last executing test programs: 14m36.690312195s ago: executing program 32 (id=383): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fdinfo\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) fchdir(r0) 14m32.796724606s ago: executing program 33 (id=411): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x14000000, 0xffffffff}) 12m29.788102059s ago: executing program 34 (id=1406): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 12m18.23765905s ago: executing program 35 (id=1475): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'wg1\x00'}}, 0x1e) 8m8.242606339s ago: executing program 4 (id=3291): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) 8m7.942643592s ago: executing program 4 (id=3294): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000713000/0x3000)=nil, 0x5) 8m6.210697546s ago: executing program 4 (id=3302): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8m5.187016238s ago: executing program 4 (id=3309): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@xino_off, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x14b041, 0x2) 8m4.322887006s ago: executing program 4 (id=3318): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x1068, 0x0) 8m3.492183696s ago: executing program 4 (id=3325): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000000)) 8m3.033078408s ago: executing program 36 (id=3325): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000000)) 7m57.680622296s ago: executing program 3 (id=3360): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xec785000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10000, 0x3, &(0x7f0000003000/0x10000)=nil) 7m57.230290184s ago: executing program 3 (id=3362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdc06, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0xffffffffffffffc4}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x20000040}, 0x0) 7m56.206363909s ago: executing program 3 (id=3372): r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000700)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 7m55.095592675s ago: executing program 3 (id=3378): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@xino_off, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x14b041, 0x2) 7m54.239289142s ago: executing program 3 (id=3391): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES64=r0], 0x40}}, 0x0) 7m53.69449139s ago: executing program 3 (id=3381): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x3c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20018094) 7m52.985181344s ago: executing program 37 (id=3381): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x3c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20018094) 3m8.999616265s ago: executing program 7 (id=5499): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) 3m8.696477638s ago: executing program 7 (id=5502): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 3m8.341723078s ago: executing program 7 (id=5507): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f00000001c0)=""/178, 0xb2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) 3m7.944513049s ago: executing program 7 (id=5511): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a55414, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m7.693585327s ago: executing program 7 (id=5516): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r0, 0x1) 3m7.01929158s ago: executing program 7 (id=5522): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x3) 3m6.190815269s ago: executing program 38 (id=5522): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x3) 1m1.531244677s ago: executing program 8 (id=6479): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m1.096344389s ago: executing program 8 (id=6497): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181000, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 58.240830072s ago: executing program 8 (id=6506): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@migrate={0xbc, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e21, 0x4e20, @in6=@private0}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 57.941781864s ago: executing program 8 (id=6510): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x5, 0x0, {}, {}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd313bc00"}}, 0x48}, 0x300}, 0x0) 57.48701307s ago: executing program 8 (id=6512): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 57.215848272s ago: executing program 8 (id=6517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000004200)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x37be44e643b8998e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x4, r0}, 0x0) 42.027714413s ago: executing program 39 (id=6517): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000004200)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c0369031d6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55d2765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0000bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) io_cancel(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x37be44e643b8998e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x4, r0}, 0x0) 9.667676419s ago: executing program 0 (id=6879): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000240)="47dc", 0x2}], 0x3}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x70, 0x90, 0x0, {0x390, 0x8f00}}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) 9.111768412s ago: executing program 0 (id=6882): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x7, 0x8, 0xfffffffffffffffe, 0x8, 0x100802, 0x5}) 8.177234627s ago: executing program 0 (id=6889): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x0, 0x4, 0x1, 0x7}], 0x10, 0x26}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) 7.468343894s ago: executing program 0 (id=6894): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 7.169160051s ago: executing program 0 (id=6897): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.830099398s ago: executing program 0 (id=6900): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 6.241599483s ago: executing program 1 (id=6903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a010400000000000000000a0000080900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010140009800800014000000003080001400100600014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) 5.692557557s ago: executing program 1 (id=6907): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.250599968s ago: executing program 1 (id=6911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e21, @broadcast}, 0x10) 5.201678517s ago: executing program 2 (id=6913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x5, 0x1, 0x8, 0x7ff, 0x9, 0x6]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x1}]}]}]}]}, 0x4c}}, 0x0) 4.876676464s ago: executing program 1 (id=6915): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 4.746376356s ago: executing program 2 (id=6916): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 4.425040698s ago: executing program 6 (id=6919): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000080)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c007680afe8eaed0b3c589f1daf0fe389a4c0a839d3c96e249534fa8c59f66f0cc85c3f06a689df8de150e8fafa3625335e4b43e7531b74c008bda93c795f58e5e86b52a1af8fccc1c69527b2e4334c33bd8a3ace83266d463402c750b85ae0b07ec332198c13b68e9ae20cb684c8515f951156f670f39e3896fd7b3b16b737398cde6ae247e1eeb5d0a5dc27a235f1f0540ae603751adc5ebd6e760979e44a"], 0x1, 0x9e18, &(0x7f000000a040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x1) getdents64(r0, 0x0, 0x22) 3.814305707s ago: executing program 1 (id=6921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 3.463179085s ago: executing program 2 (id=6924): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x48, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x48}}, 0x0) 3.39112246s ago: executing program 6 (id=6925): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x80000000}) 3.09640344s ago: executing program 6 (id=6926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2, 0x4432, &(0x7f00000088c0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.762491962s ago: executing program 2 (id=6928): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 2.53953481s ago: executing program 9 (id=6929): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240)=0x9, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000300), 0x4) 2.098646242s ago: executing program 5 (id=6931): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="0021ff", 0x3}], 0x1, 0x3e3e, 0x407ff) 2.047759357s ago: executing program 6 (id=6932): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20004010}, 0x2000) 1.847830472s ago: executing program 5 (id=6933): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x5c, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2b95ad41fe55a3d7f10ca9003a5d67e1"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x76ae27cf5b3624b1}, 0x20000000) 1.586587351s ago: executing program 5 (id=6934): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="b4b9", 0x2}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x45, 0x9008, 0x2}}], 0x20, 0x488c2}, 0x24048040) 1.518608956s ago: executing program 9 (id=6935): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600b40900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.292083096s ago: executing program 9 (id=6936): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x2, 0x638, &(0x7f0000000ac0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x2000, 0x1) r0 = open(&(0x7f0000000140)='.\x00', 0x48100, 0x6) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 950.823402ms ago: executing program 1 (id=6937): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 950.694998ms ago: executing program 9 (id=6938): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) 950.624052ms ago: executing program 6 (id=6939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}}, 0x2c008840) 698.707768ms ago: executing program 2 (id=6940): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000010000b0026bd70200040000003000200080002322d72289d060001", @ANYBLOB='\x00'], 0x24}, 0x1, 0x0, 0x0, 0x2400c000}, 0x40500c4) io_setup(0x7, 0x0) 694.384361ms ago: executing program 6 (id=6941): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 491.362958ms ago: executing program 9 (id=6942): add_key(0x0, 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, &(0x7f0000000080)) 407.185001ms ago: executing program 5 (id=6943): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire={0x40086315, 0x4000000}, @free_buffer], 0x0, 0x0, 0x0}) 323.628679ms ago: executing program 5 (id=6944): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0xfffffffd, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4000000, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x681, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c36, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000000]}, 0x45c) 253.460269ms ago: executing program 5 (id=6945): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(seqiv(rfc4106-gcm-aesni))\x00'}, 0x58) 26.616793ms ago: executing program 2 (id=6946): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0xd) 0s ago: executing program 9 (id=6947): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='unhide,iocharset=cp949\x00\x00\x00\x00=forget,session=00000000000000004072,noadinicb,anchor=00000000000000000000,uidOforget,\x00'], 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84342, 0xce) kernel console output (not intermixed with test programs): 40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.022288][T22942] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5930'. [ 885.105387][ T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.116109][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 885.143867][ T5865] usb 2-1: USB disconnect, device number 39 [ 885.189323][ T5865] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 885.304616][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 885.365505][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 885.409284][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 885.447416][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.482627][T22940] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 885.535162][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 885.853432][T22954] loop6: detected capacity change from 0 to 4096 [ 886.062549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.070940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.079325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.087791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.096129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.104490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.112835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.154713][ T30] audit: type=1800 audit(1779715059.967:270): pid=22954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5922" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 886.407747][ T10] usb 6-1: USB disconnect, device number 23 [ 887.683326][T22999] loop5: detected capacity change from 0 to 1024 [ 887.703011][T22999] EXT4-fs: Ignoring removed orlov option [ 887.771255][T22999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 887.846722][T23006] loop8: detected capacity change from 0 to 8 [ 887.955356][T23006] SQUASHFS error: lzo decompression failed, data probably corrupt [ 888.006393][T23006] SQUASHFS error: Failed to read block 0x28d: -5 [ 888.039551][T23006] SQUASHFS error: Unable to read metadata cache entry [28b] [ 888.075863][T23006] SQUASHFS error: Unable to read inode 0x11f [ 888.495294][T23013] input: syz1 as /devices/virtual/input/input53 [ 888.656268][T15251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.731661][T23015] C: renamed from veth1_to_team (while UP) [ 888.803165][T23015] netlink: 'syz.1.5942': attribute type 4 has an invalid length. [ 888.810996][T23015] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5942'. [ 888.921635][T23020] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5945'. [ 889.217863][T23027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5947'. [ 889.264778][ T10] net_ratelimit: 6 callbacks suppressed [ 889.264803][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.598862][T23038] loop1: detected capacity change from 0 to 512 [ 889.683150][T23038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 889.754649][T23038] ext4 filesystem being mounted at /1067/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.885449][ T802] kernel read not supported for file /dsp1 (pid: 802 comm: kworker/1:2) [ 889.998123][T23038] EXT4-fs error (device loop1): ext4_empty_dir:3082: inode #12: comm syz.1.5951: invalid size [ 890.222551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.230886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.239197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.247504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.255787][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.264098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.274837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.283155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.301866][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.311119][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.536104][T23051] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 890.556988][T23051] pim6reg1: linktype set to 823 [ 890.664808][T23057] loop5: detected capacity change from 0 to 7 [ 890.705106][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 890.714349][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 890.740247][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 890.749485][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 890.775038][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 890.784261][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 890.793356][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 890.802564][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 890.812773][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 890.821974][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 890.849055][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 890.858297][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 890.871536][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 890.880767][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 890.888831][T23057] ldm_validate_partition_table(): Disk read failed. [ 890.901428][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 890.910674][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 