last executing test programs: 5m32.556479285s ago: executing program 2 (id=100): semtimedop(0x0, &(0x7f0000000740)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f00000007c0)=0x4) 5m29.688917573s ago: executing program 2 (id=107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0x10}}}}}, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/fscaps', 0x600203, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x6e1e, &(0x7f00000003c0)={0x0, 0x9724, 0x1000, 0xfffffffc, 0x236, 0x0, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d00), 0x8}, 0x94) r4 = accept(r3, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) sched_setscheduler(r0, 0x3, &(0x7f0000000100)=0x853) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x2020, 0x0, 0x0) r6 = eventfd2(0x0, 0x0) r7 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x200c}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0xffffffff, 0x8000000, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x44}}, 0x54) 5m28.758710015s ago: executing program 2 (id=110): socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) 5m25.850465333s ago: executing program 2 (id=115): mkdirat(0xffffffffffffff9c, 0x0, 0x73b) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000002c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x8000002, 0x2004}, 0x1c) setxattr$security_capability(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x804800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16, @ANYRES64], 0x10, 0x121a, &(0x7f0000019e00)="$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") fchown(0xffffffffffffffff, 0x0, 0x0) lgetxattr(&(0x7f000001b040)='./file0\x00', &(0x7f000001b080)=ANY=[], 0x0, 0xee) sendto$inet6(r1, 0x0, 0x0, 0x22008041, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, &(0x7f0000000bc0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x90000005}) sendto$inet6(r1, 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)={[{@usrjquota}, {@oldalloc}, {@minixdf}, {@i_version}]}, 0xff, 0x52d, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) unshare(0x64000600) syz_mount_image$fuse(0x0, &(0x7f0000000b00)='./bus\x00', 0x8, 0x0, 0x1, 0x0, 0x0) 5m24.408390488s ago: executing program 2 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 5m20.309008634s ago: executing program 2 (id=131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000280)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) 5m20.136343408s ago: executing program 32 (id=131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000280)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) 5m18.34104147s ago: executing program 4 (id=137): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) 5m17.541895279s ago: executing program 4 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000019500)={0x0, 0x0, &(0x7f0000019540)={&(0x7f0000019580)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x1c, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 5m17.54171155s ago: executing program 4 (id=142): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0500000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="fdffffff00000000000000a9d5f798abf51695b3b7"], 0x50) 5m16.22870766s ago: executing program 4 (id=144): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000002c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f0000000f80)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/syz_tun/gro_flush_timeout\x00', 0x1, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e0f810000000000d300e6d602010000000000d3100d3900", [0x5]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10d) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)='i', 0xa800, 0x1400}]) 5m12.177539525s ago: executing program 4 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 5m11.357006235s ago: executing program 4 (id=155): syz_usb_connect(0x0, 0x5a, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) 5m10.979995474s ago: executing program 33 (id=155): syz_usb_connect(0x0, 0x5a, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) 5m3.223347347s ago: executing program 3 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x1a, 0xf, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2ab4d}, 0x94) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x101000, 0x0) read$FUSE(r4, &(0x7f00000012c0)={0x2020}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x31) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000003380)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(0xffffffffffffffff, &(0x7f0000003440)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 5m2.113851633s ago: executing program 3 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}}, 0xb8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) 5m1.024912189s ago: executing program 3 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0x10}}}}}, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/fscaps', 0x600203, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x6e1e, &(0x7f00000003c0)={0x0, 0x9724, 0x1000, 0xfffffffc, 0x236, 0x0, r2}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d00), 0x8, 0x10, &(0x7f0000000d40), 0x10}, 0x94) r4 = accept(r3, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) sched_setscheduler(r0, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x2020, 0x0, 0x0) r6 = eventfd2(0x0, 0x0) r7 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x200c}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0xffffffff, 0x8000000, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x44}}, 0x54) 5m0.095145151s ago: executing program 3 (id=178): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000002c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e0f810000000000d300e6d602010000000000d3100d3900", [0x5]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000021000)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f0000021040)=[{&(0x7f0000021080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 4m57.204935369s ago: executing program 3 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x1a, 0xf, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2ab4d}, 0x94) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r4 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x101000, 0x0) read$FUSE(r4, &(0x7f00000012c0)={0x2020}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x31) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003340), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000003380)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r5, &(0x7f0000003440)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 4m52.316932294s ago: executing program 3 (id=192): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$input_event(r0, &(0x7f00000001c0)={{0x0, 0x2710}, 0x1f, 0xe, 0x7}, 0x18) 4m51.920167373s ago: executing program 34 (id=192): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$input_event(r0, &(0x7f00000001c0)={{0x0, 0x2710}, 0x1f, 0xe, 0x7}, 0x18) 17.755496891s ago: executing program 5 (id=852): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'btrfs.', 'cryptd(crc32c-generic)\x00'}, 0x0, 0x0) 13.894963225s ago: executing program 5 (id=862): sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000d40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000d80), 0x0, 0x0) read$msr(r2, &(0x7f0000000dc0)=""/102392, 0x18ff8) process_vm_readv(r1, &(0x7f000001a3c0)=[{&(0x7f000001a400)=""/3, 0x3}], 0x1, &(0x7f000001a600)=[{&(0x7f000001a6c0)=""/216, 0xd8}], 0x1, 0x0) 10.214369691s ago: executing program 5 (id=879): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x6) r4 = syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000600)='./file0\x00', 0x2000084c, &(0x7f0000000640)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r3, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000000740)="$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") ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, 0x0) syz_mount_image$vfat(&(0x7f00000020c0), &(0x7f0000002100)='./file0\x00', 0x12148c5, &(0x7f0000002140)=ANY=[@ANYBLOB="757466383d302c74696d655f6f66667365743d3078303030303030303030303030303330612c73686f72746e616d653d6d697865642c757466383d312c756e695f786c6174653d302c757466383d302c71756965742c6e66732c73686f72746e616d653d6d697865642c757466383d302c73686f77657865632c726f6469722c726f6469722c757466383d312c00a15ca3eedbff16823a07bc73c9cbf0e80c682924d4f692c3fc3b029851d86438b8a8f8ca5bcb8f96b4583225ff5fdee9212a062a530033b2"], 0x0, 0x2dd, &(0x7f0000002240)="$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") mount(0x0, 0x0, &(0x7f0000002540)='sysfs\x00', 0x1214040, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002580)='mounts\x00') read$FUSE(r5, &(0x7f00000025c0)={0x2020}, 0x2020) 8.134443473s ago: executing program 5 (id=889): sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000d40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000d80), 0x0, 0x0) read$msr(r2, &(0x7f0000000dc0)=""/102392, 0x18ff8) process_vm_readv(r1, &(0x7f000001a3c0)=[{&(0x7f000001a400)=""/3, 0x3}], 0x1, &(0x7f000001a600)=[{&(0x7f000001a6c0)=""/216, 0xd8}], 0x1, 0x0) 7.695245501s ago: executing program 1 (id=892): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x808082, &(0x7f0000000040)={[{@block_validity}]}, 0xfe, 0x4a3, &(0x7f00000005c0)="$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") open_by_handle_at(r0, 0x0, 0x12d880) 7.107553459s ago: executing program 1 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) getpgrp(0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) sendfile(r1, r0, 0x0, 0x7ffff000) 6.852159097s ago: executing program 1 (id=899): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f00000006c0)={'syz1\x00', {0x8000}, 0x0, [0x7, 0x0, 0x0, 0x2, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x1002, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000, 0x7, 0x0, 0x80, 0x0, 0x0, 0x1, 0x10001, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x5, 0x0, 0x401, 0x806, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0xffffaed9, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x400001, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000b40)={'syz1\x00', {0x2, 0x8, 0x1, 0x7}, 0xe, [0x200, 0x0, 0xfb7, 0x6, 0x1ff, 0x400, 0x5, 0xd, 0xc, 0xfffffff7, 0x0, 0xffffffff, 0x3, 0xd4a, 0x9, 0x1, 0x8, 0x2, 0x3, 0x0, 0x1000, 0x7, 0x4, 0x8000, 0x6, 0x5b68, 0x0, 0x0, 0x3, 0x4, 0x7, 0x8d, 0xc2df, 0x4, 0x3, 0x9, 0x7, 0xd42, 0x0, 0xfdba, 0xd58, 0x0, 0x8, 0x0, 0x3, 0x200, 0xfffffffd, 0xb, 0xfffff133, 0x9, 0x4, 0xd0d, 0x5, 0x8001, 0x6, 0x80, 0x2, 0x800, 0xf39, 0x7, 0x80000001, 0x100, 0x100, 0x4], [0x7, 0x60000000, 0x6e72, 0x6, 0x9, 0xff, 0x1, 0x2, 0x9f4, 0x5, 0xffffffff, 0x3, 0x46b, 0x4, 0x5, 0x3, 0x5, 0x7f, 0x40, 0x6, 0xf23, 0x9, 0xb, 0x3, 0x0, 0x4, 0xfffffffd, 0xe, 0x2c8, 0x1, 0x8001, 0x3, 0x3, 0x80000000, 0xf5, 0x2, 0xfffffffd, 0x80000000, 0x1, 0x6, 0x0, 0x8, 0xfffffff3, 0x5, 0x29, 0x0, 0x0, 0x100, 0x4, 0x0, 0x7, 0x3, 0x7, 0x3, 0x6, 0x4, 0x6, 0x3, 0x6, 0x3, 0x7, 0x1, 0x80000000, 0x8], [0x80, 0x944e, 0xd, 0x3, 0x6, 0x3, 0x1000, 0x4, 0xed8, 0x80000001, 0x1, 0x36922bcf, 0x3, 0x4, 0x2, 0xfffffe00, 0x8, 0x1, 0x8, 0x4, 0x100, 0x1, 0x8, 0xa, 0x3, 0xff, 0x4, 0x3, 0x6, 0x10000, 0xfffffff7, 0x7, 0x9, 0x8a24, 0xe, 0xffffff19, 0x3, 0x7, 0x4, 0x40, 0x1, 0xfffffff9, 0x7, 0x7, 0x6, 0x4, 0x6, 0xc484, 0x5, 0x1, 0x10001, 0x4, 0xd, 0xe01, 0xd62, 0x3, 0x7fffffff, 0x3, 0x8, 0x9, 0x10, 0x40, 0x80000000, 0x8], [0xffffff3a, 0x0, 0xc, 0x2, 0x7, 0xfab2, 0x6, 0x401, 0x8, 0x3, 0x5, 0x95, 0xb, 0x2, 0x7f, 0x1fd, 0xff, 0x4, 0xffff, 0x71, 0x1, 0x9, 0x400, 0xfff, 0x1, 0x1, 0x34200000, 0x3ff, 0xb35, 0x4, 0x5, 0x0, 0x2, 0x8, 0xdb2, 0x0, 0x1, 0x2ce, 0xff, 0x46, 0x0, 0x2, 0x98, 0x8, 0x7, 0x7, 0x80000001, 0x9, 0xa0, 0x2, 0xba, 0x80, 0xccc, 0x5, 0xffffffff, 0x40, 0x3, 0x4, 0x6, 0x7fffffff, 0x100, 0xc2, 0x9, 0x7]}, 0x45c) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x5420, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000001a40)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000001b00)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) 5.842001143s ago: executing program 1 (id=905): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001000)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRES16], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x36, &(0x7f00000004c0)=ANY=[], 0x0) 5.780467924s ago: executing program 6 (id=906): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x808082, &(0x7f0000000040)={[{@block_validity}]}, 0xfe, 0x4a3, &(0x7f00000005c0)="$eJzs3MtvG0UYAPBv7dhJ+iChlEdLC4GCqHgkTfqgBy5FIHEACQkORZxCklalaYOaINGqgsKhHFEl7ogjEn8A4kJ7QcAJiSvcEVKFemmpkDBae9dNE9vNw7EL/v0k17M7Y898Ozvx7KzdAHrWSPpPErElIn6NiKHa5u0FRmpPN66dn/rr2vmpJCqVN/5MquWuXzs/lRfNX7c520ha1Hvx7YjJ2dmZM9n22MKp98bmz5577sSpyeMzx2dOTxw+fGD/7vKhiYPrii9vQxrX9Z0fzu3a8cpbl16bOnrpnR+/TvO2ZPmL42iXkdrRzY/IbZ5sd2VdtnVROunrYkNYlYGISLurVB3/Q1GMwXreULz8SdMXjnSogcCGqVQKlf7m2RcqwP9YOptfpYENaQjQYfkHfXr9mz86NPW4K1w9EvV1jBvZo7pYEH1RyMqUsmukjZBeRh29cPOL9BEbtA4BALDY5SMR8Wyj+V8hHlhU7p7sHspwRNwbEdvKEfdFxPaIuD+iWvbBiHholfUvXUZePv+pDK0psBVK538vZPe26vO/qnz2F8PFbGtrNf5ScuzE7My+7JjsjVJ/uj3eoo4rL/3yWbO8xfO/9JHWn88Fs3b80bdkgW56cmFyPTEvdvXjiJ19jeJP6nPedH68IyJ2rrGOE09/tWv53pvVq487x99CGybllS8jnqr1/4VYEn8uaXp/cvz5QxMHxwZidmbfWH5WLPfTzxdfb1b/uuJvg6uXK7Gp4fmfx5/8kwxEzJ89d7J6v3Z+BW+an6/ZraSLv33a+JqmVHuqx9/f4vy/sqW+Jz3/y8mb1XQ52/fB5MLCmfGIcvLq8v0Tt94t387Lp+f/3j2Nx/+27Dk9Eg9HRHoS7x6MeCQiHs367rGIeDwi9rQ4HD+8+MS7zfKa93+LVfk2SuOfbtn/MZymbvV/mohClqjvaZUonvz+2xXFn4/nZf1/oJram+1Zyd+/W61IolUD13rcAAAA4L+kUP0OfFIYracLhdHR2jfWt8emwuzc/MIzx+bePz1d+678cJQK+UrXUBz/JrL10PFsbThfH51Ysr0/Wzf+vDhY3R6dmpud7nbw0OM2Nxn/qd+L3W4dsOH8Xgt6l/EPvcv4h95l/EPvMv6hdzUa/x91oR1A593h83+wU+0AOq/x+P+74+0AOs/1P/Qu4x96UtPfxhda/my+eaIY2X/sv7aXS6wv8V25RZ/eOVFeeeEo3CUhdzlRjHa9YSkaZJWjL1b9hoOrqr2/YVa3/zIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0x78BAAD//wi03Hs=") open_by_handle_at(r0, 0x0, 0x12d880) 4.196494147s ago: executing program 0 (id=908): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000380)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000003c0)=@attr_arm64={0x0, 0x4, 0x4, 0x0}) 4.041036546s ago: executing program 6 (id=910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000a40)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}}}}}}, 0x0) 3.835298756s ago: executing program 6 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x14, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 3.587049855s ago: executing program 6 (id=914): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000740)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x4) mount(0x0, &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000880)='7', 0x1) write$binfmt_misc(r0, &(0x7f00000008c0), 0x6) 2.619997321s ago: executing program 6 (id=917): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x1, 0x0, 0x73f0, 0x9}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000780)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) dup3(r2, 0xffffffffffffffff, 0x80000) 2.47183643s ago: executing program 6 (id=918): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000000)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) read$msr(r5, &(0x7f0000000340)=""/102392, 0x18ff8) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$loop(&(0x7f0000019380), 0x2, 0x2001) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000019440)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.073090119s ago: executing program 7 (id=919): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x2286, &(0x7f0000000040)=0x85) 1.812744417s ago: executing program 1 (id=920): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x808082, &(0x7f0000000040)={[{@block_validity}]}, 0xfe, 