last executing test programs: 6m34.373121061s ago: executing program 1 (id=218): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ptrace(0x8, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x9) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@iter={0x0}}, 0x20) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) 6m31.066125393s ago: executing program 1 (id=224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 6m29.275723452s ago: executing program 1 (id=228): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x140, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) pread64(r1, 0x0, 0x0, 0x1) close_range(r0, r0, 0x0) 6m29.054623177s ago: executing program 1 (id=230): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x180) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143041, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 6m27.343229054s ago: executing program 1 (id=232): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ptrace(0x8, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x9) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@iter={0x0}}, 0x20) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) 6m21.455159712s ago: executing program 1 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 6m6.347441699s ago: executing program 32 (id=236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 10.668340649s ago: executing program 4 (id=1126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001bc0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 10.430631034s ago: executing program 4 (id=1128): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x243a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) 10.293742957s ago: executing program 4 (id=1129): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.971292143s ago: executing program 2 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85}, 0x50) 9.696052879s ago: executing program 0 (id=1133): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x7, 0x6, 0x0, 0xffdffffc, 0x6, "0000100000a61c00"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000300)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x3, 0x2, 0x0, 0x86, "00000000000000000000ffff00000000000002"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000005fc0)={0x2020}, 0x2020) 7.885043319s ago: executing program 2 (id=1134): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) socket$packet(0x11, 0x3, 0x300) 6.800664092s ago: executing program 0 (id=1135): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x0, 0x800, 0x6, 0x8000001000000000}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) r1 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="20080e00000000008d23bb97"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000580)={0x40, 0xa, 0x6, "3b4777ab26d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.382883122s ago: executing program 4 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 6.150659886s ago: executing program 3 (id=1138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001bc0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 5.702733526s ago: executing program 3 (id=1139): r0 = fsopen(&(0x7f0000000140)='msdos\x00', 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) close(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$pppoe(0x18, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4.405975964s ago: executing program 4 (id=1140): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") getxattr(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=@known='user.incfs.metadata\x00', 0x0, 0x0) 4.239098328s ago: executing program 3 (id=1141): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{}, {@noquota}, {@noquota}, {@nodioread_nolock}, {@auto_da_alloc}, {@grpid}]}, 0x5, 0x5a7, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r2, 0x0, 0xfffe80) 3.557213103s ago: executing program 0 (id=1142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85}, 0x50) 3.555860903s ago: executing program 3 (id=1143): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x7, 0x6, 0x0, 0xffdffffc, 0x6, "0000100000a61c00"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000300)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x3, 0x2, 0x0, 0x86, "00000000000000000000ffff00000000000002"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) read$FUSE(r3, &(0x7f0000005fc0)={0x2020}, 0x2020) 3.521504574s ago: executing program 2 (id=1144): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 1.665554834s ago: executing program 0 (id=1145): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000240)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.218539313s ago: executing program 2 (id=1146): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 798.476873ms ago: executing program 3 (id=1147): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 557.871998ms ago: executing program 4 (id=1148): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@nodiscard}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000140)={[{@noblock_validity}, {@dioread_nolock}, {@noauto_da_alloc}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) 443.66894ms ago: executing program 2 (id=1149): r0 = fsopen(&(0x7f0000000140)='msdos\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$pppoe(0x18, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 395.597991ms ago: executing program 3 (id=1150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000180)="650f01d1ddc60f783066baf80cb8ce40ff8cef66bafc0c66b82f0066efb8060000000f23c00f21f83503000d000f23f866baf80cb87134d38aef66bafc0cb031ee360f01cb0f3066ba420066b8b10066efb8010000000f01d9", 0x59}], 0x1, 0xb, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 242.589705ms ago: executing program 0 (id=1151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x44, r1, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x80076}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gretap0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xfe9d128487f77a00}, 0xc2010) 152.245837ms ago: executing program 0 (id=1152): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 2 (id=1153): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x44) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$9p(0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): 5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.340534][ T6110] virtio-fs: tag not found [ 122.373119][ T6110] "syz.2.85" (6110) uses obsolete ecb(arc4) skcipher [ 123.479316][ T6115] loop3: detected capacity change from 0 to 1764 [ 124.425622][ T6129] loop3: detected capacity change from 0 to 1024 [ 124.471400][ T6129] hfsplus: invalid length 32517 has been corrected to 255 [ 124.626088][ T28] audit: type=1800 audit(1784753028.732:2): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.90" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 124.672708][ T6107] loop1: detected capacity change from 0 to 32768 [ 124.787137][ T11] hfsplus: b-tree write err: -5, ino 20 [ 126.093899][ T6148] loop3: detected capacity change from 0 to 512 [ 126.143376][ T6148] EXT4-fs (loop3): 1 truncate cleaned up [ 126.175388][ T6148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.388045][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.438327][ T6156] loop1: detected capacity change from 0 to 1764 [ 126.618577][ T6160] loop3: detected capacity change from 0 to 1024 [ 126.641976][ T6160] EXT4-fs: Ignoring removed bh option [ 128.416762][ T6160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.448428][ T6167] loop1: detected capacity change from 0 to 512 [ 128.522140][ T6167] loop1: detected capacity change from 0 to 8 [ 128.605355][ T6167] SQUASHFS error: lzo decompression failed, data probably corrupt [ 128.640634][ T6167] SQUASHFS error: Failed to read block 0x91: -5 [ 128.665175][ T6167] SQUASHFS error: Unable to read metadata cache entry [8f] [ 128.672517][ T6167] SQUASHFS error: Unable to read inode 0x11f [ 128.716345][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.821032][ T6167] loop1: detected capacity change from 0 to 2048 [ 128.923286][ T6167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.973756][ T6167] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.226993][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.554957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.959281][ T6196] loop2: detected capacity change from 0 to 1024 [ 131.967510][ T6196] EXT4-fs: Ignoring removed bh option [ 132.068496][ T6196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.307193][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.000560][ T6205] virtio-fs: tag not found [ 133.034558][ T6205] "syz.2.116" (6205) uses obsolete ecb(arc4) skcipher [ 133.705341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 134.049508][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.064714][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.077349][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.294770][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 134.303526][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.334923][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.354740][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.380298][ T23] usb 1-1: config 0 descriptor?? [ 134.715113][ T6202] loop3: detected capacity change from 0 to 32768 [ 134.860676][ T28] audit: type=1800 audit(1784753038.962:3): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.115" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 135.458842][ T6214] loop3: detected capacity change from 0 to 512 [ 135.524900][ T5943] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.557736][ T6214] loop3: detected capacity change from 0 to 8 [ 135.563562][ T5943] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.944568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.674956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 136.984549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.084629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.504559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.584552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.779247][ T6214] SQUASHFS error: lzo decompression failed, data probably corrupt [ 137.824725][ T6214] SQUASHFS error: Failed to read block 0x91: -5 [ 137.857014][ T23] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 137.858145][ T6214] SQUASHFS error: Unable to read metadata cache entry [8f] [ 137.905092][ T23] usb 1-1: USB disconnect, device number 3 [ 137.924685][ T6214] SQUASHFS error: Unable to read inode 0x11f [ 138.061138][ T6214] loop3: detected capacity change from 0 to 2048 [ 138.228465][ T6214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.279716][ T6226] loop2: detected capacity change from 0 to 1024 [ 138.286610][ T6214] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.308857][ T6226] EXT4-fs: Ignoring removed bh option [ 138.372651][ T6226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.511394][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.534464][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.797722][ T6221] loop0: detected capacity change from 0 to 32768 [ 138.848617][ T6233] 9pnet_fd: Insufficient options for proto=fd [ 138.873991][ T6221] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.991632][ T6221] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 139.020843][ T6221] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30 [ 139.064955][ T6221] XFS (loop0): Ending clean mount [ 139.218407][ T5772] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.262971][ T6247] loop3: detected capacity change from 0 to 512 [ 139.326881][ T6247] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.127: bg 0: block 5: invalid block bitmap [ 139.378433][ T6247] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 139.388926][ T6247] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.127: invalid indirect mapped block 3 (level 2) [ 139.435216][ T6247] EXT4-fs (loop3): 1 orphan inode deleted [ 139.456184][ T6247] EXT4-fs (loop3): 1 truncate cleaned up [ 139.463296][ T6247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.203515][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.362009][ T6264] xt_CT: No such helper "snmp_trap" [ 141.693938][ T5815] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 141.844918][ T6266] loop1: detected capacity change from 0 to 32768 [ 141.923031][ T6266] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 141.932254][ T6266] dlm: no local IP address has been set [ 141.939071][ T6266] dlm: cannot start dlm midcomms -107 [ 141.944729][ T6266] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 142.035358][ T5943] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.839021][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 142.859590][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.884821][ T5815] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 142.893953][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.931020][ T6280] loop1: detected capacity change from 0 to 512 [ 142.947922][ T5815] usb 3-1: config 0 descriptor?? [ 143.000467][ T6277] 9pnet_fd: Insufficient options for proto=fd [ 143.079097][ T6280] loop1: detected capacity change from 0 to 2048 [ 143.168794][ T6280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.220096][ T6280] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.623788][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.324143][ T5815] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 144.520923][ T5815] usb 3-1: USB disconnect, device number 3 [ 145.150945][ T6304] loop1: detected capacity change from 0 to 512 [ 145.266472][ T6304] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.741345][ T6304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.781334][ T6304] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.638626][ T28] audit: type=1800 audit(1784753050.742:4): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.138" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 146.938903][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.076925][ T6325] loop1: detected capacity change from 0 to 1024 [ 147.096776][ T6325] EXT4-fs: Ignoring removed bh option [ 147.160388][ T6327] loop3: detected capacity change from 0 to 512 [ 147.167286][ T6325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.304690][ T5771] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.314307][ T6332] loop2: detected capacity change from 0 to 7 [ 147.325594][ T6332] Dev loop2: unable to read RDB block 7 [ 147.331707][ T6332] loop2: AHDI p1 p2 p3 [ 147.338561][ T6327] loop3: detected capacity change from 0 to 8 [ 147.344858][ T6332] loop2: partition table partially beyond EOD, truncated [ 147.345354][ T6332] loop2: p1 start 1601398130 is beyond EOD, truncated [ 147.360246][ T5771] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.370910][ T6332] loop2: p2 start 1702059890 is beyond EOD, truncated [ 147.380647][ T6327] SQUASHFS error: lzo decompression failed, data probably corrupt [ 147.428438][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.438080][ T6327] SQUASHFS error: Failed to read block 0x91: -5 [ 147.455772][ T6327] SQUASHFS error: Unable to read metadata cache entry [8f] [ 147.463220][ T6327] SQUASHFS error: Unable to read inode 0x11f [ 147.580478][ T6327] loop3: detected capacity change from 0 to 2048 [ 147.636684][ T6327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.717537][ T5815] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.728924][ T6327] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.900828][ T6345] loop1: detected capacity change from 0 to 512 [ 147.942199][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.954748][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 147.963407][ T6345] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.153: bg 0: block 5: invalid block bitmap [ 147.985017][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.022532][ T6345] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 148.045274][ T6345] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.153: invalid indirect mapped block 3 (level 2) [ 148.063696][ T5815] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.067032][ T6345] EXT4-fs (loop1): 1 orphan inode deleted [ 148.091575][ T6345] EXT4-fs (loop1): 1 truncate cleaned up [ 148.107339][ T6345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.125015][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.166256][ T5815] usb 1-1: config 0 descriptor?? [ 148.478920][ T6353] loop3: detected capacity change from 0 to 4096 [ 148.540834][ T6353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.599200][ T6353] Quota error (device loop3): do_check_range: Getting block 1024 out of range 0-5 [ 148.721270][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.888873][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.421970][ T5815] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 150.480180][ T5815] usb 1-1: USB disconnect, device number 4 [ 151.055575][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 151.128389][ T6367] netlink: 5 bytes leftover after parsing attributes in process `syz.2.160'. [ 151.184929][ T6367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.964700][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 154.164683][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 154.176567][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.198328][ T788] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.225747][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.257659][ T788] usb 3-1: config 0 descriptor?? [ 154.444647][ T789] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 154.638724][ T789] usb 4-1: Using ep0 maxpacket: 32 [ 154.654186][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.672868][ T789] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 154.690943][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.721908][ T789] usb 4-1: config 0 descriptor?? [ 155.015911][ T6408] loop1: detected capacity change from 0 to 32768 [ 155.162377][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.202419][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.288127][ T789] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0001/input/input5 [ 155.463331][ T789] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:5543:0042.0001/input/input6 [ 155.588579][ T789] uclogic 0003:5543:0042.0001: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.3-1/input0 [ 155.641097][ T789] usb 4-1: USB disconnect, device number 4 [ 155.827891][ T6409] fido_id[6409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 155.868427][ T6409] fido_id (6409) used greatest stack depth: 20520 bytes left [ 158.220767][ T788] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 158.534661][ T788] usb 3-1: USB disconnect, device number 4 [ 158.652899][ T28] audit: type=1326 audit(1784753062.722:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc274f9de99 code=0x7ffc0000 [ 159.316593][ T28] audit: type=1326 audit(1784753062.722:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc274f9de99 code=0x7ffc0000 [ 159.840086][ T28] audit: type=1326 audit(1784753062.722:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fc274f9de99 code=0x7ffc0000 [ 160.054868][ T28] audit: type=1326 audit(1784753062.722:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc274f9de99 code=0x7ffc0000 [ 160.119263][ T28] audit: type=1326 audit(1784753062.722:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc274f9de99 code=0x7ffc0000 [ 160.164676][ T28] audit: type=1326 audit(1784753062.722:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc274f9de99 code=0x7ffc0000 [ 160.188817][ T28] audit: type=1326 audit(1784753062.722:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc274f9de99 code=0x7ffc0000 [ 160.233148][ T28] audit: type=1326 audit(1784753062.722:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc274f9de99 code=0x7ffc0000 [ 160.271662][ T28] audit: type=1326 audit(1784753062.732:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc274f9de99 code=0x7ffc0000 [ 160.339990][ T28] audit: type=1326 audit(1784753062.732:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc274f9de99 code=0x7ffc0000 [ 160.863030][ T6441] loop1: detected capacity change from 0 to 4096 [ 160.919078][ T6441] NILFS (loop1): invalid segment: Checksum error in segment payload [ 160.950141][ T6441] NILFS (loop1): trying rollback from an earlier position [ 161.048997][ T6441] NILFS (loop1): recovery complete [ 161.076683][ T6445] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.490740][ T6451] loop1: detected capacity change from 0 to 1024 [ 161.507904][ T6451] EXT4-fs: Ignoring removed bh option [ 161.681379][ T6451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.471498][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.640529][ T6469] loop1: detected capacity change from 0 to 32768 [ 163.642224][ T6486] loop2: detected capacity change from 0 to 1024 [ 163.671675][ T6486] EXT4-fs: Ignoring removed bh option [ 163.689488][ T6469] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.753569][ T6486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.924421][ T6469] XFS (loop1): Ending clean mount [ 163.959348][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.192001][ T5769] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.937232][ T6510] Zero length message leads to an empty skb [ 166.984769][ T6529] loop2: detected capacity change from 0 to 512 [ 168.004254][ T6529] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.211: EA inode hash validation failed [ 168.018133][ T6529] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 168.032787][ T6529] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.211: corrupted inode contents [ 168.054070][ T6529] EXT4-fs (loop2): Remounting filesystem read-only [ 168.060891][ T6529] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -5) [ 168.069969][ T6529] EXT4-fs (loop2): 1 orphan inode deleted [ 168.076687][ T6529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.269216][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.833975][ T6543] veth0: entered promiscuous mode [ 168.840614][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 169.520938][ T6539] veth0: left promiscuous mode [ 172.109767][ T6560] warning: `syz.0.221' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 173.007907][ T6564] netlink: 5 bytes leftover after parsing attributes in process `syz.3.223'. [ 173.224598][ T6564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.342331][ T6574] loop0: detected capacity change from 0 to 4096 [ 174.528457][ T6578] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.434053][ T6586] loop0: detected capacity change from 0 to 512 [ 175.443937][ T6586] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.164712][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 177.164751][ T28] audit: type=1804 audit(1784753081.192:17): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.229" name="/newroot/45/file0/bus" dev="loop0" ino=1048592 res=1 errno=0 [ 178.577683][ T5781] Bluetooth: hci3: link tx timeout [ 178.584637][ T5781] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.729407][ T788] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 179.160406][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 179.178080][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.202757][ T788] usb 4-1: config 0 has no interfaces? [ 179.240478][ T788] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.274591][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.296944][ T788] usb 4-1: config 0 descriptor?? [ 179.529928][ T23] usb 4-1: USB disconnect, device number 5 [ 182.604245][ T5082] Bluetooth: hci3: command 0x0406 tx timeout [ 183.065765][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 183.272071][ T6622] loop2: detected capacity change from 0 to 512 [ 183.290000][ T23] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 183.335089][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.357275][ T23] usb 4-1: config 0 descriptor?? [ 183.362380][ T6622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.401011][ T23] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 183.434558][ T6622] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.543926][ T6627] loop0: detected capacity change from 0 to 512 [ 183.553833][ T6627] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 183.578629][ T6627] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 183.792571][ T6627] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.240: bg 0: block 104: invalid block bitmap [ 183.845082][ T23] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 183.874171][ T6627] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 183.959134][ T6627] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.240: invalid indirect mapped block 1 (level 1) [ 184.007459][ T6627] EXT4-fs (loop0): 1 truncate cleaned up [ 184.014400][ T6627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.042693][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.189605][ T23] gspca_cpia1: usb_control_msg 03, error -71 [ 185.205784][ T23] cpia1 4-1:0.0: unexpected systemstate: 00 [ 185.216177][ T23] usb 4-1: USB disconnect, device number 6 [ 185.447753][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.865484][ T6640] loop3: detected capacity change from 0 to 4096 [ 185.908901][ T6640] NILFS (loop3): invalid segment: Checksum error in segment payload [ 185.939975][ T6640] NILFS (loop3): trying rollback from an earlier position [ 185.993023][ T6640] NILFS (loop3): recovery complete [ 186.025180][ T6643] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.125261][ T28] audit: type=1800 audit(1784753090.242:18): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.244" name="file2" dev="loop3" ino=12 res=0 errno=0 [ 191.046777][ T5817] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 191.278830][ T5817] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 191.304636][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 191.324608][ T5817] usb 4-1: Product: syz [ 191.328999][ T5817] usb 4-1: SerialNumber: syz [ 191.358982][ T5817] usb 4-1: config 0 descriptor?? [ 191.764704][ T5817] hso 4-1:0.0: Can't find BULK IN endpoint [ 192.030748][ T5817] usb 4-1: USB disconnect, device number 7 [ 192.281918][ T6684] loop0: detected capacity change from 0 to 512 [ 192.427556][ T6684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.449142][ T6684] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.374799][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.127767][ T6699] overlayfs: failed to resolve './file1': -2 [ 194.574887][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.592248][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.025861][ T6717] xt_l2tp: missing protocol rule (udp|l2tpip) [ 197.901992][ T6722] netlink: 44 bytes leftover after parsing attributes in process `syz.2.270'. [ 198.004710][ T6722] loop7: detected capacity change from 0 to 16384 [ 198.455273][ T6726] loop7: detected capacity change from 16384 to 16383 [ 199.666659][ T6731] loop3: detected capacity change from 0 to 131072 [ 200.038674][ T6731] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 200.418178][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.431342][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.442390][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.457447][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.465733][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.474405][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.580076][ T6731] XFS (loop3): Starting recovery (logdev: internal) [ 200.665468][ T6731] XFS (loop3): Ending recovery (logdev: internal) [ 200.703365][ T6731] process 'syz.3.273' launched './file1' with NULL argv: empty string added [ 200.786231][ T5770] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 200.804462][ T6752] loop2: detected capacity change from 0 to 64 [ 200.899732][ T6752] MINIX-fs: mounting file system with errors, running fsck is recommended [ 201.098634][ T1147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.409491][ T1147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.049962][ T5781] Bluetooth: hci0: command tx timeout [ 203.800854][ T1147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.983045][ T1147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.034789][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.021664][ T5082] Bluetooth: hci0: command tx timeout [ 206.185317][ T23] usb 3-1: config 32 has an invalid interface number: 5 but max is 0 [ 206.204912][ T23] usb 3-1: config 32 has no interface number 0 [ 206.221492][ T23] usb 3-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 206.245980][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.284156][ T23] usb-storage 3-1:32.5: USB Mass Storage device detected [ 206.300756][ T6745] chnl_net:caif_netlink_parms(): no params data found [ 206.358225][ T23] usb-storage 3-1:32.5: Quirks match for vid 057b pid 0000: 1 [ 206.490812][ T23] usb 3-1: USB disconnect, device number 5 [ 206.876352][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.883590][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.924141][ T6745] bridge_slave_0: entered allmulticast mode [ 206.935842][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 206.973176][ T6745] bridge_slave_0: entered promiscuous mode [ 207.164621][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 207.178735][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.204717][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 207.216189][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.218692][ T8] usb 1-1: can't read configurations, error -71 [ 207.223523][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.253766][ T6745] bridge_slave_1: entered allmulticast mode [ 207.270790][ T6745] bridge_slave_1: entered promiscuous mode [ 207.521678][ T6745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.583084][ T6745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.144618][ T5082] Bluetooth: hci0: command tx timeout [ 208.687458][ T6745] team0: Port device team_slave_0 added [ 208.708823][ T6745] team0: Port device team_slave_1 added [ 208.873410][ T6818] netlink: 44 bytes leftover after parsing attributes in process `syz.0.296'. [ 210.039873][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.082430][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.172749][ T5784] Bluetooth: hci0: command tx timeout [ 210.240508][ T6745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.322322][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.359608][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.454575][ T6745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.755181][ T6832] 9pnet_fd: Insufficient options for proto=fd [ 211.160485][ T6745] hsr_slave_0: entered promiscuous mode [ 211.204833][ T6745] hsr_slave_1: entered promiscuous mode [ 211.249454][ T6745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.274802][ T6745] Cannot create hsr debugfs directory [ 212.005985][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 212.011962][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 212.295517][ T1147] hsr_slave_0: left promiscuous mode [ 212.330766][ T1147] hsr_slave_1: left promiscuous mode [ 212.341108][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.365056][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.382532][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.404774][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.417184][ T1147] bridge_slave_1: left allmulticast mode [ 212.422921][ T1147] bridge_slave_1: left promiscuous mode [ 212.476909][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.524952][ T1147] bridge_slave_0: left allmulticast mode [ 212.530689][ T1147] bridge_slave_0: left promiscuous mode [ 212.554039][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.618252][ T1147] veth1_macvtap: left promiscuous mode [ 212.625403][ T1147] veth0_macvtap: left promiscuous mode [ 212.632048][ T1147] veth1_vlan: left promiscuous mode [ 212.638091][ T1147] veth0_vlan: left promiscuous mode [ 212.666921][ T6843] loop0: detected capacity change from 0 to 32768 [ 214.607600][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 214.717937][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 214.809029][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.930322][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.494711][ T788] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 215.697233][ T1147] bond0 (unregistering): Released all slaves [ 215.705591][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.735898][ T788] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 215.764610][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.806108][ T788] usb 1-1: config 0 descriptor?? [ 215.823453][ T788] pwc: Askey VC010 type 2 USB webcam detected. [ 216.316563][ T788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 216.335031][ T788] pwc: recv_control_msg error -32 req 02 val 2700 [ 216.385875][ T6745] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.393690][ T788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 216.405241][ T788] pwc: recv_control_msg error -32 req 04 val 1000 [ 216.446835][ T6745] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.468764][ T788] pwc: recv_control_msg error -32 req 04 val 1300 [ 216.497059][ T788] pwc: recv_control_msg error -32 req 04 val 1400 [ 216.514779][ T6879] 9pnet_fd: Insufficient options for proto=fd [ 216.515248][ T788] pwc: recv_control_msg error -32 req 02 val 2000 [ 216.547130][ T6745] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.641690][ T6745] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.790842][ T788] pwc: recv_control_msg error -71 req 04 val 1500 [ 216.813775][ T788] pwc: recv_control_msg error -71 req 02 val 2500 [ 216.849852][ T788] pwc: recv_control_msg error -71 req 02 val 2400 [ 216.876710][ T788] pwc: recv_control_msg error -71 req 02 val 2600 [ 216.903851][ T788] pwc: recv_control_msg error -71 req 02 val 2900 [ 216.932250][ T788] pwc: recv_control_msg error -71 req 02 val 2800 [ 216.964011][ T788] pwc: recv_control_msg error -71 req 04 val 1100 [ 216.998422][ T788] pwc: recv_control_msg error -71 req 04 val 1200 [ 217.085545][ T788] pwc: Registered as video103. [ 217.093053][ T788] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 217.162057][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.206031][ T788] usb 1-1: USB disconnect, device number 7 [ 217.254078][ T6893] loop3: detected capacity change from 0 to 1024 [ 217.282022][ T6745] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.318962][ T6893] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 217.373683][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.380989][ T6075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.437182][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.444647][ T6075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.472953][ T6893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.911898][ T6908] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 217.966289][ T6909] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 217.979002][ T6909] EXT4-fs (loop3): This should not happen!! Data will be lost [ 217.979002][ T6909] [ 217.989033][ T6909] EXT4-fs (loop3): Total free blocks count 0 [ 217.995102][ T6909] EXT4-fs (loop3): Free/Dirty block details [ 218.001117][ T6909] EXT4-fs (loop3): free_blocks=20480 [ 218.006543][ T6909] EXT4-fs (loop3): dirty_blocks=80 [ 218.011702][ T6909] EXT4-fs (loop3): Block reservation details [ 218.017791][ T6909] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 218.035848][ T6908] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 219.643077][ T6745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.412176][ T6922] loop0: detected capacity change from 0 to 64 [ 220.618285][ T6745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.793251][ T6926] hfs: request for non-existent node 131072 in B*Tree [ 220.830959][ T6926] hfs: request for non-existent node 131072 in B*Tree [ 220.895742][ T6922] hfs: request for non-existent node 131072 in B*Tree [ 220.902581][ T6922] hfs: request for non-existent node 131072 in B*Tree [ 221.102282][ T5772] hfs: request for non-existent node 131072 in B*Tree [ 221.594940][ T6950] 9pnet_fd: Insufficient options for proto=fd [ 221.860845][ T6745] veth0_vlan: entered promiscuous mode [ 221.947935][ T6745] veth1_vlan: entered promiscuous mode [ 222.069342][ T6745] veth0_macvtap: entered promiscuous mode [ 222.115512][ T6745] veth1_macvtap: entered promiscuous mode [ 222.176235][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.223282][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.244363][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.274560][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.314594][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.347598][ T6961] loop3: detected capacity change from 0 to 64 [ 222.354575][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.400769][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.447279][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.510292][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.530917][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.578918][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.628156][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.665281][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.702115][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.742809][ T6745] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.772031][ T6745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.798389][ T6745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.975999][ T6745] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.528480][ T6976] fuse: root generation should be zero [ 225.487348][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.654844][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.782732][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.839355][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.266239][ T6993] loop4: detected capacity change from 0 to 64 [ 226.790839][ T6999] 9pnet_fd: Insufficient options for proto=fd [ 227.043845][ T7007] loop3: detected capacity change from 0 to 64 [ 227.089630][ T7007] MINIX-fs: mounting file system with errors, running fsck is recommended [ 230.677793][ T7034] xt_l2tp: missing protocol rule (udp|l2tpip) [ 231.315151][ T7040] syz.2.338: attempt to access beyond end of device [ 231.315151][ T7040] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 231.352559][ T7040] hfsplus: unable to find HFS+ superblock [ 231.734198][ T7038] loop2: detected capacity change from 0 to 128 [ 231.743633][ T7038] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 231.758984][ T7043] loop3: detected capacity change from 0 to 64 [ 231.832519][ T7043] MINIX-fs: mounting file system with errors, running fsck is recommended [ 235.183368][ T7078] xt_l2tp: missing protocol rule (udp|l2tpip) [ 236.987355][ T7094] loop0: detected capacity change from 0 to 64 [ 237.120334][ T7094] MINIX-fs: mounting file system with errors, running fsck is recommended [ 243.455852][ T7137] loop4: detected capacity change from 0 to 64 [ 243.493936][ T7137] MINIX-fs: mounting file system with errors, running fsck is recommended [ 243.822884][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.364'. [ 244.774895][ T7159] loop3: detected capacity change from 0 to 64 [ 245.173947][ T7161] hfs: request for non-existent node 131072 in B*Tree [ 245.299782][ T7159] overlayfs: failed to resolve './bus': -2 [ 245.369684][ T7163] loop0: detected capacity change from 0 to 128 [ 245.475840][ T7161] hfs: request for non-existent node 131072 in B*Tree [ 245.565090][ T7163] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 245.626056][ T5770] hfs: request for non-existent node 131072 in B*Tree [ 247.672792][ T7167] loop4: detected capacity change from 0 to 4096 [ 247.807808][ T7167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.192752][ T6745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.232018][ T7209] 9pnet_fd: Insufficient options for proto=fd [ 253.139640][ T7227] loop0: detected capacity change from 0 to 4096 [ 253.215819][ T7227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.372625][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.609150][ T7253] loop0: detected capacity change from 0 to 64 [ 255.720006][ T7253] MINIX-fs: mounting file system with errors, running fsck is recommended [ 256.010668][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.017398][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.783645][ T7283] xt_l2tp: missing protocol rule (udp|l2tpip) [ 261.578192][ T5781] Bluetooth: hci0: link tx timeout [ 261.583912][ T5781] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.927869][ T7291] autofs4:pid:7291:autofs_fill_super: called with bogus options [ 263.473056][ T7310] 9pnet_fd: Insufficient options for proto=fd [ 263.687150][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 264.320911][ T7303] loop2: detected capacity change from 0 to 32768 [ 264.366547][ T7303] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 264.555995][ T7303] XFS (loop2): Ending clean mount [ 264.615876][ T7303] XFS (loop2): Quotacheck needed: Please wait. [ 264.796382][ T7303] XFS (loop2): Quotacheck: Done. [ 