890.922745][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 890.931953][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 890.946858][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 890.956075][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 890.970496][T23057] Dev loop5: unable to read RDB block 0 [ 890.980656][T23057] loop5: unable to read partition table [ 890.987190][T23057] loop5: partition table beyond EOD, truncated [ 891.013868][T23057] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 891.310504][T23070] loop8: detected capacity change from 0 to 256 [ 891.402705][T23070] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 891.495758][T23078] loop5: detected capacity change from 0 to 1024 [ 891.525938][T23078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 891.574043][T23078] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 891.620142][T23078] System zones: 0-1, 3-36 [ 891.661672][T23078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.845122][T23089] loop6: detected capacity change from 0 to 2048 [ 891.895953][T23093] netlink: 'syz.8.5972': attribute type 13 has an invalid length. [ 891.910647][T23089] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 891.946524][T15251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.226925][T23097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5975'. [ 892.589986][T23093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.660346][T23093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.786200][ T30] audit: type=1326 audit(1779715066.637:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23108 comm="syz.9.5980" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3aa1f9ce59 code=0x0 [ 893.203523][ T1876] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.227181][ T1876] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.250426][ T1876] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.286513][ T1876] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.466864][T23119] loop1: detected capacity change from 0 to 512 [ 893.491674][T23119] EXT4-fs: Ignoring removed mblk_io_submit option [ 893.498563][T23121] loop8: detected capacity change from 0 to 128 [ 893.517156][T23119] EXT4-fs: Ignoring removed mblk_io_submit option [ 893.541893][T23119] EXT4-fs: Ignoring removed oldalloc option [ 893.565287][T23119] EXT4-fs: Ignoring removed mblk_io_submit option [ 893.592162][T23119] EXT4-fs (loop1): Test dummy encryption mode enabled [ 893.631715][T23119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 893.681874][T23119] EXT4-fs (loop1): 1 truncate cleaned up [ 893.741048][T23119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.020038][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.488444][T23150] netlink: 'syz.6.5997': attribute type 13 has an invalid length. [ 894.752367][T22645] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 894.909350][T23150] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.917131][T23150] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.959430][T22645] usb 10-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 894.981320][T22645] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.028539][T22645] usb 10-1: Product: syz [ 895.042623][T22645] usb 10-1: Manufacturer: syz [ 895.059511][T22645] usb 10-1: SerialNumber: syz [ 895.084456][T22645] usb 10-1: config 0 descriptor?? [ 895.110558][T22645] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 895.255300][T23150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.356187][T23150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.848428][ T1161] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.899489][T23178] loop0: detected capacity change from 0 to 1024 [ 895.907247][ T1161] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.920642][T22648] usb 10-1: USB disconnect, device number 36 [ 895.959630][ T1161] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.996690][ T1161] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.013653][T23178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 896.093636][T23178] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 896.527041][T23193] loop1: detected capacity change from 0 to 136 [ 896.548040][T15034] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 896.579237][T23193] Attempt to read inode for relocated directory [ 896.668158][T23195] loop8: detected capacity change from 0 to 512 [ 896.751574][T23195] EXT4-fs: Ignoring removed i_version option [ 896.796419][T23195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 896.887726][T23195] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.6013: invalid block [ 896.908733][T23203] loop5: detected capacity change from 0 to 512 [ 896.919582][T23195] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 896.922862][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 896.938580][ C0] EXT4-fs (loop8): initial error at time 1779715070: ext4_get_branch:178: inode 11: block 4294967295 [ 896.949556][ C0] EXT4-fs (loop8): last error at time 1779715070: ext4_get_branch:178: inode 11: block 4294967295 [ 897.000930][T23202] loop0: detected capacity change from 0 to 1024 [ 897.004903][T23195] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #11: comm syz.8.6013: invalid indirect mapped block 4294967295 (level 1) [ 897.032407][T23195] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 897.052742][T23195] EXT4-fs error (device loop8): ext4_free_branches:1020: inode #11: comm syz.8.6013: invalid indirect mapped block 4294967295 (level 1) [ 897.082853][T23202] EXT4-fs: Ignoring removed orlov option [ 897.130321][T23203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.142759][T23195] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 897.161677][T23195] EXT4-fs (loop8): 2 truncates cleaned up [ 897.176989][T23203] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.200980][T23202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.275145][T23195] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.358658][ T5633] block nbd2: Receive control failed (result -32) [ 897.407080][T23195] EXT4-fs (loop8): shut down requested (1) [ 897.471927][ T9580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.530914][T23203] EXT4-fs error (device loop5): ext4_empty_dir:3082: inode #12: comm syz.5.6016: invalid size [ 897.763308][T15251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.808776][T23217] loop1: detected capacity change from 0 to 2048 [ 897.857074][T23217] EXT4-fs: Ignoring removed nobh option [ 897.867244][T15034] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.934175][T23217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.986706][T23225] loop9: detected capacity change from 0 to 1024 [ 897.996439][T23217] ext4 filesystem being mounted at /1081/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.038276][ T30] audit: type=1800 audit(1779715071.887:272): pid=23217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6020" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 898.141688][ T30] audit: type=1800 audit(1779715071.987:273): pid=23225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6022" name="file1" dev="loop9" ino=20 res=0 errno=0 [ 898.148843][T23221] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input54 [ 898.167538][T23217] fs-verity (loop1, inode 13): Error -22 reading file data [ 898.253014][T23217] fs-verity (loop1, inode 13): Error -22 building Merkle tree [ 898.323892][T23229] loop0: detected capacity change from 0 to 64 [ 898.441287][T23229] hfs: filesystem is marked locked, mounting read-only. [ 898.484826][T23229] hfs: filesystem is marked locked, leaving read-only. [ 898.489922][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.855307][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6033'. [ 898.908296][T23248] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6033'. [ 899.121248][T23251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6037'. [ 899.211306][T23257] loop9: detected capacity change from 0 to 2048 [ 899.300832][T23257] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.322991][T23263] loop5: detected capacity change from 0 to 256 [ 899.330367][T23263] exfat: Deprecated parameter 'utf8' [ 899.336575][T23263] exfat: Deprecated parameter 'utf8' [ 899.425045][T23263] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 899.537031][ T30] audit: type=1804 audit(1779715073.387:274): pid=23263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6040" name="/newroot/431/file0/file1" dev="loop5" ino=1048965 res=1 errno=0 [ 900.057755][T13114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.642082][T23293] input: syz1 as /devices/virtual/input/input57 [ 901.361492][T23315] loop1: detected capacity change from 0 to 512 [ 901.409662][T23315] EXT4-fs error (device loop1): ext4_iget_extra_inode:5127: inode #15: comm syz.1.6062: corrupted in-inode xattr: invalid ea_ino [ 901.436008][T23315] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 901.442230][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 901.457891][ C0] EXT4-fs (loop1): initial error at time 1779715075: ext4_iget_extra_inode:5127: inode 15 [ 901.467901][ C0] EXT4-fs (loop1): last error at time 1779715075: ext4_iget_extra_inode:5127: inode 15 [ 901.517263][T23315] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.6062: couldn't read orphan inode 15 (err -117) [ 901.584494][T23315] loop1: lost filesystem error report for type 5 error -117 [ 901.616014][T23315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 901.770415][T23296] loop0: detected capacity change from 0 to 32768 [ 901.807253][T23323] tipc: Started in network mode [ 901.826109][T23296] JBD2: Ignoring recovery information on journal [ 901.834332][T23323] tipc: Node identity ac14140f, cluster identity 4711 [ 901.834642][T23325] netlink: 'syz.5.6063': attribute type 13 has an invalid length. [ 901.856532][T23323] tipc: New replicast peer: 255.255.255.255 [ 901.863694][T23323] tipc: Enabled bearer , priority 17 [ 901.880113][T23324] loop6: detected capacity change from 0 to 2048 [ 901.948464][T23324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 901.957026][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.008580][T23296] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 902.303512][T22656] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 902.468477][T15034] ocfs2: Unmounting device (7,0) on (node local) [ 902.509242][T23333] loop6: detected capacity change from 0 to 64 [ 902.529857][T22656] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 902.549990][T22656] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.568707][T22656] usb 9-1: Product: syz [ 902.585987][T22656] usb 9-1: Manufacturer: syz [ 902.610150][T22656] usb 9-1: SerialNumber: syz [ 902.876299][T23325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.998699][T23325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.999279][T23335] loop0: detected capacity change from 0 to 32768 [ 903.016391][T23335] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6068 (23335) [ 903.058023][T23335] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 903.068743][T23335] BTRFS info (device loop0): using xxhash64 checksum algorithm [ 903.084188][T22656] rtl8150 9-1:1.0: couldn't reset the device [ 903.114543][T22656] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 903.142670][T22656] usb 9-1: USB disconnect, device number 30 [ 903.193517][T23335] BTRFS info (device loop0): rebuilding free space tree [ 903.230552][T23335] BTRFS info (device loop0): setting nodatasum [ 903.236990][T23335] BTRFS info (device loop0): allowing degraded mounts [ 903.243889][T23335] BTRFS info (device loop0): turning on async discard [ 903.250679][T23335] BTRFS info (device loop0): enabling free space tree [ 903.258082][T23335] BTRFS info (device loop0): force clearing of disk cache [ 903.265360][T23335] BTRFS info (device loop0): force zlib compression, level 3 [ 903.388886][T23335] BTRFS info (device loop0): balance: start -susage=1,usage=1..0,drange=6..6,vrange=8..15,limit=2,stripes=7..3 [ 903.403315][T23335] BTRFS info (device loop0): balance: ended with status: 0 [ 903.585928][T15034] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 903.784819][T23325] hsr0: left allmulticast mode [ 903.790342][T23325] hsr_slave_0: left allmulticast mode [ 903.811861][T23325] hsr_slave_1: left allmulticast mode [ 903.868954][T23323] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6065'. [ 903.884427][T23323] tipc: Disabling bearer [ 903.956888][T22646] tipc: Node number set to 2886997007 [ 903.987625][ T1161] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.047272][ T1161] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.097765][ T1161] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.162574][ T1161] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.405088][T23360] loop6: detected capacity change from 0 to 1024 [ 904.432465][T23360] EXT4-fs: Ignoring removed orlov option [ 904.616743][T23360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.190638][T21612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.377751][T23390] netlink: 'syz.0.6085': attribute type 13 has an invalid length. [ 905.781222][T23390] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.847875][T23390] team_slave_0: left promiscuous mode [ 905.881389][T23390] team_slave_1: left promiscuous mode [ 905.983781][T23403] netlink: 'syz.1.6089': attribute type 10 has an invalid length. [ 906.000346][T23403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6089'. [ 906.111368][T23390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.128418][T23390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.221436][T23390] veth1_vlan: left allmulticast mode [ 906.493977][T23403] team0: Port device geneve1 added [ 906.514990][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.556221][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.873803][T23417] loop1: detected capacity change from 0 to 1024 [ 906.911928][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.955787][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.996928][T23417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 907.034182][T23417] ext4 filesystem being mounted at /1093/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.196337][ T30] audit: type=1800 audit(1779715081.027:275): pid=23423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6095" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 907.312849][ T30] audit: type=1800 audit(1779715081.037:276): pid=23417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6095" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 907.476731][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 907.928318][T23432] loop0: detected capacity change from 0 to 4096 [ 908.040634][T23441] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 908.177521][T23168] IPVS: starting estimator thread 0... [ 908.190623][T23445] net_ratelimit: 3 callbacks suppressed [ 908.190649][T23445] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 908.283774][T23446] IPVS: using max 22 ests per chain, 52800 per kthread [ 908.982284][T22636] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 909.152355][T22636] usb 9-1: Using ep0 maxpacket: 32 [ 909.177071][T22636] usb 9-1: unable to get BOS descriptor or descriptor too short [ 909.203994][T22636] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 909.225751][T22636] usb 9-1: can't read configurations, error -71 [ 909.637926][T23486] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 909.889372][T23490] loop9: detected capacity change from 0 to 64 [ 909.992153][ T30] audit: type=1800 audit(1779715083.837:277): pid=23490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6122" name="file1" dev="loop9" ino=22 res=0 errno=0 [ 910.275618][T23501] loop1: detected capacity change from 0 to 128 [ 910.286389][T23503] loop0: detected capacity change from 0 to 512 [ 910.300078][T23501] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 910.321980][T23503] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 910.344783][T23501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 910.381518][T23507] loop6: detected capacity change from 0 to 128 [ 910.384569][T23503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 910.445436][T23507] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 910.451018][T23503] System zones: 1-12 [ 910.481975][T23507] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.504680][T23503] EXT4-fs (loop0): 1 truncate cleaned up [ 