0x4a3, &(0x7f00000005c0)="$eJzs3MtvG0UYAPBv7dhJ+iChlEdLC4GCqHgkTfqgBy5FIHEACQkORZxCklalaYOaINGqgsKhHFEl7ogjEn8A4kJ7QcAJiSvcEVKFemmpkDBae9dNE9vNw7EL/v0k17M7Y898Ozvx7KzdAHrWSPpPErElIn6NiKHa5u0FRmpPN66dn/rr2vmpJCqVN/5MquWuXzs/lRfNX7c520ha1Hvx7YjJ2dmZM9n22MKp98bmz5577sSpyeMzx2dOTxw+fGD/7vKhiYPrii9vQxrX9Z0fzu3a8cpbl16bOnrpnR+/TvO2ZPmL42iXkdrRzY/IbZ5sd2VdtnVROunrYkNYlYGISLurVB3/Q1GMwXreULz8SdMXjnSogcCGqVQKlf7m2RcqwP9YOptfpYENaQjQYfkHfXr9mz86NPW4K1w9EvV1jBvZo7pYEH1RyMqUsmukjZBeRh29cPOL9BEbtA4BALDY5SMR8Wyj+V8hHlhU7p7sHspwRNwbEdvKEfdFxPaIuD+iWvbBiHholfUvXUZePv+pDK0psBVK538vZPe26vO/qnz2F8PFbGtrNf5ScuzE7My+7JjsjVJ/uj3eoo4rL/3yWbO8xfO/9JHWn88Fs3b80bdkgW56cmFyPTEvdvXjiJ19jeJP6nPedH68IyJ2rrGOE09/tWv53pvVq487x99CGybllS8jnqr1/4VYEn8uaXp/cvz5QxMHxwZidmbfWH5WLPfTzxdfb1b/uuJvg6uXK7Gp4fmfx5/8kwxEzJ89d7J6v3Z+BW+an6/ZraSLv33a+JqmVHuqx9/f4vy/sqW+Jz3/y8mb1XQ52/fB5MLCmfGIcvLq8v0Tt94t387Lp+f/3j2Nx/+27Dk9Eg9HRHoS7x6MeCQiHs367rGIeDwi9rQ4HD+8+MS7zfKa93+LVfk2SuOfbtn/MZymbvV/mohClqjvaZUonvz+2xXFn4/nZf1/oJram+1Zyd+/W61IolUD13rcAAAA4L+kUP0OfFIYracLhdHR2jfWt8emwuzc/MIzx+bePz1d+678cJQK+UrXUBz/JrL10PFsbThfH51Ysr0/Wzf+vDhY3R6dmpud7nbw0OM2Nxn/qd+L3W4dsOH8Xgt6l/EPvcv4h95l/EPvMv6hdzUa/x91oR1A593h83+wU+0AOq/x+P+74+0AOs/1P/Qu4x96UtPfxhda/my+eaIY2X/sv7aXS6wv8V25RZ/eOVFeeeEo3CUhdzlRjHa9YSkaZJWjL1b9hoOrqr2/YVa3/zIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0x78BAAD//wi03Hs=") open_by_handle_at(r0, 0x0, 0x12d880) 1.733117877s ago: executing program 7 (id=921): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) getpgrp(0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) sendfile(r1, r0, 0x0, 0x7ffff000) 1.708690187s ago: executing program 0 (id=922): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x0, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 1.624831737s ago: executing program 5 (id=923): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'syz_tun\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200012, &(0x7f0000000c00)={[{@noauto_da_alloc}, {@abort}, {@grpjquota}, {@usrjquota}, {@discard}, {@sysvgroups}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@nogrpid}, {@jqfmt_vfsold}]}, 0x4, 0x5a4, &(0x7f0000000480)="$eJzs3c9rHFUcAPDv22zSpmmbVAStPRgo2IKaNGlFEcEW682DPwqeCsYkLaXbNjQRbK3YQv0P9A8QvAkiHotIUS9evQleBSkWaXPxtjK7s+m23c3PTaZ2Ph/Y5r15u3zfZPvNm3n7ZjaA0hrN/qlE7I2IuRQx3NZWjbxxtPm8u3euTC/euTKdol5/758UKd/Wen7Kfw7lL94eEb/9lOKJvofjzl+6fHaqVpu9mNfHF87Njc9fuvzimXNTp2dPz56fnHh54qUjhyePHNrYDuaxd0XEL2PHq9dPvbHvu+mv93z2wzc3UhyNnfnT2vejV0ZjdOl30i77vb7S62AF6cv3p/0tTtUCO8SatN6//oh4KoajL+69ecPx+TuFdg7YVPUUUQdKKsl/KKnWcUB2/tt6FHtEAmyV28eaEwB3U3Nub3Ep/6vNucHY3pgb2LGYon1aJ0XEBmfmGrIYc8+l4ewRmzQPB3R29VpEPN1p/E+N3BxpzOJn+V+5L/8rEfF2/jPb/u46448+UJf/sHU2kv8ftOX/h+uML/8BAAAAAACgd24ei4gXOn3+V1la/xMd1v8MRcTRHsRf+fO/yq0ehAE6uH0s4rWIaK39W2zL/9xIX17b1VgP0J9OnanNHoqI3RFxMPq3ZfWJZWKM7vu1v2tb2/q/7JHFb60FzPtxq7rt/tfMTC1MbWSfgabb1yKeqXbK/7Q0/qcHxv9d+dg/t8oY9eOv/9ytbeX8BzZL/auIAx3H/3t3rkjL359jvHE8MN46KnjYJydvfN8tvvyH4mTj/47l838ktd+vZ37tMT79+48N5H/n4/+BdKJxy5mBfNvHUwsLFyciBtJbD2+fXHuf4XHUyodWvmT5f3B/5/P/bsf/mcGIuLrKmCd+fPN6tzbjPxRn8FrEzJrG/7UX9r//5b/d4q9u/D/SGNMP5lvM/8HyVpugRfcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PKhGxM1JlbKlcqYyNRQxFxJOxo1K7ML/w/KkLH52fydoa3/9faX3T73Cznlrf/z/SVp98oH44IvZExBd9g4362PSF2kzROw8AAAAAAAAAAAAAAAAAAACPiKEu1/9n/uorunfApqsW3QGgMPIfykv+Q3nJfygv+Q/lta78P9r7fgBbz/gP5SX/obzkP5RXX/3bk0X3AQAAAAAA6Jk9z978PUXE1VcHG4/MQN7WX2jPgM1mFS+Ul1v8QHlZ+gfltdI5vjkAePylFdq3r/uVAAAAAAAAAAAAAECvHNjr+n8oq0rRHQAK0/36f3cGgMed6/+hvJzjA67/BwAAAAAAAAAAAIBH3/yly2enarXZi+stbNvYyxUUVlv4c3fz/+yj0p+1FyL1IOO2qFD0XyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDlvwAAAP//+Uj1tA==") socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) 1.581279007s ago: executing program 7 (id=924): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x2000085c, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYBLOB="f9ee7ee6616006527905abd668ea17e382e0c83dc34879c344493674bfcb9afe6942e9f3d383d25450ee2c31ef3422c5857ce514a621738e2e8b8bb22211f40606af5eedb6115a0ca9f3b51f9577ee83ca37bd7a2dda7be50c943889823da42fa1d61769bcf9be27857939030378203de5ad9ccf10f333", @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000007b00)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000007b40)='./file1\x00', 0x145142, 0x0) r2 = syz_open_dev$loop(&(0x7f0000007b80), 0x0, 0x22400) sendfile(r1, r2, 0x0, 0x80000002) write$FUSE_WRITE(r0, &(0x7f0000007bc0)={0x18, 0xfffffffffffffffe, 0x0, {0x4}}, 0x18) 1.518421536s ago: executing program 0 (id=925): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0xf0, 0x14, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x9ba3, 0x636f, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) 1.316952415s ago: executing program 7 (id=926): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioperm(0x2, 0x7, 0x13) lseek(0xffffffffffffffff, 0x3, 0x1) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) 1.316734055s ago: executing program 1 (id=927): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30048085) close(0x3) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f700004e236ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.311197995s ago: executing program 0 (id=928): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x1, 0x0, 0x73f0, 0x9}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000780)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r2, &(0x7f0000019840)=""/102368, 0x18fe0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) 1.101316065s ago: executing program 0 (id=929): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88ce359bdb08143e, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) ioctl$TCFLSH(r0, 0x800455c9, 0x1) 399.097052ms ago: executing program 7 (id=930): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f78", 0x8a}, {&(0x7f0000000cc0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d3", 0x3b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001340)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1", 0xda}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 316.931011ms ago: executing program 0 (id=931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x100, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) 10.757901ms ago: executing program 7 (id=932): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) listen(r3, 0x1) 0s ago: executing program 5 (id=933): sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000d40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000d80), 0x0, 0x0) read$msr(r2, &(0x7f0000000dc0)=""/102392, 0x18ff8) process_vm_readv(r1, &(0x7f000001a3c0)=[{&(0x7f000001a400)=""/3, 0x3}], 0x1, &(0x7f000001a600)=[{&(0x7f000001a6c0)=""/216, 0xd8}], 0x1, 0x0) kernel console output (not intermixed with test programs): oop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 166.731121][ T5287] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 166.813696][ T5287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.883839][ T5300] loop0: detected capacity change from 0 to 128 [ 166.936255][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.080046][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.096048][ T5308] attempt to access beyond end of device [ 167.096048][ T5308] loop0: rw=2049, want=513, limit=128 [ 167.116748][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.135993][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.181835][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.227809][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.262088][ T5311] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 167.281480][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.288688][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.811537][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.856964][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.949044][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.648650][ T5324] loop5: detected capacity change from 0 to 1024 [ 168.891319][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.898481][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.042769][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.083993][ T5324] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 169.203996][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.357599][ T5324] Quota error (device loop5): find_tree_dqentry: Getting block too big (64 >= 6) [ 169.367065][ T5324] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 169.377057][ T5324] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.234: Failed to acquire dquot type 0 [ 169.392810][ T5324] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 169.418220][ T5324] EXT4-fs (loop5): 1 truncate cleaned up [ 169.424007][ T5324] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 169.493280][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.185575][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.262098][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.311849][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.388195][ T5336] attempt to access beyond end of device [ 170.388195][ T5336] loop0: rw=1, want=1041, limit=128 [ 170.429038][ T5121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.429060][ T5121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.432037][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.433405][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.433839][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.434459][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.434874][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.436314][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.651707][ T26] audit: type=1800 audit(1792478338.483:9): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.242" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 171.676281][ T5356] loop0: detected capacity change from 0 to 2048 [ 171.754880][ T5356] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 171.772172][ T5362] loop5: detected capacity change from 0 to 2048 [ 171.827842][ T5356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.862325][ T5362] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 171.895743][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.913532][ T5336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.990573][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.764476][ T5392] loop6: detected capacity change from 0 to 1024 [ 174.609793][ T5392] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 175.336556][ T5392] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6) [ 175.345865][ T5392] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 175.355380][ T5392] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.247: Failed to acquire dquot type 0 [ 175.369177][ T5392] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 175.384480][ T5392] EXT4-fs (loop6): 1 truncate cleaned up [ 175.390177][ T5392] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 175.546446][ T5401] loop1: detected capacity change from 0 to 256 [ 175.637461][ T5401] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 175.997943][ T26] audit: type=1800 audit(1792478342.823:10): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.253" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 176.174423][ T5421] loop1: detected capacity change from 0 to 2048 [ 176.274641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.466939][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.529929][ T5421] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 176.863554][ T5421] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 176.910204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.927685][ T26] audit: type=1326 audit(1792478343.753:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.5.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e37d38559 code=0x7ffc0000 [ 176.971536][ T5421] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 176.988201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.013860][ T5421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.024626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.292678][ T26] audit: type=1326 audit(1792478343.763:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.5.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e37d38559 code=0x7ffc0000 [ 178.329196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.422045][ T5121] device veth0_vlan entered promiscuous mode [ 178.466532][ T26] audit: type=1326 audit(1792478343.763:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.5.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e37d38559 code=0x7ffc0000 [ 178.491419][ T26] audit: type=1326 audit(1792478343.763:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.5.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f7e37d38559 code=0x7ffc0000 [ 178.516017][ T26] audit: type=1326 audit(1792478343.763:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.5.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e37d38559 code=0x7ffc0000 [ 178.541164][ T26] audit: type=1326 audit(1792478343.763:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.5.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e37d38559 code=0x7ffc0000 [ 178.573710][ T26] audit: type=1326 audit(1792478343.763:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.5.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7e37d38559 code=0x7ffc0000 [ 178.638412][ T5121] device veth1_vlan entered promiscuous mode [ 178.660455][ T5435] loop5: detected capacity change from 0 to 512 [ 178.719503][ T26] audit: type=1326 audit(1792478343.763:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5424 comm="syz.5.255" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7e37d38559 code=0x7ffc0000 [ 179.216768][ T5435] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.335612][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.392097][ T5435] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.408552][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.484852][ T5121] device veth0_macvtap entered promiscuous mode [ 179.531986][ T5121] device veth1_macvtap entered promiscuous mode [ 179.597016][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.607576][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.619851][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.630397][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.640297][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.650953][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.660811][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.691075][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.845797][ T5460] loop0: detected capacity change from 0 to 1024 [ 179.881692][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.075914][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.250677][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.410084][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.646528][ T5460] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 180.677610][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.699366][ T5460] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 180.709003][ T5460] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 180.718505][ T5460] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.262: Failed to acquire dquot type 0 [ 180.732553][ T5460] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 180.752966][ T5460] EXT4-fs (loop0): 1 truncate cleaned up [ 180.758704][ T5460] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 180.806861][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.827423][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.836798][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.847113][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.872797][ T1523] device hsr_slave_0 left promiscuous mode [ 180.892953][ T1523] device hsr_slave_1 left promiscuous mode [ 180.972902][ T1523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.497406][ T1523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.544847][ T1523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.663840][ T1523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.725824][ T1523] device bridge_slave_1 left promiscuous mode [ 182.754435][ T1523] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.818780][ T1523] device bridge_slave_0 left promiscuous mode [ 182.854663][ T1523] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.761040][ T1523] device hsr_slave_0 left promiscuous mode [ 183.952293][ T1523] device hsr_slave_1 left promiscuous mode [ 183.971213][ T1523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.978779][ T1523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.002944][ T1523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.099010][ T1523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.298752][ T1523] device bridge_slave_1 left promiscuous mode [ 184.331143][ T1523] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.382617][ T1523] device bridge_slave_0 left promiscuous mode [ 184.388978][ T1523] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.541730][ T1523] device veth1_macvtap left promiscuous mode [ 184.547907][ T1523] device veth0_macvtap left promiscuous mode [ 184.616821][ T1523] device veth1_vlan left promiscuous mode [ 184.655563][ T1523] device veth0_vlan left promiscuous mode [ 184.710160][ T1523] device veth1_macvtap left promiscuous mode [ 184.722391][ T1523] device veth0_macvtap left promiscuous mode [ 184.749096][ T1523] device veth1_vlan left promiscuous mode [ 184.759201][ T1523] device veth0_vlan left promiscuous mode [ 184.772984][ T5493] loop0: detected capacity change from 0 to 2048 [ 184.789747][ T26] audit: type=1800 audit(1792478351.613:19): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.266" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 184.876461][ T5493] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.730292][ T5512] loop1: detected capacity change from 0 to 512 [ 186.783208][ T5514] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input13 [ 186.917900][ T26] audit: type=1800 audit(1792478353.743:20): pid=5524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.278" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 186.965439][ T5512] xt_NFQUEUE: number of total queues is 0 [ 187.521722][ T5536] input: syz1 as /devices/virtual/input/input14 [ 188.388827][ T1523] team0 (unregistering): Port device team_slave_1 removed [ 188.460621][ T1523] team0 (unregistering): Port device team_slave_0 removed [ 188.470454][ T5546] loop5: detected capacity change from 0 to 512 [ 188.557438][ T1523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.641495][ T1523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.669689][ T5544] loop6: detected capacity change from 0 to 2048 [ 188.714194][ T5544] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 188.810160][ T5544] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 188.875435][ T5544] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 188.931383][ T5544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.086212][ T5546] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.161881][ T5546] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.299035][ T1523] bond0 (unregistering): Released all slaves [ 190.088839][ T1523] team0 (unregistering): Port device team_slave_1 removed [ 190.219878][ T1523] team0 (unregistering): Port device team_slave_0 removed [ 190.689821][ T1523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.866588][ T1523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.369774][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 192.394433][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 192.544684][ T1523] bond0 (unregistering): Released all slaves [ 192.607658][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.640937][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.680982][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.704526][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.729053][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.741671][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.754877][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.765884][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.781305][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.790403][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.800480][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.816461][ T5559] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 192.862867][ T5121] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.897410][ T5121] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.926821][ T5121] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.972136][ T5121] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.468504][ T5583] loop5: detected capacity change from 0 to 1024 [ 194.482871][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.533808][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.078042][ T5583] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 195.128916][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.245340][ T5583] Quota error (device loop5): find_tree_dqentry: Getting block too big (64 >= 6) [ 195.255006][ T5583] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 195.264584][ T5583] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.292: Failed to acquire dquot type 0 [ 195.295131][ T5583] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 195.317913][ T5583] EXT4-fs (loop5): 1 truncate cleaned up [ 195.323809][ T5583] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 195.463915][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.701316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.780068][ T4694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.835020][ T4694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.902674][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.114656][ T5600] input: syz1 as /devices/virtual/input/input15 [ 196.290193][ T4352] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 196.381791][ T5607] loop6: detected capacity change from 0 to 2048 [ 196.452092][ T5607] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 196.493701][ T5607] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 196.514826][ T5617] loop1: detected capacity change from 0 to 512 [ 196.540997][ T4352] usb 1-1: Using ep0 maxpacket: 16 [ 196.566717][ T5607] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 196.599190][ T5607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.689834][ T5617] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.701228][ T4352] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.720005][ T5617] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.791403][ T4352] usb 1-1: config 6 has an invalid interface number: 231 but max is 0 [ 196.804184][ T4352] usb 1-1: config 6 has no interface number 0 [ 196.961281][ T4352] usb 1-1: New USB device found, idVendor=04f2, idProduct=aff9, bcdDevice=98.5b [ 196.991746][ T4352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.038530][ T4352] usb 1-1: Product: syz [ 197.064669][ T4352] usb 1-1: Manufacturer: syz [ 197.099048][ T4352] usb 1-1: SerialNumber: syz [ 197.241705][ T5632] FAULT_INJECTION: forcing a failure. [ 197.241705][ T5632] name fail_futex, interval 1, probability 0, space 0, times 1 [ 197.254881][ T5632] CPU: 0 PID: 5632 Comm: syz.5.300 Not tainted syzkaller #0 [ 197.262225][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 197.272346][ T5632] Call Trace: [ 197.275669][ T5632] [ 197.278648][ T5632] dump_stack_lvl+0x188/0x250 [ 197.283402][ T5632] ? show_regs_print_info+0x20/0x20 [ 197.288653][ T5632] ? load_image+0x410/0x410 [ 197.293214][ T5632] ? get_user_pages_fast_only+0x40/0x40 [ 197.298826][ T5632] should_fail+0x383/0x4b0 [ 197.303336][ T5632] get_futex_key+0xbd4/0x12d0 [ 197.308086][ T5632] ? futex_wait_restart+0x250/0x250 [ 197.313344][ T5632] ? __might_sleep+0xf0/0xf0 [ 197.318000][ T5632] futex_wait_requeue_pi+0x333/0xb50 [ 197.323366][ T5632] ? futex_unlock_pi+0xc00/0xc00 [ 197.328382][ T5632] ? futex_wait_queue_me+0x2d6/0x440 [ 197.333741][ T5632] ? mark_lock+0x94/0x320 [ 197.338182][ T5632] ? verify_lock_unused+0x140/0x140 [ 197.343462][ T5632] ? verify_lock_unused+0x140/0x140 [ 197.348731][ T5632] do_futex+0xe0c/0x12b0 [ 197.353049][ T5632] ? vfs_write+0xaa6/0xd70 [ 197.357547][ T5632] ? futex_exit_release+0x1c0/0x1c0 [ 197.362829][ T5632] ? __context_tracking_exit+0x4c/0x80 [ 197.368356][ T5632] __se_sys_futex+0x389/0x420 [ 197.373092][ T5632] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 197.379173][ T5632] ? __x64_sys_futex+0xf0/0xf0 [ 197.383985][ T5632] ? __x64_sys_futex+0x1d/0xf0 [ 197.388810][ T5632] do_syscall_64+0x4c/0xa0 [ 197.393283][ T5632] ? clear_bhb_loop+0x30/0x80 [ 197.398013][ T5632] ? clear_bhb_loop+0x30/0x80 [ 197.402739][ T5632] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.408701][ T5632] RIP: 0033:0x7f7e37d38559 [ 197.413179][ T5632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.433004][ T5632] RSP: 002b:00007f7e35f90028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 197.441473][ T5632] RAX: ffffffffffffffda RBX: 00007f7e37fbffa0 RCX: 00007f7e37d38559 [ 197.449497][ T5632] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000000000000000 [ 197.457532][ T5632] RBP: 00007f7e37dcfad8 R08: 0000200000001ac0 R09: 0000000000000001 [ 197.465558][ T5632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.473580][ T5632] R13: 00007f7e37fc0038 R14: 00007f7e37fbffa0 R15: 00007ffc17f65c18 [ 197.481614][ T5632] [ 198.191523][ T5650] input: syz1 as /devices/virtual/input/input16 [ 198.570287][ T5662] loop7: detected capacity change from 0 to 1024 [ 198.834792][ T5662] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 198.973227][ T5662] Quota error (device loop7): find_tree_dqentry: Getting block too big (64 >= 6) [ 198.982709][ T5662] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 198.992306][ T5662] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.307: Failed to acquire dquot type 0 [ 199.014348][ T5662] EXT4-fs error (device loop7): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 199.033477][ T5662] EXT4-fs (loop7): 1 truncate cleaned up [ 199.039327][ T5662] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 199.521704][ T5381] usb 1-1: USB disconnect, device number 3 [ 202.063703][ T5694] loop0: detected capacity change from 0 to 512 [ 202.152562][ T5694] FAT-fs (loop0): Unrecognized mount option "ÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ" or missing value [ 203.697558][ T5707] input: syz1 as /devices/virtual/input/input17 [ 203.770434][ T26] audit: type=1800 audit(1792478370.593:21): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.318" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 204.046515][ T5718] loop5: detected capacity change from 0 to 1024 [ 204.806974][ T5721] loop1: detected capacity change from 0 to 2048 [ 206.205188][ T5721] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 206.231651][ T5718] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 206.242336][ T5721] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 206.295979][ T5718] Quota error (device loop5): find_tree_dqentry: Getting block too big (64 >= 6) [ 206.305255][ T5718] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 206.314730][ T5718] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.319: Failed to acquire dquot type 0 [ 206.329020][ T5718] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 206.345169][ T5718] EXT4-fs (loop5): 1 truncate cleaned up [ 206.350932][ T5718] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 206.393816][ T5721] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 206.451277][ T5721] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.978538][ T5740] loop6: detected capacity change from 0 to 512 [ 207.216126][ T5740] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 207.269246][ T5740] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.718131][ T5789] input: syz1 as /devices/virtual/input/input18 [ 210.389157][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 210.443263][ T5809] loop7: detected capacity change from 0 to 1024 [ 210.619680][ T5809] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 210.725303][ T5809] Quota error (device loop7): find_tree_dqentry: Getting block too big (64 >= 6) [ 210.735035][ T5809] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 210.745180][ T5809] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.335: Failed to acquire dquot type 0 [ 210.777513][ T5809] EXT4-fs error (device loop7): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 210.801122][ T5809] EXT4-fs (loop7): 1 truncate cleaned up [ 210.806938][ T5809] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 211.617821][ T5815] loop7: detected capacity change from 0 to 512 [ 211.635122][ T5817] input: syz1 as /devices/virtual/input/input19 [ 211.691090][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 211.732296][ T5815] xt_NFQUEUE: number of total queues is 0 [ 211.811225][ T7] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 211.828595][ T7] usb 1-1: config 0 has no interface number 0 [ 211.857133][ T7] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.895383][ T7] usb 1-1: config 0 interface 85 has no altsetting 0 [ 212.071172][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 212.089482][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.113605][ T7] usb 1-1: Product: syz [ 212.120023][ T7] usb 1-1: Manufacturer: syz [ 212.131296][ T7] usb 1-1: SerialNumber: syz [ 212.157671][ T7] usb 1-1: config 0 descriptor?? [ 213.002590][ T5837] loop1: detected capacity change from 0 to 1024 [ 213.634418][ T5843] input: syz1 as /devices/virtual/input/input20 [ 213.656857][ T5837] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 213.684244][ T5837] EXT4-fs (loop1): invalid journal inode [ 213.690034][ T5837] EXT4-fs (loop1): can't get journal size [ 213.718586][ T5837] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback. [ 213.734142][ T7] appletouch 1-1:0.85: Geyser mode initialized. [ 213.743425][ T7] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input21 [ 213.944803][ T7] usb 1-1: USB disconnect, device number 4 [ 213.951138][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 214.011829][ T7] appletouch 1-1:0.85: input: appletouch disconnected [ 214.223796][ T5853] loop7: detected capacity change from 0 to 1024 [ 215.026374][ T4262] Bluetooth: hci0: command 0x0c13 tx timeout [ 215.354670][ T5853] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 215.531200][ T5853] Quota error (device loop7): find_tree_dqentry: Getting block too big (64 >= 6) [ 215.540510][ T5853] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 215.550293][ T5853] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.348: Failed to acquire dquot type 0 [ 215.565520][ T5853] EXT4-fs error (device loop7): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 215.582333][ T5853] EXT4-fs (loop7): 1 truncate cleaned up [ 215.588063][ T5853] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 215.639029][ T5860] loop6: detected capacity change from 0 to 2048 [ 215.691767][ T5860] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 215.789048][ T5860] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 215.809994][ T5860] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 