access beyond end of device [ 1593.099269][ T4090] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 1593.147488][ T4090] syz.4.11870: attempt to access beyond end of device [ 1593.147488][ T4090] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 1593.188454][ T4090] syz.4.11870: attempt to access beyond end of device [ 1593.188454][ T4090] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 1593.213503][ T4090] syz.4.11870: attempt to access beyond end of device [ 1593.213503][ T4090] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 1593.227088][ T4090] syz.4.11870: attempt to access beyond end of device [ 1593.227088][ T4090] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 1593.257680][ T4090] syz.4.11870: attempt to access beyond end of device [ 1593.257680][ T4090] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 1593.271748][ T4090] syz.4.11870: attempt to access beyond end of device [ 1593.271748][ T4090] loop4: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 1593.380278][ T4090] buffer_io_error: 1599 callbacks suppressed [ 1593.380307][ T4090] Buffer I/O error on dev loop4, logical block 2066, async page read [ 1593.468955][ T4090] Buffer I/O error on dev loop4, logical block 2067, async page read [ 1593.503884][ T4090] Buffer I/O error on dev loop4, logical block 2068, async page read [ 1593.541457][ T4090] Buffer I/O error on dev loop4, logical block 2069, async page read [ 1593.582328][ T4090] Buffer I/O error on dev loop4, logical block 2070, async page read [ 1593.619756][ T4090] Buffer I/O error on dev loop4, logical block 2071, async page read [ 1593.655751][ T4090] Buffer I/O error on dev loop4, logical block 2072, async page read [ 1594.103899][ T4131] loop0: detected capacity change from 0 to 256 [ 1594.133796][ T4131] exfat: Deprecated parameter 'namecase' [ 1594.198200][ T4133] loop1: detected capacity change from 0 to 64 [ 1594.222522][ T4131] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 1594.826471][ T4144] loop1: detected capacity change from 0 to 256 [ 1594.857457][ T4144] exfat: Deprecated parameter 'utf8' [ 1594.891923][ T4144] exfat: Deprecated parameter 'utf8' [ 1594.906825][ T4149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11889'. [ 1594.939935][ T4144] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1595.072404][ T30] audit: type=1804 audit(1780160050.552:446): pid=4144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11887" name="/newroot/110/file0/file1" dev="loop1" ino=1049425 res=1 errno=0 [ 1595.324715][ T4156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11891'. [ 1595.818963][ T4169] loop5: detected capacity change from 0 to 256 [ 1595.853276][ T4169] exfat: Deprecated parameter 'utf8' [ 1595.886470][ T4169] exfat: Deprecated parameter 'utf8' [ 1595.915632][ T4169] exfat: Deprecated parameter 'utf8' [ 1595.986195][ T4169] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1596.536317][ T4183] loop9: detected capacity change from 0 to 256 [ 1596.611832][ T4183] exfat: Deprecated parameter 'namecase' [ 1596.640439][ T4185] netlink: 'syz.5.11900': attribute type 12 has an invalid length. [ 1596.726042][ T4185] netlink: 'syz.5.11900': attribute type 29 has an invalid length. [ 1596.776461][ T4185] netlink: 148 bytes leftover after parsing attributes in process `syz.5.11900'. [ 1596.817730][ T4185] netlink: 'syz.5.11900': attribute type 1 has an invalid length. [ 1596.855705][ T4185] netlink: 'syz.5.11900': attribute type 2 has an invalid length. [ 1596.920578][ T4183] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x20641574, utbl_chksum : 0xe619d30d) [ 1597.263112][ T4197] loop4: detected capacity change from 0 to 1024 [ 1598.085067][ T4218] loop0: detected capacity change from 0 to 1024 [ 1598.106778][ T4217] ip6gre1: entered allmulticast mode [ 1598.117134][ T4218] EXT4-fs: Ignoring removed orlov option [ 1598.166477][ T4217] team0: Device ip6gre1 is of different type [ 1598.235134][ T4218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1598.480032][ T4224] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1599.021648][T28176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.369348][T23054] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1599.551707][T23054] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1599.583674][T23054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.637524][T23054] usb 5-1: config 0 descriptor?? [ 1599.665579][T23054] cp210x 5-1:0.0: cp210x converter detected [ 1599.875164][ T4253] binder: 4252:4253 ioctl c0189379 0 returned -22 [ 1599.883561][T23799] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1600.071034][T23799] usb 10-1: Using ep0 maxpacket: 8 [ 1600.080871][T23054] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1600.108386][T23799] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.149789][T23799] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.237118][T23054] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1600.334294][T23054] usb 5-1: USB disconnect, device number 47 [ 1600.374590][ T4262] batadv_slave_1: entered promiscuous mode [ 1600.419306][T23054] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1600.445073][ T4261] batadv_slave_1: left promiscuous mode [ 1600.476414][ T4260] loop5: detected capacity change from 0 to 32768 [ 1600.485385][T23799] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1600.516746][T23054] cp210x 5-1:0.0: device disconnected [ 1600.519563][T23799] usb 10-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1600.545763][T23799] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.561704][ T4260] JBD2: Ignoring recovery information on journal [ 1600.612510][ T4260] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1600.693180][T23799] usb 10-1: config 0 descriptor?? [ 1601.007103][ T4249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1601.031467][ T4249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.192865][ T4247] loop1: detected capacity change from 0 to 32768 [ 1601.232202][ T1207] ocfs2: Unmounting device (7,5) on (node local) [ 1601.240790][ T4247] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11918 (4247) [ 1601.364979][ T4247] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1601.411545][ T4247] BTRFS info (device loop1): using crc32c checksum algorithm [ 1601.449739][T23799] hid_parser_main: 222 callbacks suppressed [ 1601.449773][T23799] elecom 0003:056E:00FE.008B: unknown main item tag 0x4 [ 1601.541694][T23799] elecom 0003:056E:00FE.008B: unknown main item tag 0x6 [ 1601.571262][T23799] elecom 0003:056E:00FE.008B: unknown main item tag 0x5 [ 1601.589170][T23799] elecom 0003:056E:00FE.008B: unknown main item tag 0x0 [ 1601.596187][T23799] elecom 0003:056E:00FE.008B: unknown main item tag 0x0 [ 1601.616566][T23799] elecom 0003:056E:00FE.008B: unknown main item tag 0x0 [ 1601.629087][T23799] elecom 0003:056E:00FE.008B: unknown main item tag 0x0 [ 1601.647370][T23799] elecom 0003:056E:00FE.008B: unknown main item tag 0x0 [ 1601.666831][T23799] elecom 0003:056E:00FE.008B: unknown main item tag 0x0 [ 1601.701169][T23799] elecom 0003:056E:00FE.008B: unknown main item tag 0x0 [ 1601.719299][ T4247] BTRFS info (device loop1): setting nodatasum [ 1601.744973][T23799] elecom 0003:056E:00FE.008B: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.9-1/input0 [ 1601.766636][ T4247] BTRFS info (device loop1): enabling ssd optimizations [ 1601.807957][ T4247] BTRFS info (device loop1): disabling tree log [ 1601.836720][T23799] usb 10-1: USB disconnect, device number 22 [ 1601.860722][ T4247] BTRFS info (device loop1): turning on async discard [ 1601.890993][ T4247] BTRFS info (device loop1): enabling free space tree [ 1601.915543][ T4247] BTRFS info (device loop1): enabling auto defrag [ 1602.098909][ T4300] fido_id[4300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1602.366891][ T1305] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1603.323634][ T5288] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1604.327357][ T4342] loop0: detected capacity change from 0 to 512 [ 1604.390951][ T4342] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.11944: invalid indirect mapped block 256 (level 2) [ 1604.456583][ T4348] loop4: detected capacity change from 0 to 256 [ 1604.500700][ T4342] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1604.509024][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1604.524676][ C0] EXT4-fs (loop0): initial error at time 1780160059: ext4_free_branches:1020: inode 11 [ 1604.534408][ C0] EXT4-fs (loop0): last error at time 1780160059: ext4_free_branches:1020: inode 11 [ 1604.545140][ T4342] EXT4-fs (loop0): 2 truncates cleaned up [ 1604.566108][ T4342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1604.717067][T23799] hid-generic 0103:0004:0000.008C: hidraw0: HID v0.05 Device [syz0] on syz1 [ 1604.936530][ T184] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 1605.013889][ T184] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1605.081470][ T184] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1605.081470][ T184] [ 1605.141753][ T184] EXT4-fs (loop0): Total free blocks count 0 [ 1605.177025][ T184] EXT4-fs (loop0): Free/Dirty block details [ 1605.203390][ T184] EXT4-fs (loop0): free_blocks=0 [ 1605.221141][ T184] EXT4-fs (loop0): dirty_blocks=2 [ 1605.249299][ T184] EXT4-fs (loop0): Block reservation details [ 1605.281234][ T184] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 1605.297712][ T4359] fido_id[4359]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1605.336355][ T184] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 1605.403130][T28176] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1606.232480][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.247677][ T184] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1606.299424][ T4356] loop5: detected capacity change from 0 to 32768 [ 1606.353278][ T4356] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11946 (4356) [ 1606.423353][ T4356] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1606.490216][ T4356] BTRFS info (device loop5): using blake2b checksum algorithm [ 1606.637772][ T5288] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1606.657639][ T4392] loop1: detected capacity change from 0 to 1024 [ 1606.775263][ T4356] BTRFS info (device loop5): enabling ssd optimizations [ 1606.807734][ T4356] BTRFS info (device loop5): turning on async discard [ 1606.852946][ T4356] BTRFS info (device loop5): enabling free space tree [ 1606.905933][ T4356] BTRFS info (device loop5): use zstd compression, level 3 [ 1607.155388][ T4416] loop0: detected capacity change from 0 to 256 [ 1607.371315][ T4416] FAT-fs (loop0): Directory bread(block 64) failed [ 1607.421605][ T4416] FAT-fs (loop0): Directory bread(block 65) failed [ 1607.466477][ T4416] FAT-fs (loop0): Directory bread(block 66) failed [ 1607.506445][ T4416] FAT-fs (loop0): Directory bread(block 67) failed [ 1607.548665][ T4416] FAT-fs (loop0): Directory bread(block 68) failed [ 1607.590660][ T4416] FAT-fs (loop0): Directory bread(block 69) failed [ 1607.629385][ T4416] FAT-fs (loop0): Directory bread(block 70) failed [ 1607.666959][ T4416] FAT-fs (loop0): Directory bread(block 71) failed [ 1607.701775][ T4416] FAT-fs (loop0): Directory bread(block 72) failed [ 1607.717013][ T4430] loop1: detected capacity change from 0 to 1024 [ 1607.732253][ T4416] FAT-fs (loop0): Directory bread(block 73) failed [ 1607.756425][ T4430] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1607.822482][ T4430] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1607.865505][ T4430] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1607.960630][ T4430] EXT4-fs error (device loop1): ext4_free_blocks:6717: comm syz.1.11970: Freeing blocks not in datazone - block = 0, count = 4096 [ 1608.082189][ T4430] loop1: lost filesystem error report for type 5 error -117 [ 1608.086123][ T4430] EXT4-fs (loop1): 1 orphan inode deleted [ 1608.093557][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1608.093592][ C0] EXT4-fs (loop1): initial error at time 1780160063: ext4_free_blocks:6717 [ 1608.093635][ C0] EXT4-fs (loop1): last error at time 1780160063: ext4_free_blocks:6717 [ 1608.205462][ T4430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1608.827637][ T1305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1609.418656][ T5288] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1609.839170][T23054] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1609.906802][ T1207] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1610.031024][T23054] usb 5-1: Using ep0 maxpacket: 8 [ 1610.076556][T23054] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1610.119117][T23054] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1610.177631][T23054] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1610.217288][T23054] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1610.273342][T23054] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1610.346463][T23054] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1610.385960][T23054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.700360][T23054] usb 5-1: GET_CAPABILITIES returned 0 [ 1610.736159][T23054] usbtmc 5-1:16.0: can't read capabilities [ 1611.005822][T30842] usb 5-1: USB disconnect, device number 48 [ 1611.995105][ T4475] loop0: detected capacity change from 0 to 32768 [ 1612.155232][ T4475] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1612.464690][ T4475] XFS (loop0): Ending clean mount [ 1612.744867][ T4524] loop4: detected capacity change from 0 to 128 [ 1612.899640][T28176] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1614.081848][ T4549] loop9: detected capacity change from 0 to 512 [ 1614.196704][ T4549] Quota error (device loop9): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 1614.209350][ T4549] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1614.225385][ T4556] loop4: detected capacity change from 0 to 2048 [ 1614.246098][ T4556] EXT4-fs: Ignoring removed i_version option [ 1614.260368][ T4549] EXT4-fs error (device loop9): ext4_acquire_dquot:7032: comm syz.9.12004: Failed to acquire dquot type 1 [ 1614.281772][ T4549] loop9: lost filesystem error report for type 5 error -117 [ 1614.289034][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1614.299142][T30842] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1614.302825][ C0] EXT4-fs (loop9): initial error at time 1780160069: ext4_acquire_dquot:7032 [ 1614.319072][ C0] EXT4-fs (loop9): last error at time 1780160069: ext4_acquire_dquot:7032 [ 1614.357305][ T4556] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1614.376780][ T4549] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.12004: corrupted inode contents [ 1614.408586][ T4556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1614.419030][ T4549] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1614.422484][ T4549] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #16: comm syz.9.12004: mark_inode_dirty error [ 1614.449125][ T4549] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1614.449673][ T4549] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.12004: corrupted inode contents [ 1614.508328][T30842] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1614.554027][T30842] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1614.576199][ T4549] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1614.578641][ T4549] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.12004: mark_inode_dirty error [ 1614.598186][T30842] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1614.619593][ T30] audit: type=1800 audit(1780160070.112:447): pid=4556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12007" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 1614.672035][T30842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1614.683610][ T4549] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1614.692193][ T4549] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.12004: corrupted inode contents [ 1614.698876][T30842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1614.723132][ T4549] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1614.735027][ T4549] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 1614.756337][T30842] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1614.768227][T30842] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1614.780799][T30842] usb 6-1: Product: syz [ 1614.785299][T30842] usb 6-1: Manufacturer: syz [ 1614.796734][T30842] cdc_wdm 6-1:1.0: skipping garbage [ 1614.804087][ T4549] loop9: lost filesystem error report for type 5 error -117 [ 1614.806163][T30842] cdc_wdm 6-1:1.0: skipping garbage [ 1614.809768][ T4549] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.12004: corrupted inode contents [ 1614.820842][T30842] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1614.820876][T30842] cdc_wdm 6-1:1.0: Unknown control protocol [ 1614.959278][ T4549] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1614.965326][ T4549] EXT4-fs error (device loop9): ext4_truncate:4690: inode #16: comm syz.9.12004: mark_inode_dirty error [ 1615.046818][ T4549] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1615.049830][ T4549] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 1615.095535][ T443] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1615.107365][ T4549] loop9: lost filesystem error report for type 5 error -117 [ 1615.133064][ T4549] EXT4-fs (loop9): 1 truncate cleaned up [ 1615.165412][ T4549] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1615.221194][ T4549] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1615.344244][ T4569] loop4: detected capacity change from 0 to 256 [ 1615.374710][T30842] usb 6-1: USB disconnect, device number 6 [ 1615.390696][ T4569] exfat: Deprecated parameter 'utf8' [ 1615.396382][ T4569] exfat: Deprecated parameter 'utf8' [ 1615.440258][ T4569] exfat: Deprecated parameter 'utf8' [ 1615.661405][ T4569] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1615.684203][ T1231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.480195][T23799] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1616.690107][T23799] usb 6-1: Using ep0 maxpacket: 16 [ 1616.717573][T23799] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.760841][T23799] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1616.786451][ T4596] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.12015'. [ 1616.802942][T23799] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1616.826805][T23799] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.883249][T23799] usb 6-1: config 0 descriptor?? [ 1617.401761][T23799] mcp2221 0003:04D8:00DD.008D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1617.735493][ T5288] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1617.922200][T30842] usb 6-1: USB disconnect, device number 7 [ 1620.136780][ T4683] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1620.147502][ T4683] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1620.220255][ T5288] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1621.722177][ T4691] loop4: detected capacity change from 0 to 131072 [ 1621.804937][ T4703] loop0: detected capacity change from 0 to 32768 [ 1621.835258][ T4703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12055 (4703) [ 1621.949991][ T4703] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1621.954810][ T4691] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1621.960310][ T4703] BTRFS info (device loop0): using sha256 checksum algorithm [ 1621.982767][ T4691] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1622.041489][ T4691] F2FS-fs (loop4): access invalid blkaddr:0 [ 1622.049133][ T4691] CPU: 0 UID: 0 PID: 4691 Comm: syz.4.12051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1622.049190][ T4691] Tainted: [L]=SOFTLOCKUP [ 1622.049204][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1622.049228][ T4691] Call Trace: [ 1622.049241][ T4691] [ 1622.049256][ T4691] dump_stack_lvl+0x100/0x190 [ 1622.049303][ T4691] __f2fs_is_valid_blkaddr+0xa5b/0x1340 [ 1622.049360][ T4691] ? sanity_check_extent_cache+0x23a/0x6e0 [ 1622.049422][ T4691] f2fs_is_valid_blkaddr+0xd0/0x2b0 [ 1622.049482][ T4691] sanity_check_extent_cache+0x23a/0x6e0 [ 1622.049544][ T4691] f2fs_iget+0x2545/0x6930 [ 1622.049620][ T4691] f2fs_lookup+0x516/0xad0 [ 1622.049672][ T4691] ? __pfx_f2fs_lookup+0x10/0x10 [ 1622.049722][ T4691] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1622.049794][ T4691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.049842][ T4691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.049891][ T4691] ? lockdep_init_map_type+0x5c/0x250 [ 1622.049939][ T4691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.049995][ T4691] __lookup_slow+0x251/0x460 [ 1622.050049][ T4691] ? __pfx___lookup_slow+0x10/0x10 [ 1622.050115][ T4691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.050191][ T4691] lookup_slow+0x50/0x70 [ 1622.050243][ T4691] path_lookupat+0x5e8/0xc40 [ 1622.050311][ T4691] filename_lookup+0x202/0x590 [ 1622.050388][ T4691] ? __pfx_filename_lookup+0x10/0x10 [ 1622.050488][ T4691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.050536][ T4691] ? strncpy_from_user+0x19d/0x2d0 [ 1622.050600][ T4691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.050657][ T4691] user_path_at+0x3c/0x60 [ 1622.050721][ T4691] __x64_sys_mount+0x1fb/0x310 [ 1622.050773][ T4691] ? __pfx___x64_sys_mount+0x10/0x10 [ 1622.050827][ T4691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1622.050874][ T4691] ? rcu_is_watching+0x12/0xc0 [ 1622.050936][ T4691] do_syscall_64+0x115/0x870 [ 1622.051002][ T4691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.051043][ T4691] RIP: 0033:0x7f209ad9ce59 [ 1622.051074][ T4691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.051113][ T4691] RSP: 002b:00007f209bc2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1622.051150][ T4691] RAX: ffffffffffffffda RBX: 00007f209b015fa0 RCX: 00007f209ad9ce59 [ 1622.051178][ T4691] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 1622.051203][ T4691] RBP: 00007f209ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1622.051228][ T4691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1622.051253][ T4691] R13: 00007f209b016038 R14: 00007f209b015fa0 R15: 00007ffed55da4f8 [ 1622.051305][ T4691] [ 1622.053575][ T4691] F2FS-fs (loop4): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 1622.101637][ T4699] loop9: detected capacity change from 0 to 8192 [ 1622.317384][ T4703] BTRFS info (device loop0): enabling ssd optimizations [ 1622.354327][ T4703] BTRFS info (device loop0): turning on async discard [ 1622.361416][ T4703] BTRFS info (device loop0): enabling free space tree [ 1622.587815][ T4703] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 1622.688859][ T4682] loop1: detected capacity change from 0 to 32768 [ 