910.569185][T23503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.628459][T21612] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 911.188533][T15034] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.445543][T23532] netlink: 'syz.0.6137': attribute type 16 has an invalid length. [ 911.463742][T23532] netlink: 'syz.0.6137': attribute type 3 has an invalid length. [ 911.481701][T23532] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.6137'. [ 911.598962][T23535] loop5: detected capacity change from 0 to 128 [ 912.028433][T23546] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 912.456181][T23558] loop8: detected capacity change from 0 to 1024 [ 913.003989][T23578] netem: incorrect ge model size [ 913.009134][T23578] netem: change failed [ 913.248492][T23583] loop8: detected capacity change from 0 to 1024 [ 913.281226][T23583] EXT4-fs: Ignoring removed orlov option [ 913.399250][T23583] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.292129][T23593] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 914.305798][T23593] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 914.327844][T23593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 914.341833][T23593] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 914.350198][T23593] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 914.503674][ T9580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.536145][T23593] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 914.871958][T23610] loop0: detected capacity change from 0 to 4096 [ 914.882699][T23614] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 914.893256][T23610] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 914.909989][T23614] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 914.941065][T23614] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 914.970063][T23610] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 915.000434][T23610] ntfs3(loop0): Inode r=b is not in use! [ 915.011836][T23614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 915.018465][T23610] ntfs3(loop0): Failed to load $Extend (-116). [ 915.052756][T23610] ntfs3(loop0): Failed to initialize $Extend. [ 915.104644][T23621] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6188'. [ 915.460968][T23631] overlayfs: failed to resolve './bus': -2 [ 915.827887][T23647] loop8: detected capacity change from 0 to 512 [ 915.881800][T23647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.888166][T23653] netlink: 'syz.0.6189': attribute type 12 has an invalid length. [ 915.902503][T23653] netlink: 'syz.0.6189': attribute type 29 has an invalid length. [ 915.910426][T23653] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6189'. [ 915.920170][T23653] netlink: 'syz.0.6189': attribute type 2 has an invalid length. [ 915.928731][T23653] netlink: 'syz.0.6189': attribute type 3 has an invalid length. [ 915.940720][T23647] ext4 filesystem being mounted at /842/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 915.947222][T23653] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6189'. [ 916.041245][ T9580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.202704][T23168] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 916.355479][T23168] usb 6-1: Using ep0 maxpacket: 8 [ 916.377665][T23168] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.414842][T23168] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 916.457906][T23168] usb 6-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 916.487349][T23168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.519881][T23168] usb 6-1: config 0 descriptor?? [ 916.757487][T23168] usbhid 6-1:0.0: can't add hid device: -71 [ 916.771350][T23168] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 916.798862][T23168] usb 6-1: USB disconnect, device number 24 [ 916.862750][ T5633] Bluetooth: hci5: command 0x0406 tx timeout [ 916.942561][ T5633] Bluetooth: hci3: command 0x0c1a tx timeout [ 916.944819][T15038] Bluetooth: hci4: command 0x0406 tx timeout [ 917.035376][T15038] Bluetooth: hci1: command 0x0c1a tx timeout [ 917.710194][T23699] loop0: detected capacity change from 0 to 64 [ 917.910297][T23703] sctp: [Deprecated]: syz.9.6213 (pid 23703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 917.910297][T23703] Use struct sctp_sack_info instead [ 918.183806][T23709] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 918.205225][T23709] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 918.868433][T23730] loop5: detected capacity change from 0 to 2048 [ 918.903021][T23730] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 918.978897][T23736] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 918.989790][T23730] bio_check_eod: 42 callbacks suppressed [ 918.989816][T23730] syz.5.6226: attempt to access beyond end of device [ 918.989816][T23730] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 919.102317][T15038] Bluetooth: hci1: command 0x0c1a tx timeout [ 919.652735][T22636] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 919.818652][T23753] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6236'. [ 919.835099][T22636] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 919.868151][T22636] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 919.898264][T22636] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.943922][T22636] usb 10-1: Product: syz [ 919.948265][T22636] usb 10-1: Manufacturer: syz [ 919.964151][T22636] usb 10-1: SerialNumber: syz [ 920.016748][T22636] usb 10-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 920.091482][T23757] loop6: detected capacity change from 0 to 512 [ 920.117219][T23757] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 920.157227][T23757] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.6238: bad orphan inode 131083 [ 920.179303][T23737] loop1: detected capacity change from 0 to 32768 [ 920.188345][T23757] loop6: lost filesystem error report for type 5 error -117 [ 920.192211][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 920.205998][ C1] EXT4-fs (loop6): initial error at time 1779715094: ext4_orphan_get:1423 [ 920.214552][ C1] EXT4-fs (loop6): last error at time 1779715094: ext4_orphan_get:1423 [ 920.240360][T23757] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.570016][T21612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.604876][T23751] loop5: detected capacity change from 0 to 32768 [ 920.656356][T22636] usb 10-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 920.759209][T22636] usb 10-1: USB disconnect, device number 37 [ 920.845933][T23761] loop8: detected capacity change from 0 to 1764 [ 921.182881][T15038] Bluetooth: hci1: command 0x0c1a tx timeout [ 921.399681][T23773] loop1: detected capacity change from 0 to 512 [ 921.468060][T23773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 921.536633][T23773] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 921.599519][T23773] System zones: 1-12 [ 921.644854][T23773] EXT4-fs (loop1): 1 truncate cleaned up [ 921.675608][T23773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.037358][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.519208][T23809] loop5: detected capacity change from 0 to 256 [ 922.601337][T23809] FAT-fs (loop5): Directory bread(block 64) failed [ 922.608615][T23809] FAT-fs (loop5): Directory bread(block 65) failed [ 922.616490][T23809] FAT-fs (loop5): Directory bread(block 66) failed [ 922.627572][T23809] FAT-fs (loop5): Directory bread(block 67) failed [ 922.636220][T23809] FAT-fs (loop5): Directory bread(block 68) failed [ 922.644484][T23809] FAT-fs (loop5): Directory bread(block 69) failed [ 922.659705][T23809] FAT-fs (loop5): Directory bread(block 70) failed [ 922.673476][T23809] FAT-fs (loop5): Directory bread(block 71) failed [ 922.682553][T23809] FAT-fs (loop5): Directory bread(block 72) failed [ 922.707973][T23809] FAT-fs (loop5): Directory bread(block 73) failed [ 922.833447][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 923.022573][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 923.037126][ T10] usb 2-1: config 0 has no interfaces? [ 923.055602][ T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 923.065802][T23818] loop9: detected capacity change from 0 to 2048 [ 923.073714][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.085101][T23818] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 923.100842][ T10] usb 2-1: Product: syz [ 923.114066][ T10] usb 2-1: Manufacturer: syz [ 923.122282][T23818] NILFS (loop9): mounting unchecked fs [ 923.124787][ T10] usb 2-1: SerialNumber: syz [ 923.136598][T12784] udevd[12784]: incorrect nilfs2 checksum on /dev/loop9 [ 923.150142][ T10] usb 2-1: config 0 descriptor?? [ 923.169384][T23818] NILFS (loop9): recovery complete [ 923.198717][T23821] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 923.377385][ T10] usb 2-1: USB disconnect, device number 40 [ 923.463616][T22636] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 923.490541][T23823] loop9: detected capacity change from 0 to 512 [ 923.510815][T23823] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 923.530087][T23817] loop8: detected capacity change from 0 to 32768 [ 923.541920][T23817] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6264 (23817) [ 923.565593][T23823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 923.585348][T23817] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 923.610091][T23823] System zones: 1-12 [ 923.612243][T23817] BTRFS info (device loop8): using crc32c checksum algorithm [ 923.650837][T22636] usb 6-1: unable to get BOS descriptor or descriptor too short [ 923.658964][T23823] EXT4-fs (loop9): 1 truncate cleaned up [ 923.672038][T22636] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 923.688990][T23823] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.717034][T22636] usb 6-1: can't read configurations, error -71 [ 923.826412][T23817] BTRFS info (device loop8): enabling ssd optimizations [ 923.836621][T23817] BTRFS info (device loop8): turning on flush-on-commit [ 923.843722][T23817] BTRFS info (device loop8): enabling free space tree [ 923.851103][T23817] BTRFS info (device loop8): enabling auto defrag [ 923.858213][T23817] BTRFS info (device loop8): use lzo compression, level 1 [ 923.866282][T23817] BTRFS info (device loop8): max_inline set to 4096 [ 923.916676][ T30] audit: type=1800 audit(1779715097.757:278): pid=23817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6264" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 924.100434][ T9580] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 924.165068][T13114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.305954][ T5771] kernel read not supported for file /2469/net/pfkey (pid: 5771 comm: kworker/1:5) [ 924.688187][T23858] loop5: detected capacity change from 0 to 1024 [ 924.744166][T23858] EXT4-fs: inline encryption not supported [ 924.870600][T23858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 924.912731][T23858] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.959220][T23858] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.6272: lblock 0 mapped to illegal pblock 0 (length 6) [ 924.993043][T23858] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.6272: lblock 0 mapped to illegal pblock 0 (length 1) [ 925.030368][T23858] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 925.078272][T23858] EXT4-fs (loop5): This should not happen!! Data will be lost [ 925.078272][T23858] [ 925.337335][T15251] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 925.391678][T15251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 925.505661][T23883] loop6: detected capacity change from 0 to 64 [ 925.570016][ T30] audit: type=1800 audit(1779715099.417:279): pid=23883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6283" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 925.589210][T23883] hfs: keylen 1794 too large [ 926.191963][T23903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6290'. [ 926.279358][T23905] loop6: detected capacity change from 0 to 2048 [ 926.344121][T23905] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.398263][T23905] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 926.421829][T23908] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6292'. [ 926.539562][T21612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.648824][T23912] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6305'. [ 926.693829][T23912] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6305'. [ 927.903261][T23854] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 927.904087][T22001] Bluetooth: hci6: command 0xfc11 tx timeout [ 928.255599][T23947] loop6: detected capacity change from 0 to 256 [ 928.284094][T23947] exfat: Deprecated parameter 'utf8' [ 928.320804][T23947] exfat: Deprecated parameter 'namecase' [ 928.351158][T23947] exfat: Deprecated parameter 'namecase' [ 928.381062][T23947] exfat: Deprecated parameter 'utf8' [ 928.438173][T23947] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 928.484170][T23947] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 928.635394][T23953] loop8: detected capacity change from 0 to 4096 [ 929.568441][T23969] loop1: detected capacity change from 0 to 256 [ 930.076839][T23984] loop6: detected capacity change from 0 to 1764 [ 930.447629][T23981] Invalid logical block size (257) [ 930.864830][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.924248][T24000] loop6: detected capacity change from 0 to 512 [ 930.950106][T24000] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 931.000757][T24000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 931.052047][T24000] System zones: 1-12 [ 931.066637][T23985] loop8: detected capacity change from 0 to 32768 [ 931.078779][T23985] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6324 (23985) [ 931.135204][T23985] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 931.150119][T24000] EXT4-fs (loop6): 1 truncate cleaned up [ 931.183919][T24000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 931.207828][T23985] BTRFS info (device loop8): using sha256 checksum algorithm [ 931.345342][T24008] input: syz0 as /devices/virtual/input/input58 [ 931.529709][T23985] BTRFS info (device loop8): setting nodatasum [ 931.597450][T23985] BTRFS info (device loop8): enabling ssd optimizations [ 931.667665][T23985] BTRFS info (device loop8): enabling free space tree [ 931.781517][T21612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.923437][T24029] loop1: detected capacity change from 0 to 4096 [ 932.070042][T24032] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 932.259035][T24036] macvlan0: entered promiscuous mode [ 932.301481][T24036] netlink: 'syz.6.6335': attribute type 1 has an invalid length. [ 932.351707][T24036] netlink: 'syz.6.6335': attribute type 2 has an invalid length. [ 932.383845][ T9580] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 933.031519][T24051] loop1: detected capacity change from 0 to 128 [ 933.118595][T24051] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 933.173785][T24051] hpfs: filesystem error: improperly stopped [ 933.199214][T24051] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 933.226784][T24051] hpfs: You really don't want any checks? You are crazy... [ 933.301274][T24051] hpfs: hpfs_map_sector(): read error [ 933.355457][T24051] hpfs: code page support is disabled [ 933.409921][T24051] hpfs: hpfs_map_4sectors(): unaligned read [ 933.461715][T24051] hpfs: hpfs_map_4sectors(): unaligned read [ 933.523735][T24051] hpfs: filesystem error: unable to find root dir [ 933.661853][T24051] hpfs: hpfs_map_4sectors(): unaligned read [ 933.743032][T24051] hpfs: hpfs_map_sector(): read error [ 934.058160][T24063] loop9: detected capacity change from 0 to 512 [ 934.132865][T24063] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 934.190046][T24063] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.6348: bad orphan inode 131083 [ 934.260300][T24063] loop9: lost filesystem error report for type 5 error -117 [ 934.285650][T24063] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.440007][T24053] loop0: detected capacity change from 0 to 131072 [ 934.538132][T24053] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 934.713703][T24053] XFS (loop0): Starting recovery (logdev: internal) [ 934.811343][T24053] XFS (loop0): Ending recovery (logdev: internal) [ 934.880994][T13114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.074415][T15034] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 935.401217][T24088] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6357'. [ 935.542229][T24084] netlink: set zone limit has 4 unknown bytes [ 935.892875][T24060] loop5: detected capacity