216.029539][ T5860] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.092935][ T5876] input: syz1 as /devices/virtual/input/input22 [ 216.143823][ T26] audit: type=1800 audit(1792478382.973:22): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.356" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 216.176362][ T5881] loop0: detected capacity change from 0 to 512 [ 217.106020][ T5881] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.148059][ T5881] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.630602][ T5899] loop5: detected capacity change from 0 to 16 [ 219.385434][ T5899] erofs: (device loop5): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms 2 [ 221.510715][ T5935] input: syz1 as /devices/virtual/input/input23 [ 221.570015][ T5934] loop0: detected capacity change from 0 to 1024 [ 222.058222][ T5934] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 222.963052][ T5934] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 222.972432][ T5934] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 222.981948][ T5934] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.365: Failed to acquire dquot type 0 [ 222.996841][ T5934] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 223.012496][ T5934] EXT4-fs (loop0): 1 truncate cleaned up [ 223.018215][ T5934] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 223.138693][ T5947] loop7: detected capacity change from 0 to 512 [ 223.371136][ T4435] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 223.641119][ T4435] usb 7-1: Using ep0 maxpacket: 16 [ 223.781593][ T4435] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 223.796464][ T5956] loop1: detected capacity change from 0 to 4096 [ 223.814092][ T4435] usb 7-1: config 0 has no interface number 0 [ 223.820274][ T4435] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 223.964869][ T5947] EXT4-fs (loop7): 1 truncate cleaned up [ 223.971556][ T4435] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 223.977711][ T5947] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 224.154408][ T5956] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.785821][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200' [ 226.797127][ T4201] CPU: 0 PID: 4201 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 226.804755][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 226.814849][ T4201] Workqueue: hci2 hci_rx_work [ 226.819574][ T4201] Call Trace: [ 226.822880][ T4201] [ 226.825840][ T4201] dump_stack_lvl+0x188/0x250 [ 226.830552][ T4201] ? show_regs_print_info+0x20/0x20 [ 226.835785][ T4201] ? load_image+0x410/0x410 [ 226.840332][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 226.845477][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 226.850203][ T4201] ? ret_from_fork+0x1f/0x30 [ 226.854835][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 226.860067][ T4201] kobject_add_internal+0x5ba/0xcd0 [ 226.865306][ T4201] kobject_add+0x160/0x230 [ 226.869768][ T4201] ? kobject_init+0x1c0/0x1c0 [ 226.874481][ T4201] ? __raw_spin_lock_init+0x41/0x100 [ 226.879801][ T4201] ? get_device_parent+0x121/0x3e0 [ 226.884948][ T4201] device_add+0x470/0x1050 [ 226.889411][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 226.894383][ T4201] hci_sync_conn_complete_evt+0x647/0x9d0 [ 226.900133][ T4201] ? __rwlock_init+0x140/0x140 [ 226.904938][ T4201] hci_event_packet+0x8cf/0x1310 [ 226.909912][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 226.914799][ T4201] ? rcu_lock_release+0x20/0x20 [ 226.919682][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 226.924951][ T4201] hci_rx_work+0x255/0xa10 [ 226.929414][ T4201] process_one_work+0x867/0xff0 [ 226.934341][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 226.940007][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 226.945356][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 226.950437][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 226.956026][ T4201] ? wq_worker_running+0x97/0x170 [ 226.961094][ T4201] worker_thread+0xad7/0x12a0 [ 226.965848][ T4201] kthread+0x42e/0x520 [ 226.969946][ T4201] ? rcu_lock_release+0x20/0x20 [ 226.974823][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 226.979449][ T4201] ret_from_fork+0x1f/0x30 [ 226.983964][ T4201] [ 227.132421][ T4435] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 227.161085][ T4201] kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 227.174751][ T4201] Bluetooth: hci2: failed to register connection device [ 227.189942][ T4435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.252010][ T4435] usb 7-1: Product: syz [ 227.268228][ T4435] usb 7-1: Manufacturer: syz [ 227.472860][ T4435] usb 7-1: config 0 descriptor?? [ 227.501298][ T4435] usb 7-1: can't set config #0, error -71 [ 227.513036][ T5989] input: syz1 as /devices/virtual/input/input24 [ 227.527951][ T4435] usb 7-1: USB disconnect, device number 2 [ 227.554042][ T5995] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 [ 227.606907][ T5994] loop5: detected capacity change from 0 to 2048 [ 227.665223][ T5994] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 227.719521][ T5994] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 227.759759][ T5994] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 227.798079][ T5994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.811099][ T4333] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 229.081091][ T4333] usb 7-1: Using ep0 maxpacket: 32 [ 229.119388][ T6020] loop0: detected capacity change from 0 to 512 [ 229.201398][ T4333] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 229.245839][ T4333] usb 7-1: config 0 has no interface number 0 [ 229.275090][ T4352] Bluetooth: hci2: command 0x0409 tx timeout [ 229.281895][ T4333] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.293251][ T4333] usb 7-1: config 0 interface 85 has no altsetting 0 [ 229.344732][ T6020] EXT4-fs (loop0): 1 truncate cleaned up [ 229.350528][ T6020] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 229.481483][ T4333] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 229.623025][ T4333] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.822287][ T4333] usb 7-1: Product: syz [ 230.011055][ T4333] usb 7-1: Manufacturer: syz [ 230.015900][ T4333] usb 7-1: SerialNumber: syz [ 230.061311][ T4333] usb 7-1: config 0 descriptor?? [ 230.460799][ T6031] input: syz1 as /devices/virtual/input/input26 [ 230.981319][ T4333] appletouch 7-1:0.85: Geyser mode initialized. [ 231.011943][ T4333] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input25 [ 231.216642][ T4435] usb 7-1: USB disconnect, device number 3 [ 231.261254][ T4435] appletouch 7-1:0.85: input: appletouch disconnected [ 232.910233][ T6056] loop0: detected capacity change from 0 to 128 [ 233.051972][ T6056] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 233.138548][ T6056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.210192][ T6062] input: syz1 as /devices/virtual/input/input27 [ 234.109485][ T6076] loop6: detected capacity change from 0 to 512 [ 234.131859][ T6078] loop7: detected capacity change from 0 to 512 [ 234.568766][ T6076] EXT4-fs (loop6): 1 truncate cleaned up [ 234.605377][ T6076] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 234.698739][ T6078] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.781038][ T6078] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.509413][ T26] audit: type=1800 audit(1792478402.283:23): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.402" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 237.340971][ T5381] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 237.630951][ T5381] usb 6-1: Using ep0 maxpacket: 32 [ 237.806848][ T5381] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 237.835466][ T5381] usb 6-1: config 0 has no interface number 0 [ 237.863473][ T5381] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.895124][ T5381] usb 6-1: config 0 interface 85 has no altsetting 0 [ 238.075535][ T26] audit: type=1326 audit(1792478404.903:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.6.405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 238.102745][ T5381] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 238.115470][ T5381] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.132752][ T5381] usb 6-1: Product: syz [ 238.141594][ T5381] usb 6-1: Manufacturer: syz [ 238.151901][ T5381] usb 6-1: SerialNumber: syz [ 238.162494][ T26] audit: type=1326 audit(1792478404.943:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.6.405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 238.197960][ T5381] usb 6-1: config 0 descriptor?? [ 238.248230][ T26] audit: type=1326 audit(1792478404.943:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.6.405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 238.310519][ T26] audit: type=1326 audit(1792478404.943:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.6.405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 238.414952][ T26] audit: type=1326 audit(1792478404.973:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.6.405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 238.455007][ T6150] loop7: detected capacity change from 0 to 2048 [ 238.461761][ T26] audit: type=1326 audit(1792478404.973:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.6.405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 238.514780][ T6150] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 238.557215][ T6150] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 238.589946][ T26] audit: type=1326 audit(1792478404.973:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.6.405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 238.604573][ T6150] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 238.666640][ T26] audit: type=1326 audit(1792478404.973:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.6.405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 238.717143][ T6150] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.837214][ T26] audit: type=1326 audit(1792478404.973:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.6.405" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 238.942606][ T6164] input: syz1 as /devices/virtual/input/input29 [ 238.951158][ T5381] appletouch 6-1:0.85: Geyser mode initialized. [ 238.965153][ T5381] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input28 [ 239.183228][ T4262] usb 6-1: USB disconnect, device number 4 [ 239.197283][ T6174] loop6: detected capacity change from 0 to 256 [ 240.238964][ T4262] appletouch 6-1:0.85: input: appletouch disconnected [ 240.707712][ T6192] loop0: detected capacity change from 0 to 512 [ 240.915157][ T6192] FAT-fs (loop0): Unrecognized mount option "ÿE³^+N/´xJ ˆ2åorTºcÉ÷]9²Ÿj:2t¨Hø ¶Vá?MMc¢zIé›Þ·}Acîà" or missing value [ 242.146661][ T6212] loop5: detected capacity change from 0 to 4096 [ 242.234212][ T6212] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 244.001459][ T6238] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6239] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6238] [ 246.629501][ T6265] loop7: detected capacity change from 0 to 512 [ 246.639935][ T6271] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input30 [ 246.749818][ T6265] EXT4-fs (loop7): Ignoring removed oldalloc option [ 246.757873][ T4201] Bluetooth: hci3: link tx timeout [ 246.763740][ T4201] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 246.775789][ T4201] Bluetooth: hci3: link tx timeout [ 246.781032][ T4201] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 246.836272][ T6265] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.435: invalid indirect mapped block 4294967295 (level 1) [ 246.893151][ T6265] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.435: invalid indirect mapped block 4294967295 (level 1) [ 246.919338][ T6265] EXT4-fs (loop7): 2 truncates cleaned up [ 247.451361][ T6286] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6287] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6286] [ 248.177220][ T6265] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,oldalloc,minixdf,i_version,,errors=continue. Quota mode: writeback. [ 248.227664][ T6290] loop1: detected capacity change from 0 to 512 [ 248.394240][ T6294] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.435: bg 0: block 5: invalid block bitmap [ 248.483445][ T6290] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 248.523701][ T6265] rxe_eth0 speed is unknown, defaulting to 1000 [ 248.633925][ T6265] EXT4-fs error (device loop7): ext4_find_dest_de:2117: inode #2: block 13: comm syz.7.435: bad entry in directory: inode out of bounds - offset=108, inode=134217745, rec_len=916, size=1024 fake=0 [ 248.677019][ T6290] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 248.737415][ T6290] EXT4-fs (loop1): 1 truncate cleaned up [ 248.763510][ T6290] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 248.831180][ T5584] Bluetooth: hci3: command 0x0406 tx timeout [ 248.882828][ T6290] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #2: block 13: comm syz.1.444: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 251.409719][ T6320] loop6: detected capacity change from 0 to 512 [ 252.019399][ T4295] Bluetooth: hci3: command 0x0406 tx timeout [ 252.081662][ T6325] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 252.321062][ T6332] loop0: detected capacity change from 0 to 1024 [ 252.851431][ T6337] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6338] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6337] [ 253.568009][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 253.577586][ T6320] fscrypt: Error allocating hmac(sha512): -2 [ 253.583681][ T6320] EXT4-fs (loop6): Error processing option "test_dummy_encryption" [-2] [ 253.841872][ T6332] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 254.011064][ T6332] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 254.018703][ T6332] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 254.130577][ T6351] loop5: detected capacity change from 0 to 2048 [ 254.168459][ T6356] loop1: detected capacity change from 0 to 512 [ 254.231021][ T6351] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 254.264213][ T6351] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 254.313921][ T6351] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 254.390168][ T6356] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,nogrpid,,errors=continue. Quota mode: writeback. [ 254.451421][ T6351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.501460][ T6356] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.625287][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.632126][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.757267][ T6403] input: syz1 as /devices/virtual/input/input31 [ 257.832736][ T6407] loop6: detected capacity change from 0 to 512 [ 259.336463][ T6407] FAT-fs (loop6): Unrecognized mount option "ÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ" or missing value [ 260.459197][ T6416] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 261.976485][ T6426] loop1: detected capacity change from 0 to 256 [ 262.122963][ T6426] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 263.381291][ T5584] Bluetooth: hci0: command 0x0406 tx timeout [ 264.566575][ T6458] input: syz1 as /devices/virtual/input/input32 [ 266.189628][ T6481] loop0: detected capacity change from 0 to 2048 [ 266.274829][ T6481] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 266.305882][ T6481] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 266.380930][ T6481] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 266.434867][ T6481] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.224590][ T6519] input: syz1 as /devices/virtual/input/input33 [ 269.489228][ T6532] netlink: 9 bytes leftover after parsing attributes in process `syz.7.499'. [ 269.654904][ T6532] device gretap0 entered promiscuous mode [ 269.695892][ T6536] netlink: 5 bytes leftover after parsing attributes in process `syz.7.499'. [ 269.801388][ T6536] 0ªî{X¹¦: renamed from gretap0 [ 269.809114][ T6536] device 30ªî{X¹¦ left promiscuous mode [ 269.817069][ T6536] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 270.860341][ T6551] loop1: detected capacity change from 0 to 8 [ 271.943397][ T4201] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 274.587510][ T6595] loop0: detected capacity change from 0 to 512 [ 274.761952][ T6595] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nogrpid,dioread_lock,,errors=continue. Quota mode: writeback. [ 274.816789][ T6595] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.056068][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 275.056082][ T26] audit: type=1804 audit(1792478441.883:43): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.511" name="/newroot/116/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 275.513815][ T6613] loop7: detected capacity change from 0 to 512 [ 276.188959][ T6613] EXT4-fs (loop7): Ignoring removed nobh option [ 276.195376][ T6613] EXT4-fs (loop7): Unrecognized mount option "func=FILE_CHECK" or missing value [ 276.407708][ T6616] loop1: detected capacity change from 0 to 2048 [ 276.696739][ T6616] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 276.781175][ T6616] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 277.489960][ T6616] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 277.594949][ T6616] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.981046][ T4352] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 278.914050][ T4352] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.201076][ T4352] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.224440][ T4352] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.267771][ T4352] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.304407][ T4352] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.338485][ T4352] usb 8-1: config 0 descriptor?? [ 279.819596][ T6638] loop7: detected capacity change from 0 to 164 [ 279.891329][ T6638] Unable to read rock-ridge attributes [ 279.969245][ T6661] Unable to read rock-ridge attributes [ 279.981332][ T6661] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 280.531146][ T4352] usbhid 8-1:0.0: can't add hid device: -71 [ 280.537227][ T4352] usbhid: probe of 8-1:0.0 failed with error -71 [ 280.571218][ T4352] usb 8-1: USB disconnect, device number 2 [ 281.226181][ T26] audit: type=1800 audit(1792478448.053:44): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.525" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 281.350977][ T26] audit: type=1326 audit(1792478448.173:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.7.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 281.446466][ T26] audit: type=1326 audit(1792478448.183:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.7.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 281.562552][ T26] audit: type=1326 audit(1792478448.203:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.7.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 281.688356][ T26] audit: type=1326 audit(1792478448.203:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.7.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 281.768576][ T6694] loop7: detected capacity change from 0 to 2048 [ 281.834713][ T26] audit: type=1326 audit(1792478448.203:49): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.7.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 281.904233][ T26] audit: type=1326 audit(1792478448.203:50): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.7.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 281.931323][ T6694] UDF-fs: bad mount option "ÿÿ0xffffffffffffffffÿÿ" or missing value [ 282.201080][ T26] audit: type=1326 audit(1792478448.213:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.7.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 282.226239][ T26] audit: type=1326 audit(1792478448.213:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.7.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 282.331478][ T6694] capability: warning: `syz.7.528' uses deprecated v2 capabilities in a way that may be insecure [ 282.793937][ T6710] loop1: detected capacity change from 0 to 512 [ 282.859338][ T6710] EXT4-fs (loop1): Ignoring removed nobh option [ 282.865948][ T6710] EXT4-fs (loop1): Unrecognized mount option "func=FILE_CHECK" or missing value [ 282.921128][ T4333] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 282.994527][ T26] audit: type=1326 audit(1792478448.213:54): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.7.527" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 283.237109][ T6717] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6722] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6717] [ 283.441832][ T4333] usb 6-1: unable to get BOS descriptor or descriptor too short [ 283.541696][ T4333] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.563909][ T4333] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 283.593248][ T4333] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 283.921191][ T4333] usb 6-1: string descriptor 0 read error: -22 [ 283.927548][ T4333] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 283.960559][ T4333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.014394][ T6729] binder: BINDER_SET_CONTEXT_MGR already set [ 284.062306][ T6729] binder: 6726:6729 ioctl 4018620d 200000000e00 returned -16 [ 284.227746][ T6739] loop0: detected capacity change from 0 to 16 [ 284.250473][ T6740] loop1: detected capacity change from 0 to 1024 [ 284.398049][ T6733] loop6: detected capacity change from 0 to 2048 [ 284.901625][ T4333] usb 6-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 284.940911][ T4333] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 285.151355][ T4333] usb 6-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 285.203230][ T4333] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 285.271107][ T4333] usb 6-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 285.311062][ T4333] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 285.405449][ T4333] usb 6-1: USB disconnect, device number 5 [ 285.527317][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:200' [ 285.537436][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 285.545039][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 285.555129][ T4201] Workqueue: hci4 hci_rx_work [ 285.559858][ T4201] Call Trace: [ 285.563255][ T4201] [ 285.566245][ T4201] dump_stack_lvl+0x188/0x250 [ 285.570970][ T4201] ? show_regs_print_info+0x20/0x20 [ 285.576203][ T4201] ? load_image+0x410/0x410 [ 285.580765][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 285.585918][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 285.590623][ T4201] ? kthread+0x42e/0x520 [ 285.594904][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 285.600162][ T4201] kobject_add_internal+0x5ba/0xcd0 [ 285.605403][ T4201] kobject_add+0x160/0x230 [ 285.609861][ T4201] ? kobject_init+0x1c0/0x1c0 [ 285.614577][ T4201] ? __raw_spin_lock_init+0x41/0x100 [ 285.619898][ T4201] ? klist_children_get+0x50/0x50 [ 285.624987][ T4201] ? get_device_parent+0x121/0x3e0 [ 285.630236][ T4201] device_add+0x470/0x1050 [ 285.634696][ T4201] ? device_initialize+0x2a5/0x4d0 [ 285.639877][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 285.644861][ T4201] le_conn_complete_evt+0xc55/0x14d0 [ 285.650230][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 285.655413][ T4201] ? __mutex_trylock_common+0x15c/0x260 [ 285.661299][ T4201] hci_le_meta_evt+0x285/0x3ca0 [ 285.666211][ T4201] ? hci_event_packet+0x363/0x1310 [ 285.671389][ T4201] ? __lock_acquire+0x7d40/0x7d40 [ 285.676501][ T4201] ? hci_remote_host_features_evt+0x240/0x240 [ 285.682637][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 285.688329][ T4201] ? mark_lock+0x94/0x320 [ 285.692688][ T4201] ? mutex_unlock+0x10/0x10 [ 285.697263][ T4201] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 285.703297][ T4201] ? lock_chain_count+0x20/0x20 [ 285.708223][ T4201] ? __rwlock_init+0x140/0x140 [ 285.713028][ T4201] hci_event_packet+0xe0b/0x1310 [ 285.718020][ T4201] ? _raw_spin_unlock+0x40/0x40 [ 285.722915][ T4201] ? rcu_lock_release+0x20/0x20 [ 285.727814][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 285.733080][ T4201] hci_rx_work+0x255/0xa10 [ 285.737562][ T4201] process_one_work+0x867/0xff0 [ 285.742470][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 285.748141][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 285.753499][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 285.758585][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 285.764187][ T4201] ? wq_worker_running+0x97/0x170 [ 285.769256][ T4201] worker_thread+0xad7/0x12a0 [ 285.774008][ T4201] kthread+0x42e/0x520 [ 285.778118][ T4201] ? rcu_lock_release+0x20/0x20 [ 285.783013][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 285.787655][ T4201] ret_from_fork+0x1f/0x30 [ 285.792124][ T4201] [ 285.878155][ T4201] kobject_add_internal failed for hci4:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 285.891721][ T4201] Bluetooth: hci4: failed to register connection device [ 285.912741][ T6739] erofs: (device loop0): mounted with root inode @ nid 36. [ 285.968923][ T6739] attempt to access beyond end of device [ 285.968923][ T6739] loop0: rw=524288, want=48, limit=16 [ 285.980486][ T6739] attempt to access beyond end of device [ 285.980486][ T6739] loop0: rw=524288, want=40, limit=16 [ 287.028141][ T6740] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 287.041568][ T6733] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 287.057782][ T6740] EXT4-fs: failed to create workqueue [ 287.063290][ T6740] EXT4-fs (loop1): mount failed [ 287.307033][ T4294] udevd[4294]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.337288][ T6733] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 287.486799][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 287.486816][ T26] audit: type=1326 audit(1792478454.313:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.7.544" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 287.651219][ T26] audit: type=1326 audit(1792478454.363:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.7.544" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 287.698417][ T6733] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 287.723956][ T6774] loop5: detected capacity change from 0 to 2048 [ 288.063496][ T6774] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 288.246991][ T4333] Bluetooth: hci4: command 0x2016 tx timeout [ 288.272213][ T6733] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.301246][ T26] audit: type=1326 audit(1792478454.363:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.7.544" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 288.311686][ T6774] UDF-fs: Scanning with blocksize 512 failed [ 288.401410][ T6784] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6786] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6784] [ 288.435885][ T26] audit: type=1326 audit(1792478454.363:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.7.544" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 288.507315][ T6774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.002712][ T26] audit: type=1326 audit(1792478454.363:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.7.544" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 289.131041][ T26] audit: type=1326 audit(1792478454.363:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.7.544" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 289.270987][ T26] audit: type=1326 audit(1792478454.363:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.7.544" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 289.385544][ T26] audit: type=1326 audit(1792478454.363:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.7.544" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 289.518316][ T26] audit: type=1326 audit(1792478454.363:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.7.544" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 289.574104][ T6795] loop6: detected capacity change from 0 to 4096 [ 289.651494][ T26] audit: type=1326 audit(1792478454.363:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.7.544" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 289.822647][ T6795] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 290.532731][ T6819] loop1: detected capacity change from 0 to 16 [ 291.164128][ T6819] erofs: (device loop1): mounted with root inode @ nid 36. [ 291.323944][ T6819] attempt to access beyond end of device [ 291.323944][ T6819] loop1: rw=524288, want=48, limit=16 [ 291.335450][ T6819] attempt to access beyond end of device [ 291.335450][ T6819] loop1: rw=524288, want=40, limit=16 [ 293.018199][ T6841] loop1: detected capacity change from 0 to 2048 [ 293.433783][ T6841] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.525360][ T6852] loop7: detected capacity change from 0 to 2048 [ 293.571978][ T6852] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 293.624708][ T6850] loop6: detected capacity change from 0 to 512 [ 293.671088][ T6852] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 293.682494][ T6841] device bridge0 entered promiscuous mode [ 293.703509][ T6854] loop5: detected capacity change from 0 to 2048 [ 293.730494][ T6852] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 293.761179][ T6852] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.782756][ T6850] EXT4-fs (loop6): Ignoring removed oldalloc option [ 293.814530][ T6854] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 293.863095][ T6850] EXT4-fs (loop6): Ignoring removed nobh option [ 293.885804][ T6854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.987622][ T6850] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.560: invalid indirect mapped block 4294967295 (level 1) [ 294.086075][ T6850] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.560: invalid indirect mapped block 4294967295 (level 1) [ 294.321816][ T6864] loop7: detected capacity change from 0 to 512 [ 294.389110][ T6867] loop0: detected capacity change from 0 to 1024 [ 294.542129][ T6864] FAT-fs (loop7): Unrecognized mount option "ÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ" or missing value [ 294.907185][ T6850] EXT4-fs (loop6): 2 truncates cleaned up [ 295.032337][ T6850] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,oldalloc,minixdf,nobh,,errors=continue. Quota mode: writeback. [ 295.301574][ T6867] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 295.327217][ T6867] __quota_error: 9 callbacks suppressed [ 295.327236][ T6867] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 295.343704][ T6867] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 295.353220][ T6867] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.565: Failed to acquire dquot type 0 [ 295.372153][ T6867] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 295.387581][ T6867] EXT4-fs (loop0): 1 truncate cleaned up [ 295.393411][ T6867] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 295.644907][ T26] audit: type=1326 audit(1792478462.473:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50c159559 code=0x7ffc0000 [ 295.887229][ T26] audit: type=1326 audit(1792478462.713:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fc50c1159ac