265.657870][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.232770][ T7367] netlink: 5 bytes leftover after parsing attributes in process `syz.3.404'. [ 268.315404][ T7367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.643486][ T7429] loop0: detected capacity change from 0 to 1024 [ 272.733031][ T7429] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.862847][ T7429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.306553][ T7442] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 273.345719][ T7442] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 273.367166][ T7442] EXT4-fs (loop0): This should not happen!! Data will be lost [ 273.367166][ T7442] [ 273.377109][ T7442] EXT4-fs (loop0): Total free blocks count 0 [ 273.384433][ T7442] EXT4-fs (loop0): Free/Dirty block details [ 273.390716][ T7442] EXT4-fs (loop0): free_blocks=20480 [ 273.396275][ T7442] EXT4-fs (loop0): dirty_blocks=80 [ 273.401565][ T7442] EXT4-fs (loop0): Block reservation details [ 273.407842][ T7442] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 273.806377][ T6075] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 274.301817][ T7427] netlink: 5 bytes leftover after parsing attributes in process `syz.2.416'. [ 274.329512][ T7427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.611007][ T7458] loop0: detected capacity change from 0 to 512 [ 278.245277][ T7480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.427'. [ 279.700774][ T7496] syz.0.431 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 280.566480][ T7495] loop3: detected capacity change from 0 to 1024 [ 280.575765][ T7495] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 280.861321][ T7495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.127999][ T7510] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 282.165481][ T7510] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 282.188115][ T7510] EXT4-fs (loop3): This should not happen!! Data will be lost [ 282.188115][ T7510] [ 282.198139][ T7510] EXT4-fs (loop3): Total free blocks count 0 [ 282.204306][ T7510] EXT4-fs (loop3): Free/Dirty block details [ 282.210440][ T7510] EXT4-fs (loop3): free_blocks=20480 [ 282.216046][ T7510] EXT4-fs (loop3): dirty_blocks=80 [ 282.221330][ T7510] EXT4-fs (loop3): Block reservation details [ 282.227572][ T7510] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 282.725073][ T6075] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 283.437559][ T7508] netlink: 5 bytes leftover after parsing attributes in process `syz.0.433'. [ 283.475687][ T7508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.965133][ T7517] loop2: detected capacity change from 0 to 32768 [ 284.131315][ T28] audit: type=1800 audit(1784753188.232:19): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.436" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 287.872097][ T7562] 9pnet_fd: Insufficient options for proto=fd [ 289.107851][ T28] audit: type=1326 audit(1784753193.222:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.4.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae7ef9de99 code=0x0 [ 289.388752][ T7583] netlink: 5 bytes leftover after parsing attributes in process `syz.2.448'. [ 289.398982][ T7583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.079424][ T7622] 9pnet_fd: Insufficient options for proto=fd [ 295.166951][ T7655] loop0: detected capacity change from 0 to 1024 [ 295.244796][ T7655] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.291044][ T7659] input: syz1 as /devices/virtual/input/input8 [ 295.338348][ T7655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.955621][ T7672] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 295.990285][ T7672] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 296.264994][ T7672] EXT4-fs (loop0): This should not happen!! Data will be lost [ 296.264994][ T7672] [ 296.275325][ T7672] EXT4-fs (loop0): Total free blocks count 0 [ 296.281720][ T7672] EXT4-fs (loop0): Free/Dirty block details [ 296.287802][ T7672] EXT4-fs (loop0): free_blocks=20480 [ 296.293210][ T7672] EXT4-fs (loop0): dirty_blocks=80 [ 296.307301][ T7672] EXT4-fs (loop0): Block reservation details [ 296.313447][ T7672] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 296.686111][ T59] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 298.105258][ T28] audit: type=1800 audit(1784753202.022:21): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.464" name="file0" dev="overlay" ino=799 res=0 errno=0 [ 301.652273][ T7735] loop2: detected capacity change from 0 to 64 [ 301.664633][ T5839] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 301.692262][ T7735] overlayfs: failed to resolve './bus': -2 [ 301.874773][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 301.885791][ T5839] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 301.894102][ T5839] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 301.905735][ T5839] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 301.916887][ T5839] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 301.930413][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0 [ 301.940811][ T5839] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 301.950636][ T5839] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 301.960414][ T5839] usb 4-1: Product: syz [ 301.964691][ T5839] usb 4-1: Manufacturer: syz [ 301.969340][ T5839] usb 4-1: SerialNumber: syz [ 301.978962][ T5839] usb 4-1: config 0 descriptor?? [ 301.987688][ T5839] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 302.003241][ T5839] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 302.354121][ T7722] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 302.377418][ T5839] usb 4-1: USB disconnect, device number 8 [ 302.383360][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 302.462122][ T5839] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 303.344636][ T789] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 303.365848][ T7753] 9pnet_fd: Insufficient options for proto=fd [ 303.567313][ T789] usb 1-1: Using ep0 maxpacket: 8 [ 303.578402][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.608360][ T789] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 303.631360][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.657876][ T789] usb 1-1: config 0 descriptor?? [ 303.715140][ T789] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 303.935265][ T5814] usb 1-1: USB disconnect, device number 8 [ 304.221287][ T7766] netlink: 44 bytes leftover after parsing attributes in process `syz.0.493'. [ 307.224689][ T5814] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 309.127230][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 309.139414][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.151187][ T5814] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 309.163115][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.242765][ T5814] usb 5-1: config 0 descriptor?? [ 309.715215][ T5814] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 309.935496][ T5817] usb 5-1: USB disconnect, device number 2 [ 312.475404][ T7830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'. [ 313.475698][ T5815] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 313.734729][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 313.770282][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 313.889431][ T5815] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 314.000075][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.174343][ T5815] usb 3-1: config 0 descriptor?? [ 314.355525][ T5815] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 314.584182][ T5839] usb 3-1: USB disconnect, device number 6 [ 315.723272][ T7872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.525'. [ 318.269286][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.276166][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.839592][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.537'. [ 321.939010][ T7925] binder: BINDER_SET_CONTEXT_MGR already set [ 322.044897][ T7925] binder: 7924:7925 ioctl 4018620d 200000001000 returned -16 [ 322.394552][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 323.194658][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 323.217466][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.233284][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 323.244672][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.259451][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.290182][ T9] usb 1-1: config 0 descriptor?? [ 323.421109][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'. [ 323.537759][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 323.585701][ T9] usb 1-1: USB disconnect, device number 9 [ 324.972326][ T7960] binder: BINDER_SET_CONTEXT_MGR already set [ 324.984550][ T7960] binder: 7959:7960 ioctl 4018620d 200000001000 returned -16 [ 326.467430][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 326.787573][ T5816] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 327.057607][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 327.170060][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.395013][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 327.535367][ T5816] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 327.786625][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.814113][ T5816] usb 4-1: config 0 descriptor?? [ 328.857235][ T5816] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 328.876172][ T5816] usb 4-1: USB disconnect, device number 9 [ 328.924266][ T8003] binder: BINDER_SET_CONTEXT_MGR already set [ 328.964969][ T8003] binder: 8002:8003 ioctl 4018620d 200000001000 returned -16 [ 329.295773][ T8008] 9pnet_fd: Insufficient options for proto=fd [ 329.461051][ T8014] loop3: detected capacity change from 0 to 2048 [ 329.533331][ T8014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.548145][ T8014] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.674630][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.168834][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 331.916228][ T8026] netlink: 5 bytes leftover after parsing attributes in process `syz.0.572'. [ 331.937193][ T8026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.244615][ T5816] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 332.436208][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 332.470541][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.563439][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 332.589904][ T5816] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 332.608031][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.629591][ T5816] usb 3-1: config 0 descriptor?? [ 332.809283][ T8054] binder: BINDER_SET_CONTEXT_MGR already set [ 332.824760][ T8054] binder: 8050:8054 ioctl 4018620d 200000001000 returned -16 [ 332.869436][ T8052] 9pnet_fd: Insufficient options for proto=fd [ 332.957999][ T5816] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 332.991455][ T5816] usb 3-1: USB disconnect, device number 7 [ 333.099050][ T8056] loop3: detected capacity change from 0 to 1024 [ 333.135031][ T8056] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 333.256804][ T8056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.639200][ T8063] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 333.673383][ T8063] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 333.685765][ T8063] EXT4-fs (loop3): This should not happen!! Data will be lost [ 333.685765][ T8063] [ 333.705177][ T8063] EXT4-fs (loop3): Total free blocks count 0 [ 333.711428][ T8063] EXT4-fs (loop3): Free/Dirty block details [ 333.717519][ T8063] EXT4-fs (loop3): free_blocks=20480 [ 333.723013][ T8063] EXT4-fs (loop3): dirty_blocks=80 [ 333.728315][ T8063] EXT4-fs (loop3): Block reservation details [ 333.734534][ T8063] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 334.162869][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 334.187718][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 339.755414][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 340.438081][ T8109] fuse: Bad value for 'fd' [ 340.454592][ T5816] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 340.560865][ T8105] 9pnet_fd: Insufficient options for proto=fd [ 340.645191][ T5816] usb 5-1: Using ep0 maxpacket: 8 [ 340.661275][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.682056][ T5816] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 340.732531][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.888132][ T5816] usb 5-1: config 0 descriptor?? [ 344.148249][ T5816] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 345.771943][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 345.806411][ T5816] usb 5-1: USB disconnect, device number 3 [ 346.194768][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 347.281647][ T8132] loop0: detected capacity change from 0 to 1024 [ 347.337647][ T8132] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 347.615395][ T8132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.632732][ T8136] fuse: Bad value for 'fd' [ 348.003387][ T8139] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 348.035471][ T8139] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 348.047995][ T8139] EXT4-fs (loop0): This should not happen!! Data will be lost [ 348.047995][ T8139] [ 348.066821][ T8139] EXT4-fs (loop0): Total free blocks count 0 [ 348.073027][ T8139] EXT4-fs (loop0): Free/Dirty block details [ 348.079144][ T8139] EXT4-fs (loop0): free_blocks=20480 [ 348.084693][ T8139] EXT4-fs (loop0): dirty_blocks=80 [ 348.089970][ T8139] EXT4-fs (loop0): Block reservation details [ 348.096224][ T8139] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 349.365422][ T59] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 350.334347][ T8148] 9pnet_fd: Insufficient options for proto=fd [ 