change from 0 to 32768 [ 935.979492][T24060] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 936.082714][T24060] XFS (loop5): Ending clean mount [ 936.348223][T15251] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 937.223581][T24096] loop6: detected capacity change from 0 to 40427 [ 937.298808][T24096] F2FS-fs (loop6): invalid crc value [ 937.713047][T24096] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 937.784927][T24096] F2FS-fs (loop6): Start checkpoint disabled! [ 937.821518][T24124] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 937.921116][T24096] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 937.937567][T24096] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 938.125027][T24129] loop1: detected capacity change from 0 to 1024 [ 938.158459][T24129] EXT4-fs: inline encryption not supported [ 938.200882][ T30] audit: type=1800 audit(1779715112.047:280): pid=24096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6360" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 938.279244][T24129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 938.314927][T24129] ext4 filesystem being mounted at /1146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.384456][T24129] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.6369: lblock 0 mapped to illegal pblock 0 (length 6) [ 938.404331][T24129] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.6369: lblock 0 mapped to illegal pblock 0 (length 1) [ 938.439880][T24129] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 938.440163][ T12] kworker/u8:0: attempt to access beyond end of device [ 938.440163][ T12] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 938.482929][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.483012][ T12] Tainted: [L]=SOFTLOCKUP [ 938.483027][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 938.483054][ T12] Workqueue: writeback wb_workfn (flush-7:6) [ 938.483129][ T12] Call Trace: [ 938.483142][ T12] [ 938.483156][ T12] dump_stack_lvl+0x100/0x190 [ 938.483222][ T12] f2fs_stop_checkpoint+0x600/0x9b0 [ 938.483261][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.483313][ T12] ? errseq_set+0xe3/0x150 [ 938.483358][ T12] ? errseq_set+0xe3/0x150 [ 938.483403][ T12] f2fs_write_end_io+0xf59/0x1340 [ 938.483453][ T12] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 938.483504][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.483567][ T12] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 938.483611][ T12] bio_endio+0x78f/0x8f0 [ 938.483674][ T12] submit_bio_noacct+0x64c/0x2000 [ 938.483732][ T12] f2fs_submit_write_bio+0x135/0x340 [ 938.483802][ T12] __submit_merged_bio+0x331/0x780 [ 938.483856][ T12] __submit_merged_write_cond+0x3fe/0x510 [ 938.483912][ T12] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 938.483970][ T12] ? __pfx___might_resched+0x10/0x10 [ 938.484027][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.484087][ T12] f2fs_write_cache_pages+0x20e9/0x2630 [ 938.484165][ T12] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 938.484229][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.484278][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.484325][ T12] ? find_held_lock+0x2b/0x80 [ 938.484388][ T12] ? nr_blockdev_pages+0xde/0x120 [ 938.484432][ T12] ? nr_blockdev_pages+0xde/0x120 [ 938.484474][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.484548][ T12] ? si_meminfo+0x118/0x230 [ 938.484591][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.484640][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.484759][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.484809][ T12] ? rcu_is_watching+0x12/0xc0 [ 938.484876][ T12] f2fs_write_data_pages+0x799/0x16d0 [ 938.484929][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.484977][ T12] ? trace_f2fs_writepages.constprop.0+0x75/0x230 [ 938.485048][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 938.485110][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.485164][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.485213][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 938.485275][ T12] do_writepages+0x278/0x600 [ 938.485319][ T12] ? __pfx_do_writepages+0x10/0x10 [ 938.485361][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.485416][ T12] __writeback_single_inode+0x164/0x1350 [ 938.485480][ T12] ? find_held_lock+0x2b/0x80 [ 938.485555][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.485606][ T12] ? __pfx___writeback_single_inode+0x10/0x10 [ 938.485669][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.485717][ T12] ? do_raw_spin_unlock+0x145/0x1e0 [ 938.485775][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.485831][ T12] writeback_sb_inodes+0x766/0x1c60 [ 938.485919][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 938.485982][ T12] ? do_raw_spin_lock+0x128/0x260 [ 938.486041][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.486151][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.486199][ T12] ? rcu_is_watching+0x12/0xc0 [ 938.486257][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.486305][ T12] ? queue_io+0x287/0x540 [ 938.486364][ T12] wb_writeback+0x1bf/0xb90 [ 938.486440][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 938.486516][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.486572][ T12] ? mark_held_locks+0x40/0x70 [ 938.486620][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 938.486689][ T12] wb_workfn+0x14f/0xc00 [ 938.486758][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.486807][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 938.486878][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 938.486946][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.486998][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.487049][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.487095][ T12] ? rcu_is_watching+0x12/0xc0 [ 938.487153][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.487210][ T12] process_one_work+0xa0e/0x1980 [ 938.487283][ T12] ? __pfx_process_one_work+0x10/0x10 [ 938.487331][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.487395][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.487451][ T12] worker_thread+0x5ef/0xe50 [ 938.487526][ T12] ? kthread+0x13a/0x450 [ 938.487568][ T12] ? __pfx_worker_thread+0x10/0x10 [ 938.487614][ T12] kthread+0x370/0x450 [ 938.487657][ T12] ? __pfx_kthread+0x10/0x10 [ 938.487704][ T12] ret_from_fork+0x72b/0xd50 [ 938.487756][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 938.487807][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 938.487856][ T12] ? __switch_to+0x800/0x1100 [ 938.487914][ T12] ? __switch_to_asm+0x39/0x70 [ 938.487969][ T12] ? __pfx_kthread+0x10/0x10 [ 938.488017][ T12] ret_from_fork_asm+0x1a/0x30 [ 938.488099][ T12] [ 938.488711][ T12] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 938.497392][T24129] EXT4-fs (loop1): This should not happen!! Data will be lost [ 938.497392][T24129] [ 939.265475][T24136] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 939.595381][ T5623] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 939.689479][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 939.781335][T24158] loop8: detected capacity change from 0 to 512 [ 939.809854][T24158] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.848594][T24158] ext4 filesystem being mounted at /871/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 939.942731][T24158] Quota error (device loop8): do_check_range: Getting dqdh_next_free 256 out of range 0-6 [ 939.968910][T24158] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 939.991778][T24158] EXT4-fs error (device loop8): ext4_acquire_dquot:7032: comm syz.8.6382: Failed to acquire dquot type 0 [ 940.030284][T24168] input: syz1 as /devices/virtual/input/input59 [ 940.218667][ T9580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.292335][T23168] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 941.588596][T24174] loop0: detected capacity change from 0 to 131072 [ 941.604570][T24193] block nbd5: Unsupported socket: should be TCP or UNIX. [ 941.615643][T24194] loop8: detected capacity change from 0 to 512 [ 941.622307][T23168] usb 2-1: Using ep0 maxpacket: 8 [ 941.629416][T24174] F2FS-fs (loop0): invalid crc value [ 941.637858][T23168] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.649098][T24194] EXT4-fs: Ignoring removed bh option [ 941.654945][T23168] usb 2-1: config 0 has no interfaces? [ 941.664546][T23168] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 941.754450][T24174] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 941.771467][T24174] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 941.784464][T23168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.786530][T24194] EXT4-fs error (device loop8): ext4_iget_extra_inode:5127: inode #11: comm syz.8.6394: corrupted in-inode xattr: bad e_name length [ 941.823151][T24194] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 941.827316][T24194] EXT4-fs error (device loop8): ext4_orphan_get:1400: comm syz.8.6394: couldn't read orphan inode 11 (err -117) [ 941.836582][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 941.836617][ C0] EXT4-fs (loop8): initial error at time 1779715115: ext4_iget_extra_inode:5127: inode 11 [ 941.836676][ C0] EXT4-fs (loop8): last error at time 1779715115: ext4_iget_extra_inode:5127: inode 11 [ 941.886842][T23168] usb 2-1: Product: syz [ 941.903193][T23168] usb 2-1: Manufacturer: syz [ 941.919743][T23168] usb 2-1: SerialNumber: syz [ 941.952268][T23168] usb 2-1: config 0 descriptor?? [ 941.970188][T24174] F2FS-fs (loop0): sanity_check_inode: inode (ino=7) has corrupted i_extra_isize: 548, max: 36 [ 941.997731][T24194] loop8: lost filesystem error report for type 5 error -117 [ 941.998194][T24194] EXT4-fs (loop8): 1 truncate cleaned up [ 942.048951][T24194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 942.130718][T24194] xt_hashlimit: size too large, truncated to 1048576 [ 942.267748][T24170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.304752][T24170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.333843][T24208] loop5: detected capacity change from 0 to 4096 [ 942.369317][T23168] usb 2-1: USB disconnect, device number 41 [ 942.488967][T24211] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 942.916954][ T9580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.957824][T24217] loop5: detected capacity change from 0 to 512 [ 943.021868][T24217] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.6401: inode has both inline data and extents flags [ 943.074546][T24217] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 943.076122][T24217] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.6401: couldn't read orphan inode 15 (err -117) [ 943.085392][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 943.085425][ C1] EXT4-fs (loop5): initial error at time 1779715116: ext4_orphan_get:1397: inode 15 [ 943.085479][ C1] EXT4-fs (loop5): last error at time 1779715116: ext4_orphan_get:1397: inode 15 [ 943.212448][T24217] loop5: lost filesystem error report for type 5 error -117 [ 943.215043][T24217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.548676][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6407'. [ 943.661865][T15251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.741738][T24234] loop1: detected capacity change from 0 to 128 [ 944.183355][T24240] loop5: detected capacity change from 0 to 4096 [ 945.567323][T24274] loop0: detected capacity change from 0 to 512 [ 945.598478][T24274] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.6425: inode has both inline data and extents flags [ 945.615661][T24274] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 945.616258][T24274] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.6425: couldn't read orphan inode 15 (err -117) [ 945.625487][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 945.625517][ C1] EXT4-fs (loop0): initial error at time 1779715119: ext4_orphan_get:1397: inode 15 [ 945.625570][ C1] EXT4-fs (loop0): last error at time 1779715119: ext4_orphan_get:1397: inode 15 [ 945.734133][T24274] loop0: lost filesystem error report for type 5 error -117 [ 945.743138][T24274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.010605][T15034] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.591572][T24263] kexec: Could not allocate control_code_buffer [ 946.895392][T24291] loop5: detected capacity change from 0 to 512 [ 946.926465][T24291] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 946.995715][T24291] EXT4-fs (loop5): 1 truncate cleaned up [ 947.076675][T24291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.284838][T24294] loop6: detected capacity change from 0 to 4096 [ 947.663017][T24304] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6438'. [ 947.699514][T24304] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6438'. [ 947.840077][T15251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.355259][T24289] loop0: detected capacity change from 0 to 32768 [ 948.751668][T24325] loop1: detected capacity change from 0 to 256 [ 948.929464][T24325] FAT-fs (loop1): Directory bread(block 64) failed [ 948.972338][T24325] FAT-fs (loop1): Directory bread(block 65) failed [ 948.995530][T24325] FAT-fs (loop1): Directory bread(block 66) failed [ 949.023208][T24325] FAT-fs (loop1): Directory bread(block 67) failed [ 949.052477][T24325] FAT-fs (loop1): Directory bread(block 68) failed [ 949.084806][T24325] FAT-fs (loop1): Directory bread(block 69) failed [ 949.129194][T24325] FAT-fs (loop1): Directory bread(block 70) failed [ 949.150100][T24333] loop8: detected capacity change from 0 to 512 [ 949.161153][T24325] FAT-fs (loop1): Directory bread(block 71) failed [ 949.200589][T24333] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 949.203706][T24325] FAT-fs (loop1): Directory bread(block 72) failed [ 949.274760][T24325] FAT-fs (loop1): Directory bread(block 73) failed [ 949.289691][T24333] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:482: comm syz.8.6451: Invalid block bitmap block 0 in block_group 0 [ 949.395731][T24333] loop8: lost filesystem error report for type 5 error -117 [ 949.412212][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 949.426067][ C1] EXT4-fs (loop8): initial error at time 1779715123: ext4_read_block_bitmap_nowait:482 [ 949.435780][ C1] EXT4-fs (loop8): last error at time 1779715123: ext4_read_block_bitmap_nowait:482 [ 949.466015][T24333] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 949.502950][T24333] loop8: lost filesystem error report for type 5 error -117 [ 949.503498][T24333] EXT4-fs error (device loop8): ext4_clear_blocks:874: inode #11: comm syz.8.6451: attempt to clear invalid blocks 983261 len 1 [ 949.540579][T24333] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 949.541835][T24333] EXT4-fs error (device loop8): __ext4_get_inode_loc:4884: comm syz.8.6451: Invalid inode table block 0 in block_group 0 [ 949.594770][T24333] loop8: lost filesystem error report for type 5 error -117 [ 949.631315][T24333] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 949.695913][T24333] loop8: lost filesystem error report for type 5 error -117 [ 949.697893][T24333] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 949.749812][T24333] loop8: lost filesystem error report for type 5 error -117 [ 949.752400][T24333] EXT4-fs error (device loop8): __ext4_get_inode_loc:4884: comm syz.8.6451: Invalid inode table block 0 in block_group 0 [ 949.783804][T24333] loop8: lost filesystem error report for type 5 error -117 [ 949.784312][T24333] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 949.838653][T24333] loop8: lost filesystem error report for type 5 error -117 [ 949.839150][T24333] EXT4-fs error (device loop8): ext4_truncate:4690: inode #11: comm syz.8.6451: mark_inode_dirty error [ 949.870633][T24333] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 949.892571][T24333] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 949.934376][T24333] loop8: lost filesystem error report for type 5 error -117 [ 949.934916][T24333] EXT4-fs error (device loop8): __ext4_get_inode_loc:4884: comm syz.8.6451: Invalid inode table block 0 in block_group 0 [ 949.985356][T24333] loop8: lost filesystem error report for type 5 error -117 [ 949.985933][T24333] EXT4-fs (loop8): 1 truncate cleaned up [ 950.001157][T24343] loop1: detected capacity change from 0 to 4096 [ 950.033495][T24333] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.189204][T24336] loop5: detected capacity change from 0 to 32768 [ 950.226167][T24336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6452 (24336) [ 950.306584][T24336] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 950.341237][T24336] BTRFS info (device loop5): using crc32c checksum algorithm [ 950.545495][ T9580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.570076][T24336] BTRFS info (device loop5): enabling ssd optimizations [ 950.625597][T24336] BTRFS info (device loop5): turning on flush-on-commit [ 950.637583][T24371] loop9: detected capacity change from 0 to 256 [ 950.667311][T24371] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 950.669863][T24336] BTRFS info (device loop5): enabling free space tree [ 950.714562][T24336] BTRFS info (device loop5): enabling auto defrag [ 950.727670][T24336] BTRFS info (device loop5): use lzo compression, level 1 [ 950.755870][T24336] BTRFS info (device loop5): max_inline set to 4096 [ 950.801992][T24375] loop8: detected capacity change from 0 to 512 [ 950.855407][T24375] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 950.929180][T24375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 950.985847][ T30] audit: type=1800 audit(1779715124.837:281): pid=24336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6452" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 950.990257][T24375] System zones: 1-12 [ 951.034214][T24375] EXT4-fs (loop8): 1 truncate cleaned up [ 951.062346][T24375] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 951.190203][T24384] loop6: detected capacity change from 0 to 256 [ 951.226726][T15251] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 951.335084][T24384] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 951.790201][ T9580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.960894][T24395] loop5: detected capacity change from 0 to 4096 [ 952.060370][T24405] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 952.398557][T24409] dummy0: entered promiscuous mode [ 952.441491][T24409] dummy0: left promiscuous mode [ 953.028394][T24431] loop8: detected capacity change from 0 to 16 [ 953.056112][T24431] erofs (device loop8): mounted with root inode @ nid 36. [ 953.113565][T24437] loop5: detected capacity change from 0 to 512 [ 953.123478][T24431] erofs (device loop8): bogus lookback distance 1 @ lcn 0 of nid 89 [ 953.157871][T24431] erofs (device loop8): readahead error at folio 0 @ nid 89 [ 953.169168][T24437] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.6487: invalid indirect mapped block 256 (level 2) [ 953.234382][T24431] syz.8.6497: attempt to access beyond end of device [ 953.234382][T24431] loop8: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 953.271045][T24437] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 953.272021][T24437] EXT4-fs (loop5): 2 truncates cleaned up [ 953.281270][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 953.281304][ C0] EXT4-fs (loop5): initial error at time 1779780663: ext4_free_branches:1020: inode 11 [ 953.281360][ C0] EXT4-fs (loop5): last error at time 1779780663: ext4_free_branches:1020: inode 11 [ 953.349399][T24431] erofs (device loop8): bogus lookback distance 1 @ lcn 0 of nid 89 [ 953.375001][T24437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.388305][T24431] erofs (device loop8): read error -117 @ 0 of nid 89 [ 953.397284][ T30] audit: type=1800 audit(1779780663.244:282): pid=24431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6497" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 953.611392][ T3331] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm kworker/u8:9: bg 0: block 5: invalid block bitmap [ 953.612913][T24432] loop9: detected capacity change from 0 to 32768 [ 953.636606][T24432] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6486 (24432) [ 953.640279][ T3331] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 953.693939][T24432] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 953.734662][ T3331] EXT4-fs (loop5): This should not happen!! Data will be lost [ 953.734662][ T3331] [ 953.750903][T24432] BTRFS info (device loop9): using sha256 checksum algorithm [ 953.780232][ T3331] EXT4-fs (loop5): Total free blocks count 0 [ 953.814455][ T3331] EXT4-fs (loop5): Free/Dirty block details [ 953.821342][ T3331] EXT4-fs (loop5): free_blocks=0 [ 953.836320][ T3331] EXT4-fs (loop5): dirty_blocks=2 [ 953.849959][ T3331] EXT4-fs (loop5): Block reservation details [ 953.861331][ T3331] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 953.890485][ T98] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 953.911590][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.940602][T24432] BTRFS info (device loop9): enabling ssd optimizations [ 953.972826][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.990829][T24432] BTRFS info (device loop9): turning on async discard [ 954.006024][T15251] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 954.022366][T24432] BTRFS info (device loop9): enabling free space tree [ 954.042647][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.071635][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.110872][T24461] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6493'. [ 954.163611][T24461] veth0_to_bond: default FDB implementation only supports local addresses [ 954.687474][T13114] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 955.197752][T24484] netlink: 'syz.6.6501': attribute type 4 has an invalid length. [ 955.225478][T24484] netlink: 'syz.6.6501': attribute type 8 has an invalid length. [ 955.274120][T24484] netlink: 212 bytes leftover after parsing attributes in process `syz.6.6501'. [ 955.691947][T24495] loop6: detected capacity change from 0 to 8 [ 956.004602][T24469] loop1: detected capacity change from 0 to 32768 [ 956.085430][T24469] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 956.249161][T24509] sctp: [Deprecated]: syz.9.6509 (pid 24509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 956.249161][T24509] Use struct sctp_sack_info instead [ 956.419751][ T30] audit: type=1800 audit(1779780666.264:283): pid=24469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6494" name="file1" dev="loop1" ino=17059 res=0 errno=0 [ 956.683781][ T5623] ocfs2: Unmounting device (7,1) on (node local) [ 957.545691][ T5771] kernel write not supported for file /dsp (pid: 5771 comm: kworker/1:5) [ 957.801743][T24541] loop6: detected capacity change from 0 to 4096 [ 957.893891][T24549] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 957.963074][ T30] audit: type=1800 audit(1779780667.804:284): pid=24541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6524" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 958.166464][T24553] loop5: detected capacity change from 0 to 64 [ 958.418038][T24551] loop1: detected capacity change from 0 to 32768 [ 958.432267][T24551] (syz.1.6528,24551,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 958.446421][T24551] (syz.1.6528,24551,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 958.472460][T24551] JBD2: Ignoring recovery information on journal [ 958.541614][T24551] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 958.899260][ T5623] ocfs2: Unmounting device (7,1) on (node local) [ 958.959302][T24566] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6535'. [ 959.782974][ T5771] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 959.897429][T24587] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 959.956407][ T5771] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 959.995371][ T5771] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.043251][ T5771] usb 6-1: config 0 descriptor?? [ 960.061458][ T5771] cp210x 6-1:0.0: cp210x converter detected [ 960.411640][T24572] loop1: detected capacity change from 0 to 32768 [ 960.474211][ T5771] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 960.524379][ T5771] usb 6-1: cp210x converter now attached to ttyUSB0 [ 960.719046][ T5771] usb 6-1: USB disconnect, device number 27 [ 960.796457][ T5771] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 960.853218][ T5771] cp210x 6-1:0.0: device disconnected [ 962.175317][T24638] overlayfs: invalid origin (0000) [ 962.412111][T24642] loop9: detected capacity change from 0 to 128 [ 962.503042][ T30] audit: type=1800 audit(1779780672.344:285): pid=24642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6567" name="file2" dev="loop9" ino=1048989 res=0 errno=0 [ 962.550963][T24642] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 962.590397][T24642] FAT-fs (loop9): Filesystem has been set read-only [ 962.615700][ T30] audit: type=1800 audit(1779780672.374:286): pid=24642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6567" name="file2" dev="loop9" ino=1048989 res=0 errno=0 [ 962.640056][T24642] syz.9.6567: attempt to access beyond end of device [ 962.640056][T24642] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 962.684588][T24642] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 962.711875][T24642] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 962.736350][T24642] syz.9.6567: attempt to access beyond end of device [ 962.736350][T24642] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 962.805633][T24642] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 962.820775][T24652] loop5: detected capacity change from 0 to 256 [ 962.856938][T24652] exfat: Deprecated parameter 'utf8' [ 962.886174][T24652] exfat: Deprecated parameter 'utf8' [ 962.898506][T24652] exfat: Deprecated parameter 'utf8' [ 962.898979][T24642] syz.9.6567: attempt to access beyond end of device [ 962.898979][T24642] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 962.983774][T24642] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 963.005645][T24652] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 963.046587][T24650] syz.9.6567: attempt to access beyond end of device [ 963.046587][T24650] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 963.123174][T24642] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 963.132400][T24650] buffer_io_error: 10 callbacks suppressed [ 963.132425][T24650] Buffer I/O error on dev loop9, logical block 2065, async page read [ 963.208162][T24636] loop0: detected capacity change from 0 to 32768 [ 963.223525][T24650] syz.9.6567: attempt to access beyond end of device [ 963.223525][T24650] loop9: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 963.264460][T24650] Buffer I/O error on dev loop9, logical block 2066, async page read [ 963.296087][T24650] syz.9.6567: attempt to access beyond end of device [ 963.296087][T24650] loop9: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 963.331485][T24636] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 963.351671][T24650] Buffer I/O error on dev loop9, logical block 2067, async page read [ 963.365522][T24660] loop1: detected capacity change from 0 to 16 [ 963.378568][T24660] erofs (device loop1): mounted with root inode @ nid 36. [ 963.430218][T24650] syz.9.6567: attempt to access beyond end of device [ 963.430218][T24650] loop9: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 963.505884][T24650] Buffer I/O error on dev loop9, logical block 2068, async page read [ 963.552538][T24650] syz.9.6567: attempt to access beyond end of device [ 963.552538][T24650] loop9: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 963.606571][T24662] loop6: detected capacity change from 0 to 512 [ 963.612373][T24650] Buffer I/O error on dev loop9, logical block 2069, async page read [ 963.659106][T24650] syz.9.6567: attempt to access beyond end of device [ 963.659106][T24650] loop9: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 963.673034][T24662] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 963.730897][T24650] Buffer I/O error on dev loop9, logical block 2070, async page read [ 963.771450][T24650] syz.9.6567: attempt to access beyond end of device [ 963.771450][T24650] loop9: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 963.777396][T24662] EXT4-fs (loop6): 1 truncate cleaned up [ 963.785313][T24650] Buffer I/O error on dev loop9, logical block 2071, async page read [ 963.799896][T24650] Buffer I/O error on dev loop9, logical block 2072, async page read [ 963.820529][T24662] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 963.955863][ T30] audit: type=1800 audit(1779780673.804:287): pid=24636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6563" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 964.266372][T24675] loop9: detected capacity change from 0 to 128 [ 964.287025][T15034] ocfs2: Unmounting device (7,0) on (node local) [ 964.307621][T24675] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 964.373843][T24675] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 964.556443][T21612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.898149][T24685] loop6: detected capacity change from 0 to 256 [ 964.969379][ T57] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 964.999832][T24685] FAT-fs (loop6): Directory bread(block 64) failed [ 965.029049][T24685] FAT-fs (loop6): Directory bread(block 65) failed [ 965.064037][T24685] FAT-fs (loop6): Directory bread(block 66) failed [ 965.096624][T24685] FAT-fs (loop6): Directory bread(block 67) failed [ 965.128563][T24685] FAT-fs (loop6): Directory bread(block 68) failed [ 965.131391][T24689] loop0: detected capacity change from 0 to 1024 [ 965.168710][T24685] FAT-fs (loop6): Directory bread(block 69) failed [ 965.180530][T24689] EXT4-fs: Ignoring removed orlov option [ 965.217068][T24685] FAT-fs (loop6): Directory bread(block 70) failed [ 965.257698][T24685] FAT-fs (loop6): Directory bread(block 71) failed [ 965.265078][T24689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 965.319378][T24685] FAT-fs (loop6): Directory bread(block 72) failed [ 965.327917][T24685] FAT-fs (loop6): Directory bread(block 73) failed [ 965.663541][T15034] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.673120][T24700] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6591'. [ 965.693332][T24700] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6591'. [ 965.715633][T24700] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6591'. [ 966.074236][T24709] loop9: detected capacity change from 0 to 128 [ 966.153408][T24709] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 966.181029][T24709] ext4 filesystem being mounted at /634/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 966.336639][T24684] loop1: detected capacity change from 0 to 32768 [ 966.376001][T24684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6585 (24684) [ 966.477959][T13114] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 966.579304][T24684] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 966.638661][T24684] BTRFS info (device loop1): using sha256 checksum algorithm [ 966.804707][T24684] BTRFS info (device loop1): enabling ssd optimizations [ 966.824184][T24684] BTRFS info (device loop1): turning on async discard [ 966.845480][T24684] BTRFS info (device loop1): enabling free space tree [ 967.091686][ T5623] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 967.613329][T24752] loop5: detected capacity change from 0 to 2048 [ 967.677390][T24752] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 967.721375][T24752] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 967.778392][T24752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 968.697596][T24766] loop5: detected capacity change from 0 to 512 [ 968.731046][T24766] EXT4-fs: Ignoring removed mblk_io_submit option [ 968.799903][T24766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.911552][T24766] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 969.067015][T24774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6615'. [ 969.177384][T15251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.794516][T24789] input: syz1 as /devices/virtual/input/input60 [ 970.165231][T24798] loop5: detected capacity change from 0 to 8 [ 970.196042][T24798] SQUASHFS error: lzo decompression failed, data probably corrupt [ 970.224703][T24798] SQUASHFS error: Failed to read block 0x91: -5 [ 970.247153][T24798] SQUASHFS error: Unable to read metadata cache entry [8f] [ 970.273128][T24798] SQUASHFS error: Unable to read inode 0x11f [ 970.674105][T24811] loop5: detected capacity change from 0 to 1024 [ 970.877784][T24818] loop6: detected capacity change from 0 to 64 [ 971.188776][T24822] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6637'. [ 971.510269][T24831] loop0: detected capacity change from 0 to 64 [ 971.607754][ T30] audit: type=1800 audit(1779780681.454:288): pid=24831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6641" name="file2" dev="loop0" ino=23 res=0 errno=0 [ 971.866800][T24840] tap0: tun_chr_ioctl cmd 1074025678 [ 971.891054][T24840] tap0: group set to 0 [ 972.390375][T24854] loop1: detected capacity change from 0 to 1024 [ 972.402575][T24854] EXT4-fs: Ignoring removed bh option [ 972.433138][T24854] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 972.491160][T24854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 972.676260][T24860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 972.694920][T24860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 972.708675][T24860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 972.718452][T24860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 972.726641][T24860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 972.734052][ T30] audit: type=1800 audit(1779780682.584:289): pid=24854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6651" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 972.817538][ T30] audit: type=1800 audit(1779780682.584:290): pid=24854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6651" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 973.017745][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.405908][T24870] netlink: set zone limit has 4 unknown bytes [ 973.804474][T24889] loop9: detected capacity change from 0 to 512 [ 973.832090][ T30] audit: type=1326 audit(1779780683.674:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24890 comm="syz.0.6664" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 973.943425][ T30] audit: type=1326 audit(1779780683.674:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24890 comm="syz.0.6664" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 974.014693][T24889] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.022755][ T30] audit: type=1326 audit(1779780683.734:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24890 comm="syz.0.6664" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 974.056568][ T30] audit: type=1326 audit(1779780683.734:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24890 comm="syz.0.6664" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 974.083066][ T30] audit: type=1326 audit(1779780683.734:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24890 comm="syz.0.6664" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 974.109382][ T30] audit: type=1326 audit(1779780683.734:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24890 comm="syz.0.6664" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 974.146922][T24889] ext4 filesystem being mounted at /652/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 974.186897][ T30] audit: type=1326 audit(1779780683.734:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24890 comm="syz.0.6664" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 974.318226][T24889] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #2: comm syz.9.6663: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 974.513704][T13114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.862294][T24584] Bluetooth: hci6: command tx timeout [ 975.282114][T24921] netlink: set zone limit has 4 unknown bytes [ 975.452688][T23168] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 975.618443][T23168] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 975.633112][T23168] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 975.653207][T23168] usb 10-1: config 0 has no interface number 0 [ 975.659960][T23168] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 975.684578][T23168] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 975.696911][T24857] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.697152][T24857] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.714585][T24936] loop5: detected capacity change from 0 to 4096 [ 975.725715][T23168] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 975.726978][T24857] bridge_slave_0: entered allmulticast mode [ 975.764322][T24941] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 975.775852][T23168] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 975.797248][T23168] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.814489][T24857] bridge_slave_0: entered promiscuous mode [ 975.816235][T23168] usb 10-1: config 0 descriptor?? [ 975.833752][T24927] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 975.857689][T24857] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.881570][T24857] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.899103][T24857] bridge_slave_1: entered allmulticast mode [ 975.913579][T24857] bridge_slave_1: entered promiscuous mode [ 975.984832][T24857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.999048][T24857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.164548][T24857] team0: Port device team_slave_0 added [ 976.236117][T24857] team0: Port device team_slave_1 added [ 976.371378][T24857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.402383][T24857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.496634][T23168] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.21/input/input61 [ 976.536280][T24857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.651873][T24857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.717777][T24857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.803288][ C0] keyspan_remote 10-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 976.813006][T23168] usb 10-1: USB disconnect, device number 38 [ 976.881039][T24857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.911256][T24956] macvlan0: left promiscuous mode [ 977.032416][T24584] Bluetooth: hci6: command tx timeout [ 977.135983][T24857] hsr_slave_0: entered promiscuous mode [ 977.157691][T24857] hsr_slave_1: entered promiscuous mode [ 977.176053][T24857] debugfs: 'hsr0' already exists in 'hsr' [ 977.374301][T24857] Cannot create hsr debugfs directory [ 977.472504][T24958] loop6: detected capacity change from 0 to 32768 [ 977.508486][T24958] (syz.6.6689,24958,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 977.522922][T24958] (syz.6.6689,24958,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 977.564319][T24958] JBD2: Ignoring recovery information on journal [ 977.591236][T24951] loop5: detected capacity change from 0 to 131072 [ 977.605336][T24951] F2FS-fs (loop5): Test dummy encryption mode enabled [ 977.616623][T24951] F2FS-fs (loop5): invalid crc value [ 977.647048][T24958] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 977.725429][T24951] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 977.740422][T24951] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 978.252754][T24969] netlink: set zone limit has 4 unknown bytes [ 978.416493][T21612] ocfs2: Unmounting device (7,6) on (node local) [ 978.565328][T24975] loop9: detected capacity change from 0 to 512 [ 978.658780][T24975] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 978.706155][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 978.706181][ T30] audit: type=1800 audit(1779780688.544:302): pid=24979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6697" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 978.790292][T24975] EXT4-fs (loop9): 1 truncate cleaned up [ 978.868068][T24975] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.087025][T24973] loop1: detected capacity change from 0 to 16384 [ 979.105735][T24584] Bluetooth: hci6: command tx timeout [ 979.271063][T24989] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 979.767300][T13114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.055907][T25003] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6703'. [ 980.105421][T25003] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6703'. [ 980.173494][T25003] netlink: 'syz.9.6703': attribute type 19 has an invalid length. [ 980.685993][T25017] overlayfs: upper fs does not support tmpfile. [ 981.184706][T24584] Bluetooth: hci6: command tx timeout [ 981.824272][T24857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 981.885389][T24857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 982.229249][T25059] loop5: detected capacity change from 0 to 128 [ 982.687355][T25063] loop0: detected capacity change from 0 to 32768 [ 982.700976][T25063] (syz.0.6720,25063,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 982.718776][T25063] (syz.0.6720,25063,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 982.718869][T24857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 982.771808][T25024] loop6: detected capacity change from 0 to 32768 [ 982.815367][T25063] JBD2: Ignoring recovery information on journal [ 982.890182][T25063] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 982.912336][T24857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 982.920694][T25071] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6722'. [ 982.955553][T24857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 982.960695][T25024] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 983.066803][T24857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 983.161129][T25024] XFS (loop6): Ending clean mount [ 983.185166][T24857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 983.288414][T24857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 983.375282][T15034] ocfs2: Unmounting device (7,0) on (node local) [ 983.475643][T25024] Process accounting resumed [ 983.504505][T25091] loop9: detected capacity change from 0 to 512 [ 983.553324][T25091] EXT4-fs: Ignoring removed mblk_io_submit option [ 983.656979][T25091] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.771567][T25091] ext4 filesystem being mounted at /663/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.949797][T21612] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 984.011717][T24857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.189302][T24857] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.281747][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.289002][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.346716][T13114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.372017][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.379233][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.591756][T22636] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 984.772378][T22636] usb 6-1: Using ep0 maxpacket: 32 [ 984.842800][T22636] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 984.868572][T22636] usb 6-1: config 0 has no interface number 0 [ 984.899705][T22636] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 984.947448][T22636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.988981][T22636] usb 6-1: Product: syz [ 985.006125][T22636] usb 6-1: Manufacturer: syz [ 985.036118][T22636] usb 6-1: SerialNumber: syz [ 986.037092][T22636] usb 6-1: config 0 descriptor?? [ 986.160133][T22636] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 986.259038][T25127] loop9: detected capacity change from 0 to 131072 [ 986.267506][T25127] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 986.275676][T25127] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 986.285990][T25127] F2FS-fs (loop9): invalid crc value [ 986.400059][T25127] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 986.419606][T25127] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 986.427147][T25127] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 986.441421][T22636] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 986.539741][T22636] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 986.926974][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 986.927829][T23168] usb 6-1: USB disconnect, device number 28 [ 987.040583][T23168] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 987.119374][T23168] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 987.181816][T23168] quatech2 6-1:0.51: device disconnected [ 987.660846][T25187] nbd7: detected capacity change from 0 to 127 [ 987.700107][T24584] block nbd7: Receive control failed (result -32) [ 987.728181][ T5644] block nbd7: Dead connection, failed to find a fallback [ 987.737675][ T5644] block nbd7: shutting down sockets [ 987.745219][ T5644] blk_print_req_error: 10 callbacks suppressed [ 987.745243][ T5644] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.765640][ T5644] Buffer I/O error on dev nbd7, logical block 0, async page read [ 987.774432][ T5644] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.783812][ T5644] Buffer I/O error on dev nbd7, logical block 1, async page read [ 987.793409][ T5644] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.802876][ T5644] Buffer I/O error on dev nbd7, logical block 2, async page read [ 987.810876][ T5644] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.820909][ T5644] Buffer I/O error on dev nbd7, logical block 3, async page read [ 987.829356][ T5644] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.851697][ T5644] Buffer I/O error on dev nbd7, logical block 0, async page read [ 987.862653][ T5644] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.871782][ T5644] Buffer I/O error on dev nbd7, logical block 1, async page read [ 987.880520][ T5644] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.890795][ T5644] Buffer I/O error on dev nbd7, logical block 2, async page read [ 987.912739][ T5644] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 987.958865][ T5644] Buffer I/O error on dev nbd7, logical block 3, async page read [ 988.004731][ T5644] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 988.044437][ T5644] Buffer I/O error on dev nbd7, logical block 0, async page read [ 988.077200][ T5644] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 988.125814][ T5644] Buffer I/O error on dev nbd7, logical block 1, async page read [ 988.209869][T24857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.229435][ T5644] ldm_validate_partition_table(): Disk read failed. [ 988.279930][ T5644] Dev nbd7: unable to read RDB block 0 [ 988.315993][ T5644] nbd7: unable to read partition table [ 988.385937][ T5644] ldm_validate_partition_table(): Disk read failed. [ 988.409199][T25207] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 988.428050][ T5644] Dev nbd7: unable to read RDB block 0 [ 988.481342][ T5644] nbd7: unable to read partition table [ 988.635851][T24857] veth0_vlan: entered promiscuous mode [ 988.700387][T24857] veth1_vlan: entered promiscuous mode [ 988.906840][T24857] veth0_macvtap: entered promiscuous mode [ 988.966190][T24857] veth1_macvtap: entered promiscuous mode [ 989.094088][T24857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.189943][T24857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.250589][ T1161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.284786][ T1161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.320597][ T1161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.377187][ T1161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.852882][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.896847][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.023057][ T1876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.040555][T25246] loop6: detected capacity change from 0 to 4096 [ 990.061090][ T1876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.170191][T25251] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 990.457269][T25260] loop0: detected capacity change from 0 to 1024 [ 990.509805][T25260] EXT4-fs: Ignoring removed bh option [ 990.533881][T25258] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 990.629976][T25260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.041492][T15034] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.137768][T25272] loop2: detected capacity change from 0 to 2048 [ 991.189973][ T1876] wlan1: Trigger new scan to find an IBSS to join [ 991.226018][T25272] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 991.272838][T25272] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 991.321572][T25272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 991.348861][T25283] loop9: detected capacity change from 0 to 512 [ 991.418195][T25283] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 991.536396][T25283] EXT4-fs (loop9): 1 truncate cleaned up [ 991.631383][T25283] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 991.945547][T25253] loop1: detected capacity change from 0 to 32768 [ 992.006457][T13114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.107272][T25253] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 992.228861][T25305] loop2: detected capacity change from 0 to 256 [ 992.304950][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.343192][ T30] audit: type=1800 audit(1779780702.194:303): pid=25305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6787" name="bus" dev="loop2" ino=1048999 