code=0x7ffc0000 [ 295.984538][ T26] audit: type=1326 audit(1792478462.713:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc50c115a0e code=0x7ffc0000 [ 296.156964][ T26] audit: type=1326 audit(1792478462.713:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50c159559 code=0x7ffc0000 [ 296.429282][ T6878] loop5: detected capacity change from 0 to 16 [ 297.308789][ T26] audit: type=1326 audit(1792478462.493:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50c159559 code=0x7ffc0000 [ 297.357841][ T6878] erofs: (device loop5): mounted with root inode @ nid 36. [ 297.404874][ T6878] attempt to access beyond end of device [ 297.404874][ T6878] loop5: rw=524288, want=48, limit=16 [ 297.415996][ T6878] attempt to access beyond end of device [ 297.415996][ T6878] loop5: rw=524288, want=40, limit=16 [ 297.460289][ T26] audit: type=1326 audit(1792478462.773:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc50c1162bb code=0x7ffc0000 [ 297.528821][ T26] audit: type=1326 audit(1792478462.773:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50c159559 code=0x7ffc0000 [ 297.575171][ T26] audit: type=1326 audit(1792478462.773:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6869 comm="syz.1.562" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50c159559 code=0x7ffc0000 [ 297.772674][ T6898] loop7: detected capacity change from 0 to 1024 [ 297.952847][ T4333] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 298.034601][ T6898] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 298.291129][ T6898] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.580: Failed to acquire dquot type 0 [ 298.317233][ T6898] EXT4-fs error (device loop7): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 298.336731][ T6898] EXT4-fs (loop7): 1 truncate cleaned up [ 298.342829][ T6898] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 298.712122][ T4333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.760968][ T4333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.812363][ T4333] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.872156][ T4333] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.913185][ T4333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.944280][ T4333] usb 2-1: config 0 descriptor?? [ 299.207080][ T6918] loop7: detected capacity change from 0 to 2048 [ 299.379396][ T6918] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 300.140987][ T6918] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 300.174013][ T6926] loop1: detected capacity change from 0 to 164 [ 300.216204][ T6918] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 300.308156][ T6918] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.423024][ T6926] Unable to read rock-ridge attributes [ 300.562861][ T6933] Unable to read rock-ridge attributes [ 300.571130][ T6933] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 300.753003][ T4333] usbhid 2-1:0.0: can't add hid device: -71 [ 300.759094][ T4333] usbhid: probe of 2-1:0.0 failed with error -71 [ 300.823601][ T4333] usb 2-1: USB disconnect, device number 3 [ 303.470013][ T6971] loop6: detected capacity change from 0 to 16 [ 304.411225][ T6971] erofs: (device loop6): mounted with root inode @ nid 36. [ 304.448478][ T6968] attempt to access beyond end of device [ 304.448478][ T6968] loop6: rw=524288, want=48, limit=16 [ 304.459607][ T6968] attempt to access beyond end of device [ 304.459607][ T6968] loop6: rw=524288, want=40, limit=16 [ 305.862865][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 305.862884][ T26] audit: type=1326 audit(1792478472.693:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.7.593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 306.068317][ T26] audit: type=1326 audit(1792478472.733:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.7.593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 306.101018][ T26] audit: type=1326 audit(1792478472.733:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.7.593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 306.341299][ T6997] loop0: detected capacity change from 0 to 512 [ 307.133298][ T6995] loop1: detected capacity change from 0 to 512 [ 307.865832][ T6995] EXT4-fs (loop1): Unrecognized mount option "fsuuid=1e550d16-c700-bc44-d828-81681d6d" or missing value [ 307.897978][ T6997] EXT4-fs (loop0): Ignoring removed nobh option [ 307.904685][ T6997] EXT4-fs (loop0): Unrecognized mount option "func=FILE_CHECK" or missing value [ 307.941684][ T6993] loop6: detected capacity change from 0 to 2048 [ 308.021092][ T26] audit: type=1326 audit(1792478472.743:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.7.593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 308.054479][ T26] audit: type=1326 audit(1792478472.743:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.7.593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 308.091123][ T26] audit: type=1326 audit(1792478472.743:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.7.593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 308.183402][ T26] audit: type=1326 audit(1792478472.743:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.7.593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 308.489249][ T6993] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 309.048275][ T6993] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 309.081085][ T26] audit: type=1326 audit(1792478472.753:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.7.593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 309.302192][ T6993] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 310.171697][ T6993] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.218079][ T26] audit: type=1326 audit(1792478472.753:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.7.593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 310.355298][ T26] audit: type=1326 audit(1792478472.753:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.7.593" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f72d25559 code=0x7ffc0000 [ 311.553114][ T7028] loop5: detected capacity change from 0 to 512 [ 311.631494][ T7028] FAT-fs (loop5): Unrecognized mount option "ÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ" or missing value [ 312.782507][ T7049] netlink: 100 bytes leftover after parsing attributes in process `syz.7.609'. [ 315.708247][ T7066] loop7: detected capacity change from 0 to 2048 [ 316.626008][ T7066] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 316.745654][ T7083] loop0: detected capacity change from 0 to 512 [ 316.791177][ T7066] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 317.613720][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.620026][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.745894][ T7083] EXT4-fs (loop0): 1 truncate cleaned up [ 317.761008][ T7083] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 317.764752][ T7066] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 317.799897][ T7066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.194036][ T7088] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 325.849266][ T7169] loop0: detected capacity change from 0 to 1024 [ 325.905301][ T7169] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 327.489015][ T7169] __quota_error: 26 callbacks suppressed [ 327.489037][ T7169] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 327.504242][ T7169] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 327.513664][ T7169] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.626: Failed to acquire dquot type 0 [ 327.531954][ T7169] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 327.547490][ T7169] EXT4-fs (loop0): 1 truncate cleaned up [ 327.553250][ T7169] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 331.178524][ T7194] loop5: detected capacity change from 0 to 2048 [ 331.317123][ T7194] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 331.390964][ T7194] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 331.471379][ T7194] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 331.512228][ T7194] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 331.731736][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.611173][ T26] audit: type=1800 audit(1792478500.413:172): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.642" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 334.254014][ T7239] loop1: detected capacity change from 0 to 128 [ 334.402782][ T7239] EXT4-fs (loop1): Ignoring removed orlov option [ 334.409642][ T7239] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 335.521482][ T7239] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 336.320135][ T7239] ext2 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 336.381010][ T26] audit: type=1326 audit(1792478503.193:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.6.646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 336.516164][ T26] audit: type=1326 audit(1792478503.193:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.6.646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 337.344563][ T7264] loop6: detected capacity change from 0 to 512 [ 337.635015][ T26] audit: type=1326 audit(1792478503.253:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.6.646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 337.811076][ T7264] EXT4-fs (loop6): Ignoring removed nobh option [ 337.817462][ T7264] EXT4-fs (loop6): Unrecognized mount option "func=FILE_CHECK" or missing value [ 337.846769][ T26] audit: type=1326 audit(1792478503.253:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.6.646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 338.088101][ T26] audit: type=1326 audit(1792478503.253:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.6.646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 338.181098][ T26] audit: type=1326 audit(1792478503.253:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.6.646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 338.207592][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.358227][ T26] audit: type=1326 audit(1792478503.253:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.6.646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 338.490971][ T26] audit: type=1326 audit(1792478503.253:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.6.646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 338.622558][ T26] audit: type=1326 audit(1792478503.253:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7253 comm="syz.6.646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5672f01559 code=0x7ffc0000 [ 340.988571][ T7292] loop5: detected capacity change from 0 to 1024 [ 341.814793][ T7292] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 341.856726][ T7292] Quota error (device loop5): find_tree_dqentry: Getting block too big (64 >= 6) [ 341.866149][ T7292] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 341.875708][ T7292] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.657: Failed to acquire dquot type 0 [ 341.888902][ T7292] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 341.904883][ T7292] EXT4-fs (loop5): 1 truncate cleaned up [ 341.910604][ T7292] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 347.117903][ T7323] loop7: detected capacity change from 0 to 2048 [ 347.164867][ T7323] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 347.184653][ T7325] WARNING! power/level is deprecated; use power/control instead [ 347.210949][ T7323] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 347.261729][ T7323] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 347.282676][ T7323] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.361835][ T7329] loop0: detected capacity change from 0 to 256 [ 347.471056][ T7329] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.337648][ T7359] loop7: detected capacity change from 0 to 1024 [ 352.191030][ T7359] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 352.271818][ T7359] Quota error (device loop7): find_tree_dqentry: Getting block too big (64 >= 6) [ 352.281222][ T7359] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 352.290670][ T7359] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.672: Failed to acquire dquot type 0 [ 352.304865][ T7359] EXT4-fs error (device loop7): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 352.345608][ T7359] EXT4-fs (loop7): 1 truncate cleaned up [ 352.351508][ T7359] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 354.068169][ T7371] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 354.638323][ T7387] loop0: detected capacity change from 0 to 512 [ 354.752568][ T7387] EXT4-fs (loop0): Mount option "dioread_lock" incompatible with ext3 [ 354.895555][ T26] audit: type=1800 audit(1792478521.723:182): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.671" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 355.191639][ T7402] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 358.587101][ T7430] loop1: detected capacity change from 0 to 2048 [ 358.659060][ T7436] loop6: detected capacity change from 0 to 512 [ 358.669271][ T7430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 358.736570][ T7430] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 358.803828][ T7430] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 358.804033][ T7436] EXT4-fs (loop6): Ignoring removed oldalloc option [ 358.876823][ T7430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 358.999858][ T7436] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.686: invalid indirect mapped block 4294967295 (level 1) [ 359.491179][ T7436] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.686: invalid indirect mapped block 4294967295 (level 1) [ 359.646894][ T7436] EXT4-fs (loop6): 2 truncates cleaned up [ 359.681053][ T7436] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,oldalloc,minixdf,i_version,,errors=continue. Quota mode: writeback. [ 361.276446][ T7463] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.686: bg 0: block 5: invalid block bitmap [ 361.530598][ T7462] rxe_eth0 speed is unknown, defaulting to 1000 [ 361.912556][ T7436] EXT4-fs error (device loop6): ext4_find_dest_de:2117: inode #2: block 13: comm syz.6.686: bad entry in directory: inode out of bounds - offset=108, inode=134217745, rec_len=916, size=1024 fake=0 [ 362.314686][ T7464] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 363.575655][ T26] audit: type=1800 audit(1792478530.403:183): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.692" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 364.757705][ T7472] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7478] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7472] [ 365.543597][ T7498] loop1: detected capacity change from 0 to 1024 [ 366.279401][ T7498] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 366.418049][ T7499] loop7: detected capacity change from 0 to 2048 [ 366.436025][ T7498] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 366.445394][ T7498] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 366.454940][ T7498] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.699: Failed to acquire dquot type 0 [ 366.468115][ T7498] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 366.493823][ T7498] EXT4-fs (loop1): 1 truncate cleaned up [ 366.499556][ T7498] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 366.761034][ T7499] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 366.841336][ T7499] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 367.551898][ T4295] Bluetooth: hci3: command 0x0405 tx timeout [ 367.605200][ T7499] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 367.666157][ T7499] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.740647][ T7513] loop0: detected capacity change from 0 to 256 [ 370.470383][ T26] audit: type=1800 audit(1792478537.293:184): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.709" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 370.520103][ T7537] loop1: detected capacity change from 0 to 764 [ 371.071812][ T7547] loop1: detected capacity change from 0 to 256 [ 371.150634][ T7547] exfat: Deprecated parameter 'namecase' [ 371.198189][ T7547] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 371.334369][ T7552] loop0: detected capacity change from 0 to 1024 [ 372.163197][ T7547] fuse: Bad value for 'fd' [ 373.267905][ T7554] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7556] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7554] [ 373.691106][ T7552] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 373.804080][ T7552] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 373.813537][ T7552] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 373.823063][ T7552] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.712: Failed to acquire dquot type 0 [ 373.836641][ T7552] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 373.854171][ T7552] EXT4-fs (loop0): 1 truncate cleaned up [ 373.859891][ T7552] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 376.336340][ T7580] loop1: detected capacity change from 0 to 2048 [ 376.412146][ T7580] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 376.481125][ T7580] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 376.551687][ T7580] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 376.611946][ T7580] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.226925][ T7590] loop7: detected capacity change from 0 to 8 [ 377.957273][ T7606] ip_tables: iptables: counters copy to user failed while replacing table [ 378.113016][ T7608] loop6: detected capacity change from 0 to 1024 [ 378.652903][ T7613] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7614] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7613] [ 379.571007][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.577390][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.733463][ T7608] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 380.884793][ T7637] loop6: detected capacity change from 0 to 2048 [ 381.197124][ T7637] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 381.251413][ T7637] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 382.655686][ T7637] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 382.745140][ T7656] loop5: detected capacity change from 0 to 1024 [ 383.766768][ T7637] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.398521][ T7656] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 384.409223][ T7656] EXT4-fs: failed to create workqueue [ 384.415514][ T7656] EXT4-fs (loop5): mount failed [ 384.900947][ T5584] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 384.952346][ T7673] loop5: detected capacity change from 0 to 1024 [ 386.221723][ T7673] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 386.272839][ T5584] usb 7-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 386.285289][ T5584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.293497][ T5584] usb 7-1: Product: syz [ 386.297698][ T5584] usb 7-1: Manufacturer: syz [ 386.302666][ T5584] usb 7-1: SerialNumber: syz [ 386.464688][ T7688] loop7: detected capacity change from 0 to 512 [ 386.576537][ T7688] EXT4-fs (loop7): Ignoring removed oldalloc option [ 386.653268][ T7688] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.742: invalid indirect mapped block 4294967295 (level 1) [ 386.711070][ T5584] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 386.731017][ T7688] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.742: invalid indirect mapped block 4294967295 (level 1) [ 386.781113][ T5584] usb 7-1: USB disconnect, device number 4 [ 387.000847][ T7700] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7701] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7700] [ 388.153330][ T7688] EXT4-fs (loop7): 2 truncates cleaned up [ 388.159157][ T7688] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,oldalloc,minixdf,i_version,,errors=continue. Quota mode: writeback. [ 388.314377][ T7703] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.742: bg 0: block 5: invalid block bitmap [ 388.617709][ T7702] rxe_eth0 speed is unknown, defaulting to 1000 [ 388.879801][ T7704] EXT4-fs error (device loop7): ext4_find_dest_de:2117: inode #2: block 13: comm syz.7.742: bad entry in directory: inode out of bounds - offset=108, inode=134217745, rec_len=916, size=1024 fake=0 [ 390.036763][ T7713] loop6: detected capacity change from 0 to 1024 [ 390.045753][ T7508] udevd[7508]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.097243][ T7713] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 390.258023][ T7719] loop7: detected capacity change from 0 to 2048 [ 390.296105][ T7713] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6) [ 390.305418][ T7713] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 390.314945][ T7713] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.748: Failed to acquire dquot type 0 [ 390.328789][ T7713] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 390.345226][ T7713] EXT4-fs (loop6): 1 truncate cleaned up [ 390.351461][ T7713] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 390.475100][ T7719] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 390.491381][ T7719] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 390.610217][ T7719] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 390.718130][ T7719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.404492][ T7740] input: syz1 as /devices/virtual/input/input40 [ 392.441383][ T7744] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 392.466196][ T7747] loop7: detected capacity change from 0 to 256 [ 392.526773][ T7747] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 392.773317][ T7755] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 392.853054][ T26] audit: type=1800 audit(1792478559.683:185): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.753" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 392.998285][ T7755] loop6: detected capacity change from 0 to 512 [ 393.048080][ T7755] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 393.132633][ T7755] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.752: casefold flag without casefold feature [ 393.180008][ T7755] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.752: couldn't read orphan inode 15 (err -117) [ 393.243558][ T7755] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 395.231349][ T7764] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 395.438401][ T7794] loop7: detected capacity change from 0 to 2048 [ 395.505869][ T7797] loop5: detected capacity change from 0 to 1024 [ 395.519222][ T7796] loop0: detected capacity change from 0 to 512 [ 395.536300][ T7794] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 395.591395][ T7794] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 395.633614][ T7797] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 395.661145][ T7797] Quota error (device loop5): find_tree_dqentry: Getting block too big (64 >= 6) [ 395.670447][ T7797] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 395.680547][ T7797] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.760: Failed to acquire dquot type 0 [ 395.851176][ T7797] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 395.870989][ T7797] EXT4-fs (loop5): 1 truncate cleaned up [ 395.876688][ T7797] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 395.910523][ T7794] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 395.956050][ T7794] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.236682][ T7812] input: syz1 as /devices/virtual/input/input41 [ 397.292505][ T7810] loop5: detected capacity change from 0 to 2048 [ 397.410319][ T7810] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 397.988114][ T7816] EXT4-fs error (device loop5): ext4_find_extent:893: inode #2: comm syz.5.763: inode has invalid extent depth: 8 [ 398.081156][ T7816] EXT4-fs (loop5): Remounting filesystem read-only [ 398.101203][ T7817] EXT4-fs error (device loop5): ext4_find_extent:893: inode #2: comm syz.5.763: inode has invalid extent depth: 8 [ 398.174652][ T7817] EXT4-fs (loop5): Remounting filesystem read-only [ 401.269794][ T7837] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 401.388324][ T7838] loop5: detected capacity change from 0 to 512 [ 401.486405][ T7838] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 401.592007][ T7838] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.770: casefold flag without casefold feature [ 401.723196][ T7838] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.770: couldn't read orphan inode 15 (err -117) [ 401.777030][ T7838] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 403.591778][ T7861] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7862] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7861] [ 405.092389][ T7870] loop5: detected capacity change from 0 to 512 [ 406.072613][ T7876] loop6: detected capacity change from 0 to 1024 [ 406.146211][ T7876] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 406.184879][ T7876] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6) [ 406.194232][ T7876] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 406.203963][ T7876] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.784: Failed to acquire dquot type 0 [ 406.226767][ T7876] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 406.243566][ T7876] EXT4-fs (loop6): 1 truncate cleaned up [ 406.249347][ T7876] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 406.417650][ T7884] loop1: detected capacity change from 0 to 1024 [ 406.463440][ T7886] loop5: detected capacity change from 0 to 512 [ 406.506208][ T7886] EXT4-fs (loop5): Unrecognized mount option "appraise_type=imasig" or missing value [ 407.561368][ T7890] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 407.831676][ T7892] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7894] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7892] [ 408.580320][ T7895] loop1: detected capacity change from 0 to 512 [ 408.684063][ T7895] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 408.757016][ T7895] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.789: casefold flag without casefold feature [ 408.786947][ T7895] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.789: couldn't read orphan inode 15 (err -117) [ 408.808293][ T7895] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 410.292287][ T7908] loop2: detected capacity change from 0 to 7 [ 410.976690][ T7908] Dev loop2: unable to read RDB block 7 [ 410.982680][ T7908] loop2: unable to read partition table [ 410.988484][ T7908] loop2: partition table beyond EOD, truncated [ 410.994825][ T7908] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 411.202571][ T7914] loop6: detected capacity change from 0 to 16 [ 411.214532][ T7913] loop1: detected capacity change from 0 to 1024 [ 411.278825][ T7914] erofs: (device loop6): mounted with root inode @ nid 36. [ 411.346046][ T7913] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 411.374239][ T7914] attempt to access beyond end of device [ 411.374239][ T7914] loop6: rw=524288, want=40, limit=16 [ 411.505784][ T4201] Bluetooth: Wrong link type (-22) [ 411.513165][ T7914] attempt to access beyond end of device [ 411.513165][ T7914] loop6: rw=524288, want=104, limit=16 [ 411.525286][ T7914] attempt to access beyond end of device [ 411.525286][ T7914] loop6: rw=0, want=24, limit=16 [ 411.536862][ T26] audit: type=1800 audit(1792478578.363:186): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.797" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 413.386986][ T7934] input: syz1 as /devices/virtual/input/input42 [ 413.571045][ T7939] loop5: detected capacity change from 0 to 512 [ 413.674766][ T7939] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 413.897919][ T7939] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.806: invalid indirect mapped block 32768 (level 2) [ 414.180898][ T7947] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[7948] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7947] [ 414.842071][ T7950] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 414.850094][ T7939] EXT4-fs (loop5): 1 orphan inode deleted [ 414.861060][ T7939] EXT4-fs (loop5): 1 truncate cleaned up [ 415.386709][ T7953] loop7: detected capacity change from 0 to 512 [ 416.193189][ T7939] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.237132][ T7953] EXT4-fs (loop7): Unrecognized mount option "fsuuid=1e550d16-c700-bc44-d828-81681d6d" or missing value [ 416.325036][ T7956] loop0: detected capacity change from 0 to 512 [ 416.333350][ T7939] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 416.460038][ T7956] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 416.536728][ T7956] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.808: casefold flag without casefold feature [ 416.579844][ T7956] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.808: couldn't read orphan inode 15 (err -117) [ 416.612021][ T7956] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 416.704940][ T7959] loop5: detected capacity change from 0 to 16 [ 416.738633][ T7959] erofs: (device loop5): mounted with root inode @ nid 36. [ 416.776153][ T7959] attempt to access beyond end of device [ 416.776153][ T7959] loop5: rw=524288, want=40, limit=16 [ 416.841108][ T7959] attempt to access beyond end of device [ 416.841108][ T7959] loop5: rw=524288, want=104, limit=16 [ 416.881049][ T7959] attempt to access beyond end of device [ 416.881049][ T7959] loop5: rw=0, want=24, limit=16 [ 416.904084][ T26] audit: type=1800 audit(1792478583.733:187): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.811" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 417.059227][ T7965] loop1: detected capacity change from 0 to 1024 [ 417.121227][ T7965] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 417.251012][ T7965] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 417.260406][ T7965] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 417.270201][ T7965] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.802: Failed to acquire dquot type 0 [ 417.300418][ T7965] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 417.316484][ T7965] EXT4-fs (loop1): 1 truncate cleaned up [ 417.322364][ T7965] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 417.690162][ T7974] loop7: detected capacity change from 0 to 1024 [ 417.862936][ T7974] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.897561][ T7980] loop5: detected capacity change from 0 to 128 [ 418.291799][ T7980] EXT4-fs (loop5): Test dummy encryption mode enabled [ 418.322713][ T7980] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none. [ 418.343931][ T7980] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 418.499676][ T7997] input: syz1 as /devices/virtual/input/input43 [ 418.531706][ T7980] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 419.560086][ T8008] loop2: detected capacity change from 0 to 7 [ 420.244685][ T8008] Dev loop2: unable to read RDB block 7 [ 420.250409][ T8008] loop2: unable to read partition table [ 420.256888][ T8008] loop2: partition table beyond EOD, truncated [ 420.263584][ T8008] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 420.274197][ T5584] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 420.501698][ T8012] loop0: detected capacity change from 0 to 512 [ 420.573212][ T8012] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 