352.530932][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 352.733763][ T8174] fuse: Bad value for 'fd' [ 352.833302][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 352.857689][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.880772][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 353.051866][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.076129][ T8] usb 5-1: config 0 descriptor?? [ 354.951089][ T8] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 355.054929][ T8] usb 5-1: USB disconnect, device number 4 [ 355.995854][ T5781] Bluetooth: hci0: link tx timeout [ 356.001056][ T5781] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 356.069831][ T8187] 9pnet_fd: Insufficient options for proto=fd [ 356.700795][ T8201] loop4: detected capacity change from 0 to 1024 [ 356.733646][ T8201] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 356.805108][ T8203] fuse: Bad value for 'fd' [ 356.890532][ T8201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.994707][ T8206] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 357.345697][ T8212] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 357.359206][ T8212] EXT4-fs (loop4): This should not happen!! Data will be lost [ 357.359206][ T8212] [ 357.369310][ T8212] EXT4-fs (loop4): Total free blocks count 0 [ 357.384828][ T8212] EXT4-fs (loop4): Free/Dirty block details [ 357.390955][ T8212] EXT4-fs (loop4): free_blocks=20480 [ 357.396537][ T8212] EXT4-fs (loop4): dirty_blocks=80 [ 357.401853][ T8212] EXT4-fs (loop4): Block reservation details [ 357.408074][ T8212] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 357.757741][ T1134] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 359.555050][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 359.696586][ T8221] 9pnet_fd: Insufficient options for proto=fd [ 359.714566][ T5816] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 359.904598][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 359.913238][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.934766][ T5816] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 359.968958][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.983521][ T5816] usb 3-1: config 0 descriptor?? [ 361.375051][ T5816] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 362.331982][ T5816] usb 3-1: USB disconnect, device number 8 [ 362.379938][ T8249] loop2: detected capacity change from 0 to 1024 [ 362.394109][ T8249] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 362.510909][ T8249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.883806][ T8254] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 362.919066][ T8254] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 362.940561][ T8254] EXT4-fs (loop2): This should not happen!! Data will be lost [ 362.940561][ T8254] [ 362.950528][ T8254] EXT4-fs (loop2): Total free blocks count 0 [ 362.956784][ T8254] EXT4-fs (loop2): Free/Dirty block details [ 362.962858][ T8254] EXT4-fs (loop2): free_blocks=20480 [ 362.968403][ T8254] EXT4-fs (loop2): dirty_blocks=80 [ 362.973666][ T8254] EXT4-fs (loop2): Block reservation details [ 362.981061][ T8254] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 363.411491][ T1134] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 363.837010][ T8261] 9pnet_fd: Insufficient options for proto=fd [ 364.324551][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 364.514756][ T5817] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 364.584381][ T8279] loop2: detected capacity change from 0 to 1024 [ 364.603826][ T8279] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 364.657686][ T8279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.714571][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 364.734629][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.755412][ T5817] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 364.766351][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.988330][ T5817] usb 5-1: config 0 descriptor?? [ 365.401357][ T8290] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 365.419283][ T8290] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 365.431541][ T8290] EXT4-fs (loop2): This should not happen!! Data will be lost [ 365.431541][ T8290] [ 365.442093][ T8290] EXT4-fs (loop2): Total free blocks count 0 [ 365.448607][ T8290] EXT4-fs (loop2): Free/Dirty block details [ 365.455115][ T8290] EXT4-fs (loop2): free_blocks=20480 [ 365.460481][ T8290] EXT4-fs (loop2): dirty_blocks=80 [ 365.465641][ T8290] EXT4-fs (loop2): Block reservation details [ 365.471652][ T8290] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 367.195496][ T6073] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 367.435425][ T8298] 9pnet_fd: Insufficient options for proto=fd [ 367.904025][ T8295] netlink: 5 bytes leftover after parsing attributes in process `syz.0.653'. [ 367.938074][ T8295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.175332][ T5817] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 368.214102][ T5817] usb 5-1: USB disconnect, device number 5 [ 372.611281][ T8338] 9pnet_fd: Insufficient options for proto=fd [ 372.894989][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 373.095863][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 373.121459][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.164327][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 373.194125][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.254727][ T8] usb 1-1: config 0 descriptor?? [ 376.435236][ T8] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 376.460136][ T8] usb 1-1: USB disconnect, device number 10 [ 378.889734][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.896209][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.091387][ T8384] 9pnet_fd: Insufficient options for proto=fd [ 382.393870][ T8392] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 382.755263][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 383.015824][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 383.102188][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.340927][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 383.466629][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.497469][ T8] usb 1-1: config 0 descriptor?? [ 386.737763][ T8] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 386.802946][ T8] usb 1-1: USB disconnect, device number 11 [ 388.349275][ T8433] Bluetooth: MGMT ver 1.22 [ 388.364050][ T8433] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 390.214870][ T788] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 390.414619][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 390.432194][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.448392][ T788] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 390.468206][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.497712][ T788] usb 4-1: config 0 descriptor?? [ 390.552550][ T8447] 9pnet_fd: Insufficient options for proto=fd [ 391.009911][ T8444] netlink: 5 bytes leftover after parsing attributes in process `syz.4.699'. [ 391.030535][ T8444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.403084][ T8465] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 393.305952][ T788] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 393.327803][ T788] usb 4-1: USB disconnect, device number 10 [ 393.697751][ T8477] 9pnet_fd: Insufficient options for proto=fd [ 395.467161][ T8494] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 395.824826][ T5817] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 396.025942][ T8483] netlink: 5 bytes leftover after parsing attributes in process `syz.4.712'. [ 396.049606][ T8483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.074863][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 396.098699][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 396.114634][ T5817] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 396.142047][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.171123][ T5817] usb 1-1: config 0 descriptor?? [ 397.353637][ T8516] 9pnet_fd: Insufficient options for proto=fd [ 398.793351][ T5817] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 398.861412][ T5817] usb 1-1: USB disconnect, device number 12 [ 399.004743][ T8526] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 401.684607][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 401.894551][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 402.168791][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.192114][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 402.203441][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.323860][ T23] usb 1-1: config 0 descriptor?? [ 402.499302][ T8554] loop2: detected capacity change from 0 to 1024 [ 402.547810][ T8554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 404.747557][ T8554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.854933][ T23] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 404.911507][ T23] usb 1-1: USB disconnect, device number 13 [ 405.099055][ T8566] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 405.223581][ T8571] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 405.242397][ T8571] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 405.254779][ T8571] EXT4-fs (loop2): This should not happen!! Data will be lost [ 405.254779][ T8571] [ 405.264597][ T8571] EXT4-fs (loop2): Total free blocks count 0 [ 405.271924][ T8571] EXT4-fs (loop2): Free/Dirty block details [ 405.277975][ T8571] EXT4-fs (loop2): free_blocks=20480 [ 405.283457][ T8571] EXT4-fs (loop2): dirty_blocks=80 [ 405.288749][ T8571] EXT4-fs (loop2): Block reservation details [ 405.294894][ T8571] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 405.794685][ T59] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 408.876880][ T8594] 9pnet_fd: Insufficient options for proto=fd [ 410.800179][ T8600] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 411.069093][ T8606] loop0: detected capacity change from 0 to 1024 [ 411.125519][ T8606] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 411.227649][ T8606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.581261][ T8615] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 411.599994][ T8615] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 411.612314][ T8615] EXT4-fs (loop0): This should not happen!! Data will be lost [ 411.612314][ T8615] [ 411.622368][ T8615] EXT4-fs (loop0): Total free blocks count 0 [ 411.628752][ T8615] EXT4-fs (loop0): Free/Dirty block details [ 411.634834][ T8615] EXT4-fs (loop0): free_blocks=20480 [ 411.640430][ T8615] EXT4-fs (loop0): dirty_blocks=80 [ 411.645740][ T8615] EXT4-fs (loop0): Block reservation details [ 411.651874][ T8615] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 411.987564][ T6073] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 412.004706][ T5814] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 413.814678][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 415.957066][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.008695][ T5814] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 416.029520][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.057561][ T5814] usb 5-1: config 0 descriptor?? [ 416.069136][ T5814] usb 5-1: can't set config #0, error -71 [ 416.127308][ T5814] usb 5-1: USB disconnect, device number 6 [ 416.144802][ T8638] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 416.256860][ T8640] loop3: detected capacity change from 0 to 2048 [ 416.285492][ T8640] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 416.315125][ T8640] NILFS (loop3): corrupt root inode [ 416.320591][ T8641] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 416.431598][ T5943] udevd[5943]: incorrect nilfs2 checksum on /dev/loop3 [ 416.568013][ T8645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.763'. [ 416.921443][ T8651] loop4: detected capacity change from 0 to 1024 [ 416.987010][ T8651] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 417.048511][ T8651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.392159][ T8658] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 417.410850][ T8658] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 417.423182][ T8658] EXT4-fs (loop4): This should not happen!! Data will be lost [ 417.423182][ T8658] [ 417.432945][ T8658] EXT4-fs (loop4): Total free blocks count 0 [ 417.439029][ T8658] EXT4-fs (loop4): Free/Dirty block details [ 417.445143][ T8658] EXT4-fs (loop4): free_blocks=20480 [ 417.450908][ T8658] EXT4-fs (loop4): dirty_blocks=80 [ 417.456392][ T8658] EXT4-fs (loop4): Block reservation details [ 417.462427][ T8658] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 417.848919][ T6073] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 425.124625][ T5814] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 425.385661][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 425.404690][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.459425][ T5814] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 425.492255][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.518198][ T5814] usb 1-1: config 0 descriptor?? [ 427.743018][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 428.115289][ T5814] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 428.173226][ T5814] usb 1-1: USB disconnect, device number 14 [ 429.974854][ T8706] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 430.444976][ T5814] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 432.484351][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 432.501307][ T5814] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 434.024586][ T5814] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 434.051109][ T5814] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.074548][ T5814] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.092569][ T5814] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.102285][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.122797][ T5814] usb 5-1: can't set config #16, error -71 [ 434.131989][ T5814] usb 5-1: USB disconnect, device number 7 [ 434.644857][ T5814] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 434.844579][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 434.870575][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.894905][ T5814] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 434.905295][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.933424][ T5814] usb 5-1: config 0 descriptor?? [ 436.766682][ T8737] netlink: 44 bytes leftover after parsing attributes in process `syz.2.790'. [ 437.181706][ T8744] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 439.634114][ T5814] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 439.659450][ T5814] usb 5-1: USB disconnect, device number 8 [ 440.333222][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.339690][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.058097][ T8767] afs: Unknown parameter 'dy' [ 441.210283][ T5839] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 441.348332][ T8761] can: request_module (can-proto-3) failed. [ 443.173147][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 443.195444][ T5839] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 443.254506][ T5839] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 443.284523][ T5839] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.314430][ T5839] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.344457][ T5839] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.353597][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.655233][ T5839] usb 3-1: GET_CAPABILITIES returned 0 [ 443.660847][ T5839] usbtmc 3-1:16.0: can't read capabilities [ 443.733308][ T8779] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 443.923003][ T8784] netlink: 44 bytes leftover after parsing attributes in process `syz.3.804'. [ 443.929725][ T5839] usb 3-1: USB disconnect, device number 9 [ 444.260867][ T8781] netlink: 5 bytes leftover after parsing attributes in process `syz.4.802'. [ 444.281829][ T8781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.836176][ T8800] loop0: detected capacity change from 0 to 1024 [ 444.852918][ T8800] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 444.920308][ T8800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.368943][ T8812] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 445.387794][ T8812] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 445.400081][ T8812] EXT4-fs (loop0): This should not happen!! Data will be lost [ 445.400081][ T8812] [ 445.409811][ T8812] EXT4-fs (loop0): Total free blocks count 0 [ 445.416131][ T8812] EXT4-fs (loop0): Free/Dirty block details [ 445.430680][ T8812] EXT4-fs (loop0): free_blocks=20480 [ 445.436141][ T8812] EXT4-fs (loop0): dirty_blocks=80 [ 445.441355][ T8812] EXT4-fs (loop0): Block reservation details [ 445.448193][ T8812] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 445.874875][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 446.225188][ T8820] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 447.921453][ T8829] netlink: 5 bytes leftover after parsing attributes in process `syz.4.816'. [ 447.935731][ T8829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.262971][ T8856] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 451.006704][ T8877] netlink: 5 bytes leftover after parsing attributes in process `syz.2.833'. [ 451.028217][ T8877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.418607][ T8889] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 456.965607][ T8934] fuse: Unknown parameter 'grou00000000000000000000' [ 457.294505][ T8749] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 457.481151][ T8749] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 457.494574][ T8749] usb 4-1: config 0 has no interface number 0 [ 457.507593][ T8749] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 457.527445][ T8749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.546738][ T8749] usb 4-1: Product: syz [ 457.551074][ T8749] usb 4-1: Manufacturer: syz [ 457.564655][ T8749] usb 4-1: SerialNumber: syz [ 457.585846][ T8749] usb 4-1: config 0 descriptor?? [ 457.825789][ T8936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.864929][ T8936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.893848][ T8749] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 457.934324][ T8945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.954144][ T8749] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 457.985895][ T8749] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 457.998402][ T8749] usb 4-1: media controller created [ 458.032464][ T8749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.111816][ T8749] usb 4-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 458.122725][ T8749] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 458.186970][ T8749] DVB: Unable to find symbol mxl5005s_attach() [ 458.335503][ T8749] usb 4-1: USB disconnect, device number 11 [ 459.027062][ T8965] fuse: Unknown parameter 'grou00000000000000000000' [ 460.834626][ T5839] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 461.034620][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 461.064994][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.094844][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.114139][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.145898][ T5839] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.172224][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.216569][ T5839] usb 1-1: config 0 descriptor?? [ 461.657230][ T5839] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 461.684649][ T5839] microsoft 0003:045E:07DA.0002: report is too long [ 461.691472][ T5839] microsoft 0003:045E:07DA.0002: item 0 4 0 8 parsing failed [ 461.719380][ T5839] microsoft 0003:045E:07DA.0002: parse failed [ 461.734545][ T5839] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 461.941893][ T5839] usb 1-1: USB disconnect, device number 15 [ 462.680355][ T9001] fuse: Unknown parameter 'grou00000000000000000000' [ 462.948579][ T9005] syz_tun: entered allmulticast mode [ 463.659264][ T8998] syz_tun: left allmulticast mode [ 467.741012][ T9035] loop0: detected capacity change from 0 to 512 [ 469.507026][ T9038] xt_l2tp: missing protocol rule (udp|l2tpip) [ 469.549938][ T9035] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 469.687010][ T9035] EXT4-fs (loop0): 1 truncate cleaned up [ 469.706757][ T9035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.776453][ T28] audit: type=1800 audit(1784753373.892:22): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.884" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 469.981959][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.251812][ T9056] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 471.104779][ T9061] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 472.670620][ T9068] loop2: detected capacity change from 0 to 1024 [ 472.715003][ T9068] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 472.782336][ T9068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.244531][ T9080] xt_l2tp: missing protocol rule (udp|l2tpip) [ 473.303553][ T9081] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 473.321292][ T9081] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 473.333645][ T9081] EXT4-fs (loop2): This should not happen!! Data will be lost [ 473.333645][ T9081] [ 473.343369][ T9081] EXT4-fs (loop2): Total free blocks count 0 [ 473.349492][ T9081] EXT4-fs (loop2): Free/Dirty block details [ 473.355501][ T9081] EXT4-fs (loop2): free_blocks=20480 [ 473.360803][ T9081] EXT4-fs (loop2): dirty_blocks=80 [ 473.367231][ T9081] EXT4-fs (loop2): Block reservation details [ 473.373231][ T9081] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 474.121798][ T9098] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 474.150651][ T9100] loop3: detected capacity change from 0 to 128 [ 474.202990][ T9100] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 474.227447][ T9100] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 474.638117][ T9108] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 475.320496][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 475.523999][ T59] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 475.834208][ T9127] loop2: detected capacity change from 0 to 2048 [ 475.911340][ T9127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.697444][ T9134] EXT4-fs error (device loop2): ext4_read_inline_dir:1591: inode #12: block 9: comm syz.2.909: path /213/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=45, inode=4195584, rec_len=0, size=80 fake=0 [ 477.302330][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.349246][ T9137] fuse: Bad value for 'fd' [ 477.514962][ T9140] loop3: detected capacity change from 0 to 512 [ 477.532568][ T9140] EXT4-fs: Ignoring removed i_version option [ 477.571322][ T9140] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 477.728989][ T9140] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 477.807931][ T9140] Quota error (device loop3): write_blk: dquota write failed [ 477.826458][ T9140] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 477.837382][ T9140] Quota error (device loop3): write_blk: dquota write failed [ 477.848955][ T9140] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 477.861545][ T9140] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.914: Failed to acquire dquot type 1 [ 477.895047][ T9140] EXT4-fs (loop3): 1 truncate cleaned up [ 477.902114][ T9140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.993828][ T9140] EXT4-fs error (device loop3): __ext4_remount:6756: comm syz.3.914: Abort forced by user [ 478.011955][ T9140] EXT4-fs (loop3): Remounting filesystem read-only [ 478.029848][ T9140] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 478.122145][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.437409][ T9151] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 479.661773][ T9142] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 479.892136][ T9156] loop3: detected capacity change from 0 to 1024 [ 479.929937][ T9156] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 479.984130][ T9156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.005926][ T9160] netlink: 44 bytes leftover after parsing attributes in process `syz.2.920'. [ 480.243375][ T9168] fuse: Bad value for 'fd' [ 480.432526][ T9170] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 480.451487][ T9170] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 480.463809][ T9170] EXT4-fs (loop3): This should not happen!! Data will be lost [ 480.463809][ T9170] [ 480.473581][ T9170] EXT4-fs (loop3): Total free blocks count 0 [ 480.479668][ T9170] EXT4-fs (loop3): Free/Dirty block details [ 480.485696][ T9170] EXT4-fs (loop3): free_blocks=20480 [ 480.491039][ T9170] EXT4-fs (loop3): dirty_blocks=80 [ 480.496249][ T9170] EXT4-fs (loop3): Block reservation details [ 480.502325][ T9170] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 480.646235][ T9173] loop4: detected capacity change from 0 to 128 [ 480.662952][ T9173] EXT4-fs: Ignoring removed nobh option [ 480.715560][ T9173] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 480.745655][ T9173] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 481.418736][ T9181] syzkaller0: entered promiscuous mode [ 481.444742][ T9181] syzkaller0: entered allmulticast mode [ 481.640896][ T6745] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 481.891897][ T9187] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 482.080469][ T59] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 482.263841][ T9194] fuse: Bad value for 'fd' [ 484.112438][ T9218] fuse: Bad value for 'user_id' [ 484.718426][ T9237] loop3: detected capacity change from 0 to 128 [ 484.769739][ T9237] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 484.805704][ T9237] ext4 filesystem being mounted at /267/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 486.184748][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 486.664045][ T28] audit: type=1326 audit(1784753390.752:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9252 comm="syz.4.951" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae7ef9de99 code=0x0 [ 486.752310][ T9256] fuse: Bad value for 'user_id' [ 486.930565][ T9260] loop3: detected capacity change from 0 to 512 [ 487.015803][ T9260] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 487.040605][ T9260] EXT4-fs (loop3): Remounting filesystem read-only [ 487.061176][ T9260] EXT4-fs (loop3): 1 truncate cleaned up [ 487.084716][ T59] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 487.098273][ T9260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.113767][ T59] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 487.131697][ T9260] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.151401][ T59] Quota error (device loop3): write_blk: dquota write failed [ 487.159576][ T59] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 487.174451][ T59] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 487.191038][ T59] Quota error (device loop3): write_blk: dquota write failed [ 487.199059][ T59] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 487.214159][ T59] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 487.236762][ T59] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 487.261454][ T59] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 487.285145][ T59] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 487.345854][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.766415][ T9277] loop4: detected capacity change from 0 to 2048 [ 488.862340][ T9277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.023750][ T9283] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.958: corrupted inode contents [ 489.063446][ T9283] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #12: comm syz.4.958: corrupted inode contents [ 489.101158][ T9283] EXT4-fs error (device loop4): ext4_try_add_inline_entry:1344: inode #12: comm syz.4.958: mark_inode_dirty error [ 489.190014][ T6745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.461944][ T9288] fuse: Bad value for 'user_id' [ 489.888187][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 490.209011][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 490.221106][ T28] audit: type=1326 audit(1784753394.322:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.0.966" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f621f99de99 code=0x0 [ 490.377124][ T9299] netlink: 'syz.4.964': attribute type 10 has an invalid length. [ 490.411644][ T9299] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 492.394254][ T9321] loop0: detected capacity change from 0 to 8 [ 492.735444][ T9326] fuse: Bad value for 'fd' [ 493.222394][ T9336] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 496.145660][ T5781] block nbd0: Receive control failed (result -110) [ 497.755277][ T9361] fuse: Bad value for 'fd' [ 500.263576][ T9382] loop4: detected capacity change from 0 to 1024 [ 500.440817][ T9382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 500.494802][ T9382] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.705582][ T9389] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 501.803526][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.810009][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.115544][ T9394] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.990: lblock 0 mapped to illegal pblock 0 (length 1) [ 502.850640][ T9396] fuse: Bad value for 'fd' [ 502.950109][ T6745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 504.496170][ T9410] loop4: detected capacity change from 0 to 1024 [ 505.746223][ T9429] fuse: Bad value for 'fd' [ 506.305426][ T9439] loop0: detected capacity change from 0 to 1024 [ 506.401533][ T9439] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 506.958966][ T9439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.856018][ T9439] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 508.874228][ T9439] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 508.886768][ T9439] EXT4-fs (loop0): This should not happen!! Data will be lost [ 508.886768][ T9439] [ 508.896806][ T9439] EXT4-fs (loop0): Total free blocks count 0 [ 508.904197][ T9439] EXT4-fs (loop0): Free/Dirty block details [ 508.910495][ T9439] EXT4-fs (loop0): free_blocks=20480 [ 508.915905][ T9439] EXT4-fs (loop0): dirty_blocks=80 [ 508.921108][ T9439] EXT4-fs (loop0): Block reservation details [ 508.927214][ T9439] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 508.991193][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'. [ 510.292261][ T1118] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 511.862896][ T9482] fuse: Bad value for 'fd' [ 511.993579][ T9486] loop4: detected capacity change from 0 to 8 [ 514.665511][ T9503] fuse: Bad value for 'fd' [ 515.123147][ T9510] loop3: detected capacity change from 0 to 1024 [ 515.196275][ T9510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 515.214277][ T9510] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.238629][ T9510] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.1025: lblock 0 mapped to illegal pblock 0 (length 1) [ 515.347633][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 519.160442][ T9536] fuse: Invalid rootmode [ 520.503574][ T9548] loop3: detected capacity change from 0 to 1024 [ 520.626479][ T9548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 520.652589][ T9548] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.731563][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 522.247608][ T9564] loop3: detected capacity change from 0 to 2048 [ 522.302560][ T9564] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 522.753954][ T9571] loop4: detected capacity change from 0 to 2048 [ 522.804614][ T9571] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 522.826537][ T9571] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 522.842124][ T9571] UDF-fs: Scanning with blocksize 512 failed [ 525.390079][ T9571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 526.476364][ T9592] loop2: detected capacity change from 0 to 1024 [ 526.615369][ T9592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.732027][ T9592] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.1052: Invalid inode table block 11797150987987384644 in block_group 0 [ 526.802646][ T9592] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 526.813749][ T9592] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #13: comm syz.2.1052: mark_inode_dirty error [ 526.844294][ T9597] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.1052: Invalid inode table block 11797150987987384644 in block_group 0 [ 527.025134][ T6073] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm kworker/u4:11: Invalid inode table block 11797150987987384644 in block_group 0 [ 527.111185][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.453936][ T9601] loop2: detected capacity change from 0 to 16 [ 527.515396][ T9601] erofs: (device loop2): mounted with root inode @ nid 36. [ 527.579464][ T9601] syz.2.1053: attempt to access beyond end of device [ 527.579464][ T9601] loop2: rw=524288, sector=12296, nr_sectors = 8 limit=16 [ 527.648921][ T9601] syz.2.1053: attempt to access beyond end of device [ 527.648921][ T9601] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 527.679741][ T9601] syz.2.1053: attempt to access beyond end of device [ 527.679741][ T9601] loop2: rw=0, sector=12296, nr_sectors = 8 limit=16 [ 527.720625][ T28] audit: type=1800 audit(1784753431.832:25): pid=9601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1053" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 528.154904][ T9613] fuse: Invalid rootmode [ 529.388081][ T9614] loop0: detected capacity change from 0 to 1024 [ 529.400443][ T9614] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 529.411852][ T9614] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 529.424469][ T9614] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 529.435814][ T9614] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 529.647149][ T5787] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 529.764792][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 530.046011][ T9626] loop0: detected capacity change from 0 to 512 [ 530.070043][ T9626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 530.123670][ T9626] EXT4-fs (loop0): 1 truncate cleaned up [ 530.147109][ T9626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.902787][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.241651][ T9649] loop3: detected capacity change from 0 to 512 [ 531.365985][ T9649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.002533][ T9649] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.242413][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.426678][ T9663] loop3: detected capacity change from 0 to 512 [ 533.517055][ T9663] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1069: inode has both inline data and extents flags [ 533.557426][ T9663] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1069: couldn't read orphan inode 15 (err -117) [ 533.576240][ T9663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.866274][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.952658][ T9672] futex_wake_op: syz.0.1072 tries to shift op by 144; fix this program [ 534.049029][ T9674] loop0: detected capacity change from 0 to 256 [ 534.083503][ T9674] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 534.239306][ T28] audit: type=1800 audit(1784753438.292:26): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1072" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 535.766137][ T9684] loop0: detected capacity change from 0 to 1024 [ 536.005391][ T9673] Bluetooth: hci0: command 0x0406 tx timeout [ 536.017562][ T9684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 536.109813][ T9684] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.536963][ T9697] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.1075: lblock 0 mapped to illegal pblock 0 (length 1) [ 536.623335][ T28] audit: type=1800 audit(1784753440.632:27): pid=9697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1075" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 536.854479][ T8749] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 537.061988][ T9692] loop3: detected capacity change from 0 to 128 [ 537.069684][ T8749] usb 3-1: Using ep0 maxpacket: 32 [ 537.087258][ T8749] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 537.119912][ T8749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.138374][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 537.150451][ T9692] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 537.167698][ T9692] ext4 filesystem being mounted at /301/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 537.209947][ T8749] usb 3-1: config 0 descriptor?? [ 537.755762][ T9711] loop4: detected capacity change from 0 to 1024 [ 537.863220][ T8749] hid (null): bogus close delimiter [ 537.958389][ T8749] hid-led 0003:1D34:0004.0003: bogus close delimiter [ 537.984852][ T8749] hid-led 0003:1D34:0004.0003: item 0 0 2 10 parsing failed [ 538.007030][ T8749] hid-led: probe of 0003:1D34:0004.0003 failed with error -22 [ 538.132689][ T9711] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 538.421658][ T8749] usb 3-1: USB disconnect, device number 10 [ 538.433297][ T9711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.535104][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 540.022621][ T9727] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 540.108826][ T9727] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 540.121431][ T9727] EXT4-fs (loop4): This should not happen!! Data will be lost [ 540.121431][ T9727] [ 540.135026][ T9727] EXT4-fs (loop4): Total free blocks count 0 [ 540.141114][ T9727] EXT4-fs (loop4): Free/Dirty block details [ 540.147596][ T9727] EXT4-fs (loop4): free_blocks=20480 [ 540.153149][ T9727] EXT4-fs (loop4): dirty_blocks=80 [ 540.160511][ T9727] EXT4-fs (loop4): Block reservation details [ 540.171457][ T9727] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 541.520182][ T9741] loop2: detected capacity change from 0 to 1024 [ 541.664446][ T9741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 541.736679][ T9741] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.773586][ T9748] loop3: detected capacity change from 0 to 1024 [ 541.992151][ T9748] hfsplus: invalid length 32517 has been corrected to 255 [ 542.054634][ T9751] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.1088: lblock 0 mapped to illegal pblock 0 (length 1) [ 542.068444][ T28] audit: type=1800 audit(1784753446.162:28): pid=9751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1088" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 542.424859][ T9752] trusted_key: syz.0.1091 sent an empty control message without MSG_MORE. [ 542.636440][ T11] hfsplus: b-tree write err: -5, ino 20 [ 542.691574][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 542.851012][ T9754] loop3: detected capacity change from 0 to 164 [ 542.942863][ T9754] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 543.721680][ T49] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 543.884840][ T49] EXT4-fs (loop4): This should not happen!! Data will be lost [ 543.884840][ T49] [ 543.931002][ T49] EXT4-fs (loop4): Total free blocks count 0 [ 543.967914][ T49] EXT4-fs (loop4): Free/Dirty block details [ 543.973950][ T49] EXT4-fs (loop4): free_blocks=20480 [ 544.070237][ T49] EXT4-fs (loop4): dirty_blocks=80 [ 544.088116][ T49] EXT4-fs (loop4): Block reservation details [ 544.094214][ T49] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 544.168845][ T6745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.458262][ T9768] syz_tun: entered allmulticast mode [ 545.112194][ T9764] syz_tun: left allmulticast mode [ 545.837489][ T28] audit: type=1326 audit(1784753449.952:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9780 comm="syz.2.1100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5ed39de99 code=0x0 [ 545.869936][ T9779] loop3: detected capacity change from 0 to 4096 [ 545.901808][ T9779] EXT4-fs: Ignoring removed mblk_io_submit option [ 545.940185][ T9782] 9pnet_fd: Insufficient options for proto=fd [ 545.999570][ T9779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.136388][ T9779] EXT4-fs error (device loop3): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.3.1099: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 546.198709][ T9779] EXT4-fs error (device loop3): ext4_get_first_dir_block:3606: inode #12: comm syz.3.1099: directory missing '..' [ 546.260941][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.506228][ T9788] loop4: detected capacity change from 0 to 1024 [ 546.557661][ T9788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 546.582750][ T9788] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.879134][ T9792] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.1102: lblock 0 mapped to illegal pblock 0 (length 1) [ 546.975791][ T28] audit: type=1800 audit(1784753450.992:30): pid=9792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1102" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 547.529232][ T9796] loop3: detected capacity change from 0 to 512 [ 547.613362][ T9796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.703752][ T9690] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 547.767699][ T6745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 