res=0 errno=0 [ 992.416692][T25305] Invalid ELF header magic: != ELF [ 992.944059][T25315] ALSA: seq fatal error: cannot create timer (-19) [ 993.124719][T25322] loop2: detected capacity change from 0 to 4096 [ 993.244383][ T5623] ocfs2: Unmounting device (7,1) on (node local) [ 993.871899][T25348] loop6: detected capacity change from 0 to 512 [ 993.962242][T25348] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 993.975592][T25350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6801'. [ 994.081926][T25348] EXT4-fs (loop6): orphan cleanup on readonly fs [ 994.171293][T25348] EXT4-fs warning (device loop6): ext4_enable_quotas:7265: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 994.226730][ T3331] wlan1: Trigger new scan to find an IBSS to join [ 994.261547][T25358] loop5: detected capacity change from 0 to 256 [ 994.327117][T25348] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 994.347050][T25358] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 994.352748][T25348] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.6802: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 994.486134][T25348] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 994.486679][T25348] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.6802: couldn't read orphan inode 13 (err -117) [ 994.495934][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 994.495969][ C0] EXT4-fs (loop6): last error at time 1779780704: ext4_ext_check_inode:521: inode 13 [ 994.572497][T25348] loop6: lost filesystem error report for type 5 error -117 [ 994.577886][T25348] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 994.615961][T25348] EXT4-fs (loop6): shut down requested (0) [ 994.797265][T21612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.309443][T25386] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6815'. [ 995.813468][T25408] loop6: detected capacity change from 0 to 64 [ 995.929958][ T30] audit: type=1800 audit(1779780705.774:304): pid=25408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6823" name="file2" dev="loop6" ino=23 res=0 errno=0 [ 996.027076][ T30] audit: type=1326 audit(1779780705.874:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.6824" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 996.141946][ T30] audit: type=1326 audit(1779780705.904:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.6824" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 996.242974][T24584] Bluetooth: hci3: ISO packet too small [ 996.268727][ T30] audit: type=1326 audit(1779780705.914:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.6824" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 996.311585][ T30] audit: type=1326 audit(1779780705.914:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.6824" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 996.379632][ T30] audit: type=1326 audit(1779780705.914:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.6824" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 996.483894][ T30] audit: type=1326 audit(1779780705.914:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.6824" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 996.534169][T25429] loop0: detected capacity change from 0 to 1024 [ 996.554378][T25429] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 996.573380][ T30] audit: type=1326 audit(1779780705.914:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.6824" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 996.602596][T25429] EXT4-fs (loop0): orphan cleanup on readonly fs [ 996.609746][T22645] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 996.623224][T25429] EXT4-fs warning (device loop0): ext4_enable_quotas:7265: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 996.643871][ T30] audit: type=1326 audit(1779780705.914:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25414 comm="syz.0.6824" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17319ce59 code=0x7ffc0000 [ 996.682858][T25429] EXT4-fs (loop0): Cannot turn on quotas: error -13 [ 996.689853][T25429] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.6829: couldn't read orphan inode 12 (err -116) [ 996.705829][T25429] loop0: lost filesystem error report for type 5 error -116 [ 996.712198][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 996.726035][ C0] EXT4-fs (loop0): initial error at time 1779780706: ext4_orphan_get:1400 [ 996.734617][ C0] EXT4-fs (loop0): last error at time 1779780706: ext4_orphan_get:1400 [ 996.761635][T25429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 996.785760][T22645] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 996.794198][T22645] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.818467][T22645] usb 2-1: config 0 has no interface number 0 [ 996.848384][T22645] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 996.924886][T22645] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 996.964736][T22645] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.997633][T22645] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 997.012238][T22645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.031116][T15034] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.058738][T22645] usb 2-1: Product: syz [ 997.082067][T22645] usb 2-1: Manufacturer: syz [ 997.100672][T22645] usb 2-1: SerialNumber: syz [ 997.146414][T22645] usb 2-1: config 0 descriptor?? [ 997.185739][ T57] wlan1: Creating new IBSS network, BSSID 92:53:98:a8:05:f9 [ 997.710037][T22645] usb 2-1: USB disconnect, device number 42 [ 998.231340][T25443] loop6: detected capacity change from 0 to 32768 [ 998.289588][T25467] loop2: detected capacity change from 0 to 64 [ 998.330798][T25443] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 998.484866][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 998.484892][ T30] audit: type=1800 audit(1779780708.324:323): pid=25467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6840" name="file2" dev="loop2" ino=23 res=0 errno=0 [ 998.795917][T25481] loop1: detected capacity change from 0 to 16 [ 998.957862][T25481] erofs (device loop1): mounted with root inode @ nid 36. [ 999.035784][T25481] erofs (device loop1): invalid de[0].nameoff 14 @ nid 36 [ 999.133636][ T30] audit: type=1800 audit(1779780708.974:324): pid=25443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6833" name="file1" dev="loop6" ino=17059 res=0 errno=0 [ 999.252297][T22645] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 999.419371][T22645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.484472][T22645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.519808][T22645] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 999.541307][T21612] ocfs2: Unmounting device (7,6) on (node local) [ 999.558003][T22645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.627407][T22645] usb 3-1: config 0 descriptor?? [ 999.954397][T25511] loop1: detected capacity change from 0 to 512 [ 999.974332][T25511] EXT4-fs: Ignoring removed mblk_io_submit option [ 1000.108164][T25511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.160158][T25511] ext4 filesystem being mounted at /1229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1000.237182][T24584] Bluetooth: hci5: unexpected event for opcode 0x0c2d [ 1000.350499][T22645] hid-led 0003:1D34:000A.0040: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 1000.503122][T22645] hid-led 0003:1D34:000A.0040: Dream Cheeky Webmail Notifier initialized [ 1000.544702][T22645] usb 3-1: USB disconnect, device number 11 [ 1000.689936][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.734926][T25528] fido_id[25528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1001.389771][T25551] loop2: detected capacity change from 0 to 256 [ 1001.428511][T25551] exfat: Deprecated parameter 'utf8' [ 1001.458427][T25551] exfat: Deprecated parameter 'namecase' [ 1001.481495][T25551] exfat: Deprecated parameter 'namecase' [ 1001.538203][T25551] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1002.363589][T25544] loop5: detected capacity change from 0 to 32768 [ 1002.414396][T25547] loop9: detected capacity change from 0 to 32768 [ 1002.420132][T25544] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1002.533423][T25547] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1002.665435][T25544] XFS (loop5): Ending clean mount [ 1002.784300][T25549] loop0: detected capacity change from 0 to 32768 [ 1002.860338][T25544] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 [ 1002.897479][T25544] XFS (loop5): Unmount and run xfs_repair [ 1002.918304][T25544] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1002.950443][T25544] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1002.994621][T25544] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1003.078217][T25544] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1003.136459][T25544] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1003.194147][T25544] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1003.241667][T25544] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1003.279413][T25544] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1003.316928][T25544] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1003.348075][T25590] netlink: 13 bytes leftover after parsing attributes in process `syz.1.6871'. [ 1003.357776][T25544] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x4 len 4 error 74 [ 1003.387447][ T30] audit: type=1800 audit(1779780713.234:325): pid=25547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6863" name="file1" dev="loop9" ino=17059 res=0 errno=0 [ 1003.631734][T15251] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1003.689477][T15251] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 1003.725410][T25602] loop0: detected capacity change from 0 to 512 [ 1003.748428][T25602] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1003.779492][T25601] loop6: detected capacity change from 0 to 512 [ 1003.792926][T13114] ocfs2: Unmounting device (7,9) on (node local) [ 1003.807998][T25601] EXT4-fs: Ignoring removed mblk_io_submit option [ 1003.819738][T25602] EXT4-fs (loop0): 1 truncate cleaned up [ 1003.844566][T25602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1003.966749][T25601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1004.102667][T25601] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1004.423184][T15034] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.433529][T22626] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1004.534002][T21612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.609097][T22626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.646934][T22626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.690327][T22626] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1004.717891][T25619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1004.736659][T22626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.794803][T22626] usb 2-1: config 0 descriptor?? [ 1004.821936][T25623] loop6: detected capacity change from 0 to 512 [ 1004.885112][T25623] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1004.969698][T25623] EXT4-fs error (device loop6): __ext4_iget:5481: inode #11: block 2: comm syz.6.6880: invalid block [ 1005.034704][T25623] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1005.035951][T25623] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.6880: couldn't read orphan inode 11 (err -117) [ 1005.045239][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1005.045273][ C1] EXT4-fs (loop6): initial error at time 1779780714: __ext4_iget:5481: inode 11: block 2 [ 1005.045339][ C1] EXT4-fs (loop6): last error at time 1779780714: __ext4_iget:5481: inode 11: block 2 [ 1005.087147][T25623] loop6: lost filesystem error report for type 5 error -117 [ 1005.100222][T25623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1005.209638][T25632] loop0: detected capacity change from 0 to 512 [ 1005.328811][T21612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.361948][T25632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.410171][T25640] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6884'. [ 1005.561485][T22626] hid-led 0003:1D34:000A.0041: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 1005.576274][T25632] EXT4-fs warning (device loop0): ext4_group_add:1734: No reserved GDT blocks, can't resize [ 1005.584512][T25644] loop2: detected capacity change from 0 to 128 [ 1005.648637][T25644] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1005.676894][T22626] hid-led 0003:1D34:000A.0041: Dream Cheeky Webmail Notifier initialized [ 1005.699954][T25644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1005.800456][T22626] usb 2-1: USB disconnect, device number 43 [ 1005.880721][T15034] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.894756][ T30] audit: type=1800 audit(1779780715.724:326): pid=25644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6886" name="file2" dev="loop2" ino=95 res=0 errno=0 [ 1006.019491][T25647] fido_id[25647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1006.307548][T25662] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6892'. [ 1006.612425][T25667] loop2: detected capacity change from 0 to 256 [ 1006.795359][T25667] FAT-fs (loop2): Directory bread(block 64) failed [ 1006.827666][T25667] FAT-fs (loop2): Directory bread(block 65) failed [ 1006.859232][T25667] FAT-fs (loop2): Directory bread(block 66) failed [ 1006.896886][T25667] FAT-fs (loop2): Directory bread(block 67) failed [ 1006.926412][T25667] FAT-fs (loop2): Directory bread(block 68) failed [ 1006.966496][T25667] FAT-fs (loop2): Directory bread(block 69) failed [ 1007.000183][T25667] FAT-fs (loop2): Directory bread(block 70) failed [ 1007.032243][T25667] FAT-fs (loop2): Directory bread(block 71) failed [ 1007.076493][T25667] FAT-fs (loop2): Directory bread(block 72) failed [ 1007.130205][T25667] FAT-fs (loop2): Directory bread(block 73) failed [ 1007.632777][T25658] loop5: detected capacity change from 0 to 32768 [ 1007.735674][T25658] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1008.229997][T25702] loop9: detected capacity change from 0 to 64 [ 1008.493352][T25705] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6906'. [ 1008.578976][ T30] audit: type=1800 audit(1779780718.424:327): pid=25658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6890" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 1008.950650][T25719] sock: sock_set_timeout: `syz.1.6911' (pid 25719) tries to set negative timeout [ 1009.048360][T15251] ocfs2: Unmounting device (7,5) on (node local) [ 1009.474452][T25726] hub 1-0:1.0: USB hub found [ 1009.512000][T25726] hub 1-0:1.0: 1 port detected [ 1009.522367][T25733] loop2: detected capacity change from 0 to 512 [ 1009.552756][T25733] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1009.660574][T25733] EXT4-fs (loop2): 1 truncate cleaned up [ 1009.734780][T25733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.907567][T25742] loop6: detected capacity change from 0 to 128 [ 1009.998659][T25742] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1010.083958][T25742] hpfs: filesystem error: improperly stopped [ 1010.108148][T25742] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1010.148837][T25742] hpfs: You really don't want any checks? You are crazy... [ 1010.184729][T25742] hpfs: hpfs_map_sector(): read error [ 1010.217563][T25742] hpfs: code page support is disabled [ 1010.249809][T25742] hpfs: hpfs_map_4sectors(): unaligned read [ 1010.272655][T25742] hpfs: hpfs_map_4sectors(): unaligned read [ 1010.325361][T25742] hpfs: filesystem error: unable to find root dir [ 1010.397255][T25742] hpfs: hpfs_map_4sectors(): unaligned read [ 1010.439012][T25742] hpfs: hpfs_map_sector(): read error [ 1010.580601][T25753] loop9: detected capacity change from 0 to 1024 [ 1010.645967][T25753] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.690838][T24857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.722393][T25753] ext4 filesystem being mounted at /697/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1010.805405][ T30] audit: type=1800 audit(1779780720.644:328): pid=25753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6923" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1011.000278][T13114] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1011.422738][T25762] loop6: detected capacity change from 0 to 32768 [ 1011.461776][T25762] JBD2: Ignoring recovery information on journal [ 1011.535625][T25762] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1011.693031][T25762] OCFS2: ERROR (device