420.661308][ T8012] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.824: casefold flag without casefold feature [ 420.711566][ T8012] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.824: couldn't read orphan inode 15 (err -117) [ 420.751224][ T5584] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.772550][ T5584] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 420.776048][ T8012] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 420.791048][ T5584] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.081270][ T8022] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8021] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8022] [ 421.854462][ T8031] loop6: detected capacity change from 0 to 1024 [ 421.881165][ T5584] usbhid 8-1:1.0: can't add hid device: -71 [ 421.887478][ T5584] usbhid: probe of 8-1:1.0 failed with error -71 [ 421.913213][ T5584] usb 8-1: USB disconnect, device number 3 [ 422.176271][ T8031] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 422.205960][ T8031] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6) [ 422.215434][ T8031] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 422.224953][ T8031] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.828: Failed to acquire dquot type 0 [ 422.282584][ T8031] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 422.302037][ T8031] EXT4-fs (loop6): 1 truncate cleaned up [ 422.307794][ T8031] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 422.490005][ T8041] loop0: detected capacity change from 0 to 1024 [ 422.550027][ T8041] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 422.755864][ T8048] loop1: detected capacity change from 0 to 16 [ 422.951059][ T8048] erofs: (device loop1): mounted with root inode @ nid 36. [ 423.005297][ T8048] attempt to access beyond end of device [ 423.005297][ T8048] loop1: rw=524288, want=40, limit=16 [ 423.046411][ T8048] attempt to access beyond end of device [ 423.046411][ T8048] loop1: rw=524288, want=104, limit=16 [ 423.067245][ T8048] attempt to access beyond end of device [ 423.067245][ T8048] loop1: rw=0, want=24, limit=16 [ 423.081733][ T26] audit: type=1800 audit(1792478589.913:188): pid=8048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.825" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 423.531958][ T8056] input: syz1 as /devices/virtual/input/input44 [ 424.444701][ T8061] input: syz1 as /devices/virtual/input/input45 [ 424.831092][ T8082] Device name cannot be null; rc = [-22] [ 425.701180][ T8088] loop6: detected capacity change from 0 to 1024 [ 425.994422][ T8088] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 426.062288][ T8088] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6) [ 426.071601][ T8088] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 426.081169][ T8088] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.845: Failed to acquire dquot type 0 [ 426.123680][ T8088] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 426.139906][ T8088] EXT4-fs (loop6): 1 truncate cleaned up [ 426.145782][ T8088] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 427.394601][ T8101] loop2: detected capacity change from 0 to 7 [ 428.095187][ T8101] Dev loop2: unable to read RDB block 7 [ 428.100961][ T8101] loop2: unable to read partition table [ 428.106792][ T8101] loop2: partition table beyond EOD, truncated [ 428.113055][ T8101] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 428.168923][ T5584] Bluetooth: hci4: command 0x2021 tx timeout [ 429.065745][ T8107] input: syz1 as /devices/virtual/input/input46 [ 432.740024][ T8140] loop1: detected capacity change from 0 to 512 [ 433.528415][ T5381] Bluetooth: hci2: command 0x2021 tx timeout [ 433.575116][ T8140] EXT4-fs (loop1): Unrecognized mount option "fsuuid=1e550d16-c700-bc44-d828-81681d6d" or missing value [ 434.036411][ T8150] loop0: detected capacity change from 0 to 128 [ 434.201714][ T8150] FAT-fs (loop0): Unrecognized mount option " [ 434.201714][ T8150] " or missing value [ 434.210635][ T8153] input: syz1 as /devices/virtual/input/input47 [ 434.404691][ T8152] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8154] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8152] [ 434.615374][ T8160] loop0: detected capacity change from 0 to 128 [ 434.730323][ T8160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 434.802415][ T8160] System zones: 1-3, 19-19, 35-36 [ 434.914510][ T8160] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue. Quota mode: none. [ 435.096692][ T8160] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 435.186128][ T8177] loop1: detected capacity change from 0 to 1024 [ 435.521965][ T8177] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.998104][ T8195] loop5: detected capacity change from 0 to 256 [ 436.066296][ T8186] input: syz1 as /devices/virtual/input/input49 [ 436.609602][ T8203] "syz.0.883" (8203) uses obsolete ecb(arc4) skcipher [ 437.645334][ T8195] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 438.393207][ T8231] loop1: detected capacity change from 0 to 512 [ 438.469634][ T8231] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 438.601069][ T8231] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.892: casefold flag without casefold feature [ 438.621453][ T8231] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.892: couldn't read orphan inode 15 (err -117) [ 438.684490][ T8231] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 438.983811][ T8243] fuse: Bad value for 'fd' [ 439.403703][ T8252] input: syz1 as /devices/virtual/input/input50 [ 439.944307][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.951908][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.199009][ T8266] loop6: detected capacity change from 0 to 512 [ 440.247678][ T8254] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8258] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8254] [ 440.266599][ T8266] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 441.666543][ T8266] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.906: casefold flag without casefold feature [ 441.680090][ T8266] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.906: couldn't read orphan inode 15 (err -117) [ 441.757891][ T4260] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 441.771515][ T8266] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 442.074409][ T4260] usb 2-1: Using ep0 maxpacket: 8 [ 442.191162][ T4260] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.211632][ T4260] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 442.237807][ T4260] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.268067][ T4260] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 442.288868][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.352395][ T4260] hub 2-1:1.0: bad descriptor, ignoring hub [ 442.358474][ T4260] hub: probe of 2-1:1.0 failed with error -5 [ 442.391438][ T4260] cdc_wdm 2-1:1.0: skipping garbage [ 442.417695][ T4260] cdc_wdm 2-1:1.0: skipping garbage [ 442.451189][ T4260] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 442.457278][ T4260] cdc_wdm 2-1:1.0: Unknown control protocol [ 442.697150][ T8288] FAULT_INJECTION: forcing a failure. [ 442.697150][ T8288] name failslab, interval 1, probability 0, space 0, times 1 [ 442.761835][ T4260] usb 2-1: USB disconnect, device number 4 [ 442.921120][ T8288] CPU: 0 PID: 8288 Comm: syz.6.914 Not tainted syzkaller #0 [ 442.928462][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 442.938528][ T8288] Call Trace: [ 442.941817][ T8288] [ 442.944757][ T8288] dump_stack_lvl+0x188/0x250 [ 442.949447][ T8288] ? show_regs_print_info+0x20/0x20 [ 442.954659][ T8288] ? load_image+0x410/0x410 [ 442.959186][ T8288] ? __might_sleep+0xf0/0xf0 [ 442.963803][ T8288] ? __lock_acquire+0x7d40/0x7d40 [ 442.968863][ T8288] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 442.974859][ T8288] should_fail+0x383/0x4b0 [ 442.979292][ T8288] should_failslab+0x5/0x20 [ 442.983813][ T8288] slab_pre_alloc_hook+0x51/0xc0 [ 442.988800][ T8288] kmem_cache_alloc_node+0x47/0x2c0 [ 442.994047][ T8288] ? __alloc_skb+0xf4/0x750 [ 442.998613][ T8288] __alloc_skb+0xf4/0x750 [ 443.003009][ T8288] mgmt_cmd_status+0x3e/0x470 [ 443.007754][ T8288] hci_mgmt_cmd+0x591/0xd80 [ 443.012323][ T8288] hci_sock_sendmsg+0x379/0xaa0 [ 443.017233][ T8288] ? hci_sock_getsockopt+0x470/0x470 [ 443.022573][ T8288] ? apparmor_socket_sendmsg+0x88/0x230 [ 443.028172][ T8288] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 443.033506][ T8288] ? security_socket_sendmsg+0x7c/0xa0 [ 443.039028][ T8288] sock_write_iter+0x2a6/0x3a0 [ 443.043857][ T8288] ? sock_read_iter+0x380/0x380 [ 443.048773][ T8288] ? memset+0x1e/0x40 [ 443.052818][ T8288] ? iov_iter_init+0xb4/0x170 [ 443.057549][ T8288] vfs_write+0x748/0xd70 [ 443.061854][ T8288] ? file_end_write+0x250/0x250 [ 443.066780][ T8288] ? __fget_files+0x402/0x470 [ 443.071510][ T8288] ? __fdget_pos+0x1e2/0x370 [ 443.076145][ T8288] ? ksys_write+0x70/0x260 [ 443.080642][ T8288] ksys_write+0x153/0x260 [ 443.085027][ T8288] ? __ia32_sys_read+0x80/0x80 [ 443.089855][ T8288] ? lockdep_hardirqs_on+0x94/0x140 [ 443.095128][ T8288] do_syscall_64+0x4c/0xa0 [ 443.099596][ T8288] ? clear_bhb_loop+0x30/0x80 [ 443.104495][ T8288] ? clear_bhb_loop+0x30/0x80 [ 443.109222][ T8288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 443.115167][ T8288] RIP: 0033:0x7f5672f01559 [ 443.119626][ T8288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.139283][ T8288] RSP: 002b:00007f5671159028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 443.147754][ T8288] RAX: ffffffffffffffda RBX: 00007f5673188fa0 RCX: 00007f5672f01559 [ 443.155775][ T8288] RDX: 0000000000000006 RSI: 00002000000008c0 RDI: 0000000000000004 [ 443.163798][ T8288] RBP: 00007f5672f98ad8 R08: 0000000000000000 R09: 0000000000000000 [ 443.171925][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.179947][ T8288] R13: 00007f5673189038 R14: 00007f5673188fa0 R15: 00007ffd67a6c938 [ 443.187992][ T8288] [ 444.161184][ T4260] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 444.276835][ T8304] loop1: detected capacity change from 0 to 512 [ 444.350515][ T8304] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 444.451672][ T8304] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.920: casefold flag without casefold feature [ 444.490300][ T8313] netlink: 160 bytes leftover after parsing attributes in process `syz.0.925'. [ 444.501783][ T8304] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.920: couldn't read orphan inode 15 (err -117) [ 444.514354][ T8304] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 445.760409][ T8324] loop5: detected capacity change from 0 to 1024 [ 445.821778][ T8324] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 445.858406][ T8324] Quota error (device loop5): find_tree_dqentry: Getting block too big (64 >= 6) [ 445.867741][ T8324] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 445.877259][ T8324] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.923: Failed to acquire dquot type 0 [ 445.897672][ T8324] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 445.913037][ T8324] EXT4-fs (loop5): 1 truncate cleaned up [ 445.918832][ T8324] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,abort,grpjquota=,usrjquota=,discard,sysvgroups,init_itable=0x0000000000000009,min_batch_time=0x0000000000000006,nogrpid,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 445.994110][ T8335] netlink: 'syz.7.932': attribute type 2 has an invalid length. [ 446.056218][ T8337] ------------[ cut here ]------------ [ 446.093177][ T8337] kernel BUG at net/phonet/socket.c:213! [ 446.098942][ T8337] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 446.105057][ T8337] CPU: 1 PID: 8337 Comm: syz.7.932 Not tainted syzkaller #0 [ 446.112402][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 446.122505][ T8337] RIP: 0010:pn_socket_listen+0x353/0x360 [ 446.128197][ T8337] Code: ad f8 e9 e7 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f6 fe ff ff 4c 89 ff e8 47 29 ad f8 e9 e9 fe ff ff e8 dd e3 67 f8 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 41 [ 446.147944][ T8337] RSP: 0018:ffffc9000302fe00 EFLAGS: 00010287 [ 446.154066][ T8337] RAX: ffffffff89113f83 RBX: 0000000000000000 RCX: 0000000000080000 [ 446.162117][ T8337] RDX: ffffc9000fc30000 RSI: 0000000000000052 RDI: 0000000000000053 [ 446.170500][ T8337] RBP: ffffc9000302feb8 R08: ffff88813fea3207 R09: 1ffff11027fd4640 [ 446.178525][ T8337] R10: dffffc0000000000 R11: ffffed1027fd4641 R12: dffffc0000000000 [ 446.186520][ T8337] R13: ffff8880774b11a0 R14: 1ffff92000605fc4 R15: ffff888073d53000 [ 446.194540][ T8337] FS: 00007f3f70f5c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 446.203503][ T8337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.210169][ T8337] CR2: 0000555576db1a78 CR3: 000000006071d000 CR4: 00000000003506e0 [ 446.218195][ T8337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.226239][ T8337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.234273][ T8337] Call Trace: [ 446.237583][ T8337] [ 446.240529][ T8337] ? pn_socket_poll+0x360/0x360 [ 446.245429][ T8337] ? bpf_lsm_socket_listen+0x5/0x10 [ 446.250660][ T8337] __sys_listen+0x19d/0x220 [ 446.255204][ T8337] __x64_sys_listen+0x56/0x60 [ 446.259898][ T8337] do_syscall_64+0x4c/0xa0 [ 446.264329][ T8337] ? clear_bhb_loop+0x30/0x80 [ 446.269027][ T8337] ? clear_bhb_loop+0x30/0x80 [ 446.273725][ T8337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 446.279653][ T8337] RIP: 0033:0x7f3f72d25559 [ 446.284082][ T8337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.303721][ T8337] RSP: 002b:00007f3f70f5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 446.312142][ T8337] RAX: ffffffffffffffda RBX: 00007f3f72fad090 RCX: 00007f3f72d25559 [ 446.320119][ T8337] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 446.328104][ T8337] RBP: 00007f3f72dbcad8 R08: 0000000000000000 R09: 0000000000000000 [ 446.336088][ T8337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.344064][ T8337] R13: 00007f3f72fad128 R14: 00007f3f72fad090 R15: 00007ffeb090e478 [ 446.352070][ T8337] [ 446.355109][ T8337] Modules linked in: [ 446.701325][ T8337] ---[ end trace a9a6164737e45829 ]--- [ 447.461225][ T8337] RIP: 0010:pn_socket_listen+0x353/0x360 [ 447.540993][ T8337] Code: ad f8 e9 e7 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c f6 fe ff ff 4c 89 ff e8 47 29 ad f8 e9 e9 fe ff ff e8 dd e3 67 f8 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 41 57 41 56 41 [ 447.581969][ T8337] RSP: 0018:ffffc9000302fe00 EFLAGS: 00010287 [ 447.670672][ T8337] RAX: ffffffff89113f83 RBX: 0000000000000000 RCX: 0000000000080000 [ 447.711293][ T8337] RDX: ffffc9000fc30000 RSI: 0000000000000052 RDI: 0000000000000053 [ 447.721082][ T8337] RBP: ffffc9000302feb8 R08: ffff88813fea3207 R09: 1ffff11027fd4640 [ 447.741292][ T8337] R10: dffffc0000000000 R11: ffffed1027fd4641 R12: dffffc0000000000 [ 447.776377][ T8337] R13: ffff8880774b11a0 R14: 1ffff92000605fc4 R15: ffff888073d53000 [ 447.788946][ T8348] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8349] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8348] [ 447.838645][ T8337] FS: 00007f3f70f5c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 447.862095][ T8337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.877855][ T8337] CR2: 00007f7e37d85c40 CR3: 000000006071d000 CR4: 00000000003506e0 [ 447.896323][ T8337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 447.924301][ T8337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 447.995352][ T8337] Kernel panic - not syncing: Fatal exception [ 448.002096][ T8337] Kernel Offset: disabled [ 448.006453][ T8337] Rebooting in 86400 seconds..