547.879311][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.159589][ T9811] loop3: detected capacity change from 0 to 128 [ 548.186376][ T9811] EXT4-fs: Ignoring removed nobh option [ 548.243641][ T9811] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.267010][ T9811] ext4 filesystem being mounted at /312/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 548.865318][ T789] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 549.012114][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.084510][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 549.093848][ T789] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 549.155324][ T789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.175908][ T789] usb 1-1: config 0 has no interfaces? [ 549.188296][ T789] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 549.199336][ T789] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 549.207928][ T789] usb 1-1: Product: syz [ 549.212183][ T789] usb 1-1: Manufacturer: syz [ 549.216979][ T789] usb 1-1: SerialNumber: syz [ 549.225116][ T789] usb 1-1: config 0 descriptor?? [ 549.259236][ T28] audit: type=1326 audit(1784753453.372:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.3.1112" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc274f9de99 code=0x0 [ 549.415995][ T9823] loop2: detected capacity change from 0 to 1024 [ 549.479231][ T789] usb 1-1: USB disconnect, device number 16 [ 549.487546][ T9823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 549.563914][ T9823] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.879119][ T9830] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.1113: lblock 0 mapped to illegal pblock 0 (length 1) [ 549.893113][ T28] audit: type=1800 audit(1784753453.992:32): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1113" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 550.254810][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 550.484142][ T9836] loop0: detected capacity change from 0 to 512 [ 550.514915][ T9836] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 550.586363][ T9836] EXT4-fs (loop0): 1 truncate cleaned up [ 550.605892][ T9836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.642367][ T9836] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #2: comm syz.0.1118: invalid size [ 550.731776][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.776315][ T9845] loop2: detected capacity change from 0 to 128 [ 550.835532][ T9845] EXT4-fs: Ignoring removed nobh option [ 550.916013][ T9845] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 550.974905][ T9845] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 552.820958][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 552.991403][ T28] audit: type=1326 audit(1784753457.102:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9858 comm="syz.2.1125" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5ed39de99 code=0x0 [ 553.446693][ T9862] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 553.638585][ T9864] loop3: detected capacity change from 0 to 1764 [ 553.724140][ T9868] loop0: detected capacity change from 0 to 1024 [ 553.770606][ T9868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 553.839479][ T9868] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.135712][ T28] audit: type=1800 audit(1784753458.252:34): pid=9868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1124" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 554.156801][ T9868] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.1124: lblock 0 mapped to illegal pblock 0 (length 1) [ 556.133743][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 556.214584][ T5815] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 556.360520][ T9884] loop0: detected capacity change from 0 to 128 [ 556.396865][ T9884] EXT4-fs: Ignoring removed nobh option [ 556.436055][ T5815] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 556.455963][ T9884] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 556.475834][ T5815] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 556.499660][ T9884] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 556.527130][ T5815] usb 4-1: config 220 has no interface number 2 [ 556.561154][ T5815] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 556.599307][ T5815] usb 4-1: config 220 interface 0 has no altsetting 0 [ 556.632918][ T5815] usb 4-1: config 220 interface 76 has no altsetting 0 [ 556.651724][ T5815] usb 4-1: config 220 interface 1 has no altsetting 0 [ 556.669876][ T5815] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 556.679733][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.695803][ T5815] usb 4-1: Product: syz [ 556.704628][ T5815] usb 4-1: Manufacturer: syz [ 556.713772][ T5815] usb 4-1: SerialNumber: syz [ 556.983585][ T5815] usb 4-1: selecting invalid altsetting 0 [ 557.010372][ T5815] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 557.024569][ T5815] usb 4-1: No valid video chain found. [ 557.058722][ T5815] usb 4-1: selecting invalid altsetting 0 [ 557.071403][ T5815] usbtest: probe of 4-1:220.1 failed with error -22 [ 557.097624][ T5815] usb 4-1: USB disconnect, device number 12 [ 557.218066][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 557.664558][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 557.691554][ T9893] loop3: detected capacity change from 0 to 256 [ 557.736624][ T9893] exFAT-fs (loop3): error, The cluster chain has a loop [ 557.749650][ T9893] exFAT-fs (loop3): Filesystem has been set read-only [ 557.761118][ T9893] exFAT-fs (loop3): failed to count the number of clusters in root [ 557.769629][ T9893] exFAT-fs (loop3): failed to recognize exfat type [ 557.872485][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 557.919036][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.010025][ T8] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 558.044520][ T8] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 558.056188][ T8] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 558.069651][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 558.080785][ T8] usb 1-1: config 1 interface 1 has no altsetting 0 [ 558.103951][ T8] usb 1-1: string descriptor 0 read error: -22 [ 558.123226][ T9899] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 558.141152][ T8] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 558.197671][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.388908][ T28] audit: type=1326 audit(1784753462.502:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.3.1139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc274f9de99 code=0x0 [ 559.725013][ T8] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 559.824219][ T8] usb 1-1: USB disconnect, device number 17 [ 559.942618][ T9906] loop3: detected capacity change from 0 to 1024 [ 560.015877][ T9906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 560.044731][ T9906] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.287155][ T28] audit: type=1800 audit(1784753464.402:36): pid=9906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1141" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 560.310239][ T9906] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.1141: lblock 0 mapped to illegal pblock 0 (length 1) [ 560.458017][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 562.410784][ T9917] loop2: detected capacity change from 0 to 1024 [ 562.467597][ T9919] loop3: detected capacity change from 0 to 128 [ 562.475004][ T9917] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 562.505465][ T9919] EXT4-fs: Ignoring removed nobh option [ 562.552779][ T9917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.655860][ T9919] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 562.736187][ T9919] ext4 filesystem being mounted at /324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 562.778623][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.999273][ T9925] loop2: detected capacity change from 0 to 512 [ 563.022007][ T9927] loop4: detected capacity change from 0 to 512 [ 563.044061][ T9925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.106690][ T9927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.140612][ T9925] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.198171][ T9927] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 563.224952][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.231377][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.257059][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 563.481361][ T6745] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.573201][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.690092][ T9937] loop4: detected capacity change from 0 to 512 [ 563.818303][ T9937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.844902][ T9937] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 563.968018][ T9937] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #2: comm syz.4.1148: corrupted inode contents [ 564.000213][ T9937] EXT4-fs (loop4): Remounting filesystem read-only [ 564.031901][ T9937] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 564.043913][ T9937] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 564.052522][ T9937] CPU: 0 PID: 9937 Comm: syz.4.1148 Not tainted syzkaller #0 [ 564.059974][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 564.070128][ T9937] RIP: 0010:ext4_ext_map_blocks+0x2d14/0x6890 [ 564.076378][ T9937] Code: 44 24 08 89 18 89 9c 24 38 01 00 00 4c 8b 7c 24 18 4d 85 ff 0f 84 b1 e2 ff ff e8 47 b5 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 e7 1d 00 00 41 0f b7 47 08 c1 e0 04 48 [ 564.096047][ T9937] RSP: 0018:ffffc9000e677500 EFLAGS: 00010246 [ 564.102172][ T9937] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000080000 [ 564.110211][ T9937] RDX: ffffc90019e51000 RSI: 000000000000fa7f RDI: 0000000000000003 [ 564.118241][ T9937] RBP: ffffc9000e6777b0 R08: ffff88802bbc0000 R09: 0000000000000002 [ 564.126273][ T9937] R10: 00000000ffffffe4 R11: 0000000000000002 R12: 0000000000000001 [ 564.134292][ T9937] R13: 1ffff92001cceecc R14: dffffc0000000000 R15: fffffffffffffffb [ 564.142316][ T9937] FS: 00007fae7fef46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 564.151315][ T9937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.157954][ T9937] CR2: 0000001b3101aff8 CR3: 00000000290d1000 CR4: 00000000003526f0 [ 564.165977][ T9937] Call Trace: [ 564.169295][ T9937] [ 564.172284][ T9937] ? __might_sleep+0xe0/0xe0 [ 564.177146][ T9937] ? ext4_ext_release+0x10/0x10 [ 564.182083][ T9937] ? __lock_acquire+0x7d80/0x7d80 [ 564.187215][ T9937] ? ext4_es_lookup_extent+0x601/0x9f0 [ 564.192736][ T9937] ext4_map_blocks+0x9db/0x1a90 [ 564.197657][ T9937] ? ext4_issue_zeroout+0x250/0x250 [ 564.203115][ T9937] ext4_getblk+0x1c9/0x720 [ 564.207593][ T9937] ? ext4_get_block_unwritten+0x100/0x100 [ 564.213377][ T9937] ? __asan_memset+0x22/0x40 [ 564.218093][ T9937] ext4_bread+0x2a/0x170 [ 564.222398][ T9937] ext4_append+0x2bf/0x560 [ 564.226908][ T9937] ? ext4_init_new_dir+0x550/0x550 [ 564.232095][ T9937] ext4_add_entry+0x9eb/0xd90 [ 564.236858][ T9937] ? ext4_inc_count+0x1b0/0x1b0 [ 564.241783][ T9937] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 564.247491][ T9937] ? ext4_init_new_dir+0x47c/0x550 [ 564.252677][ T9937] ext4_mkdir+0x524/0xc90 [ 564.257094][ T9937] ? ext4_symlink+0x940/0x940 [ 564.261841][ T9937] ? inode_permission+0xf3/0x480 [ 564.266884][ T9937] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 564.272042][ T9937] ? security_inode_mkdir+0xb7/0x100 [ 564.277457][ T9937] vfs_mkdir+0x2a5/0x470 [ 564.281803][ T9937] do_mkdirat+0x1dc/0x450 [ 564.286198][ T9937] ? vfs_mkdir+0x470/0x470 [ 564.290673][ T9937] __x64_sys_mkdirat+0x89/0xa0 [ 564.295490][ T9937] do_syscall_64+0x55/0xb0 [ 564.300106][ T9937] ? clear_bhb_loop+0x40/0x90 [ 564.304937][ T9937] ? clear_bhb_loop+0x40/0x90 [ 564.309682][ T9937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.315712][ T9937] RIP: 0033:0x7fae7ef9cd07 [ 564.320237][ T9937] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.340161][ T9937] RSP: 002b:00007fae7fef3e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 564.348681][ T9937] RAX: ffffffffffffffda RBX: 00007fae7fef3ee0 RCX: 00007fae7ef9cd07 [ 564.356720][ T9937] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c [ 564.364747][ T9937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.372772][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 564.380797][ T9937] R13: 00007fae7fef3ea0 R14: 0000000000000000 R15: 0000000000000000 [ 564.388865][ T9937] [ 564.391968][ T9937] Modules linked in: [ 564.410198][ T9937] ---[ end trace 0000000000000000 ]--- [ 564.415927][ T9937] RIP: 0010:ext4_ext_map_blocks+0x2d14/0x6890 [ 564.422220][ T9937] Code: 44 24 08 89 18 89 9c 24 38 01 00 00 4c 8b 7c 24 18 4d 85 ff 0f 84 b1 e2 ff ff e8 47 b5 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 e7 1d 00 00 41 0f b7 47 08 c1 e0 04 48 [ 564.442953][ T9937] RSP: 0018:ffffc9000e677500 EFLAGS: 00010246 [ 564.449448][ T9937] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000080000 [ 564.468863][ T9937] RDX: ffffc90019e51000 RSI: 000000000000fa7f RDI: 0000000000000003 [ 564.477474][ T9937] RBP: ffffc9000e6777b0 R08: ffff88802bbc0000 R09: 0000000000000002 [ 564.494922][ T9937] R10: 00000000ffffffe4 R11: 0000000000000002 R12: 0000000000000001 [ 564.503299][ T9937] R13: 1ffff92001cceecc R14: dffffc0000000000 R15: fffffffffffffffb [ 564.512665][ T9937] FS: 00007fae7fef46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 564.523012][ T9937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.531676][ T9937] CR2: 00007fc2751ed2f8 CR3: 00000000290d1000 CR4: 00000000003506f0 [ 564.541890][ T9937] Kernel panic - not syncing: Fatal exception [ 564.548577][ T9937] Kernel Offset: disabled [ 564.552917][ T9937] Rebooting in 86400 seconds..