loop6): ocfs2_validate_gd_self: Group descriptor #17056 has bit count 0 but claims that 2046 are free [ 1011.708349][T25762] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1011.719512][T25762] OCFS2: File system is now read-only. [ 1011.725453][T25762] (syz.6.6926,25762,1):ocfs2_search_chain:1913 ERROR: status = -30 [ 1011.734486][T25762] (syz.6.6926,25762,1):ocfs2_search_chain:2036 ERROR: status = -30 [ 1011.742456][T25762] (syz.6.6926,25762,1):ocfs2_claim_suballoc_bits:2123 ERROR: status = -30 [ 1011.750988][T25762] (syz.6.6926,25762,1):ocfs2_claim_suballoc_bits:2176 ERROR: status = -30 [ 1011.759760][T25762] (syz.6.6926,25762,1):ocfs2_claim_new_inode:2417 ERROR: status = -30 [ 1011.768155][T25762] (syz.6.6926,25762,1):ocfs2_claim_new_inode:2432 ERROR: status = -30 [ 1011.776551][T25762] (syz.6.6926,25762,1):ocfs2_mknod_locked:642 ERROR: status = -30 [ 1011.784443][T25762] (syz.6.6926,25762,1):ocfs2_symlink:1954 ERROR: status = -30 [ 1011.792470][T25762] (syz.6.6926,25762,1):ocfs2_symlink:2078 ERROR: status = -30 [ 1012.074270][T21612] ocfs2: Unmounting device (7,6) on (node local) [ 1012.933525][T25789] loop9: detected capacity change from 0 to 1024 [ 1013.292901][T25794] loop1: detected capacity change from 0 to 512 [ 1013.310100][T25794] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1013.369832][T25794] EXT4-fs (loop1): 1 truncate cleaned up [ 1013.408941][T25794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.500092][T25800] loop6: detected capacity change from 0 to 512 [ 1013.538226][T25800] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1013.586362][T25801] loop2: detected capacity change from 0 to 2048 [ 1013.605049][T25800] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #16: comm syz.6.6941: invalid indirect mapped block 4294967295 (level 0) [ 1013.643846][T25800] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1013.652188][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1013.660638][T25805] binder: 25804:25805 ioctl c0306201 2000000003c0 returned -22 [ 1013.661404][ C0] EXT4-fs (loop6): initial error at time 1779780723: ext4_free_branches:1020: inode 16 [ 1013.685136][ C0] EXT4-fs (loop6): last error at time 1779780723: ext4_free_branches:1020: inode 16 [ 1013.698372][T25801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1013.809183][T25800] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #16: comm syz.6.6941: invalid indirect mapped block 4294967295 (level 1) [ 1013.874555][T25800] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1013.897490][T25800] EXT4-fs (loop6): 1 orphan inode deleted [ 1013.962700][T25800] EXT4-fs (loop6): 1 truncate cleaned up [ 1014.033193][T25800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.154871][T25800] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1014.249294][T25816] loop9: detected capacity change from 0 to 2048 [ 1014.280999][T25816] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1014.338329][T25818] [ 1014.340693][T25818] ====================================================== [ 1014.347712][T25818] WARNING: possible circular locking dependency detected [ 1014.354732][T25818] syzkaller #0 Tainted: G L [ 1014.360701][T25818] ------------------------------------------------------ [ 1014.367707][T25818] cryptomgr_probe/25818 is trying to acquire lock: [ 1014.374200][T25818] ffffffff8e977640 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xe87/0x1cc0 [ 1014.383832][T25818] [ 1014.383832][T25818] but task is already holding lock: [ 1014.391195][T25818] ffffffff8e67c6f0 (cpu_hotplug_lock){++++}-{0:0}, at: padata_alloc_shell+0x83/0x250 [ 1014.400756][T25818] [ 1014.400756][T25818] which lock already depends on the new lock. [ 1014.400756][T25818] [ 1014.411148][T25818] [ 1014.411148][T25818] the existing dependency chain (in reverse order) is: [ 1014.420150][T25818] [ 1014.420150][T25818] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1014.427907][T25818] cpus_read_lock+0x42/0x170 [ 1014.433044][T25818] static_key_slow_inc+0x12/0x30 [ 1014.438509][T25818] fl_create+0x7fb/0xd10 [ 1014.443289][T25818] ipv6_flowlabel_opt+0x547/0x2f20 [ 1014.448938][T25818] do_ipv6_setsockopt+0x1b80/0x44b0 [ 1014.454749][T25818] ipv6_setsockopt+0xcb/0x170 [ 1014.459955][T25818] udpv6_setsockopt+0x64/0xb0 [ 1014.465167][T25818] do_sock_setsockopt+0xf3/0x1d0 [ 1014.470649][T25818] __sys_setsockopt+0x195/0x220 [ 1014.476033][T25818] __x64_sys_setsockopt+0xbd/0x160 [ 1014.481674][T25818] do_syscall_64+0x10b/0x860 [ 1014.486788][T25818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.493207][T25818] [ 1014.493207][T25818] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1014.500961][T25818] lock_sock_nested+0x41/0xf0 [ 1014.506164][T25818] inet_shutdown+0x67/0x410 [ 1014.511189][T25818] nbd_mark_nsock_dead+0xae/0x5c0 [ 1014.516744][T25818] sock_shutdown+0x16b/0x200 [ 1014.521861][T25818] nbd_config_put+0x1eb/0x750 [ 1014.527068][T25818] nbd_genl_connect+0xaf8/0x1a40 [ 1014.532544][T25818] genl_family_rcv_msg_doit+0x214/0x300 [ 1014.538714][T25818] genl_rcv_msg+0x560/0x800 [ 1014.543742][T25818] netlink_rcv_skb+0x159/0x420 [ 1014.549055][T25818] genl_rcv+0x28/0x40 [ 1014.553561][T25818] netlink_unicast+0x585/0x850 [ 1014.558871][T25818] netlink_sendmsg+0x8b0/0xda0 [ 1014.564178][T25818] ____sys_sendmsg+0x9e1/0xb70 [ 1014.569488][T25818] ___sys_sendmsg+0x190/0x1e0 [ 1014.574718][T25818] __sys_sendmsg+0x170/0x220 [ 1014.579842][T25818] do_syscall_64+0x10b/0x860 [ 1014.584957][T25818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.591386][T25818] [ 1014.591386][T25818] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1014.599050][T25818] __mutex_lock+0x1a4/0x1b10 [ 1014.604167][T25818] nbd_queue_rq+0x428/0x1080 [ 1014.609295][T25818] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1014.615382][T25818] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1014.622245][T25818] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1014.628846][T25818] blk_mq_run_hw_queue+0x23c/0x670 [ 1014.634488][T25818] blk_mq_dispatch_list+0x51d/0x1360 [ 1014.640309][T25818] blk_mq_flush_plug_list+0x130/0x600 [ 1014.646224][T25818] __blk_flush_plug+0x2c4/0x4b0 [ 1014.651610][T25818] __submit_bio+0x584/0x6c0 [ 1014.656641][T25818] submit_bio_noacct_nocheck+0x543/0xbf0 [ 1014.662829][T25818] submit_bio_noacct+0xd18/0x2000 [ 1014.668386][T25818] submit_bh_wbc+0x681/0x890 [ 1014.673511][T25818] block_read_full_folio+0x264/0x8e0 [ 1014.679349][T25818] filemap_read_folio+0xfc/0x3b0 [ 1014.684822][T25818] do_read_cache_folio+0x2d7/0x6b0 [ 1014.690473][T25818] read_part_sector+0xd1/0x370 [ 1014.695761][T25818] adfspart_check_ICS+0x91/0x7d0 [ 1014.701225][T25818] bdev_disk_changed+0x7a3/0x1250 [ 1014.706778][T25818] blkdev_get_whole+0x187/0x290 [ 1014.712157][T25818] bdev_open+0x2c7/0xe40 [ 1014.717021][T25818] blkdev_open+0x34e/0x4f0 [ 1014.721971][T25818] do_dentry_open+0x6d8/0x1660 [ 1014.727284][T25818] vfs_open+0x82/0x3f0 [ 1014.731886][T25818] path_openat+0x208c/0x31a0 [ 1014.737001][T25818] do_file_open+0x20e/0x430 [ 1014.742036][T25818] do_sys_openat2+0x10d/0x1e0 [ 1014.747245][T25818] __x64_sys_openat+0x12d/0x210 [ 1014.752632][T25818] do_syscall_64+0x10b/0x860 [ 1014.757746][T25818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.764167][T25818] [ 1014.764167][T25818] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1014.771395][T25818] __mutex_lock+0x1a4/0x1b10 [ 1014.776514][T25818] nbd_queue_rq+0xba/0x1080 [ 1014.781559][T25818] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 1014.787641][T25818] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1014.794504][T25818] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1014.801016][T25818] blk_mq_run_hw_queue+0x23c/0x670 [ 1014.806666][T25818] blk_mq_dispatch_list+0x51d/0x1360 [ 1014.812487][T25818] blk_mq_flush_plug_list+0x130/0x600 [ 1014.818395][T25818] __blk_flush_plug+0x2c4/0x4b0 [ 1014.823799][T25818] __submit_bio+0x584/0x6c0 [ 1014.828856][T25818] submit_bio_noacct_nocheck+0x543/0xbf0 [ 1014.835050][T25818] submit_bio_noacct+0xd18/0x2000 [ 1014.840609][T25818] submit_bh_wbc+0x681/0x890 [ 1014.845744][T25818] block_read_full_folio+0x264/0x8e0 [ 1014.851577][T25818] filemap_read_folio+0xfc/0x3b0 [ 1014.857051][T25818] do_read_cache_folio+0x2d7/0x6b0 [ 1014.862701][T25818] read_part_sector+0xd1/0x370 [ 1014.867991][T25818] adfspart_check_ICS+0x91/0x7d0 [ 1014.873460][T25818] bdev_disk_changed+0x7a3/0x1250 [ 1014.879019][T25818] blkdev_get_whole+0x187/0x290 [ 1014.884402][T25818] bdev_open+0x2c7/0xe40 [ 1014.889174][T25818] blkdev_open+0x34e/0x4f0 [ 1014.894125][T25818] do_dentry_open+0x6d8/0x1660 [ 1014.899436][T25818] vfs_open+0x82/0x3f0 [ 1014.904036][T25818] path_openat+0x208c/0x31a0 [ 1014.909160][T25818] do_file_open+0x20e/0x430 [ 1014.914192][T25818] do_sys_openat2+0x10d/0x1e0 [ 1014.919403][T25818] __x64_sys_openat+0x12d/0x210 [ 1014.924790][T25818] do_syscall_64+0x10b/0x860 [ 1014.929910][T25818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.936336][T25818] [ 1014.936336][T25818] -> #4 (set->srcu){.+.+}-{0:0}: [ 1014.943492][T25818] __synchronize_srcu+0xa2/0x300 [ 1014.948970][T25818] blk_mq_quiesce_queue+0x149/0x1c0 [ 1014.954719][T25818] elevator_switch+0x17b/0x7e0 [ 1014.960017][T25818] elevator_change+0x352/0x530 [ 1014.965309][T25818] elevator_set_default+0x29e/0x360 [ 1014.971044][T25818] blk_register_queue+0x48e/0x630 [ 1014.976618][T25818] __add_disk+0x73f/0xe40 [ 1014.981489][T25818] add_disk_fwnode+0x118/0x5c0 [ 1014.986797][T25818] nbd_dev_add+0x77a/0xb10 [ 1014.991752][T25818] nbd_init+0x291/0x2b0 [ 1014.996455][T25818] do_one_initcall+0x121/0x750 [ 1015.001758][T25818] kernel_init_freeable+0x6ea/0x7b0 [ 1015.007487][T25818] kernel_init+0x1f/0x1e0 [ 1015.012356][T25818] ret_from_fork+0x72b/0xd50 [ 1015.017481][T25818] ret_from_fork_asm+0x1a/0x30 [ 1015.022787][T25818] [ 1015.022787][T25818] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1015.030630][T25818] __mutex_lock+0x1a4/0x1b10 [ 1015.035757][T25818] elevator_change+0x1bc/0x530 [ 1015.041050][T25818] elevator_set_none+0x92/0xf0 [ 1015.046430][T25818] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 1015.052780][T25818] nbd_start_device+0x1a6/0xbd0 [ 1015.058173][T25818] nbd_genl_connect+0xff2/0x1a40 [ 1015.063747][T25818] genl_family_rcv_msg_doit+0x214/0x300 [ 1015.069830][T25818] genl_rcv_msg+0x560/0x800 [ 1015.074868][T25818] netlink_rcv_skb+0x159/0x420 [ 1015.080187][T25818] genl_rcv+0x28/0x40 [ 1015.084698][T25818] netlink_unicast+0x585/0x850 [ 1015.090050][T25818] netlink_sendmsg+0x8b0/0xda0 [ 1015.095367][T25818] ____sys_sendmsg+0x9e1/0xb70 [ 1015.100683][T25818] ___sys_sendmsg+0x190/0x1e0 [ 1015.105915][T25818] __sys_sendmsg+0x170/0x220 [ 1015.111043][T25818] do_syscall_64+0x10b/0x860 [ 1015.116160][T25818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.122585][T25818] [ 1015.122585][T25818] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1015.131226][T25818] blk_alloc_queue+0x610/0x790 [ 1015.136522][T25818] blk_mq_alloc_queue+0x174/0x290 [ 1015.142093][T25818] __blk_mq_alloc_disk+0x29/0x120 [ 1015.147664][T25818] nbd_dev_add+0x492/0xb10 [ 1015.152618][T25818] nbd_init+0x291/0x2b0 [ 1015.157331][T25818] do_one_initcall+0x121/0x750 [ 1015.162635][T25818] kernel_init_freeable+0x6ea/0x7b0 [ 1015.168363][T25818] kernel_init+0x1f/0x1e0 [ 1015.173231][T25818] ret_from_fork+0x72b/0xd50 [ 1015.178356][T25818] ret_from_fork_asm+0x1a/0x30 [ 1015.183664][T25818] [ 1015.183664][T25818] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1015.190898][T25818] fs_reclaim_acquire+0xc4/0x100 [ 1015.196390][T25818] prepare_alloc_pages+0x166/0x5f0 [ 1015.202054][T25818] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1015.208488][T25818] __alloc_pages_noprof+0xb/0x110 [ 1015.214050][T25818] pcpu_populate_chunk+0x118/0x990 [ 1015.219699][T25818] pcpu_alloc_noprof+0x881/0x1cc0 [ 1015.225262][T25818] bpf_map_alloc_percpu+0x9a/0xf0 [ 1015.230820][T25818] htab_map_alloc+0x1054/0x14e0 [ 1015.236197][T25818] map_create+0x84e/0x2bc0 [ 1015.241144][T25818] __sys_bpf+0x2091/0x4b90 [ 1015.246100][T25818] __x64_sys_bpf+0x7b/0xc0 [ 1015.251060][T25818] do_syscall_64+0x10b/0x860 [ 1015.256178][T25818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.262607][T25818] [ 1015.262607][T25818] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1015.270364][T25818] __lock_acquire+0x14b8/0x2630 [ 1015.275753][T25818] lock_acquire+0x1b1/0x370 [ 1015.280790][T25818] __mutex_lock+0x1a4/0x1b10 [ 1015.285909][T25818] pcpu_alloc_noprof+0xe87/0x1cc0 [ 1015.291473][T25818] padata_alloc_pd+0x97/0x980 [ 1015.296698][T25818] padata_alloc_shell+0x90/0x250 [ 1015.302183][T25818] pcrypt_create+0x12a/0x820 [ 1015.307315][T25818] cryptomgr_probe+0xb9/0x290 [ 1015.312533][T25818] kthread+0x370/0x450 [ 1015.317139][T25818] ret_from_fork+0x72b/0xd50 [ 1015.322265][T25818] ret_from_fork_asm+0x1a/0x30 [ 1015.327577][T25818] [ 1015.327577][T25818] other info that might help us debug this: [ 1015.327577][T25818] [ 1015.337802][T25818] Chain exists of: [ 1015.337802][T25818] pcpu_alloc_mutex --> sk_lock-AF_INET6 --> cpu_hotplug_lock [ 1015.337802][T25818] [ 1015.351132][T25818] Possible unsafe locking scenario: [ 1015.351132][T25818] [ 1015.358575][T25818] CPU0 CPU1 [ 1015.363940][T25818] ---- ---- [ 1015.369295][T25818] rlock(cpu_hotplug_lock); [ 1015.373895][T25818] lock(sk_lock-AF_INET6); [ 1015.380926][T25818] lock(cpu_hotplug_lock); [ 1015.387957][T25818] lock(pcpu_alloc_mutex); [ 1015.392468][T25818] [ 1015.392468][T25818] *** DEADLOCK *** [ 1015.392468][T25818] [ 1015.400606][T25818] 1 lock held by cryptomgr_probe/25818: [ 1015.406148][T25818] #0: ffffffff8e67c6f0 (cpu_hotplug_lock){++++}-{0:0}, at: padata_alloc_shell+0x83/0x250 [ 1015.416137][T25818] [ 1015.416137][T25818] stack backtrace: [ 1015.422023][T25818] CPU: 1 UID: 0 PID: 25818 Comm: cryptomgr_probe Tainted: G L syzkaller #0 PREEMPT(full) [ 1015.422074][T25818] Tainted: [L]=SOFTLOCKUP [ 1015.422087][T25818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1015.422109][T25818] Call Trace: [ 1015.422120][T25818] [ 1015.422135][T25818] dump_stack_lvl+0x100/0x190 [ 1015.422177][T25818] print_circular_bug.cold+0x178/0x1c7 [ 1015.422240][T25818] check_noncircular+0x146/0x160 [ 1015.422287][T25818] __lock_acquire+0x14b8/0x2630 [ 1015.422340][T25818] lock_acquire+0x1b1/0x370 [ 1015.422382][T25818] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 1015.422431][T25818] ? __pfx___might_resched+0x10/0x10 [ 1015.422487][T25818] __mutex_lock+0x1a4/0x1b10 [ 1015.422524][T25818] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 1015.422571][T25818] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 1015.422621][T25818] ? cryptomgr_probe+0xb9/0x290 [ 1015.422669][T25818] ? kthread+0x370/0x450 [ 1015.422707][T25818] ? ret_from_fork+0x72b/0xd50 [ 1015.422749][T25818] ? ret_from_fork_asm+0x1a/0x30 [ 1015.422802][T25818] ? __pfx___mutex_lock+0x10/0x10 [ 1015.422856][T25818] ? pcpu_alloc_noprof+0xe87/0x1cc0 [ 1015.422900][T25818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1015.422944][T25818] pcpu_alloc_noprof+0xe87/0x1cc0 [ 1015.423001][T25818] ? kasan_save_track+0x14/0x30 [ 1015.423052][T25818] padata_alloc_pd+0x97/0x980 [ 1015.423108][T25818] ? __pfx_cryptomgr_probe+0x10/0x10 [ 1015.423155][T25818] padata_alloc_shell+0x90/0x250 [ 1015.423208][T25818] ? kasan_save_track+0x14/0x30 [ 1015.423271][T25818] ? __pfx_cryptomgr_probe+0x10/0x10 [ 1015.423318][T25818] pcrypt_create+0x12a/0x820 [ 1015.423366][T25818] ? __pfx_cryptomgr_probe+0x10/0x10 [ 1015.423414][T25818] cryptomgr_probe+0xb9/0x290 [ 1015.423463][T25818] ? kthread+0x13a/0x450 [ 1015.423501][T25818] ? __pfx_cryptomgr_probe+0x10/0x10 [ 1015.423548][T25818] kthread+0x370/0x450 [ 1015.423585][T25818] ? __pfx_kthread+0x10/0x10 [ 1015.423634][T25818] ret_from_fork+0x72b/0xd50 [ 1015.423677][T25818] ? __pfx_ret_from_fork+0x10/0x10 [ 1015.423721][T25818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1015.423765][T25818] ? __switch_to+0x800/0x1100 [ 1015.423816][T25818] ? __switch_to_asm+0x39/0x70 [ 1015.423865][T25818] ? __pfx_kthread+0x10/0x10 [ 1015.423906][T25818] ret_from_fork_asm+0x1a/0x30 [ 1015.423967][T25818] [ 1015.787731][ T5623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.796873][T25816] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1015.842435][T25816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1015.899171][ T30] audit: type=1800 audit(1779780725.734:329): pid=25816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6947" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=1368 res=0 errno=0 [ 1015.948453][T21612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.