1622.731555][T28176] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1622.854069][ T4682] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1623.160987][ T4682] XFS (loop1): Ending clean mount [ 1623.379227][ T6488] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1623.389750][ T1305] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1623.622253][ T6488] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 1623.642857][ T6488] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1623.673116][ T6488] usb 10-1: config 0 has no interface number 0 [ 1623.689108][ T6488] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1623.722249][ T6488] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1623.800110][ T6488] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1623.952230][ T6488] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1624.005339][ T6488] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.053762][ T6488] usb 10-1: Product: syz [ 1624.096040][ T6488] usb 10-1: Manufacturer: syz [ 1624.113612][ T6488] usb 10-1: SerialNumber: syz [ 1624.187113][ T6488] usb 10-1: config 0 descriptor?? [ 1624.199999][T30829] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1624.404962][T30829] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1624.454210][T30829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.513290][ T4756] loop1: detected capacity change from 0 to 4096 [ 1624.520416][T30829] usb 5-1: Product: syz [ 1624.547485][T30829] usb 5-1: Manufacturer: syz [ 1624.568185][T30829] usb 5-1: SerialNumber: syz [ 1624.683904][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12067'. [ 1624.765033][ T5288] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1624.890336][ T6488] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.117/input/input83 [ 1625.268467][T30868] usb 10-1: USB disconnect, device number 23 [ 1625.491423][T30829] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1625.566957][T30829] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1625.644398][T30829] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1625.710925][ T4780] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1625.743903][T30829] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1625.842796][T30829] usb 5-1: USB disconnect, device number 49 [ 1626.893896][T30868] IPVS: starting estimator thread 0... [ 1626.925201][ T4808] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 1627.009150][ T4809] IPVS: using max 23 ests per chain, 55200 per kthread [ 1627.327013][ T4813] loop0: detected capacity change from 0 to 4096 [ 1627.370007][ T4813] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1627.529475][ T4813] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1627.536952][ T4815] loop4: detected capacity change from 0 to 4096 [ 1627.580814][ T4813] ntfs3(loop0): ino=1a, mi_enum_attr [ 1627.608111][ T4813] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 1627.768254][ T4813] ntfs3(loop0): ino=5, "/" ntfs_readdir [ 1627.820730][ T4788] loop1: detected capacity change from 0 to 40427 [ 1627.926139][ T4788] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 1627.964322][ T4788] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1628.009332][ T4788] F2FS-fs (loop1): Image doesn't support compression [ 1628.052929][ T4788] F2FS-fs (loop1): invalid crc value [ 1628.076894][ T4788] F2FS-fs (loop1): Wrong journal entry on segno 255 [ 1628.186825][ T4823] loop5: detected capacity change from 0 to 128 [ 1628.240457][ T4788] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 1628.323678][ T4823] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1628.397184][ T4823] hpfs: filesystem error: improperly stopped [ 1628.440297][ T4823] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1628.461868][ T4823] hpfs: You really don't want any checks? You are crazy... [ 1628.503749][ T4823] hpfs: Code page index out of array [ 1628.524182][ T4823] hpfs: code page support is disabled [ 1628.545760][ T4823] hpfs: hpfs_map_4sectors(): unaligned read [ 1628.576577][ T4823] hpfs: hpfs_map_4sectors(): unaligned read [ 1628.606646][ T4823] hpfs: filesystem error: unable to find root dir [ 1629.351751][ T5772] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1629.365683][T23799] IPVS: starting estimator thread 0... [ 1629.386475][ T4851] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 1629.499182][ T4853] IPVS: using max 23 ests per chain, 55200 per kthread [ 1629.534667][ T5772] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1629.609736][ T5772] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1629.676521][ T5772] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1629.738407][ T5772] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.814790][ T4845] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1629.865010][ T5772] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1630.058924][ T4869] loop4: detected capacity change from 0 to 64 [ 1630.189885][ T4869] hfs: keylen 94 too large [ 1630.238633][ T4869] hfs: fail to get the keylen: node_id 2, record index 1 [ 1630.456363][ T5772] usb 10-1: USB disconnect, device number 24 [ 1630.692222][ T443] hfs: node 4:2 still has 1 user(s)! [ 1631.074493][ T4884] geneve2: entered promiscuous mode [ 1631.118930][ T4884] geneve2: entered allmulticast mode [ 1631.283544][ T4891] loop5: detected capacity change from 0 to 1024 [ 1631.293260][ T5288] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1632.701382][T23799] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1632.886519][T23799] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1632.944133][T23799] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1632.992643][T23799] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1633.021037][T23799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.057030][ T4928] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1633.093803][T23799] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1633.486322][T23799] usb 5-1: USB disconnect, device number 50 [ 1633.532196][T16199] kernel write not supported for file /sg0 (pid: 16199 comm: kworker/1:2) [ 1634.969322][ T6488] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1634.985757][ T5014] ip6erspan0: entered allmulticast mode [ 1635.140684][ T6488] usb 2-1: Using ep0 maxpacket: 16 [ 1635.154897][ T6488] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1635.185875][ T6488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1635.235480][ T6488] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1635.260034][ T6488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.272810][ T6488] usb 2-1: Product: syz [ 1635.295800][ T6488] usb 2-1: Manufacturer: syz [ 1635.303337][ T6488] usb 2-1: SerialNumber: syz [ 1635.309241][T16199] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1635.336629][ T6488] usb 2-1: config 0 descriptor?? [ 1635.375644][ T6488] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1635.416527][ T6488] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1635.491148][T16199] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1635.506359][T16199] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1635.542673][T16199] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1635.553335][T16199] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1635.566127][T16199] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1635.584188][T16199] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1635.596184][T16199] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1635.606073][T16199] usb 5-1: Product: syz [ 1635.610509][T16199] usb 5-1: Manufacturer: syz [ 1635.634118][T16199] cdc_wdm 5-1:1.0: skipping garbage [ 1635.658303][T16199] cdc_wdm 5-1:1.0: skipping garbage [ 1635.678921][T16199] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1635.689707][T23799] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1635.697478][T16199] cdc_wdm 5-1:1.0: Unknown control protocol [ 1635.862546][T23799] usb 10-1: Using ep0 maxpacket: 32 [ 1635.874908][T23799] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1635.896081][T23799] usb 10-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 1635.920236][T23799] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.939472][T23799] usb 10-1: Product: syz [ 1635.957001][T23799] usb 10-1: Manufacturer: syz [ 1635.968377][T23799] usb 10-1: SerialNumber: syz [ 1635.986902][T23799] usb 10-1: config 0 descriptor?? [ 1636.000974][ T6488] em28xx 2-1:0.0: chip ID is em2874 [ 1636.209746][T30829] usb 2-1: USB disconnect, device number 68 [ 1636.233995][T30829] em28xx 2-1:0.0: Disconnecting em28xx [ 1636.255426][T23799] snd_usb_podhd 10-1:0.0: Line 6 POD HD500X found [ 1636.275277][T30829] em28xx 2-1:0.0: Freeing device [ 1636.281376][T23799] snd_usb_podhd 10-1:0.0: set_interface failed [ 1636.302142][T23799] snd_usb_podhd 10-1:0.0: Line 6 POD HD500X now disconnected [ 1636.323411][T23799] snd_usb_podhd 10-1:0.0: probe with driver snd_usb_podhd failed with error -71 [ 1636.363878][T23799] usb 10-1: USB disconnect, device number 25 [ 1636.414855][T16199] usb 5-1: USB disconnect, device number 51 [ 1636.789441][T23799] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1636.989281][T23799] usb 10-1: Using ep0 maxpacket: 32 [ 1637.012825][T23799] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1637.035147][T23799] usb 10-1: string descriptor 0 read error: -22 [ 1637.050725][T23799] usb 10-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 1637.075174][T23799] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.107774][T23799] usb 10-1: config 0 descriptor?? [ 1637.154764][T23799] snd_usb_podhd 10-1:0.0: Line 6 POD HD500X found [ 1637.337388][T23799] snd_usb_podhd 10-1:0.0: endpoint not available, using fallback values [ 1637.370386][T23799] snd_usb_podhd 10-1:0.0: invalid control EP [ 1637.399169][T23799] snd_usb_podhd 10-1:0.0: cannot start listening: -22 [ 1637.424452][T23799] snd_usb_podhd 10-1:0.0: Line 6 POD HD500X now disconnected [ 1637.462548][T23799] snd_usb_podhd 10-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 1637.539518][ T6488] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1637.575797][T23799] usb 10-1: USB disconnect, device number 26 [ 1637.722529][ T6488] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1637.751846][ T6488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.781713][ T6488] usb 5-1: config 0 descriptor?? [ 1637.813603][ T6488] cp210x 5-1:0.0: cp210x converter detected [ 1637.910562][ T5071] loop5: detected capacity change from 0 to 1024 [ 1638.038566][ T5071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1638.231280][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1638.271143][ T6488] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1638.293268][ T5075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12163'. [ 1638.368753][ T6488] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1638.621096][ T6488] usb 5-1: USB disconnect, device number 52 [ 1638.662498][ T6488] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1638.743986][ T6488] cp210x 5-1:0.0: device disconnected [ 1638.774376][ T1207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1639.612228][ T5111] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12175'. [ 1639.651264][ T5102] loop5: detected capacity change from 0 to 4096 [ 1639.868034][ T5102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1640.127622][ T5126] loop1: detected capacity change from 0 to 512 [ 1640.137312][ T5102] fs-verity (loop5, inode 13): Unsupported log_blocksize: 13 [ 1640.237828][ T5126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1640.337008][ T5126] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1640.633064][ T5126] EXT4-fs error (device loop1): ext4_resize_begin:60: comm syz.1.12180: resize_inode disabled but reserved GDT blocks non-zero [ 1640.748882][ T5137] netlink: 'syz.0.12183': attribute type 1 has an invalid length. [ 1640.830980][ T5137] netlink: 'syz.0.12183': attribute type 7 has an invalid length. [ 1640.908535][ T5137] netlink: 'syz.0.12183': attribute type 8 has an invalid length. [ 1641.005252][ T5137] netlink: 208 bytes leftover after parsing attributes in process `syz.0.12183'. [ 1641.107698][ T5137] NCSI netlink: No device for ifindex 119 [ 1641.147082][ T1207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1641.254725][ T1305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1642.001225][ T5150] loop1: detected capacity change from 0 to 512 [ 1642.108350][ T5150] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.12186: inode has both inline data and extents flags [ 1642.174204][ T5150] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1642.177510][ T5150] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.12186: couldn't read orphan inode 15 (err -117) [ 1642.178154][ T5155] loop9: detected capacity change from 0 to 512 [ 1642.186769][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1642.186827][ C1] EXT4-fs (loop1): initial error at time 1780160097: ext4_orphan_get:1397: inode 15 [ 1642.186888][ C1] EXT4-fs (loop1): last error at time 1780160097: ext4_orphan_get:1397: inode 15 [ 1642.208003][ T5150] loop1: lost filesystem error report for type 5 error -117 [ 1642.306476][ T5155] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #14: comm syz.9.12189: invalid orphan symlink nlink 1 [ 1642.403472][ T5150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1642.431641][ T5146] loop4: detected capacity change from 0 to 4096 [ 1642.471888][ T5155] loop9: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 1642.479036][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1642.494703][ C1] EXT4-fs (loop9): initial error at time 1780160097: ext4_orphan_get:1397: inode 14 [ 1642.504168][ C1] EXT4-fs (loop9): last error at time 1780160097: ext4_orphan_get:1397: inode 14 [ 1642.519926][ T5155] EXT4-fs error (device loop9): ext4_orphan_get:1400: comm syz.9.12189: couldn't read orphan inode 14 (err -117) [ 1642.534769][ T5155] loop9: lost filesystem error report for type 5 error -117 [ 1642.537417][ T5155] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1642.663848][ T5155] ext4 filesystem being mounted at /160/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1642.950616][ T1305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.127002][ T1231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.742574][ T5177] loop9: detected capacity change from 0 to 4096 [ 1644.047662][ T5189] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1644.223612][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12199'. [ 1644.658108][ T5201] loop4: detected capacity change from 0 to 128 [ 1644.707320][ T5201] EXT4-fs: Ignoring removed nobh option [ 1644.808746][ T5201] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1644.893709][ T5201] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1644.906051][ T5207] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12203'. [ 1644.962114][ T5207] netlink: 'syz.9.12203': attribute type 1 has an invalid length. [ 1645.015939][ T5201] fscrypt (loop4, inode 12): Unsupported log2_data_unit_size in encryption policy: 232 [ 1645.257451][ T443] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1645.593790][ T5220] netlink: 'syz.4.12207': attribute type 1 has an invalid length. [ 1646.431048][ T5245] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1646.431048][ T5245] The task syz.4.12217 (5245) triggered the difference, watch for misbehavior. [ 1646.462217][ T5246] netlink: 'syz.9.12218': attribute type 4 has an invalid length. [ 1646.486827][ T5246] netlink: 'syz.9.12218': attribute type 8 has an invalid length. [ 1646.515310][ T5246] netlink: 212 bytes leftover after parsing attributes in process `syz.9.12218'. [ 1646.526474][ T5249] loop1: detected capacity change from 0 to 8 [ 1646.556056][ T5249] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1646.626521][ T5637] udevd[5637]: incorrect cramfs checksum on /dev/loop1 [ 1646.748173][ T5637] udevd[5637]: incorrect cramfs checksum on /dev/loop1 [ 1647.180787][ T7110] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1647.224738][ T7110] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1647.255761][ T7110] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1647.301276][ T7113] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1647.480589][ T5269] loop4: detected capacity change from 0 to 256 [ 1647.779452][ T6488] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1647.972688][ T6488] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.021909][ T6488] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.074042][ T6488] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1648.109322][ T6488] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.155986][ T5283] loop4: detected capacity change from 0 to 1024 [ 1648.168959][ T6488] usb 10-1: config 0 descriptor?? [ 1648.203435][ T5283] EXT4-fs: Ignoring removed orlov option [ 1648.292072][ T5283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1648.563779][ T5283] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1648.625424][ T6488] hid_parser_main: 76 callbacks suppressed [ 1648.625457][ T6488] hid-thrustmaster 0003:044F:B65D.008E: unknown main item tag 0x0 [ 1648.687941][ T6488] hid-thrustmaster 0003:044F:B65D.008E: unknown main item tag 0x0 [ 1648.733368][ T6488] hid-thrustmaster 0003:044F:B65D.008E: unknown main item tag 0x1 [ 1648.766789][ T6488] hid-thrustmaster 0003:044F:B65D.008E: unknown main item tag 0x0 [ 1648.788105][ T6488] hid-thrustmaster 0003:044F:B65D.008E: unknown main item tag 0x0 [ 1648.806448][ T5303] netlink: 'syz.1.12233': attribute type 12 has an invalid length. [ 1648.816865][ T6488] hid-thrustmaster 0003:044F:B65D.008E: unknown main item tag 0x0 [ 1648.854743][ T6488] hid-thrustmaster 0003:044F:B65D.008E: item fetching failed at offset 6/7 [ 1648.857075][ T5303] netlink: 120 bytes leftover after parsing attributes in process `syz.1.12233'. [ 1648.886640][ T6488] hid-thrustmaster 0003:044F:B65D.008E: parse failed with error -22 [ 1648.939981][ T6488] hid-thrustmaster 0003:044F:B65D.008E: probe with driver hid-thrustmaster failed with error -22 [ 1648.983472][ T6488] usb 10-1: USB disconnect, device number 27 [ 1649.248391][ T443] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.941144][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12242'. [ 1649.988976][ T5331] netlink: 'syz.4.12242': attribute type 30 has an invalid length. [ 1650.021076][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12242'. [ 1650.062539][ T5337] erspan0: entered promiscuous mode [ 1650.332764][ T5340] loop1: detected capacity change from 0 to 256 [ 1650.479212][ T5340] FAT-fs (loop1): Directory bread(block 64) failed [ 1650.521541][ T5340] FAT-fs (loop1): Directory bread(block 65) failed [ 1650.554093][ T5340] FAT-fs (loop1): Directory bread(block 66) failed [ 1650.593965][ T5340] FAT-fs (loop1): Directory bread(block 67) failed [ 1650.621883][ T5340] FAT-fs (loop1): Directory bread(block 68) failed [ 1650.659361][ T5340] FAT-fs (loop1): Directory bread(block 69) failed [ 1650.694470][ T5340] FAT-fs (loop1): Directory bread(block 70) failed [ 1650.709991][ T5340] FAT-fs (loop1): Directory bread(block 71) failed [ 1650.745364][ T5340] FAT-fs (loop1): Directory bread(block 72) failed [ 1650.782226][ T5340] FAT-fs (loop1): Directory bread(block 73) failed [ 1652.157629][ T5392] loop1: detected capacity change from 0 to 512 [ 1652.265001][ T5392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1652.317568][ T5392] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1652.353507][ T30] audit: type=1800 audit(1780160107.842:448): pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12264" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 1652.618048][ T1305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1652.741418][ T5406] loop4: detected capacity change from 0 to 1024 [ 1652.847153][ T5406] hfsplus: failed to load attributes file [ 1653.972688][ T5442] loop0: detected capacity change from 0 to 256 [ 1654.000853][ T5442] exfat: Deprecated parameter 'utf8' [ 1654.026472][ T5442] exfat: Deprecated parameter 'utf8' [ 1654.128474][ T5442] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1654.838974][ T5457] loop4: detected capacity change from 0 to 2048 [ 1654.963966][ T5464] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1655.759556][T30868] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1655.883441][ T5490] loop9: detected capacity change from 0 to 128 [ 1655.939448][T30868] usb 5-1: Using ep0 maxpacket: 16 [ 1655.970867][T30868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.025889][T30868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.078748][T30868] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1656.127077][T30868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.189634][T30868] usb 5-1: config 0 descriptor?? [ 1656.740127][T30868] corsair 0003:1B1C:1B02.008F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 1656.988130][T30868] corsair 0003:1B1C:1B02.008F: Read invalid backlight brightness: ae. [ 1657.060209][ T5772] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1657.071233][T26963] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1657.088447][T26963] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1657.097978][T26963] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1657.107254][T26963] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1657.125794][T26963] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1657.180840][T23799] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1657.204829][T16199] usb 5-1: USB disconnect, device number 53 [ 1657.269551][ T5772] usb 10-1: Using ep0 maxpacket: 16 [ 1657.331492][ T5772] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1657.355200][T23799] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1657.377527][ T5772] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1657.399850][T23799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.418826][ T5772] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1657.454265][T23799] usb 2-1: Product: syz [ 1657.478111][T23799] usb 2-1: Manufacturer: syz [ 1657.486282][ T5772] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1657.503176][T23799] usb 2-1: SerialNumber: syz [ 1657.554111][ T5772] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1657.588249][ T5772] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1657.627148][ T5772] usb 10-1: SerialNumber: syz [ 1657.684514][ T5510] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1657.718269][ T5510] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1657.768506][ T5772] hub 10-1:1.0: bad descriptor, ignoring hub [ 1657.807677][ T5772] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1657.897734][T23799] rtl8150 2-1:1.0: couldn't reset the device [ 1657.935620][T23799] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1658.036970][ T5510] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1658.085117][ T5510] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1658.092943][T23799] usb 2-1: USB disconnect, device number 69 [ 1658.157326][ T5536] loop0: detected capacity change from 0 to 64 [ 1658.402003][ T5540] tun0: tun_chr_ioctl cmd 1074025672 [ 1658.435175][ T5540] tun0: ignored: set checksum disabled [ 1658.713356][ T5772] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1658.793773][ T5772] usb 10-1: USB disconnect, device number 28 [ 1658.832188][ T5772] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 1659.291726][ T3129] Bluetooth: hci6: command tx timeout [ 1659.647681][T23530] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.878034][T23530] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.018820][T23530] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.042258][ T5511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.050855][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.058201][ T5511] bridge_slave_0: entered allmulticast mode [ 1660.075558][ T5511] bridge_slave_0: entered promiscuous mode [ 1660.088538][ T5511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.105660][ T5511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.117571][ T5511] bridge_slave_1: entered allmulticast mode [ 1660.127232][ T5511] bridge_slave_1: entered promiscuous mode [ 1660.169418][T23530] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.258914][ T5511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1660.272427][ T5511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1660.327342][ T5511] team0: Port device team_slave_0 added [ 1660.338867][ T5511] team0: Port device team_slave_1 added [ 1660.502670][ T5511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1660.514146][ T5511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.548425][ T5511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1660.573514][ T5511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1660.582334][ T5511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.616365][ T5511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1660.754968][ T5511] hsr_slave_0: entered promiscuous mode [ 1660.768446][ T5511] hsr_slave_1: entered promiscuous mode [ 1660.775627][ T5511] debugfs: 'hsr0' already exists in 'hsr' [ 1660.781616][ T5511] Cannot create hsr debugfs directory [ 1660.817064][T23530] bridge_slave_1: left promiscuous mode [ 1660.823810][T23530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.845194][T23530] bridge_slave_0: left allmulticast mode [ 1660.853336][T23530] bridge_slave_0: left promiscuous mode [ 1660.863030][T23530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.172628][T23530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.188649][T23530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.214319][T23530] bond0 (unregistering): Released all slaves [ 1661.359479][ T3129] Bluetooth: hci6: command tx timeout [ 1661.814693][T23530] hsr_slave_0: left promiscuous mode [ 1661.822780][T23530] hsr_slave_1: left promiscuous mode [ 1661.830293][T23530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.838510][T23530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.847801][T23530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.874040][T23530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.901167][T23530] veth1_macvtap: left promiscuous mode [ 1661.908923][T23530] veth0_macvtap: left promiscuous mode [ 1661.916093][T23530] veth1_vlan: left promiscuous mode [ 1661.922678][T23530] veth0_vlan: left promiscuous mode [ 1662.293167][T23530] team0 (unregistering): Port device team_slave_1 removed [ 1662.317720][T23530] team0 (unregistering): Port device team_slave_0 removed [ 1662.960597][T23530] IPVS: stop unused estimator thread 0... [ 1663.178176][ T5511] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1663.197791][ T5511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1663.206371][ T5511] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1663.217267][ T5511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1663.227427][ T5511] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1663.242600][ T5511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1663.252523][ T5511] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1663.263808][ T5511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1663.379918][ T5511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1663.416304][ T5511] 8021q: adding VLAN 0 to HW filter on device team0 [ 1663.429296][ T3129] Bluetooth: hci6: command tx timeout [ 1663.432715][T23530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.441846][T23530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1663.467185][T23530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.474398][T23530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.231065][ T5511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.706652][ T5511] veth0_vlan: entered promiscuous mode [ 1664.745330][ T5511] veth1_vlan: entered promiscuous mode [ 1664.802744][ T5511] veth0_macvtap: entered promiscuous mode [ 1664.816717][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1664.830181][ T5511] veth1_macvtap: entered promiscuous mode [ 1664.858098][ T5511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1664.878677][ T5511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1664.908916][ T7110] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.932785][ T7110] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.974178][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.047670][T21889] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.212849][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.226375][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.286669][T31435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.296150][T31435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.509276][ T3129] Bluetooth: hci6: command tx timeout [ 1666.503210][ T5735] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12309'. [ 1667.479649][ T5788] loop6: detected capacity change from 0 to 256 [ 1667.490595][ T5786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12328'. [ 1667.568727][ T5788] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1667.674838][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1667.943359][ T5787] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1668.129138][ T5787] usb 10-1: Using ep0 maxpacket: 32 [ 1668.168142][ T5787] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1668.213260][ T5787] usb 10-1: config 0 has no interface number 0 [ 1668.248543][ T5787] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1668.290351][ T5787] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1668.325593][ T5787] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.363083][ T5787] usb 10-1: Product: syz [ 1668.385881][ T5787] usb 10-1: Manufacturer: syz [ 1668.442427][ T5787] usb 10-1: SerialNumber: syz [ 1668.510102][ T5787] usb 10-1: config 0 descriptor?? [ 1668.630519][ T5812] loop0: detected capacity change from 0 to 512 [ 1668.701647][ T5812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1668.863198][ T5812] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1669.265773][T28176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.443055][ T5787] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1669.481154][ T5787] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1669.530557][ T5787] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1669.569150][ T5787] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1669.658793][ T5787] usb 10-1: USB disconnect, device number 29 [ 1669.854989][ T5835] loop1: detected capacity change from 0 to 64 [ 1669.979419][ T30] audit: type=1800 audit(1780160125.462:449): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12346" name="file1" dev="loop1" ino=22 res=0 errno=0 [ 1670.014207][T21889] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.031753][ T5835] hfs: keylen 1794 too large [ 1670.232912][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1670.326168][T26963] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1670.361471][T26963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1670.376974][T26963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1670.398461][T26963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1670.411644][T26963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1670.733870][T21889] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.236063][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12354'. [ 1671.401539][T21889] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.435934][ T5864] loop1: detected capacity change from 0 to 256 [ 1671.553228][ T5864] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 1671.868413][T21889] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.139201][ T6488] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1672.339246][ T6488] usb 5-1: Using ep0 maxpacket: 8 [ 1672.363268][ T6488] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1672.413860][ T6488] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1672.457436][ T6488] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1672.512716][ T6488] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1672.540869][ T6488] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1672.557428][T26963] Bluetooth: hci1: command tx timeout [ 1672.636375][ T6488] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1672.712952][ T6488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.041803][ T6488] usb 5-1: GET_CAPABILITIES returned 0 [ 1673.073885][ T6488] usbtmc 5-1:16.0: can't read capabilities [ 1673.152487][ T5893] loop1: detected capacity change from 0 to 256 [ 1673.183966][ T5893] exfat: Deprecated parameter 'utf8' [ 1673.273499][ T5893] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1673.359805][ T6488] usb 5-1: USB disconnect, device number 54 [ 1673.520481][T21889] bridge_slave_1: left allmulticast mode [ 1673.551331][T21889] bridge_slave_1: left promiscuous mode [ 1673.585409][T21889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.694946][T21889] bridge_slave_0: left allmulticast mode [ 1673.715967][T21889] bridge_slave_0: left promiscuous mode [ 1673.745772][T21889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.203700][ T5913] loop9: detected capacity change from 0 to 256 [ 1674.262093][ T5913] exfat: Deprecated parameter 'namecase' [ 1674.299216][ T5913] exfat: Deprecated parameter 'namecase' [ 1674.371924][ T5913] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011e8b, chksum : 0x98cee719, utbl_chksum : 0xe619d30d) [ 1674.629455][T26963] Bluetooth: hci1: command tx timeout [ 1675.040259][T21889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1675.113337][T21889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1675.151995][T21889] bond0 (unregistering): Released all slaves [ 1675.189361][ T5787] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1675.286435][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1675.394902][ T5787] usb 2-1: Using ep0 maxpacket: 8 [ 1675.402173][ T5787] usb 2-1: config 0 has no interfaces? [ 1675.422358][ T5787] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1675.433081][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.443781][ T5787] usb 2-1: Product: syz [ 1675.448082][ T5787] usb 2-1: Manufacturer: syz [ 1675.453712][ T5787] usb 2-1: SerialNumber: syz [ 1675.467569][ T5787] usb 2-1: config 0 descriptor?? [ 1675.744255][ T6488] usb 2-1: USB disconnect, device number 70 [ 1676.502911][T21889] hsr_slave_0: left promiscuous mode [ 1676.548069][T21889] hsr_slave_1: left promiscuous mode [ 1676.581806][T21889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1676.624032][T21889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1676.693527][T21889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1676.709444][T26963] Bluetooth: hci1: command tx timeout [ 1676.723526][T21889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1676.826367][ T3129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1676.845870][ T3129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1676.854121][ T3129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1676.868756][ T3129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1676.879136][ T3129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1677.288181][T21889] veth1_macvtap: left promiscuous mode [ 1677.295337][T21889] veth0_macvtap: left promiscuous mode [ 1677.301606][T21889] veth1_vlan: left promiscuous mode [ 1677.306977][T21889] veth0_vlan: left promiscuous mode [ 1678.106548][ T5984] loop0: detected capacity change from 0 to 64 [ 1678.197676][ T5984] hfs: request for non-existent node 131072 in B*Tree [ 1678.225763][ T5984] hfs: request for non-existent node 131072 in B*Tree [ 1678.481296][T21889] team0 (unregistering): Port device team_slave_1 removed [ 1678.566140][T21889] team0 (unregistering): Port device team_slave_0 removed [ 1678.789132][T26963] Bluetooth: hci1: command tx timeout [ 1678.823345][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1678.951154][T26963] Bluetooth: hci5: command tx timeout [ 1679.272784][ T6004] loop4: detected capacity change from 0 to 512 [ 1679.438306][ T6004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1679.513299][ T6002] loop0: detected capacity change from 0 to 4096 [ 1679.738615][ T443] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1679.833725][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.863889][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.914601][ T5839] bridge_slave_0: entered allmulticast mode [ 1679.960844][ T5839] bridge_slave_0: entered promiscuous mode [ 1680.004875][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.039293][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.066724][ T5839] bridge_slave_1: entered allmulticast mode [ 1680.090239][ T5839] bridge_slave_1: entered promiscuous mode [ 1680.334538][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1680.461059][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1680.863968][ T5839] team0: Port device team_slave_0 added [ 1680.892628][ T5839] team0: Port device team_slave_1 added [ 1681.029302][T26963] Bluetooth: hci5: command tx timeout [ 1681.217485][T21889] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.230341][T21889] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.264359][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1681.272483][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.289266][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.330482][T16199] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1681.360347][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.476916][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.496201][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.536675][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.556142][T16199] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1681.569885][T16199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.605057][T16199] usb 2-1: config 0 descriptor?? [ 1681.630906][T16199] cp210x 2-1:0.0: cp210x converter detected [ 1681.777502][T21889] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.814798][T21889] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.077009][T16199] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1682.144094][T16199] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1682.407498][ T5787] usb 2-1: USB disconnect, device number 71 [ 1682.435614][ T5787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1682.449129][T21889] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1682.462203][T21889] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.480461][ T5787] cp210x 2-1:0.0: device disconnected [ 1682.564341][ T5839] hsr_slave_0: entered promiscuous mode [ 1682.571712][ T5839] hsr_slave_1: entered promiscuous mode [ 1682.578191][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 1682.585660][ T5839] Cannot create hsr debugfs directory [ 1682.648311][ T6073] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 1682.884263][T21889] netdevsim netdevsim9 netdevsim0 (unregistering): left allmulticast mode [ 1682.919905][T21889] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1682.939829][T21889] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.110087][T26963] Bluetooth: hci5: command tx timeout [ 1684.492166][ T6116] loop4: detected capacity change from 0 to 2048 [ 1684.512431][ T6116] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1684.546522][ T6116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1684.760684][T16199] kernel read not supported for file /dsp (pid: 16199 comm: kworker/1:2) [ 1684.944530][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.979844][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.009616][ T5958] bridge_slave_0: entered allmulticast mode [ 1685.031352][ T5958] bridge_slave_0: entered promiscuous mode [ 1685.103808][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.136807][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.174742][ T5958] bridge_slave_1: entered allmulticast mode [ 1685.190044][T26963] Bluetooth: hci5: command tx timeout [ 1685.207890][ T5958] bridge_slave_1: entered promiscuous mode [ 1685.443585][T21889] bridge_slave_1: left allmulticast mode [ 1685.470193][T21889] bridge_slave_1: left promiscuous mode [ 1685.494465][T21889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.542794][T21889] bridge_slave_0: left allmulticast mode [ 1685.570788][T21889] bridge_slave_0: left promiscuous mode [ 1685.581421][T21889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.247706][ T6139] loop4: detected capacity change from 0 to 32768 [ 1686.275932][ T6139] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.12436 (6139) [ 1686.368387][ T6139] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1686.415085][ T6139] BTRFS info (device loop4): using sha256 checksum algorithm [ 1686.571921][ T6139] BTRFS info (device loop4): setting nodatasum [ 1686.592722][ T6139] BTRFS info (device loop4): enabling ssd optimizations [ 1686.613252][ T6139] BTRFS info (device loop4): enabling free space tree [ 1686.911403][ T443] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1687.445258][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1687.461900][ T6187] loop0: detected capacity change from 0 to 64 [ 1687.498178][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.603173][ T6187] hfs: keylen 94 too large [ 1687.624744][ T6187] hfs: fail to get the keylen: node_id 2, record index 1 [ 1688.081533][ T5958] team0: Port device team_slave_0 added [ 1688.091287][ T5958] team0: Port device team_slave_1 added [ 1688.127922][T28176] hfs: node 4:2 still has 1 user(s)! [ 1688.392388][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.457733][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.581498][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.609067][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.638657][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.719188][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1689.283893][T30829] IPVS: starting estimator thread 0... [ 1689.305708][ T6214] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 1689.409159][ T6216] IPVS: using max 24 ests per chain, 57600 per kthread [ 1690.174996][ T5958] hsr_slave_0: entered promiscuous mode [ 1690.194224][ T5958] hsr_slave_1: entered promiscuous mode [ 1690.208162][ T5958] debugfs: 'hsr0' already exists in 'hsr' [ 1690.227497][ T5958] Cannot create hsr debugfs directory [ 1690.245961][ T6228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1690.279853][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1690.292108][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1690.314274][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1690.333168][ T6230] batadv_slave_1: entered promiscuous mode [ 1690.339443][ T6231] batadv_slave_1: left promiscuous mode [ 1690.524844][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1690.563102][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1690.888868][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1690.946695][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1691.053537][T21889] hsr_slave_0: left promiscuous mode [ 1691.067034][T21889] hsr_slave_1: left promiscuous mode [ 1691.087949][T21889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1691.123628][T21889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1691.154112][T21889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1691.179543][T21889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1691.252301][T21889] veth1_macvtap: left promiscuous mode [ 1691.268142][T21889] veth0_macvtap: left promiscuous mode [ 1691.282290][T21889] veth1_vlan: left promiscuous mode [ 1691.295850][T21889] veth0_vlan: left promiscuous mode [ 1692.015449][T21889] team0 (unregistering): Port device team_slave_1 removed [ 1692.061385][T21889] team0 (unregistering): Port device team_slave_0 removed [ 1692.353981][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1692.403846][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1692.425040][ T6269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1692.446548][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1693.103777][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.984374][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 1694.040936][T31491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.048144][T31491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.100022][T21889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.107282][T21889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.504559][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1694.593185][ T6308] loop1: detected capacity change from 0 to 32768 [ 1694.605408][ T6308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12476 (6308) [ 1694.666156][ T6308] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1694.683250][ T6308] BTRFS info (device loop1): using sha256 checksum algorithm [ 1694.854472][ T6308] BTRFS info (device loop1): setting nodatasum [ 1694.863367][ T6308] BTRFS info (device loop1): enabling ssd optimizations [ 1694.871799][ T6308] BTRFS info (device loop1): enabling free space tree [ 1695.106293][ T1305] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1695.723410][ T5958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1695.799505][ T5958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1695.820541][ T5958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1695.851062][ T5958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1695.881096][ T5958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1695.903839][ T5958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1695.936115][ T5958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1695.978449][ T5958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1696.328843][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1696.386185][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1696.420113][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.427336][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.472346][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.479584][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.819086][ T5787] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1696.827612][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.003972][ T5787] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1697.048271][ T5787] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1697.065627][ T5839] veth0_vlan: entered promiscuous mode [ 1697.090326][ T5787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1697.123276][ T5839] veth1_vlan: entered promiscuous mode [ 1697.148133][ T5787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1697.217090][ T5787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1697.286543][ T5787] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1697.311646][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1697.323282][ T5787] usb 2-1: Product: syz [ 1697.327495][ T5787] usb 2-1: Manufacturer: syz [ 1697.335522][ T5839] veth0_macvtap: entered promiscuous mode [ 1697.373143][ T5839] veth1_macvtap: entered promiscuous mode [ 1697.391304][ T5787] cdc_wdm 2-1:1.0: skipping garbage [ 1697.414621][ T5787] cdc_wdm 2-1:1.0: skipping garbage [ 1697.488295][ T5787] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1697.518120][ T5787] cdc_wdm 2-1:1.0: Unknown control protocol [ 1697.529634][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.597023][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.699550][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.723073][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.754549][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.797732][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1698.166045][T21889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.205713][T21889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.306738][T31435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.345568][T30868] usb 2-1: USB disconnect, device number 72 [ 1698.345928][T31435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.641230][ T6432] loop1: detected capacity change from 0 to 2048 [ 1698.741760][ T6432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1698.845573][ T6432] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1698.877825][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1699.072516][ T5958] veth0_vlan: entered promiscuous mode [ 1699.074021][ T6432] fs-verity (loop1, inode 13): Unknown hash algorithm number: 0 [ 1699.106026][ T5958] veth1_vlan: entered promiscuous mode [ 1699.295432][ T5958] veth0_macvtap: entered promiscuous mode [ 1699.367256][ T1305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1699.377514][ T5958] veth1_macvtap: entered promiscuous mode [ 1699.449341][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1699.555776][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1699.642821][T31491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.684072][T31491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.714942][ T6457] loop4: detected capacity change from 0 to 512 [ 1699.727183][T31491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.778960][T31491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.823488][ T6457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1699.946588][ T6457] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.115645][ T6457] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz.4.12502: resize_inode disabled but reserved GDT blocks non-zero [ 1700.291307][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.324400][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.402433][ T443] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.498027][T31435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.518424][T31435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.572417][ T6471] batadv_slave_1: entered promiscuous mode [ 1700.623813][ T6471] batadv_slave_1: left promiscuous mode [ 1700.857965][ T6476] loop2: detected capacity change from 0 to 1024 [ 1700.937666][ T6459] loop1: detected capacity change from 0 to 32768 [ 1700.994340][ T6459] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12513 (6459) [ 1701.087211][ T6459] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1701.094488][ T6482] loop0: detected capacity change from 0 to 512 [ 1701.128402][ T6459] BTRFS info (device loop1): using blake2b checksum algorithm [ 1701.196530][ T6482] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.12508: inode has both inline data and extents flags [ 1701.234014][ T6482] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1701.235949][ T6482] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.12508: couldn't read orphan inode 15 (err -117) [ 1701.239034][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1701.263674][ C1] EXT4-fs (loop0): initial error at time 1780160156: ext4_orphan_get:1397: inode 15 [ 1701.273167][ C1] EXT4-fs (loop0): last error at time 1780160156: ext4_orphan_get:1397: inode 15 [ 1701.320304][ T6482] loop0: lost filesystem error report for type 5 error -117 [ 1701.326944][ T6482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1701.574663][ T6459] BTRFS info (device loop1): enabling ssd optimizations [ 1701.631799][ T6459] BTRFS info (device loop1): turning on async discard [ 1701.676873][ T6459] BTRFS info (device loop1): enabling free space tree [ 1701.727914][ T6459] BTRFS info (device loop1): use zstd compression, level 3 [ 1701.862317][T28176] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1702.088242][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12516'. [ 1702.232466][T31491] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1702.927743][ T6545] loop2: detected capacity change from 0 to 1024 [ 1702.929351][ T1305] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1703.464236][T16199] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1703.477837][ T6535] [ 1703.480182][ T6535] ====================================================== [ 1703.487187][ T6535] WARNING: possible circular locking dependency detected [ 1703.494199][ T6535] syzkaller #0 Tainted: G L [ 1703.500168][ T6535] ------------------------------------------------------ [ 1703.507196][ T6535] syz.7.12520/6535 is trying to acquire lock: [ 1703.513260][ T6535] ffff8880281bb418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530 [ 1703.522742][ T6535] [ 1703.522742][ T6535] but task is already holding lock: [ 1703.530098][ T6535] ffff8880281baef0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1703.541415][ T6535] [ 1703.541415][ T6535] which lock already depends on the new lock. [ 1703.541415][ T6535] [ 1703.551807][ T6535] [ 1703.551807][ T6535] the existing dependency chain (in reverse order) is: [ 1703.560811][ T6535] [ 1703.560811][ T6535] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1703.569453][ T6535] blk_alloc_queue+0x610/0x790 [ 1703.574762][ T6535] blk_mq_alloc_queue+0x174/0x290 [ 1703.580313][ T6535] __blk_mq_alloc_disk+0x29/0x120 [ 1703.585865][ T6535] nbd_dev_add+0x492/0xb10 [ 1703.590807][ T6535] nbd_init+0x291/0x2b0 [ 1703.595513][ T6535] do_one_initcall+0x121/0x750 [ 1703.600812][ T6535] kernel_init_freeable+0x6ea/0x7b0 [ 1703.606538][ T6535] kernel_init+0x1f/0x1e0 [ 1703.611397][ T6535] ret_from_fork+0x72b/0xd50 [ 1703.616517][ T6535] ret_from_fork_asm+0x1a/0x30 [ 1703.621819][ T6535] [ 1703.621819][ T6535] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1703.629057][ T6535] fs_reclaim_acquire+0xc4/0x100 [ 1703.634550][ T6535] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 1703.640895][ T6535] __alloc_skb+0x140/0x710 [ 1703.645836][ T6535] tcp_stream_alloc_skb+0x34/0x660 [ 1703.651499][ T6535] tcp_sendmsg_locked+0x13cd/0x4500 [ 1703.657226][ T6535] tcp_sendmsg+0x2e/0x50 [ 1703.662004][ T6535] inet_sendmsg+0xb9/0x140 [ 1703.666942][ T6535] sock_write_iter+0x4ea/0x5a0 [ 1703.672246][ T6535] vfs_write+0x6ac/0x1070 [ 1703.677124][ T6535] ksys_write+0x1f8/0x250 [ 1703.682002][ T6535] do_syscall_64+0x115/0x870 [ 1703.687138][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.693560][ T6535] [ 1703.693560][ T6535] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1703.701230][ T6535] lock_sock_nested+0x41/0xf0 [ 1703.706453][ T6535] inet_shutdown+0x67/0x410 [ 1703.711502][ T6535] nbd_mark_nsock_dead+0xae/0x5c0 [ 1703.717076][ T6535] sock_shutdown+0x16b/0x200 [ 1703.722207][ T6535] nbd_config_put+0x1eb/0x750 [ 1703.727435][ T6535] nbd_release+0xb7/0x190 [ 1703.732313][ T6535] blkdev_put_whole+0xb0/0xf0 [ 1703.737534][ T6535] bdev_release+0x47f/0x6d0 [ 1703.742580][ T6535] blkdev_release+0x15/0x20 [ 1703.747629][ T6535] __fput+0x3ff/0xb50 [ 1703.752143][ T6535] task_work_run+0x150/0x240 [ 1703.757269][ T6535] exit_to_user_mode_loop+0x157/0x670 [ 1703.763173][ T6535] do_syscall_64+0x666/0x870 [ 1703.768312][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.774735][ T6535] [ 1703.774735][ T6535] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1703.782407][ T6535] __mutex_lock+0x1a4/0x1b10 [ 1703.787546][ T6535] nbd_queue_rq+0x428/0x1080 [ 1703.792660][ T6535] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1703.798758][ T6535] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1703.805631][ T6535] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1703.812158][ T6535] blk_mq_run_hw_queue+0x23c/0x670 [ 1703.817812][ T6535] blk_mq_dispatch_list+0x51d/0x1360 [ 1703.823650][ T6535] blk_mq_flush_plug_list+0x130/0x600 [ 1703.829606][ T6535] __blk_flush_plug+0x2c4/0x4b0 [ 1703.835004][ T6535] __submit_bio+0x584/0x6c0 [ 1703.840058][ T6535] submit_bio_noacct_nocheck+0x543/0xbf0 [ 1703.846241][ T6535] submit_bio_noacct+0xd18/0x2000 [ 1703.851828][ T6535] submit_bh_wbc+0x681/0x890 [ 1703.856962][ T6535] block_read_full_folio+0x264/0x8e0 [ 1703.862796][ T6535] filemap_read_folio+0xfc/0x3b0 [ 1703.868271][ T6535] do_read_cache_folio+0x2d7/0x6b0 [ 1703.873920][ T6535] read_part_sector+0xd1/0x370 [ 1703.879226][ T6535] adfspart_check_ICS+0x91/0x7d0 [ 1703.884709][ T6535] bdev_disk_changed+0x7a3/0x1250 [ 1703.890276][ T6535] blkdev_get_whole+0x187/0x290 [ 1703.895670][ T6535] bdev_open+0x2c7/0xe40 [ 1703.900456][ T6535] blkdev_open+0x34e/0x4f0 [ 1703.905421][ T6535] do_dentry_open+0x6ab/0x14d0 [ 1703.910734][ T6535] vfs_open+0x82/0x3f0 [ 1703.915334][ T6535] path_openat+0x208c/0x31a0 [ 1703.920453][ T6535] do_file_open+0x20e/0x430 [ 1703.925486][ T6535] do_sys_openat2+0x10d/0x1e0 [ 1703.930696][ T6535] __x64_sys_openat+0x12d/0x210 [ 1703.936084][ T6535] do_syscall_64+0x115/0x870 [ 1703.941233][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.947658][ T6535] [ 1703.947658][ T6535] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1703.954891][ T6535] __mutex_lock+0x1a4/0x1b10 [ 1703.960031][ T6535] nbd_queue_rq+0xba/0x1080 [ 1703.965089][ T6535] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1703.971189][ T6535] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1703.978063][ T6535] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1703.984676][ T6535] blk_mq_run_hw_queue+0x23c/0x670 [ 1703.990332][ T6535] blk_mq_dispatch_list+0x51d/0x1360 [ 1703.996169][ T6535] blk_mq_flush_plug_list+0x130/0x600 [ 1704.002093][ T6535] __blk_flush_plug+0x2c4/0x4b0 [ 1704.007489][ T6535] __submit_bio+0x584/0x6c0 [ 1704.012544][ T6535] submit_bio_noacct_nocheck+0x543/0xbf0 [ 1704.018723][ T6535] submit_bio_noacct+0xd18/0x2000 [ 1704.024292][ T6535] submit_bh_wbc+0x681/0x890 [ 1704.029424][ T6535] block_read_full_folio+0x264/0x8e0 [ 1704.035257][ T6535] filemap_read_folio+0xfc/0x3b0 [ 1704.040730][ T6535] do_read_cache_folio+0x2d7/0x6b0 [ 1704.046383][ T6535] read_part_sector+0xd1/0x370 [ 1704.051686][ T6535] adfspart_check_ICS+0x91/0x7d0 [ 1704.057165][ T6535] bdev_disk_changed+0x7a3/0x1250 [ 1704.062731][ T6535] blkdev_get_whole+0x187/0x290 [ 1704.068122][ T6535] bdev_open+0x2c7/0xe40 [ 1704.072908][ T6535] blkdev_open+0x34e/0x4f0 [ 1704.077875][ T6535] do_dentry_open+0x6ab/0x14d0 [ 1704.083187][ T6535] vfs_open+0x82/0x3f0 [ 1704.087788][ T6535] path_openat+0x208c/0x31a0 [ 1704.092906][ T6535] do_file_open+0x20e/0x430 [ 1704.097939][ T6535] do_sys_openat2+0x10d/0x1e0 [ 1704.103151][ T6535] __x64_sys_openat+0x12d/0x210 [ 1704.108536][ T6535] do_syscall_64+0x115/0x870 [ 1704.113672][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.120096][ T6535] [ 1704.120096][ T6535] -> #1 (set->srcu){.+.+}-{0:0}: [ 1704.127242][ T6535] __synchronize_srcu+0xa2/0x300 [ 1704.132716][ T6535] blk_mq_quiesce_queue+0x149/0x1c0 [ 1704.138452][ T6535] elevator_switch+0x17b/0x7e0 [ 1704.143756][ T6535] elevator_change+0x352/0x530 [ 1704.149064][ T6535] elevator_set_default+0x29e/0x360 [ 1704.154813][ T6535] blk_register_queue+0x48e/0x630 [ 1704.160387][ T6535] __add_disk+0x73f/0xe40 [ 1704.165245][ T6535] add_disk_fwnode+0x118/0x5c0 [ 1704.170540][ T6535] nbd_dev_add+0x77a/0xb10 [ 1704.175483][ T6535] nbd_init+0x291/0x2b0 [ 1704.180187][ T6535] do_one_initcall+0x121/0x750 [ 1704.185489][ T6535] kernel_init_freeable+0x6ea/0x7b0 [ 1704.191219][ T6535] kernel_init+0x1f/0x1e0 [ 1704.196081][ T6535] ret_from_fork+0x72b/0xd50 [ 1704.201204][ T6535] ret_from_fork_asm+0x1a/0x30 [ 1704.206543][ T6535] [ 1704.206543][ T6535] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1704.214412][ T6535] __lock_acquire+0x14b8/0x2630 [ 1704.219799][ T6535] lock_acquire+0x1b1/0x370 [ 1704.224837][ T6535] __mutex_lock+0x1a4/0x1b10 [ 1704.229983][ T6535] elevator_change+0x1bc/0x530 [ 1704.235289][ T6535] elevator_set_none+0x92/0xf0 [ 1704.240596][ T6535] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 1704.246933][ T6535] nbd_start_device+0x1a6/0xbd0 [ 1704.252314][ T6535] nbd_genl_connect+0xff2/0x1a40 [ 1704.257809][ T6535] genl_family_rcv_msg_doit+0x214/0x300 [ 1704.263908][ T6535] genl_rcv_msg+0x560/0x800 [ 1704.268963][ T6535] netlink_rcv_skb+0x159/0x420 [ 1704.274272][ T6535] genl_rcv+0x28/0x40 [ 1704.278794][ T6535] netlink_unicast+0x585/0x850 [ 1704.284100][ T6535] netlink_sendmsg+0x8b0/0xda0 [ 1704.289408][ T6535] ____sys_sendmsg+0x9e1/0xb70 [ 1704.294715][ T6535] ___sys_sendmsg+0x190/0x1e0 [ 1704.299968][ T6535] __sys_sendmsg+0x170/0x220 [ 1704.305084][ T6535] do_syscall_64+0x115/0x870 [ 1704.310221][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.316644][ T6535] [ 1704.316644][ T6535] other info that might help us debug this: [ 1704.316644][ T6535] [ 1704.326860][ T6535] Chain exists of: [ 1704.326860][ T6535] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 1704.326860][ T6535] [ 1704.340645][ T6535] Possible unsafe locking scenario: [ 1704.340645][ T6535] [ 1704.348087][ T6535] CPU0 CPU1 [ 1704.353444][ T6535] ---- ---- [ 1704.358799][ T6535] lock(&q->q_usage_counter(io)#53); [ 1704.364195][ T6535] lock(fs_reclaim); [ 1704.370703][ T6535] lock(&q->q_usage_counter(io)#53); [ 1704.378614][ T6535] lock(&q->elevator_lock); [ 1704.383211][ T6535] [ 1704.383211][ T6535] *** DEADLOCK *** [ 1704.383211][ T6535] [ 1704.391344][ T6535] 6 locks held by syz.7.12520/6535: [ 1704.396537][ T6535] #0: ffffffff906b42c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1704.404786][ T6535] #1: ffffffff906b4380 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 1704.413825][ T6535] #2: ffff8880281b49c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x9d/0x15f0 [ 1704.425279][ T6535] #3: ffff8880281b48d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb0/0x15f0 [ 1704.436292][ T6535] #4: ffff8880281baef0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1704.448037][ T6535] #5: ffff8880281baf28 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1704.460065][ T6535] [ 1704.460065][ T6535] stack backtrace: [ 1704.465958][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.7.12520 Tainted: G L syzkaller #0 PREEMPT(full) [ 1704.466009][ T6535] Tainted: [L]=SOFTLOCKUP [ 1704.466024][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1704.466046][ T6535] Call Trace: [ 1704.466059][ T6535] [ 1704.466075][ T6535] dump_stack_lvl+0x100/0x190 [ 1704.466115][ T6535] print_circular_bug.cold+0x178/0x1c7 [ 1704.466179][ T6535] check_noncircular+0x146/0x160 [ 1704.466225][ T6535] __lock_acquire+0x14b8/0x2630 [ 1704.466270][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.466322][ T6535] lock_acquire+0x1b1/0x370 [ 1704.466361][ T6535] ? elevator_change+0x1bc/0x530 [ 1704.466413][ T6535] ? __pfx___might_resched+0x10/0x10 [ 1704.466462][ T6535] ? __pfx___flush_work+0x10/0x10 [ 1704.466511][ T6535] __mutex_lock+0x1a4/0x1b10 [ 1704.466569][ T6535] ? elevator_change+0x1bc/0x530 [ 1704.466617][ T6535] ? elevator_change+0x1bc/0x530 [ 1704.466664][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.466711][ T6535] ? enable_work+0x295/0x320 [ 1704.466756][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.466801][ T6535] ? lockdep_hardirqs_on+0x78/0x100 [ 1704.466856][ T6535] ? __pfx___mutex_lock+0x10/0x10 [ 1704.466917][ T6535] ? __pfx_enable_work+0x10/0x10 [ 1704.466965][ T6535] ? __pfx___might_resched+0x10/0x10 [ 1704.467014][ T6535] ? blk_mq_cancel_work_sync+0x101/0x3c0 [ 1704.467057][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.467102][ T6535] ? cancel_delayed_work_sync+0x96/0xf0 [ 1704.467156][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.467201][ T6535] ? blk_mq_cancel_work_sync+0x36c/0x3c0 [ 1704.467244][ T6535] ? elevator_change+0x1bc/0x530 [ 1704.467291][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.467335][ T6535] elevator_change+0x1bc/0x530 [ 1704.467383][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.467433][ T6535] elevator_set_none+0x92/0xf0 [ 1704.467484][ T6535] ? __pfx_elevator_set_none+0x10/0x10 [ 1704.467535][ T6535] ? blk_mq_unregister_hctx.part.0+0x1ba/0x230 [ 1704.467593][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.467642][ T6535] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 1704.467682][ T6535] ? nbd_start_device+0xc7/0xbd0 [ 1704.467722][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.467766][ T6535] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1704.467826][ T6535] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1704.467878][ T6535] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1704.467942][ T6535] nbd_start_device+0x1a6/0xbd0 [ 1704.467985][ T6535] nbd_genl_connect+0xff2/0x1a40 [ 1704.468026][ T6535] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1704.468063][ T6535] ? __nla_parse+0x40/0x60 [ 1704.468106][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.468151][ T6535] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1704.468220][ T6535] genl_family_rcv_msg_doit+0x214/0x300 [ 1704.468281][ T6535] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1704.468339][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.468384][ T6535] ? genl_get_cmd+0x3e7/0x760 [ 1704.468444][ T6535] ? __alloc_skb+0x185/0x710 [ 1704.468475][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.468520][ T6535] ? __radix_tree_lookup+0x217/0x2b0 [ 1704.468572][ T6535] genl_rcv_msg+0x560/0x800 [ 1704.468632][ T6535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1704.468689][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.468734][ T6535] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1704.468774][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.468818][ T6535] ? __lock_acquire+0x4a5/0x2630 [ 1704.468864][ T6535] netlink_rcv_skb+0x159/0x420 [ 1704.468920][ T6535] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1704.468978][ T6535] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1704.469042][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.469089][ T6535] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1704.469142][ T6535] genl_rcv+0x28/0x40 [ 1704.469197][ T6535] netlink_unicast+0x585/0x850 [ 1704.469252][ T6535] ? __pfx_netlink_unicast+0x10/0x10 [ 1704.469315][ T6535] netlink_sendmsg+0x8b0/0xda0 [ 1704.469374][ T6535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.469419][ T6535] ? __might_fault+0x40/0x140 [ 1704.469469][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.469515][ T6535] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1704.469583][ T6535] ____sys_sendmsg+0x9e1/0xb70 [ 1704.469630][ T6535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.469683][ T6535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1704.469737][ T6535] ? __pfx_futex_wake_mark+0x10/0x10 [ 1704.469799][ T6535] ___sys_sendmsg+0x190/0x1e0 [ 1704.469852][ T6535] ? __pfx____sys_sendmsg+0x10/0x10 [ 1704.469908][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.469964][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.470026][ T6535] __sys_sendmsg+0x170/0x220 [ 1704.470063][ T6535] ? __pfx___sys_sendmsg+0x10/0x10 [ 1704.470099][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.470144][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.470198][ T6535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1704.470242][ T6535] ? rcu_is_watching+0x12/0xc0 [ 1704.470298][ T6535] do_syscall_64+0x115/0x870 [ 1704.470355][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.470393][ T6535] RIP: 0033:0x7f31fbd9ce59 [ 1704.470421][ T6535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.470457][ T6535] RSP: 002b:00007f31fcc70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.470492][ T6535] RAX: ffffffffffffffda RBX: 00007f31fc015fa0 RCX: 00007f31fbd9ce59 [ 1704.470517][ T6535] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 1704.470539][ T6535] RBP: 00007f31fbe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1704.470563][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1704.470585][ T6535] R13: 00007f31fc016038 R14: 00007f31fc015fa0 R15: 00007fff90ee5098 [ 1704.470623][ T6535] [ 1705.240489][T16199] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1705.250666][T16199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.305328][T16199] usb 4-1: config 0 descriptor?? [ 1705.335130][T16199] cp210x 4-1:0.0: cp210x converter detected [ 1705.743336][T16199] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1705.762162][T16199] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1705.974059][T16199] usb 4-1: USB disconnect, device number 61 [ 1705.993636][T16199] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1706.015240][T16199] cp210x 4-1:0.0: device disconnected [ 1709.663720][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1711.736835][ T5288] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1712.081979][ T5288] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1712.847238][ T5288] 8021q: adding VLAN